last executing test programs: 1m36.72422687s ago: executing program 0 (id=1067): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x18}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000008500000007000000950000000000000028"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) poll(&(0x7f0000000000)=[{r3, 0xa404}, {r4, 0x21}], 0x2, 0xfffffffe) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x25, &(0x7f0000000380)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fff}, @printk={@llu}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0x4, 0x10}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffde9}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) 1m29.19885243s ago: executing program 0 (id=1067): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x18}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000008500000007000000950000000000000028"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) poll(&(0x7f0000000000)=[{r3, 0xa404}, {r4, 0x21}], 0x2, 0xfffffffe) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x25, &(0x7f0000000380)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fff}, @printk={@llu}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0x4, 0x10}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffde9}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) 1m16.777070813s ago: executing program 0 (id=1067): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x18}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000008500000007000000950000000000000028"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) poll(&(0x7f0000000000)=[{r3, 0xa404}, {r4, 0x21}], 0x2, 0xfffffffe) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x25, &(0x7f0000000380)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fff}, @printk={@llu}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0x4, 0x10}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffde9}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) 1m6.988254508s ago: executing program 0 (id=1067): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x18}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000008500000007000000950000000000000028"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) poll(&(0x7f0000000000)=[{r3, 0xa404}, {r4, 0x21}], 0x2, 0xfffffffe) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x25, &(0x7f0000000380)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fff}, @printk={@llu}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0x4, 0x10}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffde9}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) 56.717835667s ago: executing program 0 (id=1067): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x18}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000008500000007000000950000000000000028"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) poll(&(0x7f0000000000)=[{r3, 0xa404}, {r4, 0x21}], 0x2, 0xfffffffe) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x25, &(0x7f0000000380)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fff}, @printk={@llu}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0x4, 0x10}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffde9}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) 46.965802722s ago: executing program 0 (id=1067): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x18}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000008500000007000000950000000000000028"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) poll(&(0x7f0000000000)=[{r3, 0xa404}, {r4, 0x21}], 0x2, 0xfffffffe) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x25, &(0x7f0000000380)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fff}, @printk={@llu}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0x4, 0x10}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffde9}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) 4.036238366s ago: executing program 1 (id=2350): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 3.840010254s ago: executing program 1 (id=2353): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1828000003000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd0000000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x90) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/117, 0x75}, {&(0x7f0000000f80)=""/204, 0xcc}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f0000001080)=""/188, 0xbc}], 0x6, 0x4, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$inet6(0xa, 0x80001, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}, 0x108) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1828000003000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd0000000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x90) (async) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/117, 0x75}, {&(0x7f0000000f80)=""/204, 0xcc}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f0000001080)=""/188, 0xbc}], 0x6, 0x4, 0xffffffff) (async) 3.632224962s ago: executing program 1 (id=2357): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x6, 0x6, 0x5) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r3, 0x0, r4, 0x0, 0x39000, 0x0) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0x4, r2, 0x2f, r4}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0x7f, 0x4) 1.963505665s ago: executing program 4 (id=2375): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x10, &(0x7f0000000c00)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x2, 0x9, 0x0, 0xfffd, 0x7f}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @ldst={0x1, 0x0, 0x3, 0xb, 0x7, 0xfffffffffffffff4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000340)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x100, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x6, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0, r1, 0x1, r0], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4000000000000242, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x95, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000300), 0x4, 0x4200043, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000680)='GPL\x00', 0x1, 0xdd, &(0x7f00000006c0)=""/221, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x101}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pi6 \x00'}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0x80, 0x1, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0xf}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x2}, 0xc) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x22, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@call={0x85, 0x0, 0x0, 0x61}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x0, 0x5, 0xa, 0x9, 0xfffffffffffffff4, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2050}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xe5, &(0x7f0000000200)=""/229, 0x41000, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x0, &(0x7f0000000b00)=[r5, 0xffffffffffffffff, r6, r8, 0xffffffffffffffff, r9, r10, r11, 0x1], 0x0, 0x10, 0xffffffff}, 0x94) 1.938012709s ago: executing program 4 (id=2376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000380)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x14, 0x30, 0x1, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xb4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x800}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xc}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc2000422}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x204c014}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 1.931120976s ago: executing program 3 (id=2378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x40010, r1, 0xb5cce000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r4, r3, 0x0, 0xf03a0005) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4000000) 1.719849864s ago: executing program 4 (id=2382): r0 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000180)={0x2000200a}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000180)={0x2000200a}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000024f5638c074706e20000000008000140af6a000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028"], 0xdc}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r9, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.608318196s ago: executing program 4 (id=2385): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0xd4, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x7a, 0x6, "3f81e8494a3bb7167bc6e019628cf29a5510c8b9cbce05c0549ec7f5d277abda76c13fdb31bd42efca992b1d66c1f6df77f44308794e97372984ae720e59ea0f9194c3a9c05e53f3eac51d0e438d2af4f0df14c5e5593ef7037f52255887b4754e291f5086e7ff3494a7539d8a1179a27f88bd51fd81"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x168}, 0x1, 0x0, 0x0, 0x2400c010}, 0x20000004) socketpair(0x25, 0x80000, 0x3ff, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000002980)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/169, 0xa9}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/232, 0xe8}, {&(0x7f0000002540)=""/145, 0x91}, {&(0x7f0000002600)=""/73, 0x49}, {&(0x7f0000002680)=""/148, 0x94}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/121, 0x79}, {&(0x7f0000002800)=""/98, 0x62}], 0xa, &(0x7f0000002940)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x20) ppoll(&(0x7f00000029c0)=[{r0, 0x2000}, {r0, 0x1000}], 0x2, &(0x7f0000002a00), &(0x7f0000002a40)={[0x4]}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x50, 0x1409, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x85) pselect6(0x40, &(0x7f0000002bc0)={0x8, 0x6, 0x8, 0x1, 0x5, 0x80000001, 0x200, 0x1f9054b8}, &(0x7f0000002c00)={0x5, 0x3, 0x8, 0x782, 0x1ff, 0xc, 0x4, 0x8000000000000001}, &(0x7f0000002c40)={0xda32, 0xf0d6, 0xfffffffffffffd1d, 0x0, 0x7, 0x2, 0x9, 0x3}, &(0x7f0000002c80)={0x0, 0x3938700}, &(0x7f0000002d00)={&(0x7f0000002cc0)={[0x1]}, 0x8}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000002d40)={0x7, 'pimreg1\x00', {0x2}, 0x5}) socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000002d80), 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002dc0)={'geneve0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x68, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xc8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfff}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2800) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000002f40)={0x0, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0xb}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x20, {0x3, 0x6, 0x83, 0x2, [0x1, 0x5, 0x4]}}, @enc_lim={0x4, 0x1, 0x3}]}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002fc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = epoll_create(0x100) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000003000)={0x19}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000003040), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r7, 0x8927, &(0x7f0000003080)={'nr0\x00'}) ioctl$FIONCLEX(r1, 0x5450) sendto$inet(r1, &(0x7f00000030c0)="58ea5f6652023a1b529f9292eb28132610d9d8ff15a731e8aeab161b7c276247825fc08001d5bc24f06f6230a6917d8ab82198abe1862651fac105cf1dda59513be163e7e12283b3ed1066c2f83326b5fe78e31f1b00e9cc4e4acddef59e9d937b16763a4111f5fb2311b7ea00c46c77abcb18edf1bece61da7e7a4a07d03b82c6e57060489f8091d9abf1e8cb82cce93ca546a059a70e4f10c7597250add4bec9b857d264917e5d18a077bde66913e23ed85252085a620a13e4f118d6faa05c5d21b85d3fce1bed04ceae3852e61f49ccb2f2bef87d150ae810632e79be6731bd5c408f3abec4ede35ba7c68ae1c6fb37ecadd7d6661d6b820a141a3b18410cfe19f6967b15a564147849f04b00977499697c7227ca19217282732e9d9dbd9a7134b5cd4aac7d1b5d65b04caa6144daa6c470455283898c8b2e55c947dbcbde4794527f7c96745c8d08024ff6c76133862a058bf3bcc016888eac85416d7533626cc3846c4e4c2f74d1b54f75b955ad0f05c7546aed8f16225ae9d0feae19516d8d71ff753ed4d3ccf50127b534ad8d814aac53a419d6bbf62b73702cc703d83fd372548376766eec7d51c7b6ddee627625d4d2a66e125f508c7cf8bf09b1c1d1f47b7c153dd34a52cb007e176e0edd6a53a29b62e07923a6d58a1b89d612864eb4922c970426d4f5517284b5da0d0dd065adf90c0af5bb35bc50f1335301a8e563962fc9192fa99a0ea41803d939894989e7d8e430067f3817f0e5634e4d48161aeee1b6c09381deae7f30990bdc4477d3011b7c6ab263b413635479ff9e758174c40783b4dfe0ebe3803fab88a5bc0552e5264b990c152c66e90f0f3560ba1de591578d2ed713b61b2198ad5494860c3b6bd82c9d36fbda8aec3276d800d80cd085c92926118085858a8f617c39d272063853859c90cf94d1c51e020f86e96fe4328e7627ccc4cb5cee6ca4527c015122f28d546d42c4b8b95c476554706a79ec6015e49b6a357008777cbd2b805c8ceae16c3be39eadc9cd16084e53f0d4c2dab4eb3be27152cf97be559e55bf4f2b9454ebd3a653379b4fc3c3318998d7c62838128b8b670d5bac7a365b47353f8138b69f892b23438e8c267a13a33597aa01e626a7ff1d0a4de74f42cb839719fb09d9e65ecccb7b9141dcf8ee003c9aa1b7633cda415896bf5cd9ee3640fad6622e4b9b6ea11f62eb00febc57ec94a3d5fbe9613cf1fd208d7557340fa6aafa239a58b922a74f4a962949be356aee05bac209b685a9b894618ad69793bbb3a79c7c15d84cb2b39caedb4ed26b2d5a8066c585b5e9faf91dd79621bce664420c14756f254b373e555278e12fda1a85df6e14a75fdba09cb7956e09d200bb017f6f4040cb0374b28c9059d8752bd77cede9fee957ab0fb66aa3caf5cc3cfce1721f6f2d5904119e677e4307ea1da12eff239de8d861491440b5ed1679a020eb0efd9afade809deab79ad8a5393f0c080734fcb4cbdc5d76760f8f0b3de922809feb4d9d49062123c3e0d703d919de09e5cd8d3570ea85a0c1cc04c691d3fc0e0cff4eb07046cffc8e52104e0d4138e8e039f85e15b59e4ab9708f1801959176de2dbcd4ce91427036387d5bba825cefc014117b0f7ab5292ef8155ae3c912af66d9bbde8520370d6da7c4df50963130341b6184988c2c939f802f1afa5a10ea60d34cebd14ef50f2584c0a531f1471e60f2a5cdfd54224af47073108e846ea0921bdaedd3fc129c774182a080aa01930d4ff50a69f215f437121be93af165a9eff422516ff43cde4b3c68e9f7dbc2e6505651fda381d1d669c46cafac3c99a37f22152b3d46a40ecdfa11347bcd118b65fb5eafdf79ead35bbf11556364c06995f11669efae7a0a3f4326975a90daf643799f39d82b7874f35b9e2ca12fd82d347a227808163ebc3b1090c7f81b6bd4d43538603bfbaddd583bcc47a95577776a18ef98e840d9e1d946960a2ba4cb2920e014e37ccdaf4dbe1e87c0263e1a76eac9eef8dadb4531ba6fd50e48e406ac501d3df8b8c678ceccc981b216909107936367fcf339ab8e7e9f7eec72e6efb4bf5cbdad27c34c169c9bdbf5b5d79b4141fb4b5fefa5a36de01db93246f973735a542490727db5a6fd02181a333b5da92f8965ce561ca5b1a31360ed54684ce610b47ad73a69ed5ab6e15d24cf5c1ecffac5c57749dabf2628e2a59c89c6c2791193c97407dee35ba33b04e33536ce91fba63b29b3532b7763b59787803be1ad5393db6e15ff65e5ad0939f2d357714c16b2a7f83eeac9dff23663884a425dd750d263fada522b7f7228260968180679d16e2f16e1d9e6657731e00687b65e7fac66cdba7445b64ff16852d4f34d256b146e7d5dea9df1722d952160da0547004478fe5ee35f7b07febe3667e144f213ac9ecead3e88c30620dc178ef44e7972418cc17cb1918465ff0eb87f81045ccde17c308b3e6a34834e1af6967812c75c5653765ad9a5ced266f5789cfc58a9d94d1632aab0aa8a224ec1e268b0656c92c4900efe5a82af4532d22d5b486452acb95ca04b26307813df77878e16167a7ec2a093c3cb6c25b3969cf23420f8665595eb819d71197a5a9c26db848e37cadbe1f0b0a51bc84863897e9ed279e6e4d0a175e44a6251deb02116f330cd963dc2a267b04a790fc033a45fe50fc5e3e6ddf966fea0407e60f97a835da2d779a46c74301e0f90cbac42248986446a471ff370c2d0bd69ee4ff6931700ac65cd4468e4b3a756896211e4cdccc2c290b2327c7a66f10775211cb6178e862e824c18c748e4ff0aa8ec651c42ed23c0e46bc6e38b3024aabc8b735eac9619e4244c2d7dadf65fad59edb7f2a1d6db1dd49288b225444b50361fd788413b04c0810204f9f78a0feb70297856ebcf74f8f9426dfff62c8d013806112ee4b0bea041371911087709c70f724715afba6d3d66b158bc790dff82686fd905d150cf382e936cc1a9b97cf31a26c0775cb4400fbfece0fa6547bf06c1c17aeb77ea6cf33ac5ccf5841b4d1fb350ab94927f3ac38ceb65388868dff9253835e9164afb6fd5885df771c3db057f23d904357e6792d9a60b9f12b05ad263bc430ff7bc1007804cf473874b30e5bdced4fd00cc09d304d71a5b1b8cace5415342041b30540c04ed8a834fde60cb59a1a18edf3e98ef4789c6ea3578fbe0e38f51dd4d23f3ab7642ea734a58eb98ef73da64c6fe6a0c3149b742ec2b534a4b4b60e588c237b5221c93cd2b24a32eb0b126d54778a3e5057315b098c5374d7334309933025e684772b4ae8bb8a83f92bd6b103c9d3040a49e05fb8d3902483243f69630a651e54f2e0daf0ff068d82836413ffb49edcb91d76cb9d8dc642d9ea4480e393f1df1742b7ea58b744519897106acbea545b4588c728651246773502b648a0c1a0d50d9076a27d81b2baa654aeccc86087f1c673cddf2e3f2604c1ff97e762a1002f6caa382ec90c255769aab20cd8e968e89ed641c96e96c9593369b7ff613f3fdd76a4199bcc3ccd726f40187e764013f1af0ebcb84e94e7ea149ba9a1c123ce16f68ebf53b1b54878bac90d17666d4675ef296355b361a1654873f696e7cc6abd0da76b29cf59382ddad5d302db14a84c76855990d331c2b1950cc683e63cea625311e3a5d9598d0e03ad951728657c342d40e563fdfaf6265ca061b18a65581548dd21cb3f1ede75c36e936976d0bc42678d8e033f35a419ef7ffbf837aff096ece95d16444e7c7d55616fb34dead381633e22a75d118757e1f9b9feb5c7d4587ec719e7bfd5aec76e6984113457957740232c3e435d89e941a3f50bd1d5641adafd3fd87ac5fe67a73e071db2b6a20c1e2aa9de7334fc91738149797b7fa89c94eba5aa1b2368c49e3e23012754eb68ac3d07a2225a2c6fc5f2aeb9d315f7115a34de23c47c453fec523becf9a7acfba16748a07eb7526eb48f0a0c83276dbe7aae60abda766ffd3235b3c693b869aafa7f4d1cd29a279c330ef614b5e065689b5f2d8e9eb94e785baf15b477cfbbdedaff80970d69078b4708bb79f957a023a84bf81a098ca4751d8a56be2161162b39e451408df443732a796cfbe5aa4c1e7430ba50b579788f24f1ed407fb1ee40fe2e446692a7b353b0987b02f373c167f89e790b52d7958083b8babdc888dbeea26f16c2cb400a31ebadc2f71ba975fa7a210e1d2d59db1c7cb5b7e4c060b21d2851c8dd663108c841fbceeaa1a495b95ed6150285c796852883ec1553cfdafe155c140abc61aa9dc74476d3c2c829e90912ef8533e504d2b474bf772a5b07bd8518040c62fa81173f7439ae8e09d70995d98601aca41ebc19669bd2e5fc100c94cc77df3293dfa366ea251505d395e05f141b1949a00c86ec5b7d6c54d9e2047748077c1376a35313f550d6d845d6b26d8a53324c55d1c254441011d73fdd9f4d1ba1bb7bbae1ece904214e7a9c2e13d2950e20a9c6121e48fd7c48008df6c293cdc19d92783b0d8beb85c38d5a244162d1c42db01fa5c6f155afa3786fa7fea8de0276f648fdf220e57a352310ae14bbd43a45d199c5dd908f0749c7d7ebdd77f8243d52c173ca9c68adff94b107af0675680d1bd2be5e39a1af0cd5852608f7717d62141d1f788ee282a1ed382849b53f43c3e05b2919075b65bb3b684f6a0c255132d2bdce5676a980815c8e65e2bac4f08ec2615238553691ec553015f5344fb809469935823d62e007529e88a4f83a6683029b586dd199fb4c69e13c321d56b63d63760fd2899b1550825beb3c39457bdbf868b68fb54fd25a8e75317819a63ac1f99ec496515e40a34944fe583dbdb77c21eba81422acdac4f6d44718932fb1e0bad162552d4f12323865f69211c14c5046d0f096bca1a00d933928ff30e368d186c7aaecdfaccfa90b1893404aa0f80bf3aace0b8c77939ba6494bd7f91d14c83a251ce0470d7afce413e6500e3258e9b6cb5098cc79b91da17301f5cd4aebfaa4df367ef6b4b49270a6ed2e97708cc049b99da33149904b3ab916dab8cc020f13fa8d14b6ca427154a152b98b1a328e8cbdca3b0c3e9e40f21eab9e34839256cfcb39a42414213390eae964cb49523dc0dd2e6e16297843d72d9cae010c4522e4ad392fb2586dce1493ca35550cebea227848c44739123fbb8a1960544d51eed6798fe603eeee6064658ed751afb7e776185addfced21369f59419324b59cea00018f1f0e47c1d0988cc4963cae390b80b7685ea0aabb770c1a7a6dea293d6fd6fa34049c0d88884369fb96898425b5276889ff30efcea6d8e8a7e06bfc5c63b6d587b71fadb61e37c46d1e6d073dce8e4c4365edc3557b8aead68a2ddfcfeb51e1d8dc84423d3677c5b474d79168ac1a5a9627c4a6582d022895960c99e7831937abbe98ab8ec36bd8ddc2aee311e3a8d9c82d93ce140a49408edab1bf478550008866a3ba2e230209bda2039c80ae397e296355d310f6b8c6e3e0d648bb664ae055bd4098db557c0f7741ed44c0357e1dc6307b18039926540dd66ab63fcea7e0cebf7dc7ca7ebe116cd43544cc144028a1d52c95db43907a5ab32709a8fe70abaa9830ecf483d527fe49dd9b489f85686f60b8f9943bb1d4ced1fcf2ebac719099e1e9b5fb3dd2e756a3b3560525d88d89e9546e68070d74e2053cc4562f53ebfedb4d819307fbd730e59e13688e5f6ef9ba53ea72bcf27eecf04e2ef7f89ff0a160a50ff58de1717cf85b6a3016bc5288858e244fc07fa0c4f5684072ef63b54765d4944f63359578e036f4a5eb2dd", 