last executing test programs: 1m17.684048173s ago: executing program 4 (id=3518): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbb11414aa0000000010290000000000000000000007"], 0x30}}], 0x1, 0x0) 1m3.92674855s ago: executing program 4 (id=3518): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbb11414aa0000000010290000000000000000000007"], 0x30}}], 0x1, 0x0) 47.463027848s ago: executing program 4 (id=3518): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbb11414aa0000000010290000000000000000000007"], 0x30}}], 0x1, 0x0) 33.721412154s ago: executing program 4 (id=3518): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbb11414aa0000000010290000000000000000000007"], 0x30}}], 0x1, 0x0) 21.748076006s ago: executing program 4 (id=3518): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbb11414aa0000000010290000000000000000000007"], 0x30}}], 0x1, 0x0) 6.963827253s ago: executing program 1 (id=4331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000640)={0x4001, 0x8, 0x0, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000056000bafdc5800000000000007"], 0x18}}, 0x0) unshare(0x400) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000a40)=0x10a, 0x4) 6.700913389s ago: executing program 1 (id=4333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 6.567698567s ago: executing program 1 (id=4335): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r1, 0x4, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000390000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 6.380716963s ago: executing program 1 (id=4337): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xf0, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xe, 0x9, [0x15, 0x4, 0x19, 0x23, 0xb, 0x8, 0x2a, 0x23, 0x15, 0x15, 0xd, 0x18, 0x3d, 0x2e, 0x34, 0x16], 0x1, 0x9, 0xbe38}}}, {{@ip={@broadcast, @broadcast, 0xff, 0xffffff00, 'bridge_slave_1\x00', 'veth0\x00', {}, {}, 0x84, 0x1, 0x1}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x4, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8a95}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xff000000, 0x0, 'ip6tnl0\x00', 'vlan0\x00', {}, {}, 0x21, 0x3, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x6, 0x1}}, @common=@addrtype={{0x30}, {0xc81, 0x8, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308fd906b771ab5030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112", 0xb8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0xccc0, 0x12) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xe}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f00000000c0)=""/119, &(0x7f0000000140)=0x77) 6.300837903s ago: executing program 4 (id=3518): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbb11414aa0000000010290000000000000000000007"], 0x30}}], 0x1, 0x0) 6.2512774s ago: executing program 1 (id=4339): unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x2010, 0xffffffffffffffff, 0x0) gettid() (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x1}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}]}, 0x44}}, 0x0) (async) unshare(0x10000000) (async) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnexthop={0x30, 0x6a, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) (async) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r5, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0x50d4}], 0x1, 0x832b, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) (async) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) (async) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) close(0x3) 4.793231527s ago: executing program 2 (id=4342): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f00000000c0)=0x9b) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='s\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100028bd7000c5dbdf07000000000a000900aaaaaaaaaa12000008002b0007a68c30cc00000500300000000400000000000000008769274b743b6de790ecaef92b1394bafc"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) 4.696948611s ago: executing program 1 (id=4344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) unshare(0x6a040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000a000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300000000000000000000000000000629000000"], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) 4.668096359s ago: executing program 2 (id=4345): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 4.368945165s ago: executing program 0 (id=4347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "f9"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) 4.367368047s ago: executing program 2 (id=4348): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000500)=0xd0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) sendmsg$alg(r4, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4011}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000021c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB='jEf'], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000280), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xa8, &(0x7f0000000040)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r1, r7}) sendmmsg$inet(r0, &(0x7f0000000600), 0x0, 0x40) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x25ffdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000000)=0xe9d, 0x4) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff2bbd040c0000000000000000", @ANYRES32=0x0, @ANYBLOB="170100008304060028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="8600030022000000"], 0x48}}, 0x24008000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000580)={'veth1_to_bridge\x00', &(0x7f0000000700)=@ethtool_wolinfo={0x6, 0x3, 0x43, "bc230f03db0b"}}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001380)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000d23d00000000006f0500"/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r10, &(0x7f0000000100)='^'}, 0x20) 4.094888691s ago: executing program 0 (id=4350): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00') r4 = socket(0x26, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000d0ff000000000000000000009500000000000000d3fd5a629f97f0bd71f6196c8ac3514379b2a7f03b9b6ca427e5991dca942206f98b16123fd8059180a904bf705cb22f9f0d77dffa2b20842970f7645c0153d3c61ae700635a5fa9d1823942b8d70432b257d089236e76b3229f928b879278600e44db0b075d781d31f715fb7d0000"], &(0x7f0000000000)='GPL\x00', 0x1ee3, 0xda, &(0x7f0000000340)=""/218, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xfffffffffffffcde}}, 0x44010) openat$cgroup_ro(r5, 0x0, 0x7a05, 0x1700) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, 0x0, &(0x7f0000000500)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x80000000}) 3.828687105s ago: executing program 0 (id=4351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6dd2f638a1ad5b3a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @value=r1}, 0x94) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000640), 0x14) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) write$tun(r5, &(0x7f0000000400)={@val={0x1c}, @void, @llc={@llc={0xfe, 0xbc, '\x00'}}}, 0x7) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x7, 0x6}, {0x0, 0x2}, {0x10, 0xfff2}}}, 0x24}}, 0x40004) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000203010100060000000000000a0000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4008040) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000440)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x24004040}, 0x400d050) 3.615747885s ago: executing program 3 (id=4353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x4, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @random="2ddd5a771460", @broadcast, @remote]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x45}, {0x6, 0x0, 0x0, 0x41}]}) 1.932993557s ago: executing program 2 (id=4354): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{@fixed}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1.851417081s ago: executing program 0 (id=4355): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x40081}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5f90}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="090000000200218979000300000002000200"/30, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r7}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r7}, 0x38) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.770467095s ago: executing program 3 (id=4356): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'nicvf0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002a40)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x81}}}}}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000280)=0x5, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000280)=0x5, 0x4) recvmsg(r4, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20) (async) recvmsg(r4, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x24008850}, 0x20008084) gettid() ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x4080) (async) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x4080) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000ff840600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 1.706506338s ago: executing program 2 (id=4357): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6(0xa, 0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="370977e8a5b9dd24540a078036016cf804e68b86561b6c3c1d25a1b7de73ca16f942594940504dce78473b20a87db5f8eb37143111ba4831dc46cad9a593d5dcb3b2a7405aa8458ed76dc25fcf552359f0fb6d861fd533734f1f538c7ba7f84757", 0x61}], 0x1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10814) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0xa, 0x70000000, 0x9, 0x8, 0x4, 0x1]}, &(0x7f0000000300)=0x78) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000340)=0x1, 0x4) sendmsg$rds(r6, &(0x7f0000002cc0)={&(0x7f0000000380)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000002840)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000480)=""/152, 0x98}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/91, 0x5b}, {&(0x7f00000025c0)=""/197, 0xc5}, {&(0x7f00000026c0)=""/160, 0xa0}, {&(0x7f0000002780)=""/173, 0xad}], 0x9, &(0x7f0000002b00)=[@mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x4}, &(0x7f0000002900)=0x5, &(0x7f0000002940)=0x6, 0x9, 0x3, 0xc, 0x3, 0x1e, 0xace}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x5}, &(0x7f0000002980)=0x8, &(0x7f00000029c0)=0x56, 0x10000, 0x0, 0xd, 0x9, 0x0, 0xfd}}, @rdma_dest={0x18, 0x114, 0x2, {0x84da, 0x7}}, @mask_cswp={0x58, 0x114, 0x9, {{0x200, 0x12}, &(0x7f0000002a00)=0x1, &(0x7f0000002a40)=0x1, 0x512ecb97, 0x5, 0x10001, 0x2b1, 0x0, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x3ad91397, 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfc45, 0xfa21}, &(0x7f0000002a80)=0x2, &(0x7f0000002ac0)=0xa79, 0xa1d3, 0x559, 0xdc3, 0x2, 0x4, 0x5}}], 0x190, 0x40080}, 0x804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002d40)={'team0\x00', 0x2}) r8 = socket(0x6, 0x5, 0xbeb) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000002d80), &(0x7f0000002dc0)=0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x1010, r8, 0xfe740000) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000002e00)={0xc1, 0x0, 0x2, 0x0, 0x0, [{}, {{r7}, 0x7f}]}) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002ec0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000002fc0)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x67595e88098c2c3d}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x48, r9, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000014) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000003000)={0x0, 0x19}, &(0x7f0000003040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000003080)={r10, @in6={{0xa, 0x4e24, 0xa3c2, @ipv4={'\x00', '\xff\xff', @remote}, 0x101}}, [0x876, 0x10001, 0x6, 0x9, 0x3, 0x8, 0xb, 0x5, 0x0, 0x8, 0xa, 0x6, 0xfffffffffffff800, 0x1, 0x10]}, &(0x7f0000003180)=0x100) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r11, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x38, r2, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x20004010) r13 = socket$netlink(0x10, 0x3, 0x19) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000003300)="14ef8656cf322d958fad15cedd8a794770b56bedfaa0c7d6d9e6250f8c867caaa37757936dca3f95b216b3d2909ffa1647cdca9a9afdb3adc7730f7dba5d96df72fedc72647a21fcf4ca9d09e8b1b2d99fced06f2bd3776eb1300567e043d8c1b243d742ef3b3ab3846ebb82f716be0db4802c1a184a1a0af2a3d2497b52a1caba78637cd8cac0f2ac71fcb5d363a151bddfe064cb3e364be2f2b30a6f55e50d32f738012462af89ca63294dd49ab9ca0ff01e9caa96e1082f2bd9272f55bae3a5d4b18620d35fbe08b969b67397ef771dd72393c4a5740de4", 0xd9) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003440), r13) sendmsg$TIPC_NL_PUBL_GET(r13, &(0x7f00000036c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003680)={&(0x7f0000003480)={0x1cc, r14, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1803}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xed}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8227}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe5, 0x3, "2a704c2a6f1f27d814827808ea794053ebe045f196b08c8735744429ecaf398390c5575e78705b63429711a23e78f42ea6eab6d9653845666c909f1ee378fee2bec1f0bf09157be0efa8cffe2a4f602695cdbae70e1ae896f3e8e9665744b1742579861670b41859aab200c6c7db556422b1c84bdf5be789bc03ee12bbc383d3145e21d2cfc0204e0bb7a34fb241d49a9277699fc08e5e6934403d0a07ef0c8f7e876d5724120215b30171599e93b83f0c3c7517ebea98157e843db6a1f7251b49b40e73688f5412a64d2de011543e5ca9e7d454899c41f87515e9fc1c0f14656a"}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xea16}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.493721489s ago: executing program 3 (id=4358): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 326.708075ms ago: executing program 3 (id=4359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xf, 0x0, &(0x7f0000000400)="1069c2704a075e307300ac14dd46df", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000100)=0x81, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={&(0x7f0000000340)="d8aa188d863b33f99f530c2abfdd648e919040d7103471524e36ea66f2d524be9f8e6d9359c5da21ddccd98004726c0daa970d8f6f80c9bae7bfe893d40badde90884c016fc7dd52e8c629727a95dbe854bcce096f651b144d4f4ff1be6eb2cb3e72cdd408763e25d893ddc13cba93954295504da230e1054406c7278a4f7e7818a053c66067d1a08c51dc3f60b04a34c8582dd2cd52f376abc56c5c73c95f67e08097973e19ea32fc40c3bd034c28e9b0f8d42d6b6a3dde454d0ac2e20bdda084918c4393618d067d3a9041d988993ca7c7087e4f7b75607a48a1a5fadfbc2c33484e65034edb83e3c40117776d9d60bd4f262f3f70921f3fdbf9d2a63c7cfd67dec753fe03461b2d249918b2468dd9da689ec948da2f356f03f5dc7b2556b7dfc177997bfff5fa99451b638c9f6adf4d201c13446914c77b34e48128c972c212555e1eaf6cedffea8035717986005cd1683caa4e7dbadf36bf0340001d110fa383045c921ebdf6ec7e49d583a3dca514cd44ebe1b648abef67730af9dd19fc64abd7442cf1cbdefeb3921cdd3fa90906926c99ad209264d03e026615cbf3c7a8944cc2708ce8c5a1fccb5af449efb2a2af4322e9d6dd6968484a82aee5dd9f22a87e26c2d912948f9d665a282696325feaf25c66ac964ebe63f4fa2cbbd7797109f1c49d2f5cd4903919537a97a7a3e9548a6003cdc969fa63bd61bb1ec1c3912509baff8664d194baaebeaf5f79d4c62e2087bb3fe51b4c4e8d9531b68dd11446629d107a3cb216e9029a2daf1a719e270a70a9b8e145fdabb18195a9d4d040714fd751acff2274cde71d380d8e0cd7c48a0d0fe480defcf332d5a1cd01d906eaf5c3e68276593342eac31e65aca3a0e45b149004700b2cd6e43baaa8627c3381619eb1bcd72578c9e8787c65eac393713a47c4f5acb29de74666278a1e3a925393db608b737a2bf9b17cfcf1b44784779ebc278ba03514f1ee8ac8a7142d246f844b9927fcb5fd460a873d417b1f3472f52057a3df579b57c4f1a9a69faed3b3b053c3374d239f9ba254ab77efa0d19fdbbf1791a6079afc958d1cdaff872480ebc879ed00c6a9be20c1ade30871bb665275253d64a91e9e7d91c98d00fe665271b4e848456355dc8f661ecaf334981dc4b11986dab6fab78ffd79eadb4ebaed8c0ebe853bc50afec228ee3309921f66a18f47e3cb3ffe6e9f8e59b50af6eb9f1788115500ae03960be51b2ea7dc41a5b33e9d15b7e65c281e65e9741d8b65187dd71486fe0a51483971da1588af9d4f95a607c68453595c4a1041ef27fc19f290eab3b2f49633d359bfed28e7efa2cffde2591a6ba93a2f3ab2990d0057cb89d331dbe5828db35ec6712da54c29fb695b6502e1d3ec1d70500364563edfcb0cb722122282de0a2e73a13153b0a6413f4c5d74559c1d61a102b8209e3e98351e624b4bff57470466578ad70b8ca13767a3d59f5657680ff441cea68a832a19398d154e38d2f44785f8a5b860c05fe859afd8617f9604c64ad7bc22f644653d8ae262e1755a6bf0140b0995218ec4a2444d90db88ee3628c85f7e47b0f69bb72921a115acb45ff9ac2c4feed389d1240b26d2c8f6704cfc912b3d9ca800bb23a342c4b8dac7cecf5fc24c1504e5bbb26f88278ff6ccfbb502cacf1aafe6c821ec27e75207e8f920417a831dd0fbffc0a3ff9fcf3490f18966a9fb8def01eeda9892e464d0749eeb25f2581746b1a13b269e64354cf1ae639899711a8f2280ab5c070d22d9074bb505e8cd694e1ad25106537c17bed520c651959b2c4f8d42f9d41bace8e7d0c717121efea9d5e6c30fd3db89d7ec346c39f2f02032ec38b111bbb23cfc9b0c54ae197b7e1021aab89c0f5ae5b92e8f6d4b0b76a24c570f931298ad720faea2369f699e8233129716041849f9f4877cf56886a127e394a8b2458e0dc77edb4e97f548890d624f21b2020a9e47de7a56d3fe763df6ddeed2ef2396c00e1b0d59c6288cf74a0890dd98d9e7555c4a9391c2865e5d3c37f0529fa83f7d47accbbbd6fa782bb9022341062fc27c6fca1d46e767c0d0d43828c7e69ed82b11f5cfe29487954bc42a34cb43938dd62ff91cb6d1c60a8adbcd35d116b9b9fdb2ea335642f79d097487a33fbfd041020fd3a62c61a800162abc904b33c4e2f0072e0c5409f3201082c3133f3011f7b675c753900bf651c5b70caa2cb14ce204b66f5979e8caff641ec57e15341a6d21b51ed08729c5ff1de0d54f0175c554316c083b0d9a9bbfada8f6fdfd50d35ff521c8abcb04d7a221bf2172aacc35666495f84bcf815bbf1178327035df19e863ac1dd6445d8b36173098e5793beb8f1fed7fb06e9d59f71cf5569d4eba48d36e218eb1111f10004919404cf51a22bb4a37d1a5fe81d79168f25dc5b5f4e4f6d059cf9a02e39e5af67269f9bff92f5063921c7f7d4093940fbea8c1f9ebf2c4aaf407661bdf25b3d2e86d2af0eee7d6528f0ac1ea85308957a0dfb3f0848541e08ca8b62f0c44c16c23246d6c60acf7285416bc9f4da3228334fab8900cd6c481bf3bbffede6f9c1c9d71c50119c9a4db1a453cf27c30e9aadcfebd4b68d8ea4639026008dc8064717faee8ffc190227a438f261c3d2fadcd862fef21537b18d0492bdd5bd4eb305adaf78340f724ef0cde089972e217f5a0cb940736b99f10f03c812db808734cdf43656b21469bcc2560482a2af37707b52851429e164b4674d81b0e1ebaa9d099694d65316152f6457ed030e8b189af837d2cd763f9336cb43ebe4e9a670878b94b860577fa83f1bd4e351e31f72b276758c18bacc104cd97420c72537cb7d18b", 0x0, 0x0, 0x0}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x80800}, 0x400c054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xa3, 0x8, &(0x7f0000000bc0)="0000140000000000f88df256b4815f6624950dd077098b92535a63a282ef6fdb672b7b7a6b788b28b656ebf74293c36282eaeb02be56bb2ef899dbdfc5e8232d846066b336c2df02196ccf796f9ee58fdc00520a22899550aa067d79624b1006bf44f068ae5e08f97b9a58949758883b8b802f872f969a66619b4debffb2d6c73725773bec6d758ad4f8038bc0ac5284d8c9fbb3f5126a6643d79572b3f910c8f1e3f1", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000080)={r8, 0x4}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 271.787023ms ago: executing program 2 (id=4360): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000030000000000000000000000850000003000"/32], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x6) r4 = socket(0x29, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES64=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000017c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0xe}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendto$rxrpc(r1, 0x0, 0x0, 0x10, 0x0, 0x0) bind$rxrpc(r1, &(0x7f00000002c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r11) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r13, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x4000000) 225.747369ms ago: executing program 0 (id=4361): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000280)}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="768af60c12af27d3b0dd", 0xa}, {&(0x7f0000000180)="6aa46d2dcf83aa73785a93eb3f62db8164591cabe090b81376d09ddfbd1ffcaaa241ee8969907cdb98bed669465f9d1aba98b69f91c8b8a6bc1e9d49110eaa71a612ff5a3e264315e82e872a0b4910d9", 0x50}, {&(0x7f00000003c0)="5f8dd2b68727ed6521812861a09a24865d9a5e64d9812b7873c0588c62bbebd504fc1a4f588d3d27cd80b6d1c9447f315ca25bcbd3efe3db3d6d8d34d040fba64ac889b524d47ff126c00eb7440c9fedccb4fde0d35e8e6e654ef1a5104c2451b50c7f49d3e341bf5bbdfc97ca23c1b7ebcb4dc0ee8e01017d74a98dab74e2baf2", 0x81}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001900)="4af13274b0d44b5685c25336107254d5642cd9b75f59e09ae3a2166d6f32fef76dc6961578f4f37ea660112e7b955d39b65dfad0ea3c6b0d10e29f70bdfb6bfab442c994e0a2c0176bd42a3d101ff9e8070eb23c8fdfe1c695e855542861e91d93bba691dd981875fad09c09518688538499fd348c72b7736636e263ce4e8927b1da549be11affeec18db8539d", 0x8d}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)="6692dc184847677b76969663fe6d20c19375ac0c5934b9302938438a9334c95bb8fb17f7459e23b83bd79e980d388026fb088ece84c0304830138ef1fac1e9e5d98e02847ea7880498919f8e2f3dd0d0fe3052c7d5839f34772d8159d2e2baf80413dc114dffe4285c80808b7036830e073b56ae58f14d18750c1f3120e68731873d567fb277d3aba1b8b5bdc3c19c197823d945d5993638bfb4e6a3dcd12c13fb608873fdcf0c890d5123578a54f378366b959c6566b7ffa531a4ba94f001bcf2", 0xc1}, {&(0x7f0000000c80)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{0x0}], 0x1}}], 0x4, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)="2f807df5e8b8144bc5e7125e83f27074cb652b320c8a106308fbfd6923ed3af8de04aa076b33f0a0d6b6aba370ad1b89233c533a2ac92b56814278", 0x3b) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000010010001280080001006772650004"], 0x30}}, 0x90) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100004800c000a80"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) (async, rerun: 32) r7 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0xc9) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xa}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xa3, 0x40, 0x9, 0x2, 0x8, 0x7ca1}}, {0x4}}]}]}, 0x48}}, 0x0) 210.288528ms ago: executing program 3 (id=4362): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='^{[\x00', 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet6_sctp(0xa, 0x0, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000001c0), &(0x7f0000000200)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000001c0), &(0x7f0000000200)='%pS \x00'}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r4}, 0x8) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r4}, 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0x2, '\x00', 0x0, r6, 0x0, 0x3, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r6, &(0x7f0000000340)="8baea730e7ea71c1eb3f4cf7d8cbec077743958a711277b65de36bf6f315b8d147c9f49dddc7bf3781dfc7544a19c483abf5d03f7b2fd1e8acac274890b23f3ffaf44501943026b5b650accf97bccb53b87b24fbb678978626e7ba8b2b99715b1d9f3f61e49edbb3aa5e298e7052b63400b028afc14e9828414d69cdeb10d1e146d1c4b78b7e6bc6e0af048e38504f740bc3372b119d09bf9f76de31d3ead0fc0511fae0209e2c3559787d01eb606eceec2466da9120c88dd0de31ea4f351e61107849b6196a340aa7bc8d5ca56902c348b3c294d4"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r6, &(0x7f0000000340)="8baea730e7ea71c1eb3f4cf7d8cbec077743958a711277b65de36bf6f315b8d147c9f49dddc7bf3781dfc7544a19c483abf5d03f7b2fd1e8acac274890b23f3ffaf44501943026b5b650accf97bccb53b87b24fbb678978626e7ba8b2b99715b1d9f3f61e49edbb3aa5e298e7052b63400b028afc14e9828414d69cdeb10d1e146d1c4b78b7e6bc6e0af048e38504f740bc3372b119d09bf9f76de31d3ead0fc0511fae0209e2c3559787d01eb606eceec2466da9120c88dd0de31ea4f351e61107849b6196a340aa7bc8d5ca56902c348b3c294d4"}, 0x20) r8 = openat$cgroup_ro(r7, &(0x7f0000000480)='cgroup.freeze\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r6) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r6) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r9, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r9, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r8, 0x0, 0x7e, 0xa9, &(0x7f0000000600)="dd019b2b4144baa3421de55c904c943b00057715fa44a5cec1b19aa81c2eac6d212c60b08deb10619f969491197a24bed94175f77fc322ce1223465e002034200ce132be0f60d6cf95b297299f89e56e7bcd1a7aa8f116d6c1e6f49c13dca12b4fc320e566e7044c56b068fecae6363c3148804572de4fed1f7c3cd7f09d", &(0x7f0000000680)=""/169, 0xa000, 0x0, 0x1000, 0x6b, &(0x7f0000000740)="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", &(0x7f0000001740)="4c750ed64ad6693469e3c7bf26a526338f18cbcfe5d05d0506d380a2f8657a46f072ee0bc6e90fdf551bd7fa2f94320ebe486ec79d5a0d123032d8a1744b0b1544a5dd9d37df6543af30c02e09e9f671f66e64164c8fdf39e539de2e921e8c611f0d68a4127f5ff985bc48", 0x2, 0x0, 0x3}, 0x50) sendto$inet6(r6, &(0x7f0000001840)="2715", 0x2, 0x1080, &(0x7f0000001880)={0xa, 0x4e23, 0xff, @remote, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000018c0), &(0x7f0000001900)=0x4) write$cgroup_type(r6, &(0x7f0000001940), 0x9) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000001980), &(0x7f00000019c0)=0x4) sendmsg$nl_netfilter(r6, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a40)={0x110, 0x2, 0x4, 0x101, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0xa}, [@generic="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"]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001d00)={'ip6tnl0\x00', &(0x7f0000001c80)={'ip6_vti0\x00', 0x0, 0x2ee8529a0a92ef95, 0x0, 0x9, 0x270, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x48, 0x1, 0x3, 0x1ff}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x6, 0x7, &(0x7f0000001c00)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @generic={0x81, 0x9, 0x0, 0x400, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000001c40)='GPL\x00', 0xb2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r10, 0x25, r6, 0x8, &(0x7f0000001d40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001d80)={0x1, 0xf, 0xfff, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001dc0)=[r8], &(0x7f0000001e00)=[{0x3, 0x1, 0x6, 0x8}, {0x1, 0x3, 0x0, 0x6}], 0x10, 0x698}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x6, 0x7, &(0x7f0000001c00)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @generic={0x81, 0x9, 0x0, 0x400, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000001c40)='GPL\x00', 0xb2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r10, 0x25, r6, 0x8, &(0x7f0000001d40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001d80)={0x1, 0xf, 0xfff, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001dc0)=[r8], &(0x7f0000001e00)=[{0x3, 0x1, 0x6, 0x8}, {0x1, 0x3, 0x0, 0x6}], 0x10, 0x698}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$F2FS_IOC_RESIZE_FS(r8, 0x4008f510, &(0x7f0000001f00)=0x8001) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r6) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000002140)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002100)={&(0x7f0000001fc0)={0x13c, r11, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x100, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x31}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa12}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xce6b}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4b00}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f9a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9efd}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x200440d1) (async) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000002140)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002100)={&(0x7f0000001fc0)={0x13c, r11, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x100, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x31}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa12}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xce6b}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4b00}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f9a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9efd}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x200440d1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0), 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x40) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0), 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x40) 726.501µs ago: executing program 0 (id=4363): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0) socketpair(0x1, 0x80b, 0xffce, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000380)={0x6c, @multicast2, 0x4e20, 0x0, 'wrr\x00', 0x10, 0x0, 0x15}, 0x2c) (async) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000380)={0x6c, @multicast2, 0x4e20, 0x0, 'wrr\x00', 0x10, 0x0, 0x15}, 0x2c) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36) (async) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r6], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r6], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r7], 0x44}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) 0s ago: executing program 3 (id=4364): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/21, 0x15}, 0x3}], 0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e00)={0x6, 0x1d, 0x0, 0x0, 0xd3a1, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000080800"/24], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x2d, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000a0000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRES32=0x41424344], 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x8, 0x4, 0x0, @mcast2, @loopback, 0x8000, 0x7, 0x842a, 0xffff}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xffffffffffffffa0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x18, 0x3f9, 0x4, 0x70bd29, 0x25dfdbff, {0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x48800}, 0x4005) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast2, 0x4e22, 0x10, 0x4e22, 0x294b, 0x2, 0x0, 0x0, 0x21, r4, r5}, {0x8000, 0x2, 0x4, 0x1, 0xb, 0x7, 0x3, 0x1}, {0x4, 0x5, 0xb75, 0x4}, 0xc0e9c16, 0x6e6bc0, 0x1, 0x0, 0x6, 0x2}, {{@in6=@local, 0x4d4, 0x32}, 0x2, @in=@private=0xa010102, 0x0, 0x1, 0x2, 0x8d, 0x10000, 0x8, 0x3}}, 0xe8) kernel console output (not intermixed with test programs): wmediumd released netlink socket, switching to perfect channel medium [ 645.316323][T19413] __nla_validate_parse: 4 callbacks suppressed [ 645.316340][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 645.356986][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 645.368902][T19406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.403330][T19313] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.428168][T19313] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.435432][T19313] bridge_slave_0: entered allmulticast mode [ 645.445159][T19406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.461936][T19313] bridge_slave_0: entered promiscuous mode [ 645.504660][T19313] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.535161][T19313] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.544854][T19313] bridge_slave_1: entered allmulticast mode [ 645.584971][T19313] bridge_slave_1: entered promiscuous mode [ 645.665327][T12978] IPVS: starting estimator thread 0... [ 645.731366][T19419] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 645.767312][T19420] IPVS: using max 34 ests per chain, 81600 per kthread [ 645.781163][T19313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.794305][T19419] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3735'. [ 645.892656][T19313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.918635][T19423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3736'. [ 645.922135][T19419] dummy0: entered promiscuous mode [ 645.942437][T19419] macsec1: entered promiscuous mode [ 645.955544][T19419] dummy0: left promiscuous mode [ 646.095687][T19313] team0: Port device team_slave_0 added [ 646.125633][T19313] team0: Port device team_slave_1 added [ 646.196761][T19429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3738'. [ 646.247331][T19313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.254468][T19313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.284122][T19313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.298294][T19313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.305388][T19313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.332547][T19313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.436396][T19313] hsr_slave_0: entered promiscuous mode [ 646.442927][T19436] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 646.452965][T19313] hsr_slave_1: entered promiscuous mode [ 646.461606][T19436] netlink: 'syz.3.3740': attribute type 2 has an invalid length. [ 646.472787][T19313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.480994][T19436] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 646.488846][T19313] Cannot create hsr debugfs directory [ 646.495297][T19436] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 646.503899][T19436] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 646.538242][T19436] netlink: 'syz.3.3740': attribute type 2 has an invalid length. [ 646.545981][T19436] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 646.553828][T19436] netlink: 'syz.3.3740': attribute type 2 has an invalid length. [ 646.564435][T19436] netlink: 'syz.3.3740': attribute type 2 has an invalid length. [ 646.732591][T19439] syzkaller1: entered promiscuous mode [ 646.743108][T19439] syzkaller1: entered allmulticast mode [ 647.058223][T16182] Bluetooth: hci0: command tx timeout [ 647.532601][T19472] FAULT_INJECTION: forcing a failure. [ 647.532601][T19472] name failslab, interval 1, probability 0, space 0, times 0 [ 647.580059][T19472] CPU: 0 UID: 0 PID: 19472 Comm: syz.1.3748 Not tainted 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 PREEMPT(full) [ 647.580085][T19472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 647.580097][T19472] Call Trace: [ 647.580110][T19472] [ 647.580118][T19472] dump_stack_lvl+0x189/0x250 [ 647.580152][T19472] ? __pfx____ratelimit+0x10/0x10 [ 647.580179][T19472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.580208][T19472] ? __pfx__printk+0x10/0x10 [ 647.580248][T19472] should_fail_ex+0x414/0x560 [ 647.580282][T19472] should_failslab+0xa8/0x100 [ 647.580309][T19472] kmem_cache_alloc_noprof+0x73/0x3c0 [ 647.580337][T19472] ? skb_clone+0x212/0x3a0 [ 647.580376][T19472] skb_clone+0x212/0x3a0 [ 647.580424][T19472] __netlink_deliver_tap+0x404/0x850 [ 647.580483][T19472] ? netlink_deliver_tap+0x2e/0x1b0 [ 647.580511][T19472] netlink_deliver_tap+0x19c/0x1b0 [ 647.580538][T19472] netlink_sendskb+0x68/0x140 [ 647.580565][T19472] netlink_rcv_skb+0x28c/0x470 [ 647.580591][T19472] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 647.580621][T19472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 647.580660][T19472] ? netlink_deliver_tap+0x2e/0x1b0 [ 647.580685][T19472] ? netlink_deliver_tap+0x2e/0x1b0 [ 647.580717][T19472] netlink_unicast+0x75b/0x8d0 [ 647.580752][T19472] netlink_sendmsg+0x805/0xb30 [ 647.580790][T19472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.580821][T19472] ? aa_sock_msg_perm+0x94/0x160 [ 647.580850][T19472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.580877][T19472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.580905][T19472] __sock_sendmsg+0x219/0x270 [ 647.580932][T19472] ____sys_sendmsg+0x505/0x830 [ 647.580970][T19472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.581013][T19472] ? import_iovec+0x74/0xa0 [ 647.581038][T19472] ___sys_sendmsg+0x21f/0x2a0 [ 647.581078][T19472] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.581155][T19472] ? __fget_files+0x2a/0x420 [ 647.581181][T19472] ? __fget_files+0x3a0/0x420 [ 647.581218][T19472] __x64_sys_sendmsg+0x19b/0x260 [ 647.581252][T19472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 647.581296][T19472] ? __pfx_ksys_write+0x10/0x10 [ 647.581336][T19472] ? do_syscall_64+0xbe/0x3b0 [ 647.581367][T19472] do_syscall_64+0xfa/0x3b0 [ 647.581391][T19472] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.581415][T19472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.581436][T19472] ? clear_bhb_loop+0x60/0xb0 [ 647.581464][T19472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.581485][T19472] RIP: 0033:0x7f2fca58e929 [ 647.581504][T19472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.581523][T19472] RSP: 002b:00007f2fcb40e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.581545][T19472] RAX: ffffffffffffffda RBX: 00007f2fca7b6080 RCX: 00007f2fca58e929 [ 647.581573][T19472] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 647.581586][T19472] RBP: 00007f2fcb40e090 R08: 0000000000000000 R09: 0000000000000000 [ 647.581599][T19472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.581611][T19472] R13: 0000000000000001 R14: 00007f2fca7b6080 R15: 00007ffd1d6f9378 [ 647.581665][T19472] [ 648.250949][T19476] C speed is unknown, defaulting to 1000 [ 648.486277][T19487] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3752'. [ 648.551297][T19489] Cannot find add_set index 2 as target [ 648.576424][T19313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 648.617951][T19313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 648.649465][T19313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 648.682306][T19313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 648.716588][T19491] syzkaller1: entered promiscuous mode [ 648.722603][T19491] syzkaller1: entered allmulticast mode [ 648.735876][T19483] C speed is unknown, defaulting to 1000 [ 648.959110][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'. [ 648.983946][T19499] netlink: 'syz.2.3754': attribute type 1 has an invalid length. [ 649.029748][T19313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.040947][T19499] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3754'. [ 649.085588][T19313] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.116814][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.124016][ T9105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.137801][T16182] Bluetooth: hci0: command tx timeout [ 649.163187][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.170416][ T9105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.634624][T19501] C speed is unknown, defaulting to 1000 [ 650.075724][T19509] C speed is unknown, defaulting to 1000 [ 650.350363][T19531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 