last executing test programs: 1m10.121684787s ago: executing program 0 (id=2466): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001fc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000abaff9), 0x10) r4 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f00000004c0)=""/88, 0x58}], 0x4, &(0x7f0000000540)=""/88, 0x58}, 0x4}, {{&(0x7f00000005c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/5, 0x5}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/247, 0xf7}, {&(0x7f0000000840)=""/5, 0x5}, {&(0x7f0000000880)=""/243, 0xf3}, {&(0x7f0000000980)=""/133, 0x85}], 0x6, &(0x7f0000001bc0)=""/86, 0x56}, 0xd04}, {{&(0x7f0000001c40)=@xdp, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000001cc0)=""/78, 0x4e}], 0x1, &(0x7f0000001d40)=""/212, 0xd4}, 0xc}], 0x3, 0x10003, &(0x7f0000001f00)) (async, rerun: 32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="ebb8e3", 0x3}, 0x1, 0x0, 0x0, 0x48001}, 0x4c880) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000000)=0x7ced, 0x4) (async, rerun: 32) r7 = socket$kcm(0x15, 0x5, 0x0) (async, rerun: 32) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r9 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000003c0)={0x20000002}) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0}, 0x0) (async) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x240080c5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x6, 0x9}}) (async) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4004000) connect$caif(r0, &(0x7f0000000000), 0x18) (async, rerun: 64) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x3}], 0x18}], 0x1, 0x8815) (rerun: 64) 1m9.925126119s ago: executing program 0 (id=2468): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000177c762ae9975f1da27b99b312fa28bc6fa4c8cc575449e5cd96b36b6fafcc37121caea32f9948c7a7884ef84f82802800a3f0782a83d6e9443a068d751c45336eaed83213826918c54346c3875c05ab6c6eb6e4dfdb291bacf7ad2d1c773f5ebde402cd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) epoll_create(0x7) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x3e, 0x0, &(0x7f0000000a00)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c10892fd320d98a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 59.890715619s ago: executing program 3 (id=2546): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 59.637654213s ago: executing program 3 (id=2548): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r1}) sendmmsg$alg(r2, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="780000000000000017010000c60000187a22ec104b065cf506de8cdc08a6d0fddc0d72778aece33162e224760128908354ebe677afaf0fba4d209101c48a04692828bd124430ce0542ec901330cfd17ecda3ea1ff3d715545d42da58b55978fbbd3cf28bf72800000000000000170100000200000014000008d240a5aaf782aa7e74e12faa551a3e8899099e1542f8ed4490000000000000000000"], 0xa0, 0x200040d4}], 0x1, 0x20008852) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="000800001f014d7521efd1de8e97aeeeeaeee9a7015e0000001000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001340)=ANY=[@ANYRESDEC=r0], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYRESOCT=r6], 0x18}, 0x1, 0x0, 0x0, 0x40051}, 0x4000) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="d1d26fe381450cfa59010b8d7ac49e65e66e9061079ee83a299754ef016904b3ba65400e114d6e4bb7aec9d3e89170fc6978892d8e24b342c4f8054a2bb379ea9a815b789c3ff976e03ce0e83055315710848c629943947ff488aac2becb856256879955f0e8d3f74c8cfaf211c8461606aac0cbacfc527003919424009ace0a1bb6231fb569da16ada1b785ad2600e1c3f58abfe8fde22bb993ffd836581e4e8d5b5be80419faf2b8b2585dc586d8a4201fa7236bb604f8d2de6601b6d1407b5fe07180dba1ff3e0df06748c8be4841c6e6f2e032f26010e3b975811f78f9d56a885fe5948f469c6091f4e36d02a5fc5f694c3af5ab6a82593a632f0e515af484830aa7ec0d42c743ebf07ccd6c54d0024d73019374feed81e051c42d1722cd3124e77bd1108b1e93fcec0c6b561e593b2ad92d0c6437bfacbddcba13e22f7037080e7799ae9890dd7f06ef6301583e41de6342e0a3859f3842532496cfddfccd34e0317d16ce5d777299516f5e96c5f6c20a324589a37aa7cf1355cc85eb47a25c43eb5323d86125002b8bd2c581dfb30e2e64d4579288db270c013992a7db07b4e877cd576ffa7850ee8d16e49f48df41799bf038de8f5f3d6911dd3840baa81d749f5f8c636e2afed867c25ec36d8b51661aa499751b0407fc5e7a64f62296928a7543e8cb14302a9e18c094225ab16fd679237d7a4d2b5a2c34e4d85f6edda42a02fdc7711cdae1cf64e992cb09d0933c1dfbf4711ce573e138b8b87deecca2f0947a553c5b778c2442ce21c694b587da7ccf6f1b88a92cb811bc39de1effb55e8b49165b2abb3e3c193bceddfa9c8dd668bbb8a72e989e9be5d127d52a11b1c2e487ec9edea044d0cee93535c36b5d95e7d06651f8f4cc619abb7412502a36d01b7fb4d45b2870a2fce63c8154c02b89d10f07659d5a2a4b573f4cb01c610e86cba3cecd73c5bb103c576ae9b85f941781bb62d764822213ac589c47f5cf79966a84c42f2a1b5a2f7bda244f466469e8219cb2fd67ffbf23d9029169df24ae711c837eaf23bdbb8caa857b46ba1720527372261484a72f03d470dee3b0b50d57da921d6f32ff84b8f2babc7d808d85c795b902bf43fa41e28636290d2bea411418bffa327e0c4cbcaaf600f944d5bf832387da651f14ec0e44bbc7f6311d156c6f0b150c7c199e10261461353d884bf05436b498b4651e6e4a6b96c3617ea634c275fd80eb19891a695225f7d87885b2555886da20bff209fde60b0266e752d867f85b84e5f5e1d8ccf0d9cd4d7a0464dd7fb7738018052bb6df15acb85ccea3237fa797421d601aae58978bf1fac451676f296d06b619e0a70c3467b6ec3fc594988abf4fd61b74820bee613db7d9acdcf3283ed7fa2faffc01c56bf1a2a7543c44741322672b4af69e84701ced5312457316078a4bc9bdc53c2c564d6fff981fcbe2208dd496bd1ab91027c3f12fa9481271adcf706996952bfb76259d022527221d70ea42d3a9a5e5fa97997d505cb9b13516368509aa370eed2390d65f34c70b52ee954ab204cfd9dd21a8a1f38e90ec856238d746d2f4fe73cf13e2b24eed1ba7d07395358357dd37a093f5bac430b6e619655ffac1d321d014c37b69192cab95e152ace434d71faca0b8edc2cfa7d713e42e11aef29505cef7cd03d98faef3dae22fbe551f6684bc0f484633365edb27d530e0b946ebd52ec29ca2bca9d8540e080e4a86e7c9dd41f8d214812796faea83b41b37b62ff61e3f8c7488f42c90c88467479c2b9538821a2b1d2c786443a9126d4db38289434fa0d22b741fb613408acc465c06143026e4b6e186815482a246a2b0e84316b60005f63c87992d0c429cc829a0e470ba7a41db8e8623c1d91f846fa965acab364ed9bc47ee6cdf376159d3f212b430b254a73ab028d2a7ed1fd696c54e8775adbc8dd7b6f9ce21ad5bb862bc90398db07bf45d99aa4807f0dbeacbb478bbba80ea628ad509d2842ae96426b21ba4b8d41b14e983ff8ca00710b5f63fba29f09f16debdcd5a31dbbde490fdcc21d406f63b0c7f18f32dc5628c8e474e2d9f8afd481e8def7bf5ab5c5c12efb9fb229911cd063b215512025e2f2ec8005384cdd4dfa8df24ede91ff27fcf7995f303a708c46bba91d86574e304489d6d73530aaae43b77f9c04ff80bdbec30ce6861db21ce419a977cdb8ee0814640e52604124997dcd1f5a71b1ade41f11cbe246a4e05183dbcd0e9648d564b1996f8d89ce536256ce483e3c26836ed42eb9bf35c4b2fa76ac7105933e0f63feca59cb0d7f05c08a1163a48489e890eadab2d83694085d57f7f065f41e1925a2a28cb5226658927a19260bfd26a2460c52d9e5e1ea0b41884e0db31c284b9401fea305c52b3a5f7abeb49b7c697f2f6a600a9438a02cdc1be7fb15ceb1e61201c67449f16d37ac64fef3267e1496d33ff247cd1847dc19ddb1348b4abac9276c272e97bce436a259182a43b82bd974081daac352ba379749896a2f495c033d6ade0278889097600916e932186594ec53307f28cdad8c7ba2d81aa2f1f2b1fe10bcde915543709e36be45741552f9de88f90c7cdf0e1544169f1521d3d160462f50c547454616d44a5b244c515f455dab26133236dd46851518911fb470511495b909e1e7d9f9acf7a953b2f104720800c3201a3c5081741bf839cbc9cca40cfb15d9370991f418bcbbc07a08d4e232e2353c9b0c2e0dfcb0230188480ac8aa8d06f934b0955ee8dd4cbce4811fae5121312fce48d04074c325b141c5fb4b7c98d6b4e30b938be5b987578807d98791a82d8f87d2dc74e6f24e8997a6fd12558feb49d378b05682428b11d1b38d596f79c748d8e33a25f7f0f148130dc8ace4c36c095d625cbba583265f0d3cf52a4c3d47a02fc8f80448280aa62c1e7e9e6dd0d81349216d720e6481dfca0db7c8732d0c4c80baf6505101f8d396943b45fcbb18fe44c9ac5c1fc218edf3b3c2f95d3db8a00571b5c26d8fe378aaa39f9f99e7720d4862e18b9a4c84a4a60f453e0fe792af800f99e6edc6a111117bef0c866c1f25906b50e9ff412b42ab8d67b0c32ec6f81febf9e387f479ba56b2ee39a3cc51b2c6595f9054cb08513dbecb799cd946b63ef9638fc5855e52502280739d1b7b0c2d4d5e90da9626ca45cbae8c26475baeeb8713f0d3edb9fd4ba6110f3a4434d2b1ee2b6eef00184a76be59331eb859d12bcd73f1dec0404e2e09ff116b6e1cdd1e042d9990a6a58cc47c8cf80744cdf041fd8f38d79d7e4c1dcf13073c02b181a19cf0a469472b211430b541ce6028952b90fd875fcfa90d1a84d6ef24aa4ba3f964f198b9692c3c9bc27dbf4e0a55ec410ef14395992c38274fc6f0543b402128960915db8479258110488bf2ca669acaf5ff6d3e725737a6a8c1434eccb623f4c380282d9c0c25267475bd958f788bf4ae80a5009e565d267cedadd013f40e4d6602ce3de318c60ba6083be4d9df83f9a39fe4a57d6c1815be0fe00f55d3389e08f310876ee9114354a49874604b95387dcec2bcd2cff294127fbb873c2082b87d7b3cad8fae2406208853e17f80cfdeefec281f12019082817703c015a18e81c11c6cdf2b7d24cf3db84042ac8deb25ee44a25cb667f752bfc80980ee09b10be57974f25ee50643f746b4bf599239648e01e796a7c0b2d811430ad1a9ba0c1debe77fc9dad18ac0a7de3658fbe32497339ae989aab13f4a546f5272aa13b34eadca96c6cbf839752c7a033d9beb6ffa209a514dd62aa5440faea65ccaddafcc3867fdc1b04221456e6134705b0936eeeb13d12a267f92c961ba6268ae7dcd4590fa9067198c4a10e9764adb98c4098ff328705e215bb379ab45922366d727f6eb2f2a213a2202176aec1fc791f5633837ffd0d738800a8d22612af49385ebf09967ce03e8157b7ffbc332da5e34407eb2610321274a04d6e45a3c10333247193e7040f317733f5f5dfb13dd16cbd087f550d1f23d7dcd575fb1556bcda8bb28748f2f388380adb2f13bfe50dc9ce5381fd64d52ac5c20ac54f680f8e42c54179ffcf0e7aef24771215451b32b8ad5c991edc6300a190f84bfc949a475c90128b4cd3b903f3775bbd74c76a740aa55b0cdd69234450815f89833a615ff2d9d0ceac5039869074ed5f9516d0685600930b9bfc7cd7acd6cb62c4d85eebc0f02abe083dd4a56530b653710f86cce8acecc46e490399351b399d7d9ca862bc9fc9f891903f4d746ecd3b227385c89f1921de6586d9c8871c8bad8ae3adc7dc5fa26c8502d7cd35db67ef2eff6aa7d1f7a8a714e686c6a453be85da9a356de5c71a681709ee639fd55badf204f05ffc73beaa91325be5f3f98fd6f4e0a69b04f69e97b05d840db4ec121fbe825b5a752e128e7474bf2087624b032bcc33a716f5562b34c83dcf0c0624134b8e80079a40b3403c81c12e94f84d8f825147764ba1ca6d5fecce1ad3ee84d4d000be62250feff7d6719e1f8269a2583e0dd64a101a63b2a32c8f1194b4c0d4f4ce2ffb828922b0ec25bbb692bdf5018f42316b0817df5282989929ef58e148462a671d1e0a63636ca1d880b85ad6fc49993a28081c96c86edab5c31ccd6d003eb1766719bb41d39ea66da1f7c8aec726883f32a39bdca85e42a1deeb9b7371c1d1e85e5b4b4d54aa98a43ec76171829654895283a651b7511a581e8b456256ea8854c2ad7ec74def1dec041fd66f0f06153a5dd17be2719d3445fd06156f3d97f05ac6f138791e94bed00d0e5dbf38326ecb93b93538a80b55b241773e610836597116eb1ee07d3c67dbb16f59746ab60c92b32c0bd49b444bb3386289ed2d41c023b33453201f7b7e10a6f7a8637fe927bd99edd89737eac9f9d7295e99b617231a9f19649c6117795654d49f7a103d045c72c0c4022180fba0aadb0acf0a47ab75ea1965b0fd2ee6983bbae7a4dddde072c4ad3095af3625a4cbf714174ac4b40e45cd63297332911f05447c56f13b9f106940e989ed24d72dfd16e42843def7f0963337a778a4da194eb5b6fe374a20bda94e850956917e3d0a6f7db5e3921c2172fe706bbf0055b48d39c4e2e0f392ea1062777659dd2e6a6172ed1291828cddda77f25947f777fccc1a92c3f92045b8362594a4ff216b8c06e8754ced389d159d8b61dd4c8f911b569536c43ca36cc657dd0686f7872aca7a87cb07676fa66c8e27ebb666cda031a631f15fe20de85c27aad3ead17cff8cc4930ac72201458233c700660baba9ea81397562c4834acb31946f8fd1295549625af8b2c59ebd0cf7b373043ea2412a34a22899525c8e22c08be4d210eafd016c293ebc75dd9b4398d39c286c21d54527359a6c55579afe1e5f3116cd9fc1a3b3ba05504bbf6b9a92f2629a7613df8dbfba0be6b7851063f9ad12892a103e0408a796ff4462b23ddbb3b2e976f769fff665457aff7ccd45298f9439da9ab519d05ba6c5209169f903cca44a15ff4ad0622a21b43819c2bf8176539ab7899955e8688e0384cb08a3138173e84e98c5aa53685af8e242c2ef9944dc182f67e7afa69cf88cafc4f72e73d5a5537615732fea51f6da0d7ca9043d09095c539a129e37bba02ff7d268ae4d5f24f17f8f4d0c9a225243f990cdd93b68ffa972615eeb61c09b7e991df460b64f74eccc380506b9bccf6369d231713902870e498a56798dbe9055da137f425614ab034d8efaa3f8148dbda59c9b3430706ad412351bad6f86ce51837972391782fb922d46f615775235168d501cde5b57f5841a72b38a68ca8a", @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) close(r8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000012c0)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r0, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 59.605003245s ago: executing program 3 (id=2549): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f00000009c0)=[{&(0x7f0000000580)="ccc48918c7", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xf) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r3, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x30}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair(0x10, 0x0, 0x8000, &(0x7f0000000080)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000000c0)={'rose0\x00', 0x6b6f}) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000310000009c0000000000000006000000000000008d153cf14b18cdc6"], &(0x7f0000000040)='GPL\x00', 0x4, 0x97, &(0x7f0000000180)=""/151, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$kcm(0x29, 0x0, 0x0) pipe(&(0x7f0000000040)) (async) write(r1, &(0x7f0000000340), 0x11000) (async) vmsplice(r0, &(0x7f00000009c0)=[{&(0x7f0000000580)="ccc48918c7", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xf) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r3, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x30}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair(0x10, 0x0, 0x8000, &(0x7f0000000080)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) (async) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000000c0)={'rose0\x00', 0x6b6f}) (async) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000180)) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000310000009c0000000000000006000000000000008d153cf14b18cdc6"], &(0x7f0000000040)='GPL\x00', 0x4, 0x97, &(0x7f0000000180)=""/151, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) socket$kcm(0x29, 0x0, 0x0) (async) 59.240345017s ago: executing program 0 (id=2468): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000177c762ae9975f1da27b99b312fa28bc6fa4c8cc575449e5cd96b36b6fafcc37121caea32f9948c7a7884ef84f82802800a3f0782a83d6e9443a068d751c45336eaed83213826918c54346c3875c05ab6c6eb6e4dfdb291bacf7ad2d1c773f5ebde402cd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) epoll_create(0x7) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x3e, 0x0, &(0x7f0000000a00)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c10892fd320d98a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 45.863763455s ago: executing program 3 (id=2549): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f00000009c0)=[{&(0x7f0000000580)="ccc48918c7", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xf) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r3, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x30}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair(0x10, 0x0, 0x8000, &(0x7f0000000080)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000000c0)={'rose0\x00', 0x6b6f}) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000310000009c0000000000000006000000000000008d153cf14b18cdc6"], &(0x7f0000000040)='GPL\x00', 0x4, 0x97, &(0x7f0000000180)=""/151, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$kcm(0x29, 0x0, 0x0) pipe(&(0x7f0000000040)) (async) write(r1, &(0x7f0000000340), 0x11000) (async) vmsplice(r0, &(0x7f00000009c0)=[{&(0x7f0000000580)="ccc48918c7", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xf) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r3, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x30}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair(0x10, 0x0, 0x8000, &(0x7f0000000080)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) (async) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000000c0)={'rose0\x00', 0x6b6f}) (async) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000180)) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000310000009c0000000000000006000000000000008d153cf14b18cdc6"], &(0x7f0000000040)='GPL\x00', 0x4, 0x97, &(0x7f0000000180)=""/151, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) socket$kcm(0x29, 0x0, 0x0) (async) 44.396734648s ago: executing program 0 (id=2468): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000177c762ae9975f1da27b99b312fa28bc6fa4c8cc575449e5cd96b36b6fafcc37121caea32f9948c7a7884ef84f82802800a3f0782a83d6e9443a068d751c45336eaed83213826918c54346c3875c05ab6c6eb6e4dfdb291bacf7ad2d1c773f5ebde402cd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) epoll_create(0x7) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x3e, 0x0, &(0x7f0000000a00)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c10892fd320d98a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 29.355420514s ago: executing program 0 (id=2468): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000177c762ae9975f1da27b99b312fa28bc6fa4c8cc575449e5cd96b36b6fafcc37121caea32f9948c7a7884ef84f82802800a3f0782a83d6e9443a068d751c45336eaed83213826918c54346c3875c05ab6c6eb6e4dfdb291bacf7ad2d1c773f5ebde402cd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) epoll_create(0x7) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x3e, 0x0, &(0x7f0000000a00)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c10892fd320d98a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 26.961502688s ago: executing program 3 (id=2549): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f00000009c0)=[{&(0x7f0000000580)="ccc48918c7", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xf) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r3, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x30}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair(0x10, 0x0, 0x8000, &(0x7f0000000080)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000000c0)={'rose0\x00', 0x6b6f}) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000310000009c0000000000000006000000000000008d153cf14b18cdc6"], &(0x7f0000000040)='GPL\x00', 0x4, 0x97, &(0x7f0000000180)=""/151, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$kcm(0x29, 0x0, 0x0) pipe(&(0x7f0000000040)) (async) write(r1, &(0x7f0000000340), 0x11000) (async) vmsplice(r0, &(0x7f00000009c0)=[{&(0x7f0000000580)="ccc48918c7", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xf) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r3, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x30}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair(0x10, 0x0, 0x8000, &(0x7f0000000080)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) (async) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000000c0)={'rose0\x00', 0x6b6f}) (async) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000180)) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000310000009c0000000000000006000000000000008d153cf14b18cdc6"], &(0x7f0000000040)='GPL\x00', 0x4, 0x97, &(0x7f0000000180)=""/151, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) socket$kcm(0x29, 