0x1000, 0x22040810, &(0x7f00000040c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) clock_gettime(0x0, &(0x7f000000c880)={0x0, 0x0}) recvmmsg(r3, &(0x7f000000c700)=[{{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000004100)=""/57, 0x39}, {&(0x7f0000004140)=""/13, 0xd}, {&(0x7f0000004180)=""/232, 0xe8}, {&(0x7f0000004280)=""/1, 0x1}, {&(0x7f00000042c0)=""/61, 0x3d}, {&(0x7f0000004300)=""/178, 0xb2}, {&(0x7f00000043c0)=""/172, 0xac}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/216, 0xd8}], 0x9, &(0x7f0000005640)=""/76, 0x4c}, 0x9}, {{&(0x7f00000056c0), 0x80, &(0x7f00000059c0)=[{&(0x7f0000005740)=""/21, 0x15}, {&(0x7f0000005780)=""/184, 0xb8}, {&(0x7f0000005840)=""/156, 0x9c}, {&(0x7f0000005900)=""/148, 0x94}], 0x4, &(0x7f0000005a00)=""/232, 0xe8}, 0xfc000000}, {{&(0x7f0000005b00)=@can, 0x80, &(0x7f0000006e80)=[{&(0x7f0000005b80)=""/22, 0x16}, {&(0x7f0000005bc0)=""/244, 0xf4}, {&(0x7f0000005cc0)=""/226, 0xe2}, {&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/146, 0x92}], 0x5}, 0x5}, {{&(0x7f0000006f00)=@nfc_llcp, 0x80, &(0x7f0000009000)=[{&(0x7f0000006f80)=""/4096, 0x1000}, {&(0x7f0000007f80)=""/108, 0x6c}, {&(0x7f0000008000)=""/4096, 0x1000}], 0x3}, 0x2}, {{&(0x7f0000009040), 0x80, &(0x7f000000b380)=[{&(0x7f00000090c0)=""/4096, 0x1000}, {&(0x7f000000a0c0)=""/4096, 0x1000}, {&(0x7f000000b0c0)=""/188, 0xbc}, {&(0x7f000000b180)=""/236, 0xec}, {&(0x7f000000b280)=""/135, 0x87}, {&(0x7f000000b340)=""/38, 0x26}], 0x6, &(0x7f000000b400)=""/89, 0x59}, 0x5}, {{&(0x7f000000b480)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f000000c680)=[{&(0x7f000000b500)=""/114, 0x72}, {&(0x7f000000b580)=""/255, 0xff}, {&(0x7f000000b680)=""/4096, 0x1000}], 0x3, &(0x7f000000c6c0)=""/26, 0x1a}, 0x6}], 0x6, 0x0, &(0x7f000000c8c0)={r8, r9+60000000}) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f000000c900), &(0x7f000000c940)=0xc) r10 = accept4(r0, &(0x7f000000c980)=@generic, &(0x7f000000ca00)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f000000ca40)={'vxcan0\x00'}) 1.52684546s ago: executing program 3 (id=2387): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000360001032abd70000000000002220004000a000001000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x2, 0x0, 0x1000000}, 0x10}}, 0x80) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000001900), &(0x7f0000001940)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000027dbdf25030000000900030073797a31000000000500040001000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) recvfrom$inet6(r5, &(0x7f0000000000)=""/32, 0x20, 0x40000000, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000300000000000007fffffff851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000201b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000360001032abd70000000000002220004000a000001000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x2, 0x0, 0x1000000}, 0x10}}, 0x80) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000001900), &(0x7f0000001940)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000027dbdf25030000000900030073797a31000000000500040001000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) recvfrom$inet6(r5, &(0x7f0000000000)=""/32, 0x20, 0x40000000, 0x0, 0x0) (async) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000300000000000007fffffff851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000201b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async) 1.395603248s ago: executing program 3 (id=2388): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@fwd={0xc}, @enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x800}}]}, {0x0, [0x5f, 0x2e, 0x30, 0x0]}}, &(0x7f00000000c0)=""/228, 0x56, 0xe4, 0x1, 0x5}, 0x28) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x4, 0x7, 0x5, 0xfffffffffffffff7, 0xcba}, {0x8, 0x9, 0x80, 0x9, 0x1, 0x7}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe0001000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) 1.279862717s ago: executing program 3 (id=2390): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x440088c4) syz_emit_ethernet(0x99, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb00f682615c859e7eeb35bfec05ba3a30c35046ab14fc3ae6563b80a93acb6b67519cffbb79fc3277902b9aa57511dd91d7c545fd07c2e93e3dd11a254feaeedb8fb13cce43cf5befc6cd300712249fffb8fd8397b1c4a234c6175ba94188ddb64d1b915a44158eb8aba9cc707d4945fba44a9bc7cc0429cb66bbc10b451e110ea636d392cc6d13de018c299441"], &(0x7f00000001c0)={0x1, 0x4, [0x823, 0x37d, 0xa33, 0x976]}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000140)=0x4f4, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000)=0x5, 0x4) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001140)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ALPHA={0xfffffffffffffd0c, 0x4, 0x7}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xb}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={@local, 0x6f, r7}) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000038bf42ebe5491f599fdfdac8701e0001ac1414aa0300907803240c004700000000000000000100e6ab1414aaac1414008606000000"], 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='initcall_finish\x00', r8, 0x0, 0xfffffffffffffbb6}, 0x18) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x8045) (async) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b47880000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ac00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r11 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r11, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x38000000}}, 0x24) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) connect$bt_rfcomm(r10, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x38}, 0xa) 1.266219762s ago: executing program 2 (id=2391): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e", 0x48}], 0x2}, 0x0) 1.229237712s ago: executing program 3 (id=2392): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYBLOB="040013001400030017"], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=@raw=[@call={0x85, 0x0, 0x0, 0x20008a}, @exit], &(0x7f0000003240)='GPL\x00'}, 0x94) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(r7, 0x0, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r10, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084) 1.187068961s ago: executing program 2 (id=2393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1804000020756c250000000000202020611af8ff00000000bfa100000000000007010000f8ffffffb70a000008000000b70300000500001b85000000b800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) r5 = socket$kcm(0x2, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x2c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x20040840) setsockopt$sock_attach_bpf(r5, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0xc0, "e936fe7dc9d243ccb554736f84cb2f68ae9fb9a214c218b37ba5940a3f012d504b7ce16fb3213b8af12eccfcb38ebb0ba3e3eb92aa9e615bef8a505fb24bff4eef59fb0561c957fad770dc3e5409f32d3bcdcab085d9fc8d8c631178e979bad021e568c156908454ed4a9523bcd229635798ae80ff932fe4f996ee8a04aee7198f5a115500cbf6d5c28cc7afbff94616bc9a0bb9ea46d79a2aec06aa361039de587284d25fedb15517e5eaec3c27693606c858f99d8a6b89b92e5ecbb2dccc25"}, &(0x7f00000000c0)=0xc8) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r8, 0x1ff}, &(0x7f0000000140)=0x8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="d800000018008106bc65f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000000036010fab94dcf5c04e04bcb726f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4004010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="470a00000700000061114c000000000085000000150000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) 1.024198726s ago: executing program 2 (id=2394): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004feffff070004000000000008000500ac1414000f000600"], 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3"], 0x48) r3 = openat$cgroup_devices(r2, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t\n'], 0xa) 996.726977ms ago: executing program 2 (id=2395): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 912.950349ms ago: executing program 2 (id=2396): write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x410, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x10, 0x4}, 0x94) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x48040) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x48040) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x6, 0x3, 0x4) (async) r3 = socket(0x6, 0x3, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, 0x0, 0xc855) (async) sendmsg$DCCPDIAG_GETSOCK(r2, 0x0, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x20010, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x20010, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 559.719622ms ago: executing program 1 (id=2397): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/89, 0x59}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000140)=""/59, 0x3b}], 0x3, &(0x7f00000001c0)=""/119, 0x77}, 0x10001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000280)={0x8, 'wlan1\x00', {'bond_slave_1\x00'}, 0x1}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_delrule={0x48, 0x21, 0x20, 0x70bd2a, 0x25dfdbff, {0xa, 0x10, 0x20, 0x7, 0xf8, 0x0, 0x0, 0x7, 0x12}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0xf9}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x1, 0x10, 0x3, 0x10001, {{0x14, 0x4, 0x1, 0x8, 0x50, 0x67, 0x0, 0x7, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@ssrr={0x89, 0x1f, 0xce, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010100]}, @lsrr={0x83, 0xb, 0xc9, [@multicast2, @loopback]}, @timestamp={0x44, 0x10, 0x74, 0x0, 0x3, [0x40, 0x0, 0xca8]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x8, 0x1, {{0x3b, 0x4, 0x0, 0x26, 0xec, 0x67, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@timestamp_prespec={0x44, 0x4c, 0x4a, 0x3, 0x2, [{@local, 0xf}, {@local, 0x56e}, {@empty, 0x6}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x40}, {@multicast2, 0x6}, {@loopback, 0x9}, {@rand_addr=0x64010102, 0x1}, {@private=0xa010100, 0x6}]}, @end, @timestamp={0x44, 0x10, 0x79, 0x0, 0x0, [0x3, 0x0, 0x6]}, @ssrr={0x89, 0x27, 0x18, [@multicast1, @private=0xa010102, @broadcast, @local, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xe8, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}]}, @ssrr={0x89, 0xf, 0xb4, [@rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x8c, 0x3, 0x5, [{@loopback, 0x7f}, {@broadcast}, {@rand_addr=0x64010100, 0x1}]}, @timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x1, [{@broadcast}]}, @rr={0x7, 0xf, 0xe4, [@local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@RTM_NEWMDB={0x38, 0x54, 0x100, 0x70bd2c, 0x25dfdbfd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x1, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c800}, 0x30) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000840), &(0x7f0000000880)=0x4) (async) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000840), &(0x7f0000000880)=0x4) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000008c0)="fb8da31e9b06496e94466c1fdbeee776bc24f8b8137e33b5b2f0f8a440c8e948bfc6474e019482906e934ebd25f572823cd6428fea469a207f604371f54fe03fb4ae285b581147e3116077f78b4dcbc9db2bb6465e32d1d078c1571110bd681130cabd079fe7d0d07817a4033a5935d7b75003bdc7d2ebbae36476b658e592b3e488ff351b0d1da7d15ff6a56b6bb7c8f728aa29de53a8848223eedf4777fcf85eda5aa41e83aa75ac715bf8d5a0f6aaa001620c713d3c71039f4951b8fac10a6e2f21b5971488f9dd5e15a3cac2aa02fbfa96c8e60b349a140824f932a50ab031c36544", 0xe4) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000008c0)="fb8da31e9b06496e94466c1fdbeee776bc24f8b8137e33b5b2f0f8a440c8e948bfc6474e019482906e934ebd25f572823cd6428fea469a207f604371f54fe03fb4ae285b581147e3116077f78b4dcbc9db2bb6465e32d1d078c1571110bd681130cabd079fe7d0d07817a4033a5935d7b75003bdc7d2ebbae36476b658e592b3e488ff351b0d1da7d15ff6a56b6bb7c8f728aa29de53a8848223eedf4777fcf85eda5aa41e83aa75ac715bf8d5a0f6aaa001620c713d3c71039f4951b8fac10a6e2f21b5971488f9dd5e15a3cac2aa02fbfa96c8e60b349a140824f932a50ab031c36544", 0xe4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x241801}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r6) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r13, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r13, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000e00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r13, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xb78469a4bfe4ad8f}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x24}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008810}, 0x4002) socket$inet6(0xa, 0x802, 0x8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r6) (async) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x60, r15, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4e}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555e}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008090}, 0x10) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x60, r15, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4e}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555e}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008090}, 0x10) accept4(r1, &(0x7f00000010c0)=@generic, &(0x7f0000001140)=0x80, 0x0) 555.667847ms ago: executing program 4 (id=2398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f4020080000000000000000010000000000000044000500fe8000000000000000000000000000aa000000003c0000000a000000e000000100000000000001000000000006000000040300"/173], 0xfc}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="e1d8f5ffd21e9be11e02362cdba72aa7a4e2606c49e5c50e3e5dbab00aff18acabc4fd55bcf1964d7835307a905dbc7245692fbba7d874d841403f427b83c1eb3b493b8a13bbe3a61f40cd3119b3da9b2e0a06f476a9f9980ad2f372ffde2535224b1b6b0b6032d13c472d1f917addd62f39667adc24b5e92e1f4467f2f16723c52a3fc6252513", @ANYRES32=r1, @ANYRES32=r1, @ANYRES64, @ANYRES16=r1], 0x130) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0xc201}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70004400000005e4ffffeadce4c20200000008000c00a80a0000060001000800000008000b0002000000edd3b5cfe3142cfd2691d4a92d"], 0x34}}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x55d03668f2e94ef4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000014c0)=ANY=[], 0xfce) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x6, 0x0, 0x0) 362.658793ms ago: executing program 1 (id=2399): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b220c65367}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @remote, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000200)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 198.990951ms ago: executing program 4 (id=2400): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007311320000000000166400000000010095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r5 = socket$netlink(0x10, 0x3, 0xf) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008020000000000020600150002"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRESHEX=r7], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x404c080) close(r8) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000800)=@generic={0x1, 0x7fff, 0x401}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x1, 0x4, {0xa, 0x4e22, 0x939, @mcast1, 0x7f}}}, 0x3a) 130.77958ms ago: executing program 1 (id=2401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socket$kcm(0x29, 0x6, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x28c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf75d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfc00000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff0000}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6f7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x793}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x3804c840}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}, 0xfffffa4e}], 0x1, 0x2102, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) nanosleep(&(0x7f0000000240)={0x77359400}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000002c0), &(0x7f0000000380)=0x8) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000005700)="03", 0x1}], 0x1, 0x0, 0x0, 0x40000}, 0x4000) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080000000108000340000000000900010073797a3000000000140000001100010000000000000000000100000a00"/200], 0xc8}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028fd7000000000000003009931ced95ae5a8ab35e2632912264221ed0db26410385689c26bf5d368d7c9a3315852160ef04881c418ea125361c8209fee1f8c8975b18cace59d4a6facd6fdb662522cf4f63c36dfabbf036116456cbf12ca191b9c12ca44ff636589bf5c896f64f33503a5f12a490f3a57aad9721709f62622185eb0e0da5f669758cd8d7a52b3ecf6ceab120572e184b78b5245980f82c5622376ca7af67a270c99aa1192baa66298521b69b0cc8d7322f2c1722278fa179ea12e9544b445fa5f3fc9a5ffa052fc66e84a3dc4c96c670d421256c6bd00"/238, @ANYRES32=r8, @ANYBLOB="2600330030b80400ffffffffffff08021100000050505050505094000800890001002a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r9}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r11, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) 127.747397ms ago: executing program 3 (id=2402): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="95c7182c1000030500"/20, @ANYRES32=0x0, @ANYBLOB="00080000006e00300002803075122bf6080019709b620000100005800a000400aaaaaaaaaabb0000080003000300"], 0x68}, 0x1, 0x0, 0x0, 0x10048090}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000004c563a1cbc38d11ad7029404b6ba3edc13419ec7a4838432209fbfcabf0f6f05546a7090c7b9088aaa76b53e77ef1266eb05fc9ffc5085d9235b06130e38758f07735961c962be6c795341ba609a1f529a8a653d210bf1bd2f72520e5907b6d55e3e5e31ae9771be66ded42d73564daf", @ANYRES16=r3, @ANYBLOB="000427bd7000fcdbdf25190000000500a20001000000"], 0x1c}}, 0x4000084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0xa, 0x4cd3) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7, 0x0, 0x3}, 0x18) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x4006, 0x3, 0x1, {0xa, 0x4e21, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000006221184f59658691331333c605f1109a99a60a17f81e5374921d50df95a9976ffae47268f7ee55cd0836ff8bf94143e7162739234babab840f5674c9341dcd4c88611c3b8d8fcb01b3bdb4074d6293177c297ef6908f2c1176e4a9536200fce79cbe97e3f7cc3a9fc8394a3f85c4c318", @ANYRESHEX=r0, @ANYRESDEC=r4], 0x40}}, 0x20000010) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 2 (id=2403): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e", 0x48}], 0x2}, 0x0) kernel console output (not intermixed with test programs): bridge_slave_0: entered allmulticast mode [ 202.571028][T10373] bridge_slave_0: entered promiscuous mode [ 202.579609][T10373] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.587358][T10373] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.595132][T10373] bridge_slave_1: entered allmulticast mode [ 202.603186][T10373] bridge_slave_1: entered promiscuous mode [ 202.653352][T10373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.668183][T10373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.720561][T10373] team0: Port device team_slave_0 added [ 202.737043][T10373] team0: Port device team_slave_1 added [ 