last executing test programs: 7.167103289s ago: executing program 0 (id=3724): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) splice(r1, 0xfffffffffffffffe, r2, 0x0, 0x8, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x6, 0x0, 0x2, 0x2, 0x0, 0x0, 0x40000}, 0x10}, 0x1, 0x7}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7, 0x2, 0x27a8000, 0x800, 0xfffffffa}) 7.162493536s ago: executing program 0 (id=3726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x5410c3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, 0xffffffffffffffff, 0x0) 6.50316167s ago: executing program 0 (id=3733): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x171, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) syz_emit_ethernet(0xb6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="0000080001050700ffff80000600"], 0x96) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x14, 0x14, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r7, &(0x7f0000000240)='\x00', 0x1, 0x4040081, 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x23, 0x40000011, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[], 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r11 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r11, &(0x7f0000000280)=[{{&(0x7f0000000100)={0xa, 0x4e07, 0x10003ff, @mcast1, 0x5}, 0xfffffffffffffeb0, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000102e75665901", 0x8}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x250}}], 0x1, 0x4004804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 3.343091124s ago: executing program 1 (id=3742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x1c, 0x34, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c80c}, 0xc010) 3.283854823s ago: executing program 0 (id=3743): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32=r0, @ANYBLOB="000016268c9f1a2dc9d7ad11a5958c577c330000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32=r0, @ANYBLOB="000016268c9f1a2dc9d7ad11a5958c577c330000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$l2tp(0x2, 0x2, 0x73) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0x107, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) getsockopt$inet_opts(r3, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) (async) getsockopt$inet_opts(r3, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800030000000000000000019078ac1e0001ac1414a20400907800000000f90e2b7549737bdf3bc8ca7d07a40bdf810229002000000000e00000010e1ec116ce220042"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800030000000000000000019078ac1e0001ac1414a20400907800000000f90e2b7549737bdf3bc8ca7d07a40bdf810229002000000000e00000010e1ec116ce220042"], 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r2, 0x0, 0x7}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r2, 0x0, 0x7}, 0x38) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000080)={0x4, 0x4, 0x41, 0x6, 0x3}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000905000073797a32000000000900010073797a300063b77f28efb3ad6b52236c6a260000003800000100000000000b40000000000900010073797a3000000000100004800c000180040001006e61740014000000110001"], 0xac}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000905000073797a32000000000900010073797a300063b77f28efb3ad6b52236c6a260000003800000100000000000b40000000000900010073797a3000000000100004800c000180040001006e61740014000000110001"], 0xac}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) getsockopt$inet6_buf(r6, 0x29, 0x3d, 0x0, &(0x7f00000003c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 3.007910674s ago: executing program 3 (id=3746): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = getuid() r2 = getpid() sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="c42f00002000010025bd7000fcdbdf25b32ff2800f0018007d3a2e9c5bc85c23277d000014000200fc02000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b50b1778bdafefc46b0449a0368bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec03004734be31d75035d5be98a503326409334c9bdf132b20251dc076eb43d9621dc08c029d1608a468426fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f45b5351cbbd6e4993d5456dfcc708bea7b984b604bb12a6d5688ac538d2edcb3f4df2208180f6c12d43046fe578a30a83b08337e57e70e43dc5cd55238da036362ea0a8d98276e1523a1b10473a961b32c8cb75768d813ed3fb8fec36c4bb3375ed8bb4eb756a781eba656905bdf613ca1dbc768fcb7212a00b0a90598d8f09fb0946e90cbd0a1adee3dff44c9ba0912b031bc744d0c315f5a7899165b4f748caac224c05364aa2df312aae43ebb32a0940042edd80391a3d800c0028000f0000000000000004000c0008002f00", @ANYRES32, @ANYBLOB="d2198680e1027480ee35d3eef9e9f4b279e2a7faa5c518e8fa5a7b0ba4d3ca479a4a24083a3dddb15fa507b49dece427e9bfa8e35b3bcc5292fe52bcef7ac84480ab3618673d3f49349df47288699c15f99f6b22f5d76d311827db94af8e85f2591244695a3d85a4843cb4cd079f616213e89d6a25c42e27e9e316db878839c7b02e537a82ce82299d4a83a12bfcb221a51b135138deb7239d49f070b1c657740441d1384863ee136d28ef5cfe5c58696eae67de5540b4a78cee1da68da46bcb1975e0a45688796debd06275bf7023c1ecb1b17d87c72553845de38b7371dfa82948ca55b2d9f34f514c859e9bcd9bad9fb2f1da82f3c65c42100cce5be5014c8022c4e8ba446178cd9799d3b300e72ce761251c21690c2694bd1842b0a19025d86777be038e7174925b2971aea59e3822a8e291ee90620d78f3af78096f8d2c7b5a73e71508dd62d1d693f37f94066a4d16ae3629ac7523fa830832b6720f7173bf90120f44d2518c37e3135450cbfa1493324339f152b79bceb13d93db40bf4c7ba793abd94621adf9bd190c3c6061a1b3f54215290e8c7d2d1693357c0ff0f38a1910c3481aea9df5ec8ee76989b403386fc73ce2cc2203f4c26e569009a43cd9ff5ac4fc508180eae01bf2e10400678074970b1859c9ae6dbf14de213ec11a94d50ddb4e400ed89400c6e60a324aea09545b21a403e74f0ec3a2dd321cec48c9ab50922b73de9af91879329818602e6d55ba98d121852e1479a3af9223e0d4d69331bad44f40d2177dbad597c3d84d374309539c82270289a0f7b5d0c746cb82874fb2125a335b971c5c58e9fc5982e99c3013a0289cdc2b03d77b8bf86cce3b9bb7e30f19ebd65cec4e912e7d59ba9be7e126d67aa15b779599cfa892524bce638225a18ba1592fd5804a7ba9953fa767ca7fc524861c9938880dea40091b66adc052cd0d44af3a55e925ee2e393fed3dcfdb432e35ec912d931abf308d1ff0dbe24d361731af3d5b9dc06413de645d41141025f434c10b99a9042cbaa9624a0000000000000800c700e00000011800550028a026282f001a120b800800aa00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="040012800600dd002d0000000400a9800400fd0027005d80e2eec65fbf6efb2a7a4cb40400498008002800282b28000c002200020000000000000000e3e1c973fbc3e24b45a865054c0fcf3ef5d5a9818df3f28c41f6dd327cfe6718f44aaaf2533c3d091f9f338e5985e54904a49dcde87e8b85b3a72a2ed31a31bddc3838e4a56d6ecac34c926eb38c3403e18e9941eb12c699cc0800fd00", @ANYRES32=r0, @ANYBLOB="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"], 0x2fc4}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket(0xa, 0x3, 0x87) socket$kcm(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="750a0000000000006111a400000000001800000000000000000000000095d726fd4d00000000000000ac1c654c16724845c691e2da49b7f1000000675c6d1fac2a49cad947a9971dbcdb8747b9189758493b86bc8483f00343e6ab34b2b3fc11733732ef783a149748f41eb72c4a5fe612f5334ab95b2bdcb3b3a807b4d5cb6daff4ae5545c3a38fe75ebd67fca14a0d8dcbf8a950cc7718f6fffa5a7654fca75ed78f78"], &(0x7f0000000000)='GPL\x00'}, 0x80) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r4, 0x5, 0x0, @val=@iter={0x0}}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000020000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b70300000c9c9ca11db02a9f17000000950000000000000032887b906bf260f19fb5e038011f34ad29e4"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x6) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000680001002dbd7000fdffff7f00000000000000000c0002000100000011000000100008800c0001000000000000001000"], 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 2.943112767s ago: executing program 1 (id=3747): getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x9) (async) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x9) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x404c004) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x404c004) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r9, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r9, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r9, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x5, 0x0) (async) r12 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r12, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) (async) sendmsg$kcm(r12, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$unix(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, &(0x7f0000000640)=[@rights={{0x10}}], 0x10}, 0x120) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r13, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x32, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f631"}}) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.550625117s ago: executing program 3 (id=3750): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x18}, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$packet(0x11, 0x2, 0x300) preadv(r4, &(0x7f0000002d00)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/251, 0xfb}, {&(0x7f00000017c0)=""/183, 0xb7}, {&(0x7f0000001880)=""/154, 0x9a}, {&(0x7f0000001940)=""/186, 0xba}, {&(0x7f0000001a00)=""/250, 0xfa}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/198, 0xc6}, {&(0x7f0000002c00)=""/151, 0x97}, {&(0x7f0000002cc0)=""/47, 0x2f}], 0xa, 0x400, 0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r6, 0xccec}, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.968132526s ago: executing program 3 (id=3753): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[], 0xcc}}, 0x24000840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000ff0f00000000000000001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000017bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd70045d5f1b8070c85aa508000300", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2, r1}, 0xc) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7400ffdbdf250c00000008000b00030000000c0006000100000001000000080003", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c000600000000000000000008000300", @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x4002000}, 0x1000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000001c0)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r9, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) (async) bind$can_raw(r7, &(0x7f00000005c0), 0x10) (async) socket$inet_smc(0x2b, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r11, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) (async) sendmsg$IPVS_CMD_SET_DEST(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) 1.89228058s ago: executing program 1 (id=3755): socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddb", @ANYRES64=r0], 0x18}}, 0x2080) 1.720455876s ago: executing program 1 (id=3757): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f01400ffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ffffff1f850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x7, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x44, 0x1, 0x70bd2b, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 1.635269123s ago: executing program 4 (id=3758): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4620, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000015c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r4, 0x29, 0xfe, 0x53, 0x5, 0x70, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8000, 0xe3e1, 0xd01}}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18510000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000004d070600efffffff185a00000100"/88], &(0x7f0000000180)='GPL\x00', 0xe, 0xb3, &(0x7f00000001c0)=""/179, 0x40f00, 0x22, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x5, 0x0, 0xc}, {0x4, 0x5, 0x3, 0x5}, {0x3, 0x3, 0xc, 0x1}], 0x10, 0x7156}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x39, 0x1, 0xd3e2, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r3, 0xffffffffffffffff, 0x28, 0x17, r5, @void, @value=r7, @void, @void, r6}, 0x20) 1.488164253s ago: executing program 1 (id=3759): syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) unshare(0x28000600) (async) unshare(0x28000600) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x82001, 0x0) poll(&(0x7f0000000700)=[{r1, 0x2}], 0x1, 0x4) (async) poll(&(0x7f0000000700)=[{r1, 0x2}], 0x1, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5ea}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000a40)}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x4e22, 0x6, 0x4e21, 0x6, 0xa, 0x20, 0xe0, 0x1d}, {0x9, 0x400, 0x7, 0x1, 0x1, 0x4, 0x6, 0x4}, {0x4, 0x400, 0x7, 0x100000001}, 0x6, 0x6e6bb0, 0x2, 0x1, 0x1}, {{@in6=@remote, 0x4d3, 0x2b}, 0xa, @in=@broadcast, 0x3507, 0x2, 0x0, 0x7f, 0x1, 0x7, 0xe}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x4e22, 0x6, 0x4e21, 0x6, 0xa, 0x20, 0xe0, 0x1d}, {0x9, 0x400, 0x7, 0x1, 0x1, 0x4, 0x6, 0x4}, {0x4, 0x400, 0x7, 0x100000001}, 0x6, 0x6e6bb0, 0x2, 0x1, 0x1}, {{@in6=@remote, 0x4d3, 0x2b}, 0xa, @in=@broadcast, 0x3507, 0x2, 0x0, 0x7f, 0x1, 0x7, 0xe}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0xfffffffffffffebc) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed216005abcb3c5631cdd0b8d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r8, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r9 = socket(0x2d, 0x2, 0x0) connect$netlink(r9, &(0x7f0000000140)=@unspec, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) 1.445518784s ago: executing program 2 (id=3760): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000040), 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xad, 0x7, 0x1, 0x0, "c4a4bd0b0e031088141df0fe94744be812ce9677a78cf90b8ce9127ad5e431e54cfc59fdd3ecde6a906398613d55cc62591762d85a9b6173b1ebf7824a0c0773c25719b20c9087ad1788a007a9e9d1abbc14cd1d70d8cf6d05aba5d19ad5b291ce0133dade9348885f55a38eb3f6bc6c419307405a0516a361673749178ac8ed260028c21edc06d0c45ca538b3c2946a617b5535fa2aac798fd43a3d5b9925e335f4f68b17ebc54c3e"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x108}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000001000000000000000100100000200"/32], 0x20}, 0xfc40) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000440)=""/104, 0x68}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x30}, 0x4000000) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x1b) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0xde, 0x85, 0x5b489b16}, {0x0, 0xff, 0x0, 0x6}, {0x6, 0x88, 0xff, 0xffffffff}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6a8, 0x3a0, 0x3a0, 0x230, 0x4c8, 0x0, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc5}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b3b646c379c506e83e205648a3c73050b9ad7575387a074e5d1ee348ed6a"}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0x0, 0xffffffff], 'pimreg\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2, 0x1, 0x7, 0x10}, 0x0, 0x100, 0x170, 0x0, {}, [@common=@srh={{0x30}, {0x6, 0x10, 0x1, 0x5, 0x0, 0x300, 0x808}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0xff, 0x8, 0x1, 0x0, "964c73a55ed6aeafc78481772ab7e8fc4e10447d3d796fd3ac6cb3cb887fea413c6eb54f49c48c1ae0401fa2fb4831414e02fbb153db6db0b430bd31e8518c59"}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0x0, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], '\x00', 'netpci0\x00', {0xff}, {}, 0x6, 0x7, 0x2, 0xa}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xf, 0x2, 0x3}}, @common=@ipv6header={{0x28}, {0x2, 0x0, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xd}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0xffffff00, 0x0, 0xff000000], [0x0, 0xff000000, 0xff, 0xffffffff], 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x491e597b2835c6af, 0x40, 0x0, 0xc}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0xffffff61, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.331963289s ago: executing program 4 (id=3761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000200)={'bridge0\x00', @ifru_ivalue=0xf}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r3, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x48, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0xf, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "798ee5eccf76505130e4f7503f7600f0"}]}}]}, 0x48}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000000)='bridge0\x00', 0x20400, &(0x7f0000000140)={@align=0x9, {0xfffd, 0xc, 0x80, 0x7}}, 0x2c, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000280)=0xd7}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaac7ddae82ca15aaaaaaac63ba53b041aa39bbbbbbbbbbbb2b062a06262fbb194c96c51578d867c8fe3cae7bcd5600b3ab713c8a21ea3a0df0affcfdfca88acf7150729d622e2870faa56ea1e5b8deaaab6e39ce19f329d9b91dfcdac77dcb995eb61df8478ec4fca72aa383175813cc4c3a344a2c5d00000000000000000000000000003c8ed31a9f391c091b5f4ad892e7fa5926de70f3150c1c935ed03f90e245756a6fe63bfe0ddc87a016cb850d37112e3d6ad3d596f310044722758af1f97967875d709c78f959b9b9f04ffbfd68ce6362d58cdf99938fcbec119cd5b0d2c3739c2a8747076447ba7a8928b42ca631e58d9136f835335a7a"]) close(r4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x8, &(0x7f0000000400)=[{0x8dda, 0xf8, 0xa, 0x1}, {0x0, 0x4e, 0x2, 0x2}, {0x6f, 0xd7, 0x0, 0x3}, {0x7ff, 0xc0, 0xe6, 0x2}, {0x8, 0x8, 0xf9}, {0xbef3, 0x1f, 0x2, 0x8}, {0x8, 0x2, 0x4, 0x3ff}, {0x8, 0x9, 0xd9, 0x7}]}, 0x10) 1.331470422s ago: executing program 3 (id=3762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x24, 0x10, 0x1, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x43}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) poll(&(0x7f0000000040)=[{r0, 0x4014}, {r0}], 0x2, 0xb) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x401, 0x400800, 0x3, {0x0, 0x0, 0x0, r2, 0x0, 0xc574450d1af3b5bc}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xf}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.325443717s ago: executing program 0 (id=3763): socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x8b, 0x3, 0x8, 0x1, 0x712df127, 0x0, 0x6}, &(0x7f0000000140)={0x7f, 0x4, 0x5, 0x14, 0x7, 0x4, 0x3, 0x4}, &(0x7f00000001c0)={0x10001, 0x7fffffffffffffff, 0x6, 0x7, 0xc7, 0x4, 0x0, 0x5facb55b}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x750c]}, 0x8}) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0x5) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25027c00000c00018008000200010000008760f8120e0600000025bc7771eedcd07f1d8fdd7b7bb410b9fea6116fa91180096241c341a3254c299c6c4fadbbe06699a70a3f8a0a0d3a55ab26bb8abf5019f66dc80ef37ca2e7f88518bb8c0fddb28bf1a714bebecb9ea550bda4601f8d586d10c2b65c924141b63a012248b6fe8089ea3325e62616f751c41fa74f7f0ba9906ee7b1f24a2d8061f25503a58e4c1b8d18fff40ac14c1113f88d7340c18d3e912d6e83465b5f0f7298069d4c5dacc601cf3dd2"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$nl_netfilter(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x71, 0xc, 0x43}]}, 0x10) 1.085700015s ago: executing program 2 (id=3764): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1, 0x0, 0x0, 0x9000000}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x1, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESOCT=r1, @ANYBLOB="08ee4900790be6aad4260821bde955b39090d5651806c21e5a174418d8b29defcb0713a7f5f9623709ddeddae66c770f000000cdc1337e3fa0bd0db01badaa3d6e25a6c04044d09ec9cc6b9d0020b01598d5929c805a718d9e4bdeda7f955656a1b77ef16202ca080d7df4e3b3d4714cd677928c8cd190e002c0f3a9770400edaebc5445769766ff2905ee5662214796ada452bb8738f031700f9180870145ae96e5b93c6aed9bfc286adb1c56e5862c0c464063a70f7ce41fde0df39a1547b400", @ANYRES8=r0, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.071872923s ago: executing program 3 (id=3765): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="fee7dd3f6bb9dcea5c993ed53bc5cfdd0bc171fdf15e03fa", 0x18) (async) r1 = accept$alg(r0, 0x0, 0x0) (async) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)={[{0x2d, 'freezer'}, {0x2d, 'cpu'}]}, 0xe) (async) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004}], 0x492492492492561, 0x40080) (async) r3 = accept4$alg(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000280)=@generic={0x3, 0x7, 0x5}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}}, 0x4000010) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) (async) syz_emit_ethernet(0x36, &(0x7f0000000300)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000180), 