last executing test programs: 1m9.15255959s ago: executing program 2 (id=6861): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r3 = syz_open_procfs$namespace(r2, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r5], 0x3c}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={r4, 0x6, 0x7, 0x4}) write$tun(r10, &(0x7f0000000440)={@void, @void, @arp=@generic={0xf, 0xdada, 0x6, 0x5, 0x4, @random="3e867d1c27e8", "601db38665", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}}, 0x19) sendmsg$NFQNL_MSG_CONFIG(r9, 0x0, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r13 = accept4(r12, 0x0, 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x80, 0x3, 0xfe, 0x4, 0xc8, 0x3, 0x1100}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) recvmsg$can_raw(r13, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/107, 0x6b}], 0x2}, 0x40000001) sendmsg$NL80211_CMD_SET_COALESCE(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x340}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa000000000000008864450000280000000000069078ac1414bbe000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0b00000000000000d587408efa88bcc499046e1a81576e346d1e9d34b036ce228eb784b66efed2d7ddb08322628fda4cc022686c64a1db0dea9a2271f82945a406ab6401b0025fc0d88af406b1d8c0e183adff8b2a7aad7411bf8cccbea40f251defd9279f69976746b41d3c86691190b2cca5f384c176d7c0cfc5dea0abc5242d99d9d182f7536d46ce90f3ee747eb31eedf7f00a2d33072d5ef8a5ed7fcdefe517ccc50910cef03e3b93042d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 58.858797065s ago: executing program 2 (id=6861): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r3 = syz_open_procfs$namespace(r2, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r5], 0x3c}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={r4, 0x6, 0x7, 0x4}) write$tun(r10, &(0x7f0000000440)={@void, @void, @arp=@generic={0xf, 0xdada, 0x6, 0x5, 0x4, @random="3e867d1c27e8", "601db38665", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}}, 0x19) sendmsg$NFQNL_MSG_CONFIG(r9, 0x0, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r13 = accept4(r12, 0x0, 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x80, 0x3, 0xfe, 0x4, 0xc8, 0x3, 0x1100}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) recvmsg$can_raw(r13, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/107, 0x6b}], 0x2}, 0x40000001) sendmsg$NL80211_CMD_SET_COALESCE(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x340}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa000000000000008864450000280000000000069078ac1414bbe000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0b00000000000000d587408efa88bcc499046e1a81576e346d1e9d34b036ce228eb784b66efed2d7ddb08322628fda4cc022686c64a1db0dea9a2271f82945a406ab6401b0025fc0d88af406b1d8c0e183adff8b2a7aad7411bf8cccbea40f251defd9279f69976746b41d3c86691190b2cca5f384c176d7c0cfc5dea0abc5242d99d9d182f7536d46ce90f3ee747eb31eedf7f00a2d33072d5ef8a5ed7fcdefe517ccc50910cef03e3b93042d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 44.557529621s ago: executing program 2 (id=6861): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r3 = syz_open_procfs$namespace(r2, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r5], 0x3c}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={r4, 0x6, 0x7, 0x4}) write$tun(r10, &(0x7f0000000440)={@void, @void, @arp=@generic={0xf, 0xdada, 0x6, 0x5, 0x4, @random="3e867d1c27e8", "601db38665", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}}, 0x19) sendmsg$NFQNL_MSG_CONFIG(r9, 0x0, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r13 = accept4(r12, 0x0, 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x80, 0x3, 0xfe, 0x4, 0xc8, 0x3, 0x1100}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) recvmsg$can_raw(r13, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/107, 0x6b}], 0x2}, 0x40000001) sendmsg$NL80211_CMD_SET_COALESCE(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x340}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa000000000000008864450000280000000000069078ac1414bbe000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0b00000000000000d587408efa88bcc499046e1a81576e346d1e9d34b036ce228eb784b66efed2d7ddb08322628fda4cc022686c64a1db0dea9a2271f82945a406ab6401b0025fc0d88af406b1d8c0e183adff8b2a7aad7411bf8cccbea40f251defd9279f69976746b41d3c86691190b2cca5f384c176d7c0cfc5dea0abc5242d99d9d182f7536d46ce90f3ee747eb31eedf7f00a2d33072d5ef8a5ed7fcdefe517ccc50910cef03e3b93042d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 33.984160201s ago: executing program 2 (id=6861): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r3 = syz_open_procfs$namespace(r2, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r5], 0x3c}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={r4, 0x6, 0x7, 0x4}) write$tun(r10, &(0x7f0000000440)={@void, @void, @arp=@generic={0xf, 0xdada, 0x6, 0x5, 0x4, @random="3e867d1c27e8", "601db38665", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}}, 0x19) sendmsg$NFQNL_MSG_CONFIG(r9, 0x0, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r13 = accept4(r12, 0x0, 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x80, 0x3, 0xfe, 0x4, 0xc8, 0x3, 0x1100}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) recvmsg$can_raw(r13, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/107, 0x6b}], 0x2}, 0x40000001) sendmsg$NL80211_CMD_SET_COALESCE(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x340}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa000000000000008864450000280000000000069078ac1414bbe000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0b00000000000000d587408efa88bcc499046e1a81576e346d1e9d34b036ce228eb784b66efed2d7ddb08322628fda4cc022686c64a1db0dea9a2271f82945a406ab6401b0025fc0d88af406b1d8c0e183adff8b2a7aad7411bf8cccbea40f251defd9279f69976746b41d3c86691190b2cca5f384c176d7c0cfc5dea0abc5242d99d9d182f7536d46ce90f3ee747eb31eedf7f00a2d33072d5ef8a5ed7fcdefe517ccc50910cef03e3b93042d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 22.493375177s ago: executing program 2 (id=6861): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r3 = syz_open_procfs$namespace(r2, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r5], 0x3c}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={r4, 0x6, 0x7, 0x4}) write$tun(r10, &(0x7f0000000440)={@void, @void, @arp=@generic={0xf, 0xdada, 0x6, 0x5, 0x4, @random="3e867d1c27e8", "601db38665", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}}, 0x19) sendmsg$NFQNL_MSG_CONFIG(r9, 0x0, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r13 = accept4(r12, 0x0, 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x80, 0x3, 0xfe, 0x4, 0xc8, 0x3, 0x1100}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) recvmsg$can_raw(r13, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/107, 0x6b}], 0x2}, 0x40000001) sendmsg$NL80211_CMD_SET_COALESCE(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x340}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa000000000000008864450000280000000000069078ac1414bbe000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0b00000000000000d587408efa88bcc499046e1a81576e346d1e9d34b036ce228eb784b66efed2d7ddb08322628fda4cc022686c64a1db0dea9a2271f82945a406ab6401b0025fc0d88af406b1d8c0e183adff8b2a7aad7411bf8cccbea40f251defd9279f69976746b41d3c86691190b2cca5f384c176d7c0cfc5dea0abc5242d99d9d182f7536d46ce90f3ee747eb31eedf7f00a2d33072d5ef8a5ed7fcdefe517ccc50910cef03e3b93042d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12.098578883s ago: executing program 2 (id=6861): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r3 = syz_open_procfs$namespace(r2, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r5], 0x3c}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={r4, 0x6, 0x7, 0x4}) write$tun(r10, &(0x7f0000000440)={@void, @void, @arp=@generic={0xf, 0xdada, 0x6, 0x5, 0x4, @random="3e867d1c27e8", "601db38665", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}}, 0x19) sendmsg$NFQNL_MSG_CONFIG(r9, 0x0, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r13 = accept4(r12, 0x0, 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x80, 0x3, 0xfe, 0x4, 0xc8, 0x3, 0x1100}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) recvmsg$can_raw(r13, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/107, 0x6b}], 0x2}, 0x40000001) sendmsg$NL80211_CMD_SET_COALESCE(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x340}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa000000000000008864450000280000000000069078ac1414bbe000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0b00000000000000d587408efa88bcc499046e1a81576e346d1e9d34b036ce228eb784b66efed2d7ddb08322628fda4cc022686c64a1db0dea9a2271f82945a406ab6401b0025fc0d88af406b1d8c0e183adff8b2a7aad7411bf8cccbea40f251defd9279f69976746b41d3c86691190b2cca5f384c176d7c0cfc5dea0abc5242d99d9d182f7536d46ce90f3ee747eb31eedf7f00a2d33072d5ef8a5ed7fcdefe517ccc50910cef03e3b93042d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.802525014s ago: executing program 3 (id=8521): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x80) (fail_nth: 2) 3.399039267s ago: executing program 3 (id=8523): r0 = socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x100010, r1, 0x180000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000b03000000000000000000000902"], 0x0, 0x56, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$tun(r6, &(0x7f0000000540)=ANY=[], 0x8b) read$alg(r5, &(0x7f00000003c0)=""/85, 0x55) syz_genetlink_get_family_id$nl80211(0x0, r6) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x10001) write(r3, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000112001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4048010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45d2, 0x4) 2.864285033s ago: executing program 3 (id=8532): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}, 0x1, 0xffffffffffff0000}, 0x0) 2.664060068s ago: executing program 3 (id=8534): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000800)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000000)=r7, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4, 0x1}]}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x1}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0xef, 0x0, 0x240008c4}, 0x4054) 2.525523471s ago: executing program 4 (id=8535): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3}}}, 0x24}, 0x1, 0x4000000000000000}, 0x0) 2.151861093s ago: executing program 1 (id=8537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000f50800034000000003"], 0x64}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x80, 0x20, 0xfff, 0xffffcc0a, {{0x2a, 0x4, 0x1, 0x6, 0xa8, 0x68, 0x0, 0x9, 0x96a2086f0611b3cf, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x42}, {[@lsrr={0x83, 0x13, 0xe5, [@multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x23, 0x1a, [@remote, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @multicast1, @remote]}, @end, @lsrr={0x83, 0x1b, 0x5b, [@dev={0xac, 0x14, 0x14, 0x17}, @multicast2, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xf8, 0x0, 0x1, [0xf, 0xffffffff, 0x81, 0x8, 0x5, 0xf87, 0xc]}, @lsrr={0x83, 0x7, 0x35, [@dev={0xac, 0x14, 0x14, 0x42}]}, @noop, @timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0xe, [{@broadcast, 0x3ff}, {@remote, 0x1}]}]}}}}}) bind$can_raw(r1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.107324639s ago: executing program 4 (id=8538): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) unshare(0x6020400) socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=[@cred={{0x20, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x20044084}}], 0x1, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=[@cred={{0x20, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x20044084}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1402, 0x300, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004855}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000010000faffffff9d3b39fd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.903217869s ago: executing program 4 (id=8539): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x6, 0x8, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x2000, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9400000000010104000000000000603494453200000a0000003c0001802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000002019bb4842151dd0003000000001000"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x80, 0x7800, 0x9, 0x5, {{0x24, 0x4, 0x1, 0x6, 0x90, 0x67, 0x0, 0x3, 0x2f, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x23, 0x1, [{0x2, 0x4, '+='}, {0x2, 0x11, "407cd2822ccead52135b576bd1d1ee"}, {0x1, 0x8, "0300bb0edbbc"}]}, @lsrr={0x83, 0x2b, 0x60, [@local, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, @empty, @multicast1, @rand_addr=0x64010102, @multicast1, @rand_addr=0x64010102, @multicast2]}, @rr={0x7, 0x27, 0xab, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @multicast2, @remote, @rand_addr=0x64010102, @local, @loopback, @multicast2]}, @rr={0x7, 0x7, 