202.797537][T10373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.804713][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.837938][T10373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.870758][T10373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.887824][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.940885][T10373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.039073][T10373] hsr_slave_0: entered promiscuous mode [ 203.057753][T10373] hsr_slave_1: entered promiscuous mode [ 203.064792][T10373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.072359][T10373] Cannot create hsr debugfs directory [ 203.124669][T10445] FAULT_INJECTION: forcing a failure. [ 203.124669][T10445] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.156041][T10445] CPU: 0 UID: 0 PID: 10445 Comm: syz.1.1334 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 203.156072][T10445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.156086][T10445] Call Trace: [ 203.156094][T10445] [ 203.156103][T10445] dump_stack_lvl+0x189/0x250 [ 203.156142][T10445] ? __pfx____ratelimit+0x10/0x10 [ 203.156167][T10445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.156209][T10445] ? __pfx__printk+0x10/0x10 [ 203.156235][T10445] ? fs_reclaim_acquire+0x7d/0x100 [ 203.156271][T10445] should_fail_ex+0x414/0x560 [ 203.156304][T10445] prepare_alloc_pages+0x213/0x610 [ 203.156339][T10445] __alloc_frozen_pages_noprof+0x123/0x370 [ 203.156372][T10445] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 203.156408][T10445] ? policy_nodemask+0x27c/0x720 [ 203.156429][T10445] ? __pfx__copy_from_iter+0x10/0x10 [ 203.156475][T10445] alloc_pages_mpol+0x232/0x4a0 [ 203.156503][T10445] alloc_pages_noprof+0xa9/0x190 [ 203.156535][T10445] af_alg_sendmsg+0x133a/0x22e0 [ 203.156556][T10445] ? __pfx___might_resched+0x10/0x10 [ 203.156609][T10445] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 203.156629][T10445] ? __pfx_aa_sk_perm+0x10/0x10 [ 203.156647][T10445] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 203.156680][T10445] ? aa_sock_msg_perm+0x94/0x160 [ 203.156704][T10445] ? skcipher_sendmsg+0x26/0xf0 [ 203.156726][T10445] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 203.156750][T10445] __sock_sendmsg+0x219/0x270 [ 203.156773][T10445] ____sys_sendmsg+0x52d/0x830 [ 203.156805][T10445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.156840][T10445] ? import_iovec+0x74/0xa0 [ 203.156861][T10445] ___sys_sendmsg+0x21f/0x2a0 [ 203.156889][T10445] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.156952][T10445] ? __fget_files+0x2a/0x420 [ 203.156971][T10445] ? __fget_files+0x3a0/0x420 [ 203.157002][T10445] __sys_sendmmsg+0x227/0x430 [ 203.157034][T10445] ? __pfx___sys_sendmmsg+0x10/0x10 [ 203.157058][T10445] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 203.157108][T10445] ? ksys_write+0x22a/0x250 [ 203.157139][T10445] ? __pfx_ksys_write+0x10/0x10 [ 203.157163][T10445] ? rcu_is_watching+0x15/0xb0 [ 203.157203][T10445] __x64_sys_sendmmsg+0xa0/0xc0 [ 203.157231][T10445] do_syscall_64+0xfa/0x3b0 [ 203.157251][T10445] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.157271][T10445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.157289][T10445] ? clear_bhb_loop+0x60/0xb0 [ 203.157311][T10445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.157329][T10445] RIP: 0033:0x7f55e0d8e929 [ 203.157346][T10445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.157362][T10445] RSP: 002b:00007f55e1bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 203.157381][T10445] RAX: ffffffffffffffda RBX: 00007f55e0fb5fa0 RCX: 00007f55e0d8e929 [ 203.157394][T10445] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 203.157405][T10445] RBP: 00007f55e1bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 203.157416][T10445] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 203.157427][T10445] R13: 0000000000000000 R14: 00007f55e0fb5fa0 R15: 00007ffcc51acc48 [ 203.157456][T10445] [ 203.761805][T10454] Cannot find set identified by id 0 to match [ 203.978473][T10458] __nla_validate_parse: 1 callbacks suppressed [ 203.978488][T10458] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1339'. [ 204.166711][T10462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1340'. [ 204.174944][T10373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.197262][T10373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.210101][T10373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.229382][T10373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.387869][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1342'. [ 204.484896][ T5834] Bluetooth: hci3: command tx timeout [ 204.496033][T10373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.525476][T10373] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.537939][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.545123][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.625837][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.633582][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.696249][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 204.726606][T10488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1344'. [ 204.749299][T10488] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1344'. [ 204.791258][T10488] netlink: 'syz.3.1344': attribute type 6 has an invalid length. [ 204.815538][T10373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.843652][T10488] netlink: 'syz.3.1344': attribute type 5 has an invalid length. [ 204.874465][T10488] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1344'. [ 204.919124][T10497] FAULT_INJECTION: forcing a failure. [ 204.919124][T10497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.965512][T10497] CPU: 1 UID: 0 PID: 10497 Comm: syz.1.1346 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 204.965544][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.965557][T10497] Call Trace: [ 204.965567][T10497] [ 204.965576][T10497] dump_stack_lvl+0x189/0x250 [ 204.965615][T10497] ? __pfx____ratelimit+0x10/0x10 [ 204.965640][T10497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.965673][T10497] ? __pfx__printk+0x10/0x10 [ 204.965698][T10497] ? __might_fault+0xb0/0x130 [ 204.965745][T10497] should_fail_ex+0x414/0x560 [ 204.965778][T10497] _copy_from_iter+0x1db/0x16f0 [ 204.965828][T10497] ? policy_nodemask+0x27c/0x720 [ 204.965848][T10497] ? __pfx__copy_from_iter+0x10/0x10 [ 204.965887][T10497] ? set_page_refcounted+0xa0/0x1e0 [ 204.965917][T10497] af_alg_sendmsg+0x1436/0x22e0 [ 204.965942][T10497] ? __pfx___might_resched+0x10/0x10 [ 204.966004][T10497] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 204.966028][T10497] ? __pfx_aa_sk_perm+0x10/0x10 [ 204.966050][T10497] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 204.966090][T10497] ? aa_sock_msg_perm+0x94/0x160 [ 204.966119][T10497] ? skcipher_sendmsg+0x26/0xf0 [ 204.966145][T10497] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 204.966175][T10497] __sock_sendmsg+0x219/0x270 [ 204.966202][T10497] ____sys_sendmsg+0x52d/0x830 [ 204.966240][T10497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.966283][T10497] ? import_iovec+0x74/0xa0 [ 204.966308][T10497] ___sys_sendmsg+0x21f/0x2a0 [ 204.966342][T10497] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.966418][T10497] ? __fget_files+0x2a/0x420 [ 204.966440][T10497] ? __fget_files+0x3a0/0x420 [ 204.966477][T10497] __sys_sendmmsg+0x227/0x430 [ 204.966535][T10497] ? __pfx___sys_sendmmsg+0x10/0x10 [ 204.966579][T10497] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 204.966634][T10497] ? ksys_write+0x22a/0x250 [ 204.966669][T10497] ? __pfx_ksys_write+0x10/0x10 [ 204.966696][T10497] ? rcu_is_watching+0x15/0xb0 [ 204.966736][T10497] __x64_sys_sendmmsg+0xa0/0xc0 [ 204.966768][T10497] do_syscall_64+0xfa/0x3b0 [ 204.966791][T10497] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.966819][T10497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.966839][T10497] ? clear_bhb_loop+0x60/0xb0 [ 204.966865][T10497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.966884][T10497] RIP: 0033:0x7f55e0d8e929 [ 204.966903][T10497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.966921][T10497] RSP: 002b:00007f55e1bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.966943][T10497] RAX: ffffffffffffffda RBX: 00007f55e0fb5fa0 RCX: 00007f55e0d8e929 [ 204.966958][T10497] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 204.966971][T10497] RBP: 00007f55e1bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 204.966984][T10497] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 204.966996][T10497] R13: 0000000000000000 R14: 00007f55e0fb5fa0 R15: 00007ffcc51acc48 [ 204.967029][T10497] [ 205.408020][T10507] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1349'. [ 205.790099][T10373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.833228][T10525] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1353'. [ 205.889615][T10527] bridge0: port 1(erspan0) entered blocking state [ 205.899109][T10527] bridge0: port 1(erspan0) entered disabled state [ 205.921771][T10527] erspan0: entered allmulticast mode [ 205.933056][T10527] erspan0: entered promiscuous mode [ 205.940111][T10527] bridge0: port 1(erspan0) entered blocking state [ 205.946843][T10527] bridge0: port 1(erspan0) entered forwarding state [ 205.961927][T10523] netlink: 'syz.3.1352': attribute type 12 has an invalid length. [ 205.964288][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 206.089130][T10373] veth0_vlan: entered promiscuous mode [ 206.115933][T10373] veth1_vlan: entered promiscuous mode [ 206.138690][T10537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.202589][T10373] veth0_macvtap: entered promiscuous mode [ 206.369318][T10545] FAULT_INJECTION: forcing a failure. [ 206.369318][T10545] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.384304][T10373] veth1_macvtap: entered promiscuous mode [ 206.421864][T10373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.425015][T10545] CPU: 0 UID: 0 PID: 10545 Comm: syz.3.1360 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 206.425047][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.425062][T10545] Call Trace: [ 206.425070][T10545] [ 206.425079][T10545] dump_stack_lvl+0x189/0x250 [ 206.425119][T10545] ? __pfx____ratelimit+0x10/0x10 [ 206.425145][T10545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.425182][T10545] ? __pfx__printk+0x10/0x10 [ 206.425208][T10545] ? fs_reclaim_acquire+0x7d/0x100 [ 206.425268][T10545] should_fail_ex+0x414/0x560 [ 206.425329][T10545] prepare_alloc_pages+0x213/0x610 [ 206.425369][T10545] __alloc_frozen_pages_noprof+0x123/0x370 [ 206.425406][T10545] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 206.425448][T10545] ? policy_nodemask+0x27c/0x720 [ 206.425470][T10545] ? __pfx__copy_from_iter+0x10/0x10 [ 206.425511][T10545] alloc_pages_mpol+0x232/0x4a0 [ 206.425543][T10545] alloc_pages_noprof+0xa9/0x190 [ 206.425572][T10545] af_alg_sendmsg+0x133a/0x22e0 [ 206.425600][T10545] ? __pfx___might_resched+0x10/0x10 [ 206.425669][T10545] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 206.425697][T10545] ? __pfx_aa_sk_perm+0x10/0x10 [ 206.425722][T10545] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 206.425766][T10545] ? aa_sock_msg_perm+0x94/0x160 [ 206.425798][T10545] ? skcipher_sendmsg+0x26/0xf0 [ 206.425829][T10545] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 206.425861][T10545] __sock_sendmsg+0x219/0x270 [ 206.425893][T10545] ____sys_sendmsg+0x52d/0x830 [ 206.425945][T10545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.425992][T10545] ? import_iovec+0x74/0xa0 [ 206.426021][T10545] ___sys_sendmsg+0x21f/0x2a0 [ 206.426060][T10545] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.426146][T10545] ? __fget_files+0x2a/0x420 [ 206.426172][T10545] ? __fget_files+0x3a0/0x420 [ 206.426216][T10545] __sys_sendmmsg+0x227/0x430 [ 206.426261][T10545] ? __pfx___sys_sendmmsg+0x10/0x10 [ 206.426292][T10545] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 206.426359][T10545] ? ksys_write+0x22a/0x250 [ 206.426399][T10545] ? __pfx_ksys_write+0x10/0x10 [ 206.426445][T10545] ? rcu_is_watching+0x15/0xb0 [ 206.426503][T10545] __x64_sys_sendmmsg+0xa0/0xc0 [ 206.426537][T10545] do_syscall_64+0xfa/0x3b0 [ 206.426562][T10545] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.426586][T10545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.426620][T10545] ? clear_bhb_loop+0x60/0xb0 [ 206.426644][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.426664][T10545] RIP: 0033:0x7fa716d8e929 [ 206.426682][T10545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.426701][T10545] RSP: 002b:00007fa714bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 206.426724][T10545] RAX: ffffffffffffffda RBX: 00007fa716fb5fa0 RCX: 00007fa716d8e929 [ 206.426739][T10545] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 206.426751][T10545] RBP: 00007fa714bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.426765][T10545] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 206.426778][T10545] R13: 0000000000000000 R14: 00007fa716fb5fa0 R15: 00007ffdcfd59c08 [ 206.426810][T10545] [ 206.576869][ T5834] Bluetooth: hci3: command tx timeout [ 206.815928][T10553] pim6reg: entered allmulticast mode [ 206.831369][T10373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.853920][T10556] pim6reg: left allmulticast mode [ 206.986589][ T6673] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.057099][ T6673] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.084380][ T6673] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.102763][ T6673] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.331954][ T6673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.361044][ T6673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.460426][ T6673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.487419][ T6673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.688164][T10588] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 207.702020][T10593] netlink: 'syz.4.1374': attribute type 4 has an invalid length. [ 207.711549][T10591] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 208.214978][T10626] erspan0: left allmulticast mode [ 208.220253][T10626] erspan0: left promiscuous mode [ 208.226433][T10626] bridge0: port 1(erspan0) entered disabled state [ 208.246885][T10626] : (slave bridge_slave_1): Releasing backup interface [ 208.407940][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.532633][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.696413][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.757540][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.848634][ T49] bridge_slave_1: left allmulticast mode [ 208.854476][ T49] bridge_slave_1: left promiscuous mode [ 208.860210][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.871556][ T49] bridge_slave_0: left allmulticast mode [ 208.878043][ T49] bridge_slave_0: left promiscuous mode [ 208.884020][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.121312][T10636] __nla_validate_parse: 6 callbacks suppressed [ 209.121330][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 209.197415][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.211410][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.222152][ T49] bond0 (unregistering): Released all slaves [ 209.380204][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.391799][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.400428][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.413951][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.424981][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.543122][ T49] hsr_slave_0: left promiscuous mode [ 209.549940][ T49] hsr_slave_1: left promiscuous mode [ 209.556566][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.564155][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.572153][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.581997][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.606749][ T49] veth1_macvtap: left promiscuous mode [ 209.612352][ T49] veth0_macvtap: left promiscuous mode [ 209.618803][ T49] veth1_vlan: left promiscuous mode [ 209.624291][ T49] veth0_vlan: left promiscuous mode [ 209.974219][T10644] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1389'. [ 210.008010][T10644] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1389'. [ 210.227422][ T49] team0 (unregistering): Port device team_slave_1 removed [ 210.268270][ T49] team0 (unregistering): Port device team_slave_0 removed [ 210.694283][T10655] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1391'. [ 210.972853][T10663] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 211.310188][T10638] chnl_net:caif_netlink_parms(): no params data found [ 211.524330][ T51] Bluetooth: hci3: command tx timeout [ 211.581299][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 211.606773][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 211.741098][T10686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1399'. [ 211.802832][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 211.812621][T10638] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.824155][T10638] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.831432][T10638] bridge_slave_0: entered allmulticast mode [ 211.868888][T10638] bridge_slave_0: entered promiscuous mode [ 211.944675][T10694] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1402'. [ 211.953890][T10694] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1402'. [ 212.033105][T10683] veth0_macvtap (unregistering): left allmulticast mode [ 212.209852][T10638] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.227274][T10700] netlink: 'syz.4.1403': attribute type 4 has an invalid length. [ 212.284742][T10638] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.292460][T10638] bridge_slave_1: entered allmulticast mode [ 212.306743][T10638] bridge_slave_1: entered promiscuous mode [ 212.461101][T10638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.483178][T10638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.592307][T10705] veth1: entered promiscuous mode [ 213.040389][T10704] erspan0: entered allmulticast mode [ 213.109483][T10638] team0: Port device team_slave_0 added [ 213.141637][T10638] team0: Port device team_slave_1 added [ 213.245773][T10724] raw_sendmsg: syz.2.1410 forgot to set AF_INET. Fix it! [ 213.256993][T10638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.269032][T10638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.299024][T10638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.328896][T10638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.347938][T10638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.406738][T10638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.604133][ T51] Bluetooth: hci3: command tx timeout [ 213.642748][T10733] netlink: 'syz.2.1412': attribute type 4 has an invalid length. [ 213.736535][T10638] hsr_slave_0: entered promiscuous mode [ 213.754502][T10638] hsr_slave_1: entered promiscuous mode [ 213.761843][T10638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.770416][T10638] Cannot create hsr debugfs directory [ 213.840268][T10737] netlink: 