0x0}, 0x20) (async) sendto$inet(r7, &(0x7f0000000040)="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", 0xfc, 0x20008000, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 1.023556501s ago: executing program 4 (id=3766): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000f, 0x32, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r1, &(0x7f0000002200)=""/87, 0x57, 0xfffd) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000000)={0x8, {0x9, 0x6, 0xff08, 0x0, 0x9000}}) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r0) 825.360746ms ago: executing program 2 (id=3767): socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddb", @ANYRES64=r0], 0x18}}, 0x2080) 784.521448ms ago: executing program 4 (id=3768): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r2, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1d5d, '\x00', r7, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x2, 0x1, 0x9, 0x2, 0xffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x10001, 0xc2, &(0x7f0000000500)=""/194, 0x41100, 0x8, '\x00', 0x0, @fallback=0x30, r0, 0x8, &(0x7f0000000600)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xe, 0x6, 0x626c}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[r2, r3, r3, r8, r8, r4, r2, r3], &(0x7f00000006c0)=[{0x0, 0x5, 0x9}], 0x10, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000140), &(0x7f00000001c0)=r9}, 0x13) unshare(0x600) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000000c0)}, 0x20) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r12, 0x40047459, &(0x7f00000002c0)=0x2000041) pwritev(r12, &(0x7f0000000040)=[{&(0x7f0000000340)="80fd020000400b45605606f244c1a5033a47ec8573152258a4c11a6d8a415b22969eed57b80d1538667d5dcddc77f0845085f70557eb09fe6552323abb7bfe3252b7", 0x42}], 0x1, 0x0, 0x0) setsockopt$MRT_FLUSH(r11, 0x0, 0xd4, &(0x7f0000000480)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000340)=0x278a, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e1f, 0x765, @empty, 0x6}, 0xfffffffffffffffe) 753.917409ms ago: executing program 2 (id=3769): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8924, &(0x7f0000000080)={'bridge_slave_0\x00', @ifru_addrs=@ethernet={0x1, @random="021122334455"}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000100)={0x7, 0x21e, 0x1, 0x8, 0x1, [0xb, 0xfffffff9, 0x438, 0x3]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 559.143418ms ago: executing program 4 (id=3770): socket$inet_smc(0x2b, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) (async) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x8001, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x88) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) epoll_create1(0x80000) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 64) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000aaaaaaaaaa30ffffffffff455795fefaefee29670000002f9278ac1e0001e0000001000086dd002b907841070681134a318536459f4c076600ffeffff600000000111740a673d82a5c006694d1"], 0x51) (async, rerun: 32) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, &(0x7f0000000840)=""/43, 0x2b}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x800) 529.634614ms ago: executing program 1 (id=3771): r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080000000316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa08001600040000000c001c"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, 0x0, 0x6c040011) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x2404c0c4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0xe, 0x0}}], 0x1, 0x24008080) r7 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x800) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @private0, 0x2}, 0x80, 0x0}, 0xe07e872420dfe7ca) socket$kcm(0x10, 0x2, 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local, 0x7f}, {0xa, 0x0, 0x2, @empty}, 0xfffc, {[0x0, 0x0, 0x0, 0x1000, 0x0, 0x3]}}, 0x5c) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000380)=0xc) 371.495936ms ago: executing program 4 (id=3772): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$unix(0x1, 0x3, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r8, r10, 0x25, 0x2, @void}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000084) write$tun(r6, &(0x7f0000000500)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@igmp={{0x1c, 0x4, 0x0, 0x1, 0x1078, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xa1, 0x3, 0x4, [{@multicast2, 0x6}, {@rand_addr=0x64010102, 0x94}]}, @timestamp_prespec={0x44, 0x24, 0xe7, 0x3, 0x4, [{@rand_addr=0x64010101, 0x6}, {@loopback, 0x3}, {@broadcast, 0x6}, {@multicast1, 0x8001}]}, @timestamp={0x44, 0xc, 0x9c, 0x0, 0x6, [0xffff, 0x56]}, @noop, @ssrr={0x89, 0xf, 0x50, [@multicast1, @rand_addr=0x64010101, @private=0xa010102]}, @noop]}}, {0x15, 0xff, 0x0, @broadcast, "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"}}}}, 0x1086) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="494233207d45746e037ae6434d756a1ddd16c1a1d12b2830127ec61958847229c43a763128088d5fb6d2616ffd92801ff78d7f367e476301e3257ed4cac2806b89448a06a627b69e51bcf341a2f5b2daba2922aa18334cbc87840e7a0928df3f455d0f76dfb02dd2fedb3fbf76c7cdbfe511cc350958447161335543a2869f5cb04cfaba2e6db6315fe6114019cb389862edf44019f1776ce6f85778c94dc77fdeb0259d1f22877e77a7c5100aab3acd236c1c5943", 0xb5}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r12, 0x0, 0xb, 0x1) splice(r5, 0x0, r12, 0x0, 0x80, 0x8) vmsplice(r5, &(0x7f0000008ac0)=[{&(0x7f0000007a80)='u', 0x1}], 0x1, 0x0) write(r11, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x33, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@remote}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4010) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e23, 0x180000, @local, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0xb, 0x1ff}}], 0x18}, 0x10000005) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 215.744811ms ago: executing program 0 (id=3773): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x2b}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}}, 0x4001) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r7, 0x109, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x884) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, r9, 0x100, 0x7, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r14, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040050}, 0x24004001) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r15, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c040}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d0}, 0x40004) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r14, 0x608, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040881}, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x40) socketpair(0x0, 0x2, 0xfffffffa, &(0x7f0000000dc0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000e00)={0x0, 0x8, 0x5cf0, 0x0, 0x200, 0x9, 0x8, 0xbe, {0x0, @in6={{0xa, 0x4e20, 0x1, @local, 0xd9ec}}, 0x9, 0xc0, 0xd, 0x1000, 0x5}}, &(0x7f0000000ec0)=0xb0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r17, 0x84, 0x1, &(0x7f0000000f00)={r18, 0x6, 0xf, 0xf7f, 0x10001, 0x3bf}, 0x14) 214.941181ms ago: executing program 2 (id=3774): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) (async) r2 = accept4$inet6(r1, 0x0, &(0x7f0000000000), 0x0) sendto$inet6(r2, &(0x7f00000000c0)="c1a9eba55052717fbc59f51c910a84b831ad716d8793d5756ba9c0e5568124e6ec459ca3b27c33d24165aee56ca62d8692f073430e58f7c51d807f33985e23f0918a25cabc6d07ff4293f44b37ea62652bca2205efbb8c2ba1780b9dc1ea903d2715a3e67f5ee44b24e31241dde8ffe39725a4e5ee41cbcbd941796d026391520608277a1c7bedb24ef41d0d91a5b1e3a8684a4fdce97a", 0x97, 0x40, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @local, 0x9}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="b0f8048ee8f1a2a467d12ef1b072fe88169a9a126a3d851d4ced663b11a42d9454b16c0f8763c9de7eb0a2ae2ee1bc78df8d8f9af34969eafcf4ab596a9521950955b2c87373e9065bbaa8f2a44af495a7039576e521521915ddc4843975ab9c1b56ef6cd5fd89a28e21d5435bf909f23c37b1b1da2a2f7163026750b8dc2c8e55654ff7848a7c584cea1ea5d0eb24675863d471a24847ebfeeae2915d93c917b652c439294f0830095851a7a03be315f253ce5b66521b1e9f952cfcb3875cb2c736fb2b60f19dd12b1ab05e55e25017abfb023377fc1f3f01f5fbad247f1622423c120bbb6a80f73a1014f772dd118df017a7300846f8b82ea66016fb6931f749933bea3d40db3665bbe915aff78a95c996115d3be398f9617a4bfe7452bd72ab6b207d9850c0af89c578c91b04f74f89efa1999cb9e756a977af19365ee82eb8ad98e0ff0c03b39c35615a69ae6776cd449bd4b382fe252988005585683ad1f74a478aa584f93914b2b1d091155e97a8c6eb8cd4a807f08348359c5e9367027dc2f8c17d09e231d4de273e0118c65d9a81117728d4ddfbc84d0eb67d3fa4e249c42bfc8889d6c1583667a742f874115754987d94a6195cd0b7ffe2e8c7215c5e25dc78f999669fa1db1420b4ca36cbdb4be6b795bb25132e2a09acf5463a2495050e200f42793c503aee9a8d2a0d1fa3cb8e484acb7d73e7cf92e8b1ae0e0d480721778f7233efa37fc8a6512ecfe55acf0fdda0c4a7d5c01cacb7078cdf6ab759359fb953b3938a69d9217a5c86c57e913e95543ae4670ca4e77ff0d64e1c3e774dcc6ce91c17ff0c6590dea4177d3b95a5314566f2587f58d91e9cc054186ed1d384c5562766f6587ab1c784f1516b925db2c82ba145277aedc375bfaab24815d673ef9d8685a126f7647e1a0c468f0d5cec0ae7f4df25803792d323aed0b34d4985ea12db38b5703fb30172d54ce6df3b111edba2ec9e1dbba01cee948f6846c06d7b1e48a77da5fb5adbf1ba5e9310d6b7a2280ac9a2082bccfde0588c312b436b42121372fd4dcfd9971aad93886a76b169562d782633cc4b2d5641c4716704b89853fc86cc3876322494c40160176388c9aa91d384cf7c7b2eade1961b55fa6fce3e96d3f0707a029958a48b66b98cad9bd892b4888516fda1907ec802909dfa00d4311f77209b595c02633f34e6a8551264a24bbe5f2260f9109c60107680e272209c5813686e881627551eae802e0e675e4f88e14156ef0485f69cbc8c0ff50288da2b0ba04409c76d0e34a1eaae722cd7f430fd50402dc26648c4f427ee5cf80e9b901487daa1403b9a7b154e21fd07e93704c0b6c6c51b3b43cd962e69e1951715b79e50ee4db67a853d5654d29415830fccf0b34259ee43f438208cd153c18559dfa7ca472de4c43ef30d42a26c401f0ddcc00c034d193cfdf758b366ff3a401886ae8dda0e43a168981809e5995fb1b0cc3ecb1b5efa45f122263d905c21304932ae98f030466479bce2020d902bf451c5fefa1c7048d47c399074da9cef1515e2ef771fa327aeaf219490d8e7c67d4818ee09094d086b0fab46565d37c7465445cb8606738ec9f5f72f1f5420a719f65c75c01f7615f5910d77e420e8611bf1d9f1bb63d04b8a4b742efb21642fe6f0e6cff21f35df168a4dabefb61a5c49eef43c62e01ed2d9e38459995933c2eb661ae9eea577619553084ce8d3e7532e502d5d3b678e490c8cae5ff3e0310c365c3c328c13630c602cce522cc7c1329b09b0f3e717c074fa8984457d78db3bb5647f5fdf5c1b519295f14057c88d7e1b57c34cffbf04c0ef88e4d693c484dbdd2db6a36a2ef7fdd831d1ded97760b7a7592e723926f750b4a38432fcf432852bf9ec3bda65ed119ef1aae7256e4fa33f664f12ced4b48bf56804a3072644f21c8d3b15bcc34dfa687321899949713bc2041451643c2de1cc6c70c3aade27e15819d81547023421705f114c2a8f235f3dede7ccf0c2b9ceb980f7c60491bbc1f3d07a5f08b80461c9534d04cbf52138600667076a4c7c384355be345344c97fff95ac535fc3da2f6e39f3fbda7ccb545f4379835776bb9eb6b301897bf63b45a3b6326eb32a6b143fa9483a6ee9e2bae66168dc7695dbd01b94ceb8009ff39826cc06003314d927bcbf7dac33d971ead64579063a819d57eb0daa406155cf76b520187a13c4db4003bc1f123f74599bf094cb0791b7e47282158725b06d8ce3c6744ae1b593153a44ecc3110350b6b8df0ba1b6830849b25091ffed8991af6fb11b265c151bedf088ecc0b80a0660850aa23cc9f0cb07ef63008c2b6f32a822ec8e42e06cc33672d3ee93ae5306ff572b8ac871057848989b2c41145abbbb18b102ebe1e9600a8d4bf2106ca1a080d1d6d6c0f27facdfb311ebe8deddb3bb9e8079f57111b754e748ef9c14918a0b0fd445603359d352a4256669124ffb24e54abbb93aa3ce8bb130c32be5a9635857377da8edd18476f660b3d7445cd218c9aacd315afcac74f15a6840bd6e1bfc3d871a0968e152e6b20a41191706679c5d50f02e67acb2e233aaf45a931449a8fec7e27d54e1a10ee8ccb21b12f2708090f82dc6571bf4c3459f5067b3ed72a028ec766831f8750710c4c932408adf8b6b1d5e6a80139e59dc4742d256b6170fcac77468261b1adcdc786dc3537c8fe13db2c146a6f7e8c8df2034df65a3d0ea507c1a017c076414eb16572090a2868c2b5117c6a3d6f389e78a46146782aa5ffa7f0015b9b59deb00f550961892e6939d5e11ec7cb5cda74826327581274eee7ea295cb5aad3e992054b8b246f3b96c6429ad5aa7368df4c20336b294a2735a62d23288a9fc5c9c4431288a2f7765244c27b2dcb1a5d5e5404aadb8a2397d0b79d011d59ba678e4b847199c9302379bfbd2346e682bbc8155ecfe3cf394d2bbfba0ca7386de685099e7ac7ed58a4f8e4bb5f950317f4db64d9215ed8afbd52a67f2600a3dedf6c5dfd96d086853e10bc7f5f3769b46d29dc4cf4275651afbca61b19665a401b0f645eaf18334ac858dc4ebe0ef7cebf75adf98987f02c8d62bd2d27ec9d75ddc5a4af5a85a90d32fb4b0c4c6fcb60f1c9e58d8d96924e0583e6b36f2ce49ab20a5da7989339ef931191016a65d2ad5a38e74ecb608a01ef36b9d409bdbdd47bcbc0a48b25ee4b4cf71da0ce576371de4b16c0ee766054df21197eff21e601f7f268fee454a0c4f5d8b0c65be13720907eae83742942ccff837fb22e7a45c5e8589f72b328c9555f51c8cf3c582e653fb5f2ca7e32e2e1e0e476f403268c73b7d60a7bb56118cefb9b706b75a0416546a1a815d12922839e2a6c6c85ee722b6f54416016a59495d149fd53423bb06e962e820481a2b77844f1e93e1fe5c58ed2d85a705e85a7bcdb6581a52dffe1256e4e4a0394484977d548455a76934d11ef9df2791b4aa7273496723ff98d6e4cc2121f99b5d5c47027358a1262cf8f52c162d62220b1af3046cc45bcaa173e1e805fcec1c4ce0e9b509fce1857fcc7845b18007e1af0a853000311e5f8641d2c5109bdd3f271701b59e1fedf50d617d9b31d0c8c42f77098cd91e62afb595f553a967b1d502adcdb7ae570a0d7a77c910f507df39ce5a27136295960c0f64592905cdaf29a1b4b3e44473bf21be1f3025ed1bb4e5592a21e88a72711d9bd99e55304063dd6eeab3004a1c8a3840030173f1af4ca9e841098e5e2ece78a5108df89c358ec4b90d93c7688e6fe60abf627fcd1a2f39e4ad2eaf204af0c7506687146f8372a542dcee4d88b2f9e5c666dd7ba77ecb4db71a0fe70ca0394ff89bb31fd447723c7e3fa6489eb059840ad5c3da9201fb67a4c5af280e3a4e949dc83ec7c9dbfca5977134efcece75f22f457592de4ae7de9f808c6f43cee8c174fbb8709f90199f61b2d25c5bd2039c285e9faf1f5b918599b7eb31694ee4b3f1c4709a3a8aa9a22e545862ca4454557dff4116f983e13a09a1a6ffd0bf6eb06aa54c6d9e6af496426e791b7f00d631e8ecac15e510166188856883551f80a497f63d14d7592a9b4c5f7714f92262633bfbf91e7cc02ea9287b3a108b5681484cb30d085dd9e78f3e151101c55951b61d016e12819361c0504f6388e3f5813469f0125ddefac1136813cc3cf6908b233018a20574163fc9b7cecba8058e6953e9dcba479529dcdedfdf54f18ed26998361b51a963ea48dc96c89cbbe773e57c4010bf25c2b24915931b4afe47a11c4cf0f5b56c4d70e0e5ff123eea48e92055f1429c5a767e842b6337fde1f4987551f54519b250c622ce4ad3251bc37fd29c720c2bc1d019f6eee1e0ba5e8a0a7510abe6f087c79dacb4bc2159c526260ef5c95ee74612e69f2d1af356affcb144ed7de3eafdeea54ca3a0c79e794d9d605d73bbb2bcb1c34f3e79893a07a243158e0615926ee59f1e591355eb50325cd118f8314fa2852d963156f632e9689663fcbf16c302103d13b5ea662874975b66601a762b74e031bd02740433a7fba31640549a16ff7992df1b3d8afc57af68ad27fdcf6dd245d8f4adb36ace15c48fc7aa57eb50acf6e1d2c41fe86db21f5c4b0ea8c313eddef2af01e9298f0549565aef3ca2908d3ff2ec2ec3c1ca6b4938696cb3780a25efbf1623c1ed60c69d42cee6bbcebd44d842cc3c46721e0a812de76eeda964eef9c203a10df01cc4cb1c03dc7235e7bdc2cb809ab49109c899d89f13d8eaaeb962c4424425f11128939c193e3b3ef1c591fac43fada763997de473b9e936538a8e0745ad567223fa4c503a88bb136ad1174248e9f664baa45686f6065277afcdf98e424cae6cb8b69587b24e173947492566689fd2fcf503a8d647cda10c84626d04d355246381a7746d8c4e4cc68c1185f6924588dd8789c77c48ae3791afed59a32e2b7ab59ef57911cbe923f6edea9374811d29ee7a5a6b45d8135d64f4ad86de7010d931ea330c7112681016d6958140b2ff504cb273facb8bc4e04e006e87010555418ffdc1fbd55b9984557e7e3c2e88cdf28c9665550696b8c37616536db420ab1b9a64acddeac51e893e52c8d9419f9a69a9ab0337b19944ed315baa700ce013b5fe8f5169b5248f098e56fb2a43a9415763dc5a11b4f10b80d898684415262876ab885731f33668fe03e8a351b1d58f817c8ee7791fedac95e7d43aeb0e312ac9b0c344aecc97a2ed42fe776aa642fe6e0731dfdda37d7badfe805a2fc593839329acf2b5edc4c5b18c0a7207b9a8731dc3ddce44d5ca0009fe823ed4d4340ccec3e52acddc0a4ec4ca00948d77fd42816606d1524a29c41a7298721829a6d8135bd7e3f1cf42982a206704ea99935a7601a5818e72d12ddf3c8bb6c63e42270384f4ae16110bdf5ef64e7901671c43df3de6ad29a9fc5868f228c45730db3c38c0a25af51cb0eda314220d343f794094894d840928f96ee29c2c31ba884288c3f8aef55a92a0d5e67dbe9b9d5d3aa3d5806ad889d322d70813b445bb41666a2fb72a799ce09aadd93e1c70aa10516c9a95b509851961241263f1e1665452e27f9d405a037dfc5fe27da497056ba8e5bcd3795c1d4ddf708d9bfb613badea67ef7f2fc57bf7e2b9b99ec31154f404412af6c22ad628a6aefb0417997a4c67fee640bd2a1f7e5d861373d09a801dbd2a7189673bb1c4e35cc57397f922cfc4abaf3a1d9b59049941fe62bbbdd980c879d4095f80ba389de4a4ae82d408beeeb7bef8a91aef1bc01ef36c4d10ac5983cb058b0ebc2a5fc043710de4a81c309397f97d"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r3, &(0x7f0000000380), 0x0}, 0x20) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 99.726923ms ago: executing program 2 (id=3775): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f00000004c0)={{0x1, @local, 0xdffd, 0x2, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010380, 0xfffd, 0x3, 0x8, 0x0, 0x2000040}}, 0x44) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r6, @ANYBLOB="08003200050000000500330021"], 0x2c}, 0x1, 0x0, 0x0, 0x4048850}, 0x18) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) close(r7) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000e000000f25f1003e8000000569f", 0x2b}], 0x1, 0x0, 0xfffffffd) (async, rerun: 32) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000580)="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", 0x1ae}], 0x1, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=3776): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x265) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x20, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000240)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x1c) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x38}, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000"], 0x80}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r10, &(0x7f0000000240), 0x12) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x1c, 0x69, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3305280f125e6"}}, 0xfdef) kernel console output (not intermixed with test programs): 361.835946][T17144] R13: 00007ff197e26038 R14: 00007ff197e25fa0 R15: 00007ffd8eb7fd18 [ 361.835977][T17144] [ 361.942378][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 362.397403][T17164] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2719'. [ 362.426012][T17164] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 362.667385][T17181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2723'. [ 363.074099][T17200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.419674][T17216] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 363.555429][T17218] syzkaller0: entered promiscuous mode [ 363.555462][T17218] syzkaller0: entered allmulticast mode [ 366.319747][T17240] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 366.489630][T17254] FAULT_INJECTION: forcing a failure. [ 366.489630][T17254] name failslab, interval 1, probability 0, space 0, times 0 [ 366.489688][T17254] CPU: 1 UID: 0 PID: 17254 Comm: syz.4.2743 Not tainted syzkaller #0 PREEMPT(full) [ 366.489707][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.489717][T17254] Call Trace: [ 366.489723][T17254] [ 366.489729][T17254] dump_stack_lvl+0xe8/0x150 [ 366.489757][T17254] should_fail_ex+0x410/0x560 [ 366.489788][T17254] should_failslab+0xa8/0x100 [ 366.489812][T17254] __kmalloc_cache_noprof+0xa3/0x600 [ 366.489840][T17254] ? hash_netnet_create+0x83c/0x16e0 [ 366.489864][T17254] ? hash_netnet_create+0x83c/0x16e0 [ 366.489892][T17254] hash_netnet_create+0x83c/0x16e0 [ 366.489931][T17254] ? __pfx_hash_netnet_create+0x10/0x10 [ 366.489958][T17254] ? __nla_parse+0x40/0x60 [ 366.489977][T17254] ? __pfx_hash_netnet_create+0x10/0x10 [ 366.490002][T17254] ip_set_create+0xae8/0x1a50 [ 366.490024][T17254] ? ip_set_create+0x4ef/0x1a50 [ 366.490055][T17254] ? __pfx_ip_set_create+0x10/0x10 [ 366.490109][T17254] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 366.490128][T17254] ? unwind_get_return_address+0x4d/0x90 [ 366.490149][T17254] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 366.490186][T17254] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 366.490275][T17254] netlink_rcv_skb+0x226/0x4a0 [ 366.490299][T17254] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 366.490320][T17254] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.490352][T17254] ? bpf_lsm_capable+0x9/0x20 [ 366.490377][T17254] ? security_capable+0x7e/0x2c0 [ 366.490403][T17254] nfnetlink_rcv+0x2b9/0x28c0 [ 