last executing test programs: 2.750406126s ago: executing program 0 (id=1586): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="ff020400020000010000000000000000000000c4", 0x14) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000121, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='xprtrdma_post_recv\x00', 0xffffffffffffffff, 0x0, 0x200000}, 0x18) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711017000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read(r2, &(0x7f0000000400)=""/137, 0x89) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="495300000000ffffffff6700000008000300", @ANYRES32=0x0, @ANYBLOB="0c00800007f7"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x70}, @val={0x8, 0x3, r10}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0xbb77896b9a9c0188) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r8, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x49}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040011}, 0x48080) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) write(r6, &(0x7f0000000040)="05000000010000", 0x7) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x278, 0xe8, 0x340, 0x0, 0xe8, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x2d}, 0x807fff00, 0xffffffff, 'veth0_to_batadv\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x20}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3a}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @broadcast, 0xff000000, 0xff0000ff, 'gretap0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc, 0x2, 0xc}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x4, @dev={0xac, 0x14, 0x14, 0x36}, 0x4e24}}}, {{@ip={@loopback, @remote, 0xff, 0xffffffff, 'syzkaller0\x00', 'virt_wifi0\x00', {}, {}, 0x5c, 0x7, 0x11}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x4, 0x2}, {0xffffffffffffffff, 0x0, 0x6}, 0x2d62, 0x9}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x8, @dev={0xac, 0x14, 0x14, 0x23}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) socket$netlink(0x10, 0x3, 0x8000000004) 2.586838695s ago: executing program 0 (id=1590): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x3, 0xb, 0x6}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x1, [0x8000000000000000, 0x1, 0x8, 0x8, 0xa1e, 0x1ff]}) sendmmsg$inet(r0, &(0x7f0000000080), 0x0, 0x20048800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='f2fs_lookup_extent_tree_start\x00', 0xffffffffffffffff, 0x0, 0xe96}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x81}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000280)=0x5, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000002c0)={0xff, @local, 0x4e23, 0x4, 'nq\x00', 0x1, 0x94, 0x2c}, 0x2c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x34, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}], 0xb0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000003c0)="cc0e4bacaef34afe12b1af20cf9a9eaadeab62fd3057b04aa4e18f3b288c24dd4ed2b0981fa397446fbc48d26d14005947c6060a4f7d4581f291b53a49d73aa21f19a70ae4a00e18b88bf6116fc2392b142a97a9bd42b91910206de5023da669342ed1f8beed5a4e2901649b041dd2e1e7852e1df92ccf25cc41183e6746db740aa864913029890d0e4bafc089f900cb3cef308737af3ba5908ccc596f2851b63726512029c40f50539115ba58935a5c8b90bb152489420d", 0xb8) r6 = accept(r0, &(0x7f0000000480)=@nl=@proc, &(0x7f0000000500)=0x80) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000540)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000580)={0x0, 0xffff}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000600)=@assoc_value={r7, 0x9}, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000006c0)={0x9, &(0x7f0000000640)=[{0x9, 0x3, 0x80, 0x37}, {0x1, 0x7, 0x2, 0x3}, {0x800, 0x8, 0xff, 0x4}, {0x7f, 0xbf, 0x10, 0xd}, {0x6, 0x7, 0x38, 0xffff}, {0x8000, 0x0, 0x6, 0x4}, {0x2, 0xa, 0x2, 0x6}, {0x7, 0x5, 0x8, 0x1}, {0x33bd, 0x0, 0x8, 0xe2c}]}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000740)={'batadv0\x00', @local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r8, 0x0, 0x1000, 0xcf, &(0x7f0000000780)="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", &(0x7f0000001780)=""/207, 0x2, 0x0, 0xac, 0x38, &(0x7f0000001880)="ca990cfa9307a95af1c0c7749e0b6970d5f33df133e5880387fea20a2983cbaff140ec916efac9331b1b16a0ef6f2a76088a9d812a0b8fa3ae1f709e7c61e131965cfadb8ae4a6fe03755f5c25a0155aefbc3947877ee1088d2e08831e7780368f4f05ed5a039ccfec7ad006b64bfee85d4e0b49c7d9efa82474beec49dc5b130c3a7199df43b9a34a26a77a8a37f8652c33d426e3ee7b7ff8014671c281a0290430e1d72b012ced1483976f", &(0x7f0000001940)="4871d6df8e7cf842ba149f5bec8556095a23d42a676c030c611f9eb23b340d1181191cf7379a95330029f8e8a39580ab485eb35226ffe8be", 0x4, 0x0, 0x5}, 0x50) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000001ac0)={'sit0\x00', &(0x7f0000001a00)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0x2, 0x7fffffff, {{0x19, 0x4, 0x1, 0x3, 0x64, 0x66, 0x0, 0x8, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@rr={0x7, 0x13, 0xd1, [@dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010100, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x3c, 0x80, 0x1, 0x2, [{@empty, 0x3}, {@remote, 0x800}, {@multicast2, 0xdc}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0x5}, {@multicast1, 0x4}]}, @noop]}}}}}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000001b00)={@private2, @dev={0xfe, 0x80, '\x00', 0x31}, @loopback, 0x9, 0x4, 0xcd, 0x100, 0x8, 0x80000, r9}) syz_80211_inject_frame(&(0x7f0000001b80)=@broadcast, &(0x7f0000001bc0)=@ctrl_frame=@ack={{}, {0x6}, @broadcast}, 0xa) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001c00)={r8}, 0x8) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000001c80)={0x5, &(0x7f0000001c40)=[{0x7, 0x3, 0x8, 0x1ff}, {0x8, 0x2, 0xe, 0x448}, {0x9, 0x6, 0x28, 0x6c6a}, {0x7fff, 0x1, 0x7e, 0x8ab}, {0x7fff, 0x2, 0x5, 0x40}]}) 2.346306737s ago: executing program 4 (id=1593): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) (async) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x5, 0x8, 0xed, {}, {}, {0x3}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "1b34ba6b471f0adc"}}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) (async) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x5, 0x8, 0xed, {}, {}, {0x3}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "1b34ba6b471f0adc"}}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084060004000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.250869067s ago: executing program 4 (id=1595): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) shutdown(r1, 0x1) write(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000003e000900000000000000000002"], 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getqdisc={0x48, 0x26, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffc, 0xe}, {0xe, 0x3}, {0xc, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000280)=0x80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c000280080002007f0000010f8100000000000000a3785d188bbb00"], 0x48}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.153621839s ago: executing program 4 (id=1598): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}}, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c00018006000600894f00"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendto$netrom(r1, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x4, 0x10000, 0x2, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) (async) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x15, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x40810) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={r7, 0x81, 0x20}, 0xc) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @local}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x400, 0x0, 0x4, {{@in6=@rand_addr=' \x01\x00', @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xeda}, {0x0, 0xa00, 0x40800000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3506, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0x42) 1.746263663s ago: executing program 0 (id=1601): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xd, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) unshare(0x60400) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r2], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4015) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x6c, 0x2c, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0x7}, {0x3, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xffff}, {0x2, 0x29f, 0x8, 0x1, 0xa, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x6c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000027c0)={0x14, r6, 0x731, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x80) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7c86361b4c80000000000000004aa01bffe976c0001"], 0x0) 1.43748681s ago: executing program 0 (id=1604): r0 = socket$inet6(0xa, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5fc42dbd7000df0002000000000000000000", @ANYRES32=r5, @ANYBLOB="04000a000500080004000000"], 0x28}, 0x1, 0x0, 0x0, 0x20001000}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000100026eba100c8000000a00004000000003ff00195cd9024481241bc61ce7056dafe85f5ae7b690c30fc63bfc23e882d83714718bd2d10b5ff32c6eb3056c9a20286204e170a37159cf054f88646ff375b6ccb4230801bb2c60ef0b8394312c516284253d434afbea62b2e55aba2300b090191dd55fd61b2ab7c4a0055f7d60789d84169888560d841df14b2940fdd02a7fcfaa85c4bcb5149843efde1c78d1bc26921bba587d4380847c337a7feee879c809e23b9ec0aaea5e5e6f4c831a79d1e3d96c1895", @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="1d773fde7ec311458ddc5b4565058705a6e73dd13b8484f6f8881fc8b0e18c185b72803dcb55716e28c3713ce57194fa5da4d1b33ff029813487f3aa633ac03689d1f012747e7d613d5a12bbfdd6931a9f81ca13558766e2a73023426a31a7db7298556d99ab627ecdd4f76e19d7dedde177fd21023be2830e80697c8803ded4afbb492e44964ce1ed33ba44dbeaa8eb21b66de90ba6c7770c939036b059d655d5ff972871d4a525304a404b758ad570966ff7418c8640e95b41f76cfd994923cd75125922b40a825097bdc7d7dccaa337e8fb7e2d422e4ee4dbf5eba15f88ef949c81b2bc5969ee7eb95ee66bfcb46ea99686f1d084fafaf9"], 0x190) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0x80, "aa98cfa33a081b49d1ee06f65d4521cc7d48ee9108f28484be3b5d8bb431b805e970dbb3ccbbfcbf08335db531b3c5b397e94dd8c0022c32dc743245f961dddd3a0bce70647f556017df847437c7f75b4aeff6d939bfee4b8b1ec8fdef917b85c5e9338132f4aa755c1354687e76fab8698fe0eefa77681965d7ea7e0cdf215c"}, &(0x7f0000000480)=0x88) setsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={r9, 0x9}, 0x8) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x8100, 0xa, 0x0, @opaque="4c0f"}}}}}}, 0x30) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f00000001c0), 0x4) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r12, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="181fb35f", @ANYRES16=r13, @ANYBLOB="01002abd7000fedbdf250500000008000400e100000008000500835f00009000038008000500ac1414bb080003000000000014000600000000000000000000000000000000001400020067656e657665300000000000000000001400020076657468315f6d61637674617000000014000600fe8800000000000000000000000001011400060020010000000000000000000000000002060007004e210000060007004e220000060007004e2200001800038014000600fe880000000000000000000000000001280001800c0007001500000017000000080009001b000000080005000300000008000800010000000800040008000000340001800c0007000d0000000600000008000b007369700006000100020000000700060073680000090006006e6f6e65000000006c00038014000600fc0100000000000000000000000000000500080008000000060007004e22000005000800060000001400060000000000000000000000ffff6401010008000500ac1414aa0800030000000000060007004e2100000800030001000000050008000900000008000400ff7f00003c00018006000200000000000800090049000000060004004e230000060001000a00000008000b007369700008000500040000000800050004000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x4040}, 0x800) setsockopt$inet_tcp_int(r11, 0x6, 0x1e, &(0x7f0000000880)=0xfffffffc, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f00000004c0), &(0x7f0000000240)=0xfe29) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) 1.210783582s ago: executing program 3 (id=1607): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000a1403090000000000000000080001"], 0x20}}, 0x0) 1.158218981s ago: executing program 2 (id=1609): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8936, 0x0) (async) ioctl(r0, 0x8936, 0x0) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x9, 0x8, 0xd}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000000000000000100032000affffe6000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 1.046916591s ago: executing program 1 (id=1610): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x7, 0x9, 0x6, 0xb9d0, 0xd, 0x7}, {0x10000, 0x8, 0x3, 0x0, 0x888, 0x400}], ['\x00', '\x00']}) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800fc80", @ANYRES16=0x0, @ANYBLOB="040029bd7000fedbdf250c000000040001800c0002800800050001000000080006000300000008000400830000000c0002800800040008000000080005000300000020000280140001006401010000000000000000000000000006000e004e220000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x14) sendto$packet(r0, &(0x7f0000000000)="10204305", 0x5e0, 0x0, &(0x7f0000000340)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @local}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000280)=0x440, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb88a80000810000000800450000b00a000000002f9078ac1e0001e0000001000086dd009c907801000000000000003532f52517ba86dee7cd24c95eb3fea09ea82bcbe720dbd4619e9d952c70"], 0xca) 1.031572578s ago: executing program 2 (id=1611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf6f, 0x70}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd2c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1285}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x35e}]}, 0x40}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 960.222996ms ago: executing program 3 (id=1612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x4}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x1}]}}}]}, 0x44}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x403, @any, 0x0, 0x1}, 0xe) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r3, 0x24, 0x0, 0xffffffffffffffff, @void, @value}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000300), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x7, &(0x7f0000000140)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @alu={0x4}, @exit], {0x95, 0x2}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x42, 0xa01, 0xffffffff, 0x0, {0xb}, [@generic="39d8e6b8f901"]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x800) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xe0, &(0x7f0000000000), &(0x7f0000000280)=0x4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0706020000000400000027000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x48}}, 0x0) 787.536698ms ago: executing program 2 (id=1613): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000900)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendto$l2tp(r3, &(0x7f0000000000)="d0f9527847a14bd05b80b859c94afb50724b9c621291cb4c47eb3f37", 0x1c, 0x404c011, &(0x7f0000000040)={0x2, 0x0, @multicast1, 0x3}, 0x10) 706.347113ms ago: executing program 1 (id=1614): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x1805, "8ad456", 0x3}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000080000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf0600000000000000007134cf6e342200a0e408e8d8ef075c0100000000000000cb090000001fb791643a7c9fd68775730d16a4683f5aeb4edbe74fb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffecf5b42a9ecbee5de6ccd48dd68adbef3d93452a000000000000000000000000000000efa100000000003e1d26b3f031705ca8ca48b0328bfc2af310e666deff42f084af6d8f604d44156e0e46c0332291", 0xf9}], 0x1, 0x0, 0x0, 0x7400}, 0x1009) 683.861265ms ago: executing program 3 (id=1615): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02007db1fe23362135beb10000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000300"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) 661.772271ms ago: executing program 4 (id=1616): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) write$bt_hci(r4, &(0x7f0000000940)=ANY=[], 0x6) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8d}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x4008000) connect$802154_dgram(r3, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) 610.363048ms ago: executing program 1 (id=1617): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x2, @empty, 'wlan0\x00'}}, 0x1e) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 552.056226ms ago: executing program 1 (id=1618): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3052, 0xffffffffffffffff, 0x2000) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="44010000", @ANYRES16=r4, @ANYBLOB="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"], 0x144}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x4000000, {0x0, 0x0, 0x0, r5, {}, {}, {0x6}}}, 0x24}}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r10, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0xa6ff, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) syz_emit_ethernet(0xa6, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbaaaaaaaaaaa86dd5ff2000000873a0000000000000ce00000aaff02000000000000000000000000000186009078000004000000000000000000030abd3e6d4706595b80a80300378927fc503b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c405000000df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af03020001000000050000000026000400"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/236, 0x46, 0xec, 0x6, 0x0, 0x0, @void, @value}, 0x28) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r11, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="545b0000180001000101000000000000020000000000000900000000060015000400000014001680100008800c000280080001804024230b705ce5a31aabeaa1a3f5283cbd4f133fed5dafa63d7caebca81fcbf74a3cf7d515ff29bbca7b"], 0x38}}, 0x844) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) syz_emit_ethernet(0x11b5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/4707], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) 462.120026ms ago: