last executing test programs: 4.675330424s ago: executing program 1 (id=318): ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2b4, 0x30, 0x300, 0x71bd2d, 0x25dfdbff, {}, [{0x2a0, 0x1, [@m_gact={0x29c, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x270, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a72ad3a2c2dbf727e06036e6f15f608bea0e2a8ff93600a6133a9b45faa6924e7b9e8756e78750bdef4103fcd162842f48260e1dbb952cf91a4fdf9ca11cc86255d345cc97e3e5a060faa5892b6b343ae47592ed09d5829b187941331c8c321997cbc0395a6658c85915c1468ea768127b402af42155e96f11ef5f95a4118370c736689c029238b89e6a7a47d06e553b3f1968de8d30df98c713bd5d18d8c5e00aee2d650046089d3fd1abf65c454e7e5f582e3e17fde068a7d8cfdaf8831aca9c839662d70f7a7893073ad4a108e44a105d7ec27a1511d8775f389b68079b9fb5ba0f7bc4755ca4a45642090d553db4715ba07f0f54dd66544b89e6ad25c32d6f63d39e8d5e0034b5d37c947abfec5a54689a66f9355ac9a474b1e8da8ff31a348a1dda478d98b005419240d0d0e19f0150750896922a9082e83c48251a8d00c4553566483b464d4e548f52e8f4ffbbd31959f0056a259f2535c6095a7fba51603c2570a1b6b14a59937c9be0df637a121e9cf1d2aa8ca9179631a904dbb35518e91fd0953761079f4ecb38e8d410e"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x40001}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 4.538731341s ago: executing program 1 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00a1001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) 4.412886354s ago: executing program 1 (id=323): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x9, 0x43}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x1c, 0x1e, 0x8, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1001c}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x2400a891) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x2f, 0x8, 0x2, 0x5, 0x5b, @local, @rand_addr=' \x01\x00', 0x8000, 0x80, 0x4, 0xb}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x1, @broadcast}, 0xfffffffffffffdc3) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) r15 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r15, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x101, 0x30, 0x90, 0x2}, &(0x7f0000000100)=0x18) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) 4.123660581s ago: executing program 1 (id=328): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xdd4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000080), 0x3, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='ext4_fallocate_exit\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) socketpair(0x27, 0x3, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000180)=0xfffffeed) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000280)=0x1, 0x4) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r7 = socket(0x8, 0x6, 0xfffffffd) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e40)={0x0, 0x62, &(0x7f0000000340)={0x0}}, 0x44c50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) pwritev(r4, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x40) 3.215278446s ago: executing program 0 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0x10001}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x11, &(0x7f0000000240)='c\'wroY]\x00'/17}, 0x30) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x880) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$tipc(0x1e, 0xbf0331781d360bde, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) r7 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.current\x00', 0x0, 0x0) r8 = gettid() sendmsg$AUDIT_SET(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x3e9, 0x410, 0x70bd2c, 0x25dfdbfb, {0x0, 0x1, 0x2, r8, 0x8, 0x0, 0x8, 0x5, 0x0, 0x4, 0x1}, ["", "", "", ""]}, 0x3c}}, 0x4000000) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000280)={0x24, r11, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x180}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x20000050) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) close(r4) r13 = openat$cgroup_int(r3, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000040)=0x80000000, 0x12) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0) 3.12187299s ago: executing program 4 (id=344): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @mcast1, 0x20005}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) (async) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xcd, 0x0, 0x5c) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x20, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x5104eec89c600d4b) (async) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "e9c9cf623465aab2"}, 0x28) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) (async) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) 3.070269241s ago: executing program 1 (id=345): syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4a22, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, &(0x7f0000000300)}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2, 0x5}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000020190001000000980d5e3c55bfcb000000000000ff010000000800000000000000000001ac1414aa000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/112], 0xb8}}, 0x4c001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) sendfile(r4, r3, 0x0, 0x10000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = accept$inet(r7, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x118, 0xa, 0x148, 0x0, 0x60, 0x200, 0x2a8, 0x2a8, 0x200, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xd8, 0x118, 0x0, {0x200003ae, 0x7f00}, [@common=@icmp={{0x28}, {0x16, "cf9a"}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x2, 0x5, 0x0, 0x2, 0x4, 0x4], 0x4, 0x5}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2230c94c1c512b7eea5744ed3050ab41ba50738db33e05720fdd9b5899c6"}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x401}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) socket(0xa, 0x3, 0x3a) 2.983985876s ago: executing program 0 (id=346): sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'team0\x00', @random="d30008884792"}) preadv(r3, &(0x7f0000000100), 0x2b, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000080000000000000001000010"], 0x0, 0x34, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001d00010026bdc8e70000ff0000", @ANYRES32=r7, @ANYBLOB="800090000a000200ffffffffffff0000"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x8, 0xb, 0x3, 0x6, 0xfffffff9}, @jmp={0x5, 0x0, 0x9, 0x4, 0x3, 0xc, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x1e00, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.911565669s ago: executing program 0 (id=347): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) 2.560004098s ago: executing program 0 (id=351): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf257700000008000300", @ANYRES32=r4, @ANYBLOB="0500ee000600000008000000000000004c665808796dc8ca89e3a0192b1340a13b3e3e6e7ea27b82d54ebb"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x9, 0x0, 0x48, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x8000000}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000000000000001000000000000000c4100000014001462726f61c4c1d0f3c72a2b519c31646361"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.995796348s ago: executing program 3 (id=353): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f030000fffe0000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.939540358s ago: executing program 2 (id=354): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe0000000085000000b5000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03076864266ed78cb89e14f0", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x5, 0x20000000, 0x4) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0xfffffffffffffd52, 0x0, @wg=@data={0x4, 0xfffffffe, 0xffffdd86}}}}}}}, 0x3e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000ff00000600000000080001"], 0x24}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540f2e700001c00188008000240000000000800014000000000080003"], 0xa4}}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="d7fb1a33b7f392e65c0ff358dc4f", 0x0, 0x3, 0x60000000, 0x0, 0x1, 0x0, &(0x7f0000000380)="a4", 0x4}, 0x50) (async) close(r1) (async) r8 = socket(0x1d, 0x3, 0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000004240), &(0x7f00000057c0)=0x4) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000020601080000000000000000020000000c00078008001240002400000500010006000000050005000a00000005000400000000000c000300686173683a6970008900020073797a3200000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x40, 0x20, 0x8, 0x2, {{0x12, 0x4, 0x1, 0x3, 0x48, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @local, {[@timestamp_addr={0x44, 0xc, 0x62, 0x1, 0xc, [{@empty, 0x3ff}]}, @noop, @timestamp={0x44, 0x24, 0x7a, 0x0, 0x9, [0x5, 0x3, 0x6, 0xd, 0x1, 0x8, 0x7fffffff, 0x4]}, @generic={0x89, 0x2}]}}}}}) 1.794065474s ago: executing program 3 (id=355): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xedc}, 0x1, 0x0, 0x0, 0x8050}, 0x20000010) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300020c000000000700000000000003000600b8000000020000030000000000034000000000000200010000000000000fff0210000000030005000000000002004e23ac1454000000000000000000020008"], 0x60}, 0x1, 0x7}, 0x40400c0) 1.708430685s ago: executing program 0 (id=356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000004000400000000000000000000850000000f000000850000002300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) 1.620056536s ago: executing program 4 (id=357): syz_emit_ethernet(0x72, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x3c, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @hao={0xc9, 0x10, @mcast2}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.48390619s ago: executing program 3 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_channels={0x3c, 0xac12, 0x2, 0x1, 0x3, 0x1, 0x0, 0xffff, 0x1}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, 0x2, 0x7, 0x301, 0x0, 0x0, {0x6, 0x0, 0x109}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000000600)=0xf4, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x5e, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={r4, @remote, @loopback}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000000)={0x80}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f0000000100)=ANY=[@ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1600000000000000010000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r9, 0x0, 0x20000000}, 0x20) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000740)=0x7, &(0x7f0000000780)=0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f800800014000000200080008"], 0x4c}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x90) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000004028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e01060000f8fd"], 0x164}}, 0x0) 1.478458684s ago: executing program 0 (id=359): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f0000000980)=""/4096, 0x1000, 0x2042, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x0) write(r3, &(0x7f0000003300)="ac", 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000003a80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}, {&(0x7f00000002c0)="1f43de09", 0x4}, {&(0x7f0000000600)="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", 0xfc}], 0x5}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x2, 0x12) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="005b4aa3d49100dc50ecc3b4000082e3", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x206, @private1, 0x6}], 0x1c) 1.423917518s ago: executing program 1 (id=360): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f0000000980)=""/4096, 0x1000, 0x2042, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x0) write(r3, &(0x7f0000003300)="ac", 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000003a80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}, {&(0x7f00000002c0)="1f43de09", 0x4}, {&(0x7f0000000600)="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", 0xfc}], 0x5}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x2, 0x12) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="005b4aa3d49100dc50ecc3b4000082e3", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}]}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x206, @private1, 0x6}], 0x1c) 1.359874476s ago: executing program 4 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) close(r4) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='}', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf250b00000008000300", @ANYRES32=r7, @ANYBLOB="09000700b5de1522d30000000800090004ac375efcd8f7678f2e71cea2910f000a00061c08021100000100000500080002000000cfa45bdfdf189b7dfd7e606f1399c87e7d9802c6cdd6e8953f55aef7f0c29ced4a55d0efec52789b97680abdf92c890a4893ea5fd4b5737a49285ba71de494348a383376adbfb9045e9afa8f282fb994e1d2bc09102c7e0d69515e"], 0x44}}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x110, r3, 0x49796000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x5c, r10, 0x109, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r11, 0x118, 0x1, &(0x7f0000000180)=0x27a, 0x4) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x58, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x7d}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x49, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40004) 1.359594675s ago: executing program 2 (id=362): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10001) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x4000040, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x201}}, 0x1c) 1.251732128s ago: executing program 2 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv4_newnexthop={0xb8, 0x68, 0x2, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x2}, [@NHA_GROUP_TYPE={0x6}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf46f2aef}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x20000000}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x3f}}, @NHA_ID={0x8}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8, 0x7, 0x401}}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0xb8}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r3, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='pids.