0x0, 0x0) (async) 11.925692184s ago: executing program 0 (id=2468): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000177c762ae9975f1da27b99b312fa28bc6fa4c8cc575449e5cd96b36b6fafcc37121caea32f9948c7a7884ef84f82802800a3f0782a83d6e9443a068d751c45336eaed83213826918c54346c3875c05ab6c6eb6e4dfdb291bacf7ad2d1c773f5ebde402cd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) epoll_create(0x7) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x3e, 0x0, &(0x7f0000000a00)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c10892fd320d98a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.842028991s ago: executing program 1 (id=2796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r1, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000280)={0x3, 'lo\x00', {0xc}, 0xc1}) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 10.537629543s ago: executing program 3 (id=2549): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f00000009c0)=[{&(0x7f0000000580)="ccc48918c7", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xf) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r3, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x30}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair(0x10, 0x0, 0x8000, &(0x7f0000000080)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000000c0)={'rose0\x00', 0x6b6f}) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000310000009c0000000000000006000000000000008d153cf14b18cdc6"], &(0x7f0000000040)='GPL\x00', 0x4, 0x97, &(0x7f0000000180)=""/151, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$kcm(0x29, 0x0, 0x0) pipe(&(0x7f0000000040)) (async) write(r1, &(0x7f0000000340), 0x11000) (async) vmsplice(r0, &(0x7f00000009c0)=[{&(0x7f0000000580)="ccc48918c7", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xf) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, r3, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x30}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair(0x10, 0x0, 0x8000, &(0x7f0000000080)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) (async) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000000c0)={'rose0\x00', 0x6b6f}) (async) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000180)) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000310000009c0000000000000006000000000000008d153cf14b18cdc6"], &(0x7f0000000040)='GPL\x00', 0x4, 0x97, &(0x7f0000000180)=""/151, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) socket$kcm(0x29, 0x0, 0x0) (async) 9.881262581s ago: executing program 1 (id=2797): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='fsi_master_rw_result\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r8, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) (async) vmsplice(r8, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r7) (async) close(r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000580), 0xfe07) shutdown(r9, 0x1) (async) shutdown(r9, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r10, 0x0, 0x0) (async) write$cgroup_int(r10, 0x0, 0x0) unshare(0x22020600) unshare(0x2a020400) 9.530030075s ago: executing program 1 (id=2803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x111}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) unshare(0x62040200) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) write$cgroup_subtree(r10, &(0x7f0000000300), 0x0) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r9, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 5.235383762s ago: executing program 1 (id=2822): socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f00000018c0)) r1 = socket$kcm(0xa, 0x5, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1000b, 0x0, 0x0, 0x41000, 0x10}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) shutdown(r3, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x8804, &(0x7f000005ffe4)={0xa, 0x0, 0x25, @loopback, 0x6}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) (async) ppoll(&(0x7f0000000000)=[{r4, 0x4000}], 0x1, 0x0, 0x0, 0x0) (async) shutdown(r4, 0x1) (async) recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r2], 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000040)={0x4, 0x8001}) 5.113036524s ago: executing program 1 (id=2823): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockname(r4, 0x0, &(0x7f0000000180)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) listen(r5, 0x5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r7}, 0x18) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmmsg(r5, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x844) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000f80)={'caif0\x00', &(0x7f0000000540)=@ethtool_ringparam={0x11, 0x1, 0x0, 0xfffffffc, 0x3, 0x7, 0xfffffffa, 0x80000000, 0x7}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r10, &(0x7f0000000380)={0x1d, r11, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8001) unshare(0x60600) 3.809805411s ago: executing program 2 (id=2831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x34, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$kcm(0x1e, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r11, 0xa}, 0x8) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x6, 0x20, 0xff}, 0x2f) r12 = openat$cgroup_pressure(r6, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r12, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) close(r7) close(r12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r13, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800000004060104000000000000000007000005050001000f000000050001000700000005000100070000000900020073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.217957067s ago: executing program 2 (id=2833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) r1 = socket$inet(0x2, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000300)={0x10, {{0x29, 0x0, 0x3f7ffff, @mcast2, 0x7f}}}, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000020000000000000004000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 2.32999371s ago: executing program 2 (id=2836): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0xd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x1100}], 0x400000000000172, 0x4001c00) 1.479715012s ago: executing program 2 (id=2837): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40055}, 0x40) 1.3140589s ago: executing program 2 (id=2840): r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000000}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @union]}}, 0x0, 0x3e}, 0x28) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7b, @mcast2, 0x4}, 0x1c) 1.313573269s ago: executing program 4 (id=2841): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x61, &(0x7f0000000400)=""/97, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x0, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[r2, r2], &(0x7f0000000500)=[{0x0, 0x2, 0xe, 0xb}, {0x0, 0x2, 0xe, 0x8}, {0x2, 0x1, 0xa, 0xa}, {0x3, 0x1, 0x1, 0x2}, {0x2, 0x4, 0x1, 0x1}, {0x4, 0x1, 0x10, 0x3}, {0x1, 0x5, 0x6, 0x4}, {0x4, 0x5, 0x9, 0x6}], 0x10, 0x81}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x3}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@addrtype={{0x30}, {0xd85, 0x500}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x3}, 0x0, 0xff, 'erspan0\x00', 'tunl0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="27b5422fbf60", 0x6, 0x3, [0x26, 0x3e, 0x1f, 0x8, 0x32, 0x33, 0x37, 0x19, 0x3, 0x37, 0x1b, 0x1f, 0x2c, 0x2b, 0x21, 0x17], 0x0, 0x9, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0130014010ff"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x61, &(0x7f0000000400)=""/97, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x0, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[r2, r2], &(0x7f0000000500)=[{0x0, 0x2, 0xe, 0xb}, {0x0, 0x2, 0xe, 0x8}, {0x2, 0x1, 0xa, 0xa}, {0x3, 0x1, 0x1, 0x2}, {0x2, 0x4, 0x1, 0x1}, {0x4, 0x1, 0x10, 0x3}, {0x1, 0x5, 0x6, 0x4}, {0x4, 0x5, 0x9, 0x6}], 0x10, 0x81}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x3}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@addrtype={{0x30}, {0xd85, 0x500}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x3}, 0x0, 0xff, 'erspan0\x00', 'tunl0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="27b5422fbf60", 0x6, 0x3, [0x26, 0x3e, 0x1f, 0x8, 0x32, 0x33, 0x37, 0x19, 0x3, 0x37, 0x1b, 0x1f, 0x2c, 0x2b, 0x21, 0x17], 0x0, 0x9, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) (async) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0130014010ff"}) (async) 1.182608266s ago: executing program 4 (id=2842): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b113a00000000009f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async, rerun: 32) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r0}, 0x18) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000100)="eb63ae2b85c1f5a79b3543bd9729987f25a8ce4da0170b8625195d1732e5ff32a32ab460a289369ab16daf90df503d6e8efd84d06448d439e71c6a0fd026fde1c0e039ba9f384169731d67ec08f0a2b760a1bd822b1048139b1ef4fde979e753bfcc7b8995a2dcb79c58fff305d5981a8412dc050c49f75a049ea81ca220cb703f255e480212983819a5b74f27b5f9fe60e95368973131ff56801431d16fb4c85e0e98d9f6a14d617eb4b52cc8169aae710f4b0fb04b7c2c068bd8b5fb6f18727f603d664c0dadf4b55b052e56e63a06cc3021d98cf44f0b71b9828c60485c78a310388fdb0967", 0xe7}, {&(0x7f0000000200)="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", 0x1000}], 0x2) 845.894788ms ago: executing program 4 (id=2843): unshare(0x2040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 766.084974ms ago: executing program 2 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8d}}}, 0x84) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x80000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x30, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x3e9, 0x200, 0x70bd27, 0x25dfdbff, {0x28, 0x1, 0x2, 0xffffffffffffffff, 0x1a, 0x4, 0x5, 0x2, 0x0, 0x8, 0x2000000}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048881}, 0x24000044) 626.28588ms ago: executing program 4 (id=2845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x11, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b1a, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d5f"], 0xe0}], 0x1}, 0x40040) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}, 0xa}, {{0x0, 0x0, 0x0}, 0x8}], 0x47, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x10161, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) 148.940957ms ago: executing program 4 (id=2846): setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x20, 0x2, 0xff7ff012}, {0x80000006, 0x2, 0x3, 0xd}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1, 0x80}) 10.05645ms ago: executing program 4 (id=2847): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0xd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x1200}], 0x400000000000172, 0x4001c00) 0s ago: executing program 1 (id=2848): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r2}, 0x20) bind$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, 0x0) sendmmsg$unix(r2, &(0x7f0000003b40)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 71][T12319] veth1_to_team: entered promiscuous mode [ 287.661427][T12300] lo speed is unknown, defaulting to 1000 [ 287.672408][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1834'. [ 287.682031][T12335] netlink: 'syz.4.1834': attribute type 11 has an invalid length. [ 287.938692][T12348] netlink: 'syz.3.1838': attribute type 4 has an invalid length. [ 287.957275][T12346] xt_HMARK: spi-set and port-set can't be combined [ 287.977640][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'. [ 288.001785][T12350] pim6reg: entered allmulticast mode [ 288.057546][T12348] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1838'. [ 288.302001][T12356] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1841'. [ 288.645409][T12368] bond0: mtu less than device minimum [ 289.082871][T12398] netlink: 'syz.0.1857': attribute type 10 has an invalid length. [ 289.098919][T12398] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 289.141048][T12398] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1857'. [ 289.265988][T12413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1861'. [ 289.483888][T12424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1861'. [ 289.844368][T12442] FAULT_INJECTION: forcing a failure. [ 289.844368][T12442] name failslab, interval 1, probability 0, space 0, times 0 [ 289.887930][T12442] CPU: 1 UID: 0 PID: 12442 Comm: syz.2.1870 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 289.887958][T12442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.887970][T12442] Call Trace: [ 289.887978][T12442] [ 289.887986][T12442] dump_stack_lvl+0x189/0x250 [ 289.888014][T12442] ? __pfx____ratelimit+0x10/0x10 [ 289.888038][T12442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.888061][T12442] ? __pfx__printk+0x10/0x10 [ 289.888092][T12442] ? __pfx___might_resched+0x10/0x10 [ 289.888113][T12442] ? fs_reclaim_acquire+0x7d/0x100 [ 289.888143][T12442] should_fail_ex+0x414/0x560 [ 289.888174][T12442] should_failslab+0xa8/0x100 [ 289.888199][T12442] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 289.888223][T12442] ? rxrpc_setsockopt+0x541/0x9a0 [ 289.888261][T12442] rxrpc_request_key+0xba/0x250 [ 289.888290][T12442] rxrpc_setsockopt+0x541/0x9a0 [ 289.888315][T12442] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 289.888341][T12442] ? aa_sock_opt_perm+0x74/0x110 [ 289.888369][T12442] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 289.888386][T12442] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 289.888412][T12442] do_sock_setsockopt+0x257/0x3e0 [ 289.888444][T12442] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 289.888477][T12442] ? __fget_files+0x2a/0x420 [ 289.888509][T12442] __x64_sys_setsockopt+0x18b/0x220 [ 289.888543][T12442] do_syscall_64+0xfa/0x3b0 [ 289.888566][T12442] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.888589][T12442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.888609][T12442] ? clear_bhb_loop+0x60/0xb0 [ 289.888633][T12442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.888651][T12442] RIP: 0033:0x7fb13338e929 [ 289.888668][T12442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.888685][T12442] RSP: 002b:00007fb1341c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.888705][T12442] RAX: ffffffffffffffda RBX: 00007fb1335b5fa0 RCX: 00007fb13338e929 [ 289.888719][T12442] RDX: 0000000000000001 RSI: 0000000000000110 RDI: 0000000000000003 [ 289.888731][T12442] RBP: 00007fb1341c0090 R08: 0000000000000001 R09: 0000000000000000 [ 289.888742][T12442] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 289.888755][T12442] R13: 0000000000000000 R14: 00007fb1335b5fa0 R15: 00007ffe9b5ae3a8 [ 289.888786][T12442] [ 290.203928][T12447] netlink: 'syz.1.1872': attribute type 29 has an invalid length. [ 290.212835][T12447] netlink: 'syz.1.1872': attribute type 29 has an invalid length. [ 290.226607][T12447] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1872'. [ 290.495505][T12462] sctp: [Deprecated]: syz.0.1877 (pid 12462) Use of int in max_burst socket option. [ 290.495505][T12462] Use struct sctp_assoc_value instead [ 290.668569][T12471] FAULT_INJECTION: forcing a failure. [ 290.668569][T12471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.768343][T12471] CPU: 0 UID: 0 PID: 12471 Comm: syz.4.1883 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 290.768372][T12471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.768384][T12471] Call Trace: [ 290.768392][T12471] [ 290.768400][T12471] dump_stack_lvl+0x189/0x250 [ 290.768437][T12471] ? __pfx____ratelimit+0x10/0x10 [ 290.768462][T12471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.768485][T12471] ? __pfx__printk+0x10/0x10 [ 290.768525][T12471] should_fail_ex+0x414/0x560 [ 290.768558][T12471] _copy_from_user+0x2d/0xb0 [ 290.768582][T12471] rxrpc_request_key+0x103/0x250 [ 290.768615][T12471] rxrpc_setsockopt+0x541/0x9a0 [ 290.768644][T12471] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 290.768673][T12471] ? aa_sock_opt_perm+0x74/0x110 [ 290.768703][T12471] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 290.768721][T12471] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 290.768748][T12471] do_sock_setsockopt+0x257/0x3e0 [ 290.768779][T12471] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 290.768810][T12471] ? __fget_files+0x2a/0x420 [ 290.768843][T12471] __x64_sys_setsockopt+0x18b/0x220 [ 290.768875][T12471] do_syscall_64+0xfa/0x3b0 [ 290.768897][T12471] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.768920][T12471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.768939][T12471] ? clear_bhb_loop+0x60/0xb0 [ 290.768962][T12471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.768981][T12471] RIP: 0033:0x7fc05998e929 [ 290.768997][T12471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.769013][T12471] RSP: 002b:00007fc05a726038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 290.769033][T12471] RAX: ffffffffffffffda RBX: 00007fc059bb5fa0 RCX: 00007fc05998e929 [ 290.769044][T12471] RDX: 0000000000000001 RSI: 0000000000000110 RDI: 0000000000000003 [ 290.769056][T12471] RBP: 00007fc05a726090 R08: 0000000000000001 R09: 0000000000000000 [ 290.769068][T12471] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 290.769081][T12471] R13: 0000000000000000 R14: 00007fc059bb5fa0 R15: 00007ffce42d33b8 [ 290.769112][T12471] [ 290.990074][T12483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1885'. [ 291.358322][T12496] gretap0: entered promiscuous mode [ 291.417491][T12496] gretap0: left promiscuous mode [ 292.277637][T12521] FAULT_INJECTION: forcing a failure. [ 292.277637][T12521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.347303][T12521] CPU: 1 UID: 0 PID: 12521 Comm: syz.4.1894 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 292.347333][T12521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.347346][T12521] Call Trace: [ 292.347354][T12521] [ 292.347362][T12521] dump_stack_lvl+0x189/0x250 [ 292.347391][T12521] ? __pfx____ratelimit+0x10/0x10 [ 292.347416][T12521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.347439][T12521] ? __pfx__printk+0x10/0x10 [ 292.347465][T12521] ? __might_fault+0xb0/0x130 [ 