366.490426][T17254] ? __dev_queue_xmit+0x29b/0x3820 [ 366.490450][T17254] ? __local_bh_enable_ip+0xd6/0x140 [ 366.490474][T17254] ? lockdep_hardirqs_on+0x7b/0x110 [ 366.490499][T17254] ? __dev_queue_xmit+0x29b/0x3820 [ 366.490521][T17254] ? __local_bh_enable_ip+0xd6/0x140 [ 366.490542][T17254] ? __dev_queue_xmit+0x29b/0x3820 [ 366.490561][T17254] ? __dev_queue_xmit+0x1edc/0x3820 [ 366.490580][T17254] ? do_syscall_64+0x166/0x520 [ 366.490603][T17254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.490633][T17254] ? __dev_queue_xmit+0x29b/0x3820 [ 366.490653][T17254] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 366.490677][T17254] ? __pfx___dev_queue_xmit+0x10/0x10 [ 366.490705][T17254] ? ref_tracker_free+0x689/0x830 [ 366.490727][T17254] ? __pfx_ref_tracker_free+0x10/0x10 [ 366.490752][T17254] ? __skb_clone+0x449/0x6c0 [ 366.490777][T17254] ? skb_clone+0x246/0x3a0 [ 366.490800][T17254] ? __netlink_deliver_tap+0x811/0x860 [ 366.490820][T17254] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.490847][T17254] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.490866][T17254] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.490893][T17254] netlink_unicast+0x7bd/0x940 [ 366.490923][T17254] netlink_sendmsg+0x813/0xb40 [ 366.490953][T17254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.490982][T17254] ? apparmor_socket_sendmsg+0x98/0x360 [ 366.491011][T17254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.491031][T17254] sock_sendmsg_nosec+0x13a/0x180 [ 366.491057][T17254] ____sys_sendmsg+0x54e/0x850 [ 366.491082][T17254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.491110][T17254] ? import_iovec+0x73/0xa0 [ 366.491133][T17254] ___sys_sendmsg+0x2a5/0x360 [ 366.491151][T17254] ? __lock_acquire+0x6df/0x2e50 [ 366.491172][T17254] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.491225][T17254] ? __fget_files+0x2a/0x420 [ 366.491252][T17254] ? __fget_files+0x3a2/0x420 [ 366.491284][T17254] __x64_sys_sendmsg+0x1b1/0x290 [ 366.491306][T17254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.491345][T17254] do_syscall_64+0x166/0x520 [ 366.491368][T17254] ? trace_irq_disable+0x3b/0x140 [ 366.491385][T17254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.491404][T17254] ? clear_bhb_loop+0x70/0xc0 [ 366.491425][T17254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.491443][T17254] RIP: 0033:0x7f982f99e159 [ 366.491459][T17254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.491474][T17254] RSP: 002b:00007f983091c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.491494][T17254] RAX: ffffffffffffffda RBX: 00007f982fc25fa0 RCX: 00007f982f99e159 [ 366.491508][T17254] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 366.491520][T17254] RBP: 00007f983091c090 R08: 0000000000000000 R09: 0000000000000000 [ 366.491531][T17254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.491541][T17254] R13: 00007f982fc26038 R14: 00007f982fc25fa0 R15: 00007ffd641ddae8 [ 366.491571][T17254] [ 366.773512][T17253] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 366.781650][T17253] netlink: 'syz.0.2744': attribute type 10 has an invalid length. [ 367.040091][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.051131][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.052907][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.055518][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.058889][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.150905][T17264] tipc: Resetting bearer [ 367.218432][T17268] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.221119][T17268] bridge0: port 1(1¾x9ÿ) entered disabled state [ 367.261385][T17259] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.261512][T17259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.261789][T17259] bridge0: port 1(1¾x9ÿ) entered blocking state [ 367.261903][T17259] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 367.277897][T17259] bridge0: entered allmulticast mode [ 367.444053][T17278] __nla_validate_parse: 3 callbacks suppressed [ 367.454116][T17278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2752'. [ 367.505645][T17281] netlink: NAT attribute has 5 unknown bytes [ 367.514023][T17281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.702889][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 368.037414][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2756'. [ 368.326969][T17314] netlink: 'syz.3.2761': attribute type 1 has an invalid length. [ 368.438020][T17314] bond9: entered promiscuous mode [ 368.454008][T17314] 8021q: adding VLAN 0 to HW filter on device bond9 [ 368.657122][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'. [ 368.657180][T17333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2763'. [ 368.782051][T17335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2762'. [ 368.922808][T17321] team0: left allmulticast mode [ 369.054536][T17321] tipc: Resetting bearer [ 369.176349][ T5615] Bluetooth: hci5: command tx timeout [ 369.267652][T17321] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 369.312219][T17321] ip6gre1: left allmulticast mode [ 369.329461][T17321] bond1: left allmulticast mode [ 369.334951][T17321] bridge2: port 2(veth5) entered disabled state [ 369.335390][T17321] bridge2: port 1(veth3) entered disabled state [ 369.477110][T17321] ip6tnl1: left allmulticast mode [ 369.504515][T17321] veth7: left allmulticast mode [ 369.725843][T17321] bond6: left promiscuous mode [ 369.757513][T13367] lo speed is unknown, defaulting to 1000 [ 369.757551][T13367] syz_device_name_32_chars_5234567: Port: 1 Link DOWN [ 369.772612][ T6176] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.772643][ T6176] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.782157][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.782189][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.782290][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.782318][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.792018][T17269] lo speed is unknown, defaulting to 1000 [ 370.271884][T17269] lo speed is unknown, defaulting to 1000 [ 370.383596][T17360] FAULT_INJECTION: forcing a failure. [ 370.383596][T17360] name failslab, interval 1, probability 0, space 0, times 0 [ 370.383653][T17360] CPU: 0 UID: 0 PID: 17360 Comm: syz.4.2769 Not tainted syzkaller #0 PREEMPT(full) [ 370.383672][T17360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.383681][T17360] Call Trace: [ 370.383687][T17360] [ 370.383693][T17360] dump_stack_lvl+0xe8/0x150 [ 370.383721][T17360] should_fail_ex+0x410/0x560 [ 370.383753][T17360] should_failslab+0xa8/0x100 [ 370.383775][T17360] ? skb_clone+0x212/0x3a0 [ 370.383795][T17360] kmem_cache_alloc_noprof+0xa1/0x600 [ 370.383825][T17360] ? skb_clone+0x212/0x3a0 [ 370.383850][T17360] skb_clone+0x212/0x3a0 [ 370.383874][T17360] __netlink_deliver_tap+0x413/0x860 [ 370.383914][T17360] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.383937][T17360] netlink_deliver_tap+0x19c/0x1b0 [ 370.383959][T17360] netlink_sendskb+0x68/0x140 [ 370.383981][T17360] netlink_rcv_skb+0x2a4/0x4a0 [ 370.384003][T17360] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 370.384024][T17360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.384056][T17360] ? bpf_lsm_capable+0x9/0x20 [ 370.384082][T17360] ? security_capable+0x7e/0x2c0 [ 370.384107][T17360] nfnetlink_rcv+0x2b9/0x28c0 [ 370.384129][T17360] ? __dev_queue_xmit+0x29b/0x3820 [ 370.384154][T17360] ? __local_bh_enable_ip+0xd6/0x140 [ 370.384177][T17360] ? lockdep_hardirqs_on+0x7b/0x110 [ 370.384201][T17360] ? __dev_queue_xmit+0x29b/0x3820 [ 370.384220][T17360] ? __local_bh_enable_ip+0xd6/0x140 [ 370.384240][T17360] ? __dev_queue_xmit+0x29b/0x3820 [ 370.384259][T17360] ? __dev_queue_xmit+0x1edc/0x3820 [ 370.384278][T17360] ? do_syscall_64+0x166/0x520 [ 370.384302][T17360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.384331][T17360] ? __dev_queue_xmit+0x29b/0x3820 [ 370.384352][T17360] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 370.384377][T17360] ? __pfx___dev_queue_xmit+0x10/0x10 [ 370.384405][T17360] ? ref_tracker_free+0x689/0x830 [ 370.384425][T17360] ? __pfx_ref_tracker_free+0x10/0x10 [ 370.384453][T17360] ? __skb_clone+0x449/0x6c0 [ 370.384477][T17360] ? skb_clone+0x246/0x3a0 [ 370.384500][T17360] ? __netlink_deliver_tap+0x811/0x860 [ 370.384519][T17360] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.384546][T17360] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.384566][T17360] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.384592][T17360] netlink_unicast+0x7bd/0x940 [ 370.384621][T17360] netlink_sendmsg+0x813/0xb40 [ 370.384651][T17360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.384681][T17360] ? apparmor_socket_sendmsg+0x98/0x360 [ 370.384709][T17360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.384728][T17360] sock_sendmsg_nosec+0x13a/0x180 [ 370.384756][T17360] ____sys_sendmsg+0x54e/0x850 [ 370.384781][T17360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.384809][T17360] ? import_iovec+0x73/0xa0 [ 370.384831][T17360] ___sys_sendmsg+0x2a5/0x360 [ 370.384849][T17360] ? __lock_acquire+0x6df/0x2e50 [ 370.384871][T17360] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.384929][T17360] ? __fget_files+0x2a/0x420 [ 370.384950][T17360] ? __fget_files+0x3a2/0x420 [ 370.384982][T17360] __x64_sys_sendmsg+0x1b1/0x290 [ 370.385004][T17360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.385043][T17360] do_syscall_64+0x166/0x520 [ 370.385065][T17360] ? trace_irq_disable+0x3b/0x140 [ 370.385082][T17360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.385100][T17360] ? clear_bhb_loop+0x70/0xc0 [ 370.385122][T17360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.385139][T17360] RIP: 0033:0x7f982f99e159 [ 370.385157][T17360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.385171][T17360] RSP: 002b:00007f983091c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.385191][T17360] RAX: ffffffffffffffda RBX: 00007f982fc25fa0 RCX: 00007f982f99e159 [ 370.385204][T17360] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 370.385215][T17360] RBP: 00007f983091c090 R08: 0000000000000000 R09: 0000000000000000 [ 370.385225][T17360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.385236][T17360] R13: 00007f982fc26038 R14: 00007f982fc25fa0 R15: 00007ffd641ddae8 [ 370.385265][T17360] [ 370.909016][T17375] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 371.256303][ T5615] Bluetooth: hci5: command tx timeout [ 371.405030][T17269] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.412533][T17269] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.420263][T17269] bridge_slave_0: entered allmulticast mode [ 371.431190][T17269] bridge_slave_0: entered promiscuous mode [ 371.445664][T17269] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.455802][T17269] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.464664][T17269] bridge_slave_1: entered allmulticast mode [ 371.475368][T17269] bridge_slave_1: entered promiscuous mode [ 371.520427][T17269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.548552][T17269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.610942][T17269] team0: Port device team_slave_0 added [ 371.619607][T17269] team0: Port device team_slave_1 added [ 371.693503][T17390] vxcan0: tx drop: invalid da for name 0x0000eb00000000c8 [ 371.821282][T17269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.821324][T17269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.821367][T17269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.842371][T17269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.842389][T17269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.842412][T17269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.075393][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2775'. [ 372.083604][T17387] openvswitch: netlink: Message has 16 unknown bytes. [ 372.160579][T17269] hsr_slave_0: entered promiscuous mode [ 372.170890][T17269] hsr_slave_1: entered promiscuous mode [ 372.174997][T17269] debugfs: 'hsr0' already exists in 'hsr' [ 372.175021][T17269] Cannot create hsr debugfs directory [ 372.436586][T17380] lo speed is unknown, defaulting to 1000 [ 372.713413][T17407] tc_dump_action: action bad kind [ 373.264577][T17380] lo speed is unknown, defaulting to 1000 [ 373.336166][ T5615] Bluetooth: hci5: command tx timeout [ 373.424036][T17417] batadv_slave_1: entered promiscuous mode [ 373.829935][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2786'. [ 373.846033][T17427] xt_TCPMSS: Only works on TCP SYN packets [ 374.068905][T17431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2787'. [ 374.121474][T17431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.164891][T17434] bridge_slave_1: left allmulticast mode [ 374.164944][T17434] bridge_slave_1: left promiscuous mode [ 374.165569][T17434] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.210974][T17433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.231087][T17431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.245524][T17434] ¾x9ÿ: left allmulticast mode [ 374.245584][T17434] ¾x9ÿ: left promiscuous mode [ 374.245839][T17434] bridge0: port 1(1¾x9ÿ) entered disabled state [ 374.628998][T17269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.639254][T17269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.641788][T17269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.649456][T17269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.650422][T17269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.664296][T17269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.665142][T17269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.681809][T17269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.813885][T17269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.851654][T17269] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.873756][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.873876][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.905297][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.905409][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.139101][T17464] TCP: TCP_TX_DELAY enabled [ 375.390291][T17474] netlink: 'syz.1.2796': attribute type 23 has an invalid length. [ 375.417599][ T5615] Bluetooth: hci5: command tx timeout [ 375.731532][T13363] hid-generic 0005:0C45:0008.0002: item fetching failed at offset 2/3 [ 375.761462][T13363] hid-generic 0005:0C45:0008.0002: probe with driver hid-generic failed with error -22 [ 375.810681][T17500] xt_hl: Unknown TTL match mode: 237 [ 375.819334][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2801'. [ 376.522656][T17522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2803'. [ 376.852881][T17519] veth1_to_bond: entered allmulticast mode [ 376.852982][T17521] veth1_to_bond: entered promiscuous mode [ 376.953523][T17522] veth1_to_bond (unregistering): left allmulticast mode [ 376.953599][T17522] veth1_to_bond (unregistering): left promiscuous mode [ 376.992212][T17522] .`: (slave bond_slave_1): Releasing backup interface [ 377.030713][T17529] netlink: 'syz.3.2805': attribute type 4 has an invalid length. [ 377.032729][T17269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.072788][T17529] netlink: 'syz.3.2805': attribute type 4 has an invalid length. [ 377.163689][T17269] veth0_vlan: entered promiscuous mode [ 377.189833][T17269] veth1_vlan: entered promiscuous mode [ 377.227718][T17269] veth0_macvtap: entered promiscuous mode [ 377.238847][T17269] veth1_macvtap: entered promiscuous mode [ 377.260440][T17269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.279703][T17269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.357829][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.359191][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.359582][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.359619][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.651360][T17542] sctp: [Deprecated]: syz.0.2807 (pid 17542) Use of int in max_burst socket option deprecated. [ 377.651360][T17542] Use struct sctp_assoc_value instead [ 378.369668][T17548] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2808'. [ 378.541088][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.155422][T17512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.281924][ T7600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.281967][ T7600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.362969][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.363016][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.403715][T17560] tipc: Enabling of bearer rejected, already enabled [ 379.624011][T17576] vxcan0: tx drop: invalid da for name 0x0000f5ff000000c8 [ 379.847487][T17586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2818'. [ 379.968177][T17596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2822'. [ 380.040140][T17599] tipc: Enabling of bearer rejected, failed to enable media [ 380.094034][T17564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2813'. [ 380.109543][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2813'. [ 380.231781][T17613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2823'. [ 380.275345][T17608] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2825'. [ 380.284211][T17613] dvmrp0: left allmulticast mode [ 380.430153][T17621] netlink: 'syz.4.2826': attribute type 2 has an invalid length. [ 380.468578][T17619] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 380.517509][T17624] syzkaller0: entered promiscuous mode [ 380.523271][T17624] syzkaller0: entered allmulticast mode [ 381.052574][T17637] vxcan0: tx drop: invalid da for name 0x0000fe00000000c8 [ 381.195532][T17645] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 381.206569][T17645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.275965][T17648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.312273][T17650] tipc: Invalid UDP bearer configuration [ 381.312345][T17650] tipc: Enabling of bearer rejected, failed to enable media [ 381.329921][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2837'. [ 381.364569][T17651] 8021q: adding VLAN 0 to HW filter on device bond17 [ 381.412795][T17656] netlink: 'syz.4.2836': attribute type 1 has an invalid length. [ 381.433706][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'. [ 381.970691][T17674] bond10: option miimon: invalid value (18446744072900873176) [ 381.970737][T17674] bond10: option miimon: allowed values 0 - 2147483647 [ 381.974515][T17674] bond10 (unregistering): Released all slaves [ 382.226012][T17683] vxcan0: tx drop: invalid da for name 0x0000fff5000000c8 [ 382.231464][T17678] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 382.231492][T17678] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 382.231767][T17678] tipc: Resetting bearer [ 382.433226][T17695] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2851'. [ 382.443045][T17695] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2851'. [ 382.712542][T17711] netlink: ct family unspecified [ 382.712596][T17711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.910313][T17670] lo speed is unknown, defaulting to 1000 [ 383.313838][T17727] bond6: option miimon: invalid value (18446744072900873176) [ 383.322075][T17727] bond6: option miimon: allowed values 0 - 2147483647 [ 383.336024][T17727] bond6 (unregistering): Released all slaves [ 383.581641][T17670] lo speed is unknown, defaulting to 1000 [ 383.612844][T17746] nbd: must specify a device to reconfigure [ 383.879924][T17761] vxcan0: tx drop: invalid da for name 0x00040000000000c8 [ 385.032991][T17803] tipc: Enabling of bearer rejected, failed to enable media [ 385.116875][T17808] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 385.116973][T17808] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 385.158116][T17808] netlink: 'syz.3.2877': attribute type 13 has an invalid length. [ 385.265511][T17821] __nla_validate_parse: 14 callbacks