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_int(r5, 0x29, 0xce, 0x0, &(0x7f00000007c0)=0xffffff78) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='cachefiles_write\x00', r6}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r4) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000028bd7000fcdbdf25110000d0e081b6da408f9009ac1e0008008600ff070000080004000000010008000500050000004400038008000300010000000800010001000000060007004e200000060007004e230000060007004e22d6bf2e1046baca8520bb2ec10000060007004e20000008000500e0"], 0x70}, 0x1, 0x0, 0x0, 0x24044044}, 0x20040852) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x5, 0x3]}, &(0x7f0000000340)=0x50) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000380)=0xfffffff9, &(0x7f0000000480)=0x4) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) sendmmsg$inet6(r9, &(0x7f00000003c0)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x404}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000600)="22867fcd6d6c79f3fe659630be831445dd0f1dcf9eaa867a21e725150ca22f4fba27092f57aa396cbf807a6e2f25da949804f9dfea522963f039d6be42acb757a79c791236187dff55c531d85e6cfb9d959191944429d09c7d55bf7655c1449102cf192fb92d1509bf81fca7742d4cae", 0x70}], 0x1}}], 0x1, 0x4000) listen(r9, 0xf5db) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x5, 0x9, 0x7, 0x97d3, 0x73]}, &(0x7f0000000080)=0x50) 1.111171157s ago: executing program 4 (id=364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 912.109746ms ago: executing program 3 (id=365): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f030000fffe0000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 781.071663ms ago: executing program 3 (id=366): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf257700000008000300", @ANYRES32=r4, @ANYBLOB="0500ee000600000008000000000000004c665808796dc8ca89e3a0192b1340a13b3e3e6e7ea27b82d54ebb"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x9, 0x0, 0x48, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x8000000}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000000000000001000000000000000c4100000014001462726f61c4c1d0f3c72a2b519c31646361"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 565.491962ms ago: executing program 3 (id=367): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xdd4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000080), 0x3, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='ext4_fallocate_exit\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) socketpair(0x27, 0x3, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000180)=0xfffffeed) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000280)=0x1, 0x4) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r7 = socket(0x8, 0x6, 0xfffffffd) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e40)={0x0, 0x62, &(0x7f0000000340)={0x0}}, 0x44c50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) pwritev(r4, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x40) 252.106416ms ago: executing program 2 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r3, 0x0, 0x1ffc0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r7, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006180)=""/25, 0x19}, 0xb8}], 0x1, 0x12140, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000580)={0x41}, 0xe) recvmmsg(r5, &(0x7f0000003980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/31, 0x1f}, 0x1ff}], 0x1, 0x40000102, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001300010000000000000000000400008008000900"], 0x1c}], 0x1}, 0x0) r9 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="80", 0x1}], 0x1}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7d59e0b993267cb7}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5270d8c", @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf251a0000000c000600030000000000000020002e8008000600020000000c0004000203aaaaaaaaaaaa0500050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4048051}, 0x81) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x54, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001007010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000693119cf0000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x48890) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRESOCT=r4, @ANYBLOB="643639cd15bcdfa8cd0963fbdd57dbffb614c811a607c0236ae9d71a9ca87d79fcf724ee08e7256535f4e9d2d22949418f07a6c0f176bcbad6b2091127d9470ed16429decab09545740159af8278943b609008639426993fcbb027c0ce27a59628d0ac78afde1763d93734ec7db327a1ce256d6b02441697921547b7ee773c5780bcf45c749e4fd7d00bbcb78312d67f75cf21a269bfc365b31855c2115c5977790a1918ca99c0190f885f36599fa6ead2ae1b", @ANYRES16=r10], 0x90}}, 0x20000040) 141.034346ms ago: executing program 2 (id=369): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x40000c0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100003000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 140.6874ms ago: executing program 4 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000400b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="704cd37300"}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x5, &(0x7f00000002c0)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @ldst={0x1, 0x1, 0x1, 0x7, 0x6, 0x30, 0x2}, @exit, @alu={0x4, 0x0, 0x9, 0x2, 0xb, 0xfffffffffffffffc}], &(0x7f0000000300)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)=[{0x0, 0x5, 0x9, 0x1}], 0x10, 0x6, @void, @value}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66, 0x8}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={r3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x82000800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@getstat={0xe0, 0x15, 0x200, 0x70bd2c, 0x25dfdbfc, {{'blake2s-128-arm\x00'}, '\x00', '\x00', 0x400, 0x2000}, [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x5}, 0x40004c1) 63.526068ms ago: executing program 4 (id=371): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x5, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x200, 0x70bd25, 0x10, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf4ffffff}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7bfd777b1c012b3a6ca2f68f080c26a04883ad5c0900", "584cbf2649a50f2dbc437ad3c045942824251d7d17b5191584cdd4fbe40a27424d00", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f3bcb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) 0s ago: executing program 2 (id=372): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x70}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x51, 0x10}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x573}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100100000002024207b1af8ff00000000bfa11000000000008a4807010000f8ffff00b7030000000000008500000006200000181100000000000000000d00", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000340)=[{&(0x7f0000000180)="cf", 0x1}, {&(0x7f0000000400)="fdc1", 0x2}, {&(0x7f0000000300)='0', 0x1}, {&(0x7f00000001c0)="d5", 0x1}, {&(0x7f0000000480)='q', 0x1}], 0x5, 0xa) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a3705", 0x1f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x19, &(0x7f0000000040)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="000000000000000095000000000000001800000007000000000000000200000018110000", @ANYRES32=r8, @ANYBLOB="0020000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f80600000000000000000009b70400000000000085000000820000005305e0ff040000001d07fe865470000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018530000010000000000000000000000186000000d0000000000000004000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xb, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000400)=[{0x2, 0x2, 0xe}, {0x4, 0x2, 0xb, 0x4}, {0x1, 0x3, 0x9, 0x4}, {0x5, 0x4, 0xc, 0x8}, {0x2, 0x4, 0x6, 0xa}], 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x32}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 84.162991][ T5828] cgroup: Unknown subsys name 'net' [ 84.301457][ T5828] cgroup: Unknown subsys name 'cpuset' [ 84.311802][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.171972][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.008991][ T95] cfg80211: failed to load regulatory.db [ 89.249536][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.259836][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.271319][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.272680][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.284577][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.291113][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.318124][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.318672][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.326488][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.353595][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.361597][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.370593][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.386597][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.387182][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.408654][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.409550][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.423175][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.437101][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.445134][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.458643][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.467545][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.475395][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.498549][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.498818][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.521395][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.559885][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.600894][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 90.778272][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 90.869956][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.930481][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 91.167714][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.177624][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.187075][ T5839] bridge_slave_0: entered allmulticast mode [ 91.202099][ T5839] bridge_slave_0: entered promiscuous mode [ 91.276138][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.292059][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.301482][ T5839] bridge_slave_1: entered allmulticast mode [ 91.315055][ T5839] bridge_slave_1: entered promiscuous mode [ 91.363004][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.372258][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.383667][ T5847] bridge_slave_0: entered allmulticast mode [ 91.398881][ T5847] bridge_slave_0: entered promiscuous mode [ 91.504672][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.523884][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.538913][ T5847] bridge_slave_1: entered allmulticast mode [ 91.551439][ T5847] bridge_slave_1: entered promiscuous mode [ 91.567665][ T5851] Bluetooth: hci4: command tx timeout [ 91.580873][ T5152] Bluetooth: hci1: command tx timeout [ 91.580906][ T5846] Bluetooth: hci2: command tx timeout [ 91.587585][ T5841] Bluetooth: hci0: command tx timeout [ 91.598424][ T5853] Bluetooth: hci3: command tx timeout [ 91.659632][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.667355][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.683545][ T5848] bridge_slave_0: entered allmulticast mode [ 91.695058][ T5848] bridge_slave_0: entered promiscuous mode [ 91.704461][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.720596][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.734504][ T5848] bridge_slave_1: entered allmulticast mode [ 91.749971][ T5848] bridge_slave_1: entered promiscuous mode [ 91.768557][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.841391][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.849839][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.864787][ T5840] bridge_slave_0: entered allmulticast mode [ 91.872635][ T5840] bridge_slave_0: entered promiscuous mode [ 91.913818][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.991762][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.005899][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.019016][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.036071][ T5840] bridge_slave_1: entered allmulticast mode [ 92.048254][ T5840] bridge_slave_1: entered promiscuous mode [ 92.107660][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.121238][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.131496][ T5838] bridge_slave_0: entered allmulticast mode [ 92.144896][ T5838] bridge_slave_0: entered promiscuous mode [ 92.164607][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.239686][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.263729][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.283087][ T5839] team0: Port device team_slave_0 added [ 92.291196][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.304215][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.319156][ T5838] bridge_slave_1: entered allmulticast mode [ 92.334486][ T5838] bridge_slave_1: entered promiscuous mode [ 92.398259][ T5847] team0: Port device team_slave_0 added [ 92.449506][ T5839] team0: Port device team_slave_1 added [ 92.502902][ T5847] team0: Port device team_slave_1 added [ 92.520287][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.589027][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.632192][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.672886][ T5848] team0: Port device team_slave_0 added [ 92.708348][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.791264][ T5848] team0: Port device team_slave_1 added [ 92.805110][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.814953][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.850418][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.883132][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.896967][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.938642][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.965843][ T5840] team0: Port device team_slave_0 added [ 92.982768][ T5840] team0: Port device team_slave_1 added [ 93.012075][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.022900][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.069690][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.101751][ T5838] team0: Port device team_slave_0 added [ 93.116057][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.124211][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.164465][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.234605][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.249398][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.284940][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.307528][ T5838] team0: Port device team_slave_1 added [ 93.370172][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.392658][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.447771][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.564142][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.581847][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.627490][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.646814][ T5853] Bluetooth: hci0: command tx timeout [ 93.653103][ T5846] Bluetooth: hci4: command tx timeout [ 93.653111][ T5841] Bluetooth: hci1: command tx timeout [ 93.653352][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.666165][ T5853] Bluetooth: hci3: command tx timeout [ 93.671283][ T5841] Bluetooth: hci2: command tx timeout [ 93.691391][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.749181][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.768444][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.779666][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.822803][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.872530][ T5839] hsr_slave_0: entered promiscuous mode [ 93.885600][ T5839] hsr_slave_1: entered promiscuous mode [ 93.926140][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.941490][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.003508][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.067142][ T5847] hsr_slave_0: entered promiscuous mode [ 94.082520][ T5847] hsr_slave_1: entered promiscuous mode [ 94.090841][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.107232][ T5847] Cannot create hsr debugfs directory [ 94.180231][ T5838] hsr_slave_0: entered promiscuous mode [ 94.190147][ T5838] hsr_slave_1: entered promiscuous mode [ 94.201590][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.210269][ T5838] Cannot create hsr debugfs directory [ 94.423882][ T5848] hsr_slave_0: entered promiscuous mode [ 94.446337][ T5848] hsr_slave_1: entered promiscuous mode [ 94.458448][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.471778][ T5848] Cannot create hsr debugfs directory [ 94.529124][ T5840] hsr_slave_0: entered promiscuous mode [ 94.544517][ T5840] hsr_slave_1: entered promiscuous mode [ 94.560614][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.571681][ T5840] Cannot create hsr debugfs directory [ 95.430140][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.473580][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.511624][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.545890][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.585315][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.604892][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.671777][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.690859][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.727730][ T5841] Bluetooth: hci1: command tx timeout [ 95.727789][ T5846] Bluetooth: hci4: command tx timeout [ 95.734770][ T5841] Bluetooth: hci0: command tx timeout [ 95.747575][ T5853] Bluetooth: hci3: command tx timeout [ 95.764980][ T5851] Bluetooth: hci2: command tx timeout [ 95.855238][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.882160][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.929766][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.970140][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.122242][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.159644][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.183713][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.205851][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.362171][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.408878][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.447553][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.488168][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.513762][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.556176][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.580477][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.647083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.656256][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.718902][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.767918][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.778091][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.836393][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.846880][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.872439][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.930940][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.940846][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.995933][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.064828][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.078063][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.151106][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.170905][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.285562][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.389980][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.510519][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.522926][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.595046][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.604177][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.811016][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.821628][ T5841] Bluetooth: hci3: command tx timeout [ 97.833446][ T5851] Bluetooth: hci0: command tx timeout [ 97.833483][ T5846] Bluetooth: hci2: command tx timeout [ 97.842778][ T5841] Bluetooth: hci1: command tx timeout [ 97.851537][ T5853] Bluetooth: hci4: command tx timeout [ 97.946072][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.010865][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.116645][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.126830][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.202132][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.210274][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.411331][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.591372][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.825695][ T5839] veth0_vlan: entered promiscuous mode [ 98.860949][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.887726][ T5839] veth1_vlan: entered promiscuous mode [ 99.010674][ T5847] veth0_vlan: entered promiscuous mode [ 99.091859][ T5838] veth0_vlan: entered promiscuous mode [ 99.113759][ T5847] veth1_vlan: entered promiscuous mode [ 99.183435][ T5838] veth1_vlan: entered promiscuous mode [ 99.221604][ T5848] veth0_vlan: entered promiscuous mode [ 99.243967][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.287568][ T5839] veth0_macvtap: entered promiscuous mode [ 99.337088][ T5839] veth1_macvtap: entered promiscuous mode [ 99.390436][ T5848] veth1_vlan: entered promiscuous mode [ 99.430355][ T5847] veth0_macvtap: entered promiscuous mode [ 99.450589][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.519468][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.545196][ T5847] veth1_macvtap: entered promiscuous mode [ 99.565510][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.583624][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.593998][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.607805][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.646123][ T5838] veth0_macvtap: entered promiscuous mode [ 99.703896][ T5838] veth1_macvtap: entered promiscuous mode [ 99.771957][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.789326][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.808279][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.870930][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.898944][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.924122][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.987157][ T5840] veth0_vlan: entered promiscuous mode [ 100.003850][ T5848] veth0_macvtap: entered promiscuous mode [ 100.018473][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.031956][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.050380][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.067317][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.084334][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.104271][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.128731][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.145855][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.164879][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.179393][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.190519][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.225310][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.240849][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.253853][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.270999][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.286938][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.310043][ T5848] veth1_macvtap: entered promiscuous mode [ 100.370063][ T5840] veth1_vlan: entered promiscuous mode [ 