292.347502][T12521] should_fail_ex+0x414/0x560 [ 292.347536][T12521] _copy_from_user+0x2d/0xb0 [ 292.347560][T12521] ___sys_sendmsg+0x158/0x2a0 [ 292.347592][T12521] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.347662][T12521] ? __fget_files+0x2a/0x420 [ 292.347688][T12521] ? __fget_files+0x3a0/0x420 [ 292.347726][T12521] __x64_sys_sendmsg+0x19b/0x260 [ 292.347748][T12521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.347788][T12521] ? __pfx_ksys_write+0x10/0x10 [ 292.347808][T12521] ? rcu_is_watching+0x15/0xb0 [ 292.347835][T12521] ? do_syscall_64+0xbe/0x3b0 [ 292.347862][T12521] do_syscall_64+0xfa/0x3b0 [ 292.347885][T12521] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.347908][T12521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.347926][T12521] ? clear_bhb_loop+0x60/0xb0 [ 292.347950][T12521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.347969][T12521] RIP: 0033:0x7fc05998e929 [ 292.347985][T12521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.348002][T12521] RSP: 002b:00007fc05a726038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.348021][T12521] RAX: ffffffffffffffda RBX: 00007fc059bb5fa0 RCX: 00007fc05998e929 [ 292.348035][T12521] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 292.348047][T12521] RBP: 00007fc05a726090 R08: 0000000000000000 R09: 0000000000000000 [ 292.348059][T12521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.348068][T12521] R13: 0000000000000000 R14: 00007fc059bb5fa0 R15: 00007ffce42d33b8 [ 292.348098][T12521] [ 292.588087][T12525] lo speed is unknown, defaulting to 1000 [ 292.852408][T12536] __nla_validate_parse: 2 callbacks suppressed [ 292.852427][T12536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1897'. [ 293.247847][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'. [ 293.353037][T12525] lo speed is unknown, defaulting to 1000 [ 293.353051][T12523] lo speed is unknown, defaulting to 1000 [ 293.427519][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 293.435761][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 293.860092][T12573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1908'. [ 293.890327][T12523] lo speed is unknown, defaulting to 1000 [ 293.991466][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880298a4800: rx timeout, send abort [ 294.048173][T12562] lo speed is unknown, defaulting to 1000 [ 294.300134][T12588] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1912'. [ 294.501200][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880298a4800: abort rx timeout. Force session deactivation [ 294.702956][T12602] bridge0: port 1(syz_tun) entered blocking state [ 294.734280][T12602] bridge0: port 1(syz_tun) entered disabled state [ 294.752271][T12562] lo speed is unknown, defaulting to 1000 [ 295.584141][T12619] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1919'. [ 295.635442][T12614] lo speed is unknown, defaulting to 1000 [ 295.770280][T12627] netlink: 'syz.3.1924': attribute type 29 has an invalid length. [ 295.799741][T12630] netlink: 'syz.3.1924': attribute type 29 has an invalid length. [ 295.829093][T12627] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1924'. [ 296.088284][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1927'. [ 296.143255][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1926'. [ 296.290006][T12633] lo speed is unknown, defaulting to 1000 [ 296.306491][T12644] sctp: [Deprecated]: syz.2.1928 (pid 12644) Use of int in max_burst socket option. [ 296.306491][T12644] Use struct sctp_assoc_value instead [ 296.306882][T12614] lo speed is unknown, defaulting to 1000 [ 297.230356][T12633] lo speed is unknown, defaulting to 1000 [ 297.443448][T12685] syzkaller1: entered promiscuous mode [ 297.449786][T12685] syzkaller1: entered allmulticast mode [ 297.661712][T12695] sctp: [Deprecated]: syz.2.1943 (pid 12695) Use of int in max_burst socket option. [ 297.661712][T12695] Use struct sctp_assoc_value instead [ 298.015095][T12703] Cannot find add_set index 2 as target [ 298.268794][T12709] tap0: tun_chr_ioctl cmd 1074025678 [ 298.276491][T12709] tap0: group set to 0 [ 298.549499][T12720] __nla_validate_parse: 1 callbacks suppressed [ 298.549521][T12720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1950'. [ 298.611634][T12725] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 298.625301][T12725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1953'. [ 298.636323][T12725] bridge0: port 1(dummy0) entered blocking state [ 298.652587][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 298.664239][T12725] bridge0: port 1(dummy0) entered disabled state [ 298.676489][T12725] dummy0: entered allmulticast mode [ 298.684358][T12725] dummy0: entered promiscuous mode [ 298.698933][T12725] bridge0: port 1(dummy0) entered blocking state [ 298.705485][T12725] bridge0: port 1(dummy0) entered listening state [ 298.707969][T12732] sctp: [Deprecated]: syz.2.1954 (pid 12732) Use of int in max_burst socket option. [ 298.707969][T12732] Use struct sctp_assoc_value instead [ 298.796941][T12735] tipc: Enabled bearer , priority 0 [ 298.870769][T12735] syzkaller0: entered promiscuous mode [ 298.877028][T12735] syzkaller0: entered allmulticast mode [ 298.883859][T12735] tipc: Resetting bearer [ 298.908234][T12733] tipc: Resetting bearer [ 299.088198][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1959'. [ 299.453339][T12761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1964'. [ 299.476946][T12761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1964'. [ 300.887562][T12733] tipc: Disabling bearer [ 301.055614][T12777] lo speed is unknown, defaulting to 1000 [ 301.056719][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1968'. [ 301.076503][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1968'. [ 301.192906][T12798] netem: change failed [ 301.354915][T12805] netlink: 'syz.0.1975': attribute type 2 has an invalid length. [ 301.355560][T12806] netlink: 'syz.0.1975': attribute type 2 has an invalid length. [ 301.390051][T12805] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 301.427241][T12805] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1975'. [ 301.427778][T12806] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 301.487640][T12777] lo speed is unknown, defaulting to 1000 [ 301.539819][T12806] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1975'. [ 301.957612][T12836] netlink: 'syz.1.1984': attribute type 10 has an invalid length. [ 301.994962][T12836] bridge_slave_1: left allmulticast mode [ 302.013441][T12836] bridge_slave_1: left promiscuous mode [ 302.069960][T12836] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.236466][T12845] wireguard0: entered promiscuous mode [ 302.259728][T12845] wireguard0: entered allmulticast mode [ 302.362953][T12851] syzkaller1: entered allmulticast mode [ 302.790259][T12882] batadv_slave_1: entered promiscuous mode [ 302.802657][T12885] batadv_slave_1: left promiscuous mode [ 303.036304][T12889] lo speed is unknown, defaulting to 1000 [ 303.167640][T12903] bridge0: port 2(gretap0) entered blocking state [ 303.205068][T12903] bridge0: port 2(gretap0) entered disabled state [ 303.238773][T12903] gretap0: entered allmulticast mode [ 303.251696][T12903] gretap0: entered promiscuous mode [ 303.318743][T12908] batadv2: entered promiscuous mode [ 303.334233][T12908] batadv2: entered allmulticast mode [ 303.696279][T12889] lo speed is unknown, defaulting to 1000 [ 304.106863][T12945] __nla_validate_parse: 9 callbacks suppressed [ 304.106882][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 304.169517][T12949] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2016'. [ 304.269570][T12948] lo speed is unknown, defaulting to 1000 [ 304.790784][T12971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.794634][T12974] FAULT_INJECTION: forcing a failure. [ 304.794634][T12974] name failslab, interval 1, probability 0, space 0, times 0 [ 304.865693][T12974] CPU: 1 UID: 0 PID: 12974 Comm: syz.4.2025 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 304.865746][T12974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.865774][T12974] Call Trace: [ 304.865782][T12974] [ 304.865791][T12974] dump_stack_lvl+0x189/0x250 [ 304.865821][T12974] ? __pfx____ratelimit+0x10/0x10 [ 304.865846][T12974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.865870][T12974] ? __pfx__printk+0x10/0x10 [ 304.865902][T12974] ? __pfx___might_resched+0x10/0x10 [ 304.865924][T12974] ? fs_reclaim_acquire+0x7d/0x100 [ 304.865957][T12974] should_fail_ex+0x414/0x560 [ 304.865992][T12974] should_failslab+0xa8/0x100 [ 304.866018][T12974] kmem_cache_alloc_noprof+0x73/0x3c0 [ 304.866041][T12974] ? ep_insert+0x272/0x1a00 [ 304.866069][T12974] ep_insert+0x272/0x1a00 [ 304.866100][T12974] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 304.866127][T12974] ? epoll_mutex_lock+0x4d/0x60 [ 304.866153][T12974] ? __pfx_ep_insert+0x10/0x10 [ 304.866187][T12974] ? __might_fault+0xb0/0x130 [ 304.866223][T12974] do_epoll_ctl+0x7f4/0xe90 [ 304.866257][T12974] __x64_sys_epoll_ctl+0x163/0x1a0 [ 304.866284][T12974] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 304.866305][T12974] ? rcu_is_watching+0x15/0xb0 [ 304.866335][T12974] ? do_syscall_64+0xbe/0x3b0 [ 304.866369][T12974] do_syscall_64+0xfa/0x3b0 [ 304.866392][T12974] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.866415][T12974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.866434][T12974] ? clear_bhb_loop+0x60/0xb0 [ 304.866459][T12974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.866477][T12974] RIP: 0033:0x7fc05998e929 [ 304.866495][T12974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.866514][T12974] RSP: 002b:00007fc05a726038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 304.866535][T12974] RAX: ffffffffffffffda RBX: 00007fc059bb5fa0 RCX: 00007fc05998e929 [ 304.866549][T12974] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 304.866560][T12974] RBP: 00007fc05a726090 R08: 0000000000000000 R09: 0000000000000000 [ 304.866572][T12974] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 304.866585][T12974] R13: 0000000000000000 R14: 00007fc059bb5fa0 R15: 00007ffce42d33b8 [ 304.866618][T12974] [ 305.466726][T12948] lo speed is unknown, defaulting to 1000 [ 305.554090][T12994] geneve1: entered promiscuous mode [ 305.569071][T12994] geneve1: entered allmulticast mode [ 306.065099][ T5168] Bluetooth: hci4: command 0x0405 tx timeout [ 306.144270][T13026] FAULT_INJECTION: forcing a failure. [ 306.144270][T13026] name failslab, interval 1, probability 0, space 0, times 0 [ 306.164030][T13026] CPU: 0 UID: 0 PID: 13026 Comm: syz.0.2040 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 306.164058][T13026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.164071][T13026] Call Trace: [ 306.164079][T13026] [ 306.164087][T13026] dump_stack_lvl+0x189/0x250 [ 306.164116][T13026] ? __pfx____ratelimit+0x10/0x10 [ 306.164141][T13026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.164164][T13026] ? __pfx__printk+0x10/0x10 [ 306.164193][T13026] ? __pfx___might_resched+0x10/0x10 [ 306.164217][T13026] ? fs_reclaim_acquire+0x7d/0x100 [ 306.164250][T13026] should_fail_ex+0x414/0x560 [ 306.164285][T13026] should_failslab+0xa8/0x100 [ 306.164313][T13026] kmem_cache_alloc_noprof+0x73/0x3c0 [ 306.164336][T13026] ? ep_ptable_queue_proc+0x5c/0x200 [ 306.164367][T13026] ep_ptable_queue_proc+0x5c/0x200 [ 306.164390][T13026] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 306.164419][T13026] __ep_eventpoll_poll+0x14f/0x7c0 [ 306.164449][T13026] ? __pfx___ep_eventpoll_poll+0x10/0x10 [ 306.164486][T13026] ep_insert+0x1187/0x1a00 [ 306.164526][T13026] ? __pfx_ep_insert+0x10/0x10 [ 306.164556][T13026] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 306.164577][T13026] ? __might_fault+0xb0/0x130 [ 306.164611][T13026] do_epoll_ctl+0x7f4/0xe90 [ 306.164643][T13026] __x64_sys_epoll_ctl+0x163/0x1a0 [ 306.164667][T13026] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 306.164689][T13026] ? rcu_is_watching+0x15/0xb0 [ 306.164718][T13026] ? do_syscall_64+0xbe/0x3b0 [ 306.164748][T13026] do_syscall_64+0xfa/0x3b0 [ 306.164771][T13026] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.164795][T13026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.164815][T13026] ? clear_bhb_loop+0x60/0xb0 [ 306.164839][T13026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.164858][T13026] RIP: 0033:0x7f8491f8e929 [ 306.164883][T13026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.164901][T13026] RSP: 002b:00007f848fdf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 306.164922][T13026] RAX: ffffffffffffffda RBX: 00007f84921b5fa0 RCX: 00007f8491f8e929 [ 306.164937][T13026] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 306.164948][T13026] RBP: 00007f848fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 306.164960][T13026] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 306.164973][T13026] R13: 0000000000000000 R14: 00007f84921b5fa0 R15: 00007ffd46980608 [ 306.165006][T13026] [ 306.788264][T13048] tipc: Cannot configure node identity twice [ 306.888088][T13056] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 306.956812][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2051'. [ 307.052300][T13069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2053'. [ 307.084046][T13059] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 307.086334][T13056] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2048'. [ 307.124317][T13060] bridge_slave_1: left allmulticast mode [ 307.158184][T13060] bridge_slave_1: left promiscuous mode [ 307.164026][T13060] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.200343][T13060] ¾x9ÿ: left allmulticast mode [ 307.210322][T13060] ¾x9ÿ: left promiscuous mode [ 307.216390][T13076] netlink: 'syz.2.2054': attribute type 11 has an invalid length. [ 307.218706][T13060] bridge0: port 1(1¾x9ÿ) entered disabled state [ 307.226178][T13076] netlink: 'syz.2.2054': attribute type 11 has an invalid length. [ 307.239078][T13076] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2054'. [ 307.432302][T13065] lo speed is unknown, defaulting to 1000 [ 307.799331][T13099] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 307.857477][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2063'. [ 307.920629][T13102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2061'. [ 308.039272][T13065] lo speed is unknown, defaulting to 1000 [ 308.395187][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 309.100808][T13168] netlink: 'syz.4.2079': attribute type 1 has an invalid length. [ 309.265666][T13174] netlink: 'syz.0.2081': attribute type 3 has an invalid length. [ 309.386887][T13178] netlink: 'syz.3.2083': attribute type 142 has an invalid length. [ 309.416844][T13178] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2083'. [ 309.504367][T13185] netlink: 'syz.2.2082': attribute type 3 has an invalid length. [ 309.520951][T13180] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 309.539068][T13185] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.2082'. [ 309.717837][T13193] FAULT_INJECTION: forcing a failure. [ 309.717837][T13193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.734594][T13193] CPU: 0 UID: 0 PID: 13193 Comm: syz.3.2087 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 309.734630][T13193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.734642][T13193] Call Trace: [ 309.734650][T13193] [ 309.734659][T13193] dump_stack_lvl+0x189/0x250 [ 309.734687][T13193] ? __pfx____ratelimit+0x10/0x10 [ 309.734712][T13193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.734735][T13193] ? __pfx__printk+0x10/0x10 [ 309.734775][T13193] should_fail_ex+0x414/0x560 [ 309.734809][T13193] _copy_to_user+0x31/0xb0 [ 309.734834][T13193] simple_read_from_buffer+0xe1/0x170 [ 309.734865][T13193] proc_fail_nth_read+0x1df/0x250 [ 309.734896][T13193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.734927][T13193] ? rw_verify_area+0x258/0x650 [ 309.734948][T13193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.734977][T13193] vfs_read+0x200/0x980 [ 309.735005][T13193] ? __pfx___mutex_lock+0x10/0x10 [ 309.735031][T13193] ? __pfx_vfs_read+0x10/0x10 [ 309.735055][T13193] ? __fget_files+0x2a/0x420 [ 309.735085][T13193] ? __fget_files+0x3a0/0x420 [ 309.735109][T13193] ? __fget_files+0x2a/0x420 [ 309.735145][T13193] ksys_read+0x145/0x250 [ 309.735169][T13193] ? __pfx_ksys_read+0x10/0x10 [ 309.735197][T13193] ? do_syscall_64+0xbe/0x3b0 [ 309.735227][T13193] do_syscall_64+0xfa/0x3b0 [ 309.735249][T13193] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.735271][T13193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.735291][T13193] ? clear_bhb_loop+0x60/0xb0 [ 309.735315][T13193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.735334][T13193] RIP: 0033:0x7f27e8f8d33c [ 309.735351][T13193] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 309.735369][T13193] RSP: 002b:00007f27e9da7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.735390][T13193] RAX: ffffffffffffffda RBX: 00007f27e91b5fa0 RCX: 00007f27e8f8d33c [ 309.735405][T13193] RDX: 000000000000000f RSI: 00007f27e9da70a0 RDI: 0000000000000009 [ 309.735418][T13193] RBP: 00007f27e9da7090 R08: 0000000000000000 R09: 0000000000000000 [ 309.735430][T13193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.735442][T13193] R13: 0000000000000000 R14: 00007f27e91b5fa0 R15: 00007ffecf73aec8 [ 309.735474][T13193] [ 309.992973][T13199] tipc: Cannot configure node identity twice [ 310.453951][T13222] sctp: [Deprecated]: syz.2.2097 (pid 13222) Use of int in max_burst socket option. [ 310.453951][T13222] Use struct sctp_assoc_value instead [ 310.633230][T13232] syzkaller0: entered promiscuous mode [ 310.649792][T13232] syzkaller0: entered allmulticast mode [ 310.803544][T13241] FAULT_INJECTION: forcing a failure. [ 310.803544][T13241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.848013][T13241] CPU: 0 UID: 0 PID: 13241 Comm: syz.4.2105 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 310.848044][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.848056][T13241] Call Trace: [ 310.848064][T13241] [ 310.848073][T13241] dump_stack_lvl+0x189/0x250 [ 310.848101][T13241] ? __pfx____ratelimit+0x10/0x10 [ 