executing program 2 (id=1619): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0xc050) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4095}, 0x4800) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000140)=""/20, 0x14}], 0x2}, 0x40010020) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3ec, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0xe0}, 0x40) 414.155766ms ago: executing program 3 (id=1620): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x4}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="670600000000fbdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d300000a7008e00020000000c008f0001000000000000000c009000a700000000000000d16ff1bbfe2686c39c9ec96d2c17b6aa8b05f791d6252bf1a04b61a99180cfdde1c3e0a4976a419ca883f275fc89daba18b08806a802e2067276bca2ab6a3be09414425b64650ef5c988a2d98bdbd1ba4442de1531c428f4f876e7556eff301573b9173e82d881ef4c5dd9709420f3294106cd5ca9a0013253e8dfaa628ca00aa4e76c4a2c0e8bbd"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4112, 0x1010}, {&(0x7f0000000500)=""/124}], 0x8) (async) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r4, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) (async) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {0xf}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0xfffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x203], [0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x7}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) 412.959394ms ago: executing program 4 (id=1621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001"], 0x30}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 412.698614ms ago: executing program 0 (id=1622): syz_emit_ethernet(0x2a, &(0x7f0000000580)={@remote, @dev, @val={@val, {0x8906}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000a1403090000000000000000080001"], 0x20}}, 0x0) 328.36952ms ago: executing program 2 (id=1623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x6, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x22020400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x303202, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) tee(r2, r1, 0x1, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x1000, r3}, 0x38) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@empty, 0x42, r5}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6, 0x1, 0xffffffff, 0x40200, r3, 0x7, '\x00', r5, r6, 0x1, 0x3, 0x1, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9, 0xfff8, 0x20}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 296.362419ms ago: executing program 4 (id=1624): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="d1", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40080) sendto$inet6(r0, &(0x7f0000000140)="e865bf989e70cf4cdb2acb33fb0ed36739bc0f11b5a7dc595b9c8fea616babdd21558df962b9de2fd9c6c8cd0299934c27841caf35523fc55d76df896b1d94e93bd85192fedba59da3973a315c7ca652f3745c2307d1a5351fcef2e82ec22f2983db4eb445d928605e601b2858688a4a935dd03396a85efa21a2c2da76ee817b0bd1c1dfc3c0ab2e09ad7d031c818c971ca59203d96b8331930198443764a3f44cd26247b8df84e3fab63d6a9c", 0xad, 0x10, &(0x7f00000000c0)={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, 0x1c) shutdown(r0, 0x1) 222.179267ms ago: executing program 2 (id=1625): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x4c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r3, @ANYRES32], 0x1c}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5068b, 0x24}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3e}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x40}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xad87}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 221.751009ms ago: executing program 1 (id=1626): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, 0x0, 0x26, 0x0, 0x1, 0x5, 0x0, @void, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x21, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x22c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 197.39567ms ago: executing program 0 (id=1627): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080)={0x1d, r4}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) recvmsg$can_bcm(r5, &(0x7f0000000b00)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/250, 0xfa}, {0x0}, {0x0}], 0x3}, 0x2200) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc989632", 0x40}, {&(0x7f00000001c0)="550bbbec2b28850d", 0x8}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}], 0x1, 0x0) recvmsg$can_bcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) sendto$inet6(r8, &(0x7f0000000880)="a4677dfc2133806eecf49820871b9e6af2e2325e831650ffb3435808817402cc9bc82ce582227afe5745064be656fa3aaa4e174b3d0b4b35f9151e6d3cf0094ff0d42a430b95cd5bd4ea764a65aee8de0a481210636019ed31fca4bb94545ebf775e4533531192639968e36e29eab040195c8e5cf4a15c9a47dc3a8e4a30a91b972e49ade38da02e56d52bc4b9310f897a673b0e5d6a73d14b50abbe7af7822cd0c05acb2a8c3213ea5d7130e40b528d9cbde993bc10946fbf10a6e4fc4f258e63f5f8b7edb9b34b", 0xc8, 0x41, 0x0, 0x0) close(r0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000580)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f00000000c0)={r10}, &(0x7f0000000140)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00', 0x600}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffffc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r12}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 182.699601ms ago: executing program 3 (id=1628): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x36, 0x0, &(0x7f0000000280)="130200d3781ec47f3ec6df5c379d6963c8b45f3170485ffde61a28423497ef6c3dae15b9856018a3a52b4ca9ae227e4266ee5b791055", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x36, 0x0, &(0x7f0000000280)="130200d3781ec47f3ec6df5c379d6963c8b45f3170485ffde61a28423497ef6c3dae15b9856018a3a52b4ca9ae227e4266ee5b791055", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x3ffe, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) 58.339877ms ago: executing program 1 (id=1629): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002c455d591df0220b7fd2c1488b69cf315c525d46ae120ce1f44aa7b65f53ac70f2848f377254d7516d2916b1e4fb7930402778cd8b8c8a29124d3524111806f634dc30de0d785117dd1709fac8d6c7dd67a9fee81fc59ad3d995e8a567c0344e928b24881f0164a54f16564a116aed93817bf0cc6b2d24d46bf7cd5e7000000000000000009de2f43851b940e700000000004faa95d0d8a6a647897a2226f701dc84fccacd26d278bc6401f7d579ca1678f9d8c0d224538a026e9698b21f01ebc7a1a6242e827694bcd8457384f6", @ANYRES32=r3, @ANYBLOB="0800a000b209000008009f00010000000800260030160000"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x8800) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 3 (id=1630): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x1a8, 0x368, 0x1a8, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @multicast2, 0xff000000, 0x0, 'geneve1\x00', 'dvmrp1\x00', {}, {}, 0xff, 0x2, 0xcd}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x0, 0x2}, {0x2, 0x5, 0xa}, 0x1, 0x5}}}, {{@ip={@rand_addr=0x64010101, @private=0xa010102, 0xff000000, 0xffffff00, 'vlan0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'nicvf0\x00', {0x8}}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff, 0xffffffff, 'sit0\x00', 'batadv0\x00', {0xff}, {}, 0x88, 0x1, 0x18}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x16, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000009000000000000000002000018110000", @ANYRES32=0x1, @ANYBLOB="0000f00000000000b702000014000000b70300000000000085000000830000a444d9dfb2ca25730055090100000000009500000000f8ffff9605ffff0100000095000000000000008520000002000000832525414a502055e07d9ac40ea3ad626ca7db83222fe99c0036143287063297", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x5, 0xca, &(0x7f0000000380)=""/202, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x7, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x0, 0x2, 0x9, 0xc}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r4, 0x0, 0xe9, 0x4d, &(0x7f0000000980)="c798cea7acb1a47f309abc75cd953977f2d789bd88636517c96f4f45d5c36a1c46201b6382d58d63a923bfae8909b905a3e238d3413ad69b211f03dd51e1e0fb3cc1e962d82aec99f21ad3bfa5100e9f4e566f5575d27c923a929098c7f85dc8b6774c0ef086b3341f2f6375528448bddd0e2b2b6fe911d10e4fdcdc1d207365611c34bb085a70772cffbd18fd30ef0539ce473964d69ad2d6220912ce6ea70479361147ffd0cd7884353bcd271930acf8e3119f381a0c681322c16dcaaa520e47583fcf07a7128228f1edf095fecedaa6ba9088aad5df803a8e969948855d84ae9fca7c96e9d6e590", &(0x7f0000000a80)=""/77, 0x7, 0x0, 0xfb, 0x2c, &(0x7f0000000b00)="c80294989ade39197c894c9082a257ec8323db03d6fe72a80983083a87849669fd584fcc7495be5659c0b869e6f162b86785747e56461a9f5e2fe018391f166324415472d6721da4733035328151ff358c753649ba69f6f0b47aadeca2e65dfd29bb422e177fcbd413d15d694048dc82a8c050611326d1f6e8ef710ee3c0c3e70334594c4a294650cf5fd356ac6dbe39229bc88f435cb7efbaa30cfce129fb0dac45c7ea60aba6636fdfb429a589a95d74637b782c24ebd8ede4ea787db62f358f5af1be424c148ebdecb6fdfa74fa4b78de779f77dc236790a7e0d87d15dc05d324c4508baf317da29fb5daf584c56564de56abb352e739791f93", &(0x7f0000000580)="c69995d43445ee19680e2343e7b1f40b448d02af1864b58e4ee89eee9af977fd9902b05e1545a6c7c27b4e8e", 0x0, 0x0, 0x2}, 0x50) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r5 = accept4(r3, 0x0, 0x0, 0x0) close(0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000c80)=""/108, &(0x7f0000000140)=0x6c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000200}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180008ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) close(r5) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000540000000e0001006e657464657673696d000000f10002006e657464657673696d3000617ddf85a019ce720041b8e63361010d26c19d4145ba49920ea1a8ecdcea8c4d610d8ac335f2fed040e8bf89bfb159fc9560053691294743987566dd7c0cf9b24f09d402b58e80aff80fbdbde89221ae99cfb5dfcde5440125f94537e2be2051b7720e2e0a99fbfe7bd9079d0d09c5ebe336b59a62c48ca7b6e8c37a2021b89f98d77acac42926e3e45c49"], 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) getsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) kernel console output (not intermixed with test programs): batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.820994][ T5842] hsr_slave_0: entered promiscuous mode [ 93.828202][ T5842] hsr_slave_1: entered promiscuous mode [ 93.834649][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.843238][ T5842] Cannot create hsr debugfs directory [ 93.880409][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.888046][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.914465][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.983803][ T5848] hsr_slave_0: entered promiscuous mode [ 93.990837][ T5848] hsr_slave_1: entered promiscuous mode [ 93.997538][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.005122][ T5848] Cannot create hsr debugfs directory [ 94.086801][ T5853] hsr_slave_0: entered promiscuous mode [ 94.093259][ T5853] hsr_slave_1: entered promiscuous mode [ 94.101663][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.109796][ T5853] Cannot create hsr debugfs directory [ 94.149427][ T5845] hsr_slave_0: entered promiscuous mode [ 94.156375][ T5845] hsr_slave_1: entered promiscuous mode [ 94.162488][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.171241][ T5845] Cannot create hsr debugfs directory [ 94.281267][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.338439][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.383456][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.428962][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.688920][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.707743][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.727711][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.750061][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.811170][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.825106][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.848826][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.874348][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.886345][ T5151] Bluetooth: hci0: command tx timeout [ 94.998981][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.028184][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.036019][ T5151] Bluetooth: hci2: command tx timeout [ 95.036121][ T5841] Bluetooth: hci1: command tx timeout [ 95.051597][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.090661][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.103577][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.115603][ T5841] Bluetooth: hci3: command tx timeout [ 95.133002][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.193730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.201071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.209490][ T5841] Bluetooth: hci4: command tx timeout [ 95.231946][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.248052][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.255167][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.323001][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.336380][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.351925][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.364031][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.389642][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.421226][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.428398][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.474505][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.487288][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.494443][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.549310][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.630194][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.637646][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.692715][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.699975][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.773732][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.831677][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.882886][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.917731][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.944795][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.951966][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.981261][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.988771][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.010575][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.017773][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.041000][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.048199][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.110542][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.271760][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.302974][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.383659][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.467588][ T5838] veth0_vlan: entered promiscuous mode [ 96.528703][ T5838] veth1_vlan: entered promiscuous mode [ 96.559280][ T5842] veth0_vlan: entered promiscuous mode [ 96.605268][ T5842] veth1_vlan: entered promiscuous mode [ 96.682240][ T5838] veth0_macvtap: entered promiscuous mode [ 96.739623][ T5838] veth1_macvtap: entered promiscuous mode [ 96.822442][ T5842] veth0_macvtap: entered promiscuous mode [ 96.859046][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.879609][ T5842] veth1_macvtap: entered promiscuous mode [ 96.893134][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.924210][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.943637][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.956353][ T5841] Bluetooth: hci0: command tx timeout [ 96.979970][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.989456][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.999481][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.008387][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.044628][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.057437][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.069827][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.111771][ T5848] veth0_vlan: entered promiscuous mode [ 97.119341][ T5841] Bluetooth: hci1: command tx timeout [ 97.125515][ T5841] Bluetooth: hci2: command tx timeout [ 97.144131][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.154892][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.168356][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.198254][ T5841] Bluetooth: hci3: command tx timeout [ 97.210099][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.218939][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.228540][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.237409][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.258447][ T5848] veth1_vlan: entered promiscuous mode [ 97.275792][ T5841] Bluetooth: hci4: command tx timeout [ 97.279105][ T5853] veth0_vlan: entered promiscuous mode [ 97.304404][ T5845] veth0_vlan: entered promiscuous mode [ 97.344318][ T5853] veth1_vlan: entered promiscuous mode [ 97.379834][ T5845] veth1_vlan: entered promiscuous mode [ 97.408242][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.422686][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.495521][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.509736][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.541474][ T5853] veth0_macvtap: entered promiscuous mode [ 97.550634][ T5848] veth0_macvtap: entered promiscuous mode [ 97.578838][ T5848] veth1_macvtap: entered promiscuous mode [ 97.591538][ T5853] veth1_macvtap: entered promiscuous mode [ 97.612016][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.638656][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.655261][ T5845] veth0_macvtap: entered promiscuous mode [ 97.684144][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.701668][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.712086][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.722863][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.736786][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.760645][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.766217][ T5845] veth1_macvtap: entered promiscuous mode [ 97.812097][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.823112][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.833978][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.845648][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.877681][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.888342][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.903035][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.914658][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.927642][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.928168][ T5920] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.940443][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.963892][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.978635][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 97.988343][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.998767][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.003796][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.007767][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.022598][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.039636][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.050903][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.063413][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.081045][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.091327][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.101923][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.113078][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.150969][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.164671][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.175719][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.184488][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.195800][ T5920] bridge_slave_1: left allmulticast mode [ 98.201576][ T5920] bridge_slave_1: left promiscuous mode [ 98.208417][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.220449][ T5920] bridge_slave_0: left allmulticast mode [ 98.227168][ T5920] bridge_slave_0: left promiscuous mode [ 98.232922][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.314220][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.328763][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.339083][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.349610][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.360148][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.370712][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.382962][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.393770][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.406758][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.417209][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.427756][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.439904][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.452544][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.463198][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.488597][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.508558][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.549185][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.558871][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.574153][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.587582][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.597650][ T5925] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.613838][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.615936][ T5925] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 98.627218][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.643608][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.654300][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.939105][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.960581][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.000750][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.007050][ T5932] netlink: 'syz.0.1': attribute type 13 has an invalid length. [ 99.008693][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.030571][ T5932] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1'. [ 99.039542][ T5841] Bluetooth: hci0: command tx timeout [ 99.060703][ T5932] syz_tun: refused to change device tx_queue_len [ 99.078468][ T5932] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 99.196832][ T5841] Bluetooth: hci2: command tx timeout [ 99.202455][ T5841] Bluetooth: hci1: command tx timeout [ 99.233901][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.242086][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.271195][ T5930] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 99.278896][ T5841] Bluetooth: hci3: command tx timeout [ 99.294655][ T5930] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1'. [ 99.314787][ T5936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.356436][ T5841] Bluetooth: hci4: command tx timeout [ 99.411038][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.445159][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.552019][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.595383][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.777851][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.800821][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.813785][ T5945] Zero length message leads to an empty skb [ 100.202987][ T5955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 100.289846][ T5959] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.332221][ T5959] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11'. [ 100.811232][ T5968] xt_CT: No such helper "pptp" [ 100.902552][ T5981] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 100.956928][ T5981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.971898][ T5972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.990540][ T5972] team0: Port device bond1 added [ 100.997311][ T5975] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 101.689932][ T5990] netlink: 'syz.1.17': attribute type 11 has an invalid length. [ 101.731928][ T5990] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17'. [ 101.789695][ T5992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17'. [ 102.016871][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 102.078135][ T5991] netlink: 'syz.2.16': attribute type 23 has an invalid length. [ 102.204021][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 102.684699][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.692659][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.935046][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.977083][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.115057][ T6011] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.125781][ T6011] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.134839][ T6011] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.144355][ T6011] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.265464][ T6030] : renamed from bond0 (while UP) [ 103.334811][ T6037] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.27'. [ 103.524027][ T6039] xt_hashlimit: size too large, truncated to 1048576 [ 104.077083][ T6050] warning: `syz.0.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.397543][ T6061] netlink: 'syz.1.33': attribute type 7 has an invalid length. [ 104.625252][ T6073] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.154576][ T6095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.40'. [ 105.258490][ T6095] veth0_to_bond: entered promiscuous mode [ 105.297830][ T6095] veth0_to_bond: left promiscuous mode [ 105.502500][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.43'. [ 105.641500][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.45'. [ 105.939338][ T6141] netlink: 104 bytes leftover after parsing attributes in process `syz.2.48'. [ 106.227975][ T6157] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 106.252522][ T6161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.53'. [ 106.286144][ T6161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.53'. [ 106.655249][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 107.201981][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 107.211592][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 107.354195][ T6201] vlan2: entered allmulticast mode [ 107.389330][ T6201] erspan0: entered allmulticast mode [ 107.551035][ T6202] vlan2: entered allmulticast mode [ 107.932247][ T6234] netlink: 'syz.0.65': attribute type 10 has an invalid length. [ 108.114013][ T6234] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.150498][ T6234] bond0: (slave team0): Enslaving as an active interface with an up link [ 109.570587][ T30] audit: type=1800 audit(1744581421.281:2): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.68" name="cgroup.controllers" dev="tmpfs" ino=95 res=0 errno=0 [ 109.837403][ T36] wlan1: Trigger new scan to find an IBSS to join [ 109.906911][ T6285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.138105][ T6285] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 110.181041][ T6285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.301732][ T6299] netlink: 'syz.0.79': attribute type 2 has an invalid length. [ 110.315567][ T6299] netlink: 224 bytes leftover after parsing attributes in process `syz.0.79'. [ 110.393981][ T6285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.424138][ T6299] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 110.666619][ T6285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.742006][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 110.773108][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 110.802743][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 110.820256][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 110.830010][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 110.843491][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 110.854210][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 110.868305][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 110.879820][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 111.175059][ T6332] xt_addrtype: ipv6 does not support BROADCAST matching [ 111.183640][ T6285] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.239020][ T6335] sctp: [Deprecated]: syz.1.86 (pid 6335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.239020][ T6335] Use struct sctp_sack_info instead [ 111.253965][ T6285] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.363010][ T6285] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.398725][ T6338] Bluetooth: MGMT ver 1.23 [ 111.411059][ T6285] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.916147][ T6354] bond_slave_0: entered allmulticast mode [ 112.554202][ T6382] bond_slave_0: left allmulticast mode [ 112.604842][ T6382] netlink: 'syz.4.98': attribute type 1 has an invalid length. [ 112.769881][ T6392] gretap1: entered promiscuous mode [ 112.978031][ T6404] netlink: 'syz.4.102': attribute type 6 has an invalid length. [ 113.671848][ T6430] pim6reg: entered allmulticast mode [ 114.077062][ T6446] netlink: 'syz.4.110': attribute type 6 has an invalid length. [ 114.095628][ T6446] netlink: 'syz.4.110': attribute type 7 has an invalid length. [ 114.132400][ T6446] netlink: 'syz.4.110': attribute type 8 has an invalid length. [ 114.313454][ T6455] netlink: 'syz.3.111': attribute type 39 has an invalid length. [ 114.802195][ T3548] wlan1: Trigger new scan to find an IBSS to join [ 115.528585][ T6503] __nla_validate_parse: 54 callbacks suppressed [ 115.528605][ T6503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.122'. [ 115.545211][ T6486] delete_channel: no stack [ 115.600691][ T6505] ªªªªªª: renamed from lo (while UP) [ 115.810676][ T6521] netlink: 'syz.0.125': attribute type 10 has an invalid length. [ 115.888617][ T62] wlan1: Creating new IBSS network, BSSID da:12:02:07:cd:d5 [ 116.193341][ T6521] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.443697][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 116.461972][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.470309][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.519605][ T6527] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 116.617015][ T6543] netlink: 252 bytes leftover after parsing attributes in process `syz.3.128'. [ 117.433379][ T6574] xt_hashlimit: size too large, truncated to 1048576 [ 117.484967][ T6577] netlink: 172 bytes leftover after parsing attributes in process `syz.0.133'. [ 117.575664][ T6581] netlink: 100 bytes leftover after parsing attributes in process `syz.3.134'. [ 118.078349][ T6614] netlink: 42 bytes leftover after parsing attributes in process `syz.3.146'. [ 118.122710][ T6611] Â: renamed from pim6reg1 [ 118.279336][ T6625] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 118.817342][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 118.869214][ T6659] netlink: 36 bytes leftover after parsing attributes in process `syz.3.156'. [ 118.915185][ T6660] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 118.943389][ T6664] netlink: 'syz.0.160': attribute type 6 has an invalid length. [ 118.959936][ T6664] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.160'. [ 119.721343][ T6723] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 119.770239][ T6723] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 119.815289][ T6727] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 120.083993][ T6737] only policy match revision 0 supported [ 120.084018][ T6737] unable to load match [ 120.275181][ T6752] sock: sock_timestamping_bind_phc: sock not bind to device [ 120.411803][ T6765] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 120.448865][ T6765] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 120.512283][ T6777] veth0: entered promiscuous mode [ 120.551696][ T6777] __nla_validate_parse: 40 callbacks suppressed [ 120.551718][ T6777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'. [ 120.586343][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 120.626065][ T6777] veth0 (unregistering): left promiscuous mode [ 120.810641][ T6787] : entered promiscuous mode [ 120.932117][ T6793] veth0_to_bridge: entered promiscuous mode [ 120.968584][ T6792] veth0_to_bridge: left promiscuous mode [ 121.068762][ T6802] pimreg: entered allmulticast mode [ 121.074481][ T6801] tipc: Started in network mode [ 121.091907][ T6801] tipc: Node identity ac14140f, cluster identity 4711 [ 121.123779][ T6801] tipc: New replicast peer: 255.255.255.255 [ 121.157563][ T6801] tipc: Enabled bearer , priority 10 [ 121.166014][ T6802] pimreg: left allmulticast mode [ 121.259605][ T6819] netlink: 'syz.0.195': attribute type 4 has an invalid length. [ 121.415541][ T6826] netlink: 48 bytes leftover after parsing attributes in process `syz.4.197'. [ 121.451748][ T6802] xt_CT: No such helper "netbios-ns" [ 121.476852][ T6827] netlink: 48 bytes leftover after parsing attributes in process `syz.4.197'. [ 121.583781][ T6826] bond0: entered promiscuous mode [ 121.645741][ T6826] bond_slave_0: entered promiscuous mode [ 121.737753][ T6826] bond_slave_1: entered promiscuous mode [ 121.839284][ T6841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.200'. [ 121.899801][ T5889] IPVS: starting estimator thread 0... [ 122.056183][ T6844] IPVS: using max 25 ests per chain, 60000 per kthread [ 122.127628][ T6856] netlink: 'syz.4.202': attribute type 64 has an invalid length. [ 122.180894][ T6862] bridge_slave_0: left allmulticast mode [ 122.246197][ T6862] bridge_slave_0: left promiscuous mode [ 122.292177][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.301674][ T5941] tipc: Node number set to 2886997007 [ 122.328984][ T6862] bridge_slave_1: left allmulticast mode [ 122.344418][ T6862] bridge_slave_1: left promiscuous mode [ 122.357389][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.384873][ T6862] : (slave bond_slave_0): Releasing backup interface [ 122.471826][ T6862] : (slave bond_slave_1): Releasing backup interface [ 122.520694][ T6862] team0: Port device team_slave_0 removed [ 122.553922][ T6862] team0: Port device team_slave_1 removed [ 122.578146][ T6862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.588454][ T6862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.600973][ T6862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.610749][ T6862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.699886][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 122.732027][ T6888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.208'. [ 123.113950][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 123.141222][ T6916] netlink: 'syz.1.214': attribute type 7 has an invalid length. [ 123.189311][ T6916] ieee802154 phy1 wpan1: encryption failed: -22 [ 123.223868][ T3081] hid (null): unknown global tag 0xe [ 123.291745][ T6925] netlink: 248 bytes leftover after parsing attributes in process `syz.4.215'. [ 123.307584][ T3081] hid (null): report_id 0 is invalid [ 123.318449][ T3081] hid (null): unknown global tag 0xe [ 123.324535][ T3081] hid (null): invalid report_size 1765707594 [ 123.331728][ T3081] hid (null): bogus close delimiter [ 123.337192][ T3081] hid (null): global environment stack underflow [ 123.344381][ T3081] hid (null): unknown global tag 0x62 [ 123.350323][ T3081] hid (null): unknown global tag 0xc [ 123.356687][ T3081] hid (null): unknown global tag 0x48 [ 123.362840][ T3081] hid (null): unknown global tag 0xe [ 123.368934][ T3081] hid (null): report_id 26173 is invalid [ 123.374820][ T3081] hid (null): unknown global tag 0xe [ 123.380366][ T3081] hid (null): unknown global tag 0xc [ 123.385900][ T3081] hid (null): unknown global tag 0xd [ 123.451112][ T3081] hid (null): invalid report_size 45652 [ 123.469981][ T6931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'. [ 123.508609][ T3081] hid (null): unknown global tag 0x1a [ 123.729601][ T6951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.819534][ T6943] syzkaller0: entered promiscuous mode [ 123.825635][ T6943] syzkaller0: entered allmulticast mode [ 124.569911][ T3081] hid-generic 0005:07C0:0A0F.0001: unknown global tag 0xe [ 124.577309][ T3081] hid-generic 0005:07C0:0A0F.0001: item 0 2 1 14 parsing failed [ 124.585782][ T3081] hid-generic 0005:07C0:0A0F.0001: probe with driver hid-generic failed with error -22 [ 125.448564][ T6979] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 125.476938][ T6979] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.548550][ T6986] vlan2: entered promiscuous mode [ 125.553634][ T6986] bond0: entered promiscuous mode [ 125.605797][ T6986] bond_slave_0: entered promiscuous mode [ 125.625859][ T6986] bond_slave_1: entered promiscuous mode [ 126.013606][ T7005] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 126.379984][ T7015] __nla_validate_parse: 3 callbacks suppressed [ 126.380005][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 126.639425][ T7019] netlink: 'syz.1.237': attribute type 16 has an invalid length. [ 126.674242][ T7019] netlink: 'syz.1.237': attribute type 17 has an invalid length. [ 127.309719][ T7019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.351416][ T7019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.628639][ T7019] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.638661][ T7019] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.648072][ T7019] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.657687][ T7019] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.724324][ T7019] syz.1.237 (7019) used greatest stack depth: 18408 bytes left [ 128.023808][ T7052] netlink: 76 bytes leftover after parsing attributes in process `syz.4.244'. [ 128.069224][ T7055] SET target dimension over the limit! [ 128.174554][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 128.356995][ T7069] macvtap1: entered promiscuous mode [ 128.378509][ T7069] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 128.390456][ T7069] macvtap1: entered allmulticast mode [ 128.400336][ T7069] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 128.426533][ T7069] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 128.429756][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 128.443775][ T7069] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 128.454563][ T7080] netlink: 44 bytes leftover after parsing attributes in process `syz.0.254'. [ 128.675995][ T7090] bridge_slave_0: entered promiscuous mode [ 128.744146][ T7090] bridge_slave_0: left promiscuous mode [ 128.776011][ T7091] syzkaller1: entered promiscuous mode [ 128.833850][ T7098] netlink: 48 bytes leftover after parsing attributes in process `syz.2.259'. [ 128.880298][ T7098] vlan2: entered allmulticast mode [ 128.890268][ T7098] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 128.900004][ T7105] syz.1.262 uses old SIOCAX25GETINFO [ 128.923001][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 129.022482][ T7109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 129.129535][ T7112] vlan2: entered promiscuous mode [ 129.151934][ T7112] bridge0: entered promiscuous mode [ 129.157428][ T7112] vlan2: entered allmulticast mode [ 129.162805][ T7112] bridge0: entered allmulticast mode [ 129.176649][ T7120] sch_fq: defrate 117 ignored. [ 129.293046][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 129.308383][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 129.325392][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.267'. [ 129.889067][ T7157] netlink: 'syz.2.276': attribute type 4 has an invalid length. [ 130.026369][ T7164] Cannot find add_set index 0 as target [ 130.162082][ T7173] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 130.175846][ T7165] bond0: (slave team0): Releasing backup interface [ 130.213720][ T7165] bridge_slave_0: left allmulticast mode [ 130.234673][ T7165] bridge_slave_0: left promiscuous mode [ 130.252962][ T7165] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.288477][ T7165] bridge_slave_1: left allmulticast mode [ 130.294183][ T7165] bridge_slave_1: left promiscuous mode [ 130.335805][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.364424][ T7165] bond0: (slave bond_slave_0): Releasing backup interface [ 130.388872][ T7165] bond0: (slave bond_slave_1): Releasing backup interface [ 130.405063][ T30] audit: type=1107 audit(1744581442.121:3): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 130.420350][ T7165] team0: Port device team_slave_0 removed [ 130.541687][ T7165] team0: Port device team_slave_1 removed [ 130.549098][ T7165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.560372][ T7165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.573380][ T7165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.584481][ T7165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.602171][ T7165] bond0: (slave wlan1): Releasing backup interface [ 130.889409][ T7211] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 132.240769][ T7227] bridge_slave_1: left allmulticast mode [ 132.246684][ T7227] bridge_slave_1: left promiscuous mode [ 132.252391][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.261763][ T7227] bridge_slave_0: left allmulticast mode [ 132.269852][ T7227] bridge_slave_0: left promiscuous mode [ 132.276798][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.341884][ T7235] __nla_validate_parse: 9 callbacks suppressed [ 132.341900][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'. [ 132.488216][ T7238] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 132.526434][ T7238] netlink: 244 bytes leftover after parsing attributes in process `syz.0.303'. [ 132.761667][ T7250] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 132.803739][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.849084][ T7261] tipc: Started in network mode [ 132.854110][ T7261] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 132.862580][ T7261] tipc: Enabled bearer , priority 10 [ 132.975013][ T7264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.310'. [ 133.614056][ T7296] pim6reg: entered allmulticast mode [ 133.638272][ T7296] pim6reg: left allmulticast mode [ 133.864339][ T7311] netlink: 'syz.2.325': attribute type 4 has an invalid length. [ 133.917265][ T7320] netlink: 'syz.2.325': attribute type 4 has an invalid length. [ 133.976303][ T5922] tipc: Node number set to 11578026 [ 134.093875][ T7326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.224500][ T7337] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 134.566996][ T7348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.334'. [ 134.636192][ T5151] Bluetooth: hci4: command 0x0405 tx timeout [ 134.745907][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 135.128166][ T7386] sctp: [Deprecated]: syz.4.352 (pid 7386) Use of int in max_burst socket option. [ 135.128166][ T7386] Use struct sctp_assoc_value instead [ 135.179315][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 135.212311][ T7389] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 135.234613][ T7389] netlink: 'syz.0.344': attribute type 2 has an invalid length. [ 135.316684][ T7389] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 135.377183][ T7389] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.395516][ T7391] netlink: 72 bytes leftover after parsing attributes in process `syz.3.342'. [ 136.778830][ T7421] netlink: 'syz.3.355': attribute type 12 has an invalid length. [ 136.931435][ T7437] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 136.955038][ T7433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 137.043275][ T7443] TCP: TCP_TX_DELAY enabled [ 137.079407][ T7437] bond1: (slave gretap2): making interface the new active one [ 137.114205][ T7437] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 137.131958][ T7438] netlink: 'syz.4.357': attribute type 3 has an invalid length. [ 137.144176][ T7438] netlink: 666 bytes leftover after parsing attributes in process `syz.4.357'. [ 137.234960][ T7440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.244114][ T7440] bond1: (slave bond2): Enslaving as a backup interface with an up link [ 137.266266][ T7451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.501866][ T7470] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 137.515928][ T7470] netlink: 666 bytes leftover after parsing attributes in process `syz.1.366'. [ 137.684224][ T7488] x_tables: duplicate underflow at hook 2 [ 137.726737][ T7490] netlink: 404 bytes leftover after parsing attributes in process `syz.4.370'. [ 137.772358][ T7490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.370'. [ 137.814073][ T7490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.370'. [ 137.827138][ T7490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.370'. [ 138.143491][ T7516] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.152746][ T7516] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.161654][ T7516] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.171756][ T7516] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.204256][ T7521] netlink: 32 bytes leftover after parsing attributes in process `syz.0.380'. [ 138.252846][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 138.281373][ T7524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.379'. [ 138.329333][ T7524] gretap1: entered promiscuous mode [ 138.524178][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 138.590409][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 138.763932][ T5917] hid-multitouch 0005:0457:0009.0002: unknown main item tag 0x0 [ 138.784204][ T5917] hid-multitouch 0005:0457:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 139.196511][ T7572] 8021q: VLANs not supported on ip_vti0 [ 139.407767][ T7583] SET target dimension over the limit! [ 139.470873][ T7589] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 139.680222][ T5922] IPVS: starting estimator thread 0... [ 139.815471][ T7608] IPVS: using max 27 ests per chain, 64800 per kthread [ 140.354791][ T7638] bridge_slave_0: default FDB implementation only supports local addresses [ 140.593362][ T7648] pim6reg1: entered promiscuous mode [ 140.610378][ T7648] pim6reg1: entered allmulticast mode [ 141.368075][ T7663] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 141.422789][ T7663] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.432176][ T7663] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.441428][ T7663] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.450607][ T7663] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.485088][ T7684] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.822839][ T7700] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.904045][ T7700] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.984296][ T7700] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.067873][ T7700] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.210687][ T7700] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.232324][ T7700] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.272766][ T7700] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.297536][ T7700] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.430542][ T7733] af_packet: tpacket_rcv: packet too big, clamped from 3940 to 3696. macoff=96 [ 142.467257][ T7733] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 142.950261][ T7748] __nla_validate_parse: 10 callbacks suppressed [ 142.950420][ T7748] netlink: 56 bytes leftover after parsing attributes in process `syz.3.447'. [ 143.221517][ T7759] dvmrp0: entered allmulticast mode [ 143.282370][ T7760] netlink: 68 bytes leftover after parsing attributes in process `syz.3.453'. [ 143.301420][ T7765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 143.751937][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 143.772590][ T7789] ipvlan2: entered promiscuous mode [ 143.779518][ T7789] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 143.803063][ T7789] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 143.943784][ T7796] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 144.190227][ T7814] sctp: [Deprecated]: syz.3.467 (pid 7814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.190227][ T7814] Use struct sctp_sack_info instead [ 144.190775][ T7810] caif0 speed is unknown, defaulting to 1000 [ 144.227351][ T7814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.467'. [ 144.234729][ T7810] caif0 speed is unknown, defaulting to 1000 [ 144.252318][ T7810] caif0 speed is unknown, defaulting to 1000 [ 144.285833][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 144.733055][ T7810] infiniband syz2: set down [ 144.738016][ T7810] infiniband syz2: added caif0 [ 144.782444][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.828276][ T7810] RDS/IB: syz2: added [ 144.836164][ T7810] smc: adding ib device syz2 with port count 1 [ 144.842797][ T7810] smc: ib device syz2 port 1 has pnetid [ 144.844404][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.955901][ T7814] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.964956][ T7814] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.977114][ T7814] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.986205][ T7814] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.074826][ T7814] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.084136][ T7814] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.093181][ T7814] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.102100][ T7814] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.130628][ T24] caif0 speed is unknown, defaulting to 1000 [ 145.138447][ T5941] caif0 speed is unknown, defaulting to 1000 [ 145.157111][ T7810] caif0 speed is unknown, defaulting to 1000 [ 145.294681][ T7858] netlink: 104 bytes leftover after parsing attributes in process `syz.2.477'. [ 145.315603][ T7858] netlink: 56 bytes leftover after parsing attributes in process `syz.2.477'. [ 145.516057][ T7865] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 145.791442][ T7864] caif0 speed is unknown, defaulting to 1000 [ 145.810318][ T7871] Cannot find add_set index 0 as target [ 145.818157][ T7873] bridge0: port 1(vlan2) entered blocking state [ 145.824894][ T7873] bridge0: port 1(vlan2) entered disabled state [ 145.837113][ T7873] vlan2: entered allmulticast mode [ 145.875926][ T7873] macvlan1: entered allmulticast mode [ 145.899708][ T7873] vlan2: entered promiscuous mode [ 145.904813][ T7873] macvlan1: entered promiscuous mode [ 145.990237][ T7876] xt_hashlimit: size too large, truncated to 1048576 [ 146.066596][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.485'. [ 146.094694][ T7883] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 146.220918][ T7810] caif0 speed is unknown, defaulting to 1000 [ 146.456314][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 146.479312][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.633123][ T7881] caif0 speed is unknown, defaulting to 1000 [ 146.831185][ T7894] netlink: 'syz.1.489': attribute type 11 has an invalid length. [ 146.897709][ T7810] caif0 speed is unknown, defaulting to 1000 [ 146.925636][ T7894] netlink: 224 bytes leftover after parsing attributes in process `syz.1.489'. [ 147.349987][ T7810] caif0 speed is unknown, defaulting to 1000 [ 147.612578][ T7810] caif0 speed is unknown, defaulting to 1000 [ 147.853795][ T7810] caif0 speed is unknown, defaulting to 1000 [ 149.646737][ T7926] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 149.941365][ T7944] netlink: 'syz.2.499': attribute type 10 has an invalid length. [ 150.046685][ T7944] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.152608][ T7944] : (slave team0): Enslaving as an active interface with an up link [ 150.279593][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 150.497572][ T7964] vlan2: left allmulticast mode [ 150.520826][ T7964] macvlan1: left allmulticast mode [ 150.533834][ T7964] vlan2: left promiscuous mode [ 150.539805][ T7964] macvlan1: left promiscuous mode [ 150.546649][ T7964] bridge0: port 1(vlan2) entered disabled state [ 150.672959][ T7957] netlink: 'syz.3.501': attribute type 6 has an invalid length. [ 150.699871][ T7953] caif0 speed is unknown, defaulting to 1000 [ 150.984996][ T7987] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.051364][ T7990] Cannot find add_set index 0 as target [ 151.333727][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 151.836381][ T8027] FAULT_INJECTION: forcing a failure. [ 151.836381][ T8027] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 151.880920][ T8027] CPU: 1 UID: 0 PID: 8027 Comm: syz.2.519 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 151.880957][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.880974][ T8027] Call Trace: [ 151.880982][ T8027] [ 151.880991][ T8027] dump_stack_lvl+0x241/0x360 [ 151.881038][ T8027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.881066][ T8027] ? __pfx__printk+0x10/0x10 [ 151.881104][ T8027] should_fail_ex+0x424/0x570 [ 151.881143][ T8027] prepare_alloc_pages+0x220/0x610 [ 151.881173][ T8027] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 151.881198][ T8027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 151.881218][ T8027] ? rcu_is_watching+0x15/0xb0 [ 151.881265][ T8027] alloc_pages_mpol+0x339/0x690 [ 151.881298][ T8027] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 151.881335][ T8027] vma_alloc_folio_noprof+0x12d/0x260 [ 151.881365][ T8027] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 151.881403][ T8027] folio_prealloc+0x2e/0x170 [ 151.881434][ T8027] handle_pte_fault+0x2e45/0x61c0 [ 151.881476][ T8027] ? __pfx_handle_pte_fault+0x10/0x10 [ 151.881494][ T8027] ? kstrtouint+0xfc/0x190 [ 151.881524][ T8027] ? __lock_acquire+0xad5/0xd80 [ 151.881577][ T8027] ? rcu_read_lock_any_held+0xbb/0x160 [ 151.881614][ T8027] handle_mm_fault+0x1129/0x1bf0 [ 151.881673][ T8027] ? __pfx_handle_mm_fault+0x10/0x10 [ 151.881720][ T8027] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 151.881773][ T8027] ? exc_page_fault+0x115/0x920 [ 151.881801][ T8027] exc_page_fault+0x45b/0x920 [ 151.881827][ T8027] ? do_syscall_64+0x100/0x230 [ 151.881859][ T8027] asm_exc_page_fault+0x26/0x30 [ 151.881886][ T8027] RIP: 0033:0x7f5637a58b7b [ 151.881908][ T8027] Code: 00 00 00 48 8d 3d 9d 33 19 00 48 89 c1 31 c0 e8 4b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d d1 33 19 00 48 89 34 24 48 8b 14 24 48 8b [ 151.881937][ T8027] RSP: 002b:00007f5638912fb0 EFLAGS: 00010202 [ 151.881962][ T8027] RAX: 0000000000000000 RBX: 00007f5637da5fa0 RCX: 0000000000000000 [ 151.881975][ T8027] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000380 [ 151.881987][ T8027] RBP: 00007f5638914090 R08: 0000000000000000 R09: 0000000000000000 [ 151.881999][ T8027] R10: 0000200000000380 R11: 0000000000000000 R12: 0000000000000001 [ 151.882011][ T8027] R13: 0000000000000000 R14: 00007f5637da5fa0 R15: 00007ffe8fb62398 [ 151.882044][ T8027] [ 151.882325][ T8027] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 152.023315][ T8031] netlink: 56 bytes leftover after parsing attributes in process `syz.0.520'. [ 152.185004][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 152.513481][ T8049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 152.727956][ T8059] netlink: 'syz.4.525': attribute type 4 has an invalid length. [ 152.783903][ T8061] netlink: 'syz.3.526': attribute type 4 has an invalid length. [ 153.410608][ T8086] FAULT_INJECTION: forcing a failure. [ 153.410608][ T8086] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 153.424195][ T8086] CPU: 1 UID: 0 PID: 8086 Comm: syz.0.532 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 153.424223][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.424235][ T8086] Call Trace: [ 153.424242][ T8086] [ 153.424251][ T8086] dump_stack_lvl+0x241/0x360 [ 153.424284][ T8086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.424307][ T8086] ? __pfx__printk+0x10/0x10 [ 153.424339][ T8086] should_fail_ex+0x424/0x570 [ 153.424374][ T8086] _copy_from_user+0x2d/0xb0 [ 153.424403][ T8086] move_addr_to_kernel+0x7f/0x170 [ 153.424430][ T8086] __sys_sendto+0x26a/0x4c0 [ 153.424471][ T8086] ? __pfx___sys_sendto+0x10/0x10 [ 153.424513][ T8086] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 153.424565][ T8086] __x64_sys_sendto+0xde/0x100 [ 153.424597][ T8086] do_syscall_64+0xf3/0x230 [ 153.424640][ T8086] ? clear_bhb_loop+0x45/0xa0 [ 153.424665][ T8086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.424685][ T8086] RIP: 0033:0x7f6dbe38effc [ 153.424704][ T8086] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 153.424720][ T8086] RSP: 002b:00007f6dbc1f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 153.424742][ T8086] RAX: ffffffffffffffda RBX: 00007f6dbc1f4fc0 RCX: 00007f6dbe38effc [ 153.424757][ T8086] RDX: 0000000000000020 RSI: 00007f6dbc1f5010 RDI: 0000000000000003 [ 153.424769][ T8086] RBP: 0000000000000000 R08: 00007f6dbc1f4f14 R09: 000000000000000c [ 153.424793][ T8086] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 153.424805][ T8086] R13: 00007f6dbc1f4f68 R14: 00007f6dbc1f5010 R15: 0000000000000000 [ 153.424836][ T8086] [ 154.563588][ T8080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.529'. [ 154.585516][ T8091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.533'. [ 154.595132][ T8091] netem: unknown loss type 13 [ 154.617961][ T8091] netem: change failed [ 154.807464][ T8102] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 154.974781][ T8120] FAULT_INJECTION: forcing a failure. [ 154.974781][ T8120] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.003547][ T8116] xt_CT: No such helper "netbios-ns" [ 155.010055][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.1.543 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 155.010084][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.010096][ T8120] Call Trace: [ 155.010103][ T8120] [ 155.010112][ T8120] dump_stack_lvl+0x241/0x360 [ 155.010146][ T8120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.010172][ T8120] ? __pfx__printk+0x10/0x10 [ 155.010208][ T8120] should_fail_ex+0x424/0x570 [ 155.010243][ T8120] prepare_alloc_pages+0x220/0x610 [ 155.010271][ T8120] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 155.010295][ T8120] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 155.010336][ T8120] alloc_pages_mpol+0x339/0x690 [ 155.010366][ T8120] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 155.010401][ T8120] vma_alloc_folio_noprof+0x12d/0x260 [ 155.010429][ T8120] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 155.010463][ T8120] folio_prealloc+0x2e/0x170 [ 155.010492][ T8120] do_wp_page+0x14f6/0x5e00 [ 155.010576][ T8120] ? __pfx_do_wp_page+0x10/0x10 [ 155.010608][ T8120] ? __lock_acquire+0xad5/0xd80 [ 155.010633][ T8120] ? do_raw_spin_lock+0x151/0x370 [ 155.010681][ T8120] handle_pte_fault+0xfaf/0x61c0 [ 155.010723][ T8120] ? __pfx_handle_pte_fault+0x10/0x10 [ 155.010754][ T8120] ? __pfx_raw_sendmsg+0x10/0x10 [ 155.010802][ T8120] ? aa_sk_perm+0x96f/0xac0 [ 155.010835][ T8120] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.010870][ T8120] handle_mm_fault+0x1129/0x1bf0 [ 155.010935][ T8120] ? __pfx_handle_mm_fault+0x10/0x10 [ 155.010962][ T8120] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 155.011012][ T8120] ? exc_page_fault+0x115/0x920 [ 155.011039][ T8120] exc_page_fault+0x45b/0x920 [ 155.011064][ T8120] ? do_syscall_64+0x100/0x230 [ 155.011094][ T8120] asm_exc_page_fault+0x26/0x30 [ 155.011113][ T8120] RIP: 0033:0x7fdb12b46cb5 [ 155.011131][ T8120] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 155.011146][ T8120] RSP: 002b:00007fdb1398ede0 EFLAGS: 00010293 [ 155.011164][ T8120] RAX: 0000000000000008 RBX: 00007fdb138d7d60 RCX: 0000000000000000 [ 155.011177][ T8120] RDX: 0000000000000000 RSI: 00007fdb12c4ba3e RDI: 00007fdb138d7d60 [ 155.011190][ T8120] RBP: 00007fdb1398ef00 R08: 0000000000000000 R09: 0000000000000005 [ 155.011202][ T8120] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fdb12c4b5e0 [ 155.011214][ T8120] R13: 0000000000000016 R14: 00007fdb12d7d440 R15: 0000000000000000 [ 155.011246][ T8120] [ 155.011262][ T8120] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 155.481275][ T8132] tipc: Enabling of bearer rejected, failed to enable media [ 155.737669][ T8139] caif0 speed is unknown, defaulting to 1000 [ 155.781842][ T8151] FAULT_INJECTION: forcing a failure. [ 155.781842][ T8151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.837733][ T8151] CPU: 1 UID: 0 PID: 8151 Comm: syz.3.554 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 155.837765][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.837777][ T8151] Call Trace: [ 155.837785][ T8151] [ 155.837795][ T8151] dump_stack_lvl+0x241/0x360 [ 155.837842][ T8151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.837871][ T8151] ? __pfx__printk+0x10/0x10 [ 155.837909][ T8151] should_fail_ex+0x424/0x570 [ 155.837948][ T8151] _copy_to_user+0x31/0xb0 [ 155.837978][ T8151] simple_read_from_buffer+0xc4/0x170 [ 155.838011][ T8151] proc_fail_nth_read+0x1ef/0x260 [ 155.838047][ T8151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.838083][ T8151] ? rw_verify_area+0x246/0x630 [ 155.838103][ T8151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.838136][ T8151] vfs_read+0x21f/0xb90 [ 155.838171][ T8151] ? __pfx___mutex_lock+0x10/0x10 [ 155.838200][ T8151] ? __pfx_vfs_read+0x10/0x10 [ 155.838224][ T8151] ? __fget_files+0x2a/0x420 [ 155.838256][ T8151] ? __fget_files+0x39d/0x420 [ 155.838287][ T8151] ? __fget_files+0x2a/0x420 [ 155.838327][ T8151] ksys_read+0x19d/0x2d0 [ 155.838351][ T8151] ? __pfx_ksys_read+0x10/0x10 [ 155.838379][ T8151] ? do_syscall_64+0xb6/0x230 [ 155.838408][ T8151] do_syscall_64+0xf3/0x230 [ 155.838434][ T8151] ? clear_bhb_loop+0x45/0xa0 [ 155.838458][ T8151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.838478][ T8151] RIP: 0033:0x7f26aa38bb7c [ 155.838496][ T8151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 155.838512][ T8151] RSP: 002b:00007f26ab255030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.838533][ T8151] RAX: ffffffffffffffda RBX: 00007f26aa5a5fa0 RCX: 00007f26aa38bb7c [ 155.838548][ T8151] RDX: 000000000000000f RSI: 00007f26ab2550a0 RDI: 0000000000000004 [ 155.838560][ T8151] RBP: 00007f26ab255090 R08: 0000000000000000 R09: 0000000000000000 [ 155.838572][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.838583][ T8151] R13: 0000000000000000 R14: 00007f26aa5a5fa0 R15: 00007ffe0d4b0ca8 [ 155.838614][ T8151] [ 155.895454][ T8154] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.841259][ T8147] caif0 speed is unknown, defaulting to 1000 [ 158.040478][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 158.196692][ T8191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.564'. [ 158.248015][ T8195] tipc: Enabled bearer , priority 0 [ 158.276377][ T8194] tipc: Disabling bearer [ 158.285745][ T8197] netlink: 'syz.3.565': attribute type 2 has an invalid length. [ 158.293419][ T8197] netlink: 224 bytes leftover after parsing attributes in process `syz.3.565'. [ 158.467706][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 158.699955][ T8203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.768923][ T8200] caif0 speed is unknown, defaulting to 1000 [ 158.817390][ T8209] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 158.831251][ T8209] syzkaller1: linktype set to 825 [ 158.857409][ T8212] tap0: tun_chr_ioctl cmd 2148553947 [ 158.873248][ T8212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.571'. [ 158.943471][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 159.585785][ T8219] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 159.613167][ T8219] caif0 speed is unknown, defaulting to 1000 [ 159.628704][ T8224] netlink: 52 bytes leftover after parsing attributes in process `syz.2.574'. [ 159.655661][ T8229] netlink: 52 bytes leftover after parsing attributes in process `syz.2.574'. [ 160.085873][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 160.252465][ T8237] caif0 speed is unknown, defaulting to 1000 [ 160.804751][ T8247] netlink: 32 bytes leftover after parsing attributes in process `syz.0.580'. [ 160.832078][ T8244] caif0 speed is unknown, defaulting to 1000 [ 162.759800][ T8300] vlan0: entered promiscuous mode [ 163.394714][ T8326] __nla_validate_parse: 5 callbacks suppressed [ 163.394737][ T8326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.605'. [ 163.452810][ T8326] netlink: 96 bytes leftover after parsing attributes in process `syz.4.605'. [ 163.479126][ T8326] netlink: 'syz.4.605': attribute type 50 has an invalid length. [ 163.576588][ T8335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.609'. [ 163.591780][ T8335] netlink: 'syz.3.609': attribute type 5 has an invalid length. [ 163.610169][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 163.636544][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 163.659726][ T8335] macsec1: entered allmulticast mode [ 163.703817][ T8335] dummy0: entered allmulticast mode [ 164.285870][ T8374] macvlan2: entered promiscuous mode [ 164.311612][ T8374] bridge0: entered promiscuous mode [ 164.413758][ T8377] macvlan3: entered promiscuous mode [ 164.518848][ T8388] netlink: 340 bytes leftover after parsing attributes in process `syz.1.624'. [ 164.535458][ T8387] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.624'. [ 165.017823][ T8414] netlink: 60 bytes leftover after parsing attributes in process `syz.1.633'. [ 165.078347][ T8418] tipc: Started in network mode [ 165.085451][ T8418] tipc: Node identity 7f000001, cluster identity 4711 [ 165.107527][ T8418] tipc: Enabled bearer , priority 10 [ 165.252012][ T8430] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 165.270506][ T8433] netlink: 'syz.2.638': attribute type 23 has an invalid length. [ 165.458136][ T8445] bridge2: entered allmulticast mode [ 165.704909][ T8464] netlink: 'syz.2.645': attribute type 30 has an invalid length. [ 165.801380][ T8468] netlink: 188 bytes leftover after parsing attributes in process `syz.0.648'. [ 165.813490][ T8471] netlink: 48 bytes leftover after parsing attributes in process `syz.1.647'. [ 166.226092][ T5922] tipc: Node number set to 2130706433 [ 166.259456][ T8496] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 166.299787][ T8496] caif0 speed is unknown, defaulting to 1000 [ 166.332846][ T8499] trusted_key: syz.1.658 sent an empty control message without MSG_MORE. [ 166.658260][ T8507] gre1: entered allmulticast mode [ 166.704738][ T8518] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 166.735518][ T8494] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 167.894384][ T8572] netlink: 'syz.3.672': attribute type 39 has an invalid length. [ 168.437628][ T8603] netlink: 'syz.3.678': attribute type 49 has an invalid length. [ 168.583763][ T8609] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 168.646103][ T8609] __nla_validate_parse: 6 callbacks suppressed [ 168.646125][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 168.678276][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 168.706438][ T8609] netlink: 'syz.4.680': attribute type 18 has an invalid length. [ 169.123909][ T8625] caif0 speed is unknown, defaulting to 1000 [ 169.993168][ T8643] bond_slave_0: entered allmulticast mode [ 170.130830][ T8654] tap0: tun_chr_ioctl cmd 1074025677 [ 170.147517][ T8654] tap0: linktype set to 6 [ 170.594387][ T8660] caif0 speed is unknown, defaulting to 1000 [ 170.745543][ T8666] netlink: 'syz.4.692': attribute type 21 has an invalid length. [ 170.753491][ T8666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.692'. [ 170.764647][ T8664] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 170.807093][ T24] IPVS: starting estimator thread 0... [ 170.895555][ T8668] IPVS: using max 25 ests per chain, 60000 per kthread [ 171.304285][ T8663] caif0 speed is unknown, defaulting to 1000 [ 171.511657][ T8687] netlink: 84 bytes leftover after parsing attributes in process `syz.3.700'. [ 171.626773][ T8693] netlink: 96 bytes leftover after parsing attributes in process `syz.1.699'. [ 171.639222][ T8686] netlink: 84 bytes leftover after parsing attributes in process `syz.3.700'. [ 171.648339][ T8694] x_tables: duplicate underflow at hook 1 [ 171.821902][ T8698] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 172.293723][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 173.154739][ T8750] netlink: 144 bytes leftover after parsing attributes in process `syz.1.715'. [ 173.801171][ T8777] caif0 speed is unknown, defaulting to 1000 [ 173.807880][ T8780] netlink: 32 bytes leftover after parsing attributes in process `syz.4.726'. [ 174.144621][ T8789] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 174.335600][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 174.375463][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 174.412408][ T8799] netlink: 'syz.1.731': attribute type 4 has an invalid length. [ 174.446611][ T8794] vlan2: entered promiscuous mode [ 174.451735][ T8794] gretap0: entered promiscuous mode [ 174.454626][ T8799] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.731'. [ 174.925607][ T8820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.739'. [ 174.943838][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 175.161007][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 175.173336][ T8831] lo: entered allmulticast mode [ 175.204672][ T8831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.309404][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 175.515547][ T5151] Bluetooth: hci2: command tx timeout [ 175.540143][ T8844] netlink: 32 bytes leftover after parsing attributes in process `syz.3.747'. [ 175.699453][ T8848] caif0 speed is unknown, defaulting to 1000 [ 175.724631][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 175.746788][ T8850] ipt_ECN: cannot use operation on non-tcp rule [ 175.994358][ T8846] caif0 speed is unknown, defaulting to 1000 [ 176.613949][ T8873] Bluetooth: MGMT ver 1.23 [ 176.634342][ T8873] 8021q: VLANs not supported on ip_vti0 [ 176.980648][ T8876] caif0 speed is unknown, defaulting to 1000 [ 177.417084][ T8899] Bluetooth: MGMT ver 1.23 [ 178.070183][ T8923] xt_TCPMSS: Only works on TCP SYN packets [ 178.884696][ T8950] __nla_validate_parse: 6 callbacks suppressed [ 178.884741][ T8950] netlink: 36 bytes leftover after parsing attributes in process `syz.3.776'. [ 178.963280][ T3460] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 179.000921][ T8953] Unsupported ieee802154 address type: 0 [ 179.156101][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'. [ 179.179151][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.780'. [ 179.211450][ T8961] netlink: 'syz.4.780': attribute type 18 has an invalid length. [ 179.365134][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 179.458349][ T8978] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 179.487344][ T8978] netlink: 'syz.3.783': attribute type 2 has an invalid length. [ 179.931701][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 180.222980][ T9010] sctp: [Deprecated]: syz.3.794 (pid 9010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.222980][ T9010] Use struct sctp_sack_info instead [ 180.627974][ T9021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.798'. [ 181.019228][ T9035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.799'. [ 181.332412][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 181.383563][ T9040] netlink: 'syz.4.803': attribute type 21 has an invalid length. [ 181.783822][ T9051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.806'. [ 181.856050][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.806'. [ 183.436240][ T9088] can: request_module (can-proto-0) failed. [ 183.868419][ T9118] FAULT_INJECTION: forcing a failure. [ 183.868419][ T9118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.923092][ T9121] netlink: 