suppressed [ 385.265544][T17821] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2880'. [ 385.364648][T17827] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 385.801791][T17843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2885'. [ 385.812035][T17843] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2885'. [ 385.833573][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'. [ 385.849182][T17844] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2884'. [ 385.954974][T17848] macsec1: entered allmulticast mode [ 385.960670][T17848] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 385.969861][T17848] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 385.981038][T17848] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 386.002268][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2888'. [ 386.013055][T17850] block nbd5: Unsupported socket: should be TCP or UNIX. [ 386.032189][T17850] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2888'. [ 386.034948][T17848] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 386.062378][ T5732] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 386.102499][T17854] macsec1: entered allmulticast mode [ 386.102548][T17854] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 386.102584][T17854] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 386.103739][T17854] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 386.148121][T17854] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 386.204642][T12902] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 386.225956][T17859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2889'. [ 386.392438][T17872] vxcan0: tx drop: invalid da for name 0x00ec0000000000c8 [ 386.600812][ T126] IPVS: starting estimator thread 0... [ 386.686931][T17880] IPVS: using max 28 ests per chain, 67200 per kthread [ 386.718606][T17886] netlink: 'syz.4.2898': attribute type 21 has an invalid length. [ 386.727060][T17886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2898'. [ 386.984777][T17890] tipc: Resetting bearer [ 386.984917][T17890] tipc: Resetting bearer [ 387.066318][T17893] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 387.104079][T17893] sctp: [Deprecated]: syz.2.2900 (pid 17893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.104079][T17893] Use struct sctp_sack_info instead [ 387.161545][T17898] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2900'. [ 387.235360][T17910] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 387.357120][T17913] netlink: 'syz.0.2904': attribute type 2 has an invalid length. [ 387.357146][T17913] netlink: 'syz.0.2904': attribute type 1 has an invalid length. [ 387.923792][T17934] syz.2.2910: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 387.923897][T17934] CPU: 0 UID: 0 PID: 17934 Comm: syz.2.2910 Not tainted syzkaller #0 PREEMPT(full) [ 387.923923][T17934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.923935][T17934] Call Trace: [ 387.923942][T17934] [ 387.923950][T17934] dump_stack_lvl+0xe8/0x150 [ 387.923981][T17934] warn_alloc+0x24d/0x270 [ 387.924008][T17934] ? kasan_save_track+0x4f/0x80 [ 387.924024][T17934] ? kasan_save_track+0x3e/0x80 [ 387.924044][T17934] ? __pfx_warn_alloc+0x10/0x10 [ 387.924074][T17934] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 387.924094][T17934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.924128][T17934] __vmalloc_node_range_noprof+0x127/0x1540 [ 387.924207][T17934] ? rcu_is_watching+0x16/0xb0 [ 387.924234][T17934] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 387.924259][T17934] ? __kmalloc_cache_noprof+0x321/0x600 [ 387.924283][T17934] ? __kmalloc_cache_noprof+0x14d/0x600 [ 387.924306][T17934] ? xskq_create+0x56/0x220 [ 387.924413][T17934] xskq_create+0x148/0x220 [ 387.924437][T17934] ? xsk_init_queue+0x8a/0xe0 [ 387.924460][T17934] xsk_init_queue+0x8a/0xe0 [ 387.924483][T17934] xsk_setsockopt+0x52a/0x960 [ 387.924505][T17934] ? __pfx_xsk_setsockopt+0x10/0x10 [ 387.924523][T17934] ? __pfx_aa_sk_perm+0x10/0x10 [ 387.924550][T17934] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 387.924571][T17934] ? __pfx_xsk_setsockopt+0x10/0x10 [ 387.924593][T17934] do_sock_setsockopt+0x17c/0x1b0 [ 387.924617][T17934] __x64_sys_setsockopt+0x13d/0x1b0 [ 387.924640][T17934] do_syscall_64+0x166/0x520 [ 387.924665][T17934] ? trace_irq_disable+0x3b/0x140 [ 387.924682][T17934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.924700][T17934] ? clear_bhb_loop+0x70/0xc0 [ 387.924722][T17934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.924739][T17934] RIP: 0033:0x7f17ae39e159 [ 387.924757][T17934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.924772][T17934] RSP: 002b:00007f17af32e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 387.924790][T17934] RAX: ffffffffffffffda RBX: 00007f17ae625fa0 RCX: 00007f17ae39e159 [ 387.924803][T17934] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000027 [ 387.924813][T17934] RBP: 00007f17ae43503b R08: 0000000000000004 R09: 0000000000000000 [ 387.924824][T17934] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.924836][T17934] R13: 00007f17ae626038 R14: 00007f17ae625fa0 R15: 00007ffdde27c138 [ 387.924866][T17934] [ 387.924890][T17934] Mem-Info: [ 387.924899][T17934] active_anon:7900 inactive_anon:0 isolated_anon:0 [ 387.924899][T17934] active_file:0 inactive_file:43820 isolated_file:0 [ 387.924899][T17934] unevictable:0 dirty:197 writeback:0 [ 387.924899][T17934] slab_reclaimable:11609 slab_unreclaimable:118834 [ 387.924899][T17934] mapped:29900 shmem:523 pagetables:1304 [ 387.924899][T17934] sec_pagetables:0 bounce:0 [ 387.924899][T17934] kernel_misc_reclaimable:0 [ 387.924899][T17934] free:1258341 free_pcp:11997 free_cma:0 [ 387.924945][T17934] Node 0 active_anon:31600kB inactive_anon:0kB active_file:0kB inactive_file:175072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119600kB dirty:784kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15664kB pagetables:5100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 387.924993][T17934] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 387.925038][T17934] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.931744][T17934] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 387.931784][T17934] Node 0 DMA32 free:1070324kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31600kB inactive_anon:0kB active_file:0kB inactive_file:175072kB unevictable:0kB writepending:784kB zspages:0kB present:3129332kB managed:2546704kB mlocked:0kB bounce:0kB free_pcp:47988kB local_pcp:27624kB free_cma:0kB [ 387.931839][T17934] lowmem_reserve[]: 0 0 0 0 0 [ 387.931867][T17934] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.931911][T17934] lowmem_reserve[]: 0 0 0 0 0 [ 387.931943][T17934] Node 1 Normal free:3947680kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.931994][T17934] lowmem_reserve[]: 0 0 0 0 0 [ 387.932025][T17934] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 387.932143][T17934] Node 0 DMA32: 791*4kB (UME) 143*8kB (UME) 194*16kB (UME) 425*32kB (UME) 218*64kB (UME) 53*128kB (UME) 6*256kB (ME) 2*512kB (UE) 0*1024kB 3*2048kB (UM) 249*4096kB (UM) = 1070356kB [ 387.932278][T17934] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 387.932366][T17934] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 6*16kB (UM) 3*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3947680kB [ 387.932536][T17934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.932551][T17934] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.932564][T17934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.932579][T17934] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.932593][T17934] 44339 total pagecache pages [ 387.932600][T17934] 0 pages in swap cache [ 387.932607][T17934] Free swap = 124996kB [ 387.932615][T17934] Total swap = 124996kB [ 387.932622][T17934] 2097051 pages RAM [ 387.932628][T17934] 0 pages HighMem/MovableOnly [ 387.932635][T17934] 428759 pages reserved [ 387.932641][T17934] 0 pages cma reserved [ 388.964810][T17962] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 388.974289][T17962] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 388.983548][T17962] tipc: Resetting bearer [ 389.166596][T17979] geneve5: entered promiscuous mode [ 389.354302][T17992] netlink: 'syz.2.2922': attribute type 21 has an invalid length. [ 389.354345][T17992] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.451673][T17995] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.452958][T17995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.452973][T17995] IPv6: NLM_F_CREATE should be set when creating new route [ 389.453015][T17995] IPv6: NLM_F_CREATE should be set when creating new route [ 389.453038][T17995] IPv6: NLM_F_CREATE should be set when creating new route [ 389.750252][T18016] syzkaller0: entered promiscuous mode [ 389.750293][T18016] syzkaller0: entered allmulticast mode [ 390.583452][T18067] syzkaller0: entered promiscuous mode [ 390.589699][T18067] syzkaller0: entered allmulticast mode [ 391.132787][T18102] __nla_validate_parse: 9 callbacks suppressed [ 391.132844][T18102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2950'. [ 391.451666][T18119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2955'. [ 391.580349][T18129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2959'. [ 391.591228][T18123] bond1 (unregistering): Released all slaves [ 391.699483][T18134] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2961'. [ 391.711305][T18134] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2961'. [ 391.728707][T18134] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2961'. [ 391.984031][T18147] netlink: 'syz.0.2965': attribute type 1 has an invalid length. [ 392.059195][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 392.085678][T18147] bond8: entered promiscuous mode [ 392.089562][T18147] 8021q: adding VLAN 0 to HW filter on device bond8 [ 392.110093][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 392.140401][T18147] bond8: (slave bridge9): making interface the new active one [ 392.148710][T18147] bridge9: entered promiscuous mode [ 392.157622][T18147] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 392.412720][T18165] syzkaller1: entered promiscuous mode [ 392.412766][T18165] syzkaller1: entered allmulticast mode [ 392.995959][T18173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.164426][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2978'. [ 393.478083][T18220] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2983'. [ 393.759932][T18229] syzkaller0: entered promiscuous mode [ 393.759985][T18229] syzkaller0: entered allmulticast mode [ 393.812332][T18229] tipc: Enabled bearer , priority 0 [ 393.820704][T18228] tipc: Resetting bearer [ 393.938130][T18228] tipc: Disabling bearer [ 394.015349][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.034157][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.042845][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.050938][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.061838][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.529547][T18265] lo: entered allmulticast mode [ 394.650842][T18270] lo: left allmulticast mode [ 394.717560][T18275] vxcan2: entered allmulticast mode [ 394.755204][T18278] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 395.201206][T18296] bond1: entered allmulticast mode [ 395.360677][T18296] netlink: 'syz.2.3000': attribute type 1 has an invalid length. [ 395.370138][T18296] netlink: 'syz.2.3000': attribute type 2 has an invalid length. [ 395.527634][T18238] lo speed is unknown, defaulting to 1000 [ 395.857066][T18322] netlink: 'syz.4.3009': attribute type 1 has an invalid length. [ 395.874556][T18324] netlink: 'syz.3.3008': attribute type 1 has an invalid length. [ 395.913319][T18324] bond10: entered promiscuous mode [ 395.913804][T18324] 8021q: adding VLAN 0 to HW filter on device bond10 [ 395.917590][T18238] lo speed is unknown, defaulting to 1000 [ 395.924647][T18320] ip6gre1: entered promiscuous mode [ 395.924668][T18320] ip6gre1: entered allmulticast mode [ 395.985050][T18327] netlink: 'syz.2.3010': attribute type 11 has an invalid length. [ 396.023224][ T31] audit: type=1107 audit(1788900381.545:14): pid=18323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 396.044723][T18324] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.045175][T18324] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 396.045194][T18324] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 396.062287][T18324] bond10: (slave ip6gre2): making interface the new active one [ 396.062313][T18324] ip6gre2: entered promiscuous mode [ 396.063779][T18324] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 396.089621][T18327] bond2: (slave bond_slave_1): Device is not our slave [ 396.089643][T18327] bond2: option active_slave: invalid value (bond_slave_1) [ 396.101029][T18327] bond2 (unregistering): Released all slaves [ 396.136757][ T5615] Bluetooth: hci0: command tx timeout [ 396.333790][T18330] syzkaller0: entered promiscuous mode [ 396.333837][T18330] syzkaller0: entered allmulticast mode [ 396.379797][T18330] tipc: Enabled bearer , priority 0 [ 396.388351][T18329] tipc: Resetting bearer [ 396.454186][T18329] tipc: Disabling bearer [ 396.691991][T18357] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 397.119102][T18238] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.128476][T18238] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.128666][T18238] bridge_slave_0: entered allmulticast mode [ 397.154619][T18238] bridge_slave_0: entered promiscuous mode [ 397.165369][T18238] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.174053][T18238] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.174263][T18238] bridge_slave_1: entered allmulticast mode [ 397.190245][T18238] bridge_slave_1: entered promiscuous mode [ 397.287222][T18238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.310188][T18238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.435608][T18238] team0: Port device team_slave_0 added [ 397.448804][T18238] team0: Port device team_slave_1 added [ 397.592632][T18238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.592674][T18238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.592698][T18238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.598605][T18238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.598621][T18238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.598644][T18238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.800965][T18394] __nla_validate_parse: 8 callbacks suppressed [ 397.803336][T18238] hsr_slave_0: entered promiscuous mode [ 397.808659][T18238] hsr_slave_1: entered promiscuous mode [ 397.809326][T18238] debugfs: 'hsr0' already exists in 'hsr' [ 397.809377][T18238] Cannot create hsr debugfs directory [ 397.831316][T18394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3029'. [ 397.917863][T18385] syzkaller1: entered promiscuous mode [ 397.917912][T18385] syzkaller1: entered allmulticast mode [ 397.979812][T18400] bond11: option miimon: invalid value (18446744072900873176) [ 397.979855][T18400] bond11: option miimon: allowed values 0 - 2147483647 [ 398.000561][T18400] bond11 (unregistering): Released all slaves [ 398.216882][ T5615] Bluetooth: hci0: command tx timeout [ 398.366451][T18419] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3032'. [ 400.306495][ T5615] Bluetooth: hci0: command tx timeout [ 400.567469][T18422] netlink: 'syz.2.3033': attribute type 8 has an invalid length. [ 400.567506][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3033'. [ 400.611086][T18422] veth1_to_team: entered promiscuous mode [ 400.620017][T18422] gretap0: entered promiscuous mode [ 400.631297][T18422] veth1_to_team: left promiscuous mode [ 400.638826][T18422] gretap0: left promiscuous mode [ 401.356415][T18444] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.3039'. [ 402.187711][T18477] netlink: 'syz.4.3046': attribute type 8 has an invalid length. [ 402.187754][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3046'. [ 402.386485][ T5615] Bluetooth: hci0: command tx timeout [ 402.401532][T18494] netlink: 'syz.2.3050': attribute type 39 has an invalid length. [ 402.507574][T18238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.517614][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.518559][T18238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.541027][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.541884][T18238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.551574][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.553174][T18238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.564393][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.710339][T18508] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 402.804030][T18238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.871867][T18238] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.888844][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.888968][T12356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.918171][T12356] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.918316][T12356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.044466][T18514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.068988][T18514] Bluetooth: MGMT ver 1.23 [ 403.069059][T18514] Bluetooth: hci0: unsupported parameter 5135 [ 403.069072][T18514] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 403.161028][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3057'. [ 403.235114][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3057'. [ 403.359498][T18534] x_tables: duplicate underflow at hook 3 [ 403.560894][T18544] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 403.565789][T18543] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.587960][T18543] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3061'. [ 403.605411][T18548] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.631297][T18551] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3061'. [ 403.683373][T18552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3064'. [ 403.683458][T18552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3064'. [ 403.841559][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3062'. [ 403.867065][T18238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.921305][T18569] bond2: option miimon: invalid value (18446744072900873176) [ 403.930701][T18569] bond2: option miimon: allowed values 0 - 2147483647 [ 403.942155][T18569] bond2 (unregistering): Released all slaves [ 403.952120][T18572] xt_NFQUEUE: number of total queues is 0 [ 404.066477][T18238] veth0_vlan: entered promiscuous mode [ 404.085043][T18238] veth1_vlan: entered promiscuous mode [ 404.180708][T18238] veth0_macvtap: entered promiscuous mode [ 404.194105][T18238] veth1_macvtap: entered promiscuous mode [ 404.248645][T18574] veth1_macvtap: entered promiscuous mode [ 404.264325][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.274780][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.284996][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.294562][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.315690][T18574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.332467][T18574] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 404.350051][T18574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.383491][T18574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.406031][T18574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 404.503590][T18574] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 404.544909][T18574] 8021q: adding VLAN 0 to HW filter on device bond5 [ 404.568927][T18574] erspan0: entered promiscuous mode [ 404.647760][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 404.674100][T18574] 8021q: adding VLAN 0 to HW filter on device bond6 [ 404.692063][T18574] 8021q: adding VLAN 0 to HW filter on device bond7 [ 