last executing test programs: 8.037196323s ago: executing program 3 (id=6104): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00', {}, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x14, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b702000014000000b70300e8f95ab600000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffff18400000f9ffffff00000000000000008510"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 7.786789203s ago: executing program 3 (id=6105): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0xffffff1e, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000840)="a6", 0xffffff1e, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x401, {0x0, 0x0, 0x0, 0x0, 0x60044, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 7.578234403s ago: executing program 3 (id=6109): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="67f8b54229e0", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, @loopback, @broadcast}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000380)={{r0, &(0x7f0000000040)='/!\x00', 0x600200, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x1]}, {0x4630, 0x6, 0xefa, 0x7}}, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x7}, 0x2, &(0x7f0000000340)=[{0x1, 0x5, &(0x7f0000000140)='@\xf8]{\x19\x00', &(0x7f0000000180)="3ce3da341f362bf0ab5663c3b655353dd3033fb98454b0c815fbc728ee595150a5a61a21d13bca608355317da201493cc95414ee73c513f12ed2090ef94acd649e1f8b07bbadde3ca7d4a7e4fdc58e9a07aacef2aa0e344afed35931b02640d7528d832433571ed78eecf20a49e32a2bd14884117016d3e3ffaa1f20ef993ddbffa0dcbb938cc7474bd4dfda16c183d5eebd90e3a4dd6a3bcb8252fc3915416cf577593ccd7a9e9164ffd43678b2d13b473f0dc8d77bc04ddeb2e930936fda270045c606", 0xc4, 0x2}, {0x2, 0x8, &(0x7f0000000280)='\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', &(0x7f00000002c0)="30a75afea6ce6ccad9e2748b77146e26edd53849fa2754c36b928ab25bf435ae9ebe17e74ee7b78afd2ef1538dcf8ba9c23005e232aedd35cd741465861c6f30be17cf340af6b436a7506d6ef613264b204eaf2e51a69a2c75f2ecb573310d22773cceeeab127adc70db93d1237c9ea88f", 0x71, 0x30}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0xc3, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000840)={0x1, 0x7fff, 0xf1a, 0x3, 0x1, 0x17, 0x1d, "a6a90e3acfc595dcbad6ce025cdff302745213b3", "75453415d2941c26b59bfc38943f160d5514db28"}) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000580)="140000001600f963d25a80648456dc921f6b718d", 0x14}], 0x1}, 0x804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2e, 0x0, 0x8, 0x1000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) 6.675483976s ago: executing program 3 (id=6113): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x48) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000500)={0x2, 0x10, '\x00', 0x1, &(0x7f00000004c0)=[0x0, 0x0]}) unshare(0x400) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000080), 0x12) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0xcb}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000480)={r3, &(0x7f0000000100)='\x00', 0x2000, &(0x7f0000000540)={@align=0x2, {0x816, 0x3, 0x716, 0xfffffffffffffffc}}, 0xb, &(0x7f0000000180), &(0x7f0000000440)=0x84}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 6.464779123s ago: executing program 3 (id=6115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30010000000c0006400000000000000002147301000000020a01010000000000"], 0x70}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="f328fe7875c1f244e1396be0523be23c7850afbe37aa4dc994df5d47fe10c743787bf7c39fdaeeb7edf64caec13fc8595ffed2ad2b516d11a4bc40ce660b9db5e4571ca2ab8c1cc537c5051c1a3dd287ff9cd32ec98b5780be41786fcbbf3bb076bbdf8f7706ef1fc9148e593f87987aee2d7c8280962e441a93fa07ff51b631443256c570fab77ec90a6e98d99900f5", 0x90}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) r10 = openat$cgroup_ro(r8, &(0x7f0000000540)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000000980)={r5, &(0x7f0000000580)='{]\x00', 0x0, &(0x7f0000000700)={@_ha_fsid={[0x0, 0x40]}, {0x81, 0x1, 0x5, 0x6}}, 0x80, &(0x7f0000000900)={@_ha_fsid}, &(0x7f0000000940)=0x9}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7c9beafbaa24978d, 0x5, &(0x7f0000000500)=ANY=[@ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r9, r10, 0x0, 0xffffffff000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003a80)={r10, 0x20, &(0x7f0000003a40)={&(0x7f0000001a40)=""/4096, 0x1000, 0x0, &(0x7f0000002a40)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000730109000200200095000000000000000000000000000000000000af568a02fe92c703152d1f9b1fe04ff4a00d44a113a37bad09fec1cbb140e16fae44f8506b577e81eaea488841f41d952e30e9cb3418c326d937a0e322dcd7e84e77e2b67b77ba4db01f96b2f8ac98ba8e287b5aa6474d6d593312ee1a96"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r13, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r13, 0x1, 0x70bd28, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 6.077119222s ago: executing program 3 (id=6117): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @local}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "0000650381c66e54", "27c8291a0f479e020000002cb3237cb1", '\x00', "38cb8a873cfcabba"}, 0x28) shutdown(r3, 0x1) pselect6(0x40, &(0x7f0000000200)={0x9, 0x8, 0xc42, 0x8, 0x6, 0x7, 0x8000000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(r6, 0x0, 0x24000034) close(0x3) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) close(0x4) 3.789235688s ago: executing program 4 (id=6132): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a80204000000000471f000014000200fe8000000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.652621276s ago: executing program 4 (id=6133): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000001140)=@req3={0x10000, 0x5, 0x1ff, 0x8, 0x3, 0x10008, 0x9}, 0x35) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r4, 0x0, 0x20000000}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000001100)=0x9, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x10000, 0x1003}) openat$cgroup_ro(r7, &(0x7f0000001080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket(0x2b, 0x1, 0x1) r8 = socket$inet6(0xa, 0x805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r8, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000001180)=0x800001, 0x4) bind$inet6(r11, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) 2.824495368s ago: executing program 0 (id=6140): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0x4}, 0x38) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) (async) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480080002400000001208000140"], 0xa4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274000500"], 0x4c}}, 0x2) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000906010800000000000000191c0000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044880}, 0xc010) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/27, 0x1b}], 0x2}, 0x20) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3221}, 0x1c) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000003c00090122bd700800000000020000000800030047000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a140000001100010000000000000000000200000aead323"], 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x24000c80) 2.632507144s ago: executing program 0 (id=6141): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4, 0x2}}, 0x1a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x0, 0x1000000, 0xffffffff, 0x220, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x220, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x9, 0x0, 0x39, 0xfffffffc, 0x2000000, 0x80000000, 0x3, 0x7, 0x0, 0x78}, {0x4000000000003}}}, @common=@ah={{0x30}, {[0x732, 0x6], 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0xfff9, 0x1}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f0000000440), &(0x7f0000000040)=@udp=r5}, 0x20) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1}, 0x7e}], 0x1, 0x40000007, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [], 0x0, [0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x800], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x2c, 0x1, r4, 0x3a}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000380)="7fd23dcc26e12e92f214ddc670327bdad583a698f6653d631b440179123355adbd26160e0dfdc703f47d0cb58978da384ebd560926c0195bfb497be3bc45d9bf48e0823514223a8022fb70264d5ec6078dafccffc6fd0192825cf39781797493497496f3a9476207332f8940e32eb5ddb233ef71ecad0fd4e50292dbf295536045fee54d4a5480b88f46efd9aa14bbe35c972164c655d5a133e920c76de64183572845de6eb9e279ab5d96fbeb89c8ecbd925ad2ffcd093ab04debd8c3b7522c45651821c06a4d8f1ae271e70515f92b6d24e20721ef8ae9f235c6ba715f97d15eea678b3c53ec9dfaa7e3c736d2", 0xee}, {&(0x7f0000000480)="8153ddf94c65e7a0bb2b613e4a786579afa6f6cd867fa193afced44bc786d1a224efd329d4c64ef56e12510e58ed39be810e72892016860be9fb6e4bd6e2e27e2e061d43906cb0002647", 0x4a}], 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$unix(0x1, 0x2, 0x0) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.627709948s ago: executing program 4 (id=6142): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) close(r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100cb000014000380100000800c00018006000100d123"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d03000000000000000013000000240009"], 0x38}}, 0x4) (async, rerun: 32) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={0x334, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xacf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x23e}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf8b7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcdf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb8be}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f89}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9bff}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2eb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20) (async) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xfffffffffffffef8, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r9, 0x20, &(0x7f00000006c0)={&(0x7f00000002c0)=""/157, 0x9d, 0x0, &(0x7f00000005c0)=""/254, 0xfe}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b03f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES64=r11, @ANYRES64=r8], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.208852626s ago: executing program 2 (id=6147): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) 2.190037381s ago: executing program 2 (id=6148): socket(0x11, 0x3, 0xfffffffe) (async) r0 = socket(0x11, 0x3, 0xfffffffe) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/112, 0x70}, {&(0x7f0000002380)=""/138, 0x8a}, {&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000002500)=""/86, 0x56}, {&(0x7f0000002580)=""/95, 0x5f}], 0x7, &(0x7f0000000100)=""/97, 0x61}, 0x40000022) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x400c800) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x400c800) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r2 = socket$unix(0x1, 0x5, 0x0) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0x2, 0x54494a593ddff583}, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x90}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a009cdc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x4048820) 1.69758471s ago: executing program 4 (id=6149): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2d, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xb, 0x0, @opaque="6046bc"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xd, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008060}, 0x4000800) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x78, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aa", 0x0, 0xf0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)=""/4102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x20048804) writev(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 1.572119182s ago: executing program 2 (id=6150): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r7, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r7, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r9, 0x0, 0x0}, 0x10) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="f5af24bd8b1d70000000000090ddde6c724e272d00307065000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket(0x2, 0x3, 0xff) (async) r13 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r13, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="8dbe9de29a1823474186f72aea11678235a71ee4828c75d76df69110ae2b2baa4ca3f238a147af68c7999e831fc3594436dea27d", 0x34}], 0x1, &(0x7f0000000480)=[@ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x48, 0x1, [{0x0, 0x4, "f615"}, {0x0, 0xf, "3f631fc9f44a80f6450b9ad6d2"}, {0x5, 0xc, "444d7d5c1bc8c347cf60"}, {0x1, 0x4, "e7b0"}, {0x7, 0x12, "01ef47faecbbaca28be6335e15c5816a"}, {0x1, 0xd, "b6c76e8090e563dc5b2305"}]}, @lsrr={0x83, 0xf, 0xfa, [@multicast2, @broadcast, @private=0xa010101]}, @noop, @lsrr={0x83, 0xb, 0x41, [@empty, @local]}, @end]}}}], 0x78}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x2, 0x20044000) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r13, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="60000000e937c3578a8c6ab101d864cc6b946851ca2912ddb1310e47a3cf297a1b8bf3f99bcb7f065e0fa0f4707df3a3a0f73a2a35c32f180c20afdb273bad7c86ac9967da80423d9bcd4340d75d1fed7142a0e3b1a74de7261b05c0bb5ccecbd52c43856c1e02ed12c3aad29a0ba4652e10b5cf5122a496e453279f25e095190e2a3cc7831f76bcf5bdb3335149b4ce85aabe45cd7615712e6d1a0e4d1747b3be2b3e0000000000000000000000000000dfba9f26d9b615195299b53519cfbbcc56ce2d9366922d19dc0187f7a0509591d34217372cf8", @ANYRES16=r14, @ANYBLOB="00012dbd7000ffdbdf250100000008000700", @ANYRES32=r3, @ANYBLOB="080008000000000005000d002900000014000c00ff0100000000000000000000000000010c00030002000000000000000c00030001000004000000000800080000000000"], 0x60}, 0x1, 0x0, 0x0, 0x100}, 0x20004001) r15 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r15, 0xc004743e, &(0x7f0000000180)=0x3) (async) ioctl$PPPIOCNEWUNIT(r15, 0xc004743e, &(0x7f0000000180)=0x3) 1.411774761s ago: executing program 2 (id=6151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x23, 0x6, 0x1000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x802, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x6}}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) r4 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e6", 0x1}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}], 0x20, 0x40081}, 0x10044080) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffd8e, 0x0}, 0x2002) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf8, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0x0, 0x800, "c133a12a91872b3730467c92a3a5050f02b82b"}, {0x48, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f"}, {0x30, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0x10, 0x110, 0x4}], 0x1a8}, 0x4000c010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002600090122bd7008f9ffffff02000000080003004700000008003f"], 0x24}, 0x1, 0x0, 0x0, 0x1000c953}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {{0xa, 0x0, 0x0, @remote, 0x8000}}}, 0x111) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) close(0x3) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f00000009c0)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0xfffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x98, r8, 0x1, 0xef, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x75, 0x33, @beacon={{{}, {0x4}, @broadcast, @device_a, @initial, {0x0, 0x200}}, 0x2, @random=0x1, 0x21, @val={0x0, 0x1b, @random="7440c59efb5fad6a65ee483ff4459e50161d4d5e47c942402869b1"}, @val={0x1, 0x3, [{0xc}, {0x16}, {0x673c9c640ba39b40}]}, @val={0x3, 0x1, 0xa5}, @val={0x4, 0x6, {0x6, 0x15, 0x3, 0x9}}, @val={0x6, 0x2, 0x7}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x1, 0x0, {0x9, 0x5, 0x0, 0xa, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x400, 0x7fc40706, 0x6}}, @void, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) pipe(&(0x7f0000000080)) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r10, &(0x7f0000002340), 0x3fffff7, 0x4000000000000) 1.394871971s ago: executing program 1 (id=6152): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@delnexthop={0x28, 0x69, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{0x8}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4801) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="810902000000000000000300000008000100000000001c00078018"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x11c, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x10a, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad7c1b9d", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a0500000100edff000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}, @IFLA_BR_STP_STATE={0x8, 0x32, 0x1}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x4}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) socket$nl_rdma(0x10, 0x3, 0x14) 1.316256085s ago: executing program 0 (id=6153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000e00000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001", @ANYRESOCT], 0x64}}, 0x80) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$x25(r3, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140005800f00010004"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x118, 0x21, 0x1, 0x40000004, 0x0, {{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@loopback, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@broadcast, 0x0, 0x2}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfffffde7, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r6, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="14000000100001fff5000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002800a00010071756f74610000001c000300000000f500006e8f58c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 1.063151172s ago: executing program 1 (id=6154): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x8, 0xc6, 0x22f, 0x8, @mcast1, @loopback, 0x10, 0x8000, 0xe, 0x7}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x3040, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb393) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, 0x0, 0x5a}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1800) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) socket$packet(0x11, 0x0, 0x300) 1.043506691s ago: executing program 0 (id=6155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000800200091112200000000009600000000000000"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9}, 0x94) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x800) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000eaff01060104000000000000000000000000140007800800064000000500010006000000050005000a00000005000400000000000900020073797a318000000011000300686173683a69702c6d61726b00"/96], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x27}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x260580e9}, 0x810) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 734.773594ms ago: executing program 0 (id=6156): socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)='u\x00', 0x2}], 0x1}, 0x2004a841) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) close(0x4) socket$nl_crypto(0x10, 0x3, 0x15) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) (async) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)='u\x00', 0x2}], 0x1}, 0x2004a841) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) (async) close(0x4) (async) 734.430353ms ago: executing program 2 (id=6157): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000104000000002ca8929e000002e96d01e80000000000000495009ef20000000075dfc3136a57107d1df5821233aea4424e28c1a710f131832309be2bc1ac1f7eba198c29b436b1597a29"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f6873720000000008000300030000001400038010000380"], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 732.126927ms ago: executing program 4 (id=6158): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)={r2, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) 637.123768ms ago: executing program 1 (id=6159): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800, 0x8e3a) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 636.090133ms ago: executing program 2 (id=6160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @local, @void, {@arp={0x806, @generic={0x601, 0x9b54, 0x6, 0x4, 0x9, @local, "22a15142", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, "890c3a87"}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e21, @empty}}) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x20008000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0303ba2e0500000000001280080001006b8cab26741003697400240002800800d500", @ANYRES32=0x0, @ANYBLOB="08000200ac14144005000900890000000600080017000000"], 0x50}, 0x1, 0x0, 0x0, 0x800c}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)}, 0x40000123) shutdown(r1, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0xffffffff, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x3}}, 0x10) socket$inet6(0xa, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2, 0x1}}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x2, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x800) 481.928349ms ago: executing program 1 (id=6161): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x1411, 0x8, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0) 407.55395ms ago: executing program 4 (id=6162): socket(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r1], 0x38}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x45, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23ad38a08862df02baf33ef122e"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) unshare(0x880) 244.966997ms ago: executing program 1 (id=6163): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f00000001c0)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x30, 0xffffffffffffffff, 0x180000000) mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x8010, r1, 0x4a9b6000) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@can_delroute={0x2c, 0x19, 0x4, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "abb9502da3b1b506"}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) 20.897094ms ago: executing program 0 (id=6164): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) sendto$inet6(r0, &(0x7f0000000000)="ea", 0x1, 0x10, &(0x7f00000001c0)={0xa, 0x4e22, 0xe1, @ipv4={'\x00', '\xff\xff', @local}, 0x50be}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001900)={0x0, 0x200, 0x5, 0x290, 0x8, 0x13, 0xffff, 0x8b, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x6, 0xd, 0x21, 0x1000, 0x7}}, &(0x7f00000019c0)=0xb0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000034000103000a00"/20], 0x14}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x2710], 0x48}}, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000500)=r7, 0x4) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r11, @ANYRESDEC=r7, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4040804}, 0x4008054) write$nci(r8, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 1 (id=6165): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0xc3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r2, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x8a00}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): : port 2(bridge_slave_1) entered disabled state [ 749.836637][T25800] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.863095][T25826] netlink: 'syz.1.4745': attribute type 30 has an invalid length. [ 749.890592][T25800] dummy0: left promiscuous mode [ 750.259795][T25823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.577678][T25800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.682111][T25800] 0·: left allmulticast mode [ 750.691910][T25800] hsr_slave_0: left allmulticast mode [ 750.701876][T25800] hsr_slave_1: left allmulticast mode [ 750.876001][T25800] geneve1: left promiscuous mode [ 750.895934][T25800] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 751.044449][T25800] vlan1: left allmulticast mode [ 751.049433][T25800] bond0: left allmulticast mode [ 751.070681][T25800] bond_slave_0: left allmulticast mode [ 751.090560][T25800] bond_slave_1: left allmulticast mode [ 751.167502][T25800] veth5: left allmulticast mode [ 751.179165][T25800] veth7: left allmulticast mode [ 751.190870][T25800] geneve2: left promiscuous mode [ 751.200970][T25800] geneve2: left allmulticast mode [ 751.214593][T25800] bond2: left allmulticast mode [ 751.264044][T25826] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 751.268064][ T3364] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.313712][ T3364] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.344219][ T3364] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.378371][ T3364] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.438368][T25839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4748'. [ 751.586353][T25843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4750'. [ 751.638273][T25845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4751'. [ 751.688837][T25849] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4750'. [ 751.730848][T25853] syzkaller0: entered promiscuous mode [ 751.758157][T25853] syzkaller0: entered allmulticast mode [ 751.824774][T25861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4751'. [ 751.838608][T25862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4756'. [ 751.855201][T25854] tipc: Enabled bearer , priority 0 [ 751.879133][T25862] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4756'. [ 751.895383][T25852] tipc: Resetting bearer [ 751.952776][T25852] tipc: Disabling bearer [ 752.252647][T25875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.309167][T25877] netlink: 'syz.1.4760': attribute type 1 has an invalid length. [ 752.434015][T25878] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 752.481755][T25878] bond7 (unregistering): Released all slaves [ 752.785493][T25901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4765'. [ 753.034413][T25913] syzkaller0: entered promiscuous mode [ 753.047712][T25913] syzkaller0: entered allmulticast mode [ 754.529491][T25951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.995324][T25913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.151934][T25960] netlink: 'syz.3.4776': attribute type 1 has an invalid length. [ 756.477051][T25981] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4779'. [ 756.508556][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4779'. [ 756.543720][T25981] netlink: 'syz.1.4779': attribute type 3 has an invalid length. [ 756.783639][T25995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4783'. [ 757.400187][T25982] geneve0: left promiscuous mode [ 757.409164][T25982] ip6tnl4: left allmulticast mode [ 757.418152][T25982] bridge3: left allmulticast mode [ 757.423976][T25982] bridge4: left allmulticast mode [ 757.435173][T25982] bond4: left allmulticast mode [ 757.542011][T25990] bond5: Unable to set up delay as MII monitoring is disabled [ 757.553275][T25990] bond5 (unregistering): Released all slaves [ 757.704421][ T48] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 757.716980][ T48] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.769099][T26012] 8021q: adding VLAN 0 to HW filter on device bond5 [ 757.777012][T26013] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4787'. [ 757.847519][ T48] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 757.886996][ T48] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.920583][ T48] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 757.970850][ T48] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.002912][ T48] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 758.029148][ T48] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.074706][T26027] netlink: 'syz.2.4790': attribute type 1 has an invalid length. [ 758.197758][T26027] bond3: option mode: invalid value (14) [ 758.212249][T26027] bond3 (unregistering): Released all slaves [ 758.269494][T26032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4792'. [ 758.342700][T26041] tipc: Enabled bearer , priority 0 [ 758.408096][T26029] tipc: Resetting bearer [ 758.486447][T26044] syzkaller0: entered promiscuous mode [ 758.505423][T26044] syzkaller0: entered allmulticast mode [ 758.550192][T26028] tipc: Resetting bearer [ 758.637149][T26028] tipc: Disabling bearer [ 758.861079][T26067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4800'. [ 759.048485][T26079] openvswitch: netlink: IP tunnel TTL not specified. [ 759.097068][T26081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4804'. [ 759.164407][T26081] batman_adv: batadv0: Adding interface: gretap1 [ 759.171211][T26081] batman_adv: batadv0: The MTU of interface gretap1 is too small (1414) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.199742][T26081] batman_adv: batadv0: Interface activated: gretap1 [ 759.305479][T26090] netlink: 'syz.0.4806': attribute type 13 has an invalid length. [ 759.321653][T26090] netlink: 'syz.0.4806': attribute type 17 has an invalid length. [ 759.551383][T26090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.561427][T26104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4807'. [ 759.592154][T26090] dummy0: left promiscuous mode [ 759.614796][T26090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.812932][T26111] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 759.830064][T26111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4810'. [ 759.835129][T26090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 759.851993][T26113] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4809'. [ 759.881255][T26090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 759.907089][T26090] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 760.072985][T26118] bridge_slave_1: left promiscuous mode [ 760.082363][T26118] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.117084][T26118] bridge_slave_0: left promiscuous mode [ 760.140766][T26118] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.482390][T26147] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 760.544193][T26151] netlink: 'syz.3.4814': attribute type 12 has an invalid length. [ 760.940716][T26172] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 761.627884][T26202] lo speed is unknown, defaulting to 1000 [ 761.684194][T26202] lo speed is unknown, defaulting to 1000 [ 762.276110][T26236] __nla_validate_parse: 13 callbacks suppressed [ 762.276133][T26236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4837'. [ 762.583733][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4841'. [ 762.884851][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4848'. [ 762.912136][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4848'. [ 762.949848][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4848'. [ 763.411043][T26282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4854'. [ 763.518297][T26285] netlink: 'syz.2.4853': attribute type 1 has an invalid length. [ 763.564842][T26279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4853'. [ 763.658072][T26295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4857'. [ 764.587755][T26343] netlink: 'syz.2.4871': attribute type 2 has an invalid length. [ 764.605103][T26338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4868'. [ 764.614489][T26343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4871'. [ 764.846286][T26349] ip6tnl3: entered allmulticast mode [ 765.020918][T26358] bridge_slave_0: left allmulticast mode [ 765.040635][T26358] bridge_slave_0: left promiscuous mode [ 765.054920][T26358] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.078636][T26359] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 765.228719][T26358] bridge_slave_1: left allmulticast mode [ 765.246300][T26358] bridge_slave_1: left promiscuous mode [ 765.262845][T26358] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.287960][T26358] bond0: (slave bond_slave_0): Releasing backup interface [ 765.312934][T26358] bond0: (slave bond_slave_1): Releasing backup interface [ 765.325015][T26358] team0: Port device team_slave_0 removed [ 765.333105][T26358] team0: Port device team_slave_1 removed [ 765.339610][T26358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.349054][T26358] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 765.405140][T26363] sit0: Master is either lo or non-ether device [ 766.679261][T26421] tipc: Enabled bearer , priority 0 [ 766.698043][T26423] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 766.859117][T26421] syzkaller0: entered promiscuous mode [ 766.880541][T26421] syzkaller0: entered allmulticast mode [ 766.897511][T26421] tipc: Resetting bearer [ 767.355106][T26436] lo speed is unknown, defaulting to 1000 [ 767.367539][T26436] lo speed is unknown, defaulting to 1000 [ 767.418464][T26464] __nla_validate_parse: 10 callbacks suppressed [ 767.418484][T26464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4904'. [ 767.514476][T26464] 8021q: adding VLAN 0 to HW filter on device bond6 [ 767.536874][T26419] tipc: Resetting bearer [ 767.755827][ T5641] block nbd6: Receive control failed (result -32) [ 768.844770][T26500] netlink: 'syz.0.4909': attribute type 2 has an invalid length. [ 768.884814][T26500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4909'. [ 769.976829][T26419] tipc: Disabling bearer [ 770.173214][T26509] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4910'. [ 770.244817][T26514] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4911'. [ 770.281322][T26507] lo speed is unknown, defaulting to 1000 [ 770.302866][T26514] netlink: 'syz.1.4911': attribute type 1 has an invalid length. [ 770.332828][T26507] lo speed is unknown, defaulting to 1000 [ 770.751061][T26532] pimreg1: renamed from bridge0 [ 770.776339][T26532] pimreg1: entered allmulticast mode [ 770.792402][T26532] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 770.827399][T26514] netlink: 'syz.1.4911': attribute type 4 has an invalid length. [ 770.879339][T26540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4917'. [ 771.307258][T26556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4920'. [ 771.419139][T26563] Cannot find del_set index 4 as target [ 771.511474][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 771.530923][T26568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 771.556006][T26567] batman_adv: batadv0: Removing interface: vlan0 [ 771.570191][T26571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4925'. [ 771.592297][T26570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4925'. [ 772.171263][T26599] netlink: 'syz.3.4931': attribute type 12 has an invalid length. [ 772.453279][T26615] bridge0: port 1(vlan3) entered blocking state [ 772.486551][T26615] bridge0: port 1(vlan3) entered disabled state [ 772.524782][T26615] vlan3: entered allmulticast mode [ 772.552540][T26615] geneve0: entered allmulticast mode [ 772.771890][T26637] FAULT_INJECTION: forcing a failure. [ 772.771890][T26637] name failslab, interval 1, probability 0, space 0, times 0 [ 772.802736][T26637] CPU: 1 UID: 0 PID: 26637 Comm: syz.3.4942 Not tainted syzkaller #0 PREEMPT(full) [ 772.802765][T26637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 772.802778][T26637] Call Trace: [ 772.802787][T26637] [ 772.802796][T26637] dump_stack_lvl+0xe8/0x150 [ 772.802832][T26637] should_fail_ex+0x40c/0x560 [ 772.802862][T26637] should_failslab+0xa8/0x100 [ 772.802893][T26637] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 772.802919][T26637] ? local_lock_release+0x9c/0x160 [ 772.802949][T26637] ? __alloc_skb+0x1d7/0x7a0 [ 