100.388028][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.408243][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.412136][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.444142][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.461237][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.473404][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.606038][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.643575][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.656977][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.673753][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.688572][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.700999][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.728591][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.742850][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.826020][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.846672][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.874396][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.892725][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.908838][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.924278][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.942586][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.984583][ T5840] veth0_macvtap: entered promiscuous mode [ 101.040371][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.053261][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.065510][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.077134][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.126017][ T5840] veth1_macvtap: entered promiscuous mode [ 101.126253][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.150130][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 101.164256][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.187661][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.203362][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.205188][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.239032][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.264570][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.285062][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.307162][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.323565][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.339567][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.404659][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.415691][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.435985][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.438492][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.462110][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.479222][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.500969][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.524241][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.545121][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.563897][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.583686][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.650974][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.665775][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.679270][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.691445][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.710192][ T1902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.728058][ T1902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.756673][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.770150][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.266842][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.314411][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.444475][ T5937] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 102.479521][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.525788][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.536167][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 102.595197][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.628121][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.735907][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.774959][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.233795][ T5946] netlink: 'syz.4.7': attribute type 10 has an invalid length. [ 103.280703][ T5946] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7'. [ 103.690671][ T5946] batadv0: entered allmulticast mode [ 103.717310][ T5946] bridge0: port 3(batadv0) entered blocking state [ 103.738040][ T5946] bridge0: port 3(batadv0) entered disabled state [ 103.786509][ T5946] batadv0: entered promiscuous mode [ 103.840028][ T5946] bridge0: port 3(batadv0) entered blocking state [ 103.850893][ T5946] bridge0: port 3(batadv0) entered forwarding state [ 104.074107][ T3030] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 104.092667][ T3030] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 104.374991][ T5853] Bluetooth: hci4: command tx timeout [ 104.382042][ T5967] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 104.687602][ T5963] netlink: 'syz.1.8': attribute type 16 has an invalid length. [ 104.756380][ T5963] netlink: 'syz.1.8': attribute type 17 has an invalid length. [ 104.990367][ T5981] syzkaller1: entered promiscuous mode [ 105.008577][ T5981] syzkaller1: entered allmulticast mode [ 105.060888][ T5980] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 105.451475][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.465324][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.686461][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.709376][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.861492][ T5963] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.882742][ T5963] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.905423][ T5963] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.929229][ T5963] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.020710][ T5983] warning: `syz.2.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.461437][ T6004] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.499991][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 106.783622][ T6004] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.315332][ T6004] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.547315][ T6036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.704269][ T6004] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.961274][ T6050] netdevsim netdevsim1: Direct firmware load for . [ 107.961274][ T6050] failed with error -2 [ 108.015674][ T6050] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 108.015674][ T6050] [ 108.108625][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 108.147544][ T6051] netlink: 'syz.3.21': attribute type 7 has an invalid length. [ 108.170666][ T6051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.21'. [ 108.185439][ T6004] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.209085][ T6053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22'. [ 108.561476][ T6004] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.705335][ T6066] xt_socket: unknown flags 0x4 [ 108.765630][ T6004] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.870237][ T6004] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.230610][ T6084] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.26'. [ 109.641079][ T6103] hsr0: entered allmulticast mode [ 109.690525][ T6103] hsr_slave_0: entered allmulticast mode [ 109.746083][ T6103] hsr_slave_1: entered allmulticast mode [ 109.851953][ T6117] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.919158][ T6117] netlink: 'syz.2.34': attribute type 12 has an invalid length. [ 109.951866][ T6117] netlink: 'syz.2.34': attribute type 29 has an invalid length. [ 109.967407][ T6117] netlink: 148 bytes leftover after parsing attributes in process `syz.2.34'. [ 109.988579][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.35'. [ 110.020580][ T6117] netlink: 59 bytes leftover after parsing attributes in process `syz.2.34'. [ 110.485569][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 110.509279][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 112.091761][ T6163] netlink: 'syz.2.41': attribute type 10 has an invalid length. [ 112.100571][ T6163] __nla_validate_parse: 1 callbacks suppressed [ 112.100594][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.41'. [ 112.110099][ T6171] netlink: 'syz.3.43': attribute type 1 has an invalid length. [ 112.147437][ T6163] batman_adv: batadv0: Adding interface: virt_wifi0 [ 112.154732][ T6163] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.239058][ T6163] batman_adv: batadv0: Interface activated: virt_wifi0 [ 112.259258][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 112.661333][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.48'. [ 113.144682][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.53'. [ 113.745133][ T6211] FAULT_INJECTION: forcing a failure. [ 113.745133][ T6211] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.781932][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 113.804623][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.3.55 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 113.804648][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.804662][ T6211] Call Trace: [ 113.804669][ T6211] [ 113.804676][ T6211] dump_stack_lvl+0x241/0x360 [ 113.804717][ T6211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.804740][ T6211] ? __pfx__printk+0x10/0x10 [ 113.804775][ T6211] should_fail_ex+0x424/0x570 [ 113.804801][ T6211] _copy_from_iter+0x211/0x1c70 [ 113.804832][ T6211] ? __build_skb_around+0x247/0x3d0 [ 113.804855][ T6211] ? __alloc_skb+0x298/0x480 [ 113.804872][ T6211] ? __pfx__copy_from_iter+0x10/0x10 [ 113.804899][ T6211] ? __pfx___alloc_skb+0x10/0x10 [ 113.804919][ T6211] ? skb_put+0x114/0x1f0 [ 113.804942][ T6211] netlink_sendmsg+0x73c/0xcd0 [ 113.804981][ T6211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.805003][ T6211] ? aa_sock_msg_perm+0x91/0x160 [ 113.805031][ T6211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.805046][ T6211] __sock_sendmsg+0x221/0x270 [ 113.805074][ T6211] ____sys_sendmsg+0x523/0x860 [ 113.805104][ T6211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.805122][ T6211] ? __fget_files+0x2a/0x420 [ 113.805149][ T6211] ? __fget_files+0x2a/0x420 [ 113.805182][ T6211] __sys_sendmsg+0x271/0x360 [ 113.805208][ T6211] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.805274][ T6211] ? do_syscall_64+0xb6/0x230 [ 113.805294][ T6211] do_syscall_64+0xf3/0x230 [ 113.805310][ T6211] ? clear_bhb_loop+0x45/0xa0 [ 113.805328][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.805347][ T6211] RIP: 0033:0x7f330f98e169 [ 113.805365][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.805377][ T6211] RSP: 002b:00007f33107e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.805393][ T6211] RAX: ffffffffffffffda RBX: 00007f330fbb5fa0 RCX: 00007f330f98e169 [ 113.805405][ T6211] RDX: 0000000020040040 RSI: 0000200000000600 RDI: 0000000000000003 [ 113.805415][ T6211] RBP: 00007f33107e0090 R08: 0000000000000000 R09: 0000000000000000 [ 113.805426][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.805435][ T6211] R13: 0000000000000000 R14: 00007f330fbb5fa0 R15: 00007ffdfc920318 [ 113.805463][ T6211] [ 114.320626][ T6213] IPv6: syztnl0: Disabled Multicast RS [ 114.405958][ T6228] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 [ 114.481173][ T6227] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001 [ 114.498838][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 114.657460][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.62'. [ 115.013513][ T6245] netlink: 'syz.3.65': attribute type 10 has an invalid length. [ 115.033300][ T6243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.64'. [ 115.052197][ T6245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.65'. [ 115.113965][ T6245] team0: Port device geneve0 added [ 115.249559][ T6248] Zero length message leads to an empty skb [ 115.333324][ T6254] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 115.576018][ T6263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'. [ 116.205667][ T6290] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 116.233357][ T6291] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 116.272886][ T6291] netlink: 'syz.1.81': attribute type 2 has an invalid length. [ 116.482821][ T6297] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 116.923103][ T6309] netdevsim netdevsim0: Direct firmware load for . [ 116.923103][ T6309] failed with error -2 [ 116.982625][ T6309] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 116.982625][ T6309] [ 117.023998][ T6319] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.455301][ T6335] __nla_validate_parse: 3 callbacks suppressed [ 117.455322][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 117.573177][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 117.967357][ T6341] bridge0: port 4(hsr0) entered blocking state [ 117.991483][ T6341] bridge0: port 4(hsr0) entered disabled state [ 118.005226][ T6341] hsr0: entered allmulticast mode [ 118.012416][ T6341] hsr_slave_0: entered allmulticast mode [ 118.021361][ T6341] hsr_slave_1: entered allmulticast mode [ 118.032271][ T6341] hsr0: entered promiscuous mode [ 118.083092][ T6341] bridge0: port 4(hsr0) entered blocking state [ 118.089994][ T6341] bridge0: port 4(hsr0) entered forwarding