404.707428][T18574] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 404.719705][T18574] 8021q: adding VLAN 0 to HW filter on device bond8 [ 404.729344][T18574] 8021q: adding VLAN 0 to HW filter on device bond9 [ 404.731987][T18574] 8021q: adding VLAN 0 to HW filter on device bond10 [ 404.749049][T18574] 8021q: adding VLAN 0 to HW filter on device bond11 [ 404.757205][T18574] 8021q: adding VLAN 0 to HW filter on device bond12 [ 404.783596][T18574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.792730][T18574] 8021q: adding VLAN 0 to HW filter on device bond13 [ 404.818473][T18574] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 404.818502][T18574] hsr0: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 404.832018][T18574] 8021q: adding VLAN 0 to HW filter on device bond14 [ 404.841344][T18574] bond15: left promiscuous mode [ 404.841790][T18574] 8021q: adding VLAN 0 to HW filter on device bond15 [ 404.854845][T18574] bond16: left promiscuous mode [ 404.861177][T18574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.866504][ T1091] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.977100][ T1091] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.003140][T18600] xt_hashlimit: size too large, truncated to 1048576 [ 405.016332][T12356] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.016558][T12356] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.043339][T18238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.063149][ T1091] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 405.080275][T18238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.128227][T18601] FAULT_INJECTION: forcing a failure. [ 405.128227][T18601] name failslab, interval 1, probability 0, space 0, times 0 [ 405.128282][T18601] CPU: 1 UID: 0 PID: 18601 Comm: syz.3.3074 Not tainted syzkaller #0 PREEMPT(full) [ 405.128301][T18601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.128311][T18601] Call Trace: [ 405.128317][T18601] [ 405.128323][T18601] dump_stack_lvl+0xe8/0x150 [ 405.128351][T18601] should_fail_ex+0x410/0x560 [ 405.128382][T18601] should_failslab+0xa8/0x100 [ 405.128406][T18601] __kmalloc_noprof+0xfe/0x720 [ 405.128434][T18601] ? tomoyo_encode+0x2ad/0x570 [ 405.128453][T18601] ? tomoyo_encode+0x2ad/0x570 [ 405.128475][T18601] tomoyo_encode+0x2ad/0x570 [ 405.128501][T18601] tomoyo_realpath_from_path+0x5fa/0x640 [ 405.128526][T18601] ? tomoyo_path_number_perm+0x219/0x5f0 [ 405.128549][T18601] tomoyo_path_number_perm+0x246/0x5f0 [ 405.128586][T18601] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 405.128612][T18601] ? __lock_acquire+0x6df/0x2e50 [ 405.128644][T18601] ? hook_file_ioctl+0x1f2/0x600 [ 405.128678][T18601] ? __fget_files+0x2a/0x420 [ 405.128704][T18601] ? __fget_files+0x2a/0x420 [ 405.128737][T18601] ? __fget_files+0x3a2/0x420 [ 405.128758][T18601] ? __fget_files+0x2a/0x420 [ 405.128784][T18601] security_file_ioctl+0xc3/0x2a0 [ 405.128811][T18601] __se_sys_ioctl+0x47/0x170 [ 405.128832][T18601] do_syscall_64+0x166/0x520 [ 405.128858][T18601] ? trace_irq_disable+0x3b/0x140 [ 405.128875][T18601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.128893][T18601] ? clear_bhb_loop+0x70/0xc0 [ 405.128915][T18601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.128933][T18601] RIP: 0033:0x7f6cfe99e159 [ 405.128950][T18601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.128965][T18601] RSP: 002b:00007f6cfcbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.128985][T18601] RAX: ffffffffffffffda RBX: 00007f6cfec26090 RCX: 00007f6cfe99e159 [ 405.128998][T18601] RDX: 0000200000000080 RSI: 0000000000008923 RDI: 000000000000000b [ 405.129009][T18601] RBP: 00007f6cfcbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 405.129021][T18601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.129032][T18601] R13: 00007f6cfec26128 R14: 00007f6cfec26090 R15: 00007ffd0e7b1b48 [ 405.129062][T18601] [ 405.129082][T18601] ERROR: Out of memory at tomoyo_realpath_from_path. [ 405.198843][T12356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.376385][ T7597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.376534][ T7597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.423428][ T7597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.505452][T18611] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3076'. [ 405.603403][T18611] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3076'. [ 405.801244][ T7598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.801293][ T7598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.869380][T12353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.869431][T12353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.102845][T18624] bond2: option miimon: invalid value (18446744072900873176) [ 406.111794][T18624] bond2: option miimon: allowed values 0 - 2147483647 [ 406.125309][T18624] bond2 (unregistering): Released all slaves [ 406.450210][T18640] xt_hashlimit: size too large, truncated to 1048576 [ 406.523696][T18642] FAULT_INJECTION: forcing a failure. [ 406.523696][T18642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.526228][T18642] CPU: 1 UID: 0 PID: 18642 Comm: syz.2.3088 Not tainted syzkaller #0 PREEMPT(full) [ 406.526251][T18642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.526262][T18642] Call Trace: [ 406.526268][T18642] [ 406.526275][T18642] dump_stack_lvl+0xe8/0x150 [ 406.526302][T18642] should_fail_ex+0x410/0x560 [ 406.526334][T18642] _copy_from_user+0x2d/0xb0 [ 406.526355][T18642] sock_do_ioctl+0x195/0x320 [ 406.526382][T18642] ? __pfx_sock_do_ioctl+0x10/0x10 [ 406.526402][T18642] ? hook_file_ioctl+0x1f2/0x600 [ 406.526434][T18642] sock_ioctl+0x57a/0x7e0 [ 406.526455][T18642] ? __pfx_sock_ioctl+0x10/0x10 [ 406.526473][T18642] ? __fget_files+0x2a/0x420 [ 406.526493][T18642] ? __fget_files+0x3a2/0x420 [ 406.526511][T18642] ? __fget_files+0x2a/0x420 [ 406.526537][T18642] ? bpf_lsm_file_ioctl+0x9/0x20 [ 406.526560][T18642] ? __pfx_sock_ioctl+0x10/0x10 [ 406.526581][T18642] __se_sys_ioctl+0xfc/0x170 [ 406.526601][T18642] do_syscall_64+0x166/0x520 [ 406.526627][T18642] ? trace_irq_disable+0x3b/0x140 [ 406.526644][T18642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.526662][T18642] ? clear_bhb_loop+0x70/0xc0 [ 406.526683][T18642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.526701][T18642] RIP: 0033:0x7f17ae39e159 [ 406.526719][T18642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.526734][T18642] RSP: 002b:00007f17af30d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.526754][T18642] RAX: ffffffffffffffda RBX: 00007f17ae626090 RCX: 00007f17ae39e159 [ 406.526767][T18642] RDX: 0000200000000080 RSI: 0000000000008923 RDI: 000000000000000b [ 406.526778][T18642] RBP: 00007f17af30d090 R08: 0000000000000000 R09: 0000000000000000 [ 406.526789][T18642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.526800][T18642] R13: 00007f17ae626128 R14: 00007f17ae626090 R15: 00007ffdde27c138 [ 406.526829][T18642] [ 406.803479][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.820276][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.829255][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.842601][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.846787][T18620] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 406.858034][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.360262][T18656] team0: entered allmulticast mode [ 407.360302][T18656] team_slave_0: entered allmulticast mode [ 407.360339][T18656] team_slave_1: entered allmulticast mode [ 407.444142][T18669] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.444650][T18669] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.460812][T18669] bridge0: entered allmulticast mode [ 407.475170][T18669] bridge_slave_1: left allmulticast mode [ 407.484878][T18669] bridge_slave_1: left promiscuous mode [ 407.491924][T18663] netlink: 'syz.4.3092': attribute type 1 has an invalid length. [ 407.501415][T18669] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.543708][T18669] bridge_slave_0: left allmulticast mode [ 407.543744][T18669] bridge_slave_0: left promiscuous mode [ 407.544872][T18669] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.663975][T18663] 8021q: adding VLAN 0 to HW filter on device bond6 [ 407.699828][T18671] bond2: option miimon: invalid value (18446744072900873176) [ 407.707529][T18671] bond2: option miimon: allowed values 0 - 2147483647 [ 407.720612][T18671] bond2 (unregistering): Released all slaves [ 407.892956][T18673] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 408.056649][ T5615] Bluetooth: hci0: command 0x0401 tx timeout [ 408.363462][T18708] __nla_validate_parse: 4 callbacks suppressed [ 408.363511][T18708] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3103'. [ 408.491743][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3107'. [ 408.871547][T18731] sctp: [Deprecated]: syz.2.3108 (pid 18731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.871547][T18731] Use struct sctp_sack_info instead [ 408.906787][T18728] sctp: [Deprecated]: syz.2.3108 (pid 18728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.906787][T18728] Use struct sctp_sack_info instead [ 408.936763][ T5615] Bluetooth: hci2: command tx timeout [ 409.153419][T18735] netlink: 'syz.0.3110': attribute type 16 has an invalid length. [ 409.153460][T18735] netlink: 'syz.0.3110': attribute type 17 has an invalid length. [ 409.238719][T18739] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3111'. [ 409.250580][T18740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.336467][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 409.724283][T18723] bridge_slave_1: left allmulticast mode [ 409.904440][T18723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.959692][T18723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.109705][T18723] 0·: left allmulticast mode [ 410.116388][T18723] hsr_slave_0: left allmulticast mode [ 410.121907][T18723] hsr_slave_1: left allmulticast mode [ 410.441723][T18723] bridge2: left promiscuous mode [ 410.441769][T18723] bridge2: left allmulticast mode [ 410.464959][T18723] bond4: left promiscuous mode [ 410.471465][T18723] bond4: left allmulticast mode [ 410.559276][T18723] tipc: Resetting bearer [ 410.565183][T18723] syzkaller0: left promiscuous mode [ 410.565549][T18723] syzkaller0: left allmulticast mode [ 410.572663][T18723] bridge0: left promiscuous mode [ 410.572685][T18723] bridge0: left allmulticast mode [ 410.582196][T18723] bond6: left promiscuous mode [ 410.585129][T18723] bridge4: left promiscuous mode [ 410.585265][T18723] bond7: left allmulticast mode [ 410.585998][T18723] bridge5: left allmulticast mode [ 410.597086][T18723] bond9: left promiscuous mode [ 410.602006][T18723] bond10: left promiscuous mode [ 410.602023][T18723] ip6gre2: left promiscuous mode [ 410.612766][T18645] lo speed is unknown, defaulting to 1000 [ 410.617245][T12353] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.617274][T12353] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 54105 - 0 [ 410.621920][ T8288] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.621952][ T8288] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 54105 - 0 [ 410.622153][ T8288] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.622211][ T8288] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 54105 - 0 [ 410.622245][ T8288] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.622267][ T8288] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 54105 - 0 [ 411.012322][T18645] lo speed is unknown, defaulting to 1000 [ 411.019100][ T5615] Bluetooth: hci2: command tx timeout [ 411.024859][T18755] tipc: Started in network mode [ 411.024920][T18755] tipc: Node identity f2d956fd57cc, cluster identity 4711 [ 411.025072][T18755] tipc: Enabled bearer , priority 0 [ 411.043521][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057675800: rx timeout, send abort [ 411.043972][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057674800: rx timeout, send abort [ 411.044237][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057675800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 411.044379][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057674800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 411.129224][T18755] syzkaller0: entered promiscuous mode [ 411.134813][T18755] syzkaller0: entered allmulticast mode [ 411.141399][T18755] tipc: Resetting bearer [ 411.240229][T18753] tipc: Resetting bearer [ 411.401138][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3115'. [ 411.853286][T18761] ip_tables: iptables: counters copy to user failed while replacing table [ 413.108712][ T5615] Bluetooth: hci2: command tx timeout [ 414.221166][T18753] tipc: Disabling bearer [ 414.237532][ T25] tipc: Node number set to 2769639165 [ 414.660046][T18827] netlink: Unknown nat attribute (0) [ 414.660100][T18827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.660404][T18827] netlink: Unknown nat attribute (0) [ 414.660431][T18827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.660697][T18827] netlink: Unknown nat attribute (0) [ 414.660720][T18827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.660979][T18827] netlink: Unknown nat attribute (0) [ 414.661002][T18827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.661268][T18827] netlink: Unknown nat attribute (0) [ 414.661290][T18827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.804923][T18831] netlink: 'syz.0.3129': attribute type 1 has an invalid length. [ 414.874585][T18831] ipvlan2: entered allmulticast mode [ 414.880387][T18831] veth1_to_batadv: entered allmulticast mode [ 415.061504][T18645] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.071088][T18645] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.078707][T18645] bridge_slave_0: entered allmulticast mode [ 415.089931][T18645] bridge_slave_0: entered promiscuous mode [ 415.105602][T18645] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.105755][T18645] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.105908][T18645] bridge_slave_1: entered allmulticast mode [ 415.130999][T18645] bridge_slave_1: entered promiscuous mode [ 415.176352][ T5615] Bluetooth: hci2: command tx timeout [ 415.278134][T18852] bond1: option miimon: invalid value (18446744072900873176) [ 415.285769][T18852] bond1: option miimon: allowed values 0 - 2147483647 [ 415.294801][T18852] bond1 (unregistering): Released all slaves [ 415.345315][T18645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.371574][T18645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.492549][T18645] team0: Port device team_slave_0 added [ 415.504410][T18645] team0: Port device team_slave_1 added [ 415.510640][T18858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'. [ 415.520211][T18858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3137'. [ 415.529373][T18858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'. [ 415.688975][T18872] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.712412][T18645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.720107][T18645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.749949][T18645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.758111][T18645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.758126][T18645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.758150][T18645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.853271][T18645] hsr_slave_0: entered promiscuous mode [ 415.860004][T18645] hsr_slave_1: entered promiscuous mode [ 415.866475][T18645] debugfs: 'hsr0' already exists in 'hsr' [ 415.872276][T18645] Cannot create hsr debugfs directory [ 416.115412][T18645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.129675][T18645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.156014][T18890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3146'. [ 416.260763][T18645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.271392][T18645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.492456][T18645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.507550][T18645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.602039][T18910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3147'. [ 416.628153][T18913] netlink: 'syz.0.3149': attribute type 1 has an invalid length. [ 416.672170][T18896] syzkaller1: entered promiscuous mode [ 416.679716][T18896] syzkaller1: entered allmulticast mode [ 416.805822][T18645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.823253][T18645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.902682][T18911] pim6reg1: entered promiscuous mode [ 416.902789][T18911] pim6reg1: entered allmulticast mode [ 417.301311][T18942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3160'. [ 417.334319][T18645] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 417.357709][T18645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.358572][T18645] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 417.380342][T18645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.389151][T18645] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 417.405859][T18645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.417385][T18645] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.444739][T18645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.763980][T18961] sctp: [Deprecated]: syz.4.3166 (pid 18961) Use of int in maxseg socket option. [ 417.763980][T18961] Use struct sctp_assoc_value instead [ 417.786002][T18645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.815590][T18963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3167'. [ 417.889417][T18959] syzkaller0: entered promiscuous mode [ 417.895450][T18959] syzkaller0: entered allmulticast mode [ 417.913131][T18959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3165'. [ 417.925033][T18967] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3168'. [ 417.925075][T18967] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3168'. [ 418.216315][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 420.484224][T18645] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.576680][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.576809][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.611356][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.611460][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.848663][T18997] FAULT_INJECTION: forcing a failure. [ 420.848663][T18997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.848737][T18997] CPU: 0 UID: 0 PID: 18997 Comm: syz.0.3177 Not tainted syzkaller #0 PREEMPT(full) [ 420.848757][T18997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.848771][T18997] Call Trace: [ 420.848779][T18997] [ 420.848786][T18997] dump_stack_lvl+0xe8/0x150 [ 420.848814][T18997] should_fail_ex+0x410/0x560 [ 420.848847][T18997] _copy_from_user+0x2d/0xb0 [ 420.848867][T18997] __sys_connect+0x155/0x450 [ 420.848897][T18997] ? __pfx___sys_connect+0x10/0x10 [ 420.848933][T18997] ? __pfx_ksys_write+0x10/0x10 [ 420.848966][T18997] __x64_sys_connect+0x7a/0x90 [ 420.848995][T18997] do_syscall_64+0x166/0x520 [ 420.849020][T18997] ? trace_irq_disable+0x3b/0x140 [ 420.849037][T18997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.849071][T18997] ? clear_bhb_loop+0x70/0xc0 [ 420.849092][T18997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.849110][T18997] RIP: 0033:0x7f3caf19e159 [ 420.849126][T18997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.849142][T18997] RSP: 002b:00007f3cb0068028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 420.849161][T18997] RAX: ffffffffffffffda RBX: 00007f3caf425fa0 RCX: 00007f3caf19e159 [ 420.849174][T18997] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000004 [ 420.849189][T18997] RBP: 00007f3cb0068090 R08: 0000000000000000 R09: 0000000000000000 [ 420.849207][T18997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.849218][T18997] R13: 00007f3caf426038 R14: 00007f3caf425fa0 R15: 00007ffe5646ae48 [ 420.849246][T18997] [ 421.112506][T19009] netlink: 