772.802974][T26637] ? __alloc_skb+0x1d7/0x7a0 [ 772.803008][T26637] __alloc_skb+0x1d7/0x7a0 [ 772.803040][T26637] skb_copy+0x19d/0x870 [ 772.803066][T26637] ? stack_depot_save_flags+0x33/0x800 [ 772.803127][T26637] tipc_buf_append+0x79a/0xa50 [ 772.803164][T26637] ? __pfx_tipc_buf_append+0x10/0x10 [ 772.803198][T26637] ? skb_clone+0x246/0x3a0 [ 772.803221][T26637] tipc_msg_reassemble+0x230/0x3b0 [ 772.803259][T26637] tipc_mcast_xmit+0x254/0x19e0 [ 772.803317][T26637] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 772.803346][T26637] ? _copy_from_iter+0x21b/0x1660 [ 772.803372][T26637] ? rcu_is_watching+0x15/0xb0 [ 772.803412][T26637] ? trace_kmalloc+0x2a/0xf0 [ 772.803443][T26637] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 772.803471][T26637] ? __pfx__copy_from_iter+0x10/0x10 [ 772.803506][T26637] ? __alloc_skb+0x52c/0x7a0 [ 772.803534][T26637] ? skb_put+0x112/0x210 [ 772.803562][T26637] ? tipc_msg_build+0xb29/0xf50 [ 772.803599][T26637] ? tipc_msg_build+0xb9d/0xf50 [ 772.803652][T26637] ? net_generic+0x1e/0x240 [ 772.803678][T26637] ? net_generic+0x1e/0x240 [ 772.803707][T26637] ? tipc_group_bc_cong+0x15f/0x210 [ 772.803734][T26637] tipc_send_group_bcast+0x80d/0xad0 [ 772.803787][T26637] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 772.803828][T26637] ? process_measurement+0x7b2/0x1c10 [ 772.803868][T26637] ? __pfx_woken_wake_function+0x10/0x10 [ 772.803898][T26637] ? kasan_quarantine_put+0xbb/0x1f0 [ 772.803930][T26637] __tipc_sendmsg+0x313/0x2b60 [ 772.803978][T26637] ? __pfx___tipc_sendmsg+0x10/0x10 [ 772.804006][T26637] ? unwind_next_frame+0x8f/0x2550 [ 772.804029][T26637] ? aa_label_sk_perm+0x532/0x6e0 [ 772.804060][T26637] ? __lock_acquire+0x683/0x2cf0 [ 772.804095][T26637] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 772.804134][T26637] ? __lock_acquire+0x683/0x2cf0 [ 772.804166][T26637] ? aa_file_perm+0x18b/0x15f0 [ 772.804215][T26637] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 772.804243][T26637] ? tipc_sendmsg+0x47/0x70 [ 772.804274][T26637] ? __local_bh_enable_ip+0xd0/0x130 [ 772.804303][T26637] tipc_sendmsg+0x55/0x70 [ 772.804333][T26637] ? __pfx_tipc_sendmsg+0x10/0x10 [ 772.804379][T26637] sock_sendmsg_nosec+0x13a/0x180 [ 772.804428][T26637] sock_write_iter+0x2de/0x3e0 [ 772.804456][T26637] ? __pfx_sock_write_iter+0x10/0x10 [ 772.804489][T26637] ? bpf_lsm_file_permission+0x9/0x20 [ 772.804514][T26637] ? security_file_permission+0x75/0x260 [ 772.804552][T26637] vfs_write+0x612/0xba0 [ 772.804595][T26637] ? __pfx_vfs_write+0x10/0x10 [ 772.804639][T26637] ? __fget_files+0x2a/0x420 [ 772.804678][T26637] ksys_write+0x150/0x270 [ 772.804713][T26637] ? __pfx_ksys_write+0x10/0x10 [ 772.804755][T26637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.804780][T26637] do_syscall_64+0x174/0x580 [ 772.804810][T26637] ? trace_irq_disable+0x3b/0x140 [ 772.804837][T26637] ? clear_bhb_loop+0x40/0x90 [ 772.804864][T26637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.804887][T26637] RIP: 0033:0x7efe80b9de59 [ 772.804908][T26637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.804927][T26637] RSP: 002b:00007efe81981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 772.804949][T26637] RAX: ffffffffffffffda RBX: 00007efe80e26090 RCX: 00007efe80b9de59 [ 772.804966][T26637] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000005 [ 772.804980][T26637] RBP: 00007efe81981090 R08: 0000000000000000 R09: 0000000000000000 [ 772.804994][T26637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 772.805007][T26637] R13: 00007efe80e26128 R14: 00007efe80e26090 R15: 00007ffc7b4180f8 [ 772.805043][T26637] [ 772.808172][T26637] tipc: Failed do clone local mcast rcv buffer [ 773.236461][T26645] netlink: 'syz.0.4945': attribute type 8 has an invalid length. [ 773.267455][T26645] __nla_validate_parse: 10 callbacks suppressed [ 773.267475][T26645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4945'. [ 773.334884][T26645] bond0: entered promiscuous mode [ 773.355258][T26645] gretap0: entered promiscuous mode [ 773.365323][T26645] bond0: left promiscuous mode [ 773.379680][T26645] gretap0: left promiscuous mode [ 773.527603][T26658] syzkaller0: entered promiscuous mode [ 773.544655][T26658] syzkaller0: entered allmulticast mode [ 773.617953][T26660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.958320][T26678] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4953'. [ 773.988192][T26678] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4953'. [ 774.146949][T26692] netlink: 'syz.4.4958': attribute type 1 has an invalid length. [ 774.203472][T26699] netlink: 'syz.1.4959': attribute type 1 has an invalid length. [ 774.228514][T26692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 774.274773][T26692] vlan2: entered allmulticast mode [ 774.285790][T26692] bond5: entered allmulticast mode [ 774.308318][T26692] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4958'. [ 774.393665][T26692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.440072][T26708] FAULT_INJECTION: forcing a failure. [ 774.440072][T26708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.454524][T26708] CPU: 1 UID: 0 PID: 26708 Comm: syz.3.4960 Not tainted syzkaller #0 PREEMPT(full) [ 774.454552][T26708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 774.454565][T26708] Call Trace: [ 774.454573][T26708] [ 774.454582][T26708] dump_stack_lvl+0xe8/0x150 [ 774.454626][T26708] should_fail_ex+0x40c/0x560 [ 774.454656][T26708] _copy_from_iter+0x1d3/0x1660 [ 774.454681][T26708] ? rcu_is_watching+0x15/0xb0 [ 774.454712][T26708] ? trace_kmalloc+0x2a/0xf0 [ 774.454741][T26708] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 774.454766][T26708] ? __pfx__copy_from_iter+0x10/0x10 [ 774.454799][T26708] ? __alloc_skb+0x52c/0x7a0 [ 774.454828][T26708] ? skb_put+0x112/0x210 [ 774.454855][T26708] ? tipc_msg_build+0xb29/0xf50 [ 774.454889][T26708] tipc_msg_build+0x8b6/0xf50 [ 774.454929][T26708] ? __pfx_tipc_msg_build+0x10/0x10 [ 774.454967][T26708] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 774.454993][T26708] ? tipc_group_bc_cong+0x15f/0x210 [ 774.455038][T26708] tipc_send_group_bcast+0x7db/0xad0 [ 774.455087][T26708] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 774.455130][T26708] ? __pfx_woken_wake_function+0x10/0x10 [ 774.455157][T26708] ? __schedule+0x17ef/0x56c0 [ 774.455193][T26708] __tipc_sendmsg+0x313/0x2b60 [ 774.455243][T26708] ? __pfx___tipc_sendmsg+0x10/0x10 [ 774.455274][T26708] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 774.455305][T26708] ? aa_label_sk_perm+0x532/0x6e0 [ 774.455337][T26708] ? __lock_acquire+0x683/0x2cf0 [ 774.455375][T26708] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 774.455417][T26708] ? __lock_acquire+0x683/0x2cf0 [ 774.455448][T26708] ? aa_file_perm+0x18b/0x15f0 [ 774.455497][T26708] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 774.455538][T26708] ? tipc_sendmsg+0x47/0x70 [ 774.455570][T26708] ? __local_bh_enable_ip+0xd0/0x130 [ 774.455597][T26708] tipc_sendmsg+0x55/0x70 [ 774.455634][T26708] ? __pfx_tipc_sendmsg+0x10/0x10 [ 774.455661][T26708] sock_sendmsg_nosec+0x13a/0x180 [ 774.455687][T26708] sock_write_iter+0x2de/0x3e0 [ 774.455711][T26708] ? __pfx_sock_write_iter+0x10/0x10 [ 774.455741][T26708] ? bpf_lsm_file_permission+0x9/0x20 [ 774.455763][T26708] ? security_file_permission+0x75/0x260 [ 774.455799][T26708] vfs_write+0x612/0xba0 [ 774.455839][T26708] ? __pfx_vfs_write+0x10/0x10 [ 774.455880][T26708] ? __fget_files+0x2a/0x420 [ 774.455916][T26708] ksys_write+0x150/0x270 [ 774.455948][T26708] ? __pfx_ksys_write+0x10/0x10 [ 774.455986][T26708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.456009][T26708] do_syscall_64+0x174/0x580 [ 774.456037][T26708] ? trace_irq_disable+0x3b/0x140 [ 774.456063][T26708] ? clear_bhb_loop+0x40/0x90 [ 774.456088][T26708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.456107][T26708] RIP: 0033:0x7efe80b9de59 [ 774.456127][T26708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.456145][T26708] RSP: 002b:00007efe81981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 774.456166][T26708] RAX: ffffffffffffffda RBX: 00007efe80e26090 RCX: 00007efe80b9de59 [ 774.456180][T26708] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000005 [ 774.456193][T26708] RBP: 00007efe81981090 R08: 0000000000000000 R09: 0000000000000000 [ 774.456205][T26708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 774.456217][T26708] R13: 00007efe80e26128 R14: 00007efe80e26090 R15: 00007ffc7b4180f8 [ 774.456249][T26708] [ 774.493115][T26692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.939958][T26718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4965'. [ 774.950885][T26718] netlink: 'syz.1.4965': attribute type 11 has an invalid length. [ 774.976494][T10810] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.976678][T26718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4965'. [ 774.994863][T26718] netlink: 'syz.1.4965': attribute type 11 has an invalid length. [ 774.995922][T10810] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.021151][T10810] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.043495][T10810] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.069275][T26721] netlink: 'syz.2.4966': attribute type 4 has an invalid length. [ 775.086231][T26721] netlink: 'syz.2.4966': attribute type 8 has an invalid length. [ 775.110440][T26721] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4966'. [ 775.138353][T26721] netlink: zone id is out of range [ 775.147097][T26721] netlink: zone id is out of range [ 775.153100][T26721] netlink: zone id is out of range [ 775.158990][T26721] netlink: zone id is out of range [ 775.164617][T26721] netlink: zone id is out of range [ 775.170043][T26721] netlink: zone id is out of range [ 775.176428][T26721] netlink: zone id is out of range [ 775.182960][T26721] netlink: zone id is out of range [ 775.188212][T26721] netlink: zone id is out of range [ 775.434893][T26733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4971'. [ 775.552206][T26733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4971'. [ 775.681246][T26746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4973'. [ 775.699252][T26744] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 775.752490][T26750] bond7: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 775.780059][T26750] bond7 (unregistering): Released all slaves [ 776.148091][T26769] FAULT_INJECTION: forcing a failure. [ 776.148091][T26769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.173913][T26769] CPU: 1 UID: 0 PID: 26769 Comm: syz.1.4979 Not tainted syzkaller #0 PREEMPT(full) [ 776.173939][T26769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 776.173951][T26769] Call Trace: [ 776.173958][T26769] [ 776.173967][T26769] dump_stack_lvl+0xe8/0x150 [ 776.174009][T26769] should_fail_ex+0x40c/0x560 [ 776.174035][T26769] _copy_from_iter+0x1d3/0x1660 [ 776.174060][T26769] ? rcu_is_watching+0x15/0xb0 [ 776.174089][T26769] ? trace_kmalloc+0x2a/0xf0 [ 776.174117][T26769] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 776.174142][T26769] ? __pfx__copy_from_iter+0x10/0x10 [ 776.174172][T26769] ? __alloc_skb+0x52c/0x7a0 [ 776.174197][T26769] ? skb_put+0x112/0x210 [ 776.174222][T26769] ? tipc_msg_build+0xb29/0xf50 [ 776.174256][T26769] tipc_msg_build+0x8b6/0xf50 [ 776.174283][T26769] ? register_lock_class+0x31/0x2e0 [ 776.174319][T26769] ? __pfx_tipc_msg_build+0x10/0x10 [ 776.174351][T26769] ? net_generic+0x1e/0x240 [ 776.174401][T26769] ? net_generic+0x1e/0x240 [ 776.174428][T26769] ? tipc_group_bc_cong+0x15f/0x210 [ 776.174454][T26769] tipc_send_group_bcast+0x7db/0xad0 [ 776.174501][T26769] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 776.174529][T26769] ? process_measurement+0x7b2/0x1c10 [ 776.174570][T26769] ? __pfx_woken_wake_function+0x10/0x10 [ 776.174598][T26769] ? kasan_quarantine_put+0xbb/0x1f0 [ 776.174631][T26769] __tipc_sendmsg+0x313/0x2b60 [ 776.174679][T26769] ? __pfx___tipc_sendmsg+0x10/0x10 [ 776.174708][T26769] ? unwind_next_frame+0x8f/0x2550 [ 776.174731][T26769] ? aa_label_sk_perm+0x532/0x6e0 [ 776.174761][T26769] ? __lock_acquire+0x683/0x2cf0 [ 776.174794][T26769] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 776.174833][T26769] ? __lock_acquire+0x683/0x2cf0 [ 776.174865][T26769] ? aa_file_perm+0x18b/0x15f0 [ 776.174912][T26769] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 776.174939][T26769] ? tipc_sendmsg+0x47/0x70 [ 776.174976][T26769] ? __local_bh_enable_ip+0xd0/0x130 [ 776.175005][T26769] tipc_sendmsg+0x55/0x70 [ 776.175034][T26769] ? __pfx_tipc_sendmsg+0x10/0x10 [ 776.175060][T26769] sock_sendmsg_nosec+0x13a/0x180 [ 776.175088][T26769] sock_write_iter+0x2de/0x3e0 [ 776.175113][T26769] ? __pfx_sock_write_iter+0x10/0x10 [ 776.175143][T26769] ? bpf_lsm_file_permission+0x9/0x20 [ 776.175165][T26769] ? security_file_permission+0x75/0x260 [ 776.175202][T26769] vfs_write+0x612/0xba0 [ 776.175241][T26769] ? __pfx_vfs_write+0x10/0x10 [ 776.175287][T26769] ? __fget_files+0x2a/0x420 [ 776.175322][T26769] ksys_write+0x150/0x270 [ 776.175355][T26769] ? __pfx_ksys_write+0x10/0x10 [ 776.175394][T26769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.175417][T26769] do_syscall_64+0x174/0x580 [ 776.175445][T26769] ? trace_irq_disable+0x3b/0x140 [ 776.175470][T26769] ? clear_bhb_loop+0x40/0x90 [ 776.175496][T26769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.175516][T26769] RIP: 0033:0x7f44b479de59 [ 776.175536][T26769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.175553][T26769] RSP: 002b:00007f44b29d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 776.175574][T26769] RAX: ffffffffffffffda RBX: 00007f44b4a26090 RCX: 00007f44b479de59 [ 776.175599][T26769] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000005 [ 776.175611][T26769] RBP: 00007f44b29d5090 R08: 0000000000000000 R09: 0000000000000000 [ 776.175622][T26769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 776.175650][T26769] R13: 00007f44b4a26128 R14: 00007f44b4a26090 R15: 00007ffed88ccc98 [ 776.175683][T26769] [ 776.834867][T26800] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 776.896854][T26801] veth1_to_team: entered promiscuous mode [ 776.909397][T26801] vlan2: entered promiscuous mode [ 776.996743][T26809] netlink: 'syz.2.4990': attribute type 1 has an invalid length. [ 777.067075][T26809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 777.101609][T26813] netlink: 'syz.1.4991': attribute type 1 has an invalid length. [ 777.139888][T26814] bond3: (slave veth13): Enslaving as an active interface with a down link [ 777.240548][T26813] 8021q: adding VLAN 0 to HW filter on device bond7 [ 777.311171][T26809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.326776][T26809] bond3: (slave batadv0): making interface the new active one [ 777.337529][T26809] batadv0: entered promiscuous mode [ 777.343517][T26809] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 777.394932][T26821] bond7: (slave ip6gretap1): making interface the new active one [ 777.416755][T26821] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 777.523767][T26832] tipc: Enabled bearer , priority 0 [ 777.553925][T26832] syzkaller0: entered promiscuous mode [ 777.572492][T26832] syzkaller0: entered allmulticast mode [ 777.604604][T26832] tipc: Resetting bearer [ 777.622510][T26831] tipc: Resetting bearer [ 777.687696][T26831] tipc: Disabling bearer [ 777.894613][T26851] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 777.928814][T26857] FAULT_INJECTION: forcing a failure. [ 777.928814][T26857] name failslab, interval 1, probability 0, space 0, times 0 [ 777.943352][T26857] CPU: 0 UID: 0 PID: 26857 Comm: syz.3.5001 Not tainted syzkaller #0 PREEMPT(full) [ 777.943386][T26857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 777.943401][T26857] Call Trace: [ 777.943410][T26857] [ 777.943421][T26857] dump_stack_lvl+0xe8/0x150 [ 777.943461][T26857] should_fail_ex+0x40c/0x560 [ 777.943494][T26857] should_failslab+0xa8/0x100 [ 777.943529][T26857] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 777.943561][T26857] ? __alloc_skb+0x1d7/0x7a0 [ 777.943590][T26857] ? __alloc_skb+0x1d7/0x7a0 [ 777.943621][T26857] ? tipc_own_addr+0x45/0x2a0 [ 777.943648][T26857] __alloc_skb+0x1d7/0x7a0 [ 777.943684][T26857] tipc_msg_create+0x4c/0x4c0 [ 777.943716][T26857] ? tipc_own_addr+0x45/0x2a0 [ 777.943736][T26857] ? tipc_own_addr+0x45/0x2a0 [ 777.943762][T26857] tipc_group_proto_xmit+0xce/0x790 [ 777.943793][T26857] tipc_group_filter_msg+0xba9/0x1630 [ 777.943863][T26857] tipc_sk_filter_rcv+0x3003/0x3210 [ 777.943897][T26857] ? __lock_acquire+0x683/0x2cf0 [ 777.943934][T26857] ? is_bpf_text_address+0x26/0x2b0 [ 777.943974][T26857] ? __lock_acquire+0x683/0x2cf0 [ 777.944003][T26857] ? tipc_sk_lookup+0xb5/0x920 [ 777.944036][T26857] ? tipc_sk_lookup+0xb5/0x920 [ 777.944059][T26857] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 777.944099][T26857] ? tipc_sk_rcv+0x73e/0x2b50 [ 777.944131][T26857] tipc_sk_rcv+0x877/0x2b50 [ 777.944157][T26857] ? __kasan_slab_free+0x5c/0x80 [ 777.944184][T26857] ? tipc_mcast_xmit+0x1384/0x19e0 [ 777.944208][T26857] ? tipc_send_group_bcast+0x80d/0xad0 [ 777.944235][T26857] ? __tipc_sendmsg+0x313/0x2b60 [ 777.944263][T26857] ? sock_write_iter+0x2de/0x3e0 [ 777.944283][T26857] ? vfs_write+0x612/0xba0 [ 777.944340][T26857] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 777.944400][T26857] ? tipc_sk_mcast_rcv+0xdff/0xf20 [ 777.944427][T26857] ? __local_bh_enable_ip+0xd0/0x130 [ 777.944458][T26857] tipc_sk_mcast_rcv+0xe0e/0xf20 [ 777.944482][T26857] ? __lock_acquire+0x683/0x2cf0 [ 777.944526][T26857] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 777.944548][T26857] ? tipc_buf_append+0x70a/0xa50 [ 777.944587][T26857] ? tipc_mcast_xmit+0x11f3/0x19e0 [ 777.944624][T26857] ? tipc_mcast_xmit+0x11f3/0x19e0 [ 777.944658][T26857] tipc_mcast_xmit+0x1384/0x19e0 [ 777.944702][T26857] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 777.944732][T26857] ? _copy_from_iter+0x21b/0x1660 [ 777.944759][T26857] ? rcu_is_watching+0x15/0xb0 [ 777.944794][T26857] ? trace_kmalloc+0x2a/0xf0 [ 777.944825][T26857] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 777.944863][T26857] ? __pfx__copy_from_iter+0x10/0x10 [ 777.944900][T26857] ? __alloc_skb+0x52c/0x7a0 [ 777.944928][T26857] ? skb_put+0x112/0x210 [ 777.944958][T26857] ? tipc_msg_build+0xb29/0xf50 [ 777.944996][T26857] ? tipc_msg_build+0xb9d/0xf50 [ 777.945052][T26857] ? net_generic+0x1e/0x240 [ 777.945078][T26857] ? net_generic+0x1e/0x240 [ 777.945109][T26857] ? tipc_group_bc_cong+0x15f/0x210 [ 777.945137][T26857] tipc_send_group_bcast+0x80d/0xad0 [ 777.945191][T26857] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 777.945220][T26857] ? process_measurement+0x7b2/0x1c10 [ 777.945264][T26857] ? __pfx_woken_wake_function+0x10/0x10 [ 777.945295][T26857] ? kasan_quarantine_put+0xbb/0x1f0 [ 777.945329][T26857] __tipc_sendmsg+0x313/0x2b60 [ 777.945380][T26857] ? __pfx___tipc_sendmsg+0x10/0x10 [ 777.945410][T26857] ? unwind_next_frame+0x8f/0x2550 [ 777.945435][T26857] ? aa_label_sk_perm+0x532/0x6e0 [ 777.945478][T26857] ? __lock_acquire+0x683/0x2cf0 [ 777.945513][T26857] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 777.945552][T26857] ? __lock_acquire+0x683/0x2cf0 [ 777.945584][T26857] ? aa_file_perm+0x18b/0x15f0 [ 777.945634][T26857] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 777.945662][T26857] ? tipc_sendmsg+0x47/0x70 [ 777.945693][T26857] ? __local_bh_enable_ip+0xd0/0x130 [ 777.945720][T26857] tipc_sendmsg+0x55/0x70 [ 777.945750][T26857] ? __pfx_tipc_sendmsg+0x10/0x10 [ 777.945777][T26857] sock_sendmsg_nosec+0x13a/0x180 [ 777.945806][T26857] sock_write_iter+0x2de/0x3e0 [ 777.945838][T26857] ? __pfx_sock_write_iter+0x10/0x10 [ 777.945870][T26857] ? bpf_lsm_file_permission+0x9/0x20 [ 777.945893][T26857] ? security_file_permission+0x75/0x260 [ 777.945929][T26857] vfs_write+0x612/0xba0 [ 777.945969][T26857] ? __pfx_vfs_write+0x10/0x10 [ 777.946011][T26857] ? __fget_files+0x2a/0x420 [ 777.946065][T26857] ksys_write+0x150/0x270 [ 777.946101][T26857] ? __pfx_ksys_write+0x10/0x10 [ 777.946173][T26857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.946197][T26857] do_syscall_64+0x174/0x580 [ 777.946229][T26857] ? trace_irq_disable+0x3b/0x140 [ 777.946256][T26857] ? clear_bhb_loop+0x40/0x90 [ 777.946284][T26857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.946318][T26857] RIP: 0033:0x7efe80b9de59 [ 777.946338][T26857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.946356][T26857] RSP: 002b:00007efe81981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 777.946378][T26857] RAX: ffffffffffffffda RBX: 00007efe80e26090 RCX: 00007efe80b9de59 [ 777.946393][T26857] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000005 [ 777.946405][T26857] RBP: 00007efe81981090 R08: 0000000000000000 R09: 0000000000000000 [ 777.946418][T26857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 777.946429][T26857] R13: 00007efe80e26128 R14: 00007efe80e26090 R15: 00007ffc7b4180f8 [ 777.946463][T26857] [ 778.670708][T26865] tipc: Enabled bearer , priority 0 [ 778.709760][T26865] syzkaller0: entered promiscuous mode [ 778.744522][T26865] syzkaller0: entered allmulticast mode [ 778.822753][T26865] net_ratelimit: 4 callbacks suppressed [ 778.822772][T26865] ipvlan1: mtu less than device minimum [ 778.882325][T26862] tipc: Resetting bearer [ 778.932140][T26862] tipc: Disabling bearer [ 778.964066][T26885] nbd: nbd4 already in use [ 779.763186][T26926] __nla_validate_parse: 8 callbacks suppressed [ 779.763209][T26926] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5024'. [ 779.821280][T26926] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5024'. [ 779.853418][T26926] netlink: 'syz.1.5024': attribute type 5 has an invalid length. [ 779.870448][T26926] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5024'. [ 780.037754][T26942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.433652][T26962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5033'. [ 780.680200][T26972] syzkaller0: entered promiscuous mode [ 780.694756][T26972] syzkaller0: entered allmulticast mode [ 780.737475][T26976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5039'. [ 780.827072][T26979] macsec0: entered promiscuous mode [ 780.962361][T26982] netlink: 'syz.0.5043': attribute type 2 has an invalid length. [ 780.985672][T26982] netlink: 'syz.0.5043': attribute type 8 has an invalid length. [ 780.996413][T26982] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5043'. [ 781.043881][T26982] netlink: 'syz.0.5043': attribute type 2 has an invalid length. [ 781.057034][T26988] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5044'. [ 781.085604][T26982] netlink: 'syz.0.5043': attribute type 8 has an invalid length. [ 781.092019][T26988] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5044'. [ 781.104390][T26990] netlink: 'syz.0.5043': attribute type 32 has an invalid length. [ 781.112860][T26982] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5043'. [ 781.726843][T27028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5052'. [ 781.746870][T27035] tipc: Enabled bearer , priority 0 [ 781.763445][T27036] syzkaller0: entered promiscuous mode [ 781.779083][T27036] syzkaller0: entered allmulticast mode [ 781.858265][T27035] tipc: Resetting bearer [ 781.908274][T27034] tipc: Resetting bearer [ 781.965024][T27048] netlink: 'syz.4.5057': attribute type 2 has an invalid length. [ 781.978085][T27034] tipc: Disabling bearer [ 781.993628][T27043] netdevsim netdevsim4 €Â: renamed from netdevsim0 [ 782.027693][T27048] : entered promiscuous mode [ 782.931205][T27097] lo speed is unknown, defaulting to 1000 [ 782.951846][T27097] lo speed is unknown, defaulting to 1000 [ 783.207311][T27116] netlink: 'syz.0.5079': attribute type 12 has an invalid length. [ 783.283531][T27119] gretap1: entered allmulticast mode [ 783.359820][T27122] netlink: 'syz.4.5081': attribute type 5 has an invalid length. [ 783.726696][T27147] 8021q: adding VLAN 0 to HW filter on device bond4 [ 783.734436][T27150] bridge0: port 1(veth1_to_bridge) entered blocking state [ 783.750944][T27150] bridge0: port 1(veth1_to_bridge) entered disabled state [ 783.775046][T27150] veth1_to_bridge: entered allmulticast mode [ 783.802193][T27150] veth1_to_bridge: entered promiscuous mode [ 783.830709][T27150] bridge0: port 1(veth1_to_bridge) entered blocking state [ 783.837990][T27150] bridge0: port 1(veth1_to_bridge) entered listening state [ 783.900510][T27147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.911388][T27147] bond4: (slave bond0): Enslaving as an active interface with an up link [ 783.921162][T27154] bond4: entered promiscuous mode [ 783.926881][T27154] bond0: entered promiscuous mode [ 783.954998][T27154] bond4: entered allmulticast mode [ 783.975373][T27154] bond0: entered allmulticast mode [ 784.037622][T27158] netlink: 'syz.1.5088': attribute type 25 has an invalid length. [ 784.041065][T27152] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 784.078394][T27152] bond9 (unregistering): Released all slaves [ 784.191503][T27166] bond3: (slave batadv0): Releasing active interface [ 784.238060][T27166] batadv0 (unregistering): left promiscuous mode [ 784.616971][T27184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.851928][ T9182] IPVS: starting estimator thread 0... [ 784.960676][T27200] IPVS: using max 35 ests per chain, 84000 per kthread [ 784.971542][T27202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.122664][T27217] __nla_validate_parse: 11 callbacks suppressed [ 785.122684][T27217] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5104'. [ 785.283489][T27229] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5108'. [ 785.349003][T27226] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 785.370793][T27230] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 785.835264][T27244] xt_l2tp: v2 sid > 0xffff: 262144 [ 787.839804][T27274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5121'. [ 787.869832][T27276] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 788.901874][T27250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 789.067638][T27311] sctp: [Deprecated]: syz.4.5127 (pid 27311) Use of int in max_burst socket option. [ 789.067638][T27311] Use struct sctp_assoc_value instead [ 789.290081][T27324] validate_nla: 1 callbacks suppressed [ 789.290101][T27324] netlink: 'syz.2.5131': attribute type 12 has an invalid length. [ 789.420764][T27331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5133'. [ 789.502156][T27331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5133'. [ 789.526842][T27338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5136'. [ 789.609715][T27342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5136'. [ 789.658938][T27342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5136'. [ 789.677633][T27344] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.5138'. [ 789.748314][T27347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5139'. [ 789.798793][T27352] IPv6: NLM_F_CREATE should be specified when creating new route [ 789.936249][T27346] bridge0: entered allmulticast mode [ 789.975005][T27351] vlan3: left allmulticast mode [ 790.052616][T27351] geneve0: left allmulticast mode [ 790.078406][T27351] bridge0: port 1(vlan3) entered disabled state [ 790.174318][T27362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.511534][T27379] syzkaller0: entered promiscuous mode [ 790.542662][T27379] syzkaller0: entered allmulticast mode [ 790.552564][T27382] __nla_validate_parse: 3 callbacks suppressed [ 790.552580][T27382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5149'. [ 790.576364][T27383] netlink: 'syz.4.5147': attribute type 3 has an invalid length. [ 790.909059][T27397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5152'. [ 790.991574][T27397] veth7: entered allmulticast mode [ 791.139215][T27403] syzkaller0: entered promiscuous mode [ 791.145159][T27403] syzkaller0: entered allmulticast mode [ 791.164148][ T30] audit: type=1804 audit(1784033189.037:13): pid=27403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5154" name="/newroot/406/cgroup.controllers" dev="tmpfs" ino=2101 res=1 errno=0 [ 791.243683][ T30] audit: type=1800 audit(1784033189.037:14): pid=27403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5154" name="cgroup.controllers" dev="tmpfs" ino=2101 res=0 errno=0 [ 791.397806][T27382] netlink: 'syz.0.5149': attribute type 61 has an invalid length. [ 791.447294][T27382] netlink: 'syz.0.5149': attribute type 62 has an invalid length. [ 791.544536][T27420] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 791.791260][T27436] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5163'. [ 792.007450][T27452] lo speed is unknown, defaulting to 1000 [ 792.018506][T27452] lo speed is unknown, defaulting to 1000 [ 792.036625][T27452] lo speed is unknown, defaulting to 1000 [ 792.156970][T27458] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 792.174340][T27458] bond9 (unregistering): Released all slaves [ 792.235800][T27464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.368166][T27468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5171'. [ 792.424169][T27473] netlink: 'syz.0.5171': attribute type 1 has an invalid length. [ 792.475975][T27473] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5171'. [ 792.506409][T27473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5171'. [ 792.924633][T27452] infiniband syz1: set down [ 792.929260][T20746] lo speed is unknown, defaulting to 1000 [ 792.947773][T27452] infiniband syz1: added lo [ 792.956104][T27490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5178'. [ 792.987556][T27452] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 793.003395][T27452] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 793.022124][T27452] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 793.051878][T27452] RDS/IB: syz1: added [ 793.059473][T27452] smc: adding ib device syz1 with port count 1 [ 793.066373][T27452] smc: ib device syz1 port 1 has no pnetid [ 793.072903][T20746] lo speed is unknown, defaulting to 1000 [ 793.082091][T27452] lo speed is unknown, defaulting to 1000 [ 793.583041][T27507] IPv6: NLM_F_CREATE should be specified when creating new route [ 793.605881][T27452] lo speed is unknown, defaulting to 1000 [ 793.765203][T27508] lo speed is unknown, defaulting to 1000 [ 793.787171][T27508] lo speed is unknown, defaulting to 1000 [ 794.013134][T27520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5185'. [ 794.072691][T27452] lo speed is unknown, defaulting to 1000 [ 794.273314][T27533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.342118][T27528] can: request_module (can-proto-5) failed. [ 794.479866][T27536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5189'. [ 794.537245][T27508] lo speed is unknown, defaulting to 1000 [ 794.924599][T27452] lo speed is unknown, defaulting to 1000 [ 795.379085][T27564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5196'. [ 795.451275][T27565] syzkaller1: entered promiscuous mode [ 795.476232][T27565] syzkaller1: entered allmulticast mode [ 795.486189][T27452] lo speed is unknown, defaulting to 1000 [ 795.773242][T27578] __nla_validate_parse: 1 callbacks suppressed [ 795.773268][T27578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5201'. [ 795.887126][T27580] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5202'. [ 795.951208][T27452] lo speed is unknown, defaulting to 1000 [ 796.204270][T27590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5208'. [ 796.319304][T27598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5209'. [ 796.334487][T27598] netlink: 'syz.1.5209': attribute type 11 has an invalid length. [ 796.359063][T27598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5209'. [ 796.420508][T27598] netlink: 'syz.1.5209': attribute type 11 has an invalid length. [ 796.511309][T27452] lo speed is unknown, defaulting to 1000 [ 796.551572][T27610] netlink: 'syz.0.5212': attribute type 1 has an invalid length. [ 796.584883][T27610] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5212'. [ 796.633988][T27610] netlink: 'syz.0.5212': attribute type 2 has an invalid length. [ 796.665161][T27610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5212'. [ 796.686041][T27617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5213'. [ 797.159004][T27638] netlink: 'syz.0.5219': attribute type 1 has an invalid length. [ 797.637237][T27655] tipc: Enabled bearer , priority 0 [ 797.793164][T27657] syzkaller0: entered promiscuous mode [ 797.798703][T27657] syzkaller0: entered allmulticast mode [ 797.812468][T27657] tipc: Resetting bearer [ 797.828029][T27656] lo speed is unknown, defaulting to 1000 [ 797.852467][T27656] lo speed is unknown, defaulting to 1000 [ 797.860737][T27641] tipc: Resetting bearer [ 797.980420][T27674] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5226'. [ 798.566072][ T5641] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 799.999056][T27641] tipc: Disabling bearer [ 800.009405][T27656] lo speed is unknown, defaulting to 1000 [ 800.018882][T27669] vxcan1: left allmulticast mode [ 800.026231][T27669] vxcan1: entered allmulticast mode [ 800.031556][T27669] team0: Device vxcan1 is of different type [ 802.609550][T27713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5234'. [ 802.623226][T27716] team0: Device vxcan1 is of different type [ 802.631542][T27719] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5237'. [ 802.670129][T27720] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5236'. [ 802.726407][T27713] vxcan5: entered allmulticast mode [ 802.768454][T27726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5240'. [ 802.856205][T27724] syzkaller1: left promiscuous mode [ 802.873403][T27724] syzkaller1: left allmulticast mode [ 802.966523][T27733] tipc: New replicast peer: 255.255.255.255 [ 802.996371][T27733] tipc: Enabled bearer , priority 26 [ 803.083475][T27737] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5242'. [ 803.152824][T27741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5243'. [ 803.235822][T27741] gre1: entered promiscuous mode [ 803.282778][T27747] tipc: Enabling of bearer rejected, failed to enable media [ 803.506044][T27758] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5249'. [ 803.590689][T27765] netlink: 'syz.1.5250': attribute type 11 has an invalid length. [ 803.807079][T27775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5253'. [ 803.834856][T27775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5253'. [ 803.871752][T27780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5254'. [ 803.891864][T27780] hsr_slave_1 (unregistering): left promiscuous mode [ 804.113630][T27780] 8021q: VLANs not supported on sit0 [ 804.123417][T27780] fb: renamed from bridge0 [ 804.307648][T27792] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 804.315256][T27792] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 804.929840][T27829] netlink: 'syz.2.5267': attribute type 28 has an invalid length. [ 804.957155][T27829] netlink: 'syz.2.5267': attribute type 3 has an invalid length. [ 804.983993][T27829] netlink: 'syz.2.5267': attribute type 28 has an invalid length. [ 805.042240][T27829] netlink: 'syz.2.5267': attribute type 3 has an invalid length. [ 805.128716][T27835] netlink: 'syz.1.5269': attribute type 3 has an invalid length. [ 805.547386][T27852] netlink: 'syz.1.5273': attribute type 1 has an invalid length. [ 805.583248][T27852] netlink: 'syz.1.5273': attribute type 1 has an invalid length. [ 