state [ 118.280100][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 118.301954][ T6363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.101'. [ 118.941090][ T6369] FAULT_INJECTION: forcing a failure. [ 118.941090][ T6369] name failslab, interval 1, probability 0, space 0, times 1 [ 118.969821][ T6369] CPU: 1 UID: 0 PID: 6369 Comm: syz.4.102 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 118.969847][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.969857][ T6369] Call Trace: [ 118.969864][ T6369] [ 118.969871][ T6369] dump_stack_lvl+0x241/0x360 [ 118.969903][ T6369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.969926][ T6369] ? __pfx__printk+0x10/0x10 [ 118.969952][ T6369] ? __pfx___might_resched+0x10/0x10 [ 118.969976][ T6369] should_fail_ex+0x424/0x570 [ 118.970000][ T6369] should_failslab+0xac/0x100 [ 118.970022][ T6369] __kvmalloc_node_noprof+0x170/0x5a0 [ 118.970043][ T6369] ? alloc_netdev_mqs+0xce7/0x1210 [ 118.970065][ T6369] ? alloc_netdev_mqs+0xc7c/0x1210 [ 118.970088][ T6369] alloc_netdev_mqs+0xce7/0x1210 [ 118.970115][ T6369] rtnl_create_link+0x2f2/0xea0 [ 118.970147][ T6369] rtnl_newlink_create+0x2f2/0xc30 [ 118.970166][ T6369] ? __mutex_lock+0xbe3/0x10c0 [ 118.970191][ T6369] ? __mutex_lock+0x5f3/0x10c0 [ 118.970209][ T6369] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 118.970230][ T6369] ? __pfx___mutex_lock+0x10/0x10 [ 118.970255][ T6369] ? ns_capable+0x8a/0xf0 [ 118.970275][ T6369] rtnl_newlink+0x18b0/0x1fe0 [ 118.970309][ T6369] ? __pfx_rtnl_newlink+0x10/0x10 [ 118.970321][ T6369] ? dev_hard_start_xmit+0x2d9/0x830 [ 118.970339][ T6369] ? __dev_queue_xmit+0x1b80/0x3f60 [ 118.970354][ T6369] ? __netlink_deliver_tap+0x561/0x7f0 [ 118.970368][ T6369] ? netlink_deliver_tap+0x19d/0x1b0 [ 118.970382][ T6369] ? netlink_unicast+0x7c6/0x9a0 [ 118.970402][ T6369] ? netlink_sendmsg+0x8c3/0xcd0 [ 118.970416][ T6369] ? __sock_sendmsg+0x221/0x270 [ 118.970436][ T6369] ? ____sys_sendmsg+0x523/0x860 [ 118.970463][ T6369] ? __sys_sendmsg+0x271/0x360 [ 118.970479][ T6369] ? do_syscall_64+0xf3/0x230 [ 118.970496][ T6369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.970547][ T6369] ? kasan_quarantine_put+0xdc/0x230 [ 118.970561][ T6369] ? lockdep_hardirqs_on+0x9d/0x150 [ 118.970578][ T6369] ? nlmon_xmit+0xaf/0x100 [ 118.970603][ T6369] ? __local_bh_enable_ip+0x168/0x200 [ 118.970617][ T6369] ? lockdep_hardirqs_on+0x9d/0x150 [ 118.970642][ T6369] ? aa_get_newest_label+0x101/0x6f0 [ 118.970669][ T6369] ? __lock_acquire+0xad5/0xd80 [ 118.970706][ T6369] ? __pfx_rtnl_newlink+0x10/0x10 [ 118.970724][ T6369] rtnetlink_rcv_msg+0x80f/0xd70 [ 118.970738][ T6369] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 118.970758][ T6369] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.970781][ T6369] ? ref_tracker_free+0x63e/0x7e0 [ 118.970806][ T6369] netlink_rcv_skb+0x208/0x480 [ 118.970827][ T6369] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.970844][ T6369] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.970881][ T6369] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.970900][ T6369] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.970919][ T6369] netlink_unicast+0x7f8/0x9a0 [ 118.970951][ T6369] ? __pfx_netlink_unicast+0x10/0x10 [ 118.970977][ T6369] ? skb_put+0x114/0x1f0 [ 118.970999][ T6369] netlink_sendmsg+0x8c3/0xcd0 [ 118.971027][ T6369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.971049][ T6369] ? aa_sock_msg_perm+0x91/0x160 [ 118.971077][ T6369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.971091][ T6369] __sock_sendmsg+0x221/0x270 [ 118.971118][ T6369] ____sys_sendmsg+0x523/0x860 [ 118.971147][ T6369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.971164][ T6369] ? __fget_files+0x2a/0x420 [ 118.971189][ T6369] ? __fget_files+0x2a/0x420 [ 118.971222][ T6369] __sys_sendmsg+0x271/0x360 [ 118.971248][ T6369] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.971318][ T6369] ? do_syscall_64+0xb6/0x230 [ 118.971337][ T6369] do_syscall_64+0xf3/0x230 [ 118.971354][ T6369] ? clear_bhb_loop+0x45/0xa0 [ 118.971374][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.971390][ T6369] RIP: 0033:0x7f037d18e169 [ 118.971405][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.971418][ T6369] RSP: 002b:00007f037df7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.971434][ T6369] RAX: ffffffffffffffda RBX: 00007f037d3b5fa0 RCX: 00007f037d18e169 [ 118.971463][ T6369] RDX: 0000000000008010 RSI: 0000200000000400 RDI: 0000000000000003 [ 118.971474][ T6369] RBP: 00007f037df7a090 R08: 0000000000000000 R09: 0000000000000000 [ 118.971484][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.971492][ T6369] R13: 0000000000000000 R14: 00007f037d3b5fa0 R15: 00007fff9cc99948 [ 118.971519][ T6369] [ 119.908310][ T6387] netlink: 'syz.2.107': attribute type 1 has an invalid length. [ 120.092237][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 120.540708][ T6415] netdevsim netdevsim4: Direct firmware load for . [ 120.540708][ T6415] failed with error -2 [ 120.566811][ T6415] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 120.566811][ T6415] [ 121.194577][ T6431] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.636099][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 121.874403][ T6431] 8021q: VLANs not supported on ip6gre0 [ 122.149086][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 122.193764][ T6444] bridge0: port 3(hsr0) entered blocking state [ 122.200895][ T6444] bridge0: port 3(hsr0) entered disabled state [ 122.226630][ T6444] hsr0: entered allmulticast mode [ 122.256812][ T6444] hsr_slave_0: entered allmulticast mode [ 122.276922][ T6444] hsr_slave_1: entered allmulticast mode [ 122.323573][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 122.353666][ T6444] hsr0: entered promiscuous mode [ 122.368734][ T6444] bridge0: port 3(hsr0) entered blocking state [ 122.375521][ T6444] bridge0: port 3(hsr0) entered forwarding state [ 122.440774][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 122.502581][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.116'. [ 122.604971][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 122.905232][ T6465] wg1: entered promiscuous mode [ 123.084369][ T6465] wg1: entered allmulticast mode [ 123.332018][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.126'. [ 123.487634][ T6477] FAULT_INJECTION: forcing a failure. [ 123.487634][ T6477] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 123.546955][ T6477] CPU: 0 UID: 0 PID: 6477 Comm: syz.2.127 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 123.546981][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.546992][ T6477] Call Trace: [ 123.546999][ T6477] [ 123.547021][ T6477] dump_stack_lvl+0x241/0x360 [ 123.547054][ T6477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.547077][ T6477] ? __pfx__printk+0x10/0x10 [ 123.547111][ T6477] should_fail_ex+0x424/0x570 [ 123.547135][ T6477] prepare_alloc_pages+0x220/0x610 [ 123.547155][ T6477] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 123.547177][ T6477] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.547196][ T6477] ? cgroup_rstat_updated+0x144/0xc40 [ 123.547235][ T6477] alloc_pages_mpol+0x339/0x690 [ 123.547262][ T6477] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 123.547296][ T6477] folio_alloc_mpol_noprof+0x36/0x70 [ 123.547320][ T6477] shmem_alloc_and_add_folio+0x490/0x1070 [ 123.547357][ T6477] ? shmem_huge_global_enabled+0x175/0x3b0 [ 123.547379][ T6477] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 123.547408][ T6477] ? shmem_allowable_huge_orders+0x41b/0x430 [ 123.547438][ T6477] shmem_get_folio_gfp+0x655/0x1800 [ 123.547459][ T6477] ? seqcount_lockdep_reader_access+0x159/0x230 [ 123.547481][ T6477] ? lockdep_hardirqs_on+0x9d/0x150 [ 123.547517][ T6477] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 123.547552][ T6477] shmem_fault+0x223/0x5c0 [ 123.547576][ T6477] ? __pfx_shmem_fault+0x10/0x10 [ 123.547592][ T6477] ? __pfx____pte_offset_map+0x10/0x10 [ 123.547628][ T6477] __do_fault+0x135/0x390 [ 123.547651][ T6477] handle_pte_fault+0xfcc/0x61c0 [ 123.547683][ T6477] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 123.547704][ T6477] ? __lock_acquire+0xad5/0xd80 [ 123.547722][ T6477] ? __pfx_handle_pte_fault+0x10/0x10 [ 123.547750][ T6477] ? rcu_is_watching+0x15/0xb0 [ 123.547774][ T6477] ? __lock_acquire+0xad5/0xd80 [ 123.547807][ T6477] ? __lock_acquire+0xad5/0xd80 [ 123.547829][ T6477] ? do_raw_spin_lock+0x151/0x370 [ 123.547862][ T6477] handle_mm_fault+0x1129/0x1bf0 [ 123.547923][ T6477] ? __pfx_handle_mm_fault+0x10/0x10 [ 123.547946][ T6477] ? follow_page_pte+0x9ff/0x15e0 [ 123.547984][ T6477] ? vma_needs_dirty_tracking+0x172/0x1f0 [ 123.548007][ T6477] ? check_vma_flags+0x51b/0x590 [ 123.548035][ T6477] __get_user_pages+0x1adc/0x4180 [ 123.548099][ T6477] ? __pfx___get_user_pages+0x10/0x10 [ 123.548121][ T6477] ? __gup_longterm_locked+0x769/0x1850 [ 123.548145][ T6477] ? __pfx_down_read_killable+0x10/0x10 [ 123.548167][ T6477] ? __lock_acquire+0xad5/0xd80 [ 123.548201][ T6477] __gup_longterm_locked+0x900/0x1850 [ 123.548250][ T6477] ? __pfx___gup_longterm_locked+0x10/0x10 [ 123.548275][ T6477] ? sanity_check_pinned_pages+0x11b2/0x12a0 [ 123.548307][ T6477] gup_fast_fallback+0x2227/0x2980 [ 123.548366][ T6477] ? __pfx_gup_fast_fallback+0x10/0x10 [ 123.548393][ T6477] ? __lock_acquire+0xad5/0xd80 [ 123.548430][ T6477] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 123.548462][ T6477] ? __phys_addr+0xba/0x170 [ 123.548481][ T6477] ? is_valid_gup_args+0x124/0x200 [ 123.548508][ T6477] pin_user_pages_fast+0xd2/0x160 [ 123.548535][ T6477] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 123.548556][ T6477] ? __asan_memset+0x23/0x50 [ 123.548572][ T6477] ? sg_init_table+0x21/0x60 [ 123.548592][ T6477] ? rds_message_alloc_sgs+0xb1/0x190 [ 123.548617][ T6477] rds_cmsg_rdma_args+0x8a6/0x1230 [ 123.548669][ T6477] rds_cmsg_send+0x35d/0x5e0 [ 123.548702][ T6477] rds_sendmsg+0x13d8/0x2410 [ 123.548739][ T6477] ? __pfx_rds_sendmsg+0x10/0x10 [ 123.548761][ T6477] ? aa_sk_perm+0x96f/0xac0 [ 123.548791][ T6477] ? __pfx_aa_sk_perm+0x10/0x10 [ 123.548815][ T6477] ? aa_sock_msg_perm+0x91/0x160 [ 123.548843][ T6477] ? __pfx_rds_sendmsg+0x10/0x10 [ 123.548862][ T6477] __sock_sendmsg+0x221/0x270 [ 123.548900][ T6477] ____sys_sendmsg+0x523/0x860 [ 123.548931][ T6477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.548949][ T6477] ? __fget_files+0x2a/0x420 [ 123.548972][ T6477] ? __fget_files+0x2a/0x420 [ 123.548998][ T6477] __sys_sendmsg+0x271/0x360 [ 123.549025][ T6477] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.549103][ T6477] ? do_syscall_64+0xb6/0x230 [ 123.549125][ T6477] do_syscall_64+0xf3/0x230 [ 123.549143][ T6477] ? clear_bhb_loop+0x45/0xa0 [ 123.549164][ T6477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.549181][ T6477] RIP: 0033:0x7f4ac3d8e169 [ 123.549196][ T6477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.549209][ T6477] RSP: 002b:00007f4ac4b5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.549225][ T6477] RAX: ffffffffffffffda RBX: 00007f4ac3fb5fa0 RCX: 00007f4ac3d8e169 [ 123.549236][ T6477] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000008 [ 123.549245][ T6477] RBP: 00007f4ac4b5e090 R08: 0000000000000000 R09: 0000000000000000 [ 123.549253][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.549261][ T6477] R13: 0000000000000000 R14: 00007f4ac3fb5fa0 R15: 00007fff2db804f8 [ 123.549287][ T6477] [ 124.157084][ T6472] netdevsim netdevsim1: Direct firmware load for . [ 124.157084][ T6472] failed with error -2 [ 124.265239][ T6472] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 124.265239][ T6472] [ 124.714385][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.131'. [ 124.730732][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 124.752273][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 124.799349][ T6492] bridge0: port 3(hsr0) entered blocking state [ 124.805822][ T6492] bridge0: port 3(hsr0) entered disabled state [ 124.815947][ T6492] hsr0: entered allmulticast mode [ 124.822673][ T6492] hsr_slave_0: entered allmulticast mode [ 124.829331][ T6492] hsr_slave_1: entered allmulticast mode [ 124.850465][ T6492] hsr0: entered promiscuous mode [ 124.869836][ T6492] bridge0: port 3(hsr0) entered blocking state [ 124.876594][ T6492] bridge0: port 3(hsr0) entered forwarding state [ 125.133324][ T6510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'. [ 125.251892][ T6517] macsec1: entered promiscuous mode [ 125.346773][ T6517] macsec1: entered allmulticast mode [ 125.457899][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 126.203450][ T6525] netdevsim netdevsim4: Direct firmware load for . [ 126.203450][ T6525] failed with error -2 [ 126.237812][ T6525] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 126.237812][ T6525] [ 126.267753][ T6532] FAULT_INJECTION: forcing