'syz.2.3180': attribute type 2 has an invalid length. [ 421.150746][T19009] : entered promiscuous mode [ 421.395452][T19016] __nla_validate_parse: 1 callbacks suppressed [ 421.395502][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'. [ 421.555831][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3182'. [ 421.606451][T19030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3182'. [ 421.724794][T19037] macsec1: entered allmulticast mode [ 421.724823][T19037] veth1_macvtap: entered allmulticast mode [ 421.742168][T19037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3185'. [ 421.799508][T19037] veth1_macvtap (unregistering): left allmulticast mode [ 422.021632][T18645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.053726][T19041] tipc: Enabled bearer , priority 0 [ 422.225200][T19049] FAULT_INJECTION: forcing a failure. [ 422.225200][T19049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.238762][T19049] CPU: 1 UID: 0 PID: 19049 Comm: syz.4.3190 Not tainted syzkaller #0 PREEMPT(full) [ 422.238787][T19049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.238798][T19049] Call Trace: [ 422.238806][T19049] [ 422.238813][T19049] dump_stack_lvl+0xe8/0x150 [ 422.238841][T19049] should_fail_ex+0x410/0x560 [ 422.238872][T19049] _copy_to_user+0x31/0xb0 [ 422.238895][T19049] simple_read_from_buffer+0xe1/0x170 [ 422.238924][T19049] proc_fail_nth_read+0x1bb/0x230 [ 422.238950][T19049] ? common_file_perm+0x20e/0x2b0 [ 422.238971][T19049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.239000][T19049] ? rw_verify_area+0x24a/0x4c0 [ 422.239025][T19049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.239050][T19049] vfs_read+0x213/0xa80 [ 422.239081][T19049] ? __pfx_vfs_read+0x10/0x10 [ 422.239109][T19049] ? l2tp_ip_disconnect+0x79/0x90 [ 422.239221][T19049] ? __sys_connect+0x32f/0x450 [ 422.239251][T19049] ? __pfx___sys_connect+0x10/0x10 [ 422.239283][T19049] ksys_read+0x150/0x270 [ 422.239311][T19049] ? __pfx_ksys_read+0x10/0x10 [ 422.239346][T19049] do_syscall_64+0x166/0x520 [ 422.239372][T19049] ? trace_irq_disable+0x3b/0x140 [ 422.239389][T19049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.239408][T19049] ? clear_bhb_loop+0x70/0xc0 [ 422.239430][T19049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.239448][T19049] RIP: 0033:0x7f982f95e98e [ 422.239466][T19049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 422.239481][T19049] RSP: 002b:00007f983091bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 422.239501][T19049] RAX: ffffffffffffffda RBX: 00007f983091c6c0 RCX: 00007f982f95e98e [ 422.239514][T19049] RDX: 000000000000000f RSI: 00007f983091c0a0 RDI: 0000000000000005 [ 422.239526][T19049] RBP: 00007f983091c090 R08: 0000000000000000 R09: 0000000000000000 [ 422.239537][T19049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.239556][T19049] R13: 00007f982fc26038 R14: 00007f982fc25fa0 R15: 00007ffd641ddae8 [ 422.239587][T19049] [ 422.314000][T19041] syzkaller0: entered promiscuous mode [ 422.314025][T19041] syzkaller0: entered allmulticast mode [ 422.314677][T19041] tipc: Resetting bearer [ 422.494486][T19040] tipc: Resetting bearer [ 422.557269][T19058] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 422.599234][T19060] netlink: 'syz.3.3191': attribute type 39 has an invalid length. [ 423.984304][T19070] xt_NETMAP: bad rangesize 37. [ 425.878649][T19040] tipc: Disabling bearer [ 425.920966][T18645] veth0_vlan: entered promiscuous mode [ 425.944224][T18645] veth1_vlan: entered promiscuous mode [ 426.101658][T18645] veth0_macvtap: entered promiscuous mode [ 426.112844][T18645] veth1_macvtap: entered promiscuous mode [ 426.175242][T19079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3197'. [ 426.180018][T19079] netlink: 'syz.4.3197': attribute type 1 has an invalid length. [ 426.254894][T19082] syzkaller0: entered promiscuous mode [ 426.263514][T19082] syzkaller0: entered allmulticast mode [ 426.436934][T19100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3197'. [ 426.468511][T19101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3200'. [ 426.481023][T19098] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3200'. [ 426.595495][T19095] bond7: (slave veth13): Enslaving as an active interface with a down link [ 426.614487][T19081] veth0_virt_wifi: entered promiscuous mode [ 426.619727][T19081] veth0_virt_wifi: left promiscuous mode [ 426.654795][T19079] bond7: (slave veth15): Enslaving as an active interface with a down link [ 426.659794][T19100] 8021q: adding VLAN 0 to HW filter on device bond7 [ 426.866693][T19110] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3202'. [ 429.706494][T18645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.727726][T18645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.892107][T10766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.893027][T10766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.893098][T10766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.893129][T10766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.961314][T19132] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3206'. [ 430.071171][ T7597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.071216][ T7597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.222579][ T7598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.222616][ T7598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.408258][T19146] syzkaller0: entered promiscuous mode [ 430.415869][T19146] syzkaller0: entered allmulticast mode [ 430.505978][T19146] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3211'. [ 430.515538][T19148] xt_hashlimit: size too large, truncated to 1048576 [ 430.615967][T19149] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 430.868956][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.883759][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.892509][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.902975][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.914922][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.369951][T19172] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3215'. [ 431.404335][T19169] netlink: 'syz.1.3216': attribute type 12 has an invalid length. [ 431.407558][T19172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3215'. [ 431.408199][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3215'. [ 431.413880][T19169] net_ratelimit: 122 callbacks suppressed [ 431.413897][T19169] openvswitch: netlink: Message has 8 unknown bytes. [ 431.413923][T19169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.642971][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 432.345948][T19218] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3228'. [ 432.520056][T19225] bond11 (unregistering): Released all slaves [ 432.765265][T19230] syzkaller0: entered promiscuous mode [ 432.765302][T19230] syzkaller0: entered allmulticast mode [ 432.778983][T19154] lo speed is unknown, defaulting to 1000 [ 432.845562][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 433.019379][ T52] Bluetooth: hci1: command tx timeout [ 433.110479][T19154] lo speed is unknown, defaulting to 1000 [ 433.334130][T19263] openvswitch: netlink: Multiple metadata blocks provided [ 433.622280][T19278] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 433.622487][T19278] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 433.898110][T19154] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.898291][T19154] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.898440][T19154] bridge_slave_0: entered allmulticast mode [ 433.900624][T19154] bridge_slave_0: entered promiscuous mode [ 433.903791][T19154] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.903913][T19154] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.904332][T19154] bridge_slave_1: entered allmulticast mode [ 433.906006][T19154] bridge_slave_1: entered promiscuous mode [ 433.950508][T19154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.953467][T19154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.034662][T19154] team0: Port device team_slave_0 added [ 434.053326][T19154] team0: Port device team_slave_1 added [ 434.187874][T19154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.197167][T19154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.197224][T19154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.234922][T19154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.234939][T19154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.234963][T19154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.515563][T19154] hsr_slave_0: entered promiscuous mode [ 434.519522][T19154] hsr_slave_1: entered promiscuous mode [ 434.520198][T19154] debugfs: 'hsr0' already exists in 'hsr' [ 434.520216][T19154] Cannot create hsr debugfs directory [ 434.583639][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'. [ 434.592458][T19321] netlink: 'syz.2.3246': attribute type 12 has an invalid length. [ 434.625399][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'. [ 434.856699][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 435.017102][T19344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3249'. [ 435.088051][T19351] netlink: 'syz.0.3251': attribute type 7 has an invalid length. [ 435.097108][ T52] Bluetooth: hci1: command tx timeout [ 435.438714][T19362] pim6reg: entered allmulticast mode [ 435.590352][T19372] netlink: 'syz.1.3255': attribute type 4 has an invalid length. [ 435.627386][T19154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.654254][T19377] netlink: 'syz.1.3255': attribute type 4 has an invalid length. [ 435.771464][T19360] pim6reg: left allmulticast mode [ 435.945732][T19355] syzkaller0: entered promiscuous mode [ 435.945801][T19355] syzkaller0: entered allmulticast mode [ 435.959932][T19359] tipc: Started in network mode [ 435.959981][T19359] tipc: Node identity 62773254680f, cluster identity 4711 [ 435.978026][T19359] tipc: Enabled bearer , priority 0 [ 436.040534][T19378] tipc: Resetting bearer [ 436.160721][T19154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.182065][T19354] tipc: Resetting bearer [ 436.230366][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3257'. [ 436.241442][T19354] tipc: Disabling bearer [ 436.323688][T19154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.500151][T19154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.623126][T19405] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3259'. [ 436.870986][T19428] netlink: 'syz.2.3263': attribute type 1 has an invalid length. [ 437.022473][T19428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.045135][T19433] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 437.059948][T19433] bond2: (slave batadv1): making interface the new active one [ 437.068805][T19433] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 437.100639][T19432] bond2: (slave veth3): Enslaving as an active interface with a down link [ 437.176380][ T52] Bluetooth: hci1: command tx timeout [ 437.535420][T19154] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 437.585777][T19154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.587508][T19154] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 437.613095][T19154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.614302][T19154] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 437.663974][T19154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.667322][T19154] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 437.692834][T19154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.773149][T19470] netlink: 'syz.2.3271': attribute type 1 has an invalid length. [ 437.773191][T19470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3271'. [ 437.811093][T19470] netlink: 'syz.2.3271': attribute type 11 has an invalid length. [ 437.964585][T19154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.011894][T19154] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.028319][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.028445][ T7598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.042749][T19480] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 438.154339][T19480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.171245][T19487] xt_hashlimit: size too large, truncated to 1048576 [ 438.180336][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.180451][ T8288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.755892][T19511] ip6gretap2: entered allmulticast mode [ 438.766514][T19511] batman_adv: batadv0: Adding interface: ip6gretap2 [ 438.766556][T19511] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.766586][T19511] batman_adv: batadv0: Interface activated: ip6gretap2 [ 438.955624][T19523] netlink: 'syz.1.3284': attribute type 1 has an invalid length. [ 439.225185][T19520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.256451][ T52] Bluetooth: hci1: command tx timeout [ 439.402320][ T8288] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 439.980981][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.148036][T19154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.464445][T19569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3292'. [ 440.754974][T19581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3295'. [ 440.837027][T19154] veth0_vlan: entered promiscuous mode [ 440.862078][T19154] veth1_vlan: entered promiscuous mode [ 440.953433][T19154] veth0_macvtap: entered promiscuous mode [ 440.968590][T19154] veth1_macvtap: entered promiscuous mode [ 440.993095][T19585] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 441.042315][T19154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.077450][T19589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3296'. [ 441.121022][T19154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.167278][T12356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.179984][T12356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.286586][ T8288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.295619][ T8288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.585422][T19073] udevd[19073]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 441.655928][T12353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.655976][T12353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.745649][T19621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3302'. [ 441.789104][T10766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.789146][T10766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.157496][T19636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.409840][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 442.421047][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 442.426370][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 442.442956][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 442.451206][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 442.569552][T19657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3311'. [ 442.586286][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3311'. [ 442.756917][T19665] netlink: 'syz.2.3312': attribute type 2 has an invalid length. [ 442.830553][T19670] xt_hashlimit: size too large, truncated to 1048576 [ 443.358692][T19651] lo speed is unknown, defaulting to 1000 [ 443.475307][T19651] lo speed is unknown, defaulting to 1000 [ 443.587096][T19665] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 443.750162][T19651] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.757967][T19651] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.765810][T19651] bridge_slave_0: entered allmulticast mode [ 443.773831][T19651] bridge_slave_0: entered promiscuous mode [ 443.783078][T19651] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.790605][T19651] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.790783][T19651] bridge_slave_1: entered allmulticast mode [ 443.808361][T19651] bridge_slave_1: entered promiscuous mode [ 443.854026][T19651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.865823][T19651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.902629][T19651] team0: Port device team_slave_0 added [ 443.905979][T19651] team0: Port device team_slave_1 added [ 443.980409][T19651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.980452][T19651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.980475][T19651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.983404][T19651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.983417][T19651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.983440][T19651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.075027][T19651] hsr_slave_0: entered promiscuous mode [ 444.078304][T19651] hsr_slave_1: entered promiscuous mode [ 444.079144][T19651] debugfs: 'hsr0' already exists in 'hsr' [ 444.079162][T19651] Cannot create hsr debugfs directory [ 444.536518][ T52] Bluetooth: hci4: command tx timeout [ 445.822230][T19673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.887644][T19651] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.904085][T19651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.905215][T19651] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.950298][T19651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.963971][T19651] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.985023][T19651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.990781][T19651] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.062950][T19651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.073231][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3321'. [ 446.109295][T19728] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.3319'. [ 446.118924][T19728] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.3319'. [ 446.129194][T19712] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.3319'. [ 446.129317][T19712] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.3319'. [ 446.142034][T19710] bond3: option miimon: invalid value (18446744072900873176) [ 446.142058][T19710] bond3: option miimon: allowed values 0 - 2147483647 [ 446.170144][T19720] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.3319'. [ 446.170279][T19720] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.3319'. [ 446.170648][T19710] bond3 (unregistering): Released all slaves [ 446.186722][T19712] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.3319'. [ 446.186833][T19712] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.3319'. [ 446.197895][T19720] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.3319'. [ 446.284384][T19718] hsr_slave_1 (unregistering): left promiscuous mode [ 446.425337][T19740] xt_LOG: level 9 >= 8 [ 446.573526][T19747] x_tables: duplicate underflow at hook 2 [ 446.573627][T19747] x_tables: duplicate underflow at hook 2 [ 446.574271][T19747] x_tables: duplicate underflow at hook 2 [ 446.574341][T19747] x_tables: duplicate underflow at hook 2 [ 446.574409][T19747] x_tables: duplicate underflow at hook 2 [ 446.574484][T19747] x_tables: duplicate underflow at hook 2 [ 446.574553][T19747] x_tables: duplicate underflow at hook 2 [ 446.574620][T19747] x_tables: duplicate underflow at hook 2 [ 446.574685][T19747] x_tables: duplicate underflow at hook 2 [ 446.574751][T19747] x_tables: duplicate underflow at hook 2 [ 446.616712][ T52] Bluetooth: hci4: command tx timeout [ 446.638053][T19651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.670120][T19651] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.683010][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.683162][T12356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.716670][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.718090][ T8288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.040349][T12356] IPVS: starting estimator thread 0... [ 447.102862][T19765] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 447.102967][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 