805.929101][T27879] syzkaller0: entered promiscuous mode [ 806.018287][T27879] syzkaller0: entered allmulticast mode [ 806.039746][T27888] openvswitch: netlink: Message has 8 unknown bytes. [ 806.073925][T27888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.388328][T27902] syzkaller0: entered promiscuous mode [ 806.405450][T27902] syzkaller0: entered allmulticast mode [ 806.469225][T27913] tipc: Failed to remove unknown binding: 66,0,0/1569563782:3812264358/3812264359 [ 806.479662][T27913] tipc: Failed to remove unknown binding: 66,0,0/1569563782:3812264358/3812264359 [ 806.803517][T27924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.812462][T27924] batman_adv: batadv0: Interface deactivated: gretap1 [ 806.821382][T27924] batman_adv: batadv0: Removing interface: gretap1 [ 807.478613][T27957] x_tables: duplicate underflow at hook 1 [ 807.605345][T27967] netlink: 'syz.2.5299': attribute type 10 has an invalid length. [ 807.636295][T27967] __nla_validate_parse: 12 callbacks suppressed [ 807.636315][T27967] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5299'. [ 807.658463][T27970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5300'. [ 807.701552][T27967] bond4: (slave bond0): Releasing backup interface [ 807.720143][T27967] bond0: left allmulticast mode [ 807.762964][T27967] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 807.902792][T27985] netlink: 'syz.3.5304': attribute type 1 has an invalid length. [ 807.932825][T27985] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5304'. [ 808.136463][T27997] macvlan3: entered allmulticast mode [ 808.153950][T27997] dummy0: entered allmulticast mode [ 808.184134][T27997] team0: Port device macvlan3 added [ 808.392527][T28018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5315'. [ 808.452479][T28018] pim6reg1: entered promiscuous mode [ 808.458311][T28018] pim6reg1: entered allmulticast mode [ 808.527864][T28019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5315'. [ 808.811090][T28046] netlink: 'syz.0.5319': attribute type 4 has an invalid length. [ 808.826734][T28037] syzkaller1: entered promiscuous mode [ 808.839370][T28037] syzkaller1: entered allmulticast mode [ 809.158971][T28060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5324'. [ 809.490641][T28080] gretap3: entered allmulticast mode [ 809.655522][T28089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5334'. [ 810.039802][T28109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5336'. [ 810.057165][T28109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5336'. [ 810.075337][T28103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5336'. [ 810.112576][T28111] netlink: zone id is out of range [ 810.118197][T28111] netlink: zone id is out of range [ 810.128298][T28111] netlink: zone id is out of range [ 810.133658][T28111] netlink: zone id is out of range [ 810.151057][T28111] netlink: zone id is out of range [ 810.159152][T28111] netlink: zone id is out of range [ 810.174077][T28111] netlink: zone id is out of range [ 810.179590][T28111] netlink: get zone limit has 4 unknown bytes [ 810.779543][T28146] validate_nla: 2 callbacks suppressed [ 810.779561][T28146] netlink: 'syz.1.5348': attribute type 18 has an invalid length. [ 810.859668][ T12] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 810.871497][ T12] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 810.903612][T28154] 8021q: VLANs not supported on gre0 [ 810.936620][ T12] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 810.980224][ T12] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 811.107442][T28166] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 811.122069][T28166] bond6 (unregistering): Released all slaves [ 811.439513][T28186] syzkaller0: entered promiscuous mode [ 811.455632][T28186] syzkaller0: entered allmulticast mode [ 811.659901][T28193] erspan1: entered allmulticast mode [ 811.856116][T28210] lo speed is unknown, defaulting to 1000 [ 811.876473][T28210] lo speed is unknown, defaulting to 1000 [ 811.886792][T28210] lo speed is unknown, defaulting to 1000 [ 811.959242][T28214] netlink: 'syz.1.5368': attribute type 13 has an invalid length. [ 812.022251][T28216] x_tables: duplicate underflow at hook 3 [ 812.221632][ T3364] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.240083][ T3364] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 812.271082][ T3364] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.284905][ T3364] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 812.295183][ T3364] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.304224][ T3364] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 812.313377][ T3364] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.329633][ T3364] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 812.498920][T28227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.544544][T28231] netlink: 'syz.1.5373': attribute type 10 has an invalid length. [ 812.574673][T28231] netlink: 'syz.1.5373': attribute type 8 has an invalid length. [ 812.669080][T28242] openvswitch: netlink: Flow actions attr not present in new flow. [ 812.975777][T28256] xt_nfacct: accounting object `\$‚9ZúM#íü¾¦Eµ|¡^cÁ\F9YⳈ«ÃÖ' does not exist [ 813.024448][T28260] __nla_validate_parse: 7 callbacks suppressed [ 813.024466][T28260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5379'. [ 813.328996][T28267] tipc: Enabled bearer , priority 25 [ 813.343445][T28267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 813.350741][T28267] IPv6: NLM_F_CREATE should be set when creating new route [ 813.358121][T28267] IPv6: NLM_F_CREATE should be set when creating new route [ 813.365412][T28267] IPv6: NLM_F_CREATE should be set when creating new route [ 813.424276][T28273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 813.676859][T28288] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 813.716626][T28281] lo speed is unknown, defaulting to 1000 [ 813.745488][T28281] lo speed is unknown, defaulting to 1000 [ 813.806595][T28281] lo speed is unknown, defaulting to 1000 [ 814.051782][T28301] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5393'. [ 814.072073][T28301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5393'. [ 814.090752][T28301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5393'. [ 814.182801][T28303] lo speed is unknown, defaulting to 1000 [ 814.219532][T28303] lo speed is unknown, defaulting to 1000 [ 814.259566][T28317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.310385][ T9182] tipc: Node number set to 67355305 [ 814.371446][T28320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5398'. [ 814.391870][T28320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5398'. [ 814.413259][ C0] bridge0: port 1(veth1_to_bridge) entered learning state [ 814.453350][T28320] veth3: entered allmulticast mode [ 814.479395][T28303] lo speed is unknown, defaulting to 1000 [ 814.527683][T28323] syzkaller0: entered promiscuous mode [ 814.540516][T28323] syzkaller0: entered allmulticast mode [ 814.612647][T28328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5400'. [ 814.634157][T28328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5400'. [ 814.662646][T28330] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5400'. [ 814.861514][T28336] netlink: 5712 bytes leftover after parsing attributes in process `syz.2.5402'. [ 815.009698][T20746] IPVS: starting estimator thread 0... [ 815.100673][T28345] IPVS: using max 32 ests per chain, 76800 per kthread [ 815.703128][T28367] netlink: 'syz.4.5410': attribute type 1 has an invalid length. [ 816.368641][T28383] tipc: Enabling of bearer rejected, failed to enable media [ 817.688938][T28425] syzkaller1: entered promiscuous mode [ 817.697406][T28425] syzkaller1: entered allmulticast mode [ 817.772154][T28445] tipc: Enabled bearer , priority 0 [ 817.838200][T28445] tipc: Disabling bearer [ 818.046668][T28459] netlink: 'syz.3.5437': attribute type 21 has an invalid length. [ 818.072082][T28459] __nla_validate_parse: 15 callbacks suppressed [ 818.072099][T28459] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5437'. [ 818.105992][T28459] netlink: 'syz.3.5437': attribute type 4 has an invalid length. [ 818.135858][T28459] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5437'. [ 818.738483][T28494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5450'. [ 818.764413][T28495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5451'. [ 818.915462][T28506] bond0: left promiscuous mode [ 818.946454][T28506] ip6tnl3: left allmulticast mode [ 819.017081][T28506] gretap1: left allmulticast mode [ 819.036332][T28506] bond4: left promiscuous mode [ 819.055387][T28506] bond4: left allmulticast mode [ 819.062101][T28517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5455'. [ 819.080058][T28506] dummy0: left allmulticast mode [ 819.093052][T28506] macvlan3: left allmulticast mode [ 819.101993][T28506] erspan1: left allmulticast mode [ 819.118091][T28505] IPVS: Unknown mcast interface: vcan0 [ 819.203331][T28516] syzkaller0: entered promiscuous mode [ 819.223328][T28516] syzkaller0: entered allmulticast mode [ 819.243639][T28516] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 819.379359][T28523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5457'. [ 819.628008][T28552] nftables ruleset with unbound chain [ 819.868194][T28558] syzkaller0: entered promiscuous mode [ 819.874632][T28558] syzkaller0: entered allmulticast mode [ 820.120037][T28577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5473'. [ 820.239680][T28583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5475'. [ 820.274601][T28586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5476'. [ 821.135346][T28596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5475'. [ 821.501647][T28612] bond0 (unregistering): Released all slaves [ 821.878184][T28639] net_ratelimit: 3 callbacks suppressed [ 821.878203][T28639] netlink: set zone limit has 4 unknown bytes [ 821.890950][T28637] syzkaller0: entered promiscuous mode [ 821.905176][T28637] syzkaller0: entered allmulticast mode [ 821.948482][T28643] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 821.963640][T28643] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 822.356283][T28671] x_tables: duplicate underflow at hook 2 [ 822.366239][T28662] tipc: Resetting bearer [ 822.374223][T28662] gretap0: entered promiscuous mode [ 822.419562][T28662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.429765][T28662] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.468087][T28662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 822.482811][T28662] veth1_vlan: left promiscuous mode [ 822.489448][T28662] veth0_vlan: left promiscuous mode [ 822.497477][T28662] veth0_vlan: entered promiscuous mode [ 822.505809][T28662] veth1_vlan: entered promiscuous mode [ 822.512311][T28662] macvlan0: left promiscuous mode [ 822.522716][T28662] veth1_macvtap: left promiscuous mode [ 822.530727][T28662] veth0_macvtap: left promiscuous mode [ 822.542461][T28662] veth0_macvtap: entered promiscuous mode [ 822.558461][T28662] veth1_macvtap: entered promiscuous mode [ 822.571834][T28662] 8021q: adding VLAN 0 to HW filter on device €Â [ 822.583966][T28662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.596192][T28662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.608738][T28662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.620964][T28662] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 822.627771][T28662] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 822.643447][ T9182] lo speed is unknown, defaulting to 1000 [ 822.660315][ T9182] syz2: Port: 1 Link ACTIVE [ 822.778800][ T3352] netdevsim netdevsim4 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.800801][ T3352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.828861][ T3352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.846493][ T3352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.247619][T20745] lo speed is unknown, defaulting to 1000 [ 823.329014][T28692] __nla_validate_parse: 11 callbacks suppressed [ 823.329038][T28692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5502'. [ 825.026751][T28645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.243797][T28701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5505'. [ 825.372474][T28706] netlink: 'syz.2.5509': attribute type 2 has an invalid length. [ 825.661710][T28719] veth1_to_team: left allmulticast mode [ 825.815604][T28731] syzkaller1: entered promiscuous mode [ 825.838336][T28731] syzkaller1: entered allmulticast mode [ 825.965561][T28738] bridge0: port 1(veth1_to_bridge) entered blocking state [ 825.981963][T28738] bridge0: port 1(veth1_to_bridge) entered disabled state [ 825.995807][T28738] veth1_to_bridge: entered allmulticast mode [ 826.006260][T28738] veth1_to_bridge: entered promiscuous mode [ 826.141299][T28743] syzkaller0: entered promiscuous mode [ 826.162213][T28743] syzkaller0: entered allmulticast mode [ 826.176729][T28746] netlink: 'syz.0.5519': attribute type 1 has an invalid length. [ 826.233544][T28753] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 826.281416][T28748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5520'. [ 826.351394][T28762] netlink: 'syz.1.5520': attribute type 1 has an invalid length. [ 826.377207][T28746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.518222][T28764] tipc: Enabled bearer , priority 0 [ 826.556764][T28764] syzkaller0: entered promiscuous mode [ 826.596518][T28764] syzkaller0: entered allmulticast mode [ 826.686294][T28764] tipc: Resetting bearer [ 826.717814][T28763] tipc: Resetting bearer [ 826.803403][T28763] tipc: Disabling bearer [ 827.012990][T28795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5533'. [ 827.112991][T28799] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5534'. [ 827.587422][T28813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5536'. [ 827.600819][T28812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5536'. [ 828.391551][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5545'. [ 828.493009][T28859] xt_hashlimit: size too large, truncated to 1048576 [ 828.608873][T28863] lo speed is unknown, defaulting to 1000 [ 828.633202][T28863] lo speed is unknown, defaulting to 1000 [ 828.707820][T28863] lo speed is unknown, defaulting to 1000 [ 829.126010][T28878] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 829.535554][T28887] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 829.563644][T28887] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 829.885710][T28895] PKCS7: Unknown OID: [4] (bad) [ 829.900496][T28895] PKCS7: Only support pkcs7_signedData type [ 829.999681][T28898] netlink: 'syz.0.5557': attribute type 1 has an invalid length. [ 830.505901][T28915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5561'. [ 830.552353][T28915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5561'. [ 830.780143][T28923] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5563'. [ 831.416040][T28932] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 831.473766][T28932] bond5 (unregistering): Released all slaves [ 831.615459][T28933] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 831.919816][T28942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5567'. [ 832.029163][T28945] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5568'. [ 832.108063][T28947] lo speed is unknown, defaulting to 1000 [ 832.135730][T28947] lo speed is unknown, defaulting to 1000 [ 832.171361][T28947] lo speed is unknown, defaulting to 1000 [ 832.214536][T28951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5571'. [ 832.415294][T28956] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 832.621839][T28961] netlink: 'syz.0.5572': attribute type 4 has an invalid length. [ 832.801128][T28965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5574'. [ 833.080599][T28981] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5576'. [ 833.131100][T28963] bond9: entered promiscuous mode [ 833.253935][T28985] syzkaller1: entered promiscuous mode [ 833.266697][T28985] syzkaller1: entered allmulticast mode [ 833.600127][T28993] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5581'. [ 833.742585][T28996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5582'. [ 833.765858][T28996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 833.845272][T29000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5584'. [ 833.998699][T29007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5586'. [ 834.082250][T29007] netlink: 'syz.4.5586': attribute type 160 has an invalid length. [ 834.095801][T29012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5587'. [ 834.130559][T29007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5586'. [ 834.296204][T29019] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5592'. [ 834.326191][T29019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5592'. [ 834.574544][T29030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5591'. [ 834.611145][T29030] bridge9: port 1(dummy0) entered blocking state [ 834.630653][T29030] bridge9: port 1(dummy0) entered disabled state [ 834.649430][T29030] dummy0: entered allmulticast mode [ 834.671566][T29033] netlink: 'syz.1.5591': attribute type 10 has an invalid length. [ 834.686225][T29033] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5591'. [ 834.686918][T29030] dummy0: entered promiscuous mode [ 834.744754][T29033] bridge9: port 1(dummy0) entered blocking state [ 834.752297][T29033] bridge9: port 1(dummy0) entered forwarding state [ 834.763609][T29033] dummy0: left allmulticast mode [ 834.769013][T29033] bridge9: port 1(dummy0) entered disabled state [ 834.825618][T29008] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 834.978307][T29044] netlink: 