0xd8, [@multicast1]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gre0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}}, 0x0) 1.858867661s ago: executing program 1 (id=8540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049", 0xe, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x1a, 0x5, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000054) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$pppoe(0x18, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000088c0)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @empty}, 0x0, 0x4, 0x2}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)="c214b8700a01f8361295fa250eabd195ad2a50255422b12cb3aa7121f4afdf7dd9a8bc10b47484224e923f264630bc4b2cb277849ee1c3f9e1df442b0a49f27b52582094a0f4a41129a31e2dfa157e332f817fc2588f1fa433836d8e7388fdcca65d546294f8a762b9a61ad6ac9a0c24ceff07201b6465050c5eb6aa", 0x7c}], 0x1, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}], 0x18}}, {{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x3, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x49227b74, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000640)="7f2aeebd8b87bcc26ca43e08e3762720e7468681d5e68fd954c48c2cd664a458650f55f4a4d86723b1a269b8320b4e47f0e6509b1a798326323f72bf36d8e90ee54b097ad88b18b29c92d82a9470fb2a7a69e4333a00a2cb4b519883152f30ef7795b88ffae65fba8056a3ea0f00c29d58dc77123bae542b9e3c94c38bd5e4385f2a5bd67858c746b1b5b9de4ad30a7ad2d4c263ac90a3a2fc4603b6514c417180f82ee9e133b4c099fc", 0xaa}, {&(0x7f0000000700)="80a5601fa3456b9db8cd8f8a4bf5d85e167fa5011446da3a1d872afeac70dc9960fe42e01bdb66c90d801faaeaf8b747e0e7b507466ec68ab0bfbb875cc7965092efb99cf95a733183a4b657cf5b4b6d64c2618c723b4a8b62b98ee8703db3e17bdc408d4cc0935d7fc74ac15c1ad0c2d76e3ed1c2517a64a9f1eb6df3108628c4a591926e98b5699fbbf6e2524870552e05", 0x92}], 0x2, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xf96}}, @timestamping={{0x14, 0x1, 0x25, 0x7d}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x90}}, {{&(0x7f0000000880)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000900)="46de2c8a82961843acbaa61dea31c9d248a9eccb7445f81926a4696f8dfdb6f7c4ad73b760c26e3520607507919e4369351e1f3176d1a7eb91dbee721e153c6b704e45d7b7a2418aeef39099335bb1281fa2bd9980b88ef8585f4f0ae848d0d8afc98f2c3ab56e5b3d04131423df1353b32fbe803d6a699c53a81e287339", 0x7e}, {&(0x7f00000005c0)="bcd468aa230e38ec7a43ead093fb5e55c74b2402ad129b0f449a01", 0x1b}, {&(0x7f0000000980)="c4eb0490e299dfeb9963d3a0a8c9af7375df7763d688e8b64acc7d5d8715590951cbb91315a16d7d3acba916612e15c72c", 0x31}, {&(0x7f00000009c0)="32f684176f2f601e5136425e507e110806fe485fec538acb7137834401807d5fe38675ec32bdbe162ac023d0dcc36215ce9fad65b7347858065cbc9027beb99e62636ba5fe8fb5347fa9", 0x4a}, {&(0x7f0000000a40)="6420d3803b6f7073820ad7a37030c901495c3089e691b2e5cbd9ef70edf159c3c0d8082f31386fffc809ee29207340daa70511d0ac9cdba1b44aca09f1faa262ded880086c8a3261cc1bc2fc9b8bebcc1fb37fe0797b26ee536ceef448d89fac5096125101", 0x65}, {&(0x7f0000000ac0)="409814bbe140c82e0b1094337f29c8104c33557e0757bef90bc5a3e58401eff3b7ebab640f87bfdcaee4bcd8c28194f2e0d2992b58896afbd2a60eb36978a1524426f08f0bb90f60212705807a64cf0aad06f3a1c4e7a3af9dfd782badd2c4a5bcf0f47cd0fe8d1fac98e2cadd6c8630aea4052f1a286fb1f4900387a82b067ea056737fca7c1ab2", 0x88}, {&(0x7f0000000b80)="6afca40d960c7c5b76449ee701c29369d7cf537017605463ba1b8dddb76487a8f4bf407c74bd1f5bcb0e1decba34567e001db3401b0851c1ab1d181252205c6c674df98697bcb4ec279315f187b9d38f9367c5e0875b5b68b53bbbcdeb0ccaa4f44d65a45905358b50f95183af79936ae0a2e7b1474fc9737f938b41d5ca70c78823a8ce5c642e0a32d11dac397c50e84cd6c0b3b704ddcc88d9b97fdd9cc95f239d13f9485306f693addf606ea63d10f68d30dcd2f7f3e6bd0a6cdc1e2a91264b1dd215f4fb624f64c8af792b1df690afa489", 0xd3}], 0x7, &(0x7f0000000d00)=[@timestamping={{0x14, 0x1, 0x25, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6a77}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0xd8}}, {{&(0x7f0000000e00)=@phonet={0x23, 0x9, 0x7, 0x9}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000e80)="e7c39f787ea69afd79dd5cc96c8ea73d1e2ccfff8890924f531f6d37933a047609e5fdd91e7b81cfedf5d5b5352b0b15b2b0ba1015bb48e3233daf405736f3fe0cc46f3c90db11b91f20310be04be064bed82764ddd9fb80c253cd", 0x5b}, {&(0x7f0000000f00)="517254cd7d203e3a6171ec4f02aed39ff8c192a8976653582ba612f853", 0x1d}, {&(0x7f0000000f40)="94e9b1626801cfe7be837c1c5eb61dd1ccaed074c5631502911f98ab8022261d89", 0x21}, {&(0x7f0000001300)="303ee5e82e958bf7e756a9182db43de2282ee82569974753a85f71dd853c9e2a0fd96c", 0x23}, {&(0x7f0000000fc0)="d96ef81bf4b952bf1acea67cc9b325bf94bb0082dade715ce0143cfd3ebce6bc9d79a558498a70f4370bd00411b2baf9ec8eea42e834ef0d72c29bd9a7848cdf33c4a1712fba68a43e387233208c808f6cfa76988a988af4ab376c14c34fdb7404b8abbabe0514fe3b1be3307c8786544c9e45fde9a023e1899f28b02348bc376c8c00e7ca25ff42aa2f05466e2424c4a04bf69e97d784b9b4d50a20e0329546bfa8e8186c7c87248bab3a04b26fd5cee1ea5779833f6f5e1a3aecf1472a654b537aeb409799b127ce21885ac939bdc469842279506728285a111e3152297afaee65fce3a34825148c07c07024fb6e", 0xef}], 0x5, &(0x7f0000001140)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xffffffe4}}], 0x48}}, {{&(0x7f00000011c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001240)="c6bb6248b29bd1551b1e3e6cb97511062cb52768dfe34985af6cd6a26dd911b3d9a35a83113567b4011b8329a31a05ad1c48515699bb1351e59d2266247563097dd0f6fa61b8293150c6b91232a1f475d7806716785b03bdc66f27e1351aae5329c1d4963a580d2e6c65c78b42a64f838433d57719cbd00d6502fe78a38ffc88df15f5180bb272eb0c080a8bed0a0e9ca36a3a486f7bf3a0f1485c1228", 0x9d}, {&(0x7f0000000300)="1ed752f83b37d9b41a5f8f2143eab048f34a63b9456e59f4a48a26509fa2023b7a079b5e0e7d46da095dc21f951f39754e9f", 0x32}, {&(0x7f0000001340)="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", 0x1000}], 0x3, &(0x7f0000002380)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}, {{&(0x7f00000023c0)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000000500)=[{&(0x7f0000002440)="3588921cba2f752b280c963a980ea9da0fcd17268103501f4f39baaf7543517efc731deab6483b7998d7f7d61a72b90dd23a480472f62f4b00081d902ce87afe456d8158b27d1bc3fcee022904d2e64f68a8d8d3", 0x54}, {&(0x7f00000024c0)="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", 0x1000}], 0x2, &(0x7f0000003500)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xac0a}}], 0x30}}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f0000003540)="8a50e2ce3b005c044b6265c923f32773f15a8bd8673dd4349631945bfd6bfc0235efbbcda3d27d5eed062406ee388011a7d04ee2de66853e3505bbc384a4723072b6733e92bb66e3ff0726148e7570103f9065c554354c19008764e101b9549a58e7214acd2b9084aa56f67c70edb425d2e9bc2cacd23a7f988fb70ad1ddb41372d5916f6f7243aae25a7834352a42c6c9b2c19af59e055929de809342eac78f1365e892ba67", 