650.361551][T19531] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3760'. [ 650.746929][T19313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.993948][T19529] C speed is unknown, defaulting to 1000 [ 651.030086][T19541] FAULT_INJECTION: forcing a failure. [ 651.030086][T19541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.074958][T19541] CPU: 1 UID: 0 PID: 19541 Comm: syz.3.3762 Not tainted 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 PREEMPT(full) [ 651.074987][T19541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 651.075000][T19541] Call Trace: [ 651.075007][T19541] [ 651.075016][T19541] dump_stack_lvl+0x189/0x250 [ 651.075051][T19541] ? __pfx____ratelimit+0x10/0x10 [ 651.075072][T19541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.075103][T19541] ? __pfx__printk+0x10/0x10 [ 651.075136][T19541] should_fail_ex+0x414/0x560 [ 651.075164][T19541] _copy_to_user+0x31/0xb0 [ 651.075185][T19541] simple_read_from_buffer+0xe1/0x170 [ 651.075209][T19541] proc_fail_nth_read+0x1df/0x250 [ 651.075235][T19541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 651.075261][T19541] ? rw_verify_area+0x258/0x650 [ 651.075290][T19541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 651.075314][T19541] vfs_read+0x1fd/0x980 [ 651.075348][T19541] ? __pfx___mutex_lock+0x10/0x10 [ 651.075371][T19541] ? __pfx_vfs_read+0x10/0x10 [ 651.075402][T19541] ? __fget_files+0x2a/0x420 [ 651.075427][T19541] ? __fget_files+0x3a0/0x420 [ 651.075446][T19541] ? __fget_files+0x2a/0x420 [ 651.075475][T19541] ksys_read+0x145/0x250 [ 651.075507][T19541] ? __pfx_ksys_read+0x10/0x10 [ 651.075533][T19541] ? rcu_is_watching+0x15/0xb0 [ 651.075568][T19541] ? do_syscall_64+0xbe/0x3b0 [ 651.075595][T19541] do_syscall_64+0xfa/0x3b0 [ 651.075616][T19541] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.075636][T19541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.075655][T19541] ? clear_bhb_loop+0x60/0xb0 [ 651.075678][T19541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.075697][T19541] RIP: 0033:0x7ffa5478d33c [ 651.075714][T19541] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 651.075730][T19541] RSP: 002b:00007ffa556af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 651.075758][T19541] RAX: ffffffffffffffda RBX: 00007ffa549b5fa0 RCX: 00007ffa5478d33c [ 651.075772][T19541] RDX: 000000000000000f RSI: 00007ffa556af0a0 RDI: 0000000000000006 [ 651.075783][T19541] RBP: 00007ffa556af090 R08: 0000000000000000 R09: 0000000000000000 [ 651.075795][T19541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.075806][T19541] R13: 0000000000000000 R14: 00007ffa549b5fa0 R15: 00007fff98da4e28 [ 651.075836][T19541] [ 651.464966][T19543] netlink: 506 bytes leftover after parsing attributes in process `syz.0.3763'. [ 651.963470][T19313] veth0_vlan: entered promiscuous mode [ 652.003814][T19313] veth1_vlan: entered promiscuous mode [ 652.105469][T19313] veth0_macvtap: entered promiscuous mode [ 652.183983][T19313] veth1_macvtap: entered promiscuous mode [ 652.268939][T19313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.306199][T19560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.329246][T19313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.517003][T19564] tipc: Started in network mode [ 652.522125][T19564] tipc: Node identity f6dc9154e9dc, cluster identity 4711 [ 652.537442][T19564] tipc: Enabled bearer , priority 0 [ 652.554959][ T5997] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.571157][ T5997] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.584641][T19561] syzkaller0: entered promiscuous mode [ 652.597801][T19561] syzkaller0: entered allmulticast mode [ 652.641851][ T5997] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.657812][ T5997] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.711612][T19561] tipc: Resetting bearer [ 652.769464][T19568] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3771'. [ 652.780204][T19559] tipc: Resetting bearer [ 652.803523][T19559] tipc: Disabling bearer [ 652.973238][T11043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.992347][T11043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.055877][T19570] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 653.077093][T19570] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 653.101979][T19570] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 653.173698][T11043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.195005][T11043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.253578][T19576] C speed is unknown, defaulting to 1000 [ 653.355739][T19583] validate_nla: 1 callbacks suppressed [ 653.355759][T19583] netlink: 'syz.0.3775': attribute type 303 has an invalid length. [ 653.408940][T19582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3775'. [ 653.710921][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3778'. [ 653.762758][T19591] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3777'. [ 653.863994][ T9125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.967366][T19594] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 653.996340][T19591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3777'. [ 654.084690][ T9125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.133639][T19597] syzkaller1: entered promiscuous mode [ 654.144805][T19597] syzkaller1: entered allmulticast mode [ 654.236619][ T9125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.511458][ T9125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.765064][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3780'. [ 654.874385][T19612] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 654.889864][T19611] macsec0: entered promiscuous mode [ 654.922965][T19611] macsec0: entered allmulticast mode [ 654.942003][ T9125] bridge_slave_1: left allmulticast mode [ 654.957781][ T9125] bridge_slave_1: left promiscuous mode [ 654.980008][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.991113][T16182] Bluetooth: hci2: link tx timeout [ 654.997969][T16182] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 655.019493][ T9125] bridge_slave_0: left allmulticast mode [ 655.033050][ T9125] bridge_slave_0: left promiscuous mode [ 655.047529][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.103035][T19622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3785'. [ 655.196515][T19627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 655.208628][T19627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 655.219375][ T5915] IPVS: starting estimator thread 0... [ 655.221650][T19627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 655.227776][T19624] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 655.242050][T19627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 655.249986][T19627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 655.337246][T19630] IPVS: using max 29 ests per chain, 69600 per kthread [ 655.545314][ T9125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.556553][ T9125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.567113][ T9125] bond0 (unregistering): Released all slaves [ 655.699625][T19625] C speed is unknown, defaulting to 1000 [ 655.851993][T19641] netlink: 'syz.3.3789': attribute type 3 has an invalid length. [ 655.985597][T19649] netlink: 'syz.2.3791': attribute type 303 has an invalid length. [ 656.011991][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3791'. [ 656.052834][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3792'. [ 656.293318][T19660] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3795'. [ 656.407614][T19650] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 656.514302][T19667] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3797'. [ 656.726448][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3802'. [ 656.799371][T19681] netlink: 'syz.2.3802': attribute type 1 has an invalid length. [ 656.849245][T19681] netlink: 'syz.2.3802': attribute type 2 has an invalid length. [ 656.952956][T19681] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3802'. [ 656.963357][ T9125] hsr_slave_0: left promiscuous mode [ 656.996155][ T9125] hsr_slave_1: left promiscuous mode [ 657.008352][ T9125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.015856][ T9125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.038839][ T9125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.046593][ T9125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.057502][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 657.174715][ T9125] veth1_macvtap: left promiscuous mode [ 657.188255][T19693] netlink: 'syz.3.3807': attribute type 303 has an invalid length. [ 657.193929][ T9125] veth0_macvtap: left promiscuous mode [ 657.205601][ T9125] veth1_vlan: left promiscuous mode [ 657.211815][ T9125] veth0_vlan: left promiscuous mode [ 657.220397][T19693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3807'. [ 657.239953][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3809'. [ 657.260116][T19700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3809'. [ 657.298141][T16182] Bluetooth: hci0: command tx timeout [ 657.418930][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3810'. [ 657.527375][T19709] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 657.804328][ T9125] team0 (unregistering): Port device team_slave_1 removed [ 657.852473][ T9125] team0 (unregistering): Port device team_slave_0 removed [ 658.234015][T19693] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 658.264217][T19693] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 658.327517][T19693] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 658.427289][T19715] Bluetooth: MGMT ver 1.23 [ 658.524470][T19625] chnl_net:caif_netlink_parms(): no params data found [ 658.909356][T19625] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.916560][T19625] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.941479][T19625] bridge_slave_0: entered allmulticast mode [ 658.955686][T19625] bridge_slave_0: entered promiscuous mode [ 658.973364][T19625] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.984402][T19625] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.997446][T19625] bridge_slave_1: entered allmulticast mode [ 659.013194][T19625] bridge_slave_1: entered promiscuous mode [ 659.159353][T19747] netlink: 'syz.3.3820': attribute type 1 has an invalid length. [ 659.173207][T19625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.195608][T19625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.381346][T16182] Bluetooth: hci0: command tx timeout [ 659.400361][T19753] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 659.410254][T19625] team0: Port device team_slave_0 added [ 659.429664][T19625] team0: Port device team_slave_1 added [ 659.513211][T19761] netlink: 'syz.3.3824': attribute type 1 has an invalid length. [ 659.526805][T19760] netlink: 'syz.1.3823': attribute type 1 has an invalid length. [ 659.542848][T19760] netlink: 'syz.1.3823': attribute type 2 has an invalid length. [ 659.552721][T19625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.560206][T19625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.586559][T19625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.609940][T19625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.619059][T19625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.645609][T19625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.871504][T19771] team_slave_0 (unregistering): left promiscuous mode [ 659.885565][T19771] team0: Port device team_slave_0 removed [ 660.016598][T19625] hsr_slave_0: entered promiscuous mode [ 660.026954][T19625] hsr_slave_1: entered promiscuous mode [ 660.033819][T19625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.042342][T19625] Cannot create hsr debugfs directory [ 660.320985][T19782] pim6reg1: entered allmulticast mode [ 660.725552][T19793] vlan2: entered promiscuous mode [ 660.753047][T19793] macvlan0: entered promiscuous mode [ 661.063252][T19802] __nla_validate_parse: 5 callbacks suppressed [ 661.063268][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3836'. [ 661.185337][T19807] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 661.210199][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3839'. [ 661.265897][T19809] netlink: 'syz.3.3839': attribute type 1 has an invalid length. [ 661.323370][T19809] netlink: 'syz.3.3839': attribute type 2 has an invalid length. [ 661.344679][T19816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3841'. [ 661.457185][T16182] Bluetooth: hci0: command tx timeout [ 661.466378][T19809] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3839'. [ 661.769257][T19825] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.776846][T19825] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.904034][T19825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.925468][T19825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.039353][T19825] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 662.046403][T19825] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 662.084565][T19825] macsec1: left promiscuous mode [ 662.089747][T19825] macsec1: left allmulticast mode [ 662.095079][T19825] vlan2: left promiscuous mode [ 662.100409][T19825] bridge0: left promiscuous mode [ 662.105606][T19825] vlan2: left allmulticast mode [ 662.111113][T19825] bridge0: left allmulticast mode [ 662.139723][T19830] tipc: Enabling of bearer rejected, failed to enable media [ 662.164971][T11043] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.188394][T11043] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.221260][T19830] tipc: Enabling of bearer rejected, failed to enable media [ 662.236293][T11043] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.264895][T19840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.269440][T19625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 662.289782][T19625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 662.311108][T19625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 662.335308][T11043] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.352925][T19830] tipc: Enabling of bearer rejected, failed to enable media [ 662.378015][T19835] C speed is unknown, defaulting to 1000 [ 662.378131][T19625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 662.623923][T19625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.644050][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3851'. [ 662.661318][T19859] bridge0: port 2(erspan0) entered blocking state [ 662.678649][T19859] bridge0: port 2(erspan0) entered disabled state [ 662.685235][T19859] erspan0: entered allmulticast mode [ 662.718629][T19859] erspan0: entered promiscuous mode [ 662.724266][T19864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.737095][T19859] bridge0: port 2(erspan0) entered blocking state [ 662.743602][T19859] bridge0: port 2(erspan0) entered forwarding state [ 662.834746][T19625] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.861758][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.868952][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.899543][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.906715][ T9125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.956146][T19868] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 662.976849][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3855'. [ 663.060268][T19872] netlink: 'syz.1.3855': attribute type 1 has an invalid length. [ 663.075745][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3856'. [ 663.093543][T19872] netlink: 'syz.1.3855': attribute type 2 has an invalid length. [ 663.160219][T19872] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3855'. [ 663.543068][T16182] Bluetooth: hci0: command tx timeout [ 663.644804][T19889] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3859'. [ 663.735042][T19625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.902376][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3860'. [ 664.412522][T19625] veth0_vlan: entered promiscuous mode [ 664.450691][T19930] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 664.463908][T19625] veth1_vlan: entered promiscuous mode [ 664.564009][T19625] veth0_macvtap: entered promiscuous mode [ 664.573166][T19933] netlink: 'syz.2.3868': attribute type 10 has an invalid length. [ 664.586491][T19625] veth1_macvtap: entered promiscuous mode [ 664.607476][T19933] bridge0: port 3(dummy0) entered blocking state [ 664.614589][T19933] bridge0: port 3(dummy0) entered disabled state [ 664.621735][T19933] dummy0: entered allmulticast mode [ 664.629627][T19933] dummy0: entered promiscuous mode [ 664.686337][T19625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.735408][T19625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.763906][T11043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.794448][T19937] netlink: 'syz.1.3869': attribute type 1 has an invalid length. [ 664.806634][T19937] netlink: 'syz.1.3869': attribute type 2 has an invalid length. [ 664.837302][T11043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.854154][T11043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.885945][T11043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.054959][ T9125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.073300][ T9125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.122144][T11043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.124217][T19953] veth1_vlan: left promiscuous mode [ 665.135747][T19953] veth1_vlan: entered promiscuous mode [ 665.146442][T11043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.147861][T19953] veth1_vlan: entered allmulticast mode [ 665.601940][T19965] C speed is unknown, defaulting to 1000 [ 665.913598][ T9125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.204151][T19980] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 666.373152][ T9125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.481545][ T9125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.699988][T19994] __nla_validate_parse: 10 callbacks suppressed [ 666.700007][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3885'. [ 666.706609][T19996] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3884'. [ 666.732535][T19996] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3884'. [ 666.753738][T19996] sctp: [Deprecated]: syz.1.3884 (pid 19996) Use of int in max_burst socket option deprecated. [ 666.753738][T19996] Use struct sctp_assoc_value instead [ 666.791792][ T9125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.807373][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3884'. [ 666.915197][T19994] netlink: 'syz.3.3885': attribute type 1 has an invalid length. [ 666.943830][T20003] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3885'. [ 666.950171][T19994] netlink: 'syz.3.3885': attribute type 2 has an invalid length. [ 667.290028][T19627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.297952][T19627] Bluetooth: hci5: command 0x0406 tx timeout [ 667.340842][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 667.351074][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.359253][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 667.367697][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.446465][ T9125] bridge_slave_1: left allmulticast mode [ 667.463668][T20016] netlink: 'syz.2.3890': attribute type 20 has an invalid length. [ 667.476516][ T9125] bridge_slave_1: left promiscuous mode [ 667.494140][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.595655][ T9125] bridge_slave_0: left allmulticast mode [ 667.624939][ T9125] bridge_slave_0: left promiscuous mode [ 667.651722][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.709836][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3895'. [ 667.817680][T20024] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 668.134545][ T9125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.146493][ T9125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.157388][ T9125] bond0 (unregistering): Released all slaves [ 668.188016][T20028] vlan4: entered allmulticast mode [ 668.322841][T20007] C speed is unknown, defaulting to 1000 [ 668.424302][T20042] xt_CT: No such helper "snmp" [ 668.696306][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3902'. [ 668.905474][T20074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3904'. [ 668.945178][T20068] geneve2: entered promiscuous mode [ 668.956255][T20068] geneve2: entered allmulticast mode [ 668.991558][ T9105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 50035 - 0 [ 669.028927][ T9105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 50035 - 0 [ 669.047259][ T9105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 50035 - 0 [ 669.158640][ T9105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 50035 - 0 [ 669.376713][T20092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3907'. [ 669.395608][T20085] can: request_module (can-proto-3) failed. [ 669.461469][T16182] Bluetooth: hci0: command tx timeout [ 669.482761][T20096] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 669.533256][ T9125] hsr_slave_0: left promiscuous mode [ 669.557803][ T9125] hsr_slave_1: left promiscuous mode [ 669.563898][ T9125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.581762][ T9125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.616124][ T9125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.645430][ T9125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.739461][ T9125] veth1_macvtap: left promiscuous mode [ 669.745147][ T9125] veth0_macvtap: left promiscuous mode [ 669.755325][ T9125] veth1_vlan: left promiscuous mode [ 669.773879][ T9125] veth0_vlan: left promiscuous mode [ 669.854805][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3909'. [ 669.966723][T20107] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 671.180529][ T9125] team0 (unregistering): Port device team_slave_1 removed [ 671.222888][ T9125] team0 (unregistering): Port device team_slave_0 removed [ 671.537560][T16182] Bluetooth: hci0: command tx timeout [ 671.775743][T20125] netlink: 'syz.1.3912': attribute type 12 has an invalid length. [ 671.833984][T20122] C speed is unknown, defaulting to 1000 [ 672.113264][T20007] chnl_net:caif_netlink_parms(): no params data found [ 672.598811][T20134] __nla_validate_parse: 3 callbacks suppressed [ 672.598829][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3914'. [ 672.632110][T20007] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.640773][T20155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.641122][T20007] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.659896][T20007] bridge_slave_0: entered allmulticast mode [ 672.667908][T20007] bridge_slave_0: entered promiscuous mode [ 672.702088][ T9105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.706221][T20145] C speed is unknown, defaulting to 1000 [ 672.711809][ T9105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.716499][T20007] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.743691][T20007] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.753925][T20007] bridge_slave_1: entered allmulticast mode [ 672.758966][T20151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.766084][T20007] bridge_slave_1: entered promiscuous mode [ 672.841632][T20151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.859706][ T30] audit: type=1800 audit(1751169868.744:8): pid=20133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3914" name="cgroup.controllers" dev="tmpfs" ino=781 res=0 errno=0 [ 672.986572][T20007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.030841][T20007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.246461][T20007] team0: Port device team_slave_0 added [ 673.261180][T20007] team0: Port device team_slave_1 added [ 673.377676][T20007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.384655][T20007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.420570][T20007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.462952][T20007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.470748][T20007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.500546][T20007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.618471][T16182] Bluetooth: hci0: command tx timeout [ 673.638953][T20170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3924'. [ 673.766501][T20168] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 673.772350][T20007] hsr_slave_0: entered promiscuous mode [ 673.786240][T20007] hsr_slave_1: entered promiscuous mode [ 673.793406][T20007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.801374][T20007] Cannot create hsr debugfs directory [ 674.044776][T20175] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 674.317413][T20179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3927'. [ 674.361310][T20179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3927'. [ 674.379465][T20179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3927'. [ 674.398637][T20179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3927'. [ 674.455281][T20184] netem: change failed [ 674.463317][T20184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3930'. [ 674.486831][T20184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3930'. [ 674.503367][T20184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3930'. [ 674.539761][T20186] No such timeout policy "syz0" [ 674.551949][T20184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3930'. [ 674.696547][T20201] netlink: 'syz.0.3933': attribute type 4 has an invalid length. [ 674.799571][T20210] netlink: zone id is out of range [ 674.826221][T20210] netlink: zone id is out of range [ 674.856351][T20210] netlink: zone id is out of range [ 674.870805][T20211] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 674.901974][T20007] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 674.934579][T20210] netlink: zone id is out of range [ 674.947320][T20007] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 674.967160][T20210] netlink: zone id is out of range [ 674.972296][T20210] netlink: zone id is out of range [ 674.981496][T20007] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 674.995365][T20210] netlink: zone id is out of range [ 675.007154][T20210] netlink: zone id is out of range [ 675.017538][T20210] netlink: zone id is out of range [ 675.023355][T20007] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 675.032917][T20210] netlink: zone id is out of range [ 675.187282][T20234] netlink: 'syz.2.3939': attribute type 6 has an invalid length. [ 675.281110][T20239] netlink: 'syz.3.3940': attribute type 1 has an invalid length. [ 675.419488][T20007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.430145][T20242] C speed is unknown, defaulting to 1000 [ 675.480708][T20007] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.534447][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.541699][ T9125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.603100][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.610301][ T9116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.637714][T20244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.659375][ T10] wlan1: No legacy rates in association response [ 675.697932][T16182] Bluetooth: hci0: command tx timeout [ 675.704913][T20244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.743626][T20007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.786561][T20244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.892491][T20243] C speed is unknown, defaulting to 1000 [ 676.293872][T20260] vlan3: entered promiscuous mode [ 676.321194][T20260] gretap0: entered promiscuous mode [ 676.812270][T20282] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 676.816270][T20007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.063765][T20286] netlink: 'syz.0.3952': attribute type 10 has an invalid length. [ 677.090174][T20288] netlink: 'syz.0.3952': attribute type 10 has an invalid length. [ 677.180841][T20286] bridge_slave_1: left promiscuous mode [ 677.186639][T20286] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.216496][T20286] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 677.344317][T20290] vlan4: entered promiscuous mode [ 677.356671][T20290] syz_tun: entered promiscuous mode [ 677.475330][T20299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.587888][T20296] C speed is unknown, defaulting to 1000 [ 677.629256][T20297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.745701][T20007] veth0_vlan: entered promiscuous mode [ 677.783703][T20007] veth1_vlan: entered promiscuous mode [ 677.991553][T20007] veth0_macvtap: entered promiscuous mode [ 678.080996][T20007] veth1_macvtap: entered promiscuous mode [ 678.129276][T20007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.164120][T20007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.195845][ T9116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.216242][ T9116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.244641][ T9116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.274515][ T9116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.352919][T20319] netlink: 'syz.1.3958': attribute type 16 has an invalid length. [ 678.367275][T20319] netlink: 'syz.1.3958': attribute type 17 has an invalid length. [ 678.385008][ T9116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.395032][ T9116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.527819][T11043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.535772][T11043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.866513][T20335] __nla_validate_parse: 6 callbacks suppressed [ 678.866531][T20335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3963'. [ 678.974816][T20342] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 679.774210][T20347] C speed is unknown, defaulting to 1000 [ 679.795594][T20354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.885624][T20352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.960899][T20352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.013580][ T9105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.104052][ T9105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.191822][ T9105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.284223][ T9105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.642402][T20360] syz.1.3970 (20360) used obsolete PPPIOCDETACH ioctl [ 680.714478][ T9105] bridge_slave_1: left allmulticast mode [ 680.738145][ T9105] bridge_slave_1: left promiscuous mode [ 680.744099][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.784861][ T9105] bridge_slave_0: left allmulticast mode [ 680.807898][ T9105] bridge_slave_0: left promiscuous mode [ 680.813704][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.886287][T20371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3973'. [ 681.014383][T20372] xt_CT: No such helper "snmp" [ 681.334838][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 681.344730][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 681.352736][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 681.361366][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 681.373405][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 681.686308][ T9105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.698509][ T9105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.711536][ T9105] bond0 (unregistering): Released all slaves [ 681.762595][T20366] C speed is unknown, defaulting to 1000 [ 682.065237][T20395] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3979'. [ 682.335782][T20387] C speed is unknown, defaulting to 1000 [ 682.540360][T20393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3978'. [ 682.720490][T20392] C speed is unknown, defaulting to 1000 [ 682.956910][T20393] C speed is unknown, defaulting to 1000 [ 683.281434][ T9105] hsr_slave_0: left promiscuous mode [ 683.288214][ T9105] hsr_slave_1: left promiscuous mode [ 683.296606][ T9105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.305208][ T9105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.321643][T20412] net_ratelimit: 4054 callbacks suppressed [ 683.321658][T20412] openvswitch: netlink: IP tunnel dst address not specified [ 683.323859][ T9105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.342732][ T9105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.388530][ T9105] veth1_macvtap: left promiscuous mode [ 683.394163][ T9105] veth0_macvtap: left promiscuous mode [ 683.400345][ T9105] veth1_vlan: left promiscuous mode [ 683.406545][ T9105] veth0_vlan: left promiscuous mode [ 683.458422][T16182] Bluetooth: hci0: command tx timeout [ 684.113144][ T9105] team0 (unregistering): Port device team_slave_1 removed [ 684.158363][ T9105] team0 (unregistering): Port device team_slave_0 removed [ 684.516726][T20409] netlink: 'syz.3.3984': attribute type 3 has an invalid length. [ 684.691637][T20420] Bluetooth: MGMT ver 1.23 [ 684.833851][T20425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3987'. [ 684.892963][T20423] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 685.045192][T20387] chnl_net:caif_netlink_parms(): no params data found [ 685.164847][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3988'. [ 685.211161][T20438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3990'. [ 685.255300][T20438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3990'. [ 685.285403][T20442] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 685.335929][T20435] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3990'. [ 685.486828][T20450] netlink: 'syz.1.3992': attribute type 16 has an invalid length. [ 685.495230][T20446] netlink: 'syz.3.3991': attribute type 13 has an invalid length. [ 685.507319][T20450] netlink: 'syz.1.3992': attribute type 17 has an invalid length. [ 685.515352][T20446] netlink: 'syz.3.3991': attribute type 17 has an invalid length. [ 685.547583][T16182] Bluetooth: hci0: command tx timeout [ 685.572004][T20443] C speed is unknown, defaulting to 1000 [ 685.590285][T20459] IPv6: NLM_F_REPLACE set, but no existing node found! [ 685.739427][T20450] bridge0: port 2(erspan0) entered disabled state [ 686.220291][T20487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3998'. [ 686.306011][T20450] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.759246][T20450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.808442][T20450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.350543][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3992'. [ 687.363676][T20387] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.372532][T20387] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.379909][T20387] bridge_slave_0: entered allmulticast mode [ 687.388312][T20387] bridge_slave_0: entered promiscuous mode [ 687.444194][T20490] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 687.477492][ T5997] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.512321][ T5997] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.526483][T20387] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.544072][T20387] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.553022][T20387] bridge_slave_1: entered allmulticast mode [ 687.567645][T20387] bridge_slave_1: entered promiscuous mode [ 687.619209][T16182] Bluetooth: hci0: command tx timeout [ 687.626614][ T9125] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.663132][ T9125] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.842709][T20387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.868805][T20503] C speed is unknown, defaulting to 1000 [ 687.918432][T20387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.997492][T20512] nbd0: detected capacity change from 0 to 63 [ 688.015131][T16182] block nbd0: Receive control failed (result -32) [ 688.157014][T20519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4008'. [ 688.249116][T20387] team0: Port device team_slave_0 added [ 688.302084][T20387] team0: Port device team_slave_1 added [ 688.526990][T20387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.541320][T20387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.569148][T20387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.600900][T20519] C speed is unknown, defaulting to 1000 [ 688.603298][T20387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.624710][T20387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.687354][T20387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.923618][T20387] hsr_slave_0: entered promiscuous mode [ 688.935345][T20387] hsr_slave_1: entered promiscuous mode [ 688.946570][T20387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 688.963263][T20387] Cannot create hsr debugfs directory [ 689.697759][T16182] Bluetooth: hci0: command tx timeout [ 689.757571][T20551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4016'. [ 689.885004][T20551] bond0: invalid ARP target 0.0.0.0 specified for addition [ 689.894263][T20551] bond0: option arp_ip_target: invalid value (0) [ 690.034117][T20555] C speed is unknown, defaulting to 1000 [ 690.347695][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4023'. [ 690.379899][T20574] Cannot find add_set index 4 as target [ 690.885805][T20387] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 690.980977][T20387] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 691.020691][T20387] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 691.061968][T20387] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 691.103972][T20595] C speed is unknown, defaulting to 1000 [ 691.351942][T20609] netlink: 'syz.2.4033': attribute type 23 has an invalid length. [ 691.732747][T20619] netlink: 'syz.3.4035': attribute type 7 has an invalid length. [ 