'syz.4.827': attribute type 4 has an invalid length. [ 183.930990][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: syz.2.826 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 183.931021][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.931034][ T9118] Call Trace: [ 183.931042][ T9118] [ 183.931051][ T9118] dump_stack_lvl+0x241/0x360 [ 183.931099][ T9118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.931128][ T9118] ? __pfx__printk+0x10/0x10 [ 183.931170][ T9118] should_fail_ex+0x424/0x570 [ 183.931209][ T9118] _copy_from_iter+0x211/0x1c70 [ 183.931243][ T9118] ? __build_skb_around+0x247/0x3d0 [ 183.931280][ T9118] ? __alloc_skb+0x298/0x480 [ 183.931308][ T9118] ? __pfx__copy_from_iter+0x10/0x10 [ 183.931337][ T9118] ? __pfx___alloc_skb+0x10/0x10 [ 183.931377][ T9118] ? skb_put+0x114/0x1f0 [ 183.931417][ T9118] netlink_sendmsg+0x73c/0xcd0 [ 183.931467][ T9118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.931502][ T9118] ? aa_sock_msg_perm+0x91/0x160 [ 183.931539][ T9118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.931567][ T9118] __sock_sendmsg+0x221/0x270 [ 183.931599][ T9118] ____sys_sendmsg+0x523/0x860 [ 183.931631][ T9118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.931650][ T9118] ? __fget_files+0x2a/0x420 [ 183.931687][ T9118] ? __fget_files+0x2a/0x420 [ 183.931740][ T9118] __sys_sendmsg+0x271/0x360 [ 183.931768][ T9118] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.931849][ T9118] ? do_syscall_64+0xb6/0x230 [ 183.931891][ T9118] do_syscall_64+0xf3/0x230 [ 183.931935][ T9118] ? clear_bhb_loop+0x45/0xa0 [ 183.931962][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.931998][ T9118] RIP: 0033:0x7f5637b8d169 [ 183.932025][ T9118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.932041][ T9118] RSP: 002b:00007f5638914038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.932072][ T9118] RAX: ffffffffffffffda RBX: 00007f5637da5fa0 RCX: 00007f5637b8d169 [ 183.932087][ T9118] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000003 [ 183.932101][ T9118] RBP: 00007f5638914090 R08: 0000000000000000 R09: 0000000000000000 [ 183.932114][ T9118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.932142][ T9118] R13: 0000000000000000 R14: 00007f5637da5fa0 R15: 00007ffe8fb62398 [ 183.932191][ T9118] [ 184.301897][ T9130] __nla_validate_parse: 8 callbacks suppressed [ 184.301919][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 184.338434][ T9134] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 184.349297][ T9135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.830'. [ 184.804131][ T9162] hsr0: entered promiscuous mode [ 184.833870][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 184.851283][ T9162] hsr_slave_0: left promiscuous mode [ 184.859472][ T9162] hsr_slave_1: left promiscuous mode [ 184.940167][ T9162] hsr0 (unregistering): left promiscuous mode [ 185.012102][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 185.026594][ T9159] caif0 speed is unknown, defaulting to 1000 [ 185.640943][ T9177] caif0 speed is unknown, defaulting to 1000 [ 185.931143][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'. [ 186.157154][ T9198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.845'. [ 186.304244][ T9185] caif0 speed is unknown, defaulting to 1000 [ 186.401173][ T5841] Bluetooth: hci0: command tx timeout [ 186.717078][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 187.352190][ T9218] netlink: 104 bytes leftover after parsing attributes in process `syz.3.850'. [ 187.383728][ T9218] x_tables: duplicate underflow at hook 1 [ 187.756242][ T9225] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 188.017569][ T9235] tipc: New replicast peer: 172.30.0.2 [ 188.772792][ T9281] caif0 speed is unknown, defaulting to 1000 [ 189.051329][ T9293] vlan2: entered promiscuous mode [ 189.065549][ T9293] gretap0: entered promiscuous mode [ 189.369688][ T9303] netlink: 'syz.4.868': attribute type 1 has an invalid length. [ 189.403899][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 189.494446][ T9305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.546915][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 189.606520][ T9311] netlink: 'syz.1.867': attribute type 303 has an invalid length. [ 189.637266][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 189.721551][ T9311] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.760186][ T9311] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 190.035281][ T9321] netlink: 'syz.3.872': attribute type 39 has an invalid length. [ 190.694259][ T9340] syz_tun: entered allmulticast mode [ 190.735643][ T9340] dvmrp1: entered allmulticast mode [ 190.753133][ T9340] syz_tun: left allmulticast mode [ 190.764648][ T9340] dvmrp1: left allmulticast mode [ 190.912336][ T9347] vxcan3: entered allmulticast mode [ 190.984508][ T9353] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.885'. [ 191.014724][ T9353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.885'. [ 191.119506][ T9353] netlink: 16912 bytes leftover after parsing attributes in process `syz.1.885'. [ 191.532883][ T9374] openvswitch: netlink: Actions may not be safe on all matching packets [ 191.743391][ T9378] caif0 speed is unknown, defaulting to 1000 [ 192.127265][ T9396] pim6reg1: entered promiscuous mode [ 192.132627][ T9396] pim6reg1: entered allmulticast mode [ 192.139637][ T9396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.897'. [ 192.308333][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 192.641146][ T9414] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 192.661784][ T9409] macvlan2: entered promiscuous mode [ 192.697923][ T9409] bridge0: entered promiscuous mode [ 192.704822][ T9409] bridge0: port 3(macvlan2) entered blocking state [ 192.715620][ T9409] bridge0: port 3(macvlan2) entered disabled state [ 192.722494][ T9409] macvlan2: entered allmulticast mode [ 192.730577][ T9409] bridge0: entered allmulticast mode [ 192.739959][ T9409] macvlan2: left allmulticast mode [ 192.745484][ T9409] bridge0: left allmulticast mode [ 192.756131][ T9409] bridge0: left promiscuous mode [ 192.839695][ T9420] IPVS: Scheduler module ip_vs_sip not found [ 193.249661][ T9437] xt_hashlimit: size too large, truncated to 1048576 [ 193.353811][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 193.850698][ T9446] caif0 speed is unknown, defaulting to 1000 [ 194.108677][ T9465] netlink: 'syz.4.916': attribute type 7 has an invalid length. [ 194.126665][ T9465] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 194.250128][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.521895][ T30] audit: type=1800 audit(1744581506.231:4): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.920" name=3199 dev="tmpfs" ino=800 res=0 errno=0 [ 194.743471][ T9480] netlink: 'syz.0.920': attribute type 15 has an invalid length. [ 194.860761][ T9445] caif0 speed is unknown, defaulting to 1000 [ 195.454925][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 195.683871][ T9522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'. [ 195.695981][ T9523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'. [ 195.729313][ T9520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.930'. [ 196.008467][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 196.045480][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 196.072775][ T9530] netlink: 'syz.1.932': attribute type 3 has an invalid length. [ 196.174223][ T9545] netlink: 'syz.4.936': attribute type 21 has an invalid length. [ 196.178139][ T9546] netlink: 277 bytes leftover after parsing attributes in process `syz.0.935'. [ 196.291582][ T9545] netlink: 156 bytes leftover after parsing attributes in process `syz.4.936'. [ 196.318524][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.337540][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.573643][ T9554] netlink: 56 bytes leftover after parsing attributes in process `syz.0.938'. [ 196.625365][ T9554] netlink: 56 bytes leftover after parsing attributes in process `syz.0.938'. [ 196.762135][ T9536] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 196.918840][ T9561] tipc: Enabled bearer , priority 0 [ 197.107733][ T9561] syzkaller0: entered promiscuous mode [ 197.125517][ T9561] syzkaller0: entered allmulticast mode [ 197.131701][ T9561] tipc: Resetting bearer [ 197.584517][ T9557] tipc: Resetting bearer [ 199.284208][ T9557] tipc: Disabling bearer [ 199.300855][ T9589] netlink: 'syz.0.948': attribute type 2 has an invalid length. [ 199.662369][ T9600] xt_CT: No such helper "pptp" [ 200.106594][ T9629] netlink: 'syz.2.958': attribute type 1 has an invalid length. [ 200.114307][ T9629] netlink: 'syz.2.958': attribute type 2 has an invalid length. [ 200.200768][ T9632] caif0 speed is unknown, defaulting to 1000 [ 200.951447][ T9660] __nla_validate_parse: 6 callbacks suppressed [ 200.951479][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 201.017933][ T9662] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 201.031816][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'. [ 201.083062][ T9667] netlink: 428 bytes leftover after parsing attributes in process `syz.3.969'. [ 201.526311][ T9680] netlink: 'syz.3.973': attribute type 10 has an invalid length. [ 201.720357][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.978'. [ 201.772487][ T9700] netlink: 'syz.1.980': attribute type 21 has an invalid length. [ 203.084554][ T9777] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 203.144185][ T9781] openvswitch: netlink: IPv4 tunnel dst address is zero [ 203.182678][ T9779] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 203.396337][ T9799] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1013'. [ 203.421295][ T9799] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1013'. [ 203.947492][ T9830] set match dimension is over the limit! [ 204.050611][ T9830] pim6reg: entered allmulticast mode [ 204.169070][ T9830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1022'. [ 204.576327][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 204.651396][ T9867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1032'. [ 204.804618][ T9876] openvswitch: netlink: Actions may not be safe on all matching packets [ 204.951848][ T9875] vlan0: entered allmulticast mode [ 204.961291][ T9875] macvtap0: entered allmulticast mode [ 205.022081][ T9879] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1034'. [ 205.316146][ T9897] netlink: 'syz.0.1039': attribute type 4 has an invalid length. [ 205.400638][ T9903] netlink: 'syz.1.1042': attribute type 21 has an invalid length. [ 205.455132][ T9903] netlink: 'syz.1.1042': attribute type 4 has an invalid length. [ 205.522295][ T9908] caif0 speed is unknown, defaulting to 1000 [ 205.930993][ T9917] sctp: [Deprecated]: syz.3.1045 (pid 9917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.930993][ T9917] Use struct sctp_sack_info instead [ 206.561744][ T9936] __nla_validate_parse: 3 callbacks suppressed [ 206.561776][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 206.640905][ T9931] netlink: 'syz.3.1048': attribute type 9 has an invalid length. [ 206.668075][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1049'. [ 206.677594][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 206.717663][ T9938] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1049'. [ 206.887140][ T9910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1043'. [ 207.111729][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 207.199813][ T9967] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1055'. [ 207.240467][ T9962] No such timeout policy "syz0" [ 207.575775][ T9982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1057'. [ 208.006174][T10004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1066'. [ 208.118953][T10003] caif0 speed is unknown, defaulting to 1000 [ 208.226680][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1067'. [ 208.422240][T10011] gretap1: left promiscuous mode [ 208.795261][T10011] caif0 speed is unknown, defaulting to 1000 [ 208.901501][T10021] netlink: 'syz.2.1069': attribute type 4 has an invalid length. [ 209.556352][T10039] netlink: 'syz.2.1075': attribute type 1 has an invalid length. [ 209.729799][T10039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.954326][T10014] caif0 speed is unknown, defaulting to 1000 [ 210.311000][T10059] xt_TCPMSS: Only works on TCP SYN packets [ 210.823183][T10036] caif0 speed is unknown, defaulting to 1000 [ 211.732038][T10097] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.905141][T10093] caif0 speed is unknown, defaulting to 1000 [ 212.362769][T10114] __nla_validate_parse: 3 callbacks suppressed [ 212.362788][T10114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1098'. [ 212.396827][T10114] xt_l2tp: missing protocol rule (udp|l2tpip) [ 212.408908][T10116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1098'. [ 213.097858][T10128] tun0: tun_chr_ioctl cmd 1074025677 [ 213.139257][T10128] tun0: linktype set to 823 [ 213.633133][T10141] x_tables: duplicate underflow at hook 2 [ 213.913815][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1108'. [ 214.485219][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1114'. [ 214.582417][T10180] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1116'. [ 214.782268][T10198] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 214.996472][T10204] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1123'. [ 214.997434][T10206] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1123'. [ 215.005703][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 215.032846][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 215.061135][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 215.093716][T10210] 8021q: VLANs not supported on nlmon0 [ 215.267024][T10219] xt_CT: No such helper "netbios-ns" [ 215.366486][T10228] tipc: Failed to remove unknown binding: 66,1,1/0:1664576136/1664576138 [ 215.375166][T10228] tipc: Failed to remove unknown binding: 66,1,1/0:1664576136/1664576138 [ 215.443840][T10228] netlink: 'syz.2.1130': attribute type 10 has an invalid length. [ 215.551413][T10228] : (slave wlan1): Enslaving as an active interface with an up link [ 215.615468][T10236] lo: left allmulticast mode [ 215.833153][T10259] x_tables: duplicate underflow at hook 1 [ 216.229003][T10236] bond_slave_0: left allmulticast mode [ 216.556562][ T5850] Bluetooth: hci2: command tx timeout [ 216.565485][T10236] vlan0: left promiscuous mode [ 216.798555][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 216.804865][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 216.821292][T10236] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.834189][T10236] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.842590][T10236] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.851607][T10236] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.867483][T10236] gretap1: left promiscuous mode [ 216.939260][T10267] xfrm0: entered promiscuous mode [ 216.944832][T10267] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 216.962203][T10283] bridge_slave_1: left allmulticast mode [ 216.972071][T10283] bridge_slave_1: left promiscuous mode [ 216.980130][T10283] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.004645][T10283] bridge_slave_0: left allmulticast mode [ 217.033039][T10283] bridge_slave_0: left promiscuous mode [ 217.039914][T10283] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.142934][T10291] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 217.212871][T10291] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 217.523934][T10315] netlink: 'syz.3.1151': attribute type 13 has an invalid length. [ 217.613936][T10315] dummy0: left allmulticast mode [ 217.624015][T10315] bridge0: left promiscuous mode [ 217.637004][T10315] vlan2: left promiscuous mode [ 217.641915][T10315] gretap0: left promiscuous mode [ 217.678529][T10325] __nla_validate_parse: 2 callbacks suppressed [ 217.678549][T10325] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1156'. [ 217.695815][T10325] netem: invalid attributes len -16 [ 217.701071][T10325] netem: change failed [ 217.800265][T10336] netlink: 'syz.1.1158': attribute type 3 has an invalid length. [ 217.826331][T10339] netlink: 'syz.4.1159': attribute type 1 has an invalid length. [ 217.940261][T10342] caif0 speed is unknown, defaulting to 1000 [ 217.964590][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 218.021450][T10354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1163'. [ 218.068623][T10348] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.077337][T10348] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.085601][T10348] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.093794][T10348] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.114493][T10348] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.123457][T10348] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.133570][T10348] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.142565][T10348] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.268376][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1164'. [ 218.435678][T10369] xt_hashlimit: size too large, truncated to 1048576 [ 218.645562][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 218.864463][T10379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1169'. [ 218.937289][T10383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1170'. [ 219.072645][T10389] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.181532][T10395] No such timeout policy "syz0" [ 219.250659][T10394] bond0: (slave bond_slave_0): Releasing backup interface [ 219.284620][T10394] bond_slave_0: left promiscuous mode [ 219.319556][T10394] bond0: (slave bond_slave_1): Releasing backup interface [ 219.354618][T10394] bond_slave_1: left promiscuous mode [ 219.376530][T10394] team0: Port device team_slave_0 removed [ 219.411625][T10394] team0: Port device team_slave_1 removed [ 219.436003][T10394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.493653][T10394] bond1: (slave gretap2): Releasing backup interface [ 219.511484][T10394] bond1: (slave gretap2): the permanent HWaddr of slave - fa:90:da:1e:a1:03 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 219.535192][T10394] bond1: (slave bond2): making interface the new active one [ 219.558813][T10394] bond1: (slave bond2): Releasing backup interface [ 219.568616][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 219.581438][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 219.596131][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1174'. [ 219.676771][T10409] vlan3: entered allmulticast mode [ 219.685417][T10409] bond0: entered allmulticast mode [ 219.794056][T10419] caif0 speed is unknown, defaulting to 1000 [ 219.901359][T10423] IPVS: set_ctl: invalid protocol: 99 100.1.1.2:20003 [ 220.130982][T10435] x_tables: duplicate underflow at hook 1 [ 220.136233][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'. [ 220.345007][T10439] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 220.421820][T10439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.444110][T10441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.453738][T10441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.464639][T10441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.473628][T10441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.769140][T10454] netlink: 'syz.3.1189': attribute type 11 has an invalid length. [ 221.499403][T10489] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 221.537747][T10496] netlink: 'syz.4.1198': attribute type 1 has an invalid length. [ 221.629675][T10499] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 221.751132][T10499] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.751851][T10489] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.915221][T10489] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.996124][T10524] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 129 [ 222.011703][T10525] tap0: tun_chr_ioctl cmd 21731 [ 222.058459][T10489] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.144807][T10530] pim6reg1: entered promiscuous mode [ 222.154904][T10530] pim6reg1: entered allmulticast mode [ 222.209233][T10489] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.423959][T10489] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.502638][T10489] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.580429][T10489] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.646052][T10489] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.824977][T10553] tipc: Can't bind to reserved service type 1 [ 222.837711][T10555] netlink: 'syz.3.1215': attribute type 3 has an invalid length. [ 222.875060][T10553] __nla_validate_parse: 4 callbacks suppressed [ 222.875080][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 223.061773][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 223.289647][T10580] tap0: tun_chr_ioctl cmd 2148553947 [ 223.306211][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1222'. [ 224.274975][T10616] xt_hashlimit: size too large, truncated to 1048576 [ 224.317283][T10619] x_tables: ip_tables: CT target: only valid in raw table, not lo [ 224.353725][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 224.452421][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 224.813660][T10646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1236'. [ 225.215234][T10670] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.225428][T10670] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.234287][T10670] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.243268][T10670] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.605509][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'. [ 225.665675][T10691] netlink: 'syz.0.1247': attribute type 21 has an invalid length. [ 225.682731][T10691] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1247'. [ 225.739026][T10691] netlink: 'syz.0.1247': attribute type 4 has an invalid length. [ 225.747206][T10691] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1247'. [ 225.797951][T10696] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1249'. [ 225.920778][T10702] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 225.940200][T10702] batman_adv: batadv0: Adding interface: gretap3 [ 225.949313][T10702] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.975522][T10702] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 226.423043][T10731] caif0 speed is unknown, defaulting to 1000 [ 226.549894][T10739] netlink: 'syz.0.1260': attribute type 33 has an invalid length. [ 226.592572][T10739] team_slave_0: entered promiscuous mode [ 226.941960][T10738] team_slave_0: left promiscuous mode [ 227.062777][T10761] netlink: 'syz.1.1262': attribute type 49 has an invalid length. [ 227.456023][T10783] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 227.535977][T10783] ªªªªªª: entered allmulticast mode [ 227.554461][T10783] dvmrp1: entered allmulticast mode [ 227.563482][T10783] ªªªªªª: left allmulticast mode [ 227.582863][T10783] dvmrp1: left allmulticast mode [ 227.822253][T10793] : (slave team0): Releasing backup interface [ 227.834725][T10793] : (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 227.860862][T10793] : (slave wlan1): Releasing backup interface [ 228.113096][T10813] caif0 speed is unknown, defaulting to 1000 [ 228.293944][T10824] bridge4: entered allmulticast mode [ 228.826598][T10848] xt_cluster: node mask cannot exceed total number of nodes [ 229.193634][T10864] netlink: 'syz.4.1287': attribute type 32 has an invalid length. [ 229.576659][T10876] __nla_validate_parse: 9 callbacks suppressed [ 229.576680][T10876] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1291'. [ 229.901948][T10892] sctp: [Deprecated]: syz.3.1293 (pid 10892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.901948][T10892] Use struct sctp_sack_info instead [ 230.531883][T10919] caif0 speed is unknown, defaulting to 1000 [ 230.552067][T10929] netlink: 'syz.2.1303': attribute type 11 has an invalid length. [ 230.576342][T10929] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1303'. [ 230.640835][T10936] C: renamed from ªªªªªª [ 230.660872][T10929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1303'. [ 230.683806][T10936] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 230.846035][T10938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1306'. [ 230.895812][T10942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1308'. [ 231.005100][T10952] Cannot find add_set index 4 as target [ 231.140803][T10955] netlink: 'syz.3.1311': attribute type 10 has an invalid length. [ 231.264836][T10961] ieee802154 phy1 wpan1: encryption failed: -90 [ 231.384045][T10928] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 231.978875][T11004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1327'. [ 232.181396][T11012] netlink: 'syz.3.1330': attribute type 29 has an invalid length. [ 232.276439][T11018] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1333'. [ 232.297459][T11018] batadv1: entered promiscuous mode [ 232.302859][T11018] batadv1: entered allmulticast mode [ 232.330941][T11020] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1333'. [ 232.369189][T11020] batadv1: entered promiscuous mode [ 232.374467][T11020] batadv1: entered allmulticast mode [ 232.484828][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1336'. [ 232.505822][T11025] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1335'. [ 232.773728][T11036] bridge0: port 1(hsr0) entered blocking state [ 232.780768][T11036] bridge0: port 1(hsr0) entered disabled state [ 232.787568][T11036] hsr0: entered allmulticast mode [ 232.792817][T11036] hsr_slave_0: entered allmulticast mode [ 232.811260][T11044] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 232.815634][T11036] hsr_slave_1: entered allmulticast mode [ 232.844894][T11036] hsr0: entered promiscuous mode [ 233.098746][T11055] C: entered allmulticast mode [ 233.109807][T11055] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 233.184779][T11055] vlan0: entered allmulticast mode [ 233.197332][T11062] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 233.215978][T11063] netlink: 'syz.3.1344': attribute type 10 has an invalid length. [ 233.701792][T11088] netlink: 'syz.4.1354': attribute type 4 has an invalid length. [ 234.416282][T11110] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 234.507634][T11108] xt_CT: No such helper "pptp" [ 234.623824][T11112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.698943][T11112] team0: Port device bond2 added [ 234.721708][T11108] netlink: 'syz.4.1358': attribute type 2 has an invalid length. [ 235.169684][T11139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.328797][T11150] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 235.669837][T11171] __nla_validate_parse: 70 callbacks suppressed [ 235.669860][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 235.720932][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1372'. [ 235.723444][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1372'. [ 235.799166][T11177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1374'. [ 235.809614][T11167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1372'. [ 235.980532][T11177] bond3: entered promiscuous mode [ 235.986383][T11177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.083943][T11180] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1375'. [ 236.176964][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 236.340276][T11200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1381'. [ 236.644189][T11213] unknown channel width for channel at 909000KHz? [ 236.761971][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 237.014800][T11244] netlink: 'syz.0.1394': attribute type 10 has an invalid length. [ 237.025002][T11244] batman_adv: batadv0: Adding interface: team0 [ 237.031674][T11244] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.057515][T11244] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 237.068159][T11245] netlink: 'syz.0.1394': attribute type 10 has an invalid length. [ 237.077853][T11245] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1394'. [ 237.086877][T11245] team0: entered promiscuous mode [ 237.093079][T11245] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.100646][T11245] batman_adv: batadv0: Interface activated: team0 [ 237.107333][T11245] batman_adv: batadv0: Interface deactivated: team0 [ 237.113986][T11245] batman_adv: batadv0: Removing interface: team0 [ 237.921298][T11269] ieee802154 phy1 wpan1: encryption failed: -22 [ 238.564393][T11303] xt_TCPMSS: Only works on TCP SYN packets [ 238.604723][T11306] bond0: (slave bond_slave_0): Releasing backup interface [ 238.639509][T11311] netlink: 'syz.3.1411': attribute type 10 has an invalid length. [ 238.657959][T11306] bond0: (slave bond_slave_1): Releasing backup interface [ 238.724050][T11306] team0: Port device team_slave_0 removed [ 238.746357][T11306] team0: Port device team_slave_1 removed [ 238.771936][T11306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.787538][T11306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.802207][T11306] team0: Port device bond1 removed [ 238.821663][T11303] caif0 speed is unknown, defaulting to 1000 [ 238.843230][T11311] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 238.882967][T11321] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 238.888179][T11316] sctp: [Deprecated]: syz.4.1413 (pid 11316) Use of int in maxseg socket option. [ 238.888179][T11316] Use struct sctp_assoc_value instead [ 239.181152][T11327] ¾x9ÿ: renamed from bridge_slave_0 [ 239.846211][T11354] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 240.681094][T11396] wireguard0: entered promiscuous mode [ 240.969102][T11404] caif0 speed is unknown, defaulting to 1000 [ 241.006101][T11417] __nla_validate_parse: 4 callbacks suppressed [ 241.006121][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 241.326757][T11433] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 241.472941][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1445'. [ 241.563060][T11443] FAULT_INJECTION: forcing a failure. [ 241.563060][T11443] name failslab, interval 1, probability 0, space 0, times 1 [ 241.583572][T11443] CPU: 1 UID: 0 PID: 11443 Comm: syz.3.1447 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 241.583621][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.583651][T11443] Call Trace: [ 241.583659][T11443] [ 241.583668][T11443] dump_stack_lvl+0x241/0x360 [ 241.583707][T11443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.583736][T11443] ? __pfx__printk+0x10/0x10 [ 241.583768][T11443] ? __pfx___might_resched+0x10/0x10 [ 241.583803][T11443] should_fail_ex+0x424/0x570 [ 241.583843][T11443] should_failslab+0xac/0x100 [ 241.583873][T11443] __kmalloc_noprof+0xdf/0x4d0 [ 241.583898][T11443] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 241.583927][T11443] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 241.583963][T11443] tomoyo_realpath_from_path+0xcf/0x5e0 [ 241.584008][T11443] tomoyo_path_number_perm+0x245/0x790 [ 241.584146][T11443] ? tomoyo_path_number_perm+0x215/0x790 [ 241.584192][T11443] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 241.584226][T11443] ? ksys_write+0x24e/0x2d0 [ 241.584257][T11443] ? __lock_acquire+0xad5/0xd80 [ 241.584295][T11443] ? __fget_files+0x2a/0x420 [ 241.584323][T11443] ? __fget_files+0x2a/0x420 [ 241.584353][T11443] ? __fget_files+0x2a/0x420 [ 241.584450][T11443] security_file_ioctl+0xc6/0x2a0 [ 241.584478][T11443] __se_sys_ioctl+0x46/0x160 [ 241.584504][T11443] do_syscall_64+0xf3/0x230 [ 241.584531][T11443] ? clear_bhb_loop+0x45/0xa0 [ 241.584557][T11443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.584586][T11443] RIP: 0033:0x7f26aa38d169 [ 241.584605][T11443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.584622][T11443] RSP: 002b:00007f26ab255038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.584645][T11443] RAX: ffffffffffffffda RBX: 00007f26aa5a5fa0 RCX: 00007f26aa38d169 [ 241.584660][T11443] RDX: 00002000000003c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 241.584673][T11443] RBP: 00007f26ab255090 R08: 0000000000000000 R09: 0000000000000000 [ 241.584685][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.584696][T11443] R13: 0000000000000000 R14: 00007f26aa5a5fa0 R15: 00007ffe0d4b0ca8 [ 241.584728][T11443] [ 241.584742][T11443] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.641014][T11441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1445'. [ 241.840011][T11446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1448'. [ 242.008104][T11452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1450'. [ 242.804255][T11459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.979462][T11470] sctp: [Deprecated]: syz.2.1454 (pid 11470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.979462][T11470] Use struct sctp_sack_info instead [ 243.056908][T11470] x_tables: duplicate underflow at hook 2 [ 243.066035][T11470] sctp: [Deprecated]: syz.2.1454 (pid 11470) Use of int in max_burst socket option. [ 243.066035][T11470] Use struct sctp_assoc_value instead [ 243.269257][T11478] wireguard0: entered promiscuous mode [ 243.276241][T11478] wireguard0: entered allmulticast mode [ 243.384845][T11486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1457'. [ 243.560666][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'. [ 243.586971][T11494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1459'. [ 243.710948][T11500] FAULT_INJECTION: forcing a failure. [ 243.710948][T11500] name failslab, interval 1, probability 0, space 0, times 0 [ 243.731037][T11500] CPU: 1 UID: 0 PID: 11500 Comm: syz.0.1461 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 243.731068][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.731080][T11500] Call Trace: [ 243.731087][T11500] [ 243.731103][T11500] dump_stack_lvl+0x241/0x360 [ 243.731137][T11500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.731163][T11500] ? __pfx__printk+0x10/0x10 [ 243.731193][T11500] ? __pfx___might_resched+0x10/0x10 [ 243.731220][T11500] should_fail_ex+0x424/0x570 [ 243.731255][T11500] should_failslab+0xac/0x100 [ 243.731282][T11500] __kmalloc_noprof+0xdf/0x4d0 [ 243.731305][T11500] ? tomoyo_encode+0x26f/0x540 [ 243.731337][T11500] tomoyo_encode+0x26f/0x540 [ 243.731365][T11500] ? __pfx_sockfs_dname+0x10/0x10 [ 243.731391][T11500] tomoyo_realpath_from_path+0x59e/0x5e0 [ 243.731432][T11500] tomoyo_path_number_perm+0x245/0x790 [ 243.731459][T11500] ? tomoyo_path_number_perm+0x215/0x790 [ 243.731504][T11500] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 243.731536][T11500] ? ksys_write+0x24e/0x2d0 [ 243.731566][T11500] ? __lock_acquire+0xad5/0xd80 [ 243.731607][T11500] ? __fget_files+0x2a/0x420 [ 243.731635][T11500] ? __fget_files+0x2a/0x420 [ 243.731667][T11500] ? __fget_files+0x2a/0x420 [ 243.731703][T11500] security_file_ioctl+0xc6/0x2a0 [ 243.731727][T11500] __se_sys_ioctl+0x46/0x160 [ 243.731752][T11500] do_syscall_64+0xf3/0x230 [ 243.731779][T11500] ? clear_bhb_loop+0x45/0xa0 [ 243.731804][T11500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.731824][T11500] RIP: 0033:0x7f6dbe38d169 [ 243.731842][T11500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.731860][T11500] RSP: 002b:00007f6dbc1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.731882][T11500] RAX: ffffffffffffffda RBX: 00007f6dbe5a5fa0 RCX: 00007f6dbe38d169 [ 243.731897][T11500] RDX: 00002000000003c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 243.731910][T11500] RBP: 00007f6dbc1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 243.731922][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.731934][T11500] R13: 0000000000000000 R14: 00007f6dbe5a5fa0 R15: 00007ffcc6619658 [ 243.731967][T11500] [ 243.731987][T11500] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.009559][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1463'. [ 