310.848125][T13241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.848149][T13241] ? __pfx__printk+0x10/0x10 [ 310.848182][T13241] ? __might_fault+0xb0/0x130 [ 310.848217][T13241] should_fail_ex+0x414/0x560 [ 310.848250][T13241] _copy_from_user+0x2d/0xb0 [ 310.848274][T13241] ___sys_sendmsg+0x158/0x2a0 [ 310.848307][T13241] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.848376][T13241] ? __fget_files+0x2a/0x420 [ 310.848400][T13241] ? __fget_files+0x3a0/0x420 [ 310.848436][T13241] __sys_sendmmsg+0x227/0x430 [ 310.848460][T13241] ? __pfx___sys_sendmmsg+0x10/0x10 [ 310.848475][T13241] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 310.848528][T13241] ? ksys_write+0x22a/0x250 [ 310.848553][T13241] ? __pfx_ksys_write+0x10/0x10 [ 310.848573][T13241] ? rcu_is_watching+0x15/0xb0 [ 310.848603][T13241] __x64_sys_sendmmsg+0xa0/0xc0 [ 310.848623][T13241] do_syscall_64+0xfa/0x3b0 [ 310.848647][T13241] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.848671][T13241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.848690][T13241] ? clear_bhb_loop+0x60/0xb0 [ 310.848714][T13241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.848732][T13241] RIP: 0033:0x7fc05998e929 [ 310.848750][T13241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.848767][T13241] RSP: 002b:00007fc05a726038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 310.848788][T13241] RAX: ffffffffffffffda RBX: 00007fc059bb5fa0 RCX: 00007fc05998e929 [ 310.848802][T13241] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 310.848816][T13241] RBP: 00007fc05a726090 R08: 0000000000000000 R09: 0000000000000000 [ 310.848828][T13241] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 310.848840][T13241] R13: 0000000000000000 R14: 00007fc059bb5fa0 R15: 00007ffce42d33b8 [ 310.848871][T13241] [ 311.129351][T13248] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2109'. [ 311.186120][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'. [ 311.261489][T13248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2109'. [ 311.619593][T13279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2117'. [ 311.718653][T13282] netlink: 'syz.0.2118': attribute type 3 has an invalid length. [ 311.744303][T13282] netlink: 191644 bytes leftover after parsing attributes in process `syz.0.2118'. [ 311.836736][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 312.302982][T13318] xt_CT: No such helper "snmp" [ 312.570525][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2128'. [ 312.599063][T13329] netlink: 'syz.1.2128': attribute type 2 has an invalid length. [ 313.190864][T13356] team0: Device gtp2 is of different type [ 314.081993][T13425] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 314.246658][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'. [ 314.263796][T13429] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 314.272319][T13429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.349589][T13498] lo speed is unknown, defaulting to 1000 [ 316.430073][T13560] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2181'. [ 316.457643][T13560] batadv_slave_0: entered promiscuous mode [ 316.483687][T13560] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2181'. [ 316.954697][T13582] bridge0: port 4(veth0_to_bridge) entered blocking state [ 316.993922][T13582] bridge0: port 4(veth0_to_bridge) entered disabled state [ 317.025071][T13582] veth0_to_bridge: entered allmulticast mode [ 317.076039][T13582] veth0_to_bridge: entered promiscuous mode [ 317.118933][T13498] lo speed is unknown, defaulting to 1000 [ 317.124922][T13588] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 317.230776][T13597] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2188'. [ 317.239680][T13582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2185'. [ 317.418868][T13593] lo speed is unknown, defaulting to 1000 [ 317.859720][T13616] netlink: 'syz.2.2190': attribute type 4 has an invalid length. [ 318.427508][T13593] lo speed is unknown, defaulting to 1000 [ 318.544938][T13611] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 318.661529][T13639] x_tables: duplicate underflow at hook 4 [ 318.909818][T13450] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.925388][T13450] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.933621][T13450] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.972326][T13648] veth1_to_team: left promiscuous mode [ 319.041774][T13648] gretap1: left promiscuous mode [ 319.066645][T13450] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.716085][T13669] wireguard0: entered promiscuous mode [ 319.721601][T13669] wireguard0: entered allmulticast mode [ 319.957409][T13679] netlink: 'syz.3.2208': attribute type 83 has an invalid length. [ 320.220033][T13689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2212'. [ 320.245296][T13690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2213'. [ 320.400201][T13695] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 320.706229][T13717] netlink: 'syz.1.2219': attribute type 10 has an invalid length. [ 320.738319][T13717] netlink: 'syz.1.2219': attribute type 10 has an invalid length. [ 320.759761][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2219'. [ 320.910869][T13723] IPVS: Scheduler module ip_vs_sip not found [ 321.495425][T13752] lo speed is unknown, defaulting to 1000 [ 321.815751][T13752] lo speed is unknown, defaulting to 1000 [ 322.088218][T13774] sctp: [Deprecated]: syz.2.2236 (pid 13774) Use of int in max_burst socket option. [ 322.088218][T13774] Use struct sctp_assoc_value instead [ 322.178292][T13780] xt_hashlimit: max too large, truncated to 1048576 [ 322.301761][T13782] lo speed is unknown, defaulting to 1000 [ 322.337458][T13789] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2240'. [ 322.478491][T13794] bond1: (slave erspan0): Releasing active interface [ 322.569294][T13794] bond0: (slave bond_slave_0): Releasing backup interface [ 322.579303][T13794] bond0: (slave bond_slave_1): Releasing backup interface [ 322.593367][T13794] team0: Port device C removed [ 322.626814][T13794] team0: Port device team_slave_1 removed [ 322.639070][T13794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.660261][T13794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.685942][T13794] bond1: (slave veth3): Releasing active interface [ 322.718851][T13794] bond0: (slave bond2): Releasing backup interface [ 322.902228][T13782] lo speed is unknown, defaulting to 1000 [ 322.916572][T13815] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 322.940864][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2251'. [ 323.129492][T13828] sctp: [Deprecated]: syz.1.2252 (pid 13828) Use of int in max_burst socket option. [ 323.129492][T13828] Use struct sctp_assoc_value instead [ 323.163701][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 323.315391][T13835] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2253'. [ 323.337211][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 323.517647][T13839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2256'. [ 323.694154][T13839] lo speed is unknown, defaulting to 1000 [ 324.330674][T13872] sctp: [Deprecated]: syz.3.2267 (pid 13872) Use of int in max_burst socket option. [ 324.330674][T13872] Use struct sctp_assoc_value instead [ 324.643483][T13839] lo speed is unknown, defaulting to 1000 [ 324.846006][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2276'. [ 324.894966][T13898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2276'. [ 325.188985][T13923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2280'. [ 325.239496][T13923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2280'. [ 325.778546][T13944] tipc: Cannot configure node identity twice [ 329.332367][T13962] __nla_validate_parse: 3 callbacks suppressed [ 329.332389][T13962] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2292'. [ 329.353566][ C1] bridge0: port 1(dummy0) entered learning state [ 330.202353][T13986] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2297'. [ 330.234771][T13986] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2297'. [ 330.315206][T13986] netlink: 'syz.4.2297': attribute type 5 has an invalid length. [ 330.345706][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2298'. [ 330.375226][T13986] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2297'. [ 330.386429][T13983] lo speed is unknown, defaulting to 1000 [ 330.411954][T13992] veth0_to_bond: entered allmulticast mode [ 330.911191][T13983] lo speed is unknown, defaulting to 1000 [ 331.235600][T14011] vlan2: entered allmulticast mode [ 331.240757][T14011] hsr0: entered allmulticast mode [ 331.271764][T14011] hsr_slave_0: entered allmulticast mode [ 331.353071][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 331.375096][T14011] hsr_slave_1: entered allmulticast mode [ 331.402799][T14015] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 331.420631][T14015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.460413][T14012] dvmrp0: left allmulticast mode [ 331.551021][T14014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.752861][T14030] tipc: Enabled bearer , priority 0 [ 331.764371][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'. [ 331.765702][T14030] tipc: Resetting bearer [ 331.848949][T14026] tipc: Disabling bearer [ 331.996125][T14035] sctp: [Deprecated]: syz.0.2314 (pid 14035) Use of int in max_burst socket option. [ 331.996125][T14035] Use struct sctp_assoc_value instead [ 332.241905][T14049] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2321'. [ 332.265499][T14049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.325711][T14051] erspan0: left allmulticast mode [ 332.366565][T14051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.379531][T14051] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.402838][T14051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.129427][T14083] sctp: [Deprecated]: syz.2.2331 (pid 14083) Use of int in max_burst socket option. [ 333.129427][T14083] Use struct sctp_assoc_value instead [ 333.232603][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2332'. [ 333.332630][T14086] dummy0: left allmulticast mode [ 333.398746][T14086] dummy0: left promiscuous mode [ 333.404010][T14086] bridge0: port 1(dummy0) entered disabled state [ 333.997526][T14103] lo speed is unknown, defaulting to 1000 [ 334.191454][T14117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2341'. [ 334.416598][T14103] lo speed is unknown, defaulting to 1000 [ 334.416598][T14098] lo speed is unknown, defaulting to 1000 [ 334.589478][T14136] sctp: [Deprecated]: syz.4.2347 (pid 14136) Use of int in max_burst socket option. [ 334.589478][T14136] Use struct sctp_assoc_value instead [ 334.898269][T14098] lo speed is unknown, defaulting to 1000 [ 335.654785][T14164] sctp: [Deprecated]: syz.2.2359 (pid 14164) Use of int in max_burst socket option. [ 335.654785][T14164] Use struct sctp_assoc_value instead [ 336.145698][T14184] netlink: 'syz.3.2366': attribute type 13 has an invalid length. [ 336.213341][T14184] netlink: 'syz.3.2366': attribute type 17 has an invalid length. [ 336.426557][T14184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.101607][T14229] netlink: 'syz.4.2380': attribute type 15 has an invalid length. [ 337.146167][T14229] __nla_validate_parse: 2 callbacks suppressed [ 337.146186][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'. [ 337.233731][T14231] netlink: 'syz.2.2379': attribute type 72 has an invalid length. [ 337.247668][T14231] netlink: 1016 bytes leftover after parsing attributes in process `syz.2.2379'. [ 337.327067][T14220] infiniband syz1: set down [ 337.331758][T14220] infiniband syz1: added macvlan1 [ 337.383107][T14220] RDS/IB: syz1: added [ 337.387908][T14220] smc: adding ib device syz1 with port count 1 [ 337.394346][T14220] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 337.706442][T14235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.967800][T14244] netlink: 'syz.3.2384': attribute type 10 has an invalid length. [ 338.001513][T14252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2387'. [ 338.015755][T14244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2384'. [ 338.053349][T14244] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 338.327323][T14268] !: renamed from dummy0 [ 338.370309][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2392'. [ 339.303875][T14277] lo speed is unknown, defaulting to 1000 [ 339.317370][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 339.354146][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2395'. [ 339.386999][T14297] netlink: 'syz.3.2395': attribute type 14 has an invalid length. [ 339.645018][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2397'. [ 340.072463][T14317] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2400'. [ 340.328201][T14306] lo speed is unknown, defaulting to 1000 [ 340.335248][T14277] lo speed is unknown, defaulting to 1000 [ 340.739593][T14306] lo speed is unknown, defaulting to 1000 [ 341.598742][T14360] erspan0: Device is already in use. [ 341.672588][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 342.479555][T14387] netlink: 'syz.1.2420': attribute type 10 has an invalid length. [ 342.517415][T14387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2420'. [ 342.612814][T14392] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2422'. [ 342.859743][T14407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.905045][T14408] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2423'. [ 344.077020][T14387] bridge0: port 5(dummy0) entered blocking state [ 344.083578][T14387] bridge0: port 5(dummy0) entered disabled state [ 344.090709][T14387] dummy0: entered allmulticast mode [ 344.097262][T14387] dummy0: entered promiscuous mode [ 344.103235][T14401] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2420'. [ 344.195172][T14402] lo speed is unknown, defaulting to 1000 [ 344.560186][T14433] syz1: rxe_newlink: already configured on macvlan1 [ 344.729859][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2429'. [ 345.216407][T14430] bridge8: entered promiscuous mode [ 345.221772][T14430] bridge8: entered allmulticast mode [ 345.374761][T14413] lo speed is unknown, defaulting to 1000 [ 345.375053][T14402] lo speed is unknown, defaulting to 1000 [ 345.507874][T13447] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.544567][T13447] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.562412][T13447] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.594651][T13447] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.623505][T13447] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.641413][T13447] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.687829][T13447] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.698726][T13447] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.047963][T14413] lo speed is unknown, defaulting to 1000 [ 346.254143][T14472] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 347.524827][T14505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2446'. [ 347.624194][T14512] unsupported nla_type 52263 [ 347.704659][T14517] openvswitch: netlink: IP tunnel dst address not specified [ 347.809518][T14525] netlink: 'syz.2.2453': attribute type 3 has an invalid length. [ 347.868516][T14527] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2454'. [ 347.881268][T14527] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 347.930361][T14532] tipc: Enabling of bearer rejected, failed to enable media [ 347.970792][T14528] sctp: [Deprecated]: syz.1.2454 (pid 14528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.970792][T14528] Use struct sctp_sack_info instead [ 348.052358][T14538] team_slave_0: entered promiscuous mode [ 348.058505][T14538] team_slave_1: entered promiscuous mode [ 348.069304][T14538] macsec2: entered promiscuous mode [ 348.075214][T14538] team0: entered promiscuous mode [ 348.199774][T14544] lo speed is unknown, defaulting to 1000 [ 348.431668][T14555] xt_hashlimit: size too large, truncated to 1048576 [ 348.455665][T14561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2464'. [ 348.550408][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2461'. [ 348.688113][T14548] lo speed is unknown, defaulting to 1000 [ 348.688819][T14544] lo speed is unknown, defaulting to 1000 [ 349.411354][T14548] lo speed is unknown, defaulting to 1000 [ 350.076855][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2476'. [ 350.077345][ T5168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.101196][ T5168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.110484][ T5168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.120250][ T5168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.128967][ T5168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.238426][T14604] lo speed is unknown, defaulting to 1000 [ 350.378980][T14609] netlink: 'syz.3.2477': attribute type 39 has an invalid length. [ 350.495583][T14614] sctp: [Deprecated]: syz.3.2477 (pid 14614) Use of int in max_burst socket option. [ 350.495583][T14614] Use struct sctp_assoc_value instead [ 350.519051][T14609] syz_tun (unregistering): left promiscuous mode [ 350.985504][T14622] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2478'. [ 351.064841][T14622] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2478'. [ 351.217315][T14604] lo speed is unknown, defaulting to 1000 [ 351.423329][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'. [ 352.036583][T14638] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 352.097868][T14641] sctp: [Deprecated]: syz.3.2484 (pid 14641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.097868][T14641] Use struct sctp_sack_info instead [ 352.138452][T14637] delete_channel: no stack [ 352.227291][ T5168] Bluetooth: hci0: command tx timeout [ 352.475396][T14653] lo speed is unknown, defaulting to 1000 [ 352.657883][T14664] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 352.718734][T14604] chnl_net:caif_netlink_parms(): no params data found [ 352.860075][T14670] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 353.157313][T14604] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.179384][T14604] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.225243][T14604] bridge_slave_0: entered allmulticast mode [ 353.249811][T14604] bridge_slave_0: entered promiscuous mode [ 353.281931][T14653] lo speed is unknown, defaulting to 1000 [ 353.298601][T14604] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.323196][T14604] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.342947][T14604] bridge_slave_1: entered allmulticast mode [ 353.392532][T14604] bridge_slave_1: entered promiscuous mode [ 353.565836][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2493'. [ 353.649665][T14604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.673182][T14604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.862229][T14604] team0: Port device team_slave_0 added [ 353.920240][T14604] team0: Port device team_slave_1 added [ 354.127630][T14604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.157228][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.251345][T14604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.297685][T14604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.309288][ T5168] Bluetooth: hci0: command tx timeout [ 354.325199][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.352149][T14604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.413465][T14731] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 354.445800][T14731] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 354.733754][T14604] hsr_slave_0: entered promiscuous mode [ 354.760110][T14604] hsr_slave_1: entered promiscuous mode [ 354.822150][T14749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2502'. [ 354.921078][T14744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.128441][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2503'. [ 355.202975][T14762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2503'. [ 355.490455][T14769] syzkaller1: entered promiscuous mode [ 355.524781][T14769] syzkaller1: entered allmulticast mode [ 355.694133][T14769] can: request_module (can-proto-0) failed. [ 355.752528][T14781] netlink: 'syz.1.2506': attribute type 64 has an invalid length. [ 355.863090][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2506'. [ 356.042795][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2509'. [ 356.122703][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2510'. [ 356.198006][T14799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.227419][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2510'. [ 356.233642][T14799] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2511'. [ 356.280287][T14799] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2511'. [ 356.386121][ T5168] Bluetooth: hci0: command tx timeout [ 356.436326][T14809] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 356.452979][T14809] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 356.568203][T14604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.626791][T14604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.632926][T14821] netlink: 'syz.3.2517': attribute type 10 has an invalid length. [ 356.657147][T14604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.682222][T14604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.867030][T14604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.890063][T14836] batadv2: entered promiscuous mode [ 356.949003][T14604] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.974021][T13452] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.981250][T13452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.068795][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.076048][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.158671][T14852] netlink: 'syz.1.2526': attribute type 7 has an invalid length. [ 357.187604][T14852] netlink: 'syz.1.2526': attribute type 1 has an invalid length. [ 357.433828][T14864] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.512057][T14871] tipc: Enabled bearer , priority 0 [ 357.522249][T14873] netlink: 'syz.1.2531': attribute type 39 has an invalid length. [ 357.599990][T14872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.727097][T14604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.808552][T14882] netlink: 'syz.1.2534': attribute type 7 has an invalid length. [ 357.947704][T14604] veth0_vlan: entered promiscuous mode [ 357.978340][T14604] veth1_vlan: entered promiscuous mode [ 358.047998][T14604] veth0_macvtap: entered promiscuous mode [ 358.071202][T14888] netlink: 'syz.1.2536': attribute type 11 has an invalid length. [ 358.080770][T14604] veth1_macvtap: entered promiscuous mode [ 358.142153][T14604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.232742][T14604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.322015][T13454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.383240][T13450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.428511][T13450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.450776][T13450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.467357][ T5168] Bluetooth: hci0: command tx timeout [ 358.610129][T14909] vxcan0: entered promiscuous mode [ 358.646725][T13450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.659396][T13450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.703196][T13452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.719617][T13452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.890894][T14917] pim6reg1: entered promiscuous mode [ 358.901312][T14917] pim6reg1: entered allmulticast mode [ 358.938161][T14919] __nla_validate_parse: 6 callbacks suppressed [ 358.938175][T14919] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2545'. [ 358.988666][T14921] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2545'. [ 359.077836][T14920] bond1 (unregistering): Released all slaves [ 359.594248][T14943] netlink: 'syz.2.2552': attribute type 1 has an invalid length. [ 359.608227][T14943] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2552'. [ 359.639790][T14946] netlink: 'syz.2.2552': attribute type 1 has an invalid length. [ 359.670493][T14946] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2552'. [ 359.735659][T14941] can: request_module (can-proto-5) failed. [ 359.776403][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2552'. [ 359.942181][T13449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.259131][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.269463][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.278582][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.288369][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.305285][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.330296][T14961] netlink: zone id is out of range [ 360.336165][T14961] netlink: zone id is out of range [ 360.341686][T14961] netlink: zone id is out of range [ 360.347351][T14961] netlink: zone id is out of range [ 360.352479][T14961] netlink: zone id is out of range [ 360.358240][T14961] netlink: zone id is out of range [ 360.363363][T14961] netlink: zone id is out of range [ 360.369481][T14961] netlink: zone id is out of range [ 360.375268][T14961] netlink: zone id is out of range [ 360.380393][T14961] netlink: zone id is out of range [ 360.420931][T14955] lo speed is unknown, defaulting to 1000 [ 360.623886][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.636942][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.646100][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.655729][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.663408][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.819426][T14955] lo speed is unknown, defaulting to 1000 [ 360.819426][T14967] lo speed is unknown, defaulting to 1000 [ 361.057438][T13449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.211560][T13449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.225303][T14974] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 361.407494][T14983] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2562'. [ 361.480138][T13449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.526376][T14983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2562'. [ 361.573930][T14967] lo speed is unknown, defaulting to 1000 [ 361.979374][T15013] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2568'. [ 362.040123][T14955] chnl_net:caif_netlink_parms(): no params data found [ 362.258683][T13449] bridge_slave_1: left allmulticast mode [ 362.265458][T13449] bridge_slave_1: left promiscuous mode [ 362.273624][T13449] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.291293][T13449] bridge_slave_0: left allmulticast mode [ 362.297879][T13449] bridge_slave_0: left promiscuous mode [ 362.303676][T13449] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.388844][ T5846] Bluetooth: hci0: command tx timeout [ 362.708373][ T5846] Bluetooth: hci2: command tx timeout [ 362.871670][T13449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.883897][T13449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.897659][T13449] bond0 (unregistering): Released all slaves [ 363.130970][T15043] bridge_slave_1: default FDB implementation only supports local addresses [ 363.313083][T14955] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.313986][T15053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.325136][T14955] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.344236][T14955] bridge_slave_0: entered allmulticast mode [ 363.353972][T14955] bridge_slave_0: entered promiscuous mode [ 363.369753][T14955] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.385670][T14955] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.392897][T14955] bridge_slave_1: entered allmulticast mode [ 363.418142][T14955] bridge_slave_1: entered promiscuous mode [ 363.555450][T14955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.724629][T14955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.766201][T15057] lo speed is unknown, defaulting to 1000 [ 363.855079][T14955] team0: Port device team_slave_0 added [ 363.868669][T14955] team0: Port device team_slave_1 added [ 363.994873][T15075] netlink: 'syz.1.2583': attribute type 1 has an invalid length. [ 364.061690][T14955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.072869][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.109229][T15061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2580'. [ 364.150467][T14955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.232503][T15075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.317596][T15077] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.325079][T15077] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 364.338143][T15077] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 364.410754][T15078] gretap1: entered promiscuous mode [ 364.419424][T15078] bond2: (slave gretap1): making interface the new active one [ 364.427752][T15078] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 364.445379][T15073] netlink: 'syz.4.2580': attribute type 12 has an invalid length. [ 364.464739][ T5846] Bluetooth: hci0: command tx timeout [ 364.473643][T14955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.488604][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.548036][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2585'. [ 364.553132][T14955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.615612][T15083] bond2: (slave vlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 364.664363][T15057] lo speed is unknown, defaulting to 1000 [ 364.680186][T15090] syzkaller1: entered promiscuous mode [ 364.692331][T15090] syzkaller1: entered allmulticast mode [ 364.705136][T14967] chnl_net:caif_netlink_parms(): no params data found [ 364.785245][ T5846] Bluetooth: hci2: command tx timeout [ 365.085610][T14955] hsr_slave_0: entered promiscuous mode [ 365.111574][T14955] hsr_slave_1: entered promiscuous mode [ 365.134145][T14955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.154521][T14955] Cannot create hsr debugfs directory [ 365.296263][T15101] bond0: entered promiscuous mode [ 365.325388][T15101] macvlan1: entered promiscuous mode [ 365.339521][T15101] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 365.373420][T15101] Cannot create hsr debugfs directory [ 365.390714][T15101] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 365.426733][T15101] hsr1: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network [ 365.437526][T15101] hsr1: entered promiscuous mode [ 365.537942][T13449] hsr_slave_0: left promiscuous mode [ 365.544276][T13449] hsr_slave_1: left promiscuous mode [ 365.551217][T13449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.559231][T13449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.571445][T13449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.579622][T13449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.615173][T15113] xt_connbytes: Forcing CT accounting to be enabled [ 365.622051][T15113] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 365.641763][T13449] veth1_macvtap: left promiscuous mode [ 365.652735][T13449] veth0_macvtap: left promiscuous mode [ 365.658514][T13449] veth1_vlan: left promiscuous mode [ 365.664153][T13449] veth0_vlan: left promiscuous mode [ 365.910410][T15119] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2590'. [ 366.177438][T13449] team0 (unregistering): Port device team_slave_1 removed [ 366.216729][T13449] team0 (unregistering): Port device team_slave_0 removed [ 366.544612][ T5846] Bluetooth: hci0: command tx timeout [ 366.694184][T15119] gretap0: left allmulticast mode [ 366.703906][T15119] gretap0: left promiscuous mode [ 366.717321][T15119] bridge0: port 2(gretap0) entered disabled state [ 366.736240][T15119] dummy0: left allmulticast mode [ 366.741235][T15119] dummy0: left promiscuous mode [ 366.746771][T15119] bridge0: port 5(dummy0) entered disabled state [ 366.757855][T15119] bridge0: port 3(batadv0) entered disabled state [ 366.772372][T15119] veth0_to_bridge: left allmulticast mode [ 366.779634][T15119] veth0_to_bridge: left promiscuous mode [ 366.785923][T15119] bridge0: port 4(veth0_to_bridge) entered disabled state [ 366.797466][T15119] bridge_slave_0: left allmulticast mode [ 366.803156][T15119] bridge_slave_0: left promiscuous mode [ 366.810040][T15119] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.822441][T15119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.839047][T15119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.851647][T15119] bond2: (slave gretap1): Releasing active interface [ 366.865575][ T5846] Bluetooth: hci2: command tx timeout [ 367.000550][T15117] lo speed is unknown, defaulting to 1000 [ 367.017078][T14967] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.027660][T14967] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.041587][T14967] bridge_slave_0: entered allmulticast mode [ 367.054018][T14967] bridge_slave_0: entered promiscuous mode [ 367.140987][T14967] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.176299][T14967] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.186336][T14967] bridge_slave_1: entered allmulticast mode [ 367.194193][T14967] bridge_slave_1: entered promiscuous mode [ 367.377482][T14967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.409822][T14967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.505343][T15117] lo speed is unknown, defaulting to 1000 [ 367.946130][T14967] team0: Port device team_slave_0 added [ 367.971905][T14967] team0: Port device team_slave_1 added [ 368.101647][T15136] lo speed is unknown, defaulting to 1000 [ 368.527719][T14967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.541485][T14967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.602689][T14967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.619798][T14967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.633255][T14967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.634550][ T5846] Bluetooth: hci0: command tx timeout [ 368.660214][T14967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.841684][T14967] hsr_slave_0: entered promiscuous mode [ 368.849990][T14967] hsr_slave_1: entered promiscuous mode [ 368.856820][T15136] lo speed is unknown, defaulting to 1000 [ 368.944671][ T5846] Bluetooth: hci2: command tx timeout [ 369.137959][T14955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.178062][T14955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.236964][T14955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.266438][T14955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.864102][T14955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.947719][T14955] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.021537][T13452] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.028763][T13452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.071597][T13452] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.079461][T13452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.135796][T15174] "syz.4.2596" (15174) uses obsolete ecb(arc4) skcipher [ 370.336408][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2596'. [ 370.352229][T14967] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 370.410117][T14967] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 370.439409][T15178] hsr_slave_0: left promiscuous mode [ 370.462915][T15178] hsr_slave_1: left promiscuous mode [ 370.551744][T14967] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 370.570947][T14967] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.826082][T14967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.895063][T14967] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.933141][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.940367][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.977330][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.984547][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.102830][T14955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.118583][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2598'. [ 371.297480][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2600'. [ 371.349848][T14955] veth0_vlan: entered promiscuous mode [ 371.477020][T14955] veth1_vlan: entered promiscuous mode [ 371.637962][T14955] veth0_macvtap: entered promiscuous mode [ 371.682077][T14955] veth1_macvtap: entered promiscuous mode [ 371.757670][T14955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.809485][T14955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.864336][T13454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.897225][T15222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2603'. [ 371.920134][T13454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.959784][T13454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.985409][T13454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.005729][ T30] audit: type=1800 audit(1751682883.354:2): pid=15222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2603" name="memory.events" dev="tmpfs" ino=2828 res=0 errno=0 [ 372.083941][T14967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.091201][ T30] audit: type=1804 audit(1751682883.364:3): pid=15222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2603" name="/newroot/548/memory.events" dev="tmpfs" ino=2828 res=1 errno=0 [ 372.166084][T15224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2604'. [ 372.295753][T13454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.303606][T13454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.408228][T13449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.428105][T14967] veth0_vlan: entered promiscuous mode [ 372.443942][T13449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.478513][T14967] veth1_vlan: entered promiscuous mode [ 372.637006][T14967] veth0_macvtap: entered promiscuous mode [ 372.671204][T14967] veth1_macvtap: entered promiscuous mode [ 372.792126][ T30] audit: type=1800 audit(1751682884.144:4): pid=15241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2609" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2844 res=0 errno=0 [ 372.890214][T14967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.930718][T14967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.061616][T13381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.232415][T13452] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.336891][T13381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.365221][T13381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.453897][T13452] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.506454][T13381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.625701][T13452] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.739236][T13381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.765139][T13381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.926162][T13452] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.997393][T13381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.033889][T13381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.383024][T13452] bridge_slave_1: left allmulticast mode [ 374.395365][T13452] bridge_slave_1: left promiscuous mode [ 374.407584][T13452] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.430439][T13452] bridge_slave_0: left allmulticast mode [ 374.441636][T13452] bridge_slave_0: left promiscuous mode [ 374.448781][T13452] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.521639][ T5168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.532855][ T5168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.542250][ T5168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.552274][ T5168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.561182][ T5168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.001625][T15278] netlink: 'syz.2.2617': attribute type 21 has an invalid length. [ 375.412770][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.438703][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.450404][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.474579][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.495346][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.577129][T13452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.589064][T13452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.600818][T13452] bond0 (unregistering): Released all slaves [ 375.764320][T15283] lo speed is unknown, defaulting to 1000 [ 375.858323][T15288] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2620'. [ 375.949011][T15289] veth1_macvtap: left promiscuous mode [ 375.961358][T15289] macsec0: entered allmulticast mode [ 375.966855][T15286] nbd1: detected capacity change from 0 to 63 [ 375.973312][T15293] block nbd1: NBD_DISCONNECT [ 375.982086][T15293] block nbd1: Disconnected due to user request. [ 376.034633][T15293] block nbd1: shutting down sockets [ 376.053029][T15295] veth1_macvtap: entered promiscuous mode [ 376.078434][T15295] veth1_macvtap: entered allmulticast mode [ 376.115004][T15295] macsec0: left allmulticast mode [ 376.128916][T15295] veth1_macvtap: left allmulticast mode [ 376.240027][T15283] lo speed is unknown, defaulting to 1000 [ 376.255409][T15263] lo speed is unknown, defaulting to 1000 [ 376.625192][ T5168] Bluetooth: hci0: command tx timeout [ 376.954026][T15263] lo speed is unknown, defaulting to 1000 [ 377.585253][ T5168] Bluetooth: hci2: command tx timeout [ 377.823526][T15283] chnl_net:caif_netlink_parms(): no params data found [ 378.237981][T15377] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.2637'. [ 378.269520][T15377] net_ratelimit: 193 callbacks suppressed [ 378.269541][T15377] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 378.308465][T15377] openvswitch: netlink: Message has 8454 unknown bytes. [ 378.443143][T13452] hsr_slave_0: left promiscuous mode [ 378.452658][T15384] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2638'. [ 378.456799][T13452] hsr_slave_1: left promiscuous mode [ 378.472867][T13452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.482558][T13452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.502368][T13452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.534926][T13452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.582008][T13452] veth1_macvtap: left promiscuous mode [ 378.587696][T13452] veth0_macvtap: left promiscuous mode [ 378.593391][T13452] veth1_vlan: left promiscuous mode [ 378.606834][T13452] veth0_vlan: left promiscuous mode [ 378.705554][ T5168] Bluetooth: hci0: command tx timeout [ 378.797853][T15391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2640'. [ 379.230314][T13452] team0 (unregistering): Port device team_slave_1 removed [ 379.272470][T13452] team0 (unregistering): Port device team_slave_0 removed [ 379.665387][ T5168] Bluetooth: hci2: command tx timeout [ 379.749773][T15283] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.758050][T15283] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.766077][T15283] bridge_slave_0: entered allmulticast mode [ 379.774000][T15283] bridge_slave_0: entered promiscuous mode [ 379.789318][T15394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2641'. [ 379.814651][T15394] tc_dump_action: action bad kind [ 379.840829][T15283] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.860301][T15283] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.868123][T15283] bridge_slave_1: entered allmulticast mode [ 379.876590][T15283] bridge_slave_1: entered promiscuous mode [ 379.955522][T15401] netlink: 'syz.4.2644': attribute type 21 has an invalid length. [ 379.975152][T15401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2644'. [ 380.035570][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2644'. [ 380.037897][T15283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.108713][T15283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.118617][T15402] lo speed is unknown, defaulting to 1000 [ 380.373082][T15283] team0: Port device team_slave_0 added [ 380.417188][T15283] team0: Port device team_slave_1 added [ 380.490926][T15419] sctp: [Deprecated]: syz.2.2649 (pid 15419) Use of int in max_burst socket option. [ 380.490926][T15419] Use struct sctp_assoc_value instead [ 380.700895][T15283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.712654][T15283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.750070][T15283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.771083][T15283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.779534][T15283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.812349][ T5168] Bluetooth: hci0: command tx timeout [ 380.819654][T15283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.895932][T15402] lo speed is unknown, defaulting to 1000 [ 381.146543][T15283] hsr_slave_0: entered promiscuous mode [ 381.165146][T15283] hsr_slave_1: entered promiscuous mode [ 381.179540][T15283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.205095][T15283] Cannot create hsr debugfs directory [ 381.206329][T15434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 381.222103][T15263] chnl_net:caif_netlink_parms(): no params data found [ 381.551518][T13452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.682385][T13452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.745664][ T5168] Bluetooth: hci2: command tx timeout [ 381.768619][T15263] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.776288][T15263] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.783470][T15263] bridge_slave_0: entered allmulticast mode [ 381.791517][T15263] bridge_slave_0: entered promiscuous mode [ 381.818475][T13452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.853487][T15263] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.861050][T15263] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.872818][T15263] bridge_slave_1: entered allmulticast mode [ 381.880357][T15263] bridge_slave_1: entered promiscuous mode [ 381.911263][T13454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.928655][T13454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.001149][T13452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.112153][T15263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.130394][T15451] netlink: 'syz.2.2657': attribute type 11 has an invalid length. [ 382.199329][T15263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.428945][T15263] team0: Port device team_slave_0 added [ 382.462757][T15263] team0: Port device team_slave_1 added [ 382.588894][ T30] audit: type=1800 audit(1751682893.944:5): pid=15453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2658" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2953 res=0 errno=0 [ 382.675167][T15263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.682137][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.739293][T15263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.765439][T15263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.778982][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.815824][T15263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.868616][ T5168] Bluetooth: hci0: command tx timeout [ 382.876485][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 382.886980][T13452] bridge_slave_1: left allmulticast mode [ 382.892644][T13452] bridge_slave_1: left promiscuous mode [ 382.894919][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 382.899657][T13452] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.918959][T13452] bridge_slave_0: left allmulticast mode [ 382.926206][T13452] bridge_slave_0: left promiscuous mode [ 382.932007][T13452] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.682748][T13452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.701353][T13452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.709599][T15484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.725520][T13452] bond0 (unregistering): Released all slaves [ 383.825234][ T5168] Bluetooth: hci2: command tx timeout [ 383.941088][T15488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2669'. [ 384.003653][T15263] hsr_slave_0: entered promiscuous mode [ 384.022438][T15263] hsr_slave_1: entered promiscuous mode [ 384.041785][T15263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.067896][T15263] Cannot create hsr debugfs directory [ 384.071548][T15491] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2670'. [ 384.172904][T15491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.186030][T15491] bond_slave_0: left promiscuous mode [ 384.203574][T15491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.214036][T15491] bond_slave_1: left promiscuous mode [ 384.226935][T15491] bond0 (unregistering): Released all slaves [ 384.442460][T15499] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2674'. [ 384.483892][T15501] tipc: Enabling of bearer rejected, failed to enable media [ 384.676103][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2675'. [ 384.997231][T15517] IPVS: set_ctl: invalid protocol: 98 10.1.1.0:20004 [ 385.056626][T15520] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2679'. [ 385.102943][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'. [ 385.128078][T15283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.166151][T15283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.235263][T15283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.290970][T13452] hsr_slave_0: left promiscuous mode [ 385.308367][T13452] hsr_slave_1: left promiscuous mode [ 385.316674][T15526] sctp: [Deprecated]: syz.1.2680 (pid 15526) Use of int in max_burst socket option. [ 385.316674][T15526] Use struct sctp_assoc_value instead [ 385.325955][T13452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.343524][T13452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.354367][T13452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.362636][T13452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.423380][T13452] veth1_macvtap: left promiscuous mode [ 385.429395][T13452] veth0_macvtap: left promiscuous mode [ 385.447932][T13452] veth1_vlan: left promiscuous mode [ 385.453300][T13452] veth0_vlan: left promiscuous mode [ 385.980071][T13452] team0 (unregistering): Port device team_slave_1 removed [ 386.007649][T15537] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2683'. [ 386.041591][T13452] team0 (unregistering): Port device team_slave_0 removed [ 386.566415][T15283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 386.841380][T15283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.931505][T15283] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.013797][T13454] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.021015][T13454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.066019][T13449] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.073184][T13449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.194750][T15263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 387.233573][T15263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 387.290642][T15263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 387.328469][T15263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 387.482690][T15263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.509971][T15574] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2691'. [ 387.524234][T15263] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.549447][T13450] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.556655][T13450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.610803][T13451] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.617980][T13451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.927095][T15283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.033417][T15283] veth0_vlan: entered promiscuous mode [ 388.062766][T15283] veth1_vlan: entered promiscuous mode [ 388.125640][T15283] veth0_macvtap: entered promiscuous mode [ 388.154119][T15283] veth1_macvtap: entered promiscuous mode [ 388.193170][T15603] sctp: [Deprecated]: syz.2.2697 (pid 15603) Use of int in max_burst socket option. [ 388.193170][T15603] Use struct sctp_assoc_value instead [ 388.198927][T15283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.241482][T15283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.276150][T13452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.285962][T13452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.321709][T15263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.337327][T13452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.352090][T13452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.513273][T13451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.523534][T15263] veth0_vlan: entered promiscuous mode [ 388.545836][T13451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.597779][T15263] veth1_vlan: entered promiscuous mode [ 388.676557][T15614] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.717325][T13454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.727725][T13454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.785376][T15614] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.934174][T15614] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.086366][T15263] veth0_macvtap: entered promiscuous mode [ 389.097820][T15614] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.170158][T15263] veth1_macvtap: entered promiscuous mode [ 389.181827][T15626] __nla_validate_parse: 1 callbacks suppressed [ 389.181846][T15626] netlink: 676 bytes leftover after parsing attributes in process `syz.2.2703'. [ 389.226316][T15626] netlink: 676 bytes leftover after parsing attributes in process `syz.2.2703'. [ 389.242602][T15263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.312248][T15263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.340997][T15629] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2703'. [ 389.381498][T13451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.423540][T13451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.457905][T13451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.496302][T13451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.721167][T13454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.863801][T15638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2704'. [ 389.902433][T13449] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.932031][T15638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2704'. [ 