0xa6}, {&(0x7f0000003600)="28c720130160a141d9f7fb731e58eb17c580520c394a4109ba02ff7287c4a70872bfffd6a0f1e1aee0130b61532882be5a164647c851b15ab4241b5a503c4d2c0919d630e30dc9f91a1a65c61e7a85eca930b6de65928bfac895cf4a218b36105f8d32d5812e40bbbead77209dfbe25e86a341d3873a3d5198f7f1b5e9de198d58e81e464ae044d46c27a2b16c62a490d091a797ec96c4710e84bb7594c088d99378e14cb1862dfb5b04728023332feaa6a07b07cd8cb1e5a7f8a49c1c74750a4d1fdb320441042b77a72ed6ee50f571a67879ee6fb8e490f4b4ca4ccedde8fe0f4f5628067fd13c2d96f78da152", 0xee}, {&(0x7f0000004780)="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", 0x1000}, {&(0x7f0000003700)="18d284ba016974714faab05456aecb4104977f517d7e7377d7469e33d7abc701b5118112e8ed072234d73f7e3c70e4def5e9d1fa696361d44d6718150488853cbf97f34ead8590b55149edcd3b31876ba2488bd5e64f17f4ad13c884946b4d83817592b5368104d50be315e1d82522889876a6fde7d09c4962d06c5bedb4f16d6ab3d5d5d203047da38a7e809a3fa81a46d8ad4fccd006fdd3126c6d40850a88890af8f89d5d93fd708bd594eddbf8dfb3596fc2", 0xb4}, {&(0x7f00000037c0)="f30d6750017bb40980b3bd3a6e297408aa0470601a4b959b9ed2697adcffaad3ab9472e9960e78f4f62d10a03677fbee25e415e1c7f570af4bfa43dd7d20918da2bdbb1e4f4e36ae5a9511dcce2193a724114ccf6eaa14185b8b45dd3d70c7101103dbd8eca566b1696b800e6b995b64ee6bc43cb12da91a23673c1f591164758577894b5093", 0x86}, {&(0x7f0000005780)="f86d4e2b3e81c2b9adac72f06ceaedb85919fda75b04b9469da770b9ffd59937bc051618118bd4cad77535cef85cb5ec4812fd5a3ae7e1e30e156ff2e6fdb672674381ca77528d0383e9d2bd823cb4d9d47a721feb63dce865425ab9a7636c7835cc53d79002f8d65c35854dba8a5b6632dbea80c9d3607a9eb0d01f40c7255bd5a7a0182d5b6dc64fd1c27f8a086b91e70faca86c2c5f4addda78f07e4d38989e9f40d8355f0bc3e2df67bed8b72f10b43f4d6b085fd4f429c5841699c5ba4d9943e504d55c17eec58e6b60", 0xcc}, {&(0x7f0000005880)="81a51cb657fb2864a8cec1ecb17bedef333ca0a4cedff806afe6bbc0510c974c09759db4fc6081dc38dc11fcc87b72b86f3910e07e063d872fbaf0998827670fc5790b35d2c0aacf453a223e2826eeefc3c43d2fde7f802741de144d6da1d071e3998c727205c67d42358a4a0aa1fc61338fd3907ef5798ffb29e6c2bebeb703b3457ab0ee0bfd5d168d8ee2ca5adfd0b14a604f060dc65bbc9cbfb11d4bdfd2fd6329daba27917daddfdce9428828b3cf6edce05be0e41ff5163d8339991dc6d02f813c1301c46ae5bb46ffd220c17f677f0df4c18a3322d0fa", 0xda}, {&(0x7f0000005980)="fcf684ad41723c74799aa6d8c2b8d850993a7709e90d8450c9f4d635825daa46c0ddc2027d9f2efaec6f48f83ce593877b94ad550dc3f12928d1d5ff53a8c1182d1a2f8b5e1ab8b8ae9f59ad4b2f57d122949e92d03838a9580e56bc", 0x5c}], 0x8, &(0x7f0000005a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xc000000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0xbd1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000006380)=[{&(0x7f00000060c0)="ebc0d2a23e7bd0b34d4f3959fb697d9f3eb2b055724d53450936089f883840daf8c8db229bb13e550f3e7b6bb12d6fdf1fd8c00f8119d14b2e12b7b9cd6ad202a78991162dc3b330cc3cf954f2b12af830242bc67f564356c6fa51fd999dba6b950725ef55d94036ba621b672c3f954738b4ccc030b0c3ccf50f294c18089621286f47adecdc128687", 0x89}, {&(0x7f0000006180)="d6fcd76fd4ddb8aba09f7f70a68141c3bc850518b4203607a697e41c91c38b475254969836438aa96357a1854362cd1c7af4b58b0d1299d1bcaa3ec0596ccb378c9900db1ec846ccc038d6183c128ab0756a27ad1a958e5c5727f954f69a93f2054ec5d2a6156bdcac67d0c0354cd4f34f77743b37b779dee62c322e67c0f0d589a9878f09636b043c7683a680ab0efe22dda9b67c710fe3c8bafe7a1ea6623fc24c6b14ca72d323529f92f59ea4f906abead3c286e00057f4ee283932541b7e870813cd7f4bc0b6807b77c356340b61a9edb3379d292f7df33d3347577a75d8c35a141f7e078862416436bb739434dbb6bf81", 0xf3}, {&(0x7f0000006280)}, {&(0x7f0000006340)="f0c3d6c5e21ec15ea9f79b43666cd5b98e98", 0x12}], 0x4, &(0x7f00000063c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14}}], 0x30}}, {{&(0x7f0000006400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2}, 0x3, 0x3}}, 0x80, &(0x7f00000087c0)=[{&(0x7f0000006480)="ba45f9efffe609269ea14659b4e88d7a9979157f76962fad2f356e407e230a74f6c3c7d2dc55f7f36afc3f3f7c2534391285f3f0e96db7c66653232bbbfe7955d38e2db62535aa39cf6e496d3cbc6b32c3433447d3adc0327f953d30065febe30480911c028276b19dfb450a1a1b4677db5e0fd7d130d8c4", 0x78}, {&(0x7f0000006500)="45031f958b2525830d54d7a33e09ba9c0a08cc01d5d7237a4522d731f3119db61f6697e81b62a66e47090a7651a2e41578d90d117988230ca97f202decdc72b7f83ce9a1912b3f7ccff975068b6ec122ac27134a364d9d2edc79d6a78e27c667d197d950f56f4b9b62f8562b74b5f8ae71228eb0e473dd", 0x77}, {&(0x7f0000007580)="31743610d7205b91965a", 0xa}, {&(0x7f00000075c0)="3bd8131d2713936cc6bcb941600b84e1849d484c94cc5a67e948ffbbf1084292176da6242474c0bc283419d5ebeca05c1124444405b2bd78f2d6e6c806a1443541b70bdf996798cd870b771ee4b147a6e30dda0378754abb0f39a425b23b132a2d983ae3502842d3cb9bbaf491a21afbb1a542c094fa51fbaa4413be", 0x7c}, {0x0}, {&(0x7f00000076c0)="248edfb02aa3a4e09e44322f97b97d068a28d3deec28df632568cd7d4ecc227963733844d8174d543076a3ecf1fef8ea3b2a2b65d2", 0x35}, {&(0x7f0000007700)="baac4f47e99ff96d7508c6376753f48f4fe7a404d3f00c7b8de806a6145e431e68fb9292aeb2c6abd409a462eb1038b989ce10365ab8e36d1da1816574e9b8273264b8250cf7f6fc96a5ff56ba2c20822f7d76f66491b440b03e731a75ebc2ff9886cb2489e980044a4b81c9e4076676a9fbd059c9ac569588f4a432a3937641bb0b1e24581f6ca4dd092567b1921bee1b152fb2c2d6b67fb59e8648a9eaeb7f", 0xa0}, {&(0x7f00000077c0)="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"/4096, 0x1000}], 0x8}}], 0x9, 0x4044800) socket$inet6_sctp(0xa, 0x5, 0x84) 1.678852879s ago: executing program 3 (id=8542): r0 = socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x100010, r1, 0x180000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000b03000000000000000000000902"], 0x0, 0x56, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$tun(r6, &(0x7f0000000540)=ANY=[], 0x8b) read$alg(r5, &(0x7f00000003c0)=""/85, 0x55) syz_genetlink_get_family_id$nl80211(0x0, r6) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x10001) write(r3, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000112001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4048010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45d2, 0x4) 1.518492353s ago: executing program 4 (id=8544): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) close(r2) sendfile(r1, r2, &(0x7f00000001c0)=0x8, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000340)={0x0, 0x7000000, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="1105000000000000000010000000"], 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xb}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1}]}}}]}, 0x48}}, 