691.890027][T20387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.034862][T20387] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.099970][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.107217][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.133340][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.140587][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.166821][T20626] smc: net device bond0 applied user defined pnetid SYZ2 [ 692.194223][T20628] netlink: 'syz.3.4040': attribute type 1 has an invalid length. [ 692.221499][T20631] netlink: 'syz.3.4040': attribute type 1 has an invalid length. [ 692.273224][T20628] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 692.282218][T20631] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 692.492361][T20387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.771066][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4044'. [ 692.868647][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4046'. [ 692.908163][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 692.943664][T20653] C speed is unknown, defaulting to 1000 [ 693.220826][T20387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.389973][T20673] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4051'. [ 693.412727][T20673] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 693.436140][T20673] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 693.458986][T20673] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 693.590149][T20677] bond0: entered promiscuous mode [ 693.595234][T20677] bond_slave_0: entered promiscuous mode [ 693.606391][T20677] bond_slave_1: entered promiscuous mode [ 693.614781][T20677] bond0: left promiscuous mode [ 693.629493][T20677] bond_slave_0: left promiscuous mode [ 693.638398][T20677] bond_slave_1: left promiscuous mode [ 694.004345][T20387] veth0_vlan: entered promiscuous mode [ 694.039132][T20695] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4056'. [ 694.059029][T20387] veth1_vlan: entered promiscuous mode [ 694.212034][T20387] veth0_macvtap: entered promiscuous mode [ 694.264389][T20387] veth1_macvtap: entered promiscuous mode [ 694.364250][T20387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.421741][T20387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.460074][ T5997] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.475205][ T5997] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.513170][T20711] geneve3: entered allmulticast mode [ 694.563175][ T5997] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.589834][ T5997] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.780248][ T9106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.788774][ T9106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.924837][T20713] C speed is unknown, defaulting to 1000 [ 694.935806][T20716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.963847][ T9122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.977851][T20728] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4065'. [ 694.982702][ T9122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.006048][T20716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.142387][T20716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.341577][T20728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.369627][T20728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.398911][T20728] bond0 (unregistering): Released all slaves [ 695.603852][T20737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4068'. [ 695.622113][T20737] netlink: 'syz.0.4068': attribute type 1 has an invalid length. [ 695.634656][T20737] netlink: 'syz.0.4068': attribute type 2 has an invalid length. [ 695.778257][T20469] page_pool_release_retry() stalled pool shutdown: id 108, 2 inflight 60 sec [ 695.828532][T20745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4071'. [ 696.100503][T11043] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.202580][T20761] netlink: 'syz.2.4076': attribute type 30 has an invalid length. [ 696.337702][T11043] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.439713][T11043] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.492845][T11043] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.718133][T11043] bridge_slave_1: left allmulticast mode [ 696.723916][T11043] bridge_slave_1: left promiscuous mode [ 696.730077][T11043] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.740077][T11043] bridge_slave_0: left allmulticast mode [ 696.745743][T11043] bridge_slave_0: left promiscuous mode [ 696.751752][T11043] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.059686][T11043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.071825][T11043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.083350][T11043] bond0 (unregistering): Released all slaves [ 697.313085][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4080'. [ 697.378323][T20780] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 697.452770][T20783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4082'. [ 697.573367][T20783] netlink: 'syz.0.4082': attribute type 1 has an invalid length. [ 697.586911][T20783] netlink: 'syz.0.4082': attribute type 2 has an invalid length. [ 697.818745][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 697.829966][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 697.841236][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 697.852574][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 697.863719][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 697.919530][T20806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.016474][T20805] C speed is unknown, defaulting to 1000 [ 698.029122][T20806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.100739][T20806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.123629][T11043] hsr_slave_0: left promiscuous mode [ 698.158271][T11043] hsr_slave_1: left promiscuous mode [ 698.185696][T11043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.194036][T11043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.224139][T11043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.235871][T11043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.289201][T11043] veth1_macvtap: left promiscuous mode [ 698.294772][T11043] veth0_macvtap: left promiscuous mode [ 698.308491][T20811] FAULT_INJECTION: forcing a failure. [ 698.308491][T20811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.322364][T11043] veth1_vlan: left promiscuous mode [ 698.327926][T11043] veth0_vlan: left promiscuous mode [ 698.333957][T20811] CPU: 1 UID: 0 PID: 20811 Comm: syz.1.4089 Not tainted 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 PREEMPT(full) [ 698.333983][T20811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 698.333996][T20811] Call Trace: [ 698.334004][T20811] [ 698.334013][T20811] dump_stack_lvl+0x189/0x250 [ 698.334047][T20811] ? __pfx____ratelimit+0x10/0x10 [ 698.334069][T20811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.334098][T20811] ? __pfx__printk+0x10/0x10 [ 698.334120][T20811] ? __might_fault+0xb0/0x130 [ 698.334161][T20811] should_fail_ex+0x414/0x560 [ 698.334190][T20811] _copy_from_user+0x2d/0xb0 [ 698.334211][T20811] ___sys_sendmsg+0x158/0x2a0 [ 698.334241][T20811] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.334306][T20811] ? __fget_files+0x2a/0x420 [ 698.334327][T20811] ? __fget_files+0x3a0/0x420 [ 698.334359][T20811] __x64_sys_sendmsg+0x19b/0x260 [ 698.334389][T20811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.334427][T20811] ? __pfx_ksys_write+0x10/0x10 [ 698.334454][T20811] ? rcu_is_watching+0x15/0xb0 [ 698.334489][T20811] ? do_syscall_64+0xbe/0x3b0 [ 698.334515][T20811] do_syscall_64+0xfa/0x3b0 [ 698.334535][T20811] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.334555][T20811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.334574][T20811] ? clear_bhb_loop+0x60/0xb0 [ 698.334597][T20811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.334616][T20811] RIP: 0033:0x7f2fca58e929 [ 698.334633][T20811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.334649][T20811] RSP: 002b:00007f2fcb42f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.334669][T20811] RAX: ffffffffffffffda RBX: 00007f2fca7b5fa0 RCX: 00007f2fca58e929 [ 698.334683][T20811] RDX: 0000000020004804 RSI: 0000200000000640 RDI: 0000000000000003 [ 698.334702][T20811] RBP: 00007f2fcb42f090 R08: 0000000000000000 R09: 0000000000000000 [ 698.334714][T20811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.334726][T20811] R13: 0000000000000000 R14: 00007f2fca7b5fa0 R15: 00007ffd1d6f9378 [ 698.334756][T20811] [ 699.100583][T11043] team0 (unregistering): Port device team_slave_1 removed [ 699.143727][T11043] team0 (unregistering): Port device team_slave_0 removed [ 699.506143][T20797] C speed is unknown, defaulting to 1000 [ 699.745494][T20826] geneve2: entered promiscuous mode [ 699.761193][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4094'. [ 699.872331][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4095'. [ 699.915678][ T9106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.929581][ T9106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.938693][T16182] Bluetooth: hci0: command tx timeout [ 699.985786][ T9106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.035563][ T9106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.171344][T20798] C speed is unknown, defaulting to 1000 [ 700.292356][T20837] FAULT_INJECTION: forcing a failure. [ 700.292356][T20837] name failslab, interval 1, probability 0, space 0, times 0 [ 700.312805][T20837] CPU: 0 UID: 0 PID: 20837 Comm: syz.2.4096 Not tainted 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 PREEMPT(full) [ 700.312831][T20837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 700.312843][T20837] Call Trace: [ 700.312852][T20837] [ 700.312860][T20837] dump_stack_lvl+0x189/0x250 [ 700.312893][T20837] ? __pfx____ratelimit+0x10/0x10 [ 700.312915][T20837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.312944][T20837] ? __pfx__printk+0x10/0x10 [ 700.312970][T20837] ? __pfx___might_resched+0x10/0x10 [ 700.312998][T20837] ? fs_reclaim_acquire+0x7d/0x100 [ 700.313025][T20837] should_fail_ex+0x414/0x560 [ 700.313053][T20837] should_failslab+0xa8/0x100 [ 700.313074][T20837] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 700.313105][T20837] ? __alloc_skb+0x112/0x2d0 [ 700.313134][T20837] __alloc_skb+0x112/0x2d0 [ 700.313161][T20837] netlink_ack+0x146/0xa50 [ 700.313182][T20837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 700.313221][T20837] netlink_rcv_skb+0x28c/0x470 [ 700.313245][T20837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 700.313269][T20837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 700.313311][T20837] ? netlink_deliver_tap+0x2e/0x1b0 [ 700.313333][T20837] ? netlink_deliver_tap+0x2e/0x1b0 [ 700.313360][T20837] netlink_unicast+0x75b/0x8d0 [ 700.313391][T20837] netlink_sendmsg+0x805/0xb30 [ 700.313423][T20837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.313450][T20837] ? aa_sock_msg_perm+0x94/0x160 [ 700.313475][T20837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 700.313497][T20837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.313522][T20837] __sock_sendmsg+0x219/0x270 [ 700.313545][T20837] ____sys_sendmsg+0x505/0x830 [ 700.313578][T20837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.313613][T20837] ? import_iovec+0x74/0xa0 [ 700.313634][T20837] ___sys_sendmsg+0x21f/0x2a0 [ 700.313664][T20837] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.313726][T20837] ? __fget_files+0x2a/0x420 [ 700.313746][T20837] ? __fget_files+0x3a0/0x420 [ 700.313776][T20837] __x64_sys_sendmsg+0x19b/0x260 [ 700.313808][T20837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 700.313845][T20837] ? __pfx_ksys_write+0x10/0x10 [ 700.313879][T20837] ? do_syscall_64+0xbe/0x3b0 [ 700.313906][T20837] do_syscall_64+0xfa/0x3b0 [ 700.313926][T20837] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.313947][T20837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.313965][T20837] ? clear_bhb_loop+0x60/0xb0 [ 700.313988][T20837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.314006][T20837] RIP: 0033:0x7f07a118e929 [ 700.314023][T20837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.314039][T20837] RSP: 002b:00007f07a1f8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.314059][T20837] RAX: ffffffffffffffda RBX: 00007f07a13b5fa0 RCX: 00007f07a118e929 [ 700.314073][T20837] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 700.314085][T20837] RBP: 00007f07a1f8e090 R08: 0000000000000000 R09: 0000000000000000 [ 700.314097][T20837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.314108][T20837] R13: 0000000000000000 R14: 00007f07a13b5fa0 R15: 00007ffed972f9d8 [ 700.314137][T20837] [ 700.651624][T20835] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 700.836681][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4098'. [ 700.992092][T20841] netlink: 'syz.2.4098': attribute type 1 has an invalid length. [ 701.006671][T20841] netlink: 'syz.2.4098': attribute type 2 has an invalid length. [ 701.057545][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 701.276159][T20848] FAULT_INJECTION: forcing a failure. [ 701.276159][T20848] name failslab, interval 1, probability 0, space 0, times 0 [ 701.322896][T20848] CPU: 0 UID: 0 PID: 20848 Comm: syz.2.4100 Not tainted 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 PREEMPT(full) [ 701.322927][T20848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 701.322938][T20848] Call Trace: [ 701.322946][T20848] [ 701.322954][T20848] dump_stack_lvl+0x189/0x250 [ 701.322984][T20848] ? __pfx____ratelimit+0x10/0x10 [ 701.323004][T20848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 701.323029][T20848] ? __pfx__printk+0x10/0x10 [ 701.323052][T20848] ? __pfx___might_resched+0x10/0x10 [ 701.323081][T20848] should_fail_ex+0x414/0x560 [ 701.323106][T20848] should_failslab+0xa8/0x100 [ 701.323125][T20848] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 701.323153][T20848] ? __alloc_skb+0x112/0x2d0 [ 701.323178][T20848] __alloc_skb+0x112/0x2d0 [ 701.323203][T20848] netlink_sendmsg+0x5c6/0xb30 [ 701.323232][T20848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.323256][T20848] ? aa_sock_msg_perm+0x94/0x160 [ 701.323289][T20848] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 701.323310][T20848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.323331][T20848] __sock_sendmsg+0x219/0x270 [ 701.323351][T20848] ____sys_sendmsg+0x505/0x830 [ 701.323379][T20848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.323411][T20848] ? import_iovec+0x74/0xa0 [ 701.323429][T20848] ___sys_sendmsg+0x21f/0x2a0 [ 701.323455][T20848] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.323513][T20848] ? __fget_files+0x2a/0x420 [ 701.323531][T20848] ? __fget_files+0x3a0/0x420 [ 701.323557][T20848] __x64_sys_sendmsg+0x19b/0x260 [ 701.323583][T20848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 701.323615][T20848] ? __pfx_ksys_write+0x10/0x10 [ 701.323638][T20848] ? rcu_is_watching+0x15/0xb0 [ 701.323667][T20848] ? do_syscall_64+0xbe/0x3b0 [ 701.323690][T20848] do_syscall_64+0xfa/0x3b0 [ 701.323708][T20848] ? lockdep_hardirqs_on+0x9c/0x150 [ 701.323726][T20848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.323742][T20848] ? clear_bhb_loop+0x60/0xb0 [ 701.323762][T20848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.323778][T20848] RIP: 0033:0x7f07a118e929 [ 701.323793][T20848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.323807][T20848] RSP: 002b:00007f07a1f8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.323825][T20848] RAX: ffffffffffffffda RBX: 00007f07a13b5fa0 RCX: 00007f07a118e929 [ 701.323838][T20848] RDX: 0000000020004804 RSI: 0000200000000640 RDI: 0000000000000003 [ 701.323849][T20848] RBP: 00007f07a1f8e090 R08: 0000000000000000 R09: 0000000000000000 [ 701.323859][T20848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.323869][T20848] R13: 0000000000000000 R14: 00007f07a13b5fa0 R15: 00007ffed972f9d8 [ 701.323894][T20848] [ 701.802520][T20855] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4102'. [ 701.838237][T20851] dvmrp1: entered allmulticast mode [ 701.975745][T20865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.999556][T20865] netlink: 504 bytes leftover after parsing attributes in process `syz.1.4103'. [ 702.017730][T16182] Bluetooth: hci0: command tx timeout [ 702.085000][T20868] batadv_slave_1: entered promiscuous mode [ 702.110253][T20798] chnl_net:caif_netlink_parms(): no params data found [ 702.136605][T20867] batadv_slave_1: left promiscuous mode [ 702.153045][T20863] C speed is unknown, defaulting to 1000 [ 702.420159][T20878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.439517][T20881] FAULT_INJECTION: forcing a failure. [ 702.439517][T20881] name failslab, interval 1, probability 0, space 0, times 0 [ 702.454173][T20881] CPU: 1 UID: 0 PID: 20881 Comm: syz.3.4108 Not tainted 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 PREEMPT(full) [ 702.454204][T20881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 702.454218][T20881] Call Trace: [ 702.454228][T20881] [ 702.454238][T20881] dump_stack_lvl+0x189/0x250 [ 702.454277][T20881] ? __pfx____ratelimit+0x10/0x10 [ 702.454313][T20881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.454346][T20881] ? __pfx__printk+0x10/0x10 [ 702.454376][T20881] ? __pfx___might_resched+0x10/0x10 [ 702.454407][T20881] ? fs_reclaim_acquire+0x7d/0x100 [ 702.454438][T20881] should_fail_ex+0x414/0x560 [ 702.454469][T20881] should_failslab+0xa8/0x100 [ 702.454493][T20881] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 702.454527][T20881] ? __alloc_skb+0x112/0x2d0 [ 702.454560][T20881] __alloc_skb+0x112/0x2d0 [ 702.454592][T20881] netlink_ack+0x146/0xa50 [ 702.454615][T20881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 702.454638][T20881] ? ref_tracker_free+0x63a/0x7d0 [ 702.454663][T20881] ? __copy_skb_header+0xa7/0x550 [ 702.454696][T20881] ? __pfx_ref_tracker_free+0x10/0x10 [ 702.454736][T20881] netlink_rcv_skb+0x28c/0x470 [ 702.454762][T20881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 702.454790][T20881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 702.454831][T20881] ? netlink_deliver_tap+0x2e/0x1b0 [ 702.454855][T20881] ? netlink_deliver_tap+0x2e/0x1b0 [ 702.454887][T20881] netlink_unicast+0x75b/0x8d0 [ 702.454923][T20881] netlink_sendmsg+0x805/0xb30 [ 702.454959][T20881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.454990][T20881] ? aa_sock_msg_perm+0x94/0x160 [ 702.455018][T20881] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 702.455045][T20881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.455081][T20881] __sock_sendmsg+0x219/0x270 [ 702.455108][T20881] ____sys_sendmsg+0x505/0x830 [ 702.455150][T20881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 702.455191][T20881] ? import_iovec+0x74/0xa0 [ 702.455215][T20881] ___sys_sendmsg+0x21f/0x2a0 [ 702.455248][T20881] ? __pfx____sys_sendmsg+0x10/0x10 [ 702.455320][T20881] ? __fget_files+0x2a/0x420 [ 702.455343][T20881] ? __fget_files+0x3a0/0x420 [ 702.455378][T20881] __x64_sys_sendmsg+0x19b/0x260 [ 702.455412][T20881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 702.455453][T20881] ? __pfx_ksys_write+0x10/0x10 [ 702.455483][T20881] ? rcu_is_watching+0x15/0xb0 [ 702.455521][T20881] ? do_syscall_64+0xbe/0x3b0 [ 702.455551][T20881] do_syscall_64+0xfa/0x3b0 [ 702.455574][T20881] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.455597][T20881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.455618][T20881] ? clear_bhb_loop+0x60/0xb0 [ 702.455645][T20881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.455665][T20881] RIP: 0033:0x7ffa5478e929 [ 702.455684][T20881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.455702][T20881] RSP: 002b:00007ffa556af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.455725][T20881] RAX: ffffffffffffffda RBX: 00007ffa549b5fa0 RCX: 00007ffa5478e929 [ 702.455741][T20881] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 702.455754][T20881] RBP: 00007ffa556af090 R08: 0000000000000000 R09: 0000000000000000 [ 702.455767][T20881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.455780][T20881] R13: 0000000000000000 R14: 00007ffa549b5fa0 R15: 00007fff98da4e28 [ 702.455813][T20881] [ 702.790727][T20798] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.809475][T20798] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.822022][T20862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.837348][T20798] bridge_slave_0: entered allmulticast mode [ 702.838990][T20878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.851290][T20798] bridge_slave_0: entered promiscuous mode [ 702.942647][T20873] C speed is unknown, defaulting to 1000 [ 702.956298][T20798] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.963848][T20798] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.979435][T20798] bridge_slave_1: entered allmulticast mode [ 702.995056][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4110'. [ 703.024272][T20798] bridge_slave_1: entered promiscuous mode [ 703.038341][T20886] netlink: 'syz.1.4110': attribute type 1 has an invalid length. [ 703.046079][T20886] netlink: 'syz.1.4110': attribute type 2 has an invalid length. [ 703.199783][T20798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.222689][T20798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.363903][T20798] team0: Port device team_slave_0 added [ 703.400973][T20798] team0: Port device team_slave_1 added [ 703.434669][T20908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4116'. [ 703.592850][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4117'. [ 703.652430][T20798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.663112][T20798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.689841][T20798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.702531][T20798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.709643][T20798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.737493][T20798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.757685][T20912] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 703.758009][T20906] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 703.948393][T20919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.956459][T20919] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4118'. [ 704.024046][T20798] hsr_slave_0: entered promiscuous mode [ 704.038361][T20925] FAULT_INJECTION: forcing a failure. [ 704.038361][T20925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.062324][T20798] hsr_slave_1: entered promiscuous mode [ 704.090366][T20925] CPU: 0 UID: 0 PID: 20925 Comm: syz.1.4120 Not tainted 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 PREEMPT(full) [ 704.090396][T20925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 704.090410][T20925] Call Trace: [ 704.090418][T20925] [ 704.090427][T20925] dump_stack_lvl+0x189/0x250 [ 704.090483][T20925] ? __pfx____ratelimit+0x10/0x10 [ 704.090507][T20925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.090539][T20925] ? __pfx__printk+0x10/0x10 [ 704.090575][T20925] should_fail_ex+0x414/0x560 [ 704.090606][T20925] _copy_to_user+0x31/0xb0 [ 704.090627][T20925] simple_read_from_buffer+0xe1/0x170 [ 704.090653][T20925] proc_fail_nth_read+0x1df/0x250 [ 704.090682][T20925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.090711][T20925] ? rw_verify_area+0x258/0x650 [ 704.090742][T20925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.090768][T20925] vfs_read+0x1fd/0x980 [ 704.090806][T20925] ? __pfx___mutex_lock+0x10/0x10 [ 704.090831][T20925] ? __pfx_vfs_read+0x10/0x10 [ 704.090864][T20925] ? __fget_files+0x2a/0x420 [ 704.090891][T20925] ? __fget_files+0x3a0/0x420 [ 704.090911][T20925] ? __fget_files+0x2a/0x420 [ 704.090941][T20925] ksys_read+0x145/0x250 [ 704.090975][T20925] ? __pfx_ksys_read+0x10/0x10 [ 704.091013][T20925] ? do_syscall_64+0xbe/0x3b0 [ 704.091045][T20925] do_syscall_64+0xfa/0x3b0 [ 704.091069][T20925] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.091093][T20925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.091116][T20925] ? clear_bhb_loop+0x60/0xb0 [ 704.091142][T20925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.091164][T20925] RIP: 0033:0x7f2fca58d33c [ 704.091183][T20925] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 704.091203][T20925] RSP: 002b:00007f2fcb40e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.091225][T20925] RAX: ffffffffffffffda RBX: 00007f2fca7b6080 RCX: 00007f2fca58d33c [ 704.091241][T20925] RDX: 000000000000000f RSI: 00007f2fcb40e0a0 RDI: 0000000000000006 [ 704.091255][T20925] RBP: 00007f2fcb40e090 R08: 0000000000000000 R09: 0000000000000000 [ 704.091268][T20925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.091288][T20925] R13: 0000000000000001 R14: 00007f2fca7b6080 R15: 00007ffd1d6f9378 [ 704.091320][T20925] [ 704.337802][T20798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.346632][T20798] Cannot create hsr debugfs directory [ 704.362672][T16182] Bluetooth: hci0: command tx timeout [ 704.572867][T20936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4122'. [ 704.827692][T20945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4125'. [ 704.860357][T20945] netlink: 'syz.0.4125': attribute type 1 has an invalid length. [ 704.869868][T20945] netlink: 'syz.0.4125': attribute type 2 has an invalid length. [ 705.055512][T20954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.133660][T20949] C speed is unknown, defaulting to 1000 [ 705.184898][T20958] netlink: 'syz.0.4128': attribute type 6 has an invalid length. [ 705.188317][T20953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.379827][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4130'. [ 705.559416][T20964] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 705.659101][T20971] FAULT_INJECTION: forcing a failure. [ 705.659101][T20971] name failslab, interval 1, probability 0, space 0, times 0 [ 705.697957][T20971] CPU: 0 UID: 0 PID: 20971 Comm: syz.3.4132 Not tainted 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 PREEMPT(full) [ 705.697985][T20971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 705.697999][T20971] Call Trace: [ 705.698007][T20971] [ 705.698016][T20971] dump_stack_lvl+0x189/0x250 [ 705.698061][T20971] ? __pfx____ratelimit+0x10/0x10 [ 705.698085][T20971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.698117][T20971] ? __pfx__printk+0x10/0x10 [ 705.698146][T20971] ? ref_tracker_alloc+0x318/0x460 [ 705.698175][T20971] should_fail_ex+0x414/0x560 [ 705.698205][T20971] should_failslab+0xa8/0x100 [ 705.698228][T20971] kmem_cache_alloc_noprof+0x73/0x3c0 [ 705.698259][T20971] ? skb_clone+0x212/0x3a0 [ 705.698293][T20971] skb_clone+0x212/0x3a0 [ 705.698326][T20971] __netlink_deliver_tap+0x404/0x850 [ 705.698364][T20971] ? netlink_deliver_tap+0x2e/0x1b0 [ 705.698391][T20971] netlink_deliver_tap+0x19c/0x1b0 [ 705.698416][T20971] netlink_unicast+0x72f/0x8d0 [ 705.698450][T20971] netlink_sendmsg+0x805/0xb30 [ 705.698484][T20971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.698513][T20971] ? aa_sock_msg_perm+0x94/0x160 [ 705.698540][T20971] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 705.698565][T20971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.698591][T20971] __sock_sendmsg+0x219/0x270 [ 705.698616][T20971] ____sys_sendmsg+0x505/0x830 [ 705.698650][T20971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.698688][T20971] ? import_iovec+0x74/0xa0 [ 705.698711][T20971] ___sys_sendmsg+0x21f/0x2a0 [ 705.698742][T20971] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.698809][T20971] ? __fget_files+0x2a/0x420 [ 705.698829][T20971] ? __fget_files+0x3a0/0x420 [ 705.698862][T20971] __x64_sys_sendmsg+0x19b/0x260 [ 705.698893][T20971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 705.698932][T20971] ? __pfx_ksys_write+0x10/0x10 [ 705.698960][T20971] ? rcu_is_watching+0x15/0xb0 [ 705.698995][T20971] ? do_syscall_64+0xbe/0x3b0 [ 705.699023][T20971] do_syscall_64+0xfa/0x3b0 [ 705.699070][T20971] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.699093][T20971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.699114][T20971] ? clear_bhb_loop+0x60/0xb0 [ 705.699141][T20971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.699162][T20971] RIP: 0033:0x7ffa5478e929 [ 705.699182][T20971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.699201][T20971] RSP: 002b:00007ffa556af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.699223][T20971] RAX: ffffffffffffffda RBX: 00007ffa549b5fa0 RCX: 00007ffa5478e929 [ 705.699237][T20971] RDX: 0000000020004804 RSI: 0000200000000640 RDI: 0000000000000003 [ 705.699250][T20971] RBP: 00007ffa556af090 R08: 0000000000000000 R09: 0000000000000000 [ 705.699263][T20971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.699276][T20971] R13: 0000000000000000 R14: 00007ffa549b5fa0 R15: 00007fff98da4e28 [ 705.699309][T20971] [ 706.033549][T20972] C speed is unknown, defaulting to 1000 [ 706.124377][T20798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 706.140983][T20798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 706.158726][T20798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 706.169244][T20798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 706.256048][T20798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.276141][T20798] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.319767][T20798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 706.330241][T20798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 706.345926][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.353090][ T9125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.375984][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.383191][ T9125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.424036][T20983] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4134'. [ 706.842166][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4138'. [ 706.882564][T20998] netlink: 'syz.1.4138': attribute type 1 has an invalid length. [ 706.893778][T20998] netlink: 'syz.1.4138': attribute type 2 has an invalid length. [ 706.947461][T20798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.195128][T21006] netlink: 'syz.1.4140': attribute type 21 has an invalid length. [ 707.468140][T21016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4142'. [ 707.503738][T21009] C speed is unknown, defaulting to 1000 [ 707.535190][T21012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.646183][T21012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.719426][T20798] veth0_vlan: entered promiscuous mode [ 707.758223][T21012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.758347][T20798] veth1_vlan: entered promiscuous mode [ 707.859913][T20798] veth0_macvtap: entered promiscuous mode [ 707.896470][T20798] veth1_macvtap: entered promiscuous mode [ 707.922000][T21016] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 708.054481][T20798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.182467][T21033] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4146'. [ 708.215585][T20798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.291290][ T9125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.302642][ T9125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.336776][ T9122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.358350][ T9122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.402173][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4150'. [ 708.419280][T21043] netlink: 'syz.1.4150': attribute type 1 has an invalid length. [ 708.427302][T21043] netlink: 'syz.1.4150': attribute type 2 has an invalid length. [ 708.517655][ T9106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.528685][ T9106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.536393][T21045] netlink: 6336 bytes leftover after parsing attributes in process `syz.2.4149'. [ 708.556535][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4151'. [ 708.566396][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4151'. [ 708.641831][ T9122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.665228][ T9122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.930114][T21065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4155'. [ 709.005960][T21065] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 709.045025][T21066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.141381][T21066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.236409][T21066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.361123][T21059] C speed is unknown, defaulting to 1000 [ 709.387775][T21074] netlink: 'syz.0.4157': attribute type 21 has an invalid length. [ 709.599924][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4162'. [ 709.931153][ T9116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.099931][ T9116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.344431][ T9116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.401750][ T9116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.511345][ T9116] bridge_slave_1: left allmulticast mode [ 710.519135][ T9116] bridge_slave_1: left promiscuous mode [ 710.524817][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.534085][ T9116] bridge_slave_0: left allmulticast mode [ 710.540169][ T9116] bridge_slave_0: left promiscuous mode [ 710.545835][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.871325][ T9116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.883687][ T9116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.894176][ T9116] bond0 (unregistering): Released all slaves [ 711.261407][T21114] netlink: 'syz.2.4167': attribute type 303 has an invalid length. [ 711.270279][T21113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.285222][T21106] C speed is unknown, defaulting to 1000 [ 711.435033][T21120] __nla_validate_parse: 2 callbacks suppressed [ 711.435051][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4170'. [ 711.449293][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4167'. [ 711.463108][T21113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.566922][T21113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.815093][T21127] ÿ: renamed from bond_slave_0 (while UP) [ 712.035694][T16182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 712.044974][T16182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 712.052825][T16182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 712.064875][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4174'. [ 712.074178][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4174'. [ 712.083540][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4174'. [ 712.092696][T16182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 712.101284][T16182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.119779][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4174'. [ 712.128884][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4174'. [ 712.168180][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4174'. [ 712.177368][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4174'. [ 712.203620][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4174'. [ 712.232101][T21136] sctp: [Deprecated]: syz.2.4175 (pid 21136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.232101][T21136] Use struct sctp_sack_info instead [ 712.271743][T21134] bridge0: port 4(dummy0) entered disabled state [ 712.278318][T21134] bridge0: port 3(team0) entered disabled state [ 712.285490][T21134] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.293076][T21134] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.373405][T21138] netlink: 'syz.2.4176': attribute type 1 has an invalid length. [ 712.415959][T21134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.430430][T21134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.550323][T21120] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 712.560881][T21138] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 712.608041][ T9122] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.627475][ T9122] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.636351][ T9122] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 54661 - 0 [ 712.656512][ T9122] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 46112 - 0 [ 712.674009][ T9122] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.684677][ T9122] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.702222][ T9122] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 54661 - 0 [ 712.726265][ T9122] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 46112 - 0 [ 712.748802][ T9122] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.762072][ T9122] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.775685][ T9122] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 54661 - 0 [ 712.796478][ T9122] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 46112 - 0 [ 712.869787][ T9122] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.889815][ T9122] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.910716][ T9122] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 54661 - 0 [ 712.924526][ T9122] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 46112 - 0 [ 712.944222][ T9116] hsr_slave_0: left promiscuous mode [ 712.950255][ T9116] hsr_slave_1: left promiscuous mode [ 712.956112][ T9116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.963885][ T9116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.972669][ T9116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.982109][ T9116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.011200][ T9116] veth1_macvtap: left promiscuous mode [ 713.016737][ T9116] veth0_macvtap: left promiscuous mode [ 713.023997][ T9116] veth1_vlan: left