447.103142][T19763] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 447.136606][T19764] IPVS: using max 39 ests per chain, 93600 per kthread [ 447.243335][T19772] tipc: Enabled bearer , priority 0 [ 447.312341][T19770] tipc: Disabling bearer [ 447.472542][T19752] lo speed is unknown, defaulting to 1000 [ 447.580518][T19783] netlink: 'syz.0.3334': attribute type 11 has an invalid length. [ 448.117514][T19651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.296001][T19651] veth0_vlan: entered promiscuous mode [ 448.340231][T19651] veth1_vlan: entered promiscuous mode [ 448.345079][T19752] lo speed is unknown, defaulting to 1000 [ 448.700730][ T52] Bluetooth: hci4: command tx timeout [ 448.758950][T19651] veth0_macvtap: entered promiscuous mode [ 448.803977][T19651] veth1_macvtap: entered promiscuous mode [ 448.893015][T19651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.910872][T19651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.958310][T10766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.006417][ T7597] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.006818][ T7597] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.006856][ T7597] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.372955][T10766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.372995][T10766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.612055][ T7597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.612092][ T7597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.760311][T19844] netlink: 'syz.4.3348': attribute type 10 has an invalid length. [ 449.782354][T19844] syz_tun: entered promiscuous mode [ 449.844549][T19844] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 449.892800][ T7597] bond0: (slave bond_slave_0): interface is now down [ 449.911793][ T7597] bond0: (slave bond_slave_1): interface is now down [ 449.911812][ T7597] bond0: (slave syz_tun): interface is now down [ 449.987378][ T7597] bond0: now running without any active interface! [ 450.455757][T19823] lo speed is unknown, defaulting to 1000 [ 450.777969][ T52] Bluetooth: hci4: command tx timeout [ 450.898521][T19870] netlink: 'syz.2.3352': attribute type 1 has an invalid length. [ 451.043953][T19870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 451.147412][T19874] bond3: (slave veth5): Enslaving as an active interface with a down link [ 451.164759][T19876] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 451.171705][T19876] bond3: (slave batadv2): making interface the new active one [ 451.173142][T19876] batadv2: entered promiscuous mode [ 451.184519][T19876] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 451.211372][T19823] lo speed is unknown, defaulting to 1000 [ 451.239656][T19874] bond3 (unregistering): (slave veth5): Releasing active interface [ 451.253150][T19874] bond3 (unregistering): (slave batadv2): Releasing active interface [ 451.262832][T19874] batadv2: left promiscuous mode [ 451.272006][T19874] bond3 (unregistering): Released all slaves [ 451.767558][T19868] lo speed is unknown, defaulting to 1000 [ 451.965903][T19907] only policy match revision 0 supported [ 451.965963][T19907] unable to load match [ 451.990395][T19868] lo speed is unknown, defaulting to 1000 [ 452.762805][T19910] bond3: option miimon: invalid value (18446744072900873176) [ 452.762861][T19910] bond3: option miimon: allowed values 0 - 2147483647 [ 452.774280][T19910] bond3 (unregistering): Released all slaves [ 452.922443][T19914] syzkaller1: entered promiscuous mode [ 452.922486][T19914] syzkaller1: entered allmulticast mode [ 453.182484][T19924] __nla_validate_parse: 11 callbacks suppressed [ 453.182546][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3364'. [ 454.780411][T19894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.219048][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 455.324364][T19969] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3376'. [ 455.324421][T19969] nbd: illegal input index 65508 [ 455.356990][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 455.361466][T19965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3374'. [ 455.605212][T19977] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 455.607316][T19977] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 455.607441][T19977] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 455.685455][T19979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3378'. [ 455.740106][T19980] syzkaller0: entered promiscuous mode [ 455.740150][T19980] syzkaller0: entered allmulticast mode [ 455.833395][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'. [ 455.848892][T19988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3380'. [ 455.923563][T19988] geneve2: entered promiscuous mode [ 455.923606][T19988] geneve2: entered allmulticast mode [ 456.107579][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3383'. [ 456.107623][T19999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3383'. [ 456.155478][T19955] lo speed is unknown, defaulting to 1000 [ 456.301751][T20003] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 456.334006][ T52] block nbd5: Receive control failed (result -32) [ 456.753854][T20024] bridge_slave_0: left allmulticast mode [ 456.753885][T20024] bridge_slave_0: left promiscuous mode [ 456.754397][T20024] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.770348][T20024] bridge_slave_1: left allmulticast mode [ 456.770374][T20024] bridge_slave_1: left promiscuous mode [ 456.770584][T20024] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.805310][T20024] bond0: (slave bond_slave_0): Releasing backup interface [ 456.826842][T20024] bond0: (slave bond_slave_1): Releasing backup interface [ 456.841726][T20024] team0: Port device team_slave_0 removed [ 456.852014][T20024] team0: Port device team_slave_1 removed [ 456.853017][T20024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.853038][T20024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.862074][T20024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.862097][T20024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.869570][T20024] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 456.949072][T20029] team0: Mode changed to "loadbalance" [ 456.964177][T19955] lo speed is unknown, defaulting to 1000 [ 457.203459][T20043] netlink: 'syz.2.3395': attribute type 16 has an invalid length. [ 457.215292][T20043] netlink: 'syz.2.3395': attribute type 30 has an invalid length. [ 457.768988][T20070] bond_slave_0: entered promiscuous mode [ 458.175559][T20082] netlink: 'syz.3.3402': attribute type 4 has an invalid length. [ 458.421261][T20101] __nla_validate_parse: 5 callbacks suppressed [ 458.421313][T20101] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3407'. [ 458.475380][T20094] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3406'. [ 459.794912][ T5619] block nbd7: Receive control failed (result -32) [ 459.795557][ T5615] block nbd6: Receive control failed (result -32) [ 459.799620][ T52] block nbd6: Receive control failed (result -32) [ 459.807926][ T5623] block nbd7: Receive control failed (result -32) [ 460.235743][T20172] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 460.261272][T20180] syzkaller1: entered promiscuous mode [ 460.261310][T20180] syzkaller1: entered allmulticast mode [ 460.441694][T20195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3424'. [ 460.502694][T20195] ipvlan0: entered promiscuous mode [ 460.513299][T20195] ipvlan0: left promiscuous mode [ 460.743065][T20205] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 460.835929][T20211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3427'. [ 461.289541][T20173] lo speed is unknown, defaulting to 1000 [ 462.215800][T20173] lo speed is unknown, defaulting to 1000 [ 462.346736][T20264] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3440'. [ 462.656890][T20265] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3439'. [ 462.678882][T20280] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3442'. [ 462.792086][T20228] lo speed is unknown, defaulting to 1000 [ 463.125787][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 463.125829][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 463.200492][T20287] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.201124][T20287] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.415756][T20287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.443064][T20287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.832684][T20287] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 463.894558][T20228] lo speed is unknown, defaulting to 1000 [ 463.918065][T20285] rdma_rxe: rxe_newlink: failed to add bond0 [ 463.966906][T20264] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 464.175489][T20308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3445'. [ 464.175530][T20308] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3445'. [ 464.175700][T20313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3445'. [ 464.176690][T20308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3445'. [ 464.196546][ T7597] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.197087][ T7597] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.197126][ T7597] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.197159][ T7597] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.671171][T20324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3450'. [ 465.092126][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3454'. [ 465.129251][T20341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3455'. [ 465.543003][T20349] tipc: Enabled bearer , priority 0 [ 465.559710][T20346] tipc: Disabling bearer [ 466.434239][T20396] tipc: Started in network mode [ 466.434293][T20396] tipc: Node identity 32c22a3b738e, cluster identity 4711 [ 466.434498][T20396] tipc: Enabled bearer , priority 0 [ 466.488617][T20394] tipc: Disabling bearer [ 466.577284][T20405] netlink: 'syz.4.3473': attribute type 1 has an invalid length. [ 466.607933][T20405] : renamed from dummy0 (while UP) [ 466.622738][T20408] netlink: 'syz.3.3474': attribute type 1 has an invalid length. [ 466.735492][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3478'. [ 466.760740][T20415] netlink: 'syz.4.3478': attribute type 1 has an invalid length. [ 466.857128][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 466.885768][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3477'. [ 466.924418][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3476'. [ 466.959546][T20423] bond1: entered promiscuous mode [ 466.959589][T20423] bond1: entered allmulticast mode [ 466.960424][T20423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.071709][T20427] bridge1: entered promiscuous mode [ 467.071908][T20427] bridge1: entered allmulticast mode [ 467.080041][T20427] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 467.088781][ T7598] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 467.155316][T20415] bridge2: entered promiscuous mode [ 467.155518][T20415] bridge2: entered allmulticast mode [ 467.159539][T20415] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 467.197502][T10766] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 467.398332][T20453] netlink: 'syz.1.3486': attribute type 13 has an invalid length. [ 467.398370][T20453] netlink: 'syz.1.3486': attribute type 12 has an invalid length. [ 467.448001][T20452] tipc: Enabled bearer , priority 0 [ 467.553596][T20449] tipc: Disabling bearer [ 467.584022][T20461] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 468.613174][T20501] tipc: Enabled bearer , priority 0 [ 468.620434][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.698637][T20500] tipc: Disabling bearer [ 468.776576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.805053][T20513] Bluetooth: hci0: unsupported parameter 512 [ 468.811599][T20513] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 469.657348][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.828852][ T31] audit: type=1800 audit(1788900455.355:15): pid=20539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3509" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A20 dev="tmpfs" ino=242 res=0 errno=0 [ 470.703669][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.204361][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.741006][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.979289][T17340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.788446][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.493644][T20509] macsec0: entered promiscuous mode [ 473.493678][T20509] hsr0: entered promiscuous mode [ 473.504729][T20509] hsr0: left promiscuous mode [ 473.516887][T20525] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 473.516996][T20525] syzkaller0: linktype set to 8 [ 473.619544][T20552] tipc: Can't bind to reserved service type 0 [ 473.640527][T20549] IPVS: persistence engine module ip_vs_pe_ not found [ 473.712692][T20543] sit0: entered promiscuous mode [ 473.730520][T20543] __nla_validate_parse: 9 callbacks suppressed [ 473.730724][T20543] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3511'. [ 473.816928][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.833117][T20556] tipc: Enabled bearer , priority 0 [ 473.918509][T20555] tipc: Disabling bearer [ 473.995081][T20562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3516'. [ 474.007068][T17340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.077237][T17340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.230725][T20560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3515'. [ 474.243655][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.372834][T20560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.387084][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.541172][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.658006][T20586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3524'. [ 474.755873][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.764585][T20559] udevd[20559]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 474.817081][T20591] netlink: 'syz.1.3526': attribute type 21 has an invalid length. [ 474.825102][T20591] IPv6: NLM_F_CREATE should be specified when creating new route [ 474.833271][T20591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 474.833314][T20591] IPv6: NLM_F_CREATE should be set when creating new route [ 474.833354][T20591] IPv6: NLM_F_CREATE should be set when creating new route [ 474.833376][T20591] IPv6: NLM_F_CREATE should be set when creating new route [ 474.865417][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.895371][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3526'. [ 474.901953][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3526'. [ 475.117028][T20606] tipc: Enabled bearer , priority 0 [ 475.148324][T20605] tipc: Disabling bearer [ 475.228222][T20616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3528'. [ 476.392816][T20684] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 476.455611][T20689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3545'. [ 476.489586][T20684] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3544'. [ 476.694950][T20703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3547'. [ 477.976684][T10847] net_ratelimit: 15 callbacks suppressed [ 477.976735][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.056917][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.148773][T20762] tc action pedit offset must be on 32 bit boundaries [ 478.148824][T20762] tc action pedit offset must be on 32 bit boundaries [ 478.148852][T20762] tc action pedit offset must be on 32 bit boundaries [ 478.148862][T20762] tc action pedit offset must be on 32 bit boundaries [ 478.148869][T20762] tc action pedit offset must be on 32 bit boundaries [ 478.148875][T20762] tc action pedit offset must be on 32 bit boundaries [ 478.148883][T20762] tc action pedit offset must be on 32 bit boundaries [ 478.148890][T20762] tc action pedit offset must be on 32 bit boundaries [ 478.148898][T20762] tc action pedit offset must be on 32 bit boundaries [ 478.148905][T20762] tc action pedit offset must be on 32 bit boundaries [ 478.148924][T20762] 0: reclassify loop, rule prio 0, protocol 800 [ 479.021848][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.743227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.056738][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.120344][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.136338][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.147591][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.228631][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.114942][T20815] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 483.134145][T20815] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 483.145031][T20815] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 483.176629][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.389652][T20859] bond2: option miimon: invalid value (18446744072900873176) [ 483.398413][T20859] bond2: option miimon: allowed values 0 - 2147483647 [ 483.408516][T20859] bond2 (unregistering): Released all slaves [ 483.702776][T20879] __nla_validate_parse: 10 callbacks suppressed [ 483.703058][T20879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3584'. [ 483.739848][T20885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.740179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.744564][T20879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3584'. [ 483.747660][T20885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.874319][T20887] bond1: option ad_user_port_key: invalid value (65535) [ 483.883388][T20887] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 483.899424][T20887] bond1 (unregistering): Released all slaves [ 484.093521][T20900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.138628][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.216879][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.526762][T20883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.529005][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.545938][T20883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.548989][T20883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.877240][T20934] bond2: option miimon: invalid value (18446744072900873176) [ 484.884926][T20934] bond2: option miimon: allowed values 0 - 2147483647 [ 484.903885][T20934] bond2 (unregistering): Released all slaves [ 484.998975][T20945] netlink: 'syz.1.3599': attribute type 34 has an invalid length. [ 484.999018][T20945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3599'. [ 485.069535][T20945] bond1: option lacp_strict: invalid value (7) [ 485.305064][T20945] bond1 (unregistering): Released all slaves [ 485.689627][T20941] lo speed is unknown, defaulting to 1000 [ 485.967247][T20961] Cannot find set identified by id 0 to match [ 486.142072][T20968] netlink: 'syz.4.3607': attribute type 1 has an invalid length. [ 486.636525][T20986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3611'. [ 486.884849][T20941] lo speed is unknown, defaulting to 1000 [ 486.913131][T20981] bridge0: port 3(bond0) entered blocking state [ 486.918239][T20981] bridge0: port 3(bond0) entered disabled state [ 486.918424][T20981] bond0: entered allmulticast mode [ 486.918441][T20981] bond_slave_0: entered allmulticast mode [ 486.918457][T20981] bond_slave_1: entered allmulticast mode [ 486.924208][T20981] bond0: entered promiscuous mode [ 486.924387][T20981] bond_slave_1: entered promiscuous mode [ 487.051935][T20986] hsr_slave_1 (unregistering): left promiscuous mode [ 487.322503][T21001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3615'. [ 487.322544][T21001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3615'. [ 487.359152][T21003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3616'. [ 487.822867][T21019] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 