'syz.4.5598': attribute type 8 has an invalid length. [ 834.986870][T29044] netlink: 'syz.4.5598': attribute type 9 has an invalid length. [ 835.433817][T29065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.443400][T29065] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.461051][T29065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.511001][T29065] veth1_to_bridge: left allmulticast mode [ 835.519326][T29065] veth1_to_bridge: left promiscuous mode [ 835.527753][T29065] bridge0: port 1(veth1_to_bridge) entered disabled state [ 835.559239][T29065] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 835.672589][T29071] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 835.951615][T29075] block nbd7: server does not support multiple connections per device. [ 835.965106][T29075] block nbd7: shutting down sockets [ 837.226032][T29132] veth0: entered promiscuous mode [ 837.458503][T29143] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 837.510700][T29134] veth0: left promiscuous mode [ 838.018398][T29175] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 838.677980][T29201] __nla_validate_parse: 8 callbacks suppressed [ 838.678001][T29201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5642'. [ 839.084422][T29210] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 839.286655][T29220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5649'. [ 839.319014][T29220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5649'. [ 839.338738][T29224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5650'. [ 839.382941][T29181] syz.0.5637 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 839.398807][T29181] CPU: 0 UID: 0 PID: 29181 Comm: syz.0.5637 Not tainted syzkaller #0 PREEMPT(full) [ 839.398842][T29181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 839.398857][T29181] Call Trace: [ 839.398866][T29181] [ 839.398876][T29181] dump_stack_lvl+0xe8/0x150 [ 839.398916][T29181] dump_header+0xd3/0x4b0 [ 839.398980][T29181] oom_kill_process+0x3ab/0x970 [ 839.399013][T29181] out_of_memory+0x1064/0x1480 [ 839.399031][T29181] ? try_charge_memcg+0xbca/0x1590 [ 839.399072][T29181] ? __pfx_out_of_memory+0x10/0x10 [ 839.399090][T29181] ? do_raw_spin_unlock+0xf5/0x210 [ 839.399124][T29181] try_charge_memcg+0xc74/0x1590 [ 839.399170][T29181] ? __pfx_try_charge_memcg+0x10/0x10 [ 839.399199][T29181] ? percpu_ref_tryget+0x15/0x180 [ 839.399255][T29181] ? charge_memcg+0x20/0x2b0 [ 839.399283][T29181] charge_memcg+0x19c/0x2b0 [ 839.399307][T29181] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 839.399330][T29181] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 839.399366][T29181] swap_cache_alloc_folio+0x4de/0x990 [ 839.399397][T29181] swap_cache_read_folio+0x44/0x120 [ 839.399420][T29181] swap_cluster_readahead+0x3a0/0x640 [ 839.399445][T29181] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 839.399477][T29181] ? get_vma_policy+0x27b/0x3c0 [ 839.399508][T29181] swapin_readahead+0x19a/0xc10 [ 839.399531][T29181] ? swap_table_get+0x1e/0x260 [ 839.399550][T29181] ? swap_table_get+0x1e/0x260 [ 839.399569][T29181] ? __pfx_swapin_readahead+0x10/0x10 [ 839.399592][T29181] ? swap_table_get+0x1e/0x260 [ 839.399609][T29181] ? swap_table_get+0x1e/0x260 [ 839.399625][T29181] ? swap_table_get+0x1e/0x260 [ 839.399643][T29181] ? swap_table_get+0x216/0x260 [ 839.399663][T29181] ? swap_cache_get_folio+0x2e7/0x2f0 [ 839.399687][T29181] do_swap_page+0x455/0x5060 [ 839.399731][T29181] ? __pte_offset_map+0x29/0x240 [ 839.399756][T29181] ? __lock_acquire+0x683/0x2cf0 [ 839.399780][T29181] ? do_swap_page+0x124/0x5060 [ 839.399798][T29181] ? __pfx_do_swap_page+0x10/0x10 [ 839.399825][T29181] ? __pte_offset_map+0x1ae/0x240 [ 839.399850][T29181] ? pte_offset_map_rw_nolock+0xea/0x160 [ 839.399873][T29181] handle_mm_fault+0x124c/0x3080 [ 839.399905][T29181] ? handle_mm_fault+0xec/0x3080 [ 839.399931][T29181] ? __pfx_handle_mm_fault+0x10/0x10 [ 839.399948][T29181] ? lock_vma_under_rcu+0x45a/0x500 [ 839.399995][T29181] do_user_addr_fault+0xa4d/0x1340 [ 839.400036][T29181] ? trace_page_fault_user+0x84/0x1e0 [ 839.400078][T29181] exc_page_fault+0x6a/0xc0 [ 839.400106][T29181] asm_exc_page_fault+0x26/0x30 [ 839.400124][T29181] RIP: 0033:0x7ff91ac72588 [ 839.400142][T29181] Code: 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 e1 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 <45> 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84 4a 02 00 00 [ 839.400157][T29181] RSP: 002b:00007ffcd7c91ec0 EFLAGS: 00010206 [ 839.400174][T29181] RAX: 000000110c2b0000 RBX: ffffffff821b4f58 RCX: 0000000000000003 [ 839.400188][T29181] RDX: 0000000000000f58 RSI: 0000000000002d3d RDI: 0000000000000008 [ 839.400200][T29181] RBP: 0000000000000000 R08: 00007ff91b010000 R09: 00007ff91b012000 [ 839.400212][T29181] R10: 00000000821b4f5c R11: 000000000000000c R12: 00007ff91b026038 [ 839.400223][T29181] R13: 0000000000000006 R14: ffffffff821b43f2 R15: 00007ff91bb55720 [ 839.400235][T29181] ? __might_fault+0x22/0x130 [ 839.400257][T29181] ? copy_user_large_folio+0x158/0x5f0 [ 839.400289][T29181] [ 839.732423][T29181] memory: usage 307200kB, limit 307200kB, failcnt 550 [ 839.818934][T29181] memory+swap: usage 307320kB, limit 9007199254740988kB, failcnt 0 [ 839.947015][T29181] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 840.018996][T29227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5652'. [ 840.070622][T29181] Memory cgroup stats for /syz0: [ 840.070914][T29181] cache 0 [ 840.130544][T29181] rss 0 [ 840.159002][T29239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5654'. [ 840.168403][T29181] rss_huge 0 [ 840.188818][T29181] shmem 0 [ 840.203328][T29181] mapped_file 0 [ 840.219718][T29181] dirty 0 [ 840.233004][T29181] writeback 0 [ 840.249160][T29181] workingset_refault_anon 38 [ 840.272352][T29181] workingset_refault_file 0 [ 840.295336][T29181] swap 122880 [ 840.309990][T29181] swapcached 352256 [ 840.328838][T29181] pgpgin 240723 [ 840.357768][T29181] pgpgout 240705 [ 840.377894][T29181] pgfault 365806 [ 840.399702][T29181] pgmajfault 16 [ 840.425343][T29181] inactive_anon 57344 [ 840.440328][T29181] active_anon 16384 [ 840.452157][T29181] inactive_file 0 [ 840.470595][T29181] active_file 0 [ 840.485464][T29181] unevictable 0 [ 840.499273][T29181] hierarchical_memory_limit 314572800 [ 840.525414][T29181] hierarchical_memsw_limit 9223372036854771712 [ 840.545683][T29181] total_cache 0 [ 840.559258][T29181] total_rss 0 [ 840.572956][T29181] total_rss_huge 0 [ 840.586058][T29181] total_shmem 0 [ 840.598533][T29181] total_mapped_file 0 [ 840.610752][T29181] total_dirty 0 [ 840.622481][T29181] total_writeback 0 [ 840.636662][T29181] total_workingset_refault_anon 38 [ 840.654843][T29181] total_workingset_refault_file 0 [ 840.672405][T29181] total_swap 122880 [ 840.684644][T29181] total_swapcached 352256 [ 840.699357][T29181] total_pgpgin 240723 [ 840.712783][T29181] total_pgpgout 240705 [ 840.731065][T29181] total_pgfault 365806 [ 840.746158][T29181] total_pgmajfault 16 [ 840.761650][T29181] total_inactive_anon 57344 [ 840.776406][T29181] total_active_anon 16384 [ 840.792210][T29181] total_inactive_file 0 [ 840.806038][T29181] total_active_file 0 [ 840.818373][T29181] total_unevictable 0 [ 840.834786][T29181] anon_cost 0 [ 840.848091][T29181] file_cost 0 [ 840.859930][T29181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5637,pid=29181,uid=0 [ 840.938770][T29181] Memory cgroup out of memory: Killed process 29181 (syz.0.5637) total-vm:102172kB, anon-rss:1264kB, file-rss:23424kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 841.739648][T29263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5661'. [ 841.898850][T29286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5666'. [ 841.907997][T29269] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 841.929460][T29286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5666'. [ 842.796874][T29321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5677'. [ 842.861527][T29326] netlink: 'syz.3.5678': attribute type 15 has an invalid length. [ 843.394434][T29343] netlink: 'syz.3.5685': attribute type 14 has an invalid length. [ 843.411017][T29343] netlink: 'syz.3.5685': attribute type 13 has an invalid length. [ 843.633786][T29351] xt_TCPMSS: Only works on TCP SYN packets [ 843.990151][T29371] __nla_validate_parse: 5 callbacks suppressed [ 843.990173][T29371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5690'. [ 844.092656][T29378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5693'. [ 844.112431][T29371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5690'. [ 844.140694][T29371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5690'. [ 844.169963][T29380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5690'. [ 844.201104][T29380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5690'. [ 844.483215][ C0] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 844.490634][ C0] bridge0: topology change detected, propagating [ 844.505248][T29391] tipc: Enabled bearer , priority 0 [ 844.514739][T29391] syzkaller0: entered promiscuous mode [ 844.520941][T29391] syzkaller0: entered allmulticast mode [ 844.528951][T29391] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 844.632677][T29396] tipc: Resetting bearer [ 844.704956][T29398] netlink: 'syz.1.5699': attribute type 4 has an invalid length. [ 844.749538][T29398] SET target dimension over the limit! [ 844.762282][T29399] SET target dimension over the limit! [ 844.838149][T29390] tipc: Resetting bearer [ 844.941762][T29390] tipc: Disabling bearer [ 845.132004][T29412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5704'. [ 845.166176][T29412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5704'. [ 845.184803][T29417] netlink: 'syz.2.5705': attribute type 1 has an invalid length. [ 845.203985][T29412] netlink: 'syz.1.5704': attribute type 7 has an invalid length. [ 845.230153][T29412] netlink: 'syz.1.5704': attribute type 8 has an invalid length. [ 845.238487][T29412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5704'. [ 845.252532][T29424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5704'. [ 845.284831][T29418] bond6 (unregistering): Released all slaves [ 845.396868][T29425] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 845.499100][T29433] SET target dimension over the limit! [ 846.701575][T29514] siw: device registration error -23 [ 846.729833][T29508] syzkaller0: entered promiscuous mode [ 846.735717][T29508] syzkaller0: entered allmulticast mode [ 847.112969][T29540] syzkaller0: entered promiscuous mode [ 847.128818][T29540] syzkaller0: entered allmulticast mode [ 847.635421][T29559] xt_TCPMSS: Only works on TCP SYN packets [ 850.604738][T29612] netlink: 'syz.3.5750': attribute type 83 has an invalid length. [ 850.651454][T29616] __nla_validate_parse: 10 callbacks suppressed [ 850.651473][T29616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5752'. [ 850.741502][T29620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5753'. [ 851.484815][T29647] syzkaller0: entered promiscuous mode [ 851.494531][T29649] netlink: 'syz.3.5759': attribute type 6 has an invalid length. [ 851.529952][T29647] syzkaller0: entered allmulticast mode [ 851.600763][T29653] tipc: Enabled bearer , priority 0 [ 851.651539][T29656] netlink: 64587 bytes leftover after parsing attributes in process `syz.1.5761'. [ 851.672479][T29645] tipc: Resetting bearer [ 851.736174][T29645] tipc: Disabling bearer [ 852.096690][T29692] netlink: 'syz.4.5767': attribute type 4 has an invalid length. [ 852.105523][T29692] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5767'. [ 852.147694][T29681] dummy0: left promiscuous mode [ 852.157532][T29694] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5767'. [ 852.221007][T29697] netlink: 'syz.4.5767': attribute type 2 has an invalid length. [ 852.245363][T29681] gre1: left promiscuous mode [ 852.281261][T29692] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 852.483282][T29702] netlink: 'syz.3.5769': attribute type 1 has an invalid length. [ 852.589740][T29702] 8021q: adding VLAN 0 to HW filter on device bond10 [ 852.646502][T29710] syzkaller0: entered promiscuous mode [ 852.659518][T29710] syzkaller0: entered allmulticast mode [ 852.691544][T29710] tipc: Enabled bearer , priority 0 [ 852.722543][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5772'. [ 852.766952][T29708] tipc: Resetting bearer [ 852.841116][T29708] tipc: Disabling bearer [ 852.935494][T29728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5776'. [ 852.953881][T29728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5776'. [ 853.162378][T29732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5777'. [ 853.306729][T29732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 853.435902][T29734] 8021q: adding VLAN 0 to HW filter on device bond6 [ 853.453939][T29734] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 853.487571][T29734] bond6: (slave vti0): Error -95 calling set_mac_address [ 853.624700][T29737] bond0: (slave dummy0): Releasing backup interface [ 853.684392][T29737] bond6: (slave dummy0): Error -99 calling set_mac_address [ 853.896430][T29768] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5785'. [ 854.745546][ T5634] block nbd7: Receive control failed (result -32) [ 854.762719][ T5641] block nbd7: Receive control failed (result -32) [ 854.770044][ T4940] block nbd7: Receive control failed (result -32) [ 855.212706][T29828] syzkaller1: entered promiscuous mode [ 855.224146][T29828] syzkaller1: entered allmulticast mode [ 855.427791][T29831] tipc: Enabling of bearer rejected, already enabled [ 855.789764][T29848] xfrm2: entered allmulticast mode [ 855.833980][T29851] __nla_validate_parse: 3 callbacks suppressed [ 855.834002][T29851] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5804'. [ 856.015315][T29862] netlink: 'syz.0.5807': attribute type 1 has an invalid length. [ 856.112880][T29872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5806'. [ 856.994860][T29909] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5815'. [ 857.029493][T29913] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5815'. [ 857.072316][T29913] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5815'. [ 857.136616][T29913] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5815'. [ 857.182705][T29913] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5815'. [ 857.224584][T29913] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5815'. [ 857.277043][T29913] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5815'. [ 857.293982][T29913] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5815'. [ 857.608694][T29931] bond7: entered promiscuous mode [ 857.621229][T29931] bond7: entered allmulticast mode [ 857.631774][T29931] 8021q: adding VLAN 0 to HW filter on device bond7 [ 858.348401][T29961] veth1_to_bond: entered promiscuous mode [ 858.413020][T29968] veth1_to_bond: left promiscuous mode [ 858.686259][T29984] batadv0: entered promiscuous mode [ 858.701143][T29984] batadv0: entered allmulticast mode [ 858.721785][T29984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.035285][T29998] netlink: 'syz.1.5843': attribute type 58 has an invalid length. [ 859.066630][T29992] geneve1: Caught tx_queue_len zero misconfig [ 859.451035][T30016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.559783][T30023] netlink: 'syz.3.5850': attribute type 30 has an invalid length. [ 859.566300][T30025] netlink: 'syz.3.5850': attribute type 30 has an invalid length. [ 861.016438][T30094] __nla_validate_parse: 27 callbacks suppressed [ 861.016459][T30094] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5859'. [ 861.069254][T30094] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 861.126129][T30094] openvswitch: netlink: Message has 208 unknown bytes. [ 861.527205][T30106] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5870'. [ 861.921680][T30121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5874'. [ 861.939545][T30118] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20001 [ 861.949354][T30121] netlink: 580 bytes leftover after parsing attributes in process `syz.1.5874'. [ 861.967538][T30120] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20001 [ 887.838274][T30148] sctp: [Deprecated]: syz.4.5884 (pid 30148) Use of int in maxseg socket option. [ 887.838274][T30148] Use struct sctp_assoc_value instead [ 887.860593][T30147] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5883'. [ 887.946340][T30155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5881'. [ 888.060296][T30159] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5881'. [ 888.096830][T30155] vlan4: entered allmulticast mode [ 888.102701][T30155] bond0: entered allmulticast mode [ 888.150171][T30159] bond0 (unregistering): Released all slaves [ 888.383499][T30178] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 888.547684][T30192] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 889.099641][T30215] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5899'. [ 889.114626][T30185] bridge0: port 1(veth1_to_bridge) entered disabled state [ 889.850607][T30191] veth0_to_team: entered promiscuous mode [ 889.857588][T30191] veth0_to_team: left promiscuous mode [ 889.969158][T30228] xt_l2tp: missing protocol rule (udp|l2tpip) [ 890.074691][T30236] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5902'. [ 890.106683][T30236] syzkaller1: entered promiscuous mode [ 890.129389][T30236] syzkaller1: entered allmulticast mode [ 890.171884][T30236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5902'. [ 890.196941][T30242] netlink: 'syz.2.5904': attribute type 1 has an invalid length. [ 890.256980][T30243] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 890.270863][T30242] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 