a failure. [ 126.267753][ T6532] name failslab, interval 1, probability 0, space 0, times 0 [ 126.315195][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.3.142 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 126.315222][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.315231][ T6532] Call Trace: [ 126.315238][ T6532] [ 126.315245][ T6532] dump_stack_lvl+0x241/0x360 [ 126.315275][ T6532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.315297][ T6532] ? __pfx__printk+0x10/0x10 [ 126.315318][ T6532] ? __mutex_trylock_common+0x184/0x2e0 [ 126.315345][ T6532] should_fail_ex+0x424/0x570 [ 126.315367][ T6532] should_failslab+0xac/0x100 [ 126.315388][ T6532] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 126.315410][ T6532] ? __alloc_skb+0x1c2/0x480 [ 126.315433][ T6532] __alloc_skb+0x1c2/0x480 [ 126.315453][ T6532] ? __pfx___alloc_skb+0x10/0x10 [ 126.315480][ T6532] wireless_send_event+0x2c2/0xd10 [ 126.315504][ T6532] ? cfg80211_wext_siwfreq+0x236/0x870 [ 126.315531][ T6532] ? __pfx_wireless_send_event+0x10/0x10 [ 126.315563][ T6532] ioctl_standard_call+0x13c/0x190 [ 126.315582][ T6532] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 126.315599][ T6532] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 126.315616][ T6532] wext_ioctl_dispatch+0xe4/0x410 [ 126.315636][ T6532] ? __pfx_ioctl_standard_call+0x10/0x10 [ 126.315722][ T6532] wext_handle_ioctl+0x15a/0x260 [ 126.315746][ T6532] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 126.315802][ T6532] sock_ioctl+0x181/0x900 [ 126.315828][ T6532] ? __pfx_sock_ioctl+0x10/0x10 [ 126.315848][ T6532] ? __fget_files+0x2a/0x420 [ 126.315870][ T6532] ? __fget_files+0x2a/0x420 [ 126.315894][ T6532] ? __fget_files+0x2a/0x420 [ 126.315921][ T6532] ? __pfx_sock_ioctl+0x10/0x10 [ 126.315943][ T6532] __se_sys_ioctl+0xf1/0x160 [ 126.315964][ T6532] do_syscall_64+0xf3/0x230 [ 126.315984][ T6532] ? clear_bhb_loop+0x45/0xa0 [ 126.316004][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.316018][ T6532] RIP: 0033:0x7f330f98e169 [ 126.316033][ T6532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.316044][ T6532] RSP: 002b:00007f33107e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.316061][ T6532] RAX: ffffffffffffffda RBX: 00007f330fbb5fa0 RCX: 00007f330f98e169 [ 126.316072][ T6532] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000008 [ 126.316081][ T6532] RBP: 00007f33107e0090 R08: 0000000000000000 R09: 0000000000000000 [ 126.316091][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.316100][ T6532] R13: 0000000000000000 R14: 00007f330fbb5fa0 R15: 00007ffdfc920318 [ 126.316126][ T6532] [ 126.628273][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 126.829345][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 127.756610][ T6568] __nla_validate_parse: 5 callbacks suppressed [ 127.764629][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.154'. [ 128.525825][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 128.601275][ T6577] netlink: 68 bytes leftover after parsing attributes in process `syz.4.156'. [ 128.653233][ T6583] netdevsim netdevsim3: Direct firmware load for . [ 128.653233][ T6583] failed with error -2 [ 128.681601][ T6585] batadv0: left promiscuous mode [ 128.703881][ T6583] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 128.703881][ T6583] [ 128.785666][ T6585] bridge0: port 3(batadv0) entered disabled state [ 128.836466][ T6585] bridge_slave_0: left allmulticast mode [ 128.853925][ T6585] bridge_slave_0: left promiscuous mode [ 128.865688][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.909819][ T6585] bridge_slave_1: left allmulticast mode [ 128.919463][ T6585] bridge_slave_1: left promiscuous mode [ 128.929175][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.963068][ T6585] bond0: (slave bond_slave_0): Releasing backup interface [ 129.007680][ T6585] bond0: (slave bond_slave_1): Releasing backup interface [ 129.031260][ T6595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'. [ 129.045271][ T6585] team0: Port device team_slave_0 removed [ 129.058995][ T6585] team0: Port device team_slave_1 removed [ 129.069254][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.079291][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.093887][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.103662][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.115817][ T6585] hsr0: left allmulticast mode [ 129.122358][ T6585] hsr_slave_0: left allmulticast mode [ 129.128539][ T6585] hsr_slave_1: left allmulticast mode [ 129.134292][ T6585] hsr0: left promiscuous mode [ 129.145154][ T6585] bridge0: port 4(hsr0) entered disabled state [ 129.435239][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 129.481767][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'. [ 129.637478][ T6609] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 129.805335][ T6601] bridge0: port 1(hsr0) entered blocking state [ 129.813002][ T6601] bridge0: port 1(hsr0) entered disabled state [ 129.826306][ T6601] hsr0: entered allmulticast mode [ 129.832696][ T6601] hsr_slave_0: entered allmulticast mode [ 129.839876][ T6601] hsr_slave_1: entered allmulticast mode [ 129.849799][ T6601] hsr0: entered promiscuous mode [ 129.858960][ T6601] bridge0: port 1(hsr0) entered blocking state [ 129.866003][ T6601] bridge0: port 1(hsr0) entered forwarding state [ 130.105042][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 130.196044][ T6632] sctp: [Deprecated]: syz.2.167 (pid 6632) Use of int in max_burst socket option. [ 130.196044][ T6632] Use struct sctp_assoc_value instead [ 130.582762][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 131.114512][ T6641] netlink: 'syz.3.170': attribute type 2 has an invalid length. [ 131.233791][ T6648] openvswitch: netlink: Missing key (keys=40, expected=80) [ 131.286294][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 131.588457][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.178'. [ 131.638944][ T6656] ipvlan2: entered promiscuous mode [ 131.653342][ T6656] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 131.662107][ T6656] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 133.135442][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.336027][ T6696] __nla_validate_parse: 3 callbacks suppressed [ 133.336046][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 133.418419][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.187'. [ 133.614573][ T6690] netlink: 'syz.1.186': attribute type 12 has an invalid length. [ 133.625018][ T6690] netlink: 'syz.1.186': attribute type 29 has an invalid length. [ 133.633001][ T6690] netlink: 148 bytes leftover after parsing attributes in process `syz.1.186'. [ 133.646467][ T6690] netlink: 59 bytes leftover after parsing attributes in process `syz.1.186'. [ 133.646641][ T6700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.188'. [ 133.712126][ T6694] vlan0: entered promiscuous mode [ 133.964095][ T6709] sit0: entered promiscuous mode [ 134.001707][ T6709] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 134.035323][ T6709] netlink: 1 bytes leftover after parsing attributes in process `syz.2.192'. [ 134.058956][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'. [ 134.353176][ T6724] FAULT_INJECTION: forcing a failure. [ 134.353176][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 134.405786][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.3.198 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 134.405812][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.405822][ T6724] Call Trace: [ 134.405835][ T6724] [ 134.405843][ T6724] dump_stack_lvl+0x241/0x360 [ 134.405874][ T6724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.405905][ T6724] ? __pfx__printk+0x10/0x10 [ 134.405931][ T6724] ? __pfx___might_resched+0x10/0x10 [ 134.405955][ T6724] should_fail_ex+0x424/0x570 [ 134.405982][ T6724] should_failslab+0xac/0x100 [ 134.406010][ T6724] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 134.406033][ T6724] ? __alloc_skb+0x1c2/0x480 [ 134.406053][ T6724] __alloc_skb+0x1c2/0x480 [ 134.406075][ T6724] ? __pfx___alloc_skb+0x10/0x10 [ 134.406092][ T6724] ? xfrm_sk_policy_lookup+0x7f4/0x840 [ 134.406123][ T6724] __ip6_append_data+0x2d15/0x41b0 [ 134.406158][ T6724] ? __pfx_raw6_getfrag+0x10/0x10 [ 134.406195][ T6724] ? ip6_mtu+0x81/0x3f0 [ 134.406216][ T6724] ? __pfx___ip6_append_data+0x10/0x10 [ 134.406232][ T6724] ? ip6_setup_cork+0xaaf/0x11c0 [ 134.406254][ T6724] ip6_append_data+0x25f/0x380 [ 134.406276][ T6724] ? __pfx_raw6_getfrag+0x10/0x10 [ 134.406296][ T6724] rawv6_sendmsg+0x1855/0x23c0 [ 134.406335][ T6724] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 134.406388][ T6724] ? sock_rps_record_flow+0x1a/0x410 [ 134.406413][ T6724] ? inet_sendmsg+0x330/0x390 [ 134.406438][ T6724] __sock_sendmsg+0x1a6/0x270 [ 134.406467][ T6724] ____sys_sendmsg+0x523/0x860 [ 134.406496][ T6724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.406513][ T6724] ? __fget_files+0x2a/0x420 [ 134.406539][ T6724] ? __fget_files+0x2a/0x420 [ 134.406569][ T6724] __sys_sendmmsg+0x3a0/0x7b0 [ 134.406599][ T6724] ? __pfx___sys_sendmmsg+0x10/0x10 [ 134.406644][ T6724] ? rcu_read_lock_any_held+0xbb/0x160 [ 134.406662][ T6724] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 134.406681][ T6724] ? vfs_write+0xb29/0xd10 [ 134.406705][ T6724] ? ksys_write+0x24e/0x2d0 [ 134.406723][ T6724] ? __mutex_unlock_slowpath+0x229/0x800 [ 134.406765][ T6724] ? ksys_write+0x275/0x2d0 [ 134.406789][ T6724] __x64_sys_sendmmsg+0xa0/0xb0 [ 134.406806][ T6724] do_syscall_64+0xf3/0x230 [ 134.406832][ T6724] ? clear_bhb_loop+0x45/0xa0 [ 134.406849][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.406862][ T6724] RIP: 0033:0x7f330f98e169 [ 134.406876][ T6724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.406894][ T6724] RSP: 002b:00007f33107e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.406912][ T6724] RAX: ffffffffffffffda RBX: 00007f330fbb5fa0 RCX: 00007f330f98e169 [ 134.406922][ T6724] RDX: 0000000000000021 RSI: 0000200000000480 RDI: 0000000000000003 [ 134.406932][ T6724] RBP: 00007f33107e0090 R08: 0000000000000000 R09: 0000000000000000 [ 134.406941][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.406949][ T6724] R13: 0000000000000000 R14: 00007f330fbb5fa0 R15: 00007ffdfc920318 [ 134.406972][ T6724] [ 134.736562][ T6729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.195'. [ 134.774383][ T6716] syzkaller0: entered promiscuous mode [ 134.812248][ T6716] syzkaller0: entered allmulticast mode [ 135.002457][ T30] audit: type=1800 audit(1744771707.001:2): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.201" name="memory.events" dev="tmpfs" ino=227 res=0 errno=0 [ 135.095261][ T30] audit: type=1804 audit(1744771707.041:3): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.201" name="memory.events" dev="tmpfs" ino=227 res=1 errno=0 [ 135.145498][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 135.206951][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 136.860560][ T6761] openvswitch: netlink: Actions may not be safe on all matching packets [ 137.277686][ T6761] 8021q: VLANs not supported on ip6gre0 [ 137.421704][ T6764] xt_TCPMSS: Only works on TCP SYN packets [ 137.467786][ T6768] netlink: 'syz.3.208': attribute type 5 has an invalid length. [ 137.655877][ T6774] netlink: 'syz.0.212': attribute type 1 has an invalid length. [ 137.681770][ T6774] netlink: 'syz.0.212': attribute type 1 has an invalid length. [ 137.908850][ T6782] team0: entered promiscuous mode [ 137.914266][ T6782] team_slave_0: entered promiscuous mode [ 137.928701][ T6782] team_slave_1: entered promiscuous mode [ 137.959041][ T6782] geneve0: entered promiscuous mode [ 137.996088][ T6782] bridge0: entered promiscuous mode [ 138.277291][ T6801] xt_TCPMSS: Only works on TCP SYN packets [ 138.490272][ T6805] __nla_validate_parse: 6 callbacks suppressed [ 138.490289][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 138.546276][ T6808] netlink: 'syz.3.221': attribute type 5 has an invalid length. [ 138.762662][ T6815] FAULT_INJECTION: forcing a failure. [ 138.762662][ T6815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.773069][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 138.827306][ T6815] CPU: 1 UID: 0 PID: 6815 Comm: syz.2.226 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 138.827332][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.827342][ T6815] Call Trace: [ 138.827349][ T6815] [ 138.827358][ T6815] dump_stack_lvl+0x241/0x360 [ 138.827396][ T6815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.827419][ T6815] ? __pfx__printk+0x10/0x10 [ 138.827455][ T6815] should_fail_ex+0x424/0x570 [ 138.827481][ T6815] _copy_from_user+0x2d/0xb0 [ 138.827499][ T6815] copy_msghdr_from_user+0xb3/0x580 [ 138.827529][ T6815] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 138.827571][ T6815] do_recvmmsg+0x3bf/0xab0 [ 138.827605][ T6815] ? __pfx_do_recvmmsg+0x10/0x10 [ 138.827643][ T6815] ? rcu_read_lock_any_held+0xbb/0x160 [ 138.827665][ T6815] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 138.827689][ T6815] ? vfs_write+0xb29/0xd10 [ 138.827718][ T6815] ? ksys_write+0x24e/0x2d0 [ 138.827739][ T6815] ? __mutex_unlock_slowpath+0x229/0x800 [ 138.827769][ T6815] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.827786][ T6815] ? __fget_files+0x2a/0x420 [ 138.827826][ T6815] __x64_sys_recvmmsg+0x1ab/0x260 [ 138.827851][ T6815] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 138.827879][ T6815] ? do_syscall_64+0xb6/0x230 [ 138.827901][ T6815] do_syscall_64+0xf3/0x230 [ 138.827917][ T6815] ? clear_bhb_loop+0x45/0xa0 [ 138.827936][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.827953][ T6815] RIP: 0033:0x7f4ac3d8e169 [ 138.827967][ T6815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.827980][ T6815] RSP: 002b:00007f4ac4b5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 138.827998][ T6815] RAX: ffffffffffffffda RBX: 00007f4ac3fb5fa0 RCX: 00007f4ac3d8e169 [ 138.828010][ T6815] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 138.828020][ T6815] RBP: 00007f4ac4b5e090 R08: 0000000000000000 R09: 0000000000000000 [ 138.828030][ T6815] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 138.828040][ T6815] R13: 0000000000000000 R14: 00007f4ac3fb5fa0 R15: 00007fff2db804f8 [ 138.828068][ T6815] [ 139.307653][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 139.485398][ T6836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.230'. [ 140.114166][ T6831] netdevsim netdevsim3: Direct firmware load for . [ 140.114166][ T6831] failed with error -2 [ 140.148781][ T6831] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 140.148781][ T6831] [ 140.446383][ T6859] netlink: 'syz.3.235': attribute type 5 has an invalid length. [ 140.747210][ T6867] netlink: 'syz.3.239': attribute type 10 has an invalid length. [ 140.868169][ T6870] netlink: 52 bytes leftover after parsing attributes in process `syz.2.240'. [ 141.226623][ T6883] FAULT_INJECTION: forcing a failure. [ 141.226623][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 141.263932][ T6886] netlink: 'syz.3.247': attribute type 5 has an invalid length. [ 141.268143][ T6883] CPU: 0 UID: 0 PID: 6883 Comm: syz.2.245 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 141.268168][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.268178][ T6883] Call Trace: [ 141.268184][ T6883] [ 141.268199][ T6883] dump_stack_lvl+0x241/0x360 [ 141.268230][ T6883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.268252][ T6883] ? __pfx__printk+0x10/0x10 [ 141.268278][ T6883] ? __pfx___might_resched+0x10/0x10 [ 141.268301][ T6883] should_fail_ex+0x424/0x570 [ 141.268327][ T6883] should_failslab+0xac/0x100 [ 141.268351][ T6883] __kmalloc_cache_noprof+0x73/0x370 [ 141.268372][ T6883] ? call_usermodehelper_setup+0x8e/0x270 [ 141.268388][ T6883] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 141.268414][ T6883] call_usermodehelper_setup+0x8e/0x270 [ 141.268430][ T6883] ? __pfx_free_modprobe_argv+0x10/0x10 [ 141.268455][ T6883] __request_module+0x3cf/0x640 [ 141.268476][ T6883] ? __xfrm_init_state+0x668/0x1050 [ 141.268491][ T6883] ? __xfrm_init_state+0x57d/0x1050 [ 141.268506][ T6883] ? __pfx___request_module+0x10/0x10 [ 141.268540][ T6883] ? __xfrm_init_state+0x6d9/0x1050 [ 141.268556][ T6883] ? __xfrm_init_state+0x6d9/0x1050 [ 141.268572][ T6883] __xfrm_init_state+0x712/0x1050 [ 141.268595][ T6883] xfrm_init_state+0x18/0xa0 [ 141.268617][ T6883] pfkey_add+0x1ffb/0x2e00 [ 141.268657][ T6883] ? __pfx_pfkey_add+0x10/0x10 [ 141.268682][ T6883] ? pfkey_broadcast+0x45/0x400 [ 141.268700][ T6883] ? pfkey_broadcast+0x3e3/0x400 [ 141.268726][ T6883] pfkey_sendmsg+0xc96/0x1140 [ 141.268760][ T6883] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 141.268800][ T6883] ? __pfx_aa_sk_perm+0x10/0x10 [ 141.268820][ T6883] ? __import_iovec+0x585/0x830 [ 141.268837][ T6883] ? aa_sock_msg_perm+0x91/0x160 [ 141.268864][ T6883] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 141.268883][ T6883] __sock_sendmsg+0x221/0x270 [ 141.268911][ T6883] ____sys_sendmsg+0x523/0x860 [ 141.268939][ T6883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.268957][ T6883] ? __fget_files+0x2a/0x420 [ 141.268983][ T6883] ? __fget_files+0x2a/0x420 [ 141.269016][ T6883] __sys_sendmsg+0x271/0x360 [ 141.269041][ T6883] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.269113][ T6883] ? do_syscall_64+0xb6/0x230 [ 141.269134][ T6883] do_syscall_64+0xf3/0x230 [ 141.269152][ T6883] ? clear_bhb_loop+0x45/0xa0 [ 141.269172][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.269193][ T6883] RIP: 0033:0x7f4ac3d8e169 [ 141.269208][ T6883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.269220][ T6883] RSP: 002b:00007f4ac4b5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.269238][ T6883] RAX: ffffffffffffffda RBX: 00007f4ac3fb5fa0 RCX: 00007f4ac3d8e169 [ 141.269250][ T6883] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 141.269262][ T6883] RBP: 00007f4ac4b5e090 R08: 0000000000000000 R09: 0000000000000000 [ 141.269271][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.269280][ T6883] R13: 0000000000000000 R14: 00007f4ac3fb5fa0 R15: 00007fff2db804f8 [ 141.269307][ T6883] [ 141.869245][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 141.900349][ T6905] bridge0: port 3(hsr0) entered blocking state [ 141.909487][ T6905] bridge0: port 3(hsr0) entered disabled state [ 141.921721][ T6905] hsr0: entered allmulticast mode [ 141.928098][ T6905] hsr_slave_0: entered allmulticast mode [ 141.934675][ T6905] hsr_slave_1: entered allmulticast mode [ 141.954591][ T6905] hsr0: entered promiscuous mode [ 142.211055][ T6911] gretap1: entered promiscuous mode [ 142.590679][ T6928] netlink: 128 bytes leftover after parsing attributes in process `syz.1.259'. [ 142.766468][ T6933] ipvlan2: entered promiscuous mode [ 142.788395][ T6933] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 142.807431][ T6933] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 143.097201][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 143.336029][ T6958] Bluetooth: MGMT ver 1.23 [ 143.349000][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 143.361645][ T6958] FAULT_INJECTION: forcing a failure. [ 143.361645][ T6958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.391840][ T6954] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 143.420518][ T6960] xt_hashlimit: size too large, truncated to 1048576 [ 143.443732][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz.2.267 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 143.443756][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.443765][ T6958] Call Trace: [ 143.443772][ T6958] [ 143.443780][ T6958] dump_stack_lvl+0x241/0x360 [ 143.443808][ T6958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.443828][ T6958] ? __pfx__printk+0x10/0x10 [ 143.443860][ T6958] should_fail_ex+0x424/0x570 [ 143.443883][ T6958] _copy_to_user+0x31/0xb0 [ 143.443902][ T6958] simple_read_from_buffer+0xc4/0x170 [ 143.443947][ T6958] proc_fail_nth_read+0x1ef/0x260 [ 143.443967][ T6958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.443986][ T6958] ? rw_verify_area+0x246/0x630 [ 143.444002][ T6958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.444021][ T6958] vfs_read+0x21f/0xb90 [ 143.444044][ T6958] ? __pfx___mutex_lock+0x10/0x10 [ 143.444065][ T6958] ? __pfx_vfs_read+0x10/0x10 [ 143.444086][ T6958] ? __fget_files+0x2a/0x420 [ 143.444112][ T6958] ? __fget_files+0x39d/0x420 [ 143.444133][ T6958] ? __fget_files+0x2a/0x420 [ 143.444166][ T6958] ksys_read+0x19d/0x2d0 [ 143.444187][ T6958] ? __pfx_ksys_read+0x10/0x10 [ 143.444211][ T6958] ? do_syscall_64+0xb6/0x230 [ 143.444232][ T6958] do_syscall_64+0xf3/0x230 [ 143.444250][ T6958] ? clear_bhb_loop+0x45/0xa0 [ 143.444270][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.444286][ T6958] RIP: 0033:0x7f4ac3d8cb7c [ 143.444302][ T6958] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.444314][ T6958] RSP: 002b:00007f4ac4b3d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.444332][ T6958] RAX: ffffffffffffffda RBX: 00007f4ac3fb6080 RCX: 00007f4ac3d8cb7c [ 143.444344][ T6958] RDX: 000000000000000f RSI: 00007f4ac4b3d0a0 RDI: 0000000000000004 [ 143.444354][ T6958] RBP: 00007f4ac4b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 143.444364][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.444373][ T6958] R13: 0000000000000000 R14: 00007f4ac3fb6080 R15: 00007fff2db804f8 [ 143.444402][ T6958] [ 143.918736][ T6961] bond1: (slave gretap1): making interface the new active one [ 143.941685][ T6961] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 143.969589][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 144.126938][ T6976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.271'. [ 144.835156][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 145.332446][ T6999] netlink: 'syz.2.281': attribute type 1 has an invalid length. [ 145.590126][ T7004] netdevsim netdevsim3: Direct firmware load for . [ 145.590126][ T7004] failed with error -2 [ 145.620734][ T7004] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 145.620734][ T7004] [ 145.723544][ T7008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.284'. [ 145.785503][ T7008] bridge0: port 4(veth0_to_hsr) entered blocking state [ 145.830976][ T7008] bridge0: port 4(veth0_to_hsr) entered disabled state [ 145.867078][ T7008] veth0_to_hsr: entered allmulticast mode [ 145.918725][ T7008] veth0_to_hsr: entered promiscuous mode [ 145.962781][ T7008] bridge0: port 4(veth0_to_hsr) entered blocking state [ 145.971071][ T7008] bridge0: port 4(veth0_to_hsr) entered forwarding state [ 146.371048][ T7027] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 146.395931][ T7027] syzkaller1: linktype set to 821 [ 146.450218][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.293'. [ 146.664514][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.295'. [ 146.685603][ T7044] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 146.714735][ T7044] netlink: 'syz.4.299': attribute type 2 has an invalid length. [ 146.715489][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.295'. [ 147.431643][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 148.055252][ T7083] netlink: 104 bytes leftover after parsing attributes in process `syz.4.307'. [ 148.097227][ T7083] netlink: 'syz.4.307': attribute type 31 has an invalid length. [ 148.200546][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'. [ 148.542542][ T7092] netdevsim netdevsim0: Direct firmware load for . [ 148.542542][ T7092] failed with error -2 [ 148.554140][ T7092] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 148.554140][ T7092] [ 149.204934][ T7120] __nla_validate_parse: 1 callbacks suppressed [ 149.204954][ T7120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.321'. [ 149.270762][ T7124] veth0: entered promiscuous mode [ 149.327183][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 149.339362][ T7121] veth0: left promiscuous mode [ 149.504920][ T7127] bridge0: port 3(hsr0) entered blocking state [ 149.527000][ T7127] bridge0: port 3(hsr0) entered disabled state [ 149.548650][ T7127] hsr0: entered promiscuous mode [ 149.572309][ T7127] bridge0: port 3(hsr0) entered blocking state [ 149.579682][ T7127] bridge0: port 3(hsr0) entered forwarding state [ 149.620011][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 149.678977][ T7138] netlink: 'syz.0.330': attribute type 2 has an invalid length. [ 149.731754][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 149.748424][ T7138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.330'. [ 149.795345][ T7138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.330'. [ 149.889959][ T7142] IPv6: Can't replace route, no match found [ 149.923588][ T7153] netdevsim netdevsim1: Direct firmware load for . [ 149.923588][ T7153] failed with error -2 [ 150.003548][ T7153] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 150.003548][ T7153] [ 150.067712][ T7162] netlink: 56 bytes leftover after parsing attributes in process `syz.4.336'. [ 150.179409][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.339'. [ 150.920414][ T7195] FAULT_INJECTION: forcing a failure. [ 150.920414][ T7195] name failslab, interval 1, probability 0, space 0, times 0 [ 150.961449][ T7195] CPU: 1 UID: 0 PID: 7195 Comm: syz.2.349 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 150.961474][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.961484][ T7195] Call Trace: [ 150.961491][ T7195] [ 150.961498][ T7195] dump_stack_lvl+0x241/0x360 [ 150.961528][ T7195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.961550][ T7195] ? __pfx__printk+0x10/0x10 [ 150.961570][ T7195] ? __lock_acquire+0xad5/0xd80 [ 150.961596][ T7195] should_fail_ex+0x424/0x570 [ 