390.012878][T15634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.086353][T13454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.129668][T13447] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.167993][T13447] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.219093][T13454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.243881][T13450] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.308694][T13450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.324579][T13450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.411392][T13454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.445424][T13449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.453267][T13449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.593239][T15645] netlink: 'syz.4.2706': attribute type 1 has an invalid length. [ 390.625721][T15645] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2706'. [ 390.693730][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2706'. [ 390.767682][T13454] bridge_slave_1: left allmulticast mode [ 390.783623][T13454] bridge_slave_1: left promiscuous mode [ 390.801776][T13454] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.847242][T13454] bridge_slave_0: left allmulticast mode [ 390.854149][T13454] bridge_slave_0: left promiscuous mode [ 390.876467][T13454] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.941682][T15652] sctp: [Deprecated]: syz.2.2708 (pid 15652) Use of int in max_burst socket option. [ 390.941682][T15652] Use struct sctp_assoc_value instead [ 391.184830][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.195538][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.203555][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.212441][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.221168][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 391.552671][T13454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.570216][T13454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.581439][T13454] bond0 (unregistering): Released all slaves [ 391.853739][T15653] lo speed is unknown, defaulting to 1000 [ 392.412558][T15653] lo speed is unknown, defaulting to 1000 [ 392.734605][T15672] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2713'. [ 392.779369][T15672] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2713'. [ 393.056657][T15679] netlink: 'syz.4.2715': attribute type 7 has an invalid length. [ 393.149688][T15679] : entered promiscuous mode [ 393.212887][T15688] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2717'. [ 393.266492][ T5168] Bluetooth: hci0: command tx timeout [ 393.410996][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.429067][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.438534][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.458773][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.472559][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.503326][T15696] sctp: [Deprecated]: syz.2.2720 (pid 15696) Use of int in max_burst socket option. [ 393.503326][T15696] Use struct sctp_assoc_value instead [ 393.674628][T13454] hsr_slave_0: left promiscuous mode [ 393.686951][T13454] hsr_slave_1: left promiscuous mode [ 393.693534][T13454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.701301][T13454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.712232][T13454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.721920][T13454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.768450][T13454] veth1_macvtap: left promiscuous mode [ 393.785101][T13454] veth0_macvtap: left promiscuous mode [ 393.791247][T13454] veth1_vlan: left promiscuous mode [ 393.804724][T13454] veth0_vlan: left promiscuous mode [ 394.489132][T13454] team0 (unregistering): Port device team_slave_1 removed [ 394.535714][T13454] team0 (unregistering): Port device team_slave_0 removed [ 394.994990][T15697] lo speed is unknown, defaulting to 1000 [ 395.344735][ T5168] Bluetooth: hci0: command tx timeout [ 395.457126][T15653] chnl_net:caif_netlink_parms(): no params data found [ 395.529393][T15697] lo speed is unknown, defaulting to 1000 [ 395.549203][T15692] lo speed is unknown, defaulting to 1000 [ 395.588075][ T5168] Bluetooth: hci2: command tx timeout [ 395.717013][T15733] xt_policy: too many policy elements [ 395.763093][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2725'. [ 395.794681][T15731] batadv_slave_0: entered promiscuous mode [ 395.944527][T15653] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.972441][T15653] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.991131][T15653] bridge_slave_0: entered allmulticast mode [ 396.001926][T15653] bridge_slave_0: entered promiscuous mode [ 396.024223][T15653] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.037620][T15653] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.067722][T15653] bridge_slave_1: entered allmulticast mode [ 396.092760][T15653] bridge_slave_1: entered promiscuous mode [ 396.196327][T13447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.213139][T15692] lo speed is unknown, defaulting to 1000 [ 396.257868][T15653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.291129][T15653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.422237][T13447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.555648][T15653] team0: Port device team_slave_0 added [ 396.596390][T13447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.661863][T15653] team0: Port device team_slave_1 added [ 396.781041][T13447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.831144][T15653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.838319][T15653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.864707][T15653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.896569][T15653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.903544][T15653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.930568][T15653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.425394][ T5168] Bluetooth: hci0: command tx timeout [ 397.643997][T15653] hsr_slave_0: entered promiscuous mode [ 397.654079][T15653] hsr_slave_1: entered promiscuous mode [ 397.670279][ T5168] Bluetooth: hci2: command tx timeout [ 397.691770][T15783] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2739'. [ 397.739961][T13447] bridge_slave_1: left allmulticast mode [ 397.751104][T13447] bridge_slave_1: left promiscuous mode [ 397.759009][T15786] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2739'. [ 397.761447][T13447] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.789529][T13447] bridge_slave_0: left allmulticast mode [ 397.795490][T13447] bridge_slave_0: left promiscuous mode [ 397.801268][T13447] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.271064][T13447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.282325][T13447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.293263][T13447] bond0 (unregistering): Released all slaves [ 398.405738][T15803] netlink: 'syz.2.2743': attribute type 178 has an invalid length. [ 398.523636][T15806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.526689][T15807] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2744'. [ 399.017273][T15692] chnl_net:caif_netlink_parms(): no params data found [ 399.505013][ T5168] Bluetooth: hci0: command tx timeout [ 399.517163][T15828] lo speed is unknown, defaulting to 1000 [ 399.530351][T13447] hsr_slave_0: left promiscuous mode [ 399.538139][T13447] hsr_slave_1: left promiscuous mode [ 399.544218][T13447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.551835][T13447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.560003][T13447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.567522][T13447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.595443][T13447] veth1_macvtap: left promiscuous mode [ 399.601020][T13447] veth0_macvtap: left promiscuous mode [ 399.623686][T13447] veth1_vlan: left promiscuous mode [ 399.629315][T13447] veth0_vlan: left promiscuous mode [ 399.744751][ T5168] Bluetooth: hci2: command tx timeout [ 400.171225][T13447] team0 (unregistering): Port device team_slave_1 removed [ 400.216736][T13447] team0 (unregistering): Port device team_slave_0 removed [ 400.700982][T15828] lo speed is unknown, defaulting to 1000 [ 400.709063][T15692] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.728849][T15692] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.742280][T15692] bridge_slave_0: entered allmulticast mode [ 400.752028][T15692] bridge_slave_0: entered promiscuous mode [ 400.780988][T15692] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.805636][T15692] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.824984][T15692] bridge_slave_1: entered allmulticast mode [ 400.833347][T15692] bridge_slave_1: entered promiscuous mode [ 400.856432][T15842] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 400.872527][T15844] netlink: 'syz.2.2755': attribute type 17 has an invalid length. [ 400.927910][T15844] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2755'. [ 400.965217][T15844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.127046][T15692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.228814][T15692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.351550][T15692] team0: Port device team_slave_0 added [ 401.373154][T15653] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 401.374013][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2759'. [ 401.404917][T15653] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 401.422837][T15692] team0: Port device team_slave_1 added [ 401.443272][T15653] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 401.502165][T15653] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 401.570426][T15692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.578796][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.605766][T15692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.641679][T15692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.652484][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.690777][T15692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.825662][ T5168] Bluetooth: hci2: command tx timeout [ 401.895886][T15880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.016553][T15692] hsr_slave_0: entered promiscuous mode [ 402.061077][T15692] hsr_slave_1: entered promiscuous mode [ 402.067757][T15692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.076877][T15692] Cannot create hsr debugfs directory [ 402.213344][T15885] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2762'. [ 402.513309][T15653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.595984][T15653] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.647188][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.654441][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.719878][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.727131][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.041148][T15901] xt_HMARK: spi-set and port-set can't be combined [ 403.231190][T15692] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 403.268699][T15692] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 403.365453][T15692] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 403.380137][T15913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.387438][T15913] IPv6: NLM_F_CREATE should be set when creating new route [ 403.408066][T15692] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 403.429661][T15653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.439259][T15913] lo: left promiscuous mode [ 403.443802][T15913] lo: entered allmulticast mode [ 403.475899][T15913] tunl0: entered allmulticast mode [ 403.493382][T15913] gre0: entered allmulticast mode [ 403.499590][T15918] sctp: [Deprecated]: syz.1.2772 (pid 15918) Use of int in max_burst socket option. [ 403.499590][T15918] Use struct sctp_assoc_value instead [ 403.521005][T15913] gretap0: entered allmulticast mode [ 403.550542][T15913] erspan0: entered allmulticast mode [ 403.569345][T15913] ip_vti0: entered allmulticast mode [ 403.580248][T15913] ip6_vti0: entered allmulticast mode [ 403.702875][T15913] sit0: entered allmulticast mode [ 403.736869][T15913] ip6tnl0: entered allmulticast mode [ 403.760480][T15913] ip6gre0: entered allmulticast mode [ 403.779235][T15913] ip6gretap0: entered allmulticast mode [ 403.811855][T15913] vcan0: entered allmulticast mode [ 403.833060][T15913] team0: entered allmulticast mode [ 403.843139][T15913] team_slave_0: entered allmulticast mode [ 403.850272][T15913] team_slave_1: entered allmulticast mode [ 403.869289][T15913] dummy0: entered allmulticast mode [ 403.892951][T15913] nlmon0: entered allmulticast mode [ 403.906330][T15913] caif0: entered allmulticast mode [ 403.912324][T15913] veth0: entered allmulticast mode [ 403.936587][T15913] veth1: entered allmulticast mode [ 403.974776][T15913] wg0: entered allmulticast mode [ 403.992367][T15913] wg1: entered allmulticast mode [ 404.013683][T15913] wg2: entered allmulticast mode [ 404.025460][T15913] veth0_to_bridge: entered allmulticast mode [ 404.041679][T15913] ¾x9ÿ: entered allmulticast mode [ 404.066317][T15913] veth1_to_bridge: entered allmulticast mode [ 404.086748][T15913] bridge_slave_1: entered allmulticast mode [ 404.106300][T15913] bond_slave_0: entered allmulticast mode [ 404.118262][T15913] veth1_to_bond: entered allmulticast mode [ 404.133302][T15913] bond_slave_1: entered allmulticast mode [ 404.150286][T15913] veth0_to_team: entered allmulticast mode [ 404.186116][T15913] veth1_to_team: entered allmulticast mode [ 404.225753][T15913] veth0_to_batadv: entered allmulticast mode [ 404.251459][T15913] batadv_slave_0: entered allmulticast mode [ 404.268020][T15913] veth1_to_batadv: entered allmulticast mode [ 404.288871][T15913] batadv_slave_1: entered allmulticast mode [ 404.312808][T15913] xfrm0: entered allmulticast mode [ 404.333786][T15913] veth0_to_hsr: entered allmulticast mode [ 404.356514][T15913] hsr_slave_0: entered allmulticast mode [ 404.372221][T15913] veth1_to_hsr: entered allmulticast mode [ 404.395458][T15913] hsr_slave_1: entered allmulticast mode [ 404.411105][T15913] veth1_virt_wifi: entered allmulticast mode [ 404.422087][T15913] veth0_virt_wifi: entered allmulticast mode [ 404.435046][T15913] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 404.443653][T15913] veth1_vlan: entered allmulticast mode [ 404.461637][T15913] veth0_vlan: entered allmulticast mode [ 404.479848][T15913] vlan0: entered allmulticast mode [ 404.486088][T15913] macvlan0: entered allmulticast mode [ 404.498094][T15913] macvlan1: entered allmulticast mode [ 404.507020][T15913] ipvlan0: entered allmulticast mode [ 404.513307][T15913] ipvlan1: entered allmulticast mode [ 404.530487][T15913] veth1_macvtap: entered allmulticast mode [ 404.605125][T15913] macvtap0: entered allmulticast mode [ 404.610991][T15913] macsec0: entered allmulticast mode [ 404.623107][T15913] geneve0: entered allmulticast mode [ 404.648958][T15913] geneve1: entered allmulticast mode [ 404.678009][T15913] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 404.708386][T15913] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 404.727894][T15913] ip6tnl1: left promiscuous mode [ 404.743507][T15913] bridge2: entered allmulticast mode [ 404.753499][T15913] syztnl2: entered allmulticast mode [ 404.759729][T15913] mac80211_hwsim hwsim10 nicvf0: entered allmulticast mode [ 404.780361][T15913] sit1: entered allmulticast mode [ 404.821000][T15913] : entered allmulticast mode [ 404.826868][T15913] vxlan0: entered allmulticast mode [ 404.832255][T15913] mac80211_hwsim hwsim16 wlan2: entered allmulticast mode [ 404.891703][T15913] macsec1: entered allmulticast mode [ 404.906081][T15913] erspan1: entered allmulticast mode [ 404.915684][T15913] bridge3: entered allmulticast mode [ 404.923027][T15913] team0: left promiscuous mode [ 404.927889][T15913] team_slave_0: left promiscuous mode [ 404.937445][T15913] team_slave_1: left promiscuous mode [ 404.943075][T15913] bridge1: left promiscuous mode [ 404.955338][T15913] macsec2: left promiscuous mode [ 404.960477][T15913] macsec2: entered allmulticast mode [ 404.981064][T15913] netdevsim netdevsim4 eth0: entered allmulticast mode [ 404.988227][T15913] netdevsim netdevsim4 eth1: entered allmulticast mode [ 404.995418][T15913] netdevsim netdevsim4 eth2: entered allmulticast mode [ 405.002702][T15913] netdevsim netdevsim4 eth3: entered allmulticast mode [ 405.009857][T15913] : entered allmulticast mode [ 405.017266][ T9896] lo speed is unknown, defaulting to 1000 [ 405.043851][ T9896] syz2: Port: 1 Link DOWN [ 405.056118][T13452] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.100619][T13452] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.150453][T13452] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.154325][T15935] sctp: [Deprecated]: syz.1.2773 (pid 15935) Use of int in max_burst socket option. [ 405.154325][T15935] Use struct sctp_assoc_value instead [ 405.174653][T13452] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.325249][T15653] veth0_vlan: entered promiscuous mode [ 405.372722][T15653] veth1_vlan: entered promiscuous mode [ 405.537775][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2780'. [ 405.540315][T15692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.568111][T15653] veth0_macvtap: entered promiscuous mode [ 405.607061][T15653] veth1_macvtap: entered promiscuous mode [ 405.628954][T15960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2780'. [ 405.707454][T15692] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.735060][T15653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.760494][T13447] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.767732][T13447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.799775][T15653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.863087][T13454] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.870355][T13454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.896354][T13449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.911612][T13449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.956278][T13449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.971396][T13449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.239289][T13449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.253903][T13449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.370155][T13381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.386960][T13381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.702968][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'. [ 