890.284271][T30242] syzkaller1: linktype set to 778 [ 890.299977][T30236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5902'. [ 890.511745][T30258] syzkaller0: entered promiscuous mode [ 890.521530][T30258] syzkaller0: entered allmulticast mode [ 891.022258][T30286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5914'. [ 891.047422][T30283] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5915'. [ 891.273498][T30298] netlink: 'syz.4.5918': attribute type 1 has an invalid length. [ 891.347914][T30298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5918'. [ 891.371844][T30298] tipc: Resetting bearer [ 891.438594][T30298] tipc: Resetting bearer [ 891.744320][T30318] netlink: 'syz.4.5925': attribute type 9 has an invalid length. [ 891.781843][T30318] netlink: 'syz.4.5925': attribute type 61 has an invalid length. [ 891.996209][T30325] xt_hl: Unknown TTL match mode: 237 [ 892.302935][T30343] xt_TCPMSS: Only works on TCP SYN packets [ 892.573709][T30359] macvlan0: mtu less than device minimum [ 892.740682][T30368] Cannot find del_set index 3 as target [ 892.847491][T30372] syzkaller1: entered promiscuous mode [ 892.870104][T30372] syzkaller1: entered allmulticast mode [ 893.244020][T30386] bond11: option ad_user_port_key: invalid value (65535) [ 893.251357][T30386] bond11: option ad_user_port_key: allowed values 0 - 1023 [ 893.259895][T30386] bond11 (unregistering): Released all slaves [ 893.285318][T30392] __nla_validate_parse: 11 callbacks suppressed [ 893.285338][T30392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5944'. [ 893.573856][T30407] tipc: Enabled bearer , priority 0 [ 893.597716][T30407] syzkaller0: entered promiscuous mode [ 893.616628][T30407] syzkaller0: entered allmulticast mode [ 893.646673][T30408] tipc: Resetting bearer [ 893.773334][T30404] tipc: Resetting bearer [ 893.827328][T30404] tipc: Disabling bearer [ 893.914860][T30422] sock: sock_set_timeout: `syz.4.5952' (pid 30422) tries to set negative timeout [ 894.098735][T30420] tipc: Enabling of bearer rejected, failed to enable media [ 894.203785][T30431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5955'. [ 894.443870][T30444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5957'. [ 894.592666][T30456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5960'. [ 894.612096][T30450] xt_hashlimit: size too large, truncated to 1048576 [ 894.783936][T30460] macvtap2: entered promiscuous mode [ 894.800607][T30460] batadv0: entered promiscuous mode [ 894.809876][T30460] macvtap2: entered allmulticast mode [ 894.830380][T30460] batadv0: entered allmulticast mode [ 894.838920][T30460] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 894.863615][T30460] batadv0: left allmulticast mode [ 894.880542][T30460] batadv0: left promiscuous mode [ 894.958581][T30464] lo speed is unknown, defaulting to 1000 [ 894.969265][T30464] lo speed is unknown, defaulting to 1000 [ 894.978156][T30464] lo speed is unknown, defaulting to 1000 [ 895.228823][T30483] xt_bpf: check failed: parse error [ 895.388883][T30491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5970'. [ 895.403636][T30492] netlink: 'syz.2.5969': attribute type 8 has an invalid length. [ 896.089945][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 896.107116][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 896.115494][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 896.128699][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 896.166678][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 896.223269][ T4940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 896.232416][ T4940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 896.248165][ T4940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 896.257621][ T4940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 896.295641][ T4940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 897.163864][T30557] netlink: 'syz.0.5983': attribute type 4 has an invalid length. [ 897.221491][T30562] netlink: 'syz.4.5984': attribute type 11 has an invalid length. [ 897.430907][T30575] netlink: 'syz.2.5987': attribute type 1 has an invalid length. [ 897.529080][T30586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.553942][T30575] 8021q: adding VLAN 0 to HW filter on device bond6 [ 897.584853][T30588] : renamed from dummy0 [ 897.606143][T30590] netlink: 'syz.0.5990': attribute type 1 has an invalid length. [ 897.935571][T30584] lo speed is unknown, defaulting to 1000 [ 897.952489][T30584] lo speed is unknown, defaulting to 1000 [ 897.957226][T30512] lo speed is unknown, defaulting to 1000 [ 897.975740][T30599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5993'. [ 898.009226][T30584] lo speed is unknown, defaulting to 1000 [ 898.009332][T30602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5991'. [ 898.057618][T30512] lo speed is unknown, defaulting to 1000 [ 898.150509][T30608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5992'. [ 898.202948][T30601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5992'. [ 898.247686][T30601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5992'. [ 898.400762][ T4940] Bluetooth: hci1: command tx timeout [ 898.488363][T30615] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5996'. [ 898.532367][T30615] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5996'. [ 898.584288][T30512] lo speed is unknown, defaulting to 1000 [ 899.157810][T30615] lo speed is unknown, defaulting to 1000 [ 899.218757][T30637] raw_sendmsg: syz.0.6002 forgot to set AF_INET. Fix it! [ 899.287107][T30619] dvmrp0: entered allmulticast mode [ 899.415484][T10810] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 899.449933][T30615] lo speed is unknown, defaulting to 1000 [ 899.479368][T30615] lo speed is unknown, defaulting to 1000 [ 899.536353][T30645] xt_hashlimit: size too large, truncated to 1048576 [ 899.611878][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 899.664463][ T3352] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 899.788108][T10809] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 900.178290][ T12] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 900.480380][ T4940] Bluetooth: hci1: command tx timeout [ 900.708165][ T12] bond1 (unregistering): Released all slaves [ 900.734975][ T12] bond2 (unregistering): Released all slaves [ 900.751343][ T12] bond3 (unregistering): Released all slaves [ 900.768562][ T12] bond4 (unregistering): Released all slaves [ 900.802088][ T12] bond5 (unregistering): Released all slaves [ 900.818211][ T12] bond6 (unregistering): Released all slaves [ 900.839574][ T12] bond7 (unregistering): Released all slaves [ 900.855624][ T12] bond8 (unregistering): Released all slaves [ 900.926117][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 900.970918][T30686] sctp: [Deprecated]: syz.4.6011 (pid 30686) Use of int in maxseg socket option. [ 900.970918][T30686] Use struct sctp_assoc_value instead [ 901.113149][ T12] tipc: Disabling bearer [ 901.144187][ T12] tipc: Disabling bearer [ 901.171056][ T12] tipc: Left network mode [ 901.182189][T30697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6014'. [ 901.798775][ T5641] block nbd8: Receive control failed (result -32) [ 901.807909][ T4940] block nbd8: Receive control failed (result -32) [ 901.820896][ T5634] block nbd8: Receive control failed (result -32) [ 902.399420][T30741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6021'. [ 902.568522][ T5634] Bluetooth: hci1: command tx timeout [ 902.812668][T30752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6023'. [ 902.840735][T30752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6023'. [ 903.643138][T30512] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.650535][T30512] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.657800][T30512] bridge_slave_0: entered allmulticast mode [ 903.666341][T30512] bridge_slave_0: entered promiscuous mode [ 903.695161][T30512] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.713110][T30512] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.729302][T30512] bridge_slave_1: entered allmulticast mode [ 903.741605][T30512] bridge_slave_1: entered promiscuous mode [ 903.786035][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 903.896159][T30775] xt_recent: Unsupported userspace flags (000000c5) [ 903.926633][T30512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.968977][T30512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.212922][T30512] team0: Port device team_slave_0 added [ 904.252341][T30512] team0: Port device team_slave_1 added [ 904.298764][T30794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6032'. [ 904.400378][T30512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.435325][T30512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.463603][ T12] IPVS: stop unused estimator thread 0... [ 904.532505][T30512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.574081][T30512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.583520][T30512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.611762][T30512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.648752][ T5634] Bluetooth: hci1: command tx timeout [ 904.676859][T30788] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 904.690578][T30788] syzkaller1: linktype set to 823 [ 904.876705][T30512] hsr_slave_0: entered promiscuous mode [ 904.895868][T30512] hsr_slave_1: entered promiscuous mode [ 904.929203][T30512] debugfs: 'hsr0' already exists in 'hsr' [ 904.951794][T30512] Cannot create hsr debugfs directory [ 905.042540][T30820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6035'. [ 905.633090][T30512] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 905.689080][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 905.864313][T30512] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 906.064170][T30512] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 906.104340][T30858] xt_l2tp: v2 doesn't support IP mode [ 906.167016][T30858] tipc: Enabling of bearer rejected, failed to enable media [ 906.187537][T30862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6044'. [ 906.310116][T30512] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 907.222559][T30912] bond11: Unable to set up delay as MII monitoring is disabled [ 907.259908][T30912] bond11 (unregistering): Released all slaves [ 907.334449][T30512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 907.362688][T30512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 907.376863][T30512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 907.407304][T30512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 907.425532][T30512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 907.452931][T30512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 907.471827][T30512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 907.502937][T30512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 907.813488][T30512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.948489][T30512] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.021007][T10810] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.028237][T10810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.107709][T10810] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.114975][T10810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.187611][T30954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6058'. [ 908.774760][T30980] lo: left allmulticast mode [ 908.791673][T30980] tunl0: left allmulticast mode [ 908.816171][T30980] gre0: left allmulticast mode [ 908.846246][T30980] gretap0: left allmulticast mode [ 908.897651][T30980] ip_vti0: left allmulticast mode [ 908.939434][T30980] ip6_vti0: left allmulticast mode [ 908.966187][T30980] §: left allmulticast mode [ 908.975503][T30998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.996696][T30980] ip6tnl0: left allmulticast mode [ 909.010014][T30980] ip6gre0: left allmulticast mode [ 909.017659][T30980] syz_tun: left allmulticast mode [ 909.023176][T30980] ip6gretap0: left allmulticast mode [ 909.028966][T30980] nlmon0: left allmulticast mode [ 909.036336][T30980] batadv0: left allmulticast mode [ 909.043763][T30980] vxcan0: left allmulticast mode [ 909.049524][T30980] veth0: left allmulticast mode [ 909.055346][T30980] veth1: left allmulticast mode [ 909.061029][T30980] wg0: left allmulticast mode [ 909.066086][T30980] wg1: left allmulticast mode [ 909.071635][T30980] wg2: left allmulticast mode [ 909.076725][T30980] veth0_to_bridge: left allmulticast mode [ 909.083282][T30980] bridge_slave_0: left allmulticast mode [ 909.089318][T30980] veth1_to_bridge: left allmulticast mode [ 909.095945][T30980] bridge_slave_1: left allmulticast mode [ 909.103812][T30980] bond_slave_0: left allmulticast mode [ 909.109739][T30980] veth1_to_bond: left allmulticast mode [ 909.117126][T30980] bond_slave_1: left allmulticast mode [ 909.124710][T30980] veth0_to_team: left allmulticast mode [ 909.143013][T30980] veth0_to_batadv: left allmulticast mode [ 909.162812][T30980] batadv_slave_0: left allmulticast mode [ 909.175514][T30980] xfrm0: left allmulticast mode [ 909.182805][T30980] veth0_to_hsr: left allmulticast mode [ 909.189008][T30980] veth1_to_hsr: left allmulticast mode [ 909.196521][T30980] veth1_virt_wifi: left allmulticast mode [ 909.202950][T30980] veth0_virt_wifi: left allmulticast mode [ 909.209075][T30980] virt_wifi0: left allmulticast mode [ 909.217985][T30980] veth1_vlan: left allmulticast mode [ 909.226515][T30980] vlan1: left allmulticast mode [ 909.232025][T30980] macvlan0: left allmulticast mode [ 909.237536][T30980] macvlan1: left allmulticast mode [ 909.243311][T30980] ipvlan0: left allmulticast mode [ 909.248751][T30980] ipvlan1: left allmulticast mode [ 909.254411][T30980] veth0_vlan: left allmulticast mode [ 909.260097][T30980] geneve0: left allmulticast mode [ 909.266302][T30980] geneve1: left allmulticast mode [ 909.272057][T30980] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 909.279534][T30980] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 909.287426][T30980] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 909.295500][T30980] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 909.303516][T30980] mac80211_hwsim hwsim31 wlan0: left promiscuous mode [ 909.310772][T30980] mac80211_hwsim hwsim31 wlan0: left allmulticast mode [ 909.317955][T30980] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 909.325961][T30980] bridge1: left allmulticast mode [ 909.332720][T30980] vlan3: left allmulticast mode [ 909.337651][T30980] team0: left allmulticast mode [ 909.342767][T30980] team_slave_0: left allmulticast mode [ 909.348312][T30980] team_slave_1: left allmulticast mode [ 909.354261][T30980] bridge2: left allmulticast mode [ 909.359482][T30980] ip6tnl1: left allmulticast mode [ 909.364972][T30980] ip6erspan0: left allmulticast mode [ 909.370773][T30980] mac80211_hwsim hwsim39 wlan2: left allmulticast mode [ 909.377867][T30980] mac80211_hwsim hwsim40 wlan3: left allmulticast mode [ 909.385141][T30980] gretap1: left allmulticast mode [ 909.390566][T30980] gre1: left allmulticast mode [ 909.395483][T30980] bond1: left allmulticast mode [ 909.400545][T30980] veth0_to_bond: left allmulticast mode [ 909.406293][T30980] bond2: left allmulticast mode [ 909.411633][T30980] bridge3: left allmulticast mode [ 909.416867][T30980] vti0: left allmulticast mode [ 909.421981][T30980] syztnl1: left allmulticast mode [ 909.427257][T30980] bond3: left allmulticast mode [ 909.432581][T30980] bond4: left allmulticast mode [ 909.437697][T30980] ipip0: left allmulticast mode [ 909.444005][T30980] bridge4: left allmulticast mode [ 909.449201][T30980] vlan0: left allmulticast mode [ 909.455316][T30980] bond0: left allmulticast mode [ 909.460732][T30980] bond5: left allmulticast mode [ 909.465899][T30980] veth2: left allmulticast mode [ 909.471269][T30980] veth3: left allmulticast mode [ 909.476284][T30980] veth4: left allmulticast mode [ 909.481613][T30980] veth5: left allmulticast mode [ 909.486715][T30980] ipip1: left allmulticast mode [ 909.492077][T30980] bond6: left allmulticast mode [ 909.497267][T30980] vlan4: left allmulticast mode [ 909.502390][T30980] bond7: left allmulticast mode [ 909.507490][T30980] bridge5: left allmulticast mode [ 909.513066][T30980] bridge6: left allmulticast mode [ 909.541191][T30980] veth7: left allmulticast mode [ 909.551137][T30980] bond9: left promiscuous mode [ 909.880618][T31013] netlink: 'syz.2.6066': attribute type 13 has an invalid length. [ 909.922293][T31013] netlink: 'syz.2.6066': attribute type 17 has an invalid length. [ 910.055027][T31013] gretap0: left promiscuous mode [ 910.227907][T31013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.252491][T31013] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.358341][T31013] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 910.390695][T31013] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 910.445079][T31013] veth1_macvtap: left promiscuous mode [ 910.464941][T31013] veth0_macvtap: left promiscuous mode [ 910.482560][T31013] veth0_macvtap: entered promiscuous mode [ 910.507645][T31013] veth1_macvtap: entered promiscuous mode [ 910.535286][T31013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 910.566113][T31013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 910.597500][T31013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 910.624531][T31013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 910.685991][T31013] gretap0: entered promiscuous mode [ 910.823902][T31013] A link change request failed with some changes committed already. Interface wpan0 may have been left with an inconsistent configuration, please check. [ 910.856693][T31027] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6068'. [ 