487.822927][T21019] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 487.823794][T21019] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 487.843242][T21019] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 487.933836][T21019] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 488.054059][T21027] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3623'. [ 488.064336][T21027] bond_slave_0: entered promiscuous mode [ 488.308223][T13365] net_ratelimit: 5 callbacks suppressed [ 488.308272][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.380945][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.420615][ T8288] smbdirect: ib_dev[syz2] removed [ 488.561533][T21035] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3625'. [ 488.710285][T21046] ÿÿÿ: renamed from bond_slave_0 [ 488.722431][T21046] xt_hashlimit: size too large, truncated to 1048576 [ 489.058260][T21065] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3631'. [ 489.113723][T21073] netlink: 'syz.4.3635': attribute type 4 has an invalid length. [ 489.196350][T21072] syzkaller0: entered promiscuous mode [ 489.196591][T21072] syzkaller0: entered allmulticast mode [ 489.720046][T21095] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 490.117495][T21111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3648'. [ 490.141675][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'. [ 490.141720][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'. [ 490.141750][T21111] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3648'. [ 490.437082][T21133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3656'. [ 490.484230][ T7598] IPVS: starting estimator thread 0... [ 490.484404][T21129] netlink: 'syz.0.3655': attribute type 8 has an invalid length. [ 490.488903][T21131] vlan2: entered allmulticast mode [ 490.488921][T21131] bridge1: entered allmulticast mode [ 490.490322][T21133] bridge1: port 1(erspan0) entered blocking state [ 490.492020][T21133] bridge1: port 1(erspan0) entered disabled state [ 490.492166][T21133] erspan0: entered allmulticast mode [ 490.497036][T21133] erspan0: entered promiscuous mode [ 490.503250][T21133] bridge1: port 1(erspan0) entered blocking state [ 490.503354][T21133] bridge1: port 1(erspan0) entered forwarding state [ 490.566577][T21138] IPVS: using max 31 ests per chain, 74400 per kthread [ 490.583885][T21131] bridge1: port 1(erspan0) entered disabled state [ 490.728207][T21131] bridge0: port 1(1¾x9ÿ) entered disabled state [ 490.733546][T21131] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.828912][T21149] veth1_to_bond: entered allmulticast mode [ 490.985285][T21149] veth1_to_bond: entered promiscuous mode [ 491.036342][T21158] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3663'. [ 491.037355][T21159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3663'. [ 491.244586][T21171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3666'. [ 491.468815][T21177] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3668'. [ 494.890991][T21194] netlink: 'syz.4.3672': attribute type 1 has an invalid length. [ 494.971184][T21195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 495.105386][T21151] veth1_to_bond: left promiscuous mode [ 495.167810][T21176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3668'. [ 495.335615][T21195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.362918][T21196] vlan2: entered allmulticast mode [ 495.362956][T21196] bond2: entered allmulticast mode [ 495.374348][T21151] veth1_to_bond: left allmulticast mode [ 495.386991][T21201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3674'. [ 495.864389][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'. [ 495.864441][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'. [ 496.089416][T21226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3678'. [ 496.883540][T21262] netlink: 'syz.3.3687': attribute type 1 has an invalid length. [ 496.983677][T21272] block nbd0: reconnected socket [ 496.983847][T21272] block nbd0: reconnected socket [ 497.029214][T21262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.069420][T21268] bond1: (slave veth3): Enslaving as an active interface with a down link [ 497.087115][ T5619] block nbd0: Receive control failed (result -32) [ 497.092442][ T5623] block nbd0: Receive control failed (result -32) [ 497.176046][T21280] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 497.184874][T21275] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 497.204387][T21275] bond1: (slave batadv1): making interface the new active one [ 497.228251][T21275] batadv1: entered promiscuous mode [ 497.234239][T21275] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 497.353212][T21268] netlink: 'syz.3.3687': attribute type 4 has an invalid length. [ 497.461159][T21262] netlink: 'syz.3.3687': attribute type 4 has an invalid length. [ 497.949939][T21315] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3703'. [ 498.321528][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3711'. [ 498.337325][T21326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3709'. [ 498.400112][T21333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.434105][T21336] macvlan2: entered allmulticast mode [ 498.434419][T21336] bond3: entered allmulticast mode [ 498.434936][T21336] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 498.460937][T21336] team0: Port device macvlan2 added [ 498.502818][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3711'. [ 498.835319][T21357] xt_socket: unknown flags 0x8 [ 499.325950][T21389] macsec1: entered promiscuous mode [ 499.802452][T21416] pim6reg: entered allmulticast mode [ 499.858652][T21416] pim6reg: left allmulticast mode [ 500.033514][T21430] __nla_validate_parse: 6 callbacks suppressed [ 500.043412][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3738'. [ 501.417880][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.733190][T21409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.020171][T21442] netlink: 'syz.3.3740': attribute type 21 has an invalid length. [ 503.020988][T21442] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3740'. [ 503.044562][T21442] netlink: 'syz.3.3740': attribute type 4 has an invalid length. [ 503.044602][T21442] netlink: 'syz.3.3740': attribute type 5 has an invalid length. [ 503.044952][T21442] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3740'. [ 503.119666][T21443] netlink: 'syz.1.3742': attribute type 2 has an invalid length. [ 503.211459][T21453] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3745'. [ 503.411329][T21458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3747'. [ 503.411469][T21458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.573772][T21467] IPVS: length: 220 != 24 [ 503.849555][T21458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.271523][T21474] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 504.352971][T21477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3753'. [ 504.495482][T21478] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.903706][T21512] bridge0: port 3(bond0) entered blocking state [ 504.903887][T21512] bridge0: port 3(bond0) entered disabled state [ 504.904033][T21512] bond0: entered allmulticast mode [ 504.904048][T21512] bond_slave_0: entered allmulticast mode [ 504.904065][T21512] bond_slave_1: entered allmulticast mode [ 504.904078][T21512] syz_tun: entered allmulticast mode [ 504.909605][T21512] bond0: entered promiscuous mode [ 504.909626][T21512] bond_slave_0: entered promiscuous mode [ 504.909791][T21512] bond_slave_1: entered promiscuous mode [ 504.973086][T21516] netlink: 'syz.3.3762': attribute type 1 has an invalid length. [ 504.973611][T21515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3761'. [ 505.183352][T21523] netlink: 'syz.0.3763': attribute type 2 has an invalid length. [ 505.183401][T21523] netlink: 'syz.0.3763': attribute type 2 has an invalid length. [ 505.189394][T21523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3763'. [ 505.231954][T21532] trusted_key: syz.3.3765 sent an empty control message without MSG_MORE. [ 505.990730][T21561] netlink: 'syz.2.3774': attribute type 21 has an invalid length. [ 506.002051][T21561] netlink: 'syz.2.3774': attribute type 6 has an invalid length. [ 506.010820][T21561] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3774'. [ 506.435595][T21589] [ 506.437966][T21589] ====================================================== [ 506.444989][T21589] WARNING: possible circular locking dependency detected [ 506.452026][T21589] syzkaller #0 Not tainted [ 506.456449][T21589] ------------------------------------------------------ [ 506.463472][T21589] syz.3.3776/21589 is trying to acquire lock: [ 506.469544][T21589] ffff88801c2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 506.480140][T21589] [ 506.480140][T21589] but task is already holding lock: [ 506.487511][T21589] ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 506.497637][T21589] [ 506.497637][T21589] which lock already depends on the new lock. [ 506.497637][T21589] [ 506.508032][T21589] [ 506.508032][T21589] the existing dependency chain (in reverse order) is: [ 506.517034][T21589] [ 506.517034][T21589] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 506.524772][T21589] cpus_read_lock+0x42/0x160 [ 506.529879][T21589] static_key_slow_inc+0x12/0x30 [ 506.535356][T21589] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 506.541676][T21589] nbd_genl_foreach_sock+0x265/0x450 [ 506.547549][T21589] nbd_genl_reconfigure+0xbbb/0x1040 [ 506.553347][T21589] genl_family_rcv_msg_doit+0x233/0x340 [ 506.559415][T21589] genl_rcv_msg+0x614/0x7a0 [ 506.564428][T21589] netlink_rcv_skb+0x226/0x4a0 [ 506.569697][T21589] genl_rcv+0x28/0x40 [ 506.574203][T21589] netlink_unicast+0x7bd/0x940 [ 506.579473][T21589] netlink_sendmsg+0x813/0xb40 [ 506.584743][T21589] sock_sendmsg_nosec+0x13a/0x180 [ 506.590279][T21589] ____sys_sendmsg+0x54e/0x850 [ 506.595547][T21589] ___sys_sendmsg+0x2a5/0x360 [ 506.600748][T21589] __x64_sys_sendmsg+0x1b1/0x290 [ 506.606190][T21589] do_syscall_64+0x166/0x520 [ 506.611309][T21589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.617710][T21589] [ 506.617710][T21589] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 506.625341][T21589] __mutex_lock+0x19d/0x1550 [ 506.630452][T21589] nbd_queue_rq+0x373/0xff0 [ 506.635471][T21589] blk_mq_dispatch_rq_list+0x499/0x1990 [ 506.642069][T21589] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 506.648955][T21589] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 506.655442][T21589] blk_mq_run_work_fn+0x16c/0x300 [ 506.660974][T21589] process_scheduled_works+0xc3d/0x1630 [ 506.667026][T21589] worker_thread+0xa47/0xfb0 [ 506.672125][T21589] kthread+0x38b/0x480 [ 506.676695][T21589] ret_from_fork+0x514/0xb70 [ 506.681788][T21589] ret_from_fork_asm+0x1a/0x30 [ 506.687065][T21589] [ 506.687065][T21589] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 506.694258][T21589] __mutex_lock+0x19d/0x1550 [ 506.699363][T21589] nbd_queue_rq+0xc1/0xff0 [ 506.704291][T21589] blk_mq_dispatch_rq_list+0x499/0x1990 [ 506.710350][T21589] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 506.717183][T21589] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 506.723666][T21589] blk_mq_run_work_fn+0x16c/0x300 [ 506.729211][T21589] process_scheduled_works+0xc3d/0x1630 [ 506.735288][T21589] worker_thread+0xa47/0xfb0 [ 506.740412][T21589] kthread+0x38b/0x480 [ 506.744996][T21589] ret_from_fork+0x514/0xb70 [ 506.750091][T21589] ret_from_fork_asm+0x1a/0x30 [ 506.755370][T21589] [ 506.755370][T21589] -> #4 (set->srcu){.+.+}-{0:0}: [ 506.762480][T21589] __synchronize_srcu+0xc9/0x2f0 [ 506.767952][T21589] elevator_switch+0x1e8/0x7b0 [ 506.773336][T21589] elevator_change+0x2fa/0x480 [ 506.778614][T21589] elevator_set_default+0x375/0x440 [ 506.784322][T21589] blk_register_queue+0x3f3/0x4e0 [ 506.789903][T21589] __add_disk+0x6cb/0xe30 [ 506.794746][T21589] add_disk_fwnode+0x100/0x3a0 [ 506.800016][T21589] nbd_dev_add+0x733/0xb60 [ 506.804945][T21589] nbd_init+0x168/0x1f0 [ 506.809705][T21589] do_one_initcall+0x250/0x870 [ 506.814981][T21589] do_initcall_level+0x10a/0x1a0 [ 506.820480][T21589] do_initcalls+0x59/0xa0 [ 506.825321][T21589] kernel_init_freeable+0x29d/0x3e0 [ 506.831111][T21589] kernel_init+0x22/0x1d0 [ 506.835952][T21589] ret_from_fork+0x514/0xb70 [ 506.841048][T21589] ret_from_fork_asm+0x1a/0x30 [ 506.846331][T21589] [ 506.846331][T21589] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 506.854135][T21589] __mutex_lock+0x19d/0x1550 [ 506.859240][T21589] elevator_change+0x1af/0x480 [ 506.864516][T21589] elevator_set_none+0xb5/0x140 [ 506.869879][T21589] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 506.876195][T21589] nbd_start_device+0x189/0xb30 [ 506.881558][T21589] nbd_genl_connect+0x167d/0x1cd0 [ 506.887094][T21589] genl_family_rcv_msg_doit+0x233/0x340 [ 506.893163][T21589] genl_rcv_msg+0x614/0x7a0 [ 506.898179][T21589] netlink_rcv_skb+0x226/0x4a0 [ 506.903451][T21589] genl_rcv+0x28/0x40 [ 506.907945][T21589] netlink_unicast+0x7bd/0x940 [ 506.913215][T21589] netlink_sendmsg+0x813/0xb40 [ 506.918494][T21589] sock_sendmsg_nosec+0x13a/0x180 [ 506.924033][T21589] ____sys_sendmsg+0x54e/0x850 [ 506.929314][T21589] ___sys_sendmsg+0x2a5/0x360 [ 506.934531][T21589] __x64_sys_sendmsg+0x1b1/0x290 [ 506.940001][T21589] do_syscall_64+0x166/0x520 [ 506.945150][T21589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.951568][T21589] [ 506.951568][T21589] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 506.960168][T21589] blk_alloc_queue+0x544/0x690 [ 506.965454][T21589] __blk_mq_alloc_disk+0x194/0x390 [ 506.971073][T21589] nbd_dev_add+0x494/0xb60 [ 506.976001][T21589] nbd_init+0x168/0x1f0 [ 506.980669][T21589] do_one_initcall+0x250/0x870 [ 506.985947][T21589] do_initcall_level+0x10a/0x1a0 [ 506.991424][T21589] do_initcalls+0x59/0xa0 [ 506.996275][T21589] kernel_init_freeable+0x29d/0x3e0 [ 507.002014][T21589] kernel_init+0x22/0x1d0 [ 507.006867][T21589] ret_from_fork+0x514/0xb70 [ 507.011971][T21589] ret_from_fork_asm+0x1a/0x30 [ 507.017250][T21589] [ 507.017250][T21589] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 507.024452][T21589] fs_reclaim_acquire+0x71/0x100 [ 507.029913][T21589] kmem_cache_alloc_noprof+0x5f/0x600 [ 507.035803][T21589] __kernfs_iattrs+0xdd/0x380 [ 507.040997][T21589] kernfs_iop_setattr+0xe6/0x3f0 [ 507.046451][T21589] notify_change+0xbba/0xea0 [ 507.051551][T21589] do_truncate+0x1c2/0x250 [ 507.056510][T21589] path_openat+0x15b5/0x1d60 [ 507.061620][T21589] do_file_open+0x23e/0x4a0 [ 507.066643][T21589] do_sys_openat2+0x115/0x200 [ 507.071849][T21589] __x64_sys_openat+0x138/0x170 [ 507.077222][T21589] do_syscall_64+0x166/0x520 [ 507.082384][T21589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.088824][T21589] [ 507.088824][T21589] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 507.097339][T21589] __lock_acquire+0x15ff/0x2e50 [ 507.102705][T21589] lock_acquire+0x115/0x350 [ 507.107717][T21589] down_read+0x4a/0x330 [ 507.112388][T21589] kernfs_iop_permission+0x7f/0x430 [ 507.118121][T21589] inode_permission+0x3de/0x5f0 [ 507.123484][T21589] cgroup_attach_permissions+0x28e/0x9f0 [ 507.129623][T21589] __cgroup_procs_write+0x24b/0x320 [ 507.135325][T21589] cgroup_threads_write+0x24/0x50 [ 507.140861][T21589] cgroup_file_write+0x331/0x8f0 [ 507.146315][T21589] kernfs_fop_write_iter+0x3a4/0x540 [ 507.152114][T21589] vfs_write+0x612/0xba0 [ 507.156869][T21589] ksys_write+0x150/0x270 [ 507.161708][T21589] do_syscall_64+0x166/0x520 [ 507.166814][T21589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.173222][T21589] [ 507.173222][T21589] other info that might help us debug this: [ 507.173222][T21589] [ 507.183435][T21589] Chain exists of: [ 507.183435][T21589] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 507.183435][T21589] [ 507.197420][T21589] Possible unsafe locking scenario: [ 507.197420][T21589] [ 507.204863][T21589] CPU0 CPU1 [ 507.210211][T21589] ---- ---- [ 507.215560][T21589] rlock(cpu_hotplug_lock); [ 507.220167][T21589] lock(&nsock->tx_lock); [ 507.227090][T21589] lock(cpu_hotplug_lock); [ 507.234097][T21589] rlock(&root->kernfs_iattr_rwsem); [ 507.239464][T21589] [ 507.239464][T21589] *** DEADLOCK *** [ 507.239464][T21589] [ 507.247601][T21589] locks held by syz.3.3776/21589: 5, last CPU#1: [ 507.253918][T21589] #0: ffff888029892b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 507.262967][T21589] #1: ffff888035b38460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 507.271838][T21589] #2: ffff888049939c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 507.281570][T21589] #3: ffffffff8ed9c560 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 507.291309][T21589] #4: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 507.301848][T21589] [ 507.301848][T21589] stack backtrace: [ 507.307724][T21589] CPU: 1 UID: 0 PID: 21589 Comm: syz.3.3776 Not tainted syzkaller #0 PREEMPT(full) [ 507.317076][T21589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.327214][T21589] Call Trace: [ 507.330495][T21589] [ 507.333420][T21589] dump_stack_lvl+0xe8/0x150 [ 507.338011][T21589] print_circular_bug+0x2e2/0x300 [ 507.343035][T21589] check_noncircular+0x12f/0x150 [ 507.347965][T21589] __lock_acquire+0x15ff/0x2e50 [ 507.352807][T21589] ? __lock_acquire+0x6df/0x2e50 [ 507.357736][T21589] ? __bfs+0x153/0x290 [ 507.361795][T21589] ? __pfx_hlock_conflict+0x10/0x10 [ 507.366985][T21589] lock_acquire+0x115/0x350 [ 507.371477][T21589] ? kernfs_iop_permission+0x7f/0x430 [ 507.376852][T21589] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 507.382826][T21589] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 507.388627][T21589] down_read+0x4a/0x330 [ 507.392771][T21589] ? kernfs_iop_permission+0x7f/0x430 [ 507.398152][T21589] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 507.403970][T21589] kernfs_iop_permission+0x7f/0x430 [ 507.409176][T21589] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 507.414978][T21589] inode_permission+0x3de/0x5f0 [ 507.419820][T21589] cgroup_attach_permissions+0x28e/0x9f0 [ 507.425497][T21589] __cgroup_procs_write+0x24b/0x320 [ 507.430705][T21589] cgroup_threads_write+0x24/0x50 [ 507.435762][T21589] ? __pfx_cgroup_threads_write+0x10/0x10 [ 507.441498][T21589] cgroup_file_write+0x331/0x8f0 [ 507.446445][T21589] ? __pfx_cgroup_file_write+0x10/0x10 [ 507.451899][T21589] ? __kmalloc_noprof+0x38c/0x720 [ 507.456924][T21589] ? __pfx_cgroup_file_write+0x10/0x10 [ 507.462374][T21589] kernfs_fop_write_iter+0x3a4/0x540 [ 507.467664][T21589] vfs_write+0x612/0xba0 [ 507.471900][T21589] ? __pfx_vfs_write+0x10/0x10 [ 507.476657][T21589] ? __fget_files+0x2a/0x420 [ 507.481247][T21589] ksys_write+0x150/0x270 [ 507.485570][T21589] ? __pfx_ksys_write+0x10/0x10 [ 507.490418][T21589] do_syscall_64+0x166/0x520 [ 507.495007][T21589] ? trace_irq_disable+0x3b/0x140 [ 507.500030][T21589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.506109][T21589] ? clear_bhb_loop+0x70/0xc0 [ 507.510900][T21589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.516783][T21589] RIP: 0033:0x7ff67579e159 [ 507.521187][T21589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.540787][T21589] RSP: 002b:00007ff6766df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.549202][T21589] RAX: ffffffffffffffda RBX: 00007ff675a25fa0 RCX: 00007ff67579e159 [ 507.557160][T21589] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 000000000000000c [ 507.565292][T21589] RBP: 00007ff67583503b R08: 0000000000000000 R09: 0000000000000000 [ 507.573249][T21589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.581207][T21589] R13: 00007ff675a26038 R14: 00007ff675a25fa0 R15: 00007ffd87315c18 [ 507.589177][T21589] [ 507.833759][T21589] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3776'. [ 507.894225][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3776'. [ 509.256669][ T7597] batadv1: left promiscuous mode [ 509.656706][ T5619] Bluetooth: hci5: command 0x0406 tx timeout