244.036459][T11504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1463'. [ 244.251610][T11514] bond3: entered promiscuous mode [ 244.275547][T11514] bond3: entered allmulticast mode [ 244.281444][T11514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.442880][T11531] caif0 speed is unknown, defaulting to 1000 [ 244.486559][T11536] FAULT_INJECTION: forcing a failure. [ 244.486559][T11536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.505465][T10274] IPVS: starting estimator thread 0... [ 244.506658][T11536] CPU: 0 UID: 0 PID: 11536 Comm: syz.1.1475 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 244.506688][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.506703][T11536] Call Trace: [ 244.506712][T11536] [ 244.506739][T11536] dump_stack_lvl+0x241/0x360 [ 244.506779][T11536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.506809][T11536] ? __pfx__printk+0x10/0x10 [ 244.506852][T11536] should_fail_ex+0x424/0x570 [ 244.506894][T11536] _copy_from_user+0x2d/0xb0 [ 244.506926][T11536] get_user_ifreq+0xc3/0x200 [ 244.506955][T11536] sock_ioctl+0x7b6/0x900 [ 244.506995][T11536] ? __pfx_sock_ioctl+0x10/0x10 [ 244.507019][T11536] ? __fget_files+0x2a/0x420 [ 244.507069][T11536] ? __pfx_sock_ioctl+0x10/0x10 [ 244.507097][T11536] __se_sys_ioctl+0xf1/0x160 [ 244.507123][T11536] do_syscall_64+0xf3/0x230 [ 244.507154][T11536] ? clear_bhb_loop+0x45/0xa0 [ 244.507181][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.507203][T11536] RIP: 0033:0x7fdb12b8d169 [ 244.507222][T11536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.507241][T11536] RSP: 002b:00007fdb13990038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.507266][T11536] RAX: ffffffffffffffda RBX: 00007fdb12da5fa0 RCX: 00007fdb12b8d169 [ 244.507283][T11536] RDX: 00002000000003c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 244.507297][T11536] RBP: 00007fdb13990090 R08: 0000000000000000 R09: 0000000000000000 [ 244.507312][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.507325][T11536] R13: 0000000000000000 R14: 00007fdb12da5fa0 R15: 00007fff97753e08 [ 244.507359][T11536] [ 244.825524][T11537] IPVS: using max 27 ests per chain, 64800 per kthread [ 245.673156][T11570] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 245.689295][T11570] syzkaller1: linktype set to 825 [ 245.855992][T11570] hsr0: left allmulticast mode [ 245.860828][T11570] hsr_slave_0: left allmulticast mode [ 245.898960][T11570] hsr_slave_1: left allmulticast mode [ 245.904394][T11570] hsr0: left promiscuous mode [ 245.913563][T11570] bridge0: port 1(hsr0) entered disabled state [ 246.049709][T11583] FAULT_INJECTION: forcing a failure. [ 246.049709][T11583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.080291][T11583] CPU: 0 UID: 0 PID: 11583 Comm: syz.1.1487 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 246.080322][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.080335][T11583] Call Trace: [ 246.080343][T11583] [ 246.080352][T11583] dump_stack_lvl+0x241/0x360 [ 246.080388][T11583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.080417][T11583] ? __pfx__printk+0x10/0x10 [ 246.080458][T11583] should_fail_ex+0x424/0x570 [ 246.080494][T11583] _copy_from_user+0x2d/0xb0 [ 246.080524][T11583] ip6_tnl_siocdevprivate+0x20e/0x1570 [ 246.080565][T11583] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 246.080586][T11583] ? lockdep_hardirqs_on+0x9d/0x150 [ 246.080611][T11583] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 246.080639][T11583] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 246.080665][T11583] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 246.080684][T11583] ? rcu_is_watching+0x15/0xb0 [ 246.080728][T11583] ? dev_ioctl+0x8b0/0x1380 [ 246.080753][T11583] ? full_name_hash+0x93/0xe0 [ 246.080807][T11583] dev_ifsioc+0xc04/0x1010 [ 246.080836][T11583] ? dev_load+0x21/0x1f0 [ 246.080869][T11583] dev_ioctl+0x8c3/0x1380 [ 246.080899][T11583] sock_ioctl+0x819/0x900 [ 246.080925][T11583] ? __pfx_sock_ioctl+0x10/0x10 [ 246.080944][T11583] ? __fget_files+0x2a/0x420 [ 246.080986][T11583] ? __pfx_sock_ioctl+0x10/0x10 [ 246.081010][T11583] __se_sys_ioctl+0xf1/0x160 [ 246.081035][T11583] do_syscall_64+0xf3/0x230 [ 246.081062][T11583] ? clear_bhb_loop+0x45/0xa0 [ 246.081094][T11583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.081130][T11583] RIP: 0033:0x7fdb12b8d169 [ 246.081149][T11583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.081167][T11583] RSP: 002b:00007fdb13990038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.081189][T11583] RAX: ffffffffffffffda RBX: 00007fdb12da5fa0 RCX: 00007fdb12b8d169 [ 246.081205][T11583] RDX: 00002000000003c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 246.081219][T11583] RBP: 00007fdb13990090 R08: 0000000000000000 R09: 0000000000000000 [ 246.081232][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.081243][T11583] R13: 0000000000000000 R14: 00007fdb12da5fa0 R15: 00007fff97753e08 [ 246.081282][T11583] [ 246.386158][T11587] caif0 speed is unknown, defaulting to 1000 [ 246.599497][T11599] __nla_validate_parse: 7 callbacks suppressed [ 246.599542][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 246.711241][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1492'. [ 247.036223][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 247.090580][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 247.157462][T11613] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.165895][T11613] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.174093][T11613] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.182376][T11613] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.238351][T11613] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 247.671024][T11639] IPVS: Scheduler module ip_vs_ not found [ 247.964614][T11662] x_tables: duplicate underflow at hook 2 [ 248.602136][T11678] caif0 speed is unknown, defaulting to 1000 [ 248.652035][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 248.967635][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'. [ 249.107047][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'. [ 249.119170][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1518'. [ 249.309269][T11703] syzkaller0: entered promiscuous mode [ 249.327572][T11703] syzkaller0: entered allmulticast mode [ 250.016148][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 251.967163][T11764] caif0 speed is unknown, defaulting to 1000 [ 251.983904][T11774] xt_hashlimit: size too large, truncated to 1048576 [ 252.067907][T11779] netlink: 'syz.2.1536': attribute type 10 has an invalid length. [ 252.112969][T11779] netlink: 'syz.2.1536': attribute type 142 has an invalid length. [ 252.676520][T11793] atomic_op ffff88805d42a198 conn xmit_atomic 0000000000000000 [ 252.772222][T11793] xfrm0: left promiscuous mode [ 253.055173][T11803] caif0 speed is unknown, defaulting to 1000 [ 253.842532][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1548'. [ 253.867158][T11826] netlink: 'syz.3.1548': attribute type 29 has an invalid length. [ 254.086370][T11837] netlink: 'syz.2.1550': attribute type 2 has an invalid length. [ 254.121993][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 254.131212][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 254.151934][T11837] lave_0: entered promiscuous mode [ 254.208351][T11839] netlink: 'syz.0.1553': attribute type 10 has an invalid length. [ 254.258666][T11839] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 254.693748][T11866] netlink: 'syz.0.1559': attribute type 10 has an invalid length. [ 254.722911][T11866] team0: Device hsr_slave_0 failed to register rx_handler [ 254.752721][T11868] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 254.822114][T11868] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1560'. [ 254.830569][T11870] netlink: 'syz.0.1559': attribute type 6 has an invalid length. [ 255.120075][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1562'. [ 255.151771][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 255.409899][T10274] hid-multitouch 0005:0457:0009.0003: unknown main item tag 0x0 [ 255.469091][T10274] hid-multitouch 0005:0457:0009.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 255.514704][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 255.692275][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.815311][T11902] syzkaller0: entered promiscuous mode [ 255.833276][T11902] syzkaller0: entered allmulticast mode [ 255.848416][T11905] veth0_to_hsr: entered promiscuous mode [ 255.854260][T11905] veth0_to_hsr: entered allmulticast mode [ 257.224749][T11945] netlink: 'syz.3.1580': attribute type 2 has an invalid length. [ 257.233184][T11945] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1580'. [ 257.306143][T11946] xt_HMARK: proto mask must be zero with L3 mode [ 257.932025][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1581'. [ 257.940345][T11944] caif0 speed is unknown, defaulting to 1000 [ 258.121334][T11957] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1584'. [ 258.417389][T11975] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20003 [ 258.484003][T11975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.877601][T12002] __nla_validate_parse: 1 callbacks suppressed [ 258.877622][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 259.028011][T12003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1599'. [ 259.741229][T11998] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 259.813591][T12043] rdma_rxe: rxe_newlink: failed to add caif0 [ 259.836877][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 259.898547][T12048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1610'. [ 259.915955][T12048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1610'. [ 259.964357][T12050] netlink: 'syz.2.1611': attribute type 10 has an invalid length. [ 259.997134][T12050] : (slave wlan1): Enslaving as an active interface with an up link [ 260.086863][T12053] batadv0: entered promiscuous mode [ 260.094164][T12053] batadv_slave_0: entered promiscuous mode [ 260.101553][T12053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.113465][T12053] Cannot create hsr debugfs directory [ 260.384109][T12066] batadv_slave_0: entered promiscuous mode [ 260.404856][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 260.426249][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 260.542795][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 260.578781][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 260.686634][T12087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.869224][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'. [ 260.900447][T12087] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 260.931083][T12106] sctp: [Deprecated]: syz.0.1627 (pid 12106) Use of int in max_burst socket option. [ 260.931083][T12106] Use struct sctp_assoc_value instead [ 260.948137][T12106] [ 260.950532][T12106] ====================================================== [ 260.957560][T12106] WARNING: possible circular locking dependency detected [ 260.964662][T12106] 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 Not tainted [ 260.971768][T12106] ------------------------------------------------------ [ 260.978781][T12106] syz.0.1627/12106 is trying to acquire lock: [ 260.984842][T12106] ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0xde/0x2d60 [ 260.993822][T12106] [ 260.993822][T12106] but task is already holding lock: [ 261.001200][T12106] ffff88805d447228 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 261.011316][T12106] [ 261.011316][T12106] which lock already depends on the new lock. [ 261.011316][T12106] [ 261.021736][T12106] [ 261.021736][T12106] the existing dependency chain (in reverse order) is: [ 261.030746][T12106] [ 261.030746][T12106] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 261.039360][T12106] lock_acquire+0x116/0x2f0 [ 261.044396][T12106] __mutex_lock+0x1a5/0x10c0 [ 261.049511][T12106] smc_switch_to_fallback+0x35/0xda0 [ 261.055333][T12106] smc_sendmsg+0x11f/0x530 [ 261.060279][T12106] __sock_sendmsg+0x221/0x270 [ 261.065506][T12106] __sys_sendto+0x365/0x4c0 [ 261.070538][T12106] __x64_sys_sendto+0xde/0x100 [ 261.075828][T12106] do_syscall_64+0xf3/0x230 [ 261.080853][T12106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.087262][T12106] [ 261.087262][T12106] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 261.094905][T12106] lock_acquire+0x116/0x2f0 [ 261.099920][T12106] lock_sock_nested+0x48/0x100 [ 261.105207][T12106] do_ip_setsockopt+0x17e9/0x39c0 [ 261.110751][T12106] ip_setsockopt+0x63/0x100 [ 261.115772][T12106] do_sock_setsockopt+0x3b1/0x710 [ 261.121335][T12106] __x64_sys_setsockopt+0x1ee/0x280 [ 261.127067][T12106] do_syscall_64+0xf3/0x230 [ 261.132090][T12106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.138499][T12106] [ 261.138499][T12106] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 261.145711][T12106] validate_chain+0xa69/0x24e0 [ 261.150998][T12106] __lock_acquire+0xad5/0xd80 [ 261.156196][T12106] lock_acquire+0x116/0x2f0 [ 261.161219][T12106] __mutex_lock+0x1a5/0x10c0 [ 261.166376][T12106] start_sync_thread+0xde/0x2d60 [ 261.171842][T12106] do_ip_vs_set_ctl+0x48e/0xe50 [ 261.177220][T12106] nf_setsockopt+0x295/0x2c0 [ 261.182349][T12106] smc_setsockopt+0x25c/0xd50 [ 261.187574][T12106] do_sock_setsockopt+0x3b1/0x710 [ 261.193125][T12106] __x64_sys_setsockopt+0x1ee/0x280 [ 261.198846][T12106] do_syscall_64+0xf3/0x230 [ 261.203870][T12106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.210281][T12106] [ 261.210281][T12106] other info that might help us debug this: [ 261.210281][T12106] [ 261.220497][T12106] Chain exists of: [ 261.220497][T12106] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 261.220497][T12106] [ 261.234059][T12106] Possible unsafe locking scenario: [ 261.234059][T12106] [ 261.241506][T12106] CPU0 CPU1 [ 261.246867][T12106] ---- ---- [ 261.252230][T12106] lock(&smc->clcsock_release_lock); [ 261.257612][T12106] lock(sk_lock-AF_INET); [ 261.264555][T12106] lock(&smc->clcsock_release_lock); [ 261.272452][T12106] lock(rtnl_mutex); [ 261.276439][T12106] [ 261.276439][T12106] *** DEADLOCK *** [ 261.276439][T12106] [ 261.284582][T12106] 1 lock held by syz.0.1627/12106: [ 261.289695][T12106] #0: ffff88805d447228 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 261.300238][T12106] [ 261.300238][T12106] stack backtrace: [ 261.306213][T12106] CPU: 1 UID: 0 PID: 12106 Comm: syz.0.1627 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 261.306236][T12106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.306248][T12106] Call Trace: [ 261.306254][T12106] [ 261.306261][T12106] dump_stack_lvl+0x241/0x360 [ 261.306289][T12106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.306312][T12106] ? __pfx__printk+0x10/0x10 [ 261.306335][T12106] ? print_lock+0x171/0x1a0 [ 261.306361][T12106] print_circular_bug+0x2e1/0x300 [ 261.306383][T12106] check_noncircular+0x142/0x160 [ 261.306406][T12106] validate_chain+0xa69/0x24e0 [ 261.306438][T12106] __lock_acquire+0xad5/0xd80 [ 261.306457][T12106] lock_acquire+0x116/0x2f0 [ 261.306472][T12106] ? start_sync_thread+0xde/0x2d60 [ 261.306499][T12106] __mutex_lock+0x1a5/0x10c0 [ 261.306519][T12106] ? start_sync_thread+0xde/0x2d60 [ 261.306541][T12106] ? __lock_acquire+0xad5/0xd80 [ 261.306559][T12106] ? start_sync_thread+0xde/0x2d60 [ 261.306580][T12106] ? __pfx___mutex_lock+0x10/0x10 [ 261.306605][T12106] ? finish_task_switch+0x1e5/0x870 [ 261.306628][T12106] ? lockdep_hardirqs_on+0x9d/0x150 [ 261.306649][T12106] ? rcu_is_watching+0x15/0xb0 [ 261.306670][T12106] start_sync_thread+0xde/0x2d60 [ 261.306697][T12106] ? kvm_sched_clock_read+0x11/0x20 [ 261.306727][T12106] ? __pfx_start_sync_thread+0x10/0x10 [ 261.306762][T12106] do_ip_vs_set_ctl+0x48e/0xe50 [ 261.306791][T12106] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 261.306824][T12106] ? __mutex_unlock_slowpath+0x229/0x800 [ 261.306850][T12106] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 261.306874][T12106] ? __pfx___mutex_lock+0x10/0x10 [ 261.306896][T12106] ? futex_wake+0x525/0x5d0 [ 261.306914][T12106] nf_setsockopt+0x295/0x2c0 [ 261.306939][T12106] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 261.306963][T12106] smc_setsockopt+0x25c/0xd50 [ 261.306985][T12106] ? __pfx_aa_sk_perm+0x10/0x10 [ 261.307006][T12106] ? __pfx_smc_setsockopt+0x10/0x10 [ 261.307026][T12106] ? aa_sock_opt_perm+0x79/0x120 [ 261.307050][T12106] ? __pfx_smc_setsockopt+0x10/0x10 [ 261.307069][T12106] do_sock_setsockopt+0x3b1/0x710 [ 261.307098][T12106] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 261.307123][T12106] ? __fget_files+0x2a/0x420 [ 261.307149][T12106] ? __fget_files+0x39d/0x420 [ 261.307172][T12106] ? __fget_files+0x2a/0x420 [ 261.307199][T12106] __x64_sys_setsockopt+0x1ee/0x280 [ 261.307229][T12106] do_syscall_64+0xf3/0x230 [ 261.307251][T12106] ? clear_bhb_loop+0x45/0xa0 [ 261.307269][T12106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.307286][T12106] RIP: 0033:0x7f6dbe38d169 [ 261.307303][T12106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.307318][T12106] RSP: 002b:00007f6dbc1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 261.307337][T12106] RAX: ffffffffffffffda RBX: 00007f6dbe5a6080 RCX: 00007f6dbe38d169 [ 261.307356][T12106] RDX: 000000000000048b RSI: 0000000000000000 RDI: 000000000000000c [ 261.307367][T12106] RBP: 00007f6dbe40e990 R08: 0000000000000018 R09: 0000000000000000 [ 261.307377][T12106] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.307388][T12106] R13: 0000000000000000 R14: 00007f6dbe5a6080 R15: 00007ffcc6619658 [ 261.307407][T12106] [ 261.649182][T12111] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 261.658904][T12110] IPVS: stopping backup sync thread 12111 ... [ 261.688966][T12113] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 263.845559][ T12] wlan1: Trigger new scan to find an IBSS to join [ 266.795760][ T3482] wlan1: Trigger new scan to find an IBSS to join [ 267.695581][ T12] wlan1: Creating new IBSS network, BSSID f6:1a:19:28:e5:06