150.961618][ T7195] should_failslab+0xac/0x100 [ 150.961641][ T7195] kmem_cache_alloc_noprof+0x78/0x390 [ 150.961660][ T7195] ? skb_clone+0x20c/0x390 [ 150.961685][ T7195] skb_clone+0x20c/0x390 [ 150.961709][ T7195] __netlink_deliver_tap+0x3c4/0x7f0 [ 150.961736][ T7195] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.961751][ T7195] netlink_deliver_tap+0x19d/0x1b0 [ 150.961768][ T7195] netlink_unicast+0x7c6/0x9a0 [ 150.961801][ T7195] ? __pfx_netlink_unicast+0x10/0x10 [ 150.961826][ T7195] ? skb_put+0x114/0x1f0 [ 150.961848][ T7195] netlink_sendmsg+0x8c3/0xcd0 [ 150.961877][ T7195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.961902][ T7195] ? aa_sock_msg_perm+0x91/0x160 [ 150.961928][ T7195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.961943][ T7195] __sock_sendmsg+0x221/0x270 [ 150.961971][ T7195] ____sys_sendmsg+0x523/0x860 [ 150.961999][ T7195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.962015][ T7195] ? __fget_files+0x2a/0x420 [ 150.962040][ T7195] ? __fget_files+0x2a/0x420 [ 150.962078][ T7195] __sys_sendmsg+0x271/0x360 [ 150.962102][ T7195] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.962175][ T7195] ? do_syscall_64+0xb6/0x230 [ 150.962196][ T7195] do_syscall_64+0xf3/0x230 [ 150.962214][ T7195] ? clear_bhb_loop+0x45/0xa0 [ 150.962233][ T7195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.962262][ T7195] RIP: 0033:0x7f4ac3d8e169 [ 150.962278][ T7195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.962290][ T7195] RSP: 002b:00007f4ac4b5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.962308][ T7195] RAX: ffffffffffffffda RBX: 00007f4ac3fb5fa0 RCX: 00007f4ac3d8e169 [ 150.962319][ T7195] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 150.962329][ T7195] RBP: 00007f4ac4b5e090 R08: 0000000000000000 R09: 0000000000000000 [ 150.962338][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.962348][ T7195] R13: 0000000000000000 R14: 00007f4ac3fb5fa0 R15: 00007fff2db804f8 [ 150.962376][ T7195] [ 151.663521][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 152.256433][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.361'. [ 153.080377][ T7252] netdevsim netdevsim3: Direct firmware load for . [ 153.080377][ T7252] failed with error -2 [ 153.091526][ T7252] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 153.091526][ T7252] [ 153.436250][ T7266] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 153.567156][ C1] [ 153.569823][ C1] ============================================ [ 153.576480][ C1] WARNING: possible recursive locking detected [ 153.582984][ C1] 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 Not tainted [ 153.590217][ C1] -------------------------------------------- [ 153.596636][ C1] swapper/1/0 is trying to acquire lock: [ 153.602375][ C1] ffff88805ce88f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 153.612010][ C1] [ 153.612010][ C1] but task is already holding lock: [ 153.619814][ C1] ffff8880340d4f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 153.630066][ C1] [ 153.630066][ C1] other info that might help us debug this: [ 153.638403][ C1] Possible unsafe locking scenario: [ 153.638403][ C1] [ 153.646044][ C1] CPU0 [ 153.649381][ C1] ---- [ 153.652842][ C1] lock(&hsr->seqnr_lock); [ 153.657713][ C1] lock(&hsr->seqnr_lock); [ 153.662624][ C1] [ 153.662624][ C1] *** DEADLOCK *** [ 153.662624][ C1] [ 153.671095][ C1] May be due to missing lock nesting notation [ 153.671095][ C1] [ 153.680568][ C1] 9 locks held by swapper/1/0: [ 153.685424][ C1] #0: ffffc90000a08bc0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xc2/0x650 [ 153.695180][ C1] #1: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1ef/0x1560 [ 153.705208][ C1] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x1750 [ 153.715475][ C1] #3: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 153.725523][ C1] #4: ffff8880340d4f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 153.735359][ C1] #5: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb8/0x2d20 [ 153.744874][ C1] #6: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 153.755574][ C1] #7: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x220/0x1c00 [ 153.765692][ C1] #8: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 153.776069][ C1] [ 153.776069][ C1] stack backtrace: [ 153.782081][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 153.782095][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.782102][ C1] Call Trace: [ 153.782108][ C1] [ 153.782114][ C1] dump_stack_lvl+0x241/0x360 [ 153.782133][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.782145][ C1] ? __pfx__printk+0x10/0x10 [ 153.782157][ C1] ? print_lock+0x171/0x1a0 [ 153.782169][ C1] print_deadlock_bug+0x2be/0x2d0 [ 153.782180][ C1] validate_chain+0x928/0x24e0 [ 153.782193][ C1] ? cgroup_rstat_updated+0x144/0xc40 [ 153.782208][ C1] __lock_acquire+0xad5/0xd80 [ 153.782218][ C1] lock_acquire+0x116/0x2f0 [ 153.782231][ C1] ? hsr_dev_xmit+0x18a/0x210 [ 153.782255][ C1] ? hsr_dev_xmit+0x18a/0x210 [ 153.782277][ C1] _raw_spin_lock_bh+0x35/0x50 [ 153.782309][ C1] ? hsr_dev_xmit+0x18a/0x210 [ 153.782322][ C1] hsr_dev_xmit+0x18a/0x210 [ 153.782334][ C1] dev_hard_start_xmit+0x2d9/0x830 [ 153.782350][ C1] __dev_queue_xmit+0x1b80/0x3f60 [ 153.782365][ C1] ? __dev_queue_xmit+0x2f9/0x3f60 [ 153.782377][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 153.782388][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 153.782396][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 153.782406][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 153.782414][ C1] ? ebt_do_table+0x2858/0x2a60 [ 153.782423][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 153.782463][ C1] ? ebt_do_table+0x2858/0x2a60 [ 153.782473][ C1] ? ebt_do_table+0x2858/0x2a60 [ 153.782483][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 153.782492][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 153.782500][ C1] ? skb_push+0x97/0x100 [ 153.782513][ C1] br_dev_queue_push_xmit+0x771/0x950 [ 153.782527][ C1] ? br_nf_post_routing+0x1ef/0xe80 [ 153.782540][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 153.782552][ C1] ? NF_HOOK+0xa1/0x460 [ 153.782563][ C1] NF_HOOK+0x3ac/0x460 [ 153.782573][ C1] ? NF_HOOK+0xa1/0x460 [ 153.782583][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 153.782594][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 153.782607][ C1] br_forward_finish+0xd8/0x130 [ 153.782617][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 153.782629][ C1] NF_HOOK+0x3ac/0x460 [ 153.782640][ C1] ? NF_HOOK+0xa1/0x460 [ 153.782649][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 153.782660][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 153.782673][ C1] __br_forward+0x46a/0x640 [ 153.782684][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 153.782698][ C1] ? __pfx___br_forward+0x10/0x10 [ 153.782709][ C1] ? skb_clone+0x240/0x390 [ 153.782721][ C1] maybe_deliver+0xb3/0x150 [ 153.782732][ C1] br_flood+0x2e4/0x680 [ 153.782745][ C1] br_dev_xmit+0x12ac/0x1c00 [ 153.782754][ C1] ? br_dev_xmit+0x220/0x1c00 [ 153.782763][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 153.782770][ C1] ? hsr_forward_skb+0x1238/0x2d20 [ 153.782778][ C1] ? dev_hard_start_xmit+0x2d9/0x830 [ 153.782788][ C1] ? __dev_queue_xmit+0x1b80/0x3f60 [ 153.782799][ C1] ? ip6_finish_output2+0x1296/0x1750 [ 153.782809][ C1] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 153.782820][ C1] ? call_timer_fn+0x189/0x650 [ 153.782830][ C1] ? netif_skb_features+0x8be/0xca0 [ 153.782844][ C1] dev_hard_start_xmit+0x2d9/0x830 [ 153.782857][ C1] __dev_queue_xmit+0x1b80/0x3f60 [ 153.782872][ C1] ? __dev_queue_xmit+0x2f9/0x3f60 [ 153.782884][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 153.782896][ C1] ? __copy_skb_header+0xa7/0x5a0 [ 153.782907][ C1] ? __asan_memcpy+0x40/0x70 [ 153.782917][ C1] ? __pskb_copy_fclone+0x9fb/0x10e0 [ 153.782929][ C1] ? __asan_memcpy+0x40/0x70 [ 153.782937][ C1] ? __pskb_copy_fclone+0x9fb/0x10e0 [ 153.782950][ C1] ? hsr_create_tagged_frame+0x4de/0xef0 [ 153.782958][ C1] ? __asan_memmove+0x40/0x70 [ 153.782967][ C1] ? hsr_addr_subst_dest+0x30d/0xac0 [ 153.782981][ C1] hsr_forward_skb+0x184c/0x2d20 [ 153.782992][ C1] ? hsr_forward_skb+0xb8/0x2d20 [ 153.783009][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 153.783025][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 153.783046][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 153.783061][ C1] ? hsr_dev_xmit+0x18a/0x210 [ 153.783085][ C1] hsr_dev_xmit+0x195/0x210 [ 153.783105][ C1] dev_hard_start_xmit+0x2d9/0x830 [ 153.783128][ C1] __dev_queue_xmit+0x1b80/0x3f60 [ 153.783141][ C1] ? __lock_acquire+0xad5/0xd80 [ 153.783151][ C1] ? __dev_queue_xmit+0x2f9/0x3f60 [ 153.783163][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 153.783175][ C1] ? neigh_connected_output+0x1d5/0x450 [ 153.783183][ C1] ? read_seqbegin+0x15c/0x2c0 [ 153.783196][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 153.783205][ C1] ? read_seqbegin+0x202/0x2c0 [ 153.783217][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 153.783226][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 153.783238][ C1] ? eth_header+0x11c/0x1f0 [ 153.783249][ C1] ? __asan_memcpy+0x40/0x70 [ 153.783257][ C1] ? eth_header+0x11c/0x1f0 [ 153.783267][ C1] ? __pfx_eth_header+0x10/0x10 [ 153.783277][ C1] ? neigh_connected_output+0x3a7/0x450 [ 153.783288][ C1] ip6_finish_output2+0x1296/0x1750 [ 153.783298][ C1] ? ip6_finish_output2+0x701/0x1750 [ 153.783309][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 153.783319][ C1] ? ip6_mtu+0x81/0x3f0 [ 153.783333][ C1] ? ip6_mtu+0x81/0x3f0 [ 153.783358][ C1] ip6_finish_output+0x421/0x840 [ 153.783385][ C1] ndisc_send_skb+0xb58/0x1560 [ 153.783407][ C1] ? ndisc_send_skb+0x1ef/0x1560 [ 153.783421][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 153.783431][ C1] ? __pfx_dst_output+0x10/0x10 [ 153.783472][ C1] ? __ndisc_fill_addr_option+0xe8/0x140 [ 153.783483][ C1] ? ndisc_send_rs+0x439/0x5c0 [ 153.783494][ C1] addrconf_rs_timer+0x380/0x680 [ 153.783505][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 153.783516][ C1] call_timer_fn+0x189/0x650 [ 153.783526][ C1] ? call_timer_fn+0xc2/0x650 [ 153.783534][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 153.783543][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 153.783552][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 153.783561][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 153.783570][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 153.783579][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.783592][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 153.783601][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 153.783610][ C1] __run_timer_base+0x66e/0x8e0 [ 153.783626][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 153.783640][ C1] ? seqcount_lockdep_reader_access+0x1c3/0x230 [ 153.783654][ C1] run_timer_softirq+0xb7/0x170 [ 153.783663][ C1] handle_softirqs+0x2d6/0x9b0 [ 153.783673][ C1] ? __irq_exit_rcu+0xfb/0x220 [ 153.783682][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 153.783694][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 153.783708][ C1] __irq_exit_rcu+0xfb/0x220 [ 153.783716][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 153.783727][ C1] irq_exit_rcu+0x9/0x30 [ 153.783734][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 153.783744][ C1] [ 153.783747][ C1] [ 153.783751][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.783761][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 153.783771][ C1] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 91 1a 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 153.783779][ C1] RSP: 0018:ffffc90000197dc0 EFLAGS: 000002c6 [ 153.783789][ C1] RAX: 38040f4748eeaa00 RBX: ffffffff8197af7e RCX: ffffffff8c2da95c [ 153.783796][ C1] RDX: 0000000000000001 RSI: ffffffff8e699951 RDI: ffffffff8ca1c6c0 [ 153.783803][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732b5b R09: 1ffff110170e656b [ 153.783810][ C1] R10: dffffc0000000000 R11: ffffed10170e656c R12: 1ffff92000032fd2 [ 153.783816][ C1] R13: 1ffff11003ad9b40 R14: 0000000000000001 R15: dffffc0000000000 [ 153.783824][ C1] ? do_idle+0x22e/0x5d0 [ 153.783834][ C1] ? ct_kernel_exit+0x12c/0x1a0 [ 153.783845][ C1] default_idle+0x13/0x20 [ 153.783855][ C1] default_idle_call+0x74/0xb0 [ 153.783865][ C1] do_idle+0x22e/0x5d0 [ 153.783877][ C1] ? __pfx_do_idle+0x10/0x10 [ 153.783891][ C1] cpu_startup_entry+0x42/0x60 [ 153.783901][ C1] start_secondary+0xfe/0x100 [ 153.783910][ C1] common_startup_64+0x13e/0x147 [ 153.783926][ C1] [ 153.827129][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 153.894066][ T7270] netlink: 'syz.2.372': attribute type 10 has an invalid length. [ 154.653490][ T7270] syz_tun: entered promiscuous mode [ 154.679386][ T7270] bond0: (slave syz_tun): Enslaving as an active interface with an up link