910.986442][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.063607][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.114498][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.160566][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.526821][T31048] lo speed is unknown, defaulting to 1000 [ 911.585737][T30512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.644426][T31048] lo speed is unknown, defaulting to 1000 [ 911.698235][T10810] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 911.734400][T31048] lo speed is unknown, defaulting to 1000 [ 911.860924][T30512] veth0_vlan: entered promiscuous mode [ 911.876734][T31091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6074'. [ 911.911734][T30512] veth1_vlan: entered promiscuous mode [ 912.056051][T30512] veth0_macvtap: entered promiscuous mode [ 912.091914][T30512] veth1_macvtap: entered promiscuous mode [ 912.177646][T30512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.246471][T30512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.273864][T31107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6076'. [ 912.293096][ T7086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.322041][ T7086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.347422][ T7086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.476775][ T7086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.648167][T31107] netlink: 524 bytes leftover after parsing attributes in process `syz.4.6076'. [ 912.669585][T10817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.696496][T10817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.767292][T26135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.786200][T26135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.098255][T31127] netlink: 'syz.1.6081': attribute type 2 has an invalid length. [ 913.404241][T31138] bridge0: port 3(dummy0) entered blocking state [ 913.419973][T31138] bridge0: port 3(dummy0) entered disabled state [ 913.437275][T31138] dummy0: entered allmulticast mode [ 913.455614][T31138] dummy0: entered promiscuous mode [ 913.467476][T31138] bridge0: port 3(dummy0) entered blocking state [ 913.474040][T31138] bridge0: port 3(dummy0) entered forwarding state [ 913.525893][T31142] dummy0: left allmulticast mode [ 913.549423][T31142] dummy0: left promiscuous mode [ 913.584314][T31142] bridge0: port 3(dummy0) entered disabled state [ 913.954963][ T4940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 913.968650][ T4940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 913.977187][ T4940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 913.987510][ T4940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 913.995528][ T4940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 914.450590][T31145] lo speed is unknown, defaulting to 1000 [ 914.457626][T31145] lo speed is unknown, defaulting to 1000 [ 914.465115][T31145] lo speed is unknown, defaulting to 1000 [ 914.835743][T31145] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.843085][T31145] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.850360][T31145] bridge_slave_0: entered allmulticast mode [ 914.857736][T31145] bridge_slave_0: entered promiscuous mode [ 914.866166][T31145] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.874033][T31145] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.882384][T31145] bridge_slave_1: entered allmulticast mode [ 914.889643][T31145] bridge_slave_1: entered promiscuous mode [ 914.920777][T31145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.933591][T31145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.967139][T31145] team0: Port device team_slave_0 added [ 914.975510][T31145] team0: Port device team_slave_1 added [ 915.004822][T31145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.012272][T31145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.038460][T31145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.051194][T31145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.058209][T31145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.084618][T31145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.135731][T31145] hsr_slave_0: entered promiscuous mode [ 915.142469][T31145] hsr_slave_1: entered promiscuous mode [ 915.148642][T31145] debugfs: 'hsr0' already exists in 'hsr' [ 915.154527][T31145] Cannot create hsr debugfs directory [ 915.868968][T31118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 915.915400][T31145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 915.963908][T31145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 916.004260][T31145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 916.015350][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 916.072751][T31145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 916.081343][ T4940] Bluetooth: hci5: command tx timeout [ 916.095177][T31145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 916.113457][T31145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 916.125126][T31145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 916.143610][T31145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 916.212497][T31172] lo speed is unknown, defaulting to 1000 [ 916.255063][T31172] lo speed is unknown, defaulting to 1000 [ 916.297863][T31172] lo speed is unknown, defaulting to 1000 [ 916.459534][T31145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.535518][T31145] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.593143][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.600367][ T7086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.650119][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.657423][ T7086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.831967][T31207] netlink: 'syz.1.6094': attribute type 4 has an invalid length. [ 916.850480][T31207] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6094'. [ 917.025497][T31205] syzkaller0: entered promiscuous mode [ 917.031419][T31205] syzkaller0: entered allmulticast mode [ 917.101215][T31216] geneve1: entered promiscuous mode [ 917.111857][T31216] geneve1: entered allmulticast mode [ 917.166106][T31214] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6095'. [ 918.163105][ T4940] Bluetooth: hci5: command tx timeout [ 920.134384][T31245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6100'. [ 920.168926][T31244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6101'. [ 920.240767][ T4940] Bluetooth: hci5: command tx timeout [ 920.279881][T31247] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 920.336940][T31245] macvlan5: entered promiscuous mode [ 920.342516][T31245] macvlan5: entered allmulticast mode [ 920.355121][T31245] bond7: (slave macvlan5): Error -98 calling set_mac_address [ 920.815872][T31265] IPv6: addrconf: prefix option has invalid lifetime [ 920.822668][T31265] IPv6: addrconf: prefix option has invalid lifetime [ 921.031174][T31279] netlink: 'syz.1.6107': attribute type 1 has an invalid length. [ 921.086418][T31279] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6107'. [ 921.158443][T31145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.305912][T31145] veth0_vlan: entered promiscuous mode [ 921.354675][T31145] veth1_vlan: entered promiscuous mode [ 921.437941][T31289] netlink: 'syz.2.6112': attribute type 1 has an invalid length. [ 921.523742][T31289] bond8: entered promiscuous mode [ 921.539524][T31289] 8021q: adding VLAN 0 to HW filter on device bond8 [ 921.605747][T31293] syzkaller0: entered promiscuous mode [ 921.634284][T31293] syzkaller0: entered allmulticast mode [ 921.665435][T31145] veth0_macvtap: entered promiscuous mode [ 921.700456][T31293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6111'. [ 921.723603][T31289] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 921.739794][T31293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6111'. [ 921.757628][T31289] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 921.800036][T31289] bond8: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 921.823993][T31289] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 921.909802][T31145] veth1_macvtap: entered promiscuous mode [ 921.976703][T31145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.033226][T31145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.090132][T10810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.118505][T10810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.158052][T10810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.209539][T31299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6114'. [ 922.231978][T31305] netlink: 'syz.2.6114': attribute type 21 has an invalid length. [ 922.242122][T10810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.270728][T31305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6114'. [ 922.321597][ T4940] Bluetooth: hci5: command tx timeout [ 922.907829][T31305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 923.023302][T10812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.049115][T10812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.128236][T10810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.143086][T10810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.154791][T31328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6121'. [ 923.759344][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 923.778065][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 923.794701][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 923.806033][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 923.816036][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 924.243033][T31368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6129'. [ 924.480676][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 924.741427][T31352] lo speed is unknown, defaulting to 1000 [ 924.744330][T31389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6132'. [ 924.766370][T31352] lo speed is unknown, defaulting to 1000 [ 924.794385][T31352] lo speed is unknown, defaulting to 1000 [ 925.048231][T31402] Cannot find add_set index 2 as target [ 925.083128][T31402] Cannot find add_set index 2 as target [ 925.153036][T31402] Cannot find add_set index 2 as target [ 925.392337][T31413] syzkaller1: entered promiscuous mode [ 925.408317][T31413] syzkaller1: entered allmulticast mode [ 925.756882][T31426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6139'. [ 925.901580][T31436] xt_hashlimit: size too large, truncated to 1048576 [ 925.915012][T31436] xt_hashlimit: max too large, truncated to 1048576 [ 925.922061][ T4940] Bluetooth: hci0: command tx timeout [ 927.026331][T31475] netlink: 'syz.4.6149': attribute type 10 has an invalid length. [ 927.177657][T31486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6152'. [ 927.181247][T31480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.195519][T31486] netlink: 'syz.1.6152': attribute type 2 has an invalid length. [ 927.195553][T31486] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6152'. [ 927.244914][T31480] bond0 (unregistering): Released all slaves [ 927.382015][T31352] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.400118][T31352] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.419094][T31352] bridge_slave_0: entered allmulticast mode [ 927.464453][T31498] netlink: 'syz.1.6154': attribute type 1 has an invalid length. [ 927.479667][T31352] bridge_slave_0: entered promiscuous mode [ 927.498437][T31498] netlink: 'syz.1.6154': attribute type 4 has an invalid length. [ 927.517075][T31352] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.535830][T31498] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6154'. [ 927.547336][T31501] netlink: 'syz.1.6154': attribute type 1 has an invalid length. [ 927.551420][T31352] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.559430][T31502] Bluetooth: MGMT ver 1.23 [ 927.576467][T31352] bridge_slave_1: entered allmulticast mode [ 927.591416][T31352] bridge_slave_1: entered promiscuous mode [ 927.637566][T31501] netlink: 'syz.1.6154': attribute type 4 has an invalid length. [ 927.647169][T31352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.671308][T31501] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6154'. [ 927.686284][T31352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.867338][T31352] team0: Port device team_slave_0 added [ 927.894533][T31352] team0: Port device team_slave_1 added [ 927.908288][T31512] pim6reg1: entered promiscuous mode [ 927.914885][T31512] pim6reg1: entered allmulticast mode [ 927.943648][T31515] "syz.4.6158" (31515) uses obsolete ecb(arc4) skcipher [ 928.002101][ T4940] Bluetooth: hci0: command tx timeout [ 928.057141][T31352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.083915][T31352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.090951][T31525] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6160'. [ 928.146623][T31352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.199013][T31529] netlink: 'syz.4.6162': attribute type 4 has an invalid length. [ 928.307690][ T30] audit: type=1804 audit(1784033326.177:15): pid=31535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6163" name="/newroot/26/cgroup.controllers" dev="tmpfs" ino=152 res=1 errno=0 [ 928.355537][ T30] audit: type=1800 audit(1784033326.177:16): pid=31535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6163" name="cgroup.controllers" dev="tmpfs" ino=152 res=0 errno=0 [ 928.517118][T31352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.536546][T31352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.625108][T31352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.696608][T31455] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 928.708755][T31455] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 928.717262][T31455] CPU: 1 UID: 0 PID: 31455 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 928.726842][T31455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 928.736928][T31455] RIP: 0010:klist_del+0x49/0x110 [ 928.742062][T31455] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 98 6e f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b 98 6e f6 4d 8b 7e 58 4c 89 f7 e8 bf 44 [ 928.761689][T31455] RSP: 0018:ffffc9000429f848 EFLAGS: 00010202 [ 928.767814][T31455] RAX: 000000000000000b RBX: ffff888026283060 RCX: ffff888031671f00 [ 928.775832][T31455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 928.783819][T31455] RBP: ffffc9000429f970 R08: ffff888075bd9873 R09: 1ffff1100eb7b30e [ 928.791805][T31455] R10: dffffc0000000000 R11: ffffed100eb7b30f R12: dffffc0000000000 [ 928.799799][T31455] R13: 1ffff11004c5060c R14: 0000000000000000 R15: ffff88803579c888 [ 928.807789][T31455] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 928.816742][T31455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 928.823340][T31455] CR2: 00007f27e2902340 CR3: 00000000561f0000 CR4: 00000000003526f0 [ 928.831426][T31455] Call Trace: [ 928.834947][T31455] [ 928.837901][T31455] device_del+0x27f/0x8f0 [ 928.842369][T31455] ? lockdep_hardirqs_on+0x7a/0x110 [ 928.847608][T31455] ? __pfx_device_del+0x10/0x10 [ 928.852490][T31455] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 928.858633][T31455] ? netdev_unregister_kobject+0x347/0x450 [ 928.864540][T31455] unregister_netdevice_many_notify+0x1be4/0x2150 [ 928.871013][T31455] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 928.877805][T31455] ? rtnl_net_dev_lock+0x36/0x2f0 [ 928.882902][T31455] ? rtnl_net_dev_lock+0x36/0x2f0 [ 928.888394][T31455] unregister_netdev+0x155/0x1f0 [ 928.893374][T31455] ? __pfx_unregister_netdev+0x10/0x10 [ 928.898876][T31455] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 928.904736][T31455] bnep_session+0x2af2/0x2d20 [ 928.909548][T31455] ? __lock_acquire+0x683/0x2cf0 [ 928.914532][T31455] ? kthread_affine_node+0x2b2/0x360 [ 928.919852][T31455] ? __pfx_bnep_session+0x10/0x10 [ 928.924909][T31455] ? do_raw_spin_lock+0x12b/0x2f0 [ 928.929974][T31455] ? __pfx_woken_wake_function+0x10/0x10 [ 928.935632][T31455] ? __kthread_parkme+0x71/0x1f0 [ 928.940601][T31455] ? __kthread_parkme+0x196/0x1f0 [ 928.945654][T31455] kthread+0x388/0x470 [ 928.949751][T31455] ? __pfx_bnep_session+0x10/0x10 [ 928.954796][T31455] ? __pfx_kthread+0x10/0x10 [ 928.959421][T31455] ret_from_fork+0x514/0xb70 [ 928.964096][T31455] ? __pfx_ret_from_fork+0x10/0x10 [ 928.969240][T31455] ? __switch_to+0xc89/0x1420 [ 928.973946][T31455] ? __pfx_kthread+0x10/0x10 [ 928.978575][T31455] ret_from_fork_asm+0x1a/0x30 [ 928.983372][T31455] [ 928.986426][T31455] Modules linked in: [ 928.991825][T31455] ---[ end trace 0000000000000000 ]--- [ 928.998006][T31455] RIP: 0010:klist_del+0x49/0x110 [ 929.008398][T31455] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 98 6e f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b 98 6e f6 4d 8b 7e 58 4c 89 f7 e8 bf 44 [ 929.028833][T31455] RSP: 0018:ffffc9000429f848 EFLAGS: 00010202 [ 929.035063][T31455] RAX: 000000000000000b RBX: ffff888026283060 RCX: ffff888031671f00 [ 929.043294][T31455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 929.052066][T31455] RBP: ffffc9000429f970 R08: ffff888075bd9873 R09: 1ffff1100eb7b30e [ 929.060660][T31455] R10: dffffc0000000000 R11: ffffed100eb7b30f R12: dffffc0000000000 [ 929.068704][T31455] R13: 1ffff11004c5060c R14: 0000000000000000 R15: ffff88803579c888 [ 929.077331][T31455] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 929.087682][T31455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 929.094423][T31455] CR2: 000000110c383c8d CR3: 000000001fefc000 CR4: 00000000003526f0 [ 929.102858][T31455] Kernel panic - not syncing: Fatal exception [ 929.109561][T31455] Kernel Offset: disabled [ 929.113898][T31455] Rebooting in 86400 seconds..