'syz.3.1415': attribute type 2 has an invalid length. [ 214.135117][T10743] netlink: 'syz.1.1416': attribute type 4 has an invalid length. [ 214.759609][T10638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.775261][T10638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.798954][T10638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.838060][T10638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.059584][T10638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.129143][T10638] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.159558][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.166735][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.220748][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.227954][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.684184][ T51] Bluetooth: hci3: command tx timeout [ 215.756860][T10773] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.832882][T10776] __nla_validate_parse: 5 callbacks suppressed [ 215.832900][T10776] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1424'. [ 215.851985][T10638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.862100][T10776] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1424'. [ 215.874420][T10776] netlink: 'syz.2.1424': attribute type 6 has an invalid length. [ 215.882213][T10776] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1424'. [ 215.998186][T10638] veth0_vlan: entered promiscuous mode [ 216.037213][T10638] veth1_vlan: entered promiscuous mode [ 216.121276][T10778] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1425'. [ 216.137210][T10638] veth0_macvtap: entered promiscuous mode [ 216.154896][T10638] veth1_macvtap: entered promiscuous mode [ 216.200872][T10638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.224989][T10638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.266056][ T1098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.281401][T10782] xt_l2tp: missing protocol rule (udp|l2tpip) [ 216.284538][ T1098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.310181][ T1098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.374989][ T1098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.488029][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.500865][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.529282][T10793] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1429'. [ 216.556118][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.565516][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.984735][T10810] tipc: Enabling of bearer rejected, failed to enable media [ 217.132666][T10825] netlink: 'syz.4.1440': attribute type 21 has an invalid length. [ 217.137630][T10826] netlink: 'syz.1.1442': attribute type 39 has an invalid length. [ 217.172086][T10825] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1440'. [ 217.223421][T10825] netlink: 'syz.4.1440': attribute type 4 has an invalid length. [ 217.256208][T10825] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1440'. [ 217.314266][T10834] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1444'. [ 217.480400][T10842] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.681030][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.028260][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.559147][T10871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1452'. [ 218.569457][T10871] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1452'. [ 218.580383][T10870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.587635][T10870] IPv6: NLM_F_CREATE should be set when creating new route [ 218.587734][T10870] IPv6: NLM_F_CREATE should be set when creating new route [ 218.668205][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.794882][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.837678][T10881] IPv6: Can't replace route, no match found [ 219.143778][ T12] bridge_slave_1: left allmulticast mode [ 219.167470][ T12] bridge_slave_1: left promiscuous mode [ 219.173236][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.221716][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.234727][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.243092][ T12] bridge_slave_0: left allmulticast mode [ 219.254735][ T12] bridge_slave_0: left promiscuous mode [ 219.260458][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.271103][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.287936][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.297666][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.687526][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.699937][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.710781][ T12] bond0 (unregistering): Released all slaves [ 220.218780][ T12] hsr_slave_0: left promiscuous mode [ 220.233406][ T12] hsr_slave_1: left promiscuous mode [ 220.240998][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.249229][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.249751][T10943] IPv4: Oversized IP packet from 127.202.26.0 [ 220.266650][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.275053][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.314904][ T12] veth1_macvtap: left promiscuous mode [ 220.330635][ T12] veth0_macvtap: left promiscuous mode [ 220.340839][ T12] veth1_vlan: left promiscuous mode [ 220.350918][ T12] veth0_vlan: left promiscuous mode [ 220.362395][T10955] netlink: 'syz.4.1472': attribute type 4 has an invalid length. [ 220.755715][ T12] team0 (unregistering): Port device team_slave_1 removed [ 220.788884][ T12] team0 (unregistering): Port device team_slave_0 removed [ 221.321338][T10905] chnl_net:caif_netlink_parms(): no params data found [ 221.376215][ T51] Bluetooth: hci3: command tx timeout [ 221.394052][T10966] __nla_validate_parse: 2 callbacks suppressed [ 221.394068][T10966] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1475'. [ 221.442847][T10965] pim6reg: entered allmulticast mode [ 221.463404][T10971] macvlan0: entered allmulticast mode [ 221.498921][T10965] macvlan0 (unregistering): left allmulticast mode [ 221.652076][T10905] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.679787][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.689665][T10905] bridge_slave_0: entered allmulticast mode [ 221.700337][T10905] bridge_slave_0: entered promiscuous mode [ 221.716138][T10905] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.735922][T10905] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.745034][T10905] bridge_slave_1: entered allmulticast mode [ 221.753447][T10905] bridge_slave_1: entered promiscuous mode [ 221.845802][T10905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.883249][T10905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.008976][T10905] team0: Port device team_slave_0 added [ 222.090326][T10905] team0: Port device team_slave_1 added [ 222.204200][T11013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'. [ 222.230162][T10905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.244389][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.271382][T10905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.285706][T10905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.292855][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.345223][T10905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.388106][T11015] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1492'. [ 222.625189][ T7519] IPVS: starting estimator thread 0... [ 222.651512][T11035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1499'. [ 222.724425][T11034] IPVS: using max 28 ests per chain, 67200 per kthread [ 222.928661][T10905] hsr_slave_0: entered promiscuous mode [ 222.939894][T10905] hsr_slave_1: entered promiscuous mode [ 222.946487][T10905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.960928][T10905] Cannot create hsr debugfs directory [ 223.072509][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1502'. [ 223.448270][ T51] Bluetooth: hci3: command tx timeout [ 224.365403][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.373996][ T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 224.382446][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.391317][ T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 224.431785][T11046] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 224.547394][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.564008][ T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 224.587906][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.597018][ T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 224.827596][T11070] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1509'. [ 224.916060][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 225.182655][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1513'. [ 225.204010][T11094] netlink: 'syz.1.1514': attribute type 10 has an invalid length. [ 225.213765][T11088] veth0_to_bridge: left allmulticast mode [ 225.219675][T11088] veth0_to_bridge: left promiscuous mode [ 225.225486][T11094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1514'. [ 225.239141][T11088] bridge0: port 3(veth0_to_bridge) entered disabled state [ 225.249488][T11088] bridge_slave_1: left allmulticast mode [ 225.255954][T11088] bridge_slave_1: left promiscuous mode [ 225.261940][T11088] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.271826][T11088] bridge_slave_0: left allmulticast mode [ 225.280881][T11088] bridge_slave_0: left promiscuous mode [ 225.287420][T11088] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.397907][T11094] !: entered promiscuous mode [ 225.403432][T11094] bridge0: port 1(0!) entered blocking state [ 225.409973][T11094] bridge0: port 1(0!) entered disabled state [ 225.418856][T11094] !: entered allmulticast mode [ 225.428695][T11094] bridge0: port 1(0!) entered blocking state [ 225.435074][T11094] bridge0: port 1(0!) entered forwarding state [ 225.450426][T11101] sit1: entered promiscuous mode [ 225.554029][ T51] Bluetooth: hci3: command tx timeout [ 225.669080][T10905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.720561][T10905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.798858][T10905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.826319][T10905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.906925][T11126] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1523'. [ 225.953382][T11133] netlink: 'syz.2.1525': attribute type 3 has an invalid length. [ 225.962661][T11133] netlink: 'syz.2.1525': attribute type 1 has an invalid length. [ 226.111067][T10905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.139959][T11140] vlan3: entered promiscuous mode [ 226.169062][T11142] bridge1: left promiscuous mode [ 226.177693][T11142] bridge1: left allmulticast mode [ 226.183318][T11142] vlan2: left allmulticast mode [ 226.189515][T11142] bridge2: left promiscuous mode [ 226.194763][T11142] bridge2: left allmulticast mode [ 226.200418][T11142] vlan3: left allmulticast mode [ 226.206434][T11142] veth1: left allmulticast mode [ 226.222897][T11142] bond6: left promiscuous mode [ 226.245967][T11142] sit1: left promiscuous mode [ 226.291446][T10905] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.330814][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.338018][ T6665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.356934][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.364118][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.497032][T11152] netlink: 'syz.2.1532': attribute type 4 has an invalid length. [ 226.554648][T11153] netlink: 'syz.2.1532': attribute type 4 has an invalid length. [ 226.623294][T11155] __nla_validate_parse: 1 callbacks suppressed [ 226.623314][T11155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1533'. [ 226.659276][T11155] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1533'. [ 226.710091][T11155] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1533'. [ 226.772115][T10905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.787016][T11165] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1535'. [ 226.858892][T11165] batadv1: entered promiscuous mode [ 226.869935][T11165] batadv1: entered allmulticast mode [ 227.184075][T10905] veth0_vlan: entered promiscuous mode [ 227.196981][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1538'. [ 227.214382][T10905] veth1_vlan: entered promiscuous mode [ 227.318930][T10905] veth0_macvtap: entered promiscuous mode [ 227.359841][T10905] veth1_macvtap: entered promiscuous mode [ 227.430647][T11199] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1539'. [ 227.445779][T11198] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1542'. [ 227.457742][T10905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.463698][T11198] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1542'. [ 227.479322][T10905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.495814][T11198] netlink: 'syz.3.1542': attribute type 6 has an invalid length. [ 227.515966][T11198] netlink: 'syz.3.1542': attribute type 5 has an invalid length. [ 227.528405][T11198] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1542'. [ 227.573058][ T6675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.593601][ T6675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.605711][ T51] Bluetooth: hci3: command tx timeout [ 227.627152][ T6675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.653794][ T6675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.668073][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1546'. [ 227.751916][T11209] netlink: zone id is out of range [ 227.770990][T11209] netlink: zone id is out of range [ 227.804602][T11209] netlink: get zone limit has 8 unknown bytes [ 227.849133][ T6673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.930932][ T6673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.971011][T11221] FAULT_INJECTION: forcing a failure. [ 227.971011][T11221] name failslab, interval 1, probability 0, space 0, times 0 [ 227.985690][ T6673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.996661][ T6673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.003550][T11221] CPU: 0 UID: 0 PID: 11221 Comm: syz.2.1552 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 228.003580][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.003594][T11221] Call Trace: [ 228.003602][T11221] [ 228.003612][T11221] dump_stack_lvl+0x189/0x250 [ 228.003652][T11221] ? __pfx____ratelimit+0x10/0x10 [ 228.003678][T11221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.003713][T11221] ? __pfx__printk+0x10/0x10 [ 228.003744][T11221] ? __pfx___might_resched+0x10/0x10 [ 228.003784][T11221] ? fs_reclaim_acquire+0x7d/0x100 [ 228.003816][T11221] should_fail_ex+0x414/0x560 [ 228.003849][T11221] should_failslab+0xa8/0x100 [ 228.003876][T11221] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 228.003911][T11221] ? __alloc_skb+0x112/0x2d0 [ 228.003945][T11221] __alloc_skb+0x112/0x2d0 [ 228.003976][T11221] netlink_ack+0x146/0xa50 [ 228.003996][T11221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 228.004037][T11221] netlink_rcv_skb+0x28c/0x470 [ 228.004061][T11221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 228.004086][T11221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.004123][T11221] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.004146][T11221] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.004174][T11221] netlink_unicast+0x75b/0x8d0 [ 228.004207][T11221] netlink_sendmsg+0x805/0xb30 [ 228.004241][T11221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.004269][T11221] ? aa_sock_msg_perm+0x94/0x160 [ 228.004295][T11221] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.004319][T11221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.004344][T11221] __sock_sendmsg+0x219/0x270 [ 228.004368][T11221] __sys_sendto+0x3bd/0x520 [ 228.004397][T11221] ? __pfx___sys_sendto+0x10/0x10 [ 228.004423][T11221] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 228.004466][T11221] ? __fget_files+0x3a0/0x420 [ 228.004505][T11221] ? ksys_write+0x22a/0x250 [ 228.004542][T11221] ? __pfx_ksys_write+0x10/0x10 [ 228.004573][T11221] ? rcu_is_watching+0x15/0xb0 [ 228.004612][T11221] __x64_sys_sendto+0xde/0x100 [ 228.004646][T11221] do_syscall_64+0xfa/0x3b0 [ 228.004671][T11221] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.004693][T11221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.004716][T11221] ? clear_bhb_loop+0x60/0xb0 [ 228.004742][T11221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.004785][T11221] RIP: 0033:0x7ff7d6f8e929 [ 228.004806][T11221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.004824][T11221] RSP: 002b:00007ff7d7e94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 228.004848][T11221] RAX: ffffffffffffffda RBX: 00007ff7d71b5fa0 RCX: 00007ff7d6f8e929 [ 228.004865][T11221] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 228.004880][T11221] RBP: 00007ff7d7e94090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 228.004895][T11221] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 228.004907][T11221] R13: 0000000000000000 R14: 00007ff7d71b5fa0 R15: 00007ffcc903d7c8 [ 228.004941][T11221] [ 228.319760][T11231] netlink: 'syz.2.1554': attribute type 4 has an invalid length. [ 228.639537][T11252] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 228.679933][T11254] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 228.731342][T11256] FAULT_INJECTION: forcing a failure. [ 228.731342][T11256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 228.749652][T11256] CPU: 0 UID: 0 PID: 11256 Comm: syz.1.1561 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 228.749682][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.749695][T11256] Call Trace: [ 228.749704][T11256] [ 228.749712][T11256] dump_stack_lvl+0x189/0x250 [ 228.749750][T11256] ? __pfx____ratelimit+0x10/0x10 [ 228.749774][T11256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.749807][T11256] ? __pfx__printk+0x10/0x10 [ 228.749832][T11256] ? fs_reclaim_acquire+0x7d/0x100 [ 228.749867][T11256] should_fail_ex+0x414/0x560 [ 228.749898][T11256] prepare_alloc_pages+0x213/0x610 [ 228.749939][T11256] __alloc_frozen_pages_noprof+0x123/0x370 [ 228.749971][T11256] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 228.750007][T11256] ? policy_nodemask+0x27c/0x720 [ 228.750027][T11256] ? __pfx__copy_from_iter+0x10/0x10 [ 228.750061][T11256] alloc_pages_mpol+0x232/0x4a0 [ 228.750089][T11256] alloc_pages_noprof+0xa9/0x190 [ 228.750113][T11256] af_alg_sendmsg+0x133a/0x22e0 [ 228.750138][T11256] ? __pfx___might_resched+0x10/0x10 [ 228.750197][T11256] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 228.750220][T11256] ? __pfx_aa_sk_perm+0x10/0x10 [ 228.750242][T11256] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 228.750278][T11256] ? aa_sock_msg_perm+0x94/0x160 [ 228.750306][T11256] ? skcipher_sendmsg+0x26/0xf0 [ 228.750330][T11256] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 228.750358][T11256] __sock_sendmsg+0x219/0x270 [ 228.750385][T11256] ____sys_sendmsg+0x52d/0x830 [ 228.750422][T11256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.750463][T11256] ? import_iovec+0x74/0xa0 [ 228.750486][T11256] ___sys_sendmsg+0x21f/0x2a0 [ 228.750519][T11256] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.750593][T11256] ? __fget_files+0x2a/0x420 [ 228.750615][T11256] ? __fget_files+0x3a0/0x420 [ 228.750649][T11256] __sys_sendmmsg+0x227/0x430 [ 228.750686][T11256] ? __pfx___sys_sendmmsg+0x10/0x10 [ 228.750714][T11256] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 228.750779][T11256] ? ksys_write+0x22a/0x250 [ 228.750812][T11256] ? __pfx_ksys_write+0x10/0x10 [ 228.750839][T11256] ? rcu_is_watching+0x15/0xb0 [ 228.750876][T11256] __x64_sys_sendmmsg+0xa0/0xc0 [ 228.750908][T11256] do_syscall_64+0xfa/0x3b0 [ 228.750931][T11256] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.750958][T11256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.750977][T11256] ? clear_bhb_loop+0x60/0xb0 [ 228.751002][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.751020][T11256] RIP: 0033:0x7f55e0d8e929 [ 228.751037][T11256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.751053][T11256] RSP: 002b:00007f55e1bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 228.751073][T11256] RAX: ffffffffffffffda RBX: 00007f55e0fb5fa0 RCX: 00007f55e0d8e929 [ 228.751087][T11256] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 228.751099][T11256] RBP: 00007f55e1bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 228.751111][T11256] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000003 [ 228.751123][T11256] R13: 0000000000000000 R14: 00007f55e0fb5fa0 R15: 00007ffcc51acc48 [ 228.751153][T11256] [ 229.268311][T11268] IPVS: Scheduler module ip_vs_sip not found [ 229.282436][T11268] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 229.457761][T11279] netlink: 'syz.3.1568': attribute type 4 has an invalid length. [ 229.481470][T11282] FAULT_INJECTION: forcing a failure. [ 229.481470][T11282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.494898][T11282] CPU: 0 UID: 0 PID: 11282 Comm: syz.4.1571 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 229.494924][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.494936][T11282] Call Trace: [ 229.494944][T11282] [ 229.494951][T11282] dump_stack_lvl+0x189/0x250 [ 229.494984][T11282] ? __pfx____ratelimit+0x10/0x10 [ 229.495005][T11282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.495034][T11282] ? __pfx__printk+0x10/0x10 [ 229.495054][T11282] ? __might_fault+0xb0/0x130 [ 229.495094][T11282] should_fail_ex+0x414/0x560 [ 229.495121][T11282] _copy_from_user+0x2d/0xb0 [ 229.495140][T11282] ___sys_sendmsg+0x158/0x2a0 [ 229.495169][T11282] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.495230][T11282] ? __fget_files+0x2a/0x420 [ 229.495255][T11282] ? __fget_files+0x3a0/0x420 [ 229.495284][T11282] __x64_sys_sendmsg+0x19b/0x260 [ 229.495314][T11282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.495351][T11282] ? __pfx_ksys_write+0x10/0x10 [ 229.495396][T11282] ? rcu_is_watching+0x15/0xb0 [ 229.495436][T11282] ? do_syscall_64+0xbe/0x3b0 [ 229.495466][T11282] do_syscall_64+0xfa/0x3b0 [ 229.495490][T11282] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.495514][T11282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.495534][T11282] ? clear_bhb_loop+0x60/0xb0 [ 229.495561][T11282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.495582][T11282] RIP: 0033:0x7f6aabb8e929 [ 229.495601][T11282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.495620][T11282] RSP: 002b:00007f6aac92e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.495643][T11282] RAX: ffffffffffffffda RBX: 00007f6aabdb5fa0 RCX: 00007f6aabb8e929 [ 229.495659][T11282] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 000000000000000a [ 229.495673][T11282] RBP: 00007f6aac92e090 R08: 0000000000000000 R09: 0000000000000000 [ 229.495686][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.495699][T11282] R13: 0000000000000000 R14: 00007f6aabdb5fa0 R15: 00007ffca8b91398 [ 229.495734][T11282] [ 229.822710][T11289] netlink: 'syz.1.1573': attribute type 6 has an invalid length. [ 229.943035][T11296] team0: Device gtp0 is of different type [ 230.062056][ T6675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.510291][ T6675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.568468][ T6675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.620133][ T6675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.693156][ T6675] bridge_slave_1: left allmulticast mode [ 230.698906][ T6675] bridge_slave_1: left promiscuous mode [ 230.706229][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.715551][ T6675] bridge_slave_0: left allmulticast mode [ 230.721193][ T6675] bridge_slave_0: left promiscuous mode [ 230.730242][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.095156][ T6675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.121118][ T6675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.154916][ T6675] bond0 (unregistering): Released all slaves [ 231.346725][T11323] vlan3: entered promiscuous mode [ 231.352603][T11323] team0: entered promiscuous mode [ 231.634976][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.646561][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.671183][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.680508][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.697370][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.929139][T11340] __nla_validate_parse: 17 callbacks suppressed [ 231.929156][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 232.136836][ T6675] hsr_slave_0: left promiscuous mode [ 232.167796][ T6675] hsr_slave_1: left promiscuous mode [ 232.176595][ T6675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.194266][ T6675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.229722][ T6675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.243110][ T6675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.289047][ T6675] veth1_macvtap: left promiscuous mode [ 232.300039][ T6675] veth0_macvtap: left promiscuous mode [ 232.307946][ T6675] veth1_vlan: left promiscuous mode [ 232.313275][ T6675] veth0_vlan: left promiscuous mode [ 232.362871][T11357] netlink: 'syz.2.1589': attribute type 4 has an invalid length. [ 232.506912][T11363] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1590'. [ 232.631684][T11365] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1592'. [ 232.644479][T11365] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1592'. [ 232.654031][T11365] netlink: 'syz.4.1592': attribute type 6 has an invalid length. [ 232.661865][T11365] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1592'. [ 232.906385][ T6675] team0 (unregistering): Port device team_slave_1 removed [ 232.940582][ T6675] team0 (unregistering): Port device team_slave_0 removed [ 233.278018][T11367] vlan3: entered promiscuous mode [ 233.546961][T11377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1595'. [ 233.611997][T11332] chnl_net:caif_netlink_parms(): no params data found [ 233.642830][T11382] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1597'. [ 233.666568][T11382] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1597'. [ 233.678577][T11382] netlink: 'syz.2.1597': attribute type 6 has an invalid length. [ 233.687485][T11382] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1597'. [ 233.764690][ T51] Bluetooth: hci3: command tx timeout [ 233.818549][T11332] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.826558][T11332] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.844142][T11332] bridge_slave_0: entered allmulticast mode [ 233.851819][T11332] bridge_slave_0: entered promiscuous mode [ 233.866415][T11332] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.878204][T11332] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.913383][T11332] bridge_slave_1: entered allmulticast mode [ 233.926218][T11332] bridge_slave_1: entered promiscuous mode [ 233.946913][T11397] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1599'. [ 234.416471][T11403] netlink: 'syz.4.1599': attribute type 30 has an invalid length. [ 234.506202][T11332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.518919][T11332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.519510][T11412] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 234.639982][T11332] team0: Port device team_slave_0 added [ 234.641972][T11422] netlink: 'syz.1.1604': attribute type 4 has an invalid length. [ 234.660179][T11332] team0: Port device team_slave_1 added [ 234.726727][T11332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.734316][T11332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.772796][T11332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.803358][T11332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.831358][T11332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.876464][T11332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.983140][T11332] hsr_slave_0: entered promiscuous mode [ 234.994293][T11332] hsr_slave_1: entered promiscuous mode [ 235.000688][T11332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.011117][T11332] Cannot create hsr debugfs directory [ 235.236748][T11444] xt_cluster: node mask cannot exceed total number of nodes [ 235.287421][T11444] netlink: 'syz.3.1613': attribute type 10 has an invalid length. [ 235.324770][T11444] bridge0: port 1(dummy0) entered blocking state [ 235.331323][T11444] bridge0: port 1(dummy0) entered disabled state [ 235.350864][T11444] dummy0: entered allmulticast mode [ 235.358109][T11444] dummy0: entered promiscuous mode [ 235.364769][T11444] bridge0: port 1(dummy0) entered blocking state [ 235.371218][T11444] bridge0: port 1(dummy0) entered forwarding state [ 235.855400][ T5834] Bluetooth: hci3: command tx timeout [ 235.888373][T11332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.906274][T11475] netlink: 'syz.2.1620': attribute type 1 has an invalid length. [ 235.928818][T11332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.002812][T11475] bond11: entered promiscuous mode [ 236.009782][T11475] 8021q: adding VLAN 0 to HW filter on device bond11 [ 236.084797][T11478] bond11: (slave bridge5): making interface the new active one [ 236.092383][T11478] bridge5: entered promiscuous mode [ 236.100524][T11478] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 236.109596][T11332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.145828][T11332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.370391][T11332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.400626][T11507] netlink: 'syz.3.1625': attribute type 4 has an invalid length. [ 236.414861][T11332] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.437434][ T6673] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.444664][ T6673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.461315][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.468484][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.488717][T11511] netlink: 'syz.1.1629': attribute type 6 has an invalid length. [ 236.767488][T11528] vlan4: entered promiscuous mode [ 236.899643][T11332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.992735][T11534] syzkaller1: entered promiscuous mode [ 237.021236][T11534] syzkaller1: entered allmulticast mode [ 237.068996][T11332] veth0_vlan: entered promiscuous mode [ 237.094401][T11332] veth1_vlan: entered promiscuous mode [ 237.135666][T11541] __nla_validate_parse: 19 callbacks suppressed [ 237.135685][T11541] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1637'. [ 237.208472][T11332] veth0_macvtap: entered promiscuous mode [ 237.258603][T11332] veth1_macvtap: entered promiscuous mode [ 237.338804][T11332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.385091][T11332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.438473][T11551] macsec0: entered promiscuous mode [ 237.467350][T11551] ip6gretap0: entered promiscuous mode [ 237.472990][T11551] macsec0: entered allmulticast mode [ 237.486379][T11551] ip6gretap0: entered allmulticast mode [ 237.517318][T11551] ip6gretap0: left allmulticast mode [ 237.525923][T11554] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 237.527262][T11551] ip6gretap0: left promiscuous mode [ 237.590781][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 237.637075][T11558] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1642'. [ 237.650709][T11558] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1642'. [ 237.661133][T11558] netlink: 'syz.4.1642': attribute type 6 has an invalid length. [ 237.669312][T11558] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1642'. [ 237.676742][T11559] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 237.729126][T11558] FAULT_INJECTION: forcing a failure. [ 237.729126][T11558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.745786][T11558] CPU: 1 UID: 0 PID: 11558 Comm: syz.4.1642 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 237.745816][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.745829][T11558] Call Trace: [ 237.745838][T11558] [ 237.745848][T11558] dump_stack_lvl+0x189/0x250 [ 237.745886][T11558] ? __pfx____ratelimit+0x10/0x10 [ 237.745911][T11558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.745945][T11558] ? __pfx__printk+0x10/0x10 [ 237.745969][T11558] ? __might_fault+0xb0/0x130 [ 237.746026][T11558] should_fail_ex+0x414/0x560 [ 237.746062][T11558] _copy_from_user+0x2d/0xb0 [ 237.746084][T11558] kstrtouint_from_user+0xc4/0x170 [ 237.746117][T11558] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 237.746166][T11558] proc_fail_nth_write+0x88/0x240 [ 237.746193][T11558] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 237.746226][T11558] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 237.746255][T11558] vfs_write+0x27b/0xa90 [ 237.746299][T11558] ? __pfx_vfs_write+0x10/0x10 [ 237.746335][T11558] ? __fget_files+0x2a/0x420 [ 237.746364][T11558] ? __fget_files+0x3a0/0x420 [ 237.746386][T11558] ? __fget_files+0x2a/0x420 [ 237.746431][T11558] ksys_write+0x145/0x250 [ 237.746464][T11558] ? __pfx_ksys_write+0x10/0x10 [ 237.746491][T11558] ? rcu_is_watching+0x15/0xb0 [ 237.746528][T11558] ? do_syscall_64+0xbe/0x3b0 [ 237.746557][T11558] do_syscall_64+0xfa/0x3b0 [ 237.746578][T11558] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.746599][T11558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.746619][T11558] ? clear_bhb_loop+0x60/0xb0 [ 237.746643][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.746662][T11558] RIP: 0033:0x7f6aabb8d3df [ 237.746680][T11558] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 237.746696][T11558] RSP: 002b:00007f6aac92e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 237.746717][T11558] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6aabb8d3df [ 237.746731][T11558] RDX: 0000000000000001 RSI: 00007f6aac92e0a0 RDI: 000000000000000b [ 237.746743][T11558] RBP: 00007f6aac92e090 R08: 0000000000000000 R09: 0000000000000000 [ 237.746755][T11558] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 237.746766][T11558] R13: 0000000000000000 R14: 00007f6aabdb5fa0 R15: 00007ffca8b91398 [ 237.746799][T11558] [ 237.968835][ T5834] Bluetooth: hci3: command tx timeout [ 238.045842][T11563] vlan3: entered promiscuous mode [ 238.065087][ T6665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.088966][ T6665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.200443][ T6665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.214748][ T6665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.310652][T11571] Can't find ip_set type hash:ip$mec [ 238.357154][ T6675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.393989][ T6675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.486647][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.516797][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.611536][T11591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1652'. [ 238.621068][T11591] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1652'. [ 238.649526][T11591] netlink: 'syz.4.1652': attribute type 6 has an invalid length. [ 238.664863][T11591] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1652'. [ 238.707082][T11593] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1655'. [ 238.729849][T11595] vlan3: entered promiscuous mode [ 239.512164][T11634] vlan2: entered promiscuous mode [ 239.522921][T11629] Bluetooth: MGMT ver 1.23 [ 239.559951][T11637] netlink: 'syz.4.1670': attribute type 4 has an invalid length. [ 239.562580][T11629] geneve3: entered promiscuous mode [ 239.589880][ T6665] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.598876][ T6665] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.647636][ T6665] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.670058][T11639] !: left allmulticast mode [ 239.678941][T11639] bridge0: port 1(0!) entered disabled state [ 239.701182][ T6665] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.145449][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.450206][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.514049][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.601400][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.687742][ T49] bridge_slave_1: left allmulticast mode [ 240.693403][ T49] bridge_slave_1: left promiscuous mode [ 240.699905][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.709534][ T49] bridge_slave_0: left allmulticast mode [ 240.715570][ T49] bridge_slave_0: left promiscuous mode [ 240.721254][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.054703][T11662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.096417][T11664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.287568][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.304590][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.317784][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.340540][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.356567][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.412104][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.425398][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.435926][ T49] bond0 (unregistering): Released all slaves [ 241.792732][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1684'. [ 241.830484][T11672] chnl_net:caif_netlink_parms(): no params data found [ 241.998216][ T49] hsr_slave_0: left promiscuous mode [ 242.035211][ T49] hsr_slave_1: left promiscuous mode [ 242.044736][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.052261][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.072204][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.080124][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.112986][ T49] veth1_macvtap: left promiscuous mode [ 242.122274][ T49] veth0_macvtap: left promiscuous mode [ 242.129632][ T49] veth1_vlan: left promiscuous mode [ 242.131870][T11711] netlink: 'syz.4.1692': attribute type 10 has an invalid length. [ 242.135576][ T49] veth0_vlan: left promiscuous mode [ 242.291524][T11714] netlink: 'syz.2.1691': attribute type 1 has an invalid length. [ 242.682928][ T49] team0 (unregistering): Port device team_slave_1 removed [ 242.721800][ T49] team0 (unregistering): Port device team_slave_0 removed [ 