0x2040000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYBLOB="2f6f7b79d33fe6d93f434018f4f7facec13e91d2ac8afc0749571de3504a9d64ea5e8a86ad9276aa9a351f42c46fcdf341f914b65d9f70beb90872da05be27e7ba6d90fb56a0970d4769e146c8782feb48f03289014e1bc6de9905798b0f1cccfc7c16164f0d4551", @ANYBLOB="83d9bd5e5ba0e50beb3221178aca69c5d3fd9ce3eebf2db10f7eb7cbad1bfd05626c1d917d9cca39322c5e9022822114ad123886eb650293e24ec8c19eb5b3ff7da927bbb1e89bfba1652c", @ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xa}, 0x94) 1.288935875s ago: executing program 0 (id=8545): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711270000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6b, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x5c, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x5c}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b80080009000000000008"], 0x184}}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000000)=0x31e4, 0x4) unshare(0x480) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)=0x4) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000003c40)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff00000000030000001100000000000000000000020000c9"], 0x0, 0x4a}, 0x28) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.26051935s ago: executing program 4 (id=8546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000009006000000000000000200000a38000000090aa306ea5c26f2c803e429d979f0c45b86000000000000000000000000000908000a40000000000900020073797a310000000008000540000000000800084000000001140000001100010000000000000000000084000a"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, 0x0, 0xc800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) sendfile(r0, 0xffffffffffffffff, &(0x7f00000004c0)=0x3, 0x7fff) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f640094000500", 0x2c}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x0, 0xffff}, {0x19, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001940)={'wpan0\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@deltclass={0x6c, 0x29, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x8}, {0x1, 0x8}, {0x5, 0x8}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xcfc8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xb5}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_sfb={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200408d0}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x15, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)="c4bf00bcf3e9805652ff79dc67c2b9393ad4942510b0bb7fdb34354de952553ba4378c87b921884689abe449362cdc5805b839f596c8f92c734abc4ad83498372b8bf2f5f7323832e4203c9281cfdaf28fc685436d6a2e653ba672c9ec899f27923594658d750d4c7b9388ff156e1ee64a9025ecf5ecdc2d2b1ea8b7214ed75a3b12fb6d8be627b9d84cb478a867382dd37cb6f06266af2baa29bcc70d3c066778cc8487caeff17b8473586540d424e0a46af477550a0452eac9642d121d2069236cea693b41bb1b40a517", 0xcb}, {&(0x7f0000000140)="d7940f", 0x3}, {&(0x7f0000000540)="222ab8b554c47d27516e756f4f2e1bc7f561b714f2f734c4a21189955a4196d785b16385cd37320982bd48e7b905774e196177b9111edea0323fcd7e0eccc23e9d3906b7c594154c6a742e14a899638cdce9d92dcf7161a1a0f16ee9d579381d0c8e05abeb", 0x65}, {&(0x7f00000001c0)="affc10a599aa454ad2b0d5353308580ed7d32e31a0165acd8ecc9ee2", 0x1c}, {&(0x7f00000006c0)="55ee410b93131fbe3101da2ee83b3a77a8e8e4c89e446cf42eef1c4c66cb20bda0621f15dd120ee6b640486cf934767967e41e568f6dd3cdc0f43953a585c9de5a5c69c07736fdcda43d36b4795f8c3687744dd668ba93de77775353a6f06be636bdd8033089d8f0a77972e5231935f84e9fc8aefe15040b424a0bd98e0dc440b94c64166bdfbc079df0faddf89188fb660d9f5d96ddb29d466bbd1d56f37331a3da9d8a0d064116eed7ab1af58d1dbe4ed0adfe8ee484bf82ab99926d75bee3858e74e7f039dbe9", 0xc8}], 0x62, 0x0, 0x0, 0x40000}, 0x87110aac5596abc7) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r13, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r14, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x4e1c, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aa7f0000010002000010000000000000000000ff"], 0x30}}], 0x1, 0x0) 939.467529ms ago: executing program 1 (id=8547): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmmsg$unix(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@rights={{0x10}}, @rights={{0x10}}], 0x20, 0x10}}], 0x1, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@canfd={0xd, {{0x2, 0x0, 0x1, 0x1}, 0x16, 0x1, 0x0, 0x0, "a8fa6d55ff727f91ed7f77bd55de663f8f9bb78f29de41fcd21d0a3db2cc031f725a5fdb4c1038e7fa3da2781e79a7f4933ec8f33c5d1f2e99c0ab9db4c5ca54"}}}}, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000001000010026bd7000ffdbdf25736861332d3235360000000000000028000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000dabd4a27b9c1efd2805455da6d53a3570df42a86a4"], 0xe0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000080) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x10040, 0x0) 911.153926ms ago: executing program 0 (id=8548): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x1000000, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}, 0x1, 0x0, 0x10000e0}, 0x0) 909.147788ms ago: executing program 3 (id=8549): unshare(0x6020400) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004000, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40010122, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4040890) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb0f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000"], 0x0, 0x3}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)=ANY=[@ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="920900f7ffffff00791d91b2f3f748c093bbbcaae51c15ab84e37ce154876d381973f15e44eee3146552b1dd741106bb831a2593e07ae289341889b6d1faa5e4270aa7c4c5337398f6d85d1dda0a0971057558b03d3eeaf636cf2944affc796c66aafb08351ba176c6f435132f6f5a71fc5cd5663cc93d00a2bbd58dff1ccaa460f7d2d7e1f7c220db000000"], 0x24}}, 0x40084) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c39dcc1b7ce2f", @ANYRES16=r5, @ANYBLOB="00022cbd7000fedbdf250b00000008000300", @ANYRES32=r7, @ANYBLOB], 0x7c}}, 0x40810) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000008000)=[{{&(0x7f0000001b40)=@tipc=@name, 0x80, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/74, 0x4a}, {&(0x7f0000000740)=""/66, 0x42}, {&(0x7f0000001e00)=""/158, 0x9e}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001f40)=""/246, 0xf6}, 0x6}, {{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f00000035c0)=""/106, 0x6a}, 0x7fffffff}], 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 787.120647ms ago: executing program 0 (id=8550): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1000000000000000140100000e0000088db0d0ed00000000100100000e0000008145fa25b2f19748aad3b7f397dd7b4b1ad5d6193c5771f1ddf941da1ab310948bb27e3ca47afe40fb135eedc43b39a6c88fbabbb6ef9a92dd2161d763304c4d468868b5774d5c4faee92eee489be87685c64cf46feb30f23756d0b2000000006f1abf0f3d40f6239aaca1d57dc7069c10616cfdcc1063c1eda34a41db044e2bd5028d99b3e2dd10f42cb985cc6297ee31ed14da00e3f5"], 0x20}, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e1c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000007c5833d5ed6d687600e82b00020100000013"], 0x18}, 0x8001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000bf03000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r4, 0x0, 0x8001}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x486, 0x1000, {}, {0x77359400}, {0x2, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "e05ad60a92c50497"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r7, 0x0, 0xf}, 0x18) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r2}, 0x10) 732.57585ms ago: executing program 1 (id=8551): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000540)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x218}}], 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt(r2, 0x800, 0x3, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000001480)) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10) bind$tipc(r4, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6(0xa, 0x800, 0x8) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x10480) socket(0x1a, 0x3, 0x0) 580.043989ms ago: executing program 0 (id=8552): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x20007ffff041, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100001104000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 281.773877ms ago: executing program 1 (id=8553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x24b, 0x8, 0x8000, 0x40000, 0xffffffffffffffff, 0x63, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0xc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp, 0x2000000}, 0x20) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x18) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="18005ceb442aedca3a3c8efeb1fe00"/24], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) 238.979356ms ago: executing program 4 (id=8554): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e25, 0x2}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0x0, 0x0, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x4d8) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="c4060000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf25080000004800048044000780080003004000000008000300070000000800040000080000080002000400000008000300ff7f00000800010010000000080004000700000008000300530e00000504ca091c000780080001000100000008000300bec00000080001000f0000003400078008000300050000000800020006000000080003000d0000000800030009000000080004000600000008000100020000001c00078008000400010000000800030007000000080003005ea7ffff3c0002800400040008000200010000000800010072000000040004001400038008000200050000000800020001000000080002000900000004000400bc0506800800060000000000ad050300271a3b40572754e80f26bc161a51c40f7bc3d089c8b64fc1cd19428bdb8ec161477faa5b91a045087a0467e5d34efcd05007a24c2aed077d2997ce6e519a4907a49819cff65773bea28fe6445c532c18bc888b2a1a6ccd3b3613a6bfd544bc53db5c3f342500e8ff6c3eb409986b2b78a5ad79ee234afe44ab416590b1f139bf7c95fe45d7668c8c598b99eb6058abe3176f8f81106a15cacb90c5668787d13bb9055f1a4603a6777e0da2c6a88b65369bed7578ea3e805eed38724a5daca3694c0461203f8b1cfff40a92cfabda7125ae4efbddf154b153414ac7c17095033bdfc98d384063b99f0a97c56726c5d630779918bdad734c2e4f96e710727ce3add0a4cd8f6786a4d94182814048e7adb55189783ef37be2e4c2814234133b254c42b92d79d3274ce6ef314d8caa98fc3f1a11364206f7da08bb0efc30d195547078d70fabd7efcfdec9afe8d88295880db5dd0d1dd96a7ef53af411f712e769dc1b41e8e65c8818a5f9526f60a3e9f72444a6678c730d80c6805c39e19cfde0ad13c3c50913692a8d419c32ac9e4806f60e835b1f8c707c0670cf2f30f222abd80f0d119f9437729427583f8cb481ea2ab09a798d8fcf6f9874e4763b3c8115453fcce6373b42b272d514786f77876ee254d3c970f6aa17be1f5a3ee88ed99f2bd6790e6def2dd93787048081e9d62c654524be879d0f8b61198d21fa24d57065685cd33f1274f46f3d84c605dbc92342a9b03dcbae3254cda8924fcbae78231291101f21f72d989f9a19fee9ef24f5f2c7aba1c779048852994a07b9a60b89cd15b6792fa7dd9da2238267ed6dc1686cf0214d6813b028f11d64452e528e1bf70a2b48d7f6e4a0ebcab09cab49e5be3bdd4aee654a3fa4ef02f92cb916facae8420d2f98cd31b4b60ff0f71be753256a810c216b73872cf5a637f3a66a40d8ec3a6bd7873849f807308a3cfc6c29355297e552cdf36f93a1c84d59288c21c09e344805a405357ce887982f7580e8c27bd6f1be1ff7b7d7b1b7ac7a04fbd11308ceb52b74530e19a73f30c554b3596a65925d01dfa9a8323951cd0726f968e4cf2cedb024be39fd01da04cca158120de2b0c60876a85f78558f7d10e205d0d4b512548baef05d8150aa99e6011ef0c3ebd402a6225cd7f625d8db7db789f9bc7a59ee7077f8f09da01046be54e7f5a271de88335ddc77816a328a090cc7ae43e9ad3808fb1d653aa12f10e0271315105d2b1d666e24399ecd659ed7e89239170cc887e2eba46550da3108f006c2d209c71913a384094508c361e6dfc6f9b1030d4304a1aa7928643a1380a2729ba534e9e44d524064538ae1ee8c1255a2657ba4b23bce4af23816fb2d3c5bd9ee0c7dfa80d045e65119f841f29a025a021dfb7d02f85ca1b4d38f194de959194d01c7228b29d4b8e4d01489766e61b7765f327973a3fd96161b375a919159bca8e3939469a67b40f42ed272e6504008226e584daf97fe44b95bd14e6a07ec876973b22988dbc48159081ba1abe98275dabe1b9965e26f964f360e7e29595c678eb65f019f18760e878352b72e3140e229585b0bcdb1c846d2d0e7bfeff890e4d5ebf1ec9aea04b72e7232e3337fdb8ea03628a26e4a3e5d9cbdd939e66388c60c882bdeb7694f5cef2cb8e92539c296114b9f1f7e92434a61a6e82b46c9d44c87621df42e916db55ba219829f58aff401b79c3f142d254925043f54928a385c3a60a158efa1a01989962718f45af571d4b9f5bf07b069131806cf0731eab5eaae28887d892363d029e1c83650408fc35a26ee018d63b10c01ddd84414b36bcde0acb1c95fc671f006aabd04a7eabae5dd6982c7dc6f4a80757016590a15c5c1f0e5e92e3e6db7f5fc900c88fbe50ce8597d7c80deb450189072af5bd2703d35cf4524adf667c2193e826f604b317f56cf72858cef503d354784852cbbfad398f5373a0cd1d52870a54a26763cffda95b4aaa003412599f414afc3dc7d1a81fa7e6422fca4156d9b3492e3b114631b11c0c902000000618993705921c96d1345f2100292e629f28a339677f91a890b54b493ff45f96540e968876aa5559e82cfc92d41a26e01c3e2e3fc1a41698b2483959e3b28d02a6cd6bcde048b73e8d29f84cdc300aecc35bc5e94bf31dc2462133b66154650fac53f33e1e7582a3185b5f2b8a7417744776c6c99aac0215fe22ed2b109520fe5a3bb13a301b7970fbee2c1378546f0f76c408a579670b80b86c2e9b6f492bf3e5af4c491f140b8b2b47055373b940b61b16fcdab8500"/1907], 0x6c4}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) 238.713123ms ago: executing program 0 (id=8555): socket$inet6(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) pipe(&(0x7f00000000c0)) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000006c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000500)=""/155, 0x9b}], 0x5, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 75.319899ms ago: executing program 1 (id=8556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0900000000000000000000ffffffffffffffff010000000000000080"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r10, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000)) r12 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r12, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000002c0)) unshare(0x22020600) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) 0s ago: executing program 0 (id=8557): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0xc000000) kernel console output (not intermixed with test programs): 4229][T20598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 894.749438][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 894.808934][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 895.393051][T30565] lo speed is unknown, defaulting to 1000 [ 895.696289][T30584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7931'. [ 895.720502][T30584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7931'. [ 895.740179][T30584] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 895.756660][T30581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.782032][T30583] bond0: entered promiscuous mode [ 895.789032][T30583] bond0: left promiscuous mode [ 896.168574][T30603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7937'. [ 896.301037][T30610] netlink: 'syz.4.7939': attribute type 6 has an invalid length. [ 896.308814][T30610] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7939'. [ 896.359866][T30599] lo speed is unknown, defaulting to 1000 [ 896.406046][T30565] chnl_net:caif_netlink_parms(): no params data found [ 896.430532][T20598] Bluetooth: hci0: command tx timeout [ 897.043166][T30565] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.061365][T30565] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.083562][T30565] bridge_slave_0: entered allmulticast mode [ 897.097040][T30565] bridge_slave_0: entered promiscuous mode [ 897.141384][T23436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.216391][T30565] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.224113][T30565] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.237277][T30565] bridge_slave_1: entered allmulticast mode [ 897.245260][T30565] bridge_slave_1: entered promiscuous mode [ 897.608343][T30565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.649956][T30565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.868091][T30655] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7948'. [ 897.888253][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.911821][T30655] tipc: Started in network mode [ 897.918508][T30655] tipc: Node identity , cluster identity 4711 [ 897.925008][T30655] tipc: Failed to obtain node identity [ 897.930960][T30655] tipc: Enabling of bearer rejected, failed to enable media [ 898.211868][T30660] netlink: 'syz.4.7952': attribute type 7 has an invalid length. [ 898.222346][T30565] team0: Port device team_slave_0 added [ 898.237395][T30565] team0: Port device team_slave_1 added [ 898.325809][T30667] FAULT_INJECTION: forcing a failure. [ 898.325809][T30667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.341674][T30565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.348681][T30565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.353175][T30667] CPU: 1 UID: 0 PID: 30667 Comm: syz.4.7954 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 898.353204][T30667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 898.353216][T30667] Call Trace: [ 898.353226][T30667] [ 898.353236][T30667] dump_stack_lvl+0x189/0x250 [ 898.353269][T30667] ? __pfx____ratelimit+0x10/0x10 [ 898.353290][T30667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 898.353316][T30667] ? __pfx__printk+0x10/0x10 [ 898.353347][T30667] should_fail_ex+0x414/0x560 [ 898.353375][T30667] _copy_to_user+0x31/0xb0 [ 898.353396][T30667] simple_read_from_buffer+0xe1/0x170 [ 898.353427][T30667] proc_fail_nth_read+0x1df/0x250 [ 898.353451][T30667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 898.353476][T30667] ? rw_verify_area+0x258/0x650 [ 898.353500][T30667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 898.353521][T30667] vfs_read+0x1fd/0x980 [ 898.353551][T30667] ? __pfx___mutex_lock+0x10/0x10 [ 898.353572][T30667] ? __pfx_vfs_read+0x10/0x10 [ 898.353599][T30667] ? __fget_files+0x2a/0x420 [ 898.353622][T30667] ? __fget_files+0x3a0/0x420 [ 898.353639][T30667] ? __fget_files+0x2a/0x420 [ 898.353668][T30667] ksys_read+0x145/0x250 [ 898.353695][T30667] ? __pfx_ksys_read+0x10/0x10 [ 898.353717][T30667] ? rcu_is_watching+0x15/0xb0 [ 898.353747][T30667] ? do_syscall_64+0xbe/0x3b0 [ 898.353772][T30667] do_syscall_64+0xfa/0x3b0 [ 898.353790][T30667] ? lockdep_hardirqs_on+0x9c/0x150 [ 898.353809][T30667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.353827][T30667] ? clear_bhb_loop+0x60/0xb0 [ 898.353849][T30667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.353866][T30667] RIP: 0033:0x7f321d38d33c [ 898.353884][T30667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 898.353900][T30667] RSP: 002b:00007f321e220030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 898.353919][T30667] RAX: ffffffffffffffda RBX: 00007f321d5b5fa0 RCX: 00007f321d38d33c [ 898.353933][T30667] RDX: 000000000000000f RSI: 00007f321e2200a0 RDI: 0000000000000004 [ 898.353944][T30667] RBP: 00007f321e220090 R08: 0000000000000000 R09: 0000000000000000 [ 898.353955][T30667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.353966][T30667] R13: 0000000000000000 R14: 00007f321d5b5fa0 R15: 00007fffe35dbba8 [ 898.353996][T30667] [ 898.510418][T20598] Bluetooth: hci0: command tx timeout [ 898.631531][T30565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.696450][T30565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.709285][T30565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.746858][T30565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.881137][T30565] hsr_slave_0: entered promiscuous mode [ 898.888523][T30565] hsr_slave_1: entered promiscuous mode [ 898.903007][T30565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 898.927146][T30565] Cannot create hsr debugfs directory [ 