promiscuous mode [ 713.029508][ T9116] veth0_vlan: left promiscuous mode [ 713.475897][ T9116] team0 (unregistering): Port device team_slave_1 removed [ 713.516729][ T9116] team0 (unregistering): Port device team_slave_0 removed [ 713.893520][T21132] C speed is unknown, defaulting to 1000 [ 713.922774][T21160] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 713.959070][T21160] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 713.995671][T21160] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 714.179621][T16182] Bluetooth: hci0: command tx timeout [ 714.195071][T21168] netlink: 'syz.2.4182': attribute type 25 has an invalid length. [ 714.484624][T21180] unsupported nlmsg_type 40 [ 714.965382][T21204] xt_time: unknown flags 0x4 [ 715.348530][T21132] chnl_net:caif_netlink_parms(): no params data found [ 715.541049][T21132] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.549004][T21132] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.556318][T21132] bridge_slave_0: entered allmulticast mode [ 715.564568][T21132] bridge_slave_0: entered promiscuous mode [ 715.573634][T21132] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.581440][T21132] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.588823][T21132] bridge_slave_1: entered allmulticast mode [ 715.596590][T21132] bridge_slave_1: entered promiscuous mode [ 715.681984][T21132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.707371][T21132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.804419][T21132] team0: Port device team_slave_0 added [ 715.842458][T21132] team0: Port device team_slave_1 added [ 715.952763][T21132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.975563][T21132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.014944][T21251] netlink: 'syz.2.4206': attribute type 1 has an invalid length. [ 716.023258][T21132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.054246][T21249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.092645][T21251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 716.106301][T21132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.126469][T21132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.157012][T21249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.168510][T21260] netlink: 'syz.0.4207': attribute type 10 has an invalid length. [ 716.182192][T21132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.212142][T21258] bond4: (slave veth5): Enslaving as an active interface with a down link [ 716.223035][T21260] !: entered promiscuous mode [ 716.236417][T21260] bridge0: port 2(0!) entered blocking state [ 716.243474][T21260] bridge0: port 2(0!) entered disabled state [ 716.256938][T21260] !: entered allmulticast mode [ 716.268193][T21249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.268385][T16182] Bluetooth: hci0: command tx timeout [ 716.303142][T21251] bond2: (slave veth0_to_bond): Releasing active interface [ 716.323010][T21251] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 716.339763][T21248] C speed is unknown, defaulting to 1000 [ 716.633724][T21132] hsr_slave_0: entered promiscuous mode [ 716.642675][T21132] hsr_slave_1: entered promiscuous mode [ 716.654599][T21268] netlink: 'syz.1.4210': attribute type 1 has an invalid length. [ 716.654908][T21132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 716.671003][T21132] Cannot create hsr debugfs directory [ 716.701378][T21268] __nla_validate_parse: 178 callbacks suppressed [ 716.701396][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'. [ 716.725196][T21268] nbd: illegal input index 1869770868 [ 716.782593][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'. [ 716.812271][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4210'. [ 716.889972][T21273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4211'. [ 716.917656][T21273] netlink: 'syz.2.4211': attribute type 7 has an invalid length. [ 716.925401][T21273] netlink: 'syz.2.4211': attribute type 8 has an invalid length. [ 716.967209][T21273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4211'. [ 716.969681][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4208'. [ 716.990791][T21266] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 716.999272][T21266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.045755][T21276] batadv_slave_1: entered promiscuous mode [ 717.705716][T21289] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 717.726058][T21132] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 717.769178][T21132] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 717.790861][T21132] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 717.819821][T21132] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 717.902320][T21293] C speed is unknown, defaulting to 1000 [ 718.127666][T21132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.161430][T21313] !: renamed from dummy0 (while UP) [ 718.200375][T21319] caif0: entered allmulticast mode [ 718.249247][T21132] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.284913][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.292063][ T9125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.337413][T16182] Bluetooth: hci0: command tx timeout [ 718.378495][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.385623][ T9116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.620831][T21132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 718.756897][T21296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4218'. [ 718.805487][T21296] SET target dimension over the limit! [ 718.871115][T21296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4218'. [ 718.910042][T21345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4227'. [ 718.968166][T21345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4227'. [ 719.202629][T21325] C speed is unknown, defaulting to 1000 [ 719.430337][T21132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.180349][T21393] pim6reg1: entered promiscuous mode [ 720.185691][T21393] pim6reg1: entered allmulticast mode [ 720.417456][T16182] Bluetooth: hci0: command tx timeout [ 720.444342][T21132] veth0_vlan: entered promiscuous mode [ 720.516532][T21132] veth1_vlan: entered promiscuous mode [ 720.619986][T21132] veth0_macvtap: entered promiscuous mode [ 720.652792][T21132] veth1_macvtap: entered promiscuous mode [ 720.706499][T21132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.724510][T21405] FAULT_INJECTION: forcing a failure. [ 720.724510][T21405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.735109][T21132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.787227][ T9122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.801037][T21405] CPU: 0 UID: 0 PID: 21405 Comm: syz.3.4237 Not tainted 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 PREEMPT(full) [ 720.801068][T21405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 720.801082][T21405] Call Trace: [ 720.801092][T21405] [ 720.801101][T21405] dump_stack_lvl+0x189/0x250 [ 720.801141][T21405] ? __pfx____ratelimit+0x10/0x10 [ 720.801166][T21405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.801201][T21405] ? __pfx__printk+0x10/0x10 [ 720.801239][T21405] should_fail_ex+0x414/0x560 [ 720.801272][T21405] _copy_to_user+0x31/0xb0 [ 720.801296][T21405] simple_read_from_buffer+0xe1/0x170 [ 720.801324][T21405] proc_fail_nth_read+0x1df/0x250 [ 720.801354][T21405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 720.801383][T21405] ? rw_verify_area+0x258/0x650 [ 720.801415][T21405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 720.801443][T21405] vfs_read+0x1fd/0x980 [ 720.801486][T21405] ? __pfx_vfs_read+0x10/0x10 [ 720.801517][T21405] ? rcu_is_watching+0x15/0xb0 [ 720.801549][T21405] ? do_sock_setsockopt+0x267/0x3e0 [ 720.801578][T21405] ? kfree+0x4d/0x440 [ 720.801615][T21405] ? do_sock_setsockopt+0x267/0x3e0 [ 720.801664][T21405] ksys_read+0x145/0x250 [ 720.801700][T21405] ? __pfx_ksys_read+0x10/0x10 [ 720.801744][T21405] ? do_syscall_64+0xbe/0x3b0 [ 720.801770][T21405] do_syscall_64+0xfa/0x3b0 [ 720.801791][T21405] ? lockdep_hardirqs_on+0x9c/0x150 [ 720.801811][T21405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.801829][T21405] ? clear_bhb_loop+0x60/0xb0 [ 720.801853][T21405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.801870][T21405] RIP: 0033:0x7ffa5478d33c [ 720.801887][T21405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 720.801904][T21405] RSP: 002b:00007ffa556af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 720.801924][T21405] RAX: ffffffffffffffda RBX: 00007ffa549b5fa0 RCX: 00007ffa5478d33c [ 720.801938][T21405] RDX: 000000000000000f RSI: 00007ffa556af0a0 RDI: 0000000000000004 [ 720.801950][T21405] RBP: 00007ffa556af090 R08: 0000000000000000 R09: 0000000000000000 [ 720.801961][T21405] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 720.801973][T21405] R13: 0000000000000000 R14: 00007ffa549b5fa0 R15: 00007fff98da4e28 [ 720.802007][T21405] [ 720.838493][ T9122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.082668][T21374] C speed is unknown, defaulting to 1000 [ 721.082697][ T9122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.082745][ T9122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.261634][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.279281][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.330230][ T9105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.338969][ T9105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.732109][ T5997] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.889416][ T5997] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.052724][ T5997] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.192701][ T5997] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.575917][ T5997] bridge_slave_1: left allmulticast mode [ 722.582156][ T5997] bridge_slave_1: left promiscuous mode [ 722.588236][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.598192][ T5997] bridge_slave_0: left allmulticast mode [ 722.603914][ T5997] bridge_slave_0: left promiscuous mode [ 722.609667][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.958908][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4244'. [ 723.077816][T21439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4241'. [ 723.157088][T21439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4241'. [ 723.248505][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.256191][T21448] netlink: 'syz.2.4246': attribute type 9 has an invalid length. [ 723.287861][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.342276][ T5997] bond0 (unregistering): Released all slaves [ 723.489656][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4242'. [ 723.563632][T21451] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4246'. [ 723.636781][T21454] C speed is unknown, defaulting to 1000 [ 723.796648][ T30] audit: type=1800 audit(1751169919.674:9): pid=21437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4242" name="cgroup.controllers" dev="tmpfs" ino=1333 res=0 errno=0 [ 723.884449][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 723.902965][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 723.912635][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 723.927980][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 723.935700][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 724.303798][T21456] C speed is unknown, defaulting to 1000 [ 724.457751][T21469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.600242][T21469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.616528][ T5997] hsr_slave_0: left promiscuous mode [ 724.637226][ T5997] hsr_slave_1: left promiscuous mode [ 724.643249][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.651240][T21471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4251'. [ 724.661807][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.685988][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.693659][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.736986][ T5997] veth1_macvtap: left promiscuous mode [ 724.745131][ T5997] veth0_macvtap: left promiscuous mode [ 724.754529][ T5997] veth1_vlan: left promiscuous mode [ 724.771012][ T5997] veth0_vlan: left promiscuous mode [ 725.342798][T21478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4252'. [ 725.355828][ T5997] team0 (unregistering): Port device team_slave_1 removed [ 725.392100][ T5997] team0 (unregistering): Port device team_slave_0 removed [ 725.753425][T21467] C speed is unknown, defaulting to 1000 [ 725.858278][T21480] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4253'. [ 726.020845][T16182] Bluetooth: hci0: command tx timeout [ 726.116353][T21487] netlink: 'syz.3.4254': attribute type 21 has an invalid length. [ 726.124663][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4254'. [ 726.159906][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4254'. [ 726.192545][T21491] xt_l2tp: invalid flags combination: c [ 726.230013][T21456] chnl_net:caif_netlink_parms(): no params data found [ 726.874499][T21511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 726.918272][T21456] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.927453][T21456] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.934638][T21456] bridge_slave_0: entered allmulticast mode [ 726.959653][T21456] bridge_slave_0: entered promiscuous mode [ 726.976843][T21456] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.995126][T21456] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.033959][T21456] bridge_slave_1: entered allmulticast mode [ 727.042152][T21456] bridge_slave_1: entered promiscuous mode [ 727.248410][T21525] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 727.271837][T21525] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 727.310743][T21456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.390402][T21456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.626507][T21456] team0: Port device team_slave_0 added [ 727.676823][T21456] team0: Port device team_slave_1 added [ 727.970819][T21456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.010676][T21456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.057325][T21456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.097632][T16182] Bluetooth: hci0: command tx timeout [ 728.137554][T21456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.152429][T21456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.181354][T21456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.306761][T21554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.383790][T21554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.460542][T21554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.555322][T21456] hsr_slave_0: entered promiscuous mode [ 728.579834][T21456] hsr_slave_1: entered promiscuous mode [ 728.586088][T21456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.617307][T21456] Cannot create hsr debugfs directory [ 728.632677][T21556] IPv6: sit1: Disabled Multicast RS [ 728.645425][T21556] sit1: entered allmulticast mode [ 728.736395][T21551] C speed is unknown, defaulting to 1000 [ 728.997545][T21572] __nla_validate_parse: 3 callbacks suppressed [ 728.998463][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4277'. [ 729.320698][T21573] C speed is unknown, defaulting to 1000 [ 729.544674][T21587] FAULT_INJECTION: forcing a failure. [ 729.544674][T21587] name failslab, interval 1, probability 0, space 0, times 0 [ 729.557585][T21587] CPU: 0 UID: 0 PID: 21587 Comm: syz.1.4282 Not tainted 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 PREEMPT(full) [ 729.557611][T21587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 729.557630][T21587] Call Trace: [ 729.557639][T21587] [ 729.557648][T21587] dump_stack_lvl+0x189/0x250 [ 729.557681][T21587] ? __pfx____ratelimit+0x10/0x10 [ 729.557703][T21587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.557732][T21587] ? __pfx__printk+0x10/0x10 [ 729.557758][T21587] ? __pfx___might_resched+0x10/0x10 [ 729.557786][T21587] ? fs_reclaim_acquire+0x7d/0x100 [ 729.557813][T21587] should_fail_ex+0x414/0x560 [ 729.557842][T21587] should_failslab+0xa8/0x100 [ 729.557863][T21587] __kmalloc_noprof+0xcb/0x4f0 [ 729.557880][T21587] ? bpf_test_init+0xc2/0x170 [ 729.557905][T21587] bpf_test_init+0xc2/0x170 [ 729.557931][T21587] bpf_prog_test_run_xdp+0x37c/0x1000 [ 729.557970][T21587] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 729.557998][T21587] ? __fget_files+0x2a/0x420 [ 729.558025][T21587] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 729.558048][T21587] bpf_prog_test_run+0x2c4/0x340 [ 729.558079][T21587] __sys_bpf+0x4a4/0x860 [ 729.558105][T21587] ? __pfx___sys_bpf+0x10/0x10 [ 729.558143][T21587] ? ksys_write+0x22a/0x250 [ 729.558174][T21587] ? __pfx_ksys_write+0x10/0x10 [ 729.558204][T21587] ? rcu_is_watching+0x15/0xb0 [ 729.558241][T21587] __x64_sys_bpf+0x7c/0x90 [ 729.558264][T21587] do_syscall_64+0xfa/0x3b0 [ 729.558285][T21587] ? lockdep_hardirqs_on+0x9c/0x150 [ 729.558305][T21587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.558323][T21587] ? clear_bhb_loop+0x60/0xb0 [ 729.558347][T21587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.558365][T21587] RIP: 0033:0x7f2fca58e929 [ 729.558381][T21587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.558398][T21587] RSP: 002b:00007f2fcb42f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 729.558418][T21587] RAX: ffffffffffffffda RBX: 00007f2fca7b5fa0 RCX: 00007f2fca58e929 [ 729.558432][T21587] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 729.558444][T21587] RBP: 00007f2fcb42f090 R08: 0000000000000000 R09: 0000000000000000 [ 729.558456][T21587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.558467][T21587] R13: 0000000000000000 R14: 00007f2fca7b5fa0 R15: 00007ffd1d6f9378 [ 729.558497][T21587] [ 729.887941][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'. [ 729.945805][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'. [ 729.955191][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'. [ 729.964172][T21588] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 729.981079][T21572] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 730.177450][T16182] Bluetooth: hci0: command tx timeout [ 730.650146][T21604] x_tables: duplicate underflow at hook 3 [ 730.731563][T21607] netlink: 'syz.0.4286': attribute type 1 has an invalid length. [ 730.777115][T21603] C speed is unknown, defaulting to 1000 [ 730.789361][T21456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 730.829423][T21456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 730.845964][T21609] netlink: 'syz.0.4286': attribute type 29 has an invalid length. [ 730.865888][T21609] netlink: 'syz.0.4286': attribute type 4 has an invalid length. [ 730.881082][T21456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 730.902408][T21609] netlink: 'syz.0.4286': attribute type 2 has an invalid