243.247455][T11704] bridge0: port 1(dummy0) entered disabled state [ 243.338937][T11711] geneve0: entered promiscuous mode [ 243.346574][T11711] team0: Port device geneve0 added [ 243.354023][T11712] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 243.423714][ T6665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.455162][ T51] Bluetooth: hci3: command tx timeout [ 243.468820][ T6665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.530042][T11731] __nla_validate_parse: 2 callbacks suppressed [ 243.530060][T11731] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1694'. [ 243.550332][ T6665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.652309][ T6665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.678478][T11672] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.689058][T11737] netlink: 'syz.4.1696': attribute type 25 has an invalid length. [ 243.693093][T11672] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.726772][T11672] bridge_slave_0: entered allmulticast mode [ 243.746444][T11672] bridge_slave_0: entered promiscuous mode [ 243.767237][T11737] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1696'. [ 243.777614][T11672] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.799126][T11672] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.813190][T11672] bridge_slave_1: entered allmulticast mode [ 243.835491][T11672] bridge_slave_1: entered promiscuous mode [ 243.952026][T11672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.981522][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1700'. [ 243.983289][T11672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.995399][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1700'. [ 244.016740][T11754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1699'. [ 244.101750][T11672] team0: Port device team_slave_0 added [ 244.238260][T11672] team0: Port device team_slave_1 added [ 244.360733][T11775] netlink: 'syz.4.1702': attribute type 39 has an invalid length. [ 244.419353][T11672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.427169][T11672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.457304][T11672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.500243][T11672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.517652][T11672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.555349][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'. [ 244.567472][T11672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.625805][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'. [ 244.659386][T11785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.790159][T11790] sit0: entered promiscuous mode [ 244.805473][T11790] netlink: 'syz.2.1708': attribute type 1 has an invalid length. [ 244.817841][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 244.823294][T11790] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1708'. [ 244.836551][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 244.852798][T11672] hsr_slave_0: entered promiscuous mode [ 244.861441][T11672] hsr_slave_1: entered promiscuous mode [ 244.871452][T11672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.891682][T11672] Cannot create hsr debugfs directory [ 244.957015][T11795] netlink: 'syz.3.1710': attribute type 25 has an invalid length. [ 245.319624][T11814] syzkaller1: entered promiscuous mode [ 245.329904][T11814] syzkaller1: entered allmulticast mode [ 245.528340][ T51] Bluetooth: hci3: command tx timeout [ 245.568682][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.608114][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.647916][T11824] 8021q: adding VLAN 0 to HW filter on device  [ 245.648790][T11819] netlink: 'syz.3.1718': attribute type 13 has an invalid length. [ 245.666857][T11824] !: left promiscuous mode [ 245.685626][T11819] netlink: 'syz.3.1718': attribute type 17 has an invalid length. [ 245.695503][T11824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.808504][T11819] eql: refused to change device tx_queue_len [ 245.833885][T11819] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 246.372837][T11672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.410942][T11672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.443310][T11857] netlink: 'syz.3.1726': attribute type 6 has an invalid length. [ 246.471627][T11672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.533144][T11672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.555859][ T6673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.569850][ T6673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.844410][T11672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.984998][T11672] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.075350][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.082559][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.213993][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.221187][ T6665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.265461][T11898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.412389][T11903] netlink: 'syz.2.1735': attribute type 4 has an invalid length. [ 247.507695][T11910] netlink: 'syz.4.1736': attribute type 21 has an invalid length. [ 247.607071][ T51] Bluetooth: hci3: command tx timeout [ 247.634408][T11910] netlink: 'syz.4.1736': attribute type 5 has an invalid length. [ 247.918389][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.949576][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.957481][ T5955] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.045331][T11940] x_tables: duplicate underflow at hook 1 [ 248.148299][T11672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.373352][T11957] IPVS: length: 85 != 8 [ 248.402574][T11672] veth0_vlan: entered promiscuous mode [ 248.485173][T11672] veth1_vlan: entered promiscuous mode [ 248.576611][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.582161][T11672] veth0_macvtap: entered promiscuous mode [ 248.630862][T11672] veth1_macvtap: entered promiscuous mode [ 248.677630][T11672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.687356][T11974] __nla_validate_parse: 17 callbacks suppressed [ 248.687372][T11974] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1746'. [ 248.735320][T11974] 0·: renamed from hsr_slave_1 [ 248.777080][T11974] 0·: entered allmulticast mode [ 248.806621][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.814740][T11974] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 248.864630][T11672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.920099][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.948815][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.990193][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.019605][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.179888][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.198847][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.291240][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.300279][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.325562][T11994] validate_nla: 1 callbacks suppressed [ 249.325579][T11994] netlink: 'syz.2.1753': attribute type 32 has an invalid length. [ 249.617204][T12007] bond0: option lp_interval: invalid value (18446744073709551604) [ 249.658417][T12007] bond0: option lp_interval: allowed values 1 - 2147483647 [ 249.699564][T12009] netlink: 'syz.3.1757': attribute type 4 has an invalid length. [ 249.733823][T12009] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1757'. [ 249.826962][T12016] netlink: 'syz.2.1759': attribute type 25 has an invalid length. [ 249.872159][T12016] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1759'. [ 249.907811][T12014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1758'. [ 250.188189][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.213863][T12033] vlan0: entered promiscuous mode [ 250.221802][T12035] netlink: 'syz.2.1762': attribute type 12 has an invalid length. [ 250.443884][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.663412][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.836082][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.982741][ T13] bridge_slave_1: left allmulticast mode [ 250.988783][ T13] bridge_slave_1: left promiscuous mode [ 251.000568][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.010720][ T13] bridge_slave_0: left allmulticast mode [ 251.017116][ T13] bridge_slave_0: left promiscuous mode [ 251.022856][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.299212][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.313272][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.352885][ T13] bond0 (unregistering): Released all slaves [ 251.454140][T12078] netlink: 'syz.3.1766': attribute type 4 has an invalid length. [ 251.656537][T12084] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1769'. [ 251.696395][ T13] hsr_slave_0: left promiscuous mode [ 251.714210][ T13] hsr_slave_1: left promiscuous mode [ 251.740253][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.755395][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.755565][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.774736][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.783156][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.791501][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.799429][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.810526][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.819096][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.856433][ T13] veth1_macvtap: left promiscuous mode [ 251.861991][ T13] veth0_macvtap: left promiscuous mode [ 251.868717][ T13] veth1_vlan: left promiscuous mode [ 251.876856][ T13] veth0_vlan: left promiscuous mode [ 252.163629][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.334700][T12101] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1772'. [ 252.512802][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 252.587914][ T13] team0 (unregistering): Port device team_slave_1 removed [ 252.625765][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 252.666191][T12114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1778'. [ 252.682021][ T13] team0 (unregistering): Port device team_slave_0 removed [ 252.737747][T12119] IPVS: length: 24 != 16106127384 [ 253.175384][T12106] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 253.197546][T12118] netlink: 'syz.1.1777': attribute type 3 has an invalid length. [ 253.302952][T12132] lo speed is unknown, defaulting to 1000 [ 253.351855][T12132] lo speed is unknown, defaulting to 1000 [ 253.379151][T12132] lo speed is unknown, defaulting to 1000 [ 253.386302][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1781'. [ 253.509932][T12132] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 253.558108][T12132] lo speed is unknown, defaulting to 1000 [ 253.566859][T12132] lo speed is unknown, defaulting to 1000 [ 253.578059][T12132] lo speed is unknown, defaulting to 1000 [ 253.597186][T12132] lo speed is unknown, defaulting to 1000 [ 253.605924][T12132] lo speed is unknown, defaulting to 1000 [ 253.697644][T12086] chnl_net:caif_netlink_parms(): no params data found [ 253.713419][T12150] netlink: 'syz.1.1783': attribute type 4 has an invalid length. [ 253.797294][T12154] __nla_validate_parse: 1 callbacks suppressed [ 253.797311][T12154] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1787'. [ 253.854345][ T51] Bluetooth: hci3: command tx timeout [ 253.971759][T12164] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 253.992949][T12164] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1789'. [ 254.004909][T12086] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.012517][T12086] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.028683][T12086] bridge_slave_0: entered allmulticast mode [ 254.037793][T12086] bridge_slave_0: entered promiscuous mode [ 254.054687][T12086] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.061831][T12086] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.069128][T12086] bridge_slave_1: entered allmulticast mode [ 254.076742][T12086] bridge_slave_1: entered promiscuous mode [ 254.105214][T12171] xt_cgroup: path and classid specified [ 254.119045][T12086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.129716][T12172] netlink: 'syz.3.1790': attribute type 1 has an invalid length. [ 254.142257][T12166] netlink: 'syz.4.1791': attribute type 4 has an invalid length. [ 254.156284][T12086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.262284][T12086] team0: Port device team_slave_0 added [ 254.270953][T12176] sit0: left promiscuous mode [ 254.281092][T12178] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1793'. [ 254.292479][T12086] team0: Port device team_slave_1 added [ 254.363747][T12086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.372577][T12086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.385200][T12181] validate_nla: 1 callbacks suppressed [ 254.385220][T12181] netlink: 'syz.2.1794': attribute type 10 has an invalid length. [ 254.430159][T12086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.452876][T12086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.504131][T12086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.565571][T12086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.687511][T12086] hsr_slave_0: entered promiscuous mode [ 254.715155][T12086] hsr_slave_1: entered promiscuous mode [ 254.735127][T12086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.753867][T12086] Cannot create hsr debugfs directory [ 254.811849][T12187] lo speed is unknown, defaulting to 1000 [ 255.113308][T12204] batadv_slave_1: entered promiscuous mode [ 255.543974][T12203] batadv_slave_1: left promiscuous mode [ 255.668835][T12211] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1801'. [ 255.763379][T12216] openvswitch: netlink: Multiple metadata blocks provided [ 255.924054][ T51] Bluetooth: hci3: command tx timeout [ 256.154930][T12227] netlink: 'syz.2.1806': attribute type 4 has an invalid length. [ 256.180225][T12226] lo speed is unknown, defaulting to 1000 [ 256.312797][T12086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 256.350765][T12086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 256.377365][T12086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.407531][T12086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.456628][T12229] lo speed is unknown, defaulting to 1000 [ 256.498656][T12238] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1808'. [ 256.740405][T12241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.802752][T12240] lo speed is unknown, defaulting to 1000 [ 257.040085][T12086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.068370][T12086] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.091940][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.099118][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.129896][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.137074][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.998716][T12086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.013732][ T51] Bluetooth: hci3: command tx timeout [ 258.160371][T12086] veth0_vlan: entered promiscuous mode [ 258.205563][T12086] veth1_vlan: entered promiscuous mode [ 258.297607][T12086] veth0_macvtap: entered promiscuous mode [ 258.326187][T12277] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1816'. [ 258.328409][T12086] veth1_macvtap: entered promiscuous mode [ 258.344199][T12277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1816'. [ 258.415516][T12086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.459627][T12086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.493982][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.502803][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.561803][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.580649][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.781656][T12285] lo speed is unknown, defaulting to 1000 [ 258.849444][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.864454][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.950201][T12297] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23 [ 259.009534][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.018806][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.137166][T12302] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1823'. [ 259.146886][T12302] batadv_slave_1: entered promiscuous mode [ 259.154022][T12302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.269651][T12304] veth1_to_batadv: mtu greater than device maximum [ 259.573362][T12310] netlink: 'syz.4.1825': attribute type 4 has an invalid length. [ 259.621355][T12312] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 259.652219][T12312] bond8: entered promiscuous mode [ 259.657967][T12312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 259.674804][T12312] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1826'. [ 259.728175][T12312] batadv0: entered promiscuous mode [ 259.734461][T12312] batadv0: entered allmulticast mode [ 259.738061][T12315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1829'. [ 259.741478][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.758232][T12312] bond8: (slave batadv0): making interface the new active one [ 259.767850][T12312] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 259.854569][T12320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1827'. [ 259.872662][T12321] netlink: 'syz.4.1828': attribute type 7 has an invalid length. [ 259.902129][T12320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1827'. [ 260.030392][T12312] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1826'. [ 260.043376][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.260557][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.435988][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.569567][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.643676][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.725514][ T12] bridge_slave_1: left allmulticast mode [ 260.731425][ T12] bridge_slave_1: left promiscuous mode [ 260.741180][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.758651][ T12] bridge_slave_0: left allmulticast mode [ 260.770191][ T12] bridge_slave_0: left promiscuous mode [ 260.777901][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.090802][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.102175][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.112667][ T12] bond0 (unregistering): Released all slaves [ 261.306794][ T12] hsr_slave_0: left promiscuous mode [ 261.312781][ T12] hsr_slave_1: left promiscuous mode [ 261.319091][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.326642][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.366583][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.381138][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.467606][ T12] veth1_macvtap: left promiscuous mode [ 261.483391][ T12] veth0_macvtap: left promiscuous mode [ 261.491162][ T12] veth1_vlan: left promiscuous mode [ 261.506090][ T12] veth0_vlan: left promiscuous