406.706814][T15692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.778480][T15992] sctp: [Deprecated]: syz.2.2788 (pid 15992) Use of int in max_burst socket option. [ 406.778480][T15992] Use struct sctp_assoc_value instead [ 407.072214][T13450] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.098260][T15692] veth0_vlan: entered promiscuous mode [ 407.139866][T15692] veth1_vlan: entered promiscuous mode [ 407.216596][T13450] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.259791][T15692] veth0_macvtap: entered promiscuous mode [ 407.271872][T15692] veth1_macvtap: entered promiscuous mode [ 407.299267][T13450] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.327615][T15692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.343597][T15692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.359405][T13452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.372495][T13452] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.384363][T13452] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.398744][T13452] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.477983][T13450] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.500386][T13381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.509439][T13381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.542479][T13381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.550486][T13381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.686026][T13450] bridge_slave_1: left allmulticast mode [ 407.691693][T13450] bridge_slave_1: left promiscuous mode [ 407.700407][T13450] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.709584][T13450] bridge_slave_0: left allmulticast mode [ 407.717259][T13450] bridge_slave_0: left promiscuous mode [ 407.722986][T13450] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.269105][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.289624][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.310721][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.342894][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.360944][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.501898][T13450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.513780][T13450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.526891][T13450] bond0 (unregistering): Released all slaves [ 408.627275][T16016] lo speed is unknown, defaulting to 1000 [ 408.847248][T16016] lo speed is unknown, defaulting to 1000 [ 409.489167][T16038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2803'. [ 409.735687][T16048] sctp: [Deprecated]: syz.4.2805 (pid 16048) Use of int in max_burst socket option. [ 409.735687][T16048] Use struct sctp_assoc_value instead [ 409.907520][T16038] lo speed is unknown, defaulting to 1000 [ 409.923426][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.936105][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.944575][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.960366][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.968237][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 410.027079][T13450] hsr_slave_0: left promiscuous mode [ 410.035224][T13450] hsr_slave_1: left promiscuous mode [ 410.041454][T13450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.049872][T13450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.059830][T13450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.070413][T13450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.090828][T16057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2806'. [ 410.100815][T16055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2806'. [ 410.104755][T13450] veth1_macvtap: left promiscuous mode [ 410.115851][T13450] veth0_macvtap: left promiscuous mode [ 410.122787][T13450] veth1_vlan: left promiscuous mode [ 410.128622][T13450] veth0_vlan: left promiscuous mode [ 410.218495][T16059] Bluetooth: MGMT ver 1.23 [ 410.390151][ T5168] Bluetooth: hci0: command tx timeout [ 410.683837][T13450] team0 (unregistering): Port device team_slave_1 removed [ 410.728816][T13450] team0 (unregistering): Port device team_slave_0 removed [ 411.220572][T16038] lo speed is unknown, defaulting to 1000 [ 411.345867][T16049] lo speed is unknown, defaulting to 1000 [ 411.413614][T16016] chnl_net:caif_netlink_parms(): no params data found [ 411.793157][T16016] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.805545][T16074] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2810'. [ 411.824892][T16016] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.832129][T16016] bridge_slave_0: entered allmulticast mode [ 411.857862][T16016] bridge_slave_0: entered promiscuous mode [ 411.872209][T16016] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.879479][T16016] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.886850][T16016] bridge_slave_1: entered allmulticast mode [ 411.894578][T16016] bridge_slave_1: entered promiscuous mode [ 411.907363][T16049] lo speed is unknown, defaulting to 1000 [ 411.914009][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2810'. [ 411.976640][T16074] dvmrp8: entered allmulticast mode [ 412.013791][T16016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.035157][T16016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.066444][ T5168] Bluetooth: hci2: command tx timeout [ 412.098782][T16074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2810'. [ 412.140057][T13450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.349158][T16016] team0: Port device team_slave_0 added [ 412.373821][T16016] team0: Port device team_slave_1 added [ 412.465686][ T5168] Bluetooth: hci0: command tx timeout [ 412.482891][T13450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.483331][T16088] atomic_op ffff888078fd5198 conn xmit_atomic 0000000000000000 [ 412.609721][T16090] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2813'. [ 412.625898][T16090] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2813'. [ 412.727193][T16091] rdma_rxe: rxe_newlink: failed to add lo [ 412.740700][T16091] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 412.858162][T13450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.880304][T16090] pimreg: left allmulticast mode [ 412.948232][T16094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.963155][T16094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.981719][T16016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.989102][T16016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.015978][T16016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.134038][T13450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.152336][T16016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.160577][T16016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.192238][T16016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.450414][T16016] hsr_slave_0: entered promiscuous mode [ 413.461020][T16016] hsr_slave_1: entered promiscuous mode [ 413.538425][T16049] chnl_net:caif_netlink_parms(): no params data found [ 413.696501][T13450] bridge_slave_1: left allmulticast mode [ 413.707423][T13450] bridge_slave_1: left promiscuous mode [ 413.720129][T13450] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.745386][T13450] bridge_slave_0: left allmulticast mode [ 413.751069][T13450] bridge_slave_0: left promiscuous mode [ 413.764067][T13450] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.157248][ T5168] Bluetooth: hci2: command tx timeout [ 414.212600][T13450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.223854][T13450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.235204][T13450] bond0 (unregistering): Released all slaves [ 414.445324][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2826'. [ 414.513958][T16049] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.528362][T16049] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.536342][T16049] bridge_slave_0: entered allmulticast mode [ 414.543814][T16049] bridge_slave_0: entered promiscuous mode [ 414.555180][ T5168] Bluetooth: hci0: command tx timeout [ 414.617173][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 414.617917][T16131] lo speed is unknown, defaulting to 1000 [ 414.637186][T16049] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.644339][T16049] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.691194][T16049] bridge_slave_1: entered allmulticast mode [ 414.713610][T16049] bridge_slave_1: entered promiscuous mode [ 414.892245][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'. [ 414.965353][T16152] hsr0: entered allmulticast mode [ 414.970420][T16152] hsr_slave_0: entered allmulticast mode [ 415.001068][T16152] hsr_slave_1: entered allmulticast mode [ 415.037656][T16049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.062957][T16049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.091281][T16131] lo speed is unknown, defaulting to 1000 [ 415.207155][T16160] sctp: [Deprecated]: syz.2.2831 (pid 16160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.207155][T16160] Use struct sctp_sack_info instead [ 415.499391][T16049] team0: Port device team_slave_0 added [ 415.569949][T16049] team0: Port device team_slave_1 added [ 415.594176][T16164] openvswitch: netlink: IP tunnel dst address not specified [ 415.662099][T16167] raw_sendmsg: syz.2.2833 forgot to set AF_INET. Fix it! [ 415.711793][T16049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.732859][T16049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.771091][T16049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.788486][T16049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.795749][T16049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.822047][T16049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.061483][T16049] hsr_slave_0: entered promiscuous mode [ 416.084167][T16049] hsr_slave_1: entered promiscuous mode [ 416.090957][T16049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.098956][T16049] Cannot create hsr debugfs directory [ 416.234609][ T5168] Bluetooth: hci2: command tx timeout [ 416.261370][T13450] hsr_slave_0: left promiscuous mode [ 416.267290][T13450] hsr_slave_1: left promiscuous mode [ 416.273092][T13450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.280631][T13450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.290401][T13450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.297924][T13450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.322906][T13450] veth1_macvtap: left promiscuous mode [ 416.328705][T13450] veth0_macvtap: left promiscuous mode [ 416.334274][T13450] veth1_vlan: left promiscuous mode [ 416.342296][T13450] veth0_vlan: left promiscuous mode [ 416.634806][ T5168] Bluetooth: hci0: command tx timeout [ 416.855289][T13450] team0 (unregistering): Port device team_slave_1 removed [ 416.897667][T13450] team0 (unregistering): Port device team_slave_0 removed [ 417.540482][T16016] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 417.592028][T16193] xt_TCPMSS: Only works on TCP SYN packets [ 417.613546][T16016] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 417.638088][T16193] @ÿ: renamed from bond_slave_0 [ 417.741550][T16016] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.863133][T16016] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 418.321162][ T5168] Bluetooth: hci2: command tx timeout [ 418.376425][T16016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.611126][T16016] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.703353][T13452] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.710587][T13452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.769647][T13452] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.776932][T13452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.902156][T16229] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 418.914074][T16229] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 418.922505][T16229] CPU: 0 UID: 0 PID: 16229 Comm: syz.4.2847 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 418.934597][T16229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.944668][T16229] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 [ 418.951612][T16229] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 ff ea 5b fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 418.971218][T16229] RSP: 0018:ffffc90003377080 EFLAGS: 00010202 [ 418.977286][T16229] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000 [ 418.985246][T16229] RDX: ffffc90012c99000 RSI: 00000000000002f0 RDI: 0000000000000058 [ 418.993208][T16229] RBP: dffffc0000000000 R08: ffff88805a720000 R09: 0000000000000002 [ 419.001166][T16229] R10: 00000000ffffffff R11: ffffffff89871920 R12: 0000000000000000 [ 419.009130][T16229] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff88806dd7e800 [ 419.017091][T16229] FS: 00007fc05a7266c0(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 419.026006][T16229] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.032575][T16229] CR2: 00007f54b56e56c0 CR3: 0000000079252000 CR4: 00000000003526f0 [ 419.040548][T16229] Call Trace: [ 419.043820][T16229] [ 419.046740][T16229] drr_qlen_notify+0x2c/0xf0 [ 419.051331][T16229] qdisc_tree_reduce_backlog+0x299/0x480 [ 419.056962][T16229] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 419.062672][T16229] codel_change+0x859/0xae0 [ 419.067175][T16229] ? is_dynamic_key+0xd6/0x1c0 [ 419.071928][T16229] ? qdisc_alloc+0x789/0xaa0 [ 419.076510][T16229] ? qdisc_create+0x12c/0xea0 [ 419.081178][T16229] ? rtnetlink_rcv_msg+0x77c/0xb70 [ 419.086290][T16229] ? netlink_rcv_skb+0x205/0x470 [ 419.091241][T16229] ? netlink_unicast+0x758/0x8d0 [ 419.096185][T16229] ? netlink_sendmsg+0x805/0xb30 [ 419.101121][T16229] ? __sock_sendmsg+0x219/0x270 [ 419.105966][T16229] ? ____sys_sendmsg+0x505/0x830 [ 419.110902][T16229] ? ___sys_sendmsg+0x21f/0x2a0 [ 419.115746][T16229] ? __x64_sys_sendmsg+0x19b/0x260 [ 419.120847][T16229] ? __pfx_codel_change+0x10/0x10 [ 419.125883][T16229] codel_init+0x1f7/0x3e0 [ 419.130208][T16229] ? __pfx_codel_init+0x10/0x10 [ 419.135052][T16229] qdisc_create+0x7a9/0xea0 [ 419.139549][T16229] tc_modify_qdisc+0x1426/0x2010 [ 419.144480][T16229] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 419.149829][T16229] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 419.155134][T16229] rtnetlink_rcv_msg+0x77c/0xb70 [ 419.160087][T16229] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 419.165207][T16229] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.170671][T16229] netlink_rcv_skb+0x205/0x470 [ 419.175437][T16229] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.180919][T16229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.186206][T16229] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.191419][T16229] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.196631][T16229] netlink_unicast+0x758/0x8d0 [ 419.201404][T16229] netlink_sendmsg+0x805/0xb30 [ 419.206176][T16229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.211467][T16229] ? aa_sock_msg_perm+0x94/0x160 [ 419.216406][T16229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.221680][T16229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.226961][T16229] __sock_sendmsg+0x219/0x270 [ 419.231634][T16229] ____sys_sendmsg+0x505/0x830 [ 419.236395][T16229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.241679][T16229] ? import_iovec+0x74/0xa0 [ 419.246174][T16229] ___sys_sendmsg+0x21f/0x2a0 [ 419.250876][T16229] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.256086][T16229] ? __fget_files+0x2a/0x420 [ 419.260669][T16229] ? __fget_files+0x3a0/0x420 [ 419.265343][T16229] __x64_sys_sendmsg+0x19b/0x260 [ 419.270268][T16229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.275723][T16229] ? rcu_is_watching+0x15/0xb0 [ 419.280481][T16229] ? do_syscall_64+0xbe/0x3b0 [ 419.285154][T16229] do_syscall_64+0xfa/0x3b0 [ 419.289648][T16229] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.294905][T16229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.300959][T16229] ? clear_bhb_loop+0x60/0xb0 [ 419.305625][T16229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.311507][T16229] RIP: 0033:0x7fc05998e929 [ 419.315910][T16229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.335502][T16229] RSP: 002b:00007fc05a726038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.343905][T16229] RAX: ffffffffffffffda RBX: 00007fc059bb5fa0 RCX: 00007fc05998e929 [ 419.351867][T16229] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000004 [ 419.360174][T16229] RBP: 00007fc059a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 419.368138][T16229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.376094][T16229] R13: 0000000000000000 R14: 00007fc059bb5fa0 R15: 00007ffce42d33b8 [ 419.384059][T16229] [ 419.387073][T16229] Modules linked in: [ 419.391053][T16229] ---[ end trace 0000000000000000 ]--- [ 419.396547][T16229] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 419.403592][T16229] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 ff ea 5b fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 419.423250][T16229] RSP: 0018:ffffc90003377080 EFLAGS: 00010202 [ 419.429370][T16229] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000 [ 419.437397][T16229] RDX: ffffc90012c99000 RSI: 00000000000002f0 RDI: 0000000000000058 [ 419.445426][T16229] RBP: dffffc0000000000 R08: ffff88805a720000 R09: 0000000000000002 [ 419.453408][T16229] R10: 00000000ffffffff R11: ffffffff89871920 R12: 0000000000000000 [ 419.461515][T16229] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff88806dd7e800 [ 419.469530][T16229] FS: 00007fc05a7266c0(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 419.478507][T16229] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.485128][T16229] CR2: 00007f54b56e56c0 CR3: 0000000079252000 CR4: 00000000003526f0 [ 419.493129][T16229] Kernel panic - not syncing: Fatal exception in interrupt [ 419.500572][T16229] Kernel Offset: disabled [ 419.504882][T16229] Rebooting in 86400 seconds..