length. [ 730.926277][T21611] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4288'. [ 730.947658][T21456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 731.044109][T21623] tipc: Started in network mode [ 731.054820][T21623] tipc: Node identity 4, cluster identity 4711 [ 731.087146][T21623] tipc: Node number set to 4 [ 731.416710][T21456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.536665][T21630] C speed is unknown, defaulting to 1000 [ 731.632395][T21636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.732643][T21636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.754948][T21635] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4293'. [ 731.828841][T21636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.989931][T21639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4294'. [ 732.263024][T16182] Bluetooth: hci0: command tx timeout [ 733.539763][T21456] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.558739][T21641] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 733.834164][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.841354][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.060371][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.067630][ T9106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.142491][T21670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4304'. [ 734.143544][T21675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4306'. [ 734.533597][T21685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4309'. [ 734.573067][T21685] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 734.729104][T21689] netlink: 'syz.1.4310': attribute type 1 has an invalid length. [ 734.814434][T21694] bond0: entered promiscuous mode [ 734.838103][T21694] bond0: entered allmulticast mode [ 734.848102][T21694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.894076][T21689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4310'. [ 734.913144][T21456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.065963][T21710] sctp: [Deprecated]: syz.3.4314 (pid 21710) Use of int in max_burst socket option. [ 735.065963][T21710] Use struct sctp_assoc_value instead [ 735.249725][T21718] batadv_slave_1: entered promiscuous mode [ 735.292935][T21714] geneve2: entered promiscuous mode [ 735.322513][T21714] geneve2: entered allmulticast mode [ 735.331617][ T9106] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 44529 - 0 [ 735.343074][ T9106] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 35823 - 0 [ 735.353879][ T9106] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 44529 - 0 [ 735.362268][ T9106] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 35823 - 0 [ 735.370908][T21718] batadv_slave_1: left promiscuous mode [ 735.372805][T21724] Bluetooth: MGMT ver 1.23 [ 735.376712][ T9106] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 44529 - 0 [ 735.399325][ T9106] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 35823 - 0 [ 735.444878][T21726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4319'. [ 735.454967][ T9106] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 44529 - 0 [ 735.499299][ T9106] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 35823 - 0 [ 735.769730][T21746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.829481][T21734] C speed is unknown, defaulting to 1000 [ 735.845303][T21740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.964601][T21740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.969930][T21456] veth0_vlan: entered promiscuous mode [ 736.021890][T21456] veth1_vlan: entered promiscuous mode [ 736.116542][T21456] veth0_macvtap: entered promiscuous mode [ 736.169004][T21456] veth1_macvtap: entered promiscuous mode [ 736.206643][T21757] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4327'. [ 736.369836][T21456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.390297][T21765] IPv6: NLM_F_CREATE should be specified when creating new route [ 736.405744][T21456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.451377][ T9106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.483433][ T9106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.522487][ T5997] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.538589][ T5997] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.624396][ T9105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.648714][ T9105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.716787][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.730812][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.820925][T21774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4334'. [ 737.010985][T21780] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4336'. [ 737.052710][T21782] x_tables: duplicate underflow at hook 2 [ 737.455611][T21788] C speed is unknown, defaulting to 1000 [ 737.764743][ T9106] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.839901][ T9106] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.906650][ T9106] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.013442][ T9106] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.170898][ T9106] bridge_slave_1: left allmulticast mode [ 738.176650][ T9106] bridge_slave_1: left promiscuous mode [ 738.183010][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.192867][ T9106] bridge_slave_0: left allmulticast mode [ 738.198863][ T9106] bridge_slave_0: left promiscuous mode [ 738.205360][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.515083][ T9106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.526163][ T9106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.536563][ T9106] bond0 (unregistering): Released all slaves [ 738.823775][T21810] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4344'. [ 739.210241][T21810] C speed is unknown, defaulting to 1000 [ 739.270705][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 739.285101][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 739.294489][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 739.318018][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 739.325746][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 739.596343][ T30] audit: type=1800 audit(1751169935.474:10): pid=21838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4351" name="memory.events" dev="tmpfs" ino=1485 res=0 errno=0 [ 739.628303][T21838] Unsupported ieee802154 address type: 0 [ 739.753852][T21838] syzkaller0: entered promiscuous mode [ 739.761411][T21838] syzkaller0: entered allmulticast mode [ 741.457580][T16182] Bluetooth: hci0: command tx timeout [ 741.492321][T21847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11 [ 741.553081][T21828] C speed is unknown, defaulting to 1000 [ 741.608562][T21850] netlink: 'syz.0.4355': attribute type 1 has an invalid length. [ 741.624313][ T9106] hsr_slave_0: left promiscuous mode [ 741.689124][ T9106] hsr_slave_1: left promiscuous mode [ 741.708248][ T9106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.735964][ T9106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.758202][ T9106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.765630][ T9106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.952376][ T9106] veth1_macvtap: left promiscuous mode [ 741.979224][ T9106] veth0_macvtap: left promiscuous mode [ 742.003723][ T9106] veth1_vlan: left promiscuous mode [ 742.029239][ T9106] veth0_vlan: left promiscuous mode [ 742.540355][ T9106] team0 (unregistering): Port device team_slave_1 removed [ 742.576924][ T9106] team0 (unregistering): Port device team_slave_0 removed [ 742.967938][T21850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 742.996803][T21861] veth3: entered promiscuous mode [ 743.001960][T21861] veth3: entered allmulticast mode [ 743.016373][T21861] bond2: (slave veth3): Enslaving as an active interface with a down link [ 743.127487][T21883] netlink: 'syz.2.4360': attribute type 15 has an invalid length. [ 743.137105][T21883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4360'. [ 743.432541][T21883] syzkaller0: entered promiscuous mode [ 743.438408][T21883] syzkaller0: entered allmulticast mode [ 743.537250][T16182] Bluetooth: hci0: command tx timeout [ 743.682812][T21902] [ 743.685258][T21902] ====================================================== [ 743.692306][T21902] WARNING: possible circular locking dependency detected [ 743.699349][T21902] 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 Not tainted [ 743.706468][T21902] ------------------------------------------------------ [ 743.713501][T21902] syz.0.4363/21902 is trying to acquire lock: [ 743.719567][T21902] ffff888057d70840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0 [ 743.731080][T21902] [ 743.731080][T21902] but task is already holding lock: [ 743.738450][T21902] ffff888057d70b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 743.747329][T21902] [ 743.747329][T21902] which lock already depends on the new lock. [ 743.747329][T21902] [ 743.757724][T21902] [ 743.757724][T21902] the existing dependency chain (in reverse order) is: [ 743.766723][T21902] [ 743.766723][T21902] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 743.774205][T21902] lock_acquire+0x120/0x360 [ 743.779230][T21902] __mutex_lock+0x182/0xe80 [ 743.784288][T21902] l2cap_info_timeout+0x60/0xa0 [ 743.789662][T21902] process_scheduled_works+0xae1/0x17b0 [ 743.795726][T21902] worker_thread+0x8a0/0xda0 [ 743.800838][T21902] kthread+0x70e/0x8a0 [ 743.805430][T21902] ret_from_fork+0x3fc/0x770 [ 743.810543][T21902] ret_from_fork_asm+0x1a/0x30 [ 743.815830][T21902] [ 743.815830][T21902] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 743.826086][T21902] validate_chain+0xb9b/0x2140 [ 743.831367][T21902] __lock_acquire+0xab9/0xd20 [ 743.836568][T21902] lock_acquire+0x120/0x360 [ 743.841592][T21902] __flush_work+0x6b8/0xbc0 [ 743.846610][T21902] __cancel_work_sync+0xbe/0x110 [ 743.852060][T21902] l2cap_conn_del+0x4f0/0x680 [ 743.857256][T21902] hci_conn_hash_flush+0x10a/0x230 [ 743.862884][T21902] hci_dev_close_sync+0xaef/0x1330 [ 743.868512][T21902] hci_dev_close+0x108/0x200 [ 743.873618][T21902] sock_do_ioctl+0xd9/0x300 [ 743.878634][T21902] sock_ioctl+0x576/0x790 [ 743.883480][T21902] __se_sys_ioctl+0xfc/0x170 [ 743.888601][T21902] do_syscall_64+0xfa/0x3b0 [ 743.893621][T21902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.900029][T21902] [ 743.900029][T21902] other info that might help us debug this: [ 743.900029][T21902] [ 743.910245][T21902] Possible unsafe locking scenario: [ 743.910245][T21902] [ 743.917680][T21902] CPU0 CPU1 [ 743.923031][T21902] ---- ---- [ 743.928382][T21902] lock(&conn->lock#2); [ 743.932622][T21902] lock((work_completion)(&(&conn->info_timer)->work)); [ 743.942164][T21902] lock(&conn->lock#2); [ 743.948924][T21902] lock((work_completion)(&(&conn->info_timer)->work)); [ 743.955950][T21902] [ 743.955950][T21902] *** DEADLOCK *** [ 743.955950][T21902] [ 743.964079][T21902] 5 locks held by syz.0.4363/21902: [ 743.969260][T21902] #0: ffff888033cc4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_close+0x100/0x200 [ 743.978848][T21902] #1: ffff888033cc40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 743.988496][T21902] #2: ffffffff8f6795a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 743.998494][T21902] #3: ffff888057d70b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 744.007818][T21902] #4: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0 [ 744.016959][T21902] [ 744.016959][T21902] stack backtrace: [ 744.022839][T21902] CPU: 1 UID: 0 PID: 21902 Comm: syz.0.4363 Not tainted 6.16.0-rc3-syzkaller-00902-gbeead7eea896 #0 PREEMPT(full) [ 744.022857][T21902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 744.022865][T21902] Call Trace: [ 744.022873][T21902] [ 744.022879][T21902] dump_stack_lvl+0x189/0x250 [ 744.022904][T21902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 744.022924][T21902] ? __pfx__printk+0x10/0x10 [ 744.022939][T21902] ? print_lock_name+0xde/0x100 [ 744.022953][T21902] print_circular_bug+0x2ee/0x310 [ 744.022969][T21902] check_noncircular+0x134/0x160 [ 744.022984][T21902] validate_chain+0xb9b/0x2140 [ 744.022996][T21902] ? do_raw_spin_lock+0x121/0x290 [ 744.023013][T21902] ? look_up_lock_class+0x74/0x170 [ 744.023027][T21902] ? register_lock_class+0x51/0x320 [ 744.023046][T21902] __lock_acquire+0xab9/0xd20 [ 744.023066][T21902] ? __flush_work+0xd2/0xbc0 [ 744.023078][T21902] lock_acquire+0x120/0x360 [ 744.023099][T21902] ? __flush_work+0xd2/0xbc0 [ 744.023121][T21902] ? _raw_spin_unlock_irq+0x23/0x50 [ 744.023141][T21902] ? __flush_work+0xd2/0xbc0 [ 744.023159][T21902] __flush_work+0x6b8/0xbc0 [ 744.023171][T21902] ? __flush_work+0xd2/0xbc0 [ 744.023184][T21902] ? __flush_work+0xd2/0xbc0 [ 744.023198][T21902] ? __pfx___flush_work+0x10/0x10 [ 744.023211][T21902] ? __pfx_wq_barrier_func+0x10/0x10 [ 744.023235][T21902] ? __pfx___cancel_work+0x10/0x10 [ 744.023249][T21902] ? hci_conn_drop+0x14d/0x280 [ 744.023271][T21902] __cancel_work_sync+0xbe/0x110 [ 744.023285][T21902] l2cap_conn_del+0x4f0/0x680 [ 744.023303][T21902] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 744.023325][T21902] hci_conn_hash_flush+0x10a/0x230 [ 744.023346][T21902] hci_dev_close_sync+0xaef/0x1330 [ 744.023365][T21902] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 744.023380][T21902] ? do_raw_read_unlock+0x3d/0x80 [ 744.023397][T21902] hci_dev_close+0x108/0x200 [ 744.023414][T21902] sock_do_ioctl+0xd9/0x300 [ 744.023428][T21902] ? __pfx_sock_do_ioctl+0x10/0x10 [ 744.023440][T21902] ? __lock_acquire+0xab9/0xd20 [ 744.023462][T21902] sock_ioctl+0x576/0x790 [ 744.023475][T21902] ? __pfx_sock_ioctl+0x10/0x10 [ 744.023487][T21902] ? __fget_files+0x2a/0x420 [ 744.023501][T21902] ? __fget_files+0x3a0/0x420 [ 744.023513][T21902] ? __fget_files+0x2a/0x420 [ 744.023528][T21902] ? bpf_lsm_file_ioctl+0x9/0x20 [ 744.023546][T21902] ? __pfx_sock_ioctl+0x10/0x10 [ 744.023558][T21902] __se_sys_ioctl+0xfc/0x170 [ 744.023579][T21902] do_syscall_64+0xfa/0x3b0 [ 744.023594][T21902] ? lockdep_hardirqs_on+0x9c/0x150 [ 744.023607][T21902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.023620][T21902] ? clear_bhb_loop+0x60/0xb0 [ 744.023635][T21902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.023647][T21902] RIP: 0033:0x7fde4fb8e929 [ 744.023660][T21902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.023672][T21902] RSP: 002b:00007fde50955038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.023685][T21902] RAX: ffffffffffffffda RBX: 00007fde4fdb5fa0 RCX: 00007fde4fb8e929 [ 744.023695][T21902] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000a [ 744.023704][T21902] RBP: 00007fde4fc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 744.023712][T21902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.023720][T21902] R13: 0000000000000000 R14: 00007fde4fdb5fa0 R15: 00007fff7e70fe08 [ 744.023735][T21902] [ 745.627200][ T5843] Bluetooth: hci0: command tx timeout [ 745.780099][T21828] chnl_net:caif_netlink_parms(): no params data found [ 745.826921][T21828] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.834363][T21828] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.841614][T21828] bridge_slave_0: entered allmulticast mode [ 745.848784][T21828] bridge_slave_0: entered promiscuous mode [ 745.855890][T21828] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.863201][T21828] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.871167][T21828] bridge_slave_1: entered allmulticast mode [ 745.878696][T21828] bridge_slave_1: entered promiscuous mode [ 746.006493][ T9106] erspan0 (unregistering): left promiscuous mode [ 746.029581][ T9106] gretap0 (unregistering): left promiscuous mode [ 746.060445][ T9106] dvmrp1 (unregistering): left allmulticast mode [ 746.433111][ T9106] bond0 (unregistering): Released all slaves [ 746.450623][T21828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.466546][T21828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.500885][ T9106] tipc: Left network mode [ 746.504018][T21828] team0: Port device team_slave_0 added [ 746.513426][T21828] team0: Port device team_slave_1 added [ 746.537872][T21828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.544849][T21828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.571216][T21828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.584576][T21828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.591696][T21828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.618133][T21828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.654733][T21828] hsr_slave_0: entered promiscuous mode [ 746.660986][T21828] hsr_slave_1: entered promiscuous mode [ 746.666898][T21828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 746.676352][T21828] Cannot create hsr debugfs directory [ 746.993374][ T9106] batadv_slave_0: left promiscuous mode [ 747.000570][ T9106] hsr_slave_0: left promiscuous mode [ 747.006285][ T9106] hsr_slave_1: left promiscuous mode [ 747.032660][ T9106] pim6reg (unregistering): left allmulticast mode [ 747.464881][T21828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 747.473697][T21828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 747.485219][T21828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 747.494047][T21828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 747.552292][T21828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.566955][T21828] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.578315][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.585403][ T9105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.598250][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.605361][ T9115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.697585][ T5843] Bluetooth: hci0: command tx timeout [ 747.751409][T21828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.895086][T21828] veth0_vlan: entered promiscuous mode [ 747.905167][T21828] veth1_vlan: entered promiscuous mode [ 747.927842][T21828] veth0_macvtap: entered promiscuous mode [ 747.935749][T21828] veth1_macvtap: entered promiscuous mode [ 747.950825][T21828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.962683][T21828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.973766][ T9115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.982847][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.994719][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.003560][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.026045][T21828] ieee80211 phy73: Selected rate control algorithm 'minstrel_ht' [ 748.052156][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.053672][T21828] ieee80211 phy74: Selected rate control algorithm 'minstrel_ht' [ 748.069809][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.088132][ T9115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.096788][ T9115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50