mode [ 261.661896][T12341] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1830'. [ 261.699236][T12341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1830'. [ 261.863171][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.872638][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.880479][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.888898][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.896812][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.242909][ T12] team0 (unregistering): Port device team_slave_1 removed [ 262.274174][ T12] team0 (unregistering): Port device team_slave_0 removed [ 262.570499][T12348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1834'. [ 262.594094][T12350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1834'. [ 262.717579][T12358] lo speed is unknown, defaulting to 1000 [ 262.942555][T12379] 8021q: adding VLAN 0 to HW filter on device bond10 [ 262.967264][T12379] bond10: entered promiscuous mode [ 262.979320][T12379] team0: Port device bond10 added [ 263.139289][T12396] tipc: Started in network mode [ 263.145124][T12396] tipc: Node identity ff, cluster identity 4711 [ 263.151527][T12396] tipc: Enabling of bearer rejected, failed to enable media [ 263.259990][T12358] chnl_net:caif_netlink_parms(): no params data found [ 263.445138][T12358] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.452428][T12358] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.459982][T12358] bridge_slave_0: entered allmulticast mode [ 263.468615][T12358] bridge_slave_0: entered promiscuous mode [ 263.478463][T12358] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.485872][T12358] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.493131][T12358] bridge_slave_1: entered allmulticast mode [ 263.501918][T12358] bridge_slave_1: entered promiscuous mode [ 263.547765][T12358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.560801][T12358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.615482][T12358] team0: Port device team_slave_0 added [ 263.623424][T12358] team0: Port device team_slave_1 added [ 263.672233][T12358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.679839][T12358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.742314][T12422] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input24 [ 263.743763][T12358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.809258][T12358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.821061][T12358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.870812][T12358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.923964][ T5834] Bluetooth: hci3: command tx timeout [ 263.996649][T12358] hsr_slave_0: entered promiscuous mode [ 264.003055][T12358] hsr_slave_1: entered promiscuous mode [ 264.017839][T12358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.025676][T12358] Cannot create hsr debugfs directory [ 264.367978][T12451] lo speed is unknown, defaulting to 1000 [ 264.636290][T12463] __nla_validate_parse: 7 callbacks suppressed [ 264.636309][T12463] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1861'. [ 264.751503][T12358] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.810104][T12358] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.853994][T12358] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.928656][T12474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1864'. [ 264.953726][T12358] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 264.990167][T12480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1866'. [ 265.003093][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'. [ 265.012190][T12476] IPVS: Scheduler module ip_vs_sip not found [ 265.031856][T12480] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 265.062456][T12474] lo speed is unknown, defaulting to 1000 [ 265.379591][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 265.537453][T12358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.601021][T12358] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.634931][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.642106][ T6665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.686952][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.694142][ T6665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.754104][T12522] netlink: 'syz.3.1876': attribute type 4 has an invalid length. [ 265.789344][T12524] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1877'. [ 265.809778][T12524] netlink: 'syz.4.1877': attribute type 1 has an invalid length. [ 265.894523][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1878'. [ 265.915536][T12526] IPVS: Scheduler module ip_vs_sip not found [ 265.921657][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 265.932656][T12529] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 266.004050][ T5834] Bluetooth: hci3: command tx timeout [ 266.076799][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1879'. [ 266.086519][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 266.103805][T12535] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 266.158773][T12533] IPVS: Scheduler module ip_vs_sip not found [ 266.206852][T12358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.340358][T12358] veth0_vlan: entered promiscuous mode [ 266.358509][T12358] veth1_vlan: entered promiscuous mode [ 266.502960][T12358] veth0_macvtap: entered promiscuous mode [ 266.528678][T12358] veth1_macvtap: entered promiscuous mode [ 266.580469][T12358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.599630][T12358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.640091][ T6673] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.674602][ T6673] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.783383][T12553] vlan0: left promiscuous mode [ 266.842903][T12553] bond11: left promiscuous mode [ 266.873853][T12553] bridge5: left promiscuous mode [ 267.024005][T12553] vlan4: left promiscuous mode [ 267.052340][T12553] geneve3: left promiscuous mode [ 267.124514][T12547] lo speed is unknown, defaulting to 1000 [ 267.124944][ T6673] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.172626][ T6673] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.266907][ T6673] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.280588][ T6673] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.347434][ T6673] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.396557][ T6673] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.687485][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.705903][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.741599][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.767375][ T6673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.776021][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.794359][ T6673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.083866][ T51] Bluetooth: hci3: command tx timeout [ 268.243221][T12600] Bluetooth: MGMT ver 1.23 [ 268.455391][T12608] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 268.517721][T12610] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 268.662624][T12618] netlink: 'syz.2.1901': attribute type 6 has an invalid length. [ 269.509424][T12647] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 269.538863][T12647] macvtap0: entered promiscuous mode [ 269.557924][T12647] vlan0: entered promiscuous mode [ 269.563401][T12647] macvtap0: entered allmulticast mode [ 269.572619][T12647] vlan0: entered allmulticast mode [ 269.579072][T12647] veth0_vlan: entered allmulticast mode [ 269.587675][T12647] vlan0: left allmulticast mode [ 269.592550][T12647] veth0_vlan: left allmulticast mode [ 269.600514][T12647] vlan0: left promiscuous mode [ 269.727578][T12654] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.757290][T12654] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.792392][T12656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.814648][T12656] __nla_validate_parse: 10 callbacks suppressed [ 269.814663][T12656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1911'. [ 270.020799][T12654] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.063536][T12654] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.106958][T12667] dvmrp1: entered allmulticast mode [ 270.116812][T12669] dvmrp1: left allmulticast mode [ 270.189575][T12654] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.200063][T12654] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.344374][T12654] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.375413][T12654] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.785211][ T3479] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.807718][ T3479] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.817194][T12692] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1922'. [ 270.826670][T12692] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1922'. [ 270.928690][ T3479] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.940311][ T3479] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.960495][ T3479] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.979430][ T3479] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.030829][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.057393][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.088734][T12699] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1923'. [ 271.469121][T12720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1931'. [ 271.487060][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 271.498505][T12722] xt_hashlimit: size too large, truncated to 1048576 [ 271.498511][T12723] xt_hashlimit: max too large, truncated to 1048576 [ 271.500834][T12723] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 271.538769][T12723] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1932'. [ 271.591525][T12722] xt_hashlimit: max too large, truncated to 1048576 [ 271.716642][T12730] netlink: 'syz.4.1934': attribute type 4 has an invalid length. [ 271.716870][T12734] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1933'. [ 271.967152][T12745] Cannot find set identified by id 0 to match [ 272.295094][T12757] lo speed is unknown, defaulting to 1000 [ 272.382739][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1944'. [ 272.668968][ T6665] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.678145][ T6665] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.698196][ T6665] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.710035][ T6665] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.888083][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1953'. [ 272.897879][T12793] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 272.905583][T12793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.756414][T12824] sctp: [Deprecated]: syz.4.1962 (pid 12824) Use of int in max_burst socket option deprecated. [ 273.756414][T12824] Use struct sctp_assoc_value instead [ 273.950645][T12835] lo speed is unknown, defaulting to 1000 [ 274.157260][T12847] lo: entered promiscuous mode [ 274.162465][T12847] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 274.173903][T12847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.342384][T12849] lo speed is unknown, defaulting to 1000 [ 274.728660][T12865] xt_TCPMSS: Only works on TCP SYN packets [ 274.874318][T12873] __nla_validate_parse: 2 callbacks suppressed [ 274.874337][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 274.892113][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 274.918953][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1976'. [ 274.933182][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1976'. [ 274.942765][T12873] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1976'. [ 275.668531][T12893] vlan3: entered promiscuous mode [ 275.977658][T12899] ip6gretap0: entered promiscuous mode [ 275.987892][T12899] ip6gretap0: left promiscuous mode [ 276.006820][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 276.226072][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'. [ 276.288191][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 276.366489][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1989'. [ 276.379540][T12912] xt_hashlimit: size too large, truncated to 1048576 [ 276.876744][T12939] netlink: 'syz.4.1998': attribute type 10 has an invalid length. [ 276.986536][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 277.031368][T12945] lo speed is unknown, defaulting to 1000 [ 278.238657][T13006] tipc: Enabled bearer , priority 10 [ 278.565304][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.637924][T13033] syzkaller1: entered promiscuous mode [ 278.647323][T13033] syzkaller1: entered allmulticast mode [ 278.722180][T13036] bond8: (slave batadv0): Releasing active interface [ 278.850266][T13043] netlink: 'syz.1.2031': attribute type 21 has an invalid length. [ 278.891722][T13043] netlink: 'syz.1.2031': attribute type 21 has an invalid length. [ 279.084781][T13053] lo speed is unknown, defaulting to 1000 [ 279.510873][T13072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.526039][T13072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.543135][T13072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.643294][T13076] lo speed is unknown, defaulting to 1000 [ 279.674463][T13078] lo speed is unknown, defaulting to 1000 [ 280.076321][T13091] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.418016][T13110] netlink: 'syz.2.2047': attribute type 4 has an invalid length. [ 280.469265][T13108] netlink: 'syz.2.2047': attribute type 4 has an invalid length. [ 280.491428][ T5955] lo speed is unknown, defaulting to 1000 [ 280.507146][ T5955] syz2: Port: 1 Link ACTIVE [ 280.550720][T13108] netlink: zone id is out of range [ 280.556429][T13108] netlink: zone id is out of range [ 280.561727][T13108] netlink: zone id is out of range [ 280.569392][T13108] netlink: zone id is out of range [ 280.619180][T13108] netlink: zone id is out of range [ 280.624871][T13108] netlink: zone id is out of range [ 280.630538][T13108] netlink: zone id is out of range [ 280.638386][T13108] netlink: zone id is out of range [ 280.644816][T13108] netlink: zone id is out of range [ 280.650033][T13108] netlink: zone id is out of range [ 280.779257][T13118] lo speed is unknown, defaulting to 1000 [ 280.901649][T13129] __nla_validate_parse: 16 callbacks suppressed [ 280.901668][T13129] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2054'. [ 281.180993][T13138] lo speed is unknown, defaulting to 1000 [ 281.789047][T13153] lo speed is unknown, defaulting to 1000 [ 282.272209][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2058'. [ 282.714085][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 282.724882][T13190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2068'. [ 282.790863][T13194] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 282.831864][T13194] 8021q: adding VLAN 0 to HW filter on device bond13 [ 282.841899][T13197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 282.857547][T13197] netem: change failed [ 282.888307][T13194] 8021q: adding VLAN 0 to HW filter on device bond13 [ 282.897166][T13194] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 282.911055][T13194] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 282.988332][T13201] veth1: entered promiscuous mode [ 283.015892][T13201] bond13: (slave veth1): Enslaving as an active interface with a down link [ 283.056059][T13204] bond13: (slave erspan0): making interface the new active one [ 283.073875][ T30] audit: type=1804 audit(1751208674.908:4): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2074" name="/newroot/471/cgroup.controllers" dev="tmpfs" ino=2418 res=1 errno=0 [ 283.128578][ T30] audit: type=1800 audit(1751208674.908:5): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2074" name="cgroup.controllers" dev="tmpfs" ino=2418 res=0 errno=0 [ 283.129556][T13204] bond13: (slave erspan0): Enslaving as an active interface with an up link [ 283.198495][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 283.212213][ T5881] IPVS: starting estimator thread 0... [ 283.213460][T13209] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 283.314017][T13211] IPVS: using max 24 ests per chain, 57600 per kthread [ 283.645340][T13231] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2083'. [ 283.662938][T13231] nbd: illegal input index 65508 [ 283.823308][T13244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2082'. [ 283.911996][T13254] netlink: 'syz.2.2086': attribute type 1 has an invalid length. [ 283.968293][T13254] 8021q: adding VLAN 0 to HW filter on device bond14 [ 284.133282][T13250] bond14 (unregistering): Released all slaves [ 284.748580][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 284.789585][T13306] netlink: 'syz.4.2101': attribute type 1 has an invalid length. [ 284.826185][T13306] netlink: 'syz.4.2101': attribute type 4 has an invalid length. [ 284.842842][T13306] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2101'. [ 284.856930][T13309] lo speed is unknown, defaulting to 1000 [ 285.003885][T13311] lo speed is unknown, defaulting to 1000 [ 285.380723][T13336] veth0_to_bridge: entered allmulticast mode [ 285.610652][T13334] veth0_to_bridge: left allmulticast mode [ 285.629959][T13351] netlink: 'syz.1.2114': attribute type 1 has an invalid length. [ 285.668895][T13354] net_ratelimit: 81 callbacks suppressed [ 285.668938][T13354] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 285.917313][T13360] pim6reg1: entered promiscuous mode [ 285.938773][T13360] pim6reg1: entered allmulticast mode [ 285.957318][T13362] netlink: 'syz.3.2118': attribute type 6 has an invalid length. [ 285.965943][T13362] __nla_validate_parse: 4 callbacks suppressed [ 285.965959][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2118'. [ 286.124751][ T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 286.184274][ T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 286.217464][ T10] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 286.496616][T13382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2125'. [ 286.545359][T13382] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2125'. [ 286.681377][T13388] lo speed is unknown, defaulting to 1000 [ 286.984407][T13400] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 286.992232][T13400] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 287.002556][T13400] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2129'. [ 287.118183][T13414] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2133'. [ 287.371735][T13426] IPVS: Scheduler module ip_vs_sip not found [ 287.408088][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2137'. [ 287.427775][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'. [ 287.435036][T13429] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 287.447069][T13432] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 287.709595][T13438] lo speed is unknown, defaulting to 1000 [ 287.983303][T13459] netlink: 'syz.3.2145': attribute type 1 has an invalid length. [ 288.146468][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'. [ 288.322043][T13478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2150'. [ 288.351470][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 289.148133][T13510] lo speed is unknown, defaulting to 1000 [ 289.473878][T13521] lo speed is unknown, defaulting to 1000 [ 289.709183][T13537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.936229][T13549] netlink: 'syz.4.2169': attribute type 6 has an invalid length. [ 289.942224][T13551] vlan2: entered promiscuous mode [ 289.950944][T13549] netlink: 'syz.4.2169': attribute type 5 has an invalid length. [ 290.080067][T13555] lo speed is unknown, defaulting to 1000 [ 290.133082][T13557] tun0: tun_chr_ioctl cmd 1074025675 [ 290.140009][T13557] tun0: persist enabled [ 290.148232][T13557] tun0: tun_chr_ioctl cmd 1074025675 [ 290.154163][T13557] tun0: persist enabled [ 290.435662][T13570] lo speed is unknown, defaulting to 1000 [ 290.575313][T13579] lo speed is unknown, defaulting to 1000 [ 291.321096][T13587] lo speed is unknown, defaulting to 1000 [ 291.344671][T13591] vlan0: entered promiscuous mode [ 291.628886][T13601] __nla_validate_parse: 8 callbacks suppressed [ 291.628905][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 291.656245][T13601] gre0: Master is either lo or non-ether device [ 291.767022][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'. [ 291.939406][T13621] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 291.955808][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 292.055400][T13621] ipvlan2: entered promiscuous mode [ 292.330910][T13640] netlink: 'syz.3.2199': attribute type 11 has an invalid length. [ 292.368420][T13636] lo speed is unknown, defaulting to 1000 [ 292.642459][T13647] lo speed is unknown, defaulting to 1000 [ 292.692183][T13652] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 293.121608][T13666] batadv_slave_1: left promiscuous mode [ 293.136932][T13666] 0·: left allmulticast mode [ 293.164122][T13666] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 293.171240][T13666] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 293.187481][T13666] vlan2: left allmulticast mode [ 293.192340][T13666] veth1: left allmulticast mode [ 293.215532][T13666] bond8: left promiscuous mode [ 293.231739][T13666] batadv0: left promiscuous mode [ 293.244096][T13666] batadv0: left allmulticast mode [ 293.276271][T13673] vlan4: entered promiscuous mode [ 293.317647][ T1098] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.434035][ T1098] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.462622][ T1098] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.508849][ T1098] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.520464][T13684] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2211'. [ 293.561865][T13679] netlink: del zone limit has 4 unknown bytes [ 293.858428][T13704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.941809][T13714] vlan0: entered promiscuous mode [ 293.985031][T13710] lo speed is unknown, defaulting to 1000 [ 294.098928][T13717] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 294.470840][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2231'. [ 294.552720][T13750] vlan2: entered promiscuous mode [ 294.838785][T13771] openvswitch: netlink: Message has 8 unknown bytes. [ 294.928003][T13773] lo speed is unknown, defaulting to 1000 [ 295.023367][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'. [ 295.153389][T13783] netlink: 'syz.3.2243': attribute type 10 has an invalid length. [ 295.172954][T13783] dummy0: left allmulticast mode [ 295.178191][T13783] dummy0: left promiscuous mode [ 295.183485][T13783] bridge0: port 1(dummy0) entered disabled state [ 295.569305][T13804] x_tables: duplicate underflow at hook 2 [ 295.636086][T13807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2249'. [ 295.882033][T13820] lo speed is unknown, defaulting to 1000 [ 295.945470][T13814] netlink: 'syz.3.2251': attribute type 13 has an invalid length. [ 295.953859][T13814] netlink: 'syz.3.2251': attribute type 17 has an invalid length. [ 296.044392][T13814] erspan0: left allmulticast mode [ 296.101526][T13814] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.111852][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2256'. [ 296.123113][T13814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.318896][T13832] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 296.346579][ T5914] syzkaller1: tun_net_xmit 90 [ 296.367076][T13832] syzkaller1: Linktype set failed because interface is up [ 296.421297][ T12] syzkaller1: tun_net_xmit 86 [ 296.437002][T13842] tipc: Can't bind to reserved service type 0 [ 296.458517][T13844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2257'. [ 296.463896][T13814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.534118][T13821] lo speed is unknown, defaulting to 1000 [ 296.560164][T13831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.574049][T13842] bond0: entered promiscuous mode [ 296.586330][T13842] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 296.609273][T13842] bond0: left promiscuous mode [ 296.649087][T13831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.764595][ T5901] syzkaller1: tun_net_xmit 90 [ 297.687002][T13909] vlan0: entered promiscuous mode [ 297.743124][ T30] audit: type=1800 audit(1751208689.588:6): pid=13911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2279" name="memory.events" dev="tmpfs" ino=2732 res=0 errno=0 [ 297.745298][T13911] xt_bpf: check failed: parse error [ 297.809767][ T30] audit: type=1804 audit(1751208689.658:7): pid=13911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2279" name="memory.events" dev="tmpfs" ino=2732 res=1 errno=0 [ 297.959333][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 297.971027][T13920] netlink: 'syz.3.2283': attribute type 1 has an invalid length. [ 298.175806][T13937] netlink: 'syz.4.2288': attribute type 12 has an invalid length. [ 298.207081][T13937] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2288'. [ 298.801135][T13975] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2296'. [ 298.832024][T13972] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 299.257492][T13992] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2303'. [ 299.398611][T13997] x_tables: duplicate underflow at hook 2 [ 299.555200][T14005] netlink: 'syz.3.2308': attribute type 11 has an invalid length. [ 299.563141][T14005] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2308'. [ 299.580069][T14005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 299.937308][T14031] netlink: 'syz.4.2317': attribute type 17 has an invalid length. [ 299.945876][T14031] lo: left promiscuous mode [ 299.967590][T14031] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2317'. [ 300.027129][T14031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.286169][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 300.422265][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2323'. [ 300.433053][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.435105][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2323'. [ 300.448786][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.651704][T14059] lo speed is unknown, defaulting to 1000 [ 300.795547][T14067] lo speed is unknown, defaulting to 1000 [ 301.185057][T14067] netlink: 'syz.1.2330': attribute type 2 has an invalid length. [ 301.236678][T14059] netlink: 'syz.3.2327': attribute type 12 has an invalid length. [ 301.757414][T14096] netlink: 'syz.3.2337': attribute type 3 has an invalid length. [ 301.788601][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.800062][T14098] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 301.855115][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.864904][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.904560][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.926045][T14105] IPVS: Error joining to the multicast group [ 302.192286][T14118] netlink: 'syz.4.2343': attribute type 6 has an invalid length. [ 302.200829][T14118] netlink: 'syz.4.2343': attribute type 5 has an invalid length. [ 302.212396][T14118] FAULT_INJECTION: forcing a failure. [ 302.212396][T14118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.242781][T14118] CPU: 0 UID: 0 PID: 14118 Comm: syz.4.2343 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 302.242807][T14118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.242820][T14118] Call Trace: [ 302.242828][T14118] [ 302.242836][T14118] dump_stack_lvl+0x189/0x250 [ 302.242870][T14118] ? __pfx____ratelimit+0x10/0x10 [ 302.242891][T14118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.242918][T14118] ? __pfx__printk+0x10/0x10 [ 302.242937][T14118] ? __might_fault+0xb0/0x130 [ 302.242978][T14118] should_fail_ex+0x414/0x560 [ 302.243005][T14118] _copy_from_user+0x2d/0xb0 [ 302.243024][T14118] kstrtouint_from_user+0xc4/0x170 [ 302.243052][T14118] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 302.243093][T14118] proc_fail_nth_write+0x88/0x240 [ 302.243115][T14118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 302.243142][T14118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 302.243165][T14118] vfs_write+0x27b/0xa90 [ 302.243213][T14118] ? __pfx_vfs_write+0x10/0x10 [ 302.243243][T14118] ? __fget_files+0x2a/0x420 [ 302.243267][T14118] ? __fget_files+0x3a0/0x420 [ 302.243285][T14118] ? __fget_files+0x2a/0x420 [ 302.243314][T14118] ksys_write+0x145/0x250 [ 302.243348][T14118] ? __pfx_ksys_write+0x10/0x10 [ 302.243373][T14118] ? rcu_is_watching+0x15/0xb0 [ 302.243407][T14118] ? do_syscall_64+0xbe/0x3b0 [ 302.243432][T14118] do_syscall_64+0xfa/0x3b0 [ 302.243453][T14118] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.243472][T14118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.243491][T14118] ? clear_bhb_loop+0x60/0xb0 [ 302.243514][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.243531][T14118] RIP: 0033:0x7f6aabb8d3df [ 302.243548][T14118] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 302.243564][T14118] RSP: 002b:00007f6aac92e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 302.243583][T14118] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6aabb8d3df [ 302.243596][T14118] RDX: 0000000000000001 RSI: 00007f6aac92e0a0 RDI: 000000000000000e [ 302.243607][T14118] RBP: 00007f6aac92e090 R08: 0000000000000000 R09: 0000000000000000 [ 302.243618][T14118] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 302.243629][T14118] R13: 0000000000000000 R14: 00007f6aabdb5fa0 R15: 00007ffca8b91398 [ 302.243659][T14118] [ 302.675931][T14129] netlink: 'syz.2.2348': attribute type 4 has an invalid length. [ 302.787081][T14130] netlink: 'syz.4.2347': attribute type 25 has an invalid length. [ 302.914536][T14137] netlink: 'syz.2.2351': attribute type 4 has an invalid length. [ 302.982457][T14145] __nla_validate_parse: 8 callbacks suppressed [ 302.982476][T14145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2354'. [ 303.137525][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2355'. [ 303.310959][T14166] netlink: 'syz.2.2361': attribute type 4 has an invalid length. [ 303.502661][T14177] openvswitch: netlink: Actions may not be safe on all matching packets [ 303.529087][T14181] openvswitch: netlink: Actions may not be safe on all matching packets [ 303.618136][T14185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2366'. [ 303.817698][T14194] lo speed is unknown, defaulting to 1000 [ 304.261560][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2373'. [ 304.280089][T14208] pim6reg: entered allmulticast mode [ 304.289544][T14208] pim6reg: left allmulticast mode [ 304.511502][T14213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2374'. [ 304.739932][T14224] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2379'. [ 304.821291][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'. [ 304.935299][T14232] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 304.942811][T14232] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 304.957971][T14233] macsec0: entered promiscuous mode [ 304.963210][T14233] macsec0: entered allmulticast mode [ 305.269434][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 305.301281][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 305.389211][T14262] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2389'. [ 305.511486][T14271] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 305.551208][T14273] lo speed is unknown, defaulting to 1000 [ 305.597080][T14275] netlink: 'syz.2.2393': attribute type 4 has an invalid length. [ 305.609846][T14276] netlink: 'syz.2.2393': attribute type 21 has an invalid length. [ 305.877719][T14286] lo speed is unknown, defaulting to 1000 [ 306.633901][T14313] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 306.738218][ T10] ------------[ cut here ]------------ [ 306.743863][ T10] workqueue: cannot queue hci_conn_timeout on wq hci3 [ 306.750690][ T10] WARNING: CPU: 0 PID: 10 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 306.759534][ T10] Modules linked in: [ 306.763535][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 306.775430][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.785495][ T10] Workqueue: events l2cap_chan_timeout [ 306.790973][ T10] RIP: 0010:__queue_work+0xd62/0xfe0 [ 306.796257][ T10] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 09 0d 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff [ 306.815872][ T10] RSP: 0018:ffffc900000f77a8 EFLAGS: 00010046 [ 306.821947][ T10] RAX: 1d15d8266b7f9e00 RBX: 0000000000000020 RCX: ffff88801ce89e00 [ 306.829916][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 306.837886][ T10] RBP: 1ffff1100f9e3838 R08: 0000000000000003 R09: 0000000000000004 [ 306.845862][ T10] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000 [ 306.853837][ T10] R13: ffff8880762b0960 R14: ffff88801a494008 R15: ffff88807cf1c178 [ 306.861888][ T10] FS: 0000000000000000(0000) GS:ffff888125c48000(0000) knlGS:0000000000000000 [ 306.870816][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.877391][ T10] CR2: 000000110c24dc02 CR3: 0000000029cba000 CR4: 00000000003526f0 [ 306.885365][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 306.893344][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 306.901321][ T10] Call Trace: [ 306.904602][ T10] [ 306.907542][ T10] ? __queue_delayed_work+0xe1/0x2d0 [ 306.912825][ T10] queue_delayed_work_on+0x18b/0x280 [ 306.918111][ T10] ? __pfx___cancel_work+0x10/0x10 [ 306.923221][ T10] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 306.929031][ T10] ? hci_conn_drop+0x14d/0x280 [ 306.933808][ T10] l2cap_chan_del+0x285/0x5e0 [ 306.938497][ T10] l2cap_chan_close+0x597/0x980 [ 306.943357][ T10] ? __pfx_l2cap_chan_close+0x10/0x10 [ 306.948732][ T10] ? lock_acquire+0x175/0x360 [ 306.953428][ T10] l2cap_chan_timeout+0x158/0x390 [ 306.958459][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 306.964184][ T10] process_scheduled_works+0xae1/0x17b0 [ 306.969758][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 306.975762][ T10] worker_thread+0x8a0/0xda0 [ 306.980373][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 306.986707][ T10] ? __kthread_parkme+0x7b/0x200 [ 306.991652][ T10] kthread+0x70e/0x8a0 [ 306.995724][ T10] ? __pfx_worker_thread+0x10/0x10 [ 307.000857][ T10] ? __pfx_kthread+0x10/0x10 [ 307.005468][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.010668][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.015867][ T10] ? __pfx_kthread+0x10/0x10 [ 307.020464][ T10] ret_from_fork+0x3fc/0x770 [ 307.025057][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 307.030181][ T10] ? __switch_to_asm+0x39/0x70 [ 307.034948][ T10] ? __switch_to_asm+0x33/0x70 [ 307.039709][ T10] ? __pfx_kthread+0x10/0x10 [ 307.044324][ T10] ret_from_fork_asm+0x1a/0x30 [ 307.049116][ T10] [ 307.052162][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 307.059440][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 307.071328][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.081399][ T10] Workqueue: events l2cap_chan_timeout [ 307.086864][ T10] Call Trace: [ 307.090139][ T10] [ 307.093067][ T10] dump_stack_lvl+0x99/0x250 [ 307.097660][ T10] ? __asan_memcpy+0x40/0x70 [ 307.102251][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.107451][ T10] ? __pfx__printk+0x10/0x10 [ 307.112054][ T10] panic+0x2db/0x790 [ 307.115965][ T10] ? __pfx_panic+0x10/0x10 [ 307.120388][ T10] ? show_trace_log_lvl+0x4fb/0x550 [ 307.125603][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 307.130553][ T10] __warn+0x31b/0x4b0 [ 307.134536][ T10] ? __queue_work+0xd62/0xfe0 [ 307.139208][ T10] ? __queue_work+0xd62/0xfe0 [ 307.143879][ T10] report_bug+0x2be/0x4f0 [ 307.148203][ T10] ? __queue_work+0xd62/0xfe0 [ 307.152869][ T10] ? __queue_work+0xd62/0xfe0 [ 307.157548][ T10] ? __queue_work+0xd64/0xfe0 [ 307.162221][ T10] handle_bug+0x84/0x160 [ 307.166468][ T10] exc_invalid_op+0x1a/0x50 [ 307.170991][ T10] asm_exc_invalid_op+0x1a/0x20 [ 307.175836][ T10] RIP: 0010:__queue_work+0xd62/0xfe0 [ 307.181122][ T10] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 09 0d 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff [ 307.200721][ T10] RSP: 0018:ffffc900000f77a8 EFLAGS: 00010046 [ 307.206787][ T10] RAX: 1d15d8266b7f9e00 RBX: 0000000000000020 RCX: ffff88801ce89e00 [ 307.214755][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 307.222725][ T10] RBP: 1ffff1100f9e3838 R08: 0000000000000003 R09: 0000000000000004 [ 307.230695][ T10] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000 [ 307.238665][ T10] R13: ffff8880762b0960 R14: ffff88801a494008 R15: ffff88807cf1c178 [ 307.246647][ T10] ? __queue_work+0xd61/0xfe0 [ 307.251413][ T10] ? __queue_delayed_work+0xe1/0x2d0 [ 307.256699][ T10] queue_delayed_work_on+0x18b/0x280 [ 307.261989][ T10] ? __pfx___cancel_work+0x10/0x10 [ 307.267104][ T10] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 307.272930][ T10] ? hci_conn_drop+0x14d/0x280 [ 307.277700][ T10] l2cap_chan_del+0x285/0x5e0 [ 307.282386][ T10] l2cap_chan_close+0x597/0x980 [ 307.287242][ T10] ? __pfx_l2cap_chan_close+0x10/0x10 [ 307.292626][ T10] ? lock_acquire+0x175/0x360 [ 307.297328][ T10] l2cap_chan_timeout+0x158/0x390 [ 307.302361][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 307.308093][ T10] process_scheduled_works+0xae1/0x17b0 [ 307.313665][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 307.319679][ T10] worker_thread+0x8a0/0xda0 [ 307.324283][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 307.330629][ T10] ? __kthread_parkme+0x7b/0x200 [ 307.335581][ T10] kthread+0x70e/0x8a0 [ 307.339664][ T10] ? __pfx_worker_thread+0x10/0x10 [ 307.344787][ T10] ? __pfx_kthread+0x10/0x10 [ 307.349379][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.354571][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.359774][ T10] ? __pfx_kthread+0x10/0x10 [ 307.364388][ T10] ret_from_fork+0x3fc/0x770 [ 307.368986][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 307.374109][ T10] ? __switch_to_asm+0x39/0x70 [ 307.378873][ T10] ? __switch_to_asm+0x33/0x70 [ 307.383637][ T10] ? __pfx_kthread+0x10/0x10 [ 307.388255][ T10] ret_from_fork_asm+0x1a/0x30 [ 307.393084][ T10] [ 307.396360][ T10] Kernel Offset: disabled [ 307.400685][ T10] Rebooting in 86400 seconds..