898.936169][T30686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7961'. [ 899.218722][T30695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.341277][T23436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.381412][T30701] bond5: (slave gretap1): Releasing active interface [ 899.447567][T30708] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 899.768106][T30724] tipc: Started in network mode [ 899.783515][T30724] tipc: Node identity , cluster identity 4711 [ 899.799880][T30724] tipc: Failed to set node id, please configure manually [ 899.808184][T30724] tipc: Enabling of bearer rejected, failed to enable media [ 899.894671][T30728] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 900.073750][T30565] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 900.107244][T30565] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 900.138647][T30565] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 900.155124][T30565] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 900.261102][T30745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7979'. [ 900.344188][T30752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7982'. [ 900.353754][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.374205][T30752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7982'. [ 900.572770][T30565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.613430][T30766] lo speed is unknown, defaulting to 1000 [ 900.638401][T30565] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.670312][T20598] Bluetooth: hci0: command tx timeout [ 900.686788][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.694024][ T6853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.775055][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.782288][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.002009][T30782] FAULT_INJECTION: forcing a failure. [ 901.002009][T30782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.028688][T30782] CPU: 1 UID: 0 PID: 30782 Comm: syz.4.7989 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 901.028716][T30782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.028728][T30782] Call Trace: [ 901.028736][T30782] [ 901.028744][T30782] dump_stack_lvl+0x189/0x250 [ 901.028773][T30782] ? __pfx____ratelimit+0x10/0x10 [ 901.028792][T30782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 901.028817][T30782] ? __pfx__printk+0x10/0x10 [ 901.028859][T30782] should_fail_ex+0x414/0x560 [ 901.028886][T30782] _copy_to_user+0x31/0xb0 [ 901.028906][T30782] simple_read_from_buffer+0xe1/0x170 [ 901.028929][T30782] proc_fail_nth_read+0x1df/0x250 [ 901.028951][T30782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 901.028975][T30782] ? rw_verify_area+0x258/0x650 [ 901.028997][T30782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 901.029019][T30782] vfs_read+0x1fd/0x980 [ 901.029051][T30782] ? __pfx___mutex_lock+0x10/0x10 [ 901.029073][T30782] ? __pfx_vfs_read+0x10/0x10 [ 901.029099][T30782] ? __fget_files+0x2a/0x420 [ 901.029125][T30782] ? __fget_files+0x3a0/0x420 [ 901.029142][T30782] ? __fget_files+0x2a/0x420 [ 901.029171][T30782] ksys_read+0x145/0x250 [ 901.029198][T30782] ? __pfx_ksys_read+0x10/0x10 [ 901.029221][T30782] ? rcu_is_watching+0x15/0xb0 [ 901.029250][T30782] ? do_syscall_64+0xbe/0x3b0 [ 901.029275][T30782] do_syscall_64+0xfa/0x3b0 [ 901.029294][T30782] ? lockdep_hardirqs_on+0x9c/0x150 [ 901.029313][T30782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.029331][T30782] ? clear_bhb_loop+0x60/0xb0 [ 901.029354][T30782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.029371][T30782] RIP: 0033:0x7f321d38d33c [ 901.029393][T30782] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 901.029409][T30782] RSP: 002b:00007f321e220030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 901.029430][T30782] RAX: ffffffffffffffda RBX: 00007f321d5b5fa0 RCX: 00007f321d38d33c [ 901.029444][T30782] RDX: 000000000000000f RSI: 00007f321e2200a0 RDI: 0000000000000013 [ 901.029456][T30782] RBP: 00007f321e220090 R08: 0000000000000000 R09: 0000000000000000 [ 901.029468][T30782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.029480][T30782] R13: 0000000000000000 R14: 00007f321d5b5fa0 R15: 00007fffe35dbba8 [ 901.029511][T30782] [ 901.451126][T30565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.537569][T30565] veth0_vlan: entered promiscuous mode [ 901.625172][T30565] veth1_vlan: entered promiscuous mode [ 901.721504][T30794] lo speed is unknown, defaulting to 1000 [ 901.792155][T30565] veth0_macvtap: entered promiscuous mode [ 901.819506][T30565] veth1_macvtap: entered promiscuous mode [ 901.991173][ T923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.108102][T30565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.155524][T30565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.223981][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.248140][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.296391][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.334002][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.459731][T30819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7998'. [ 902.532378][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.586517][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.641462][T30823] bond3: left promiscuous mode [ 902.686109][T30823] team0: Port device bond3 removed [ 902.702896][T30823] batman_adv: batadv0: Interface deactivated: macvlan3 [ 902.710646][T30823] batman_adv: batadv0: Removing interface: macvlan3 [ 902.750710][T20598] Bluetooth: hci0: command tx timeout [ 902.855378][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.855743][T30831] netlink: 'syz.4.8002': attribute type 21 has an invalid length. [ 902.877866][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.912329][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.130613][T30835] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 903.416543][T30839] vlan3: entered promiscuous mode [ 903.497185][T30843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8007'. [ 903.520850][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8007'. [ 903.601169][T30845] netlink: 'syz.3.8008': attribute type 10 has an invalid length. [ 903.648565][T30845] bridge_slave_1: entered promiscuous mode [ 903.687557][T30845] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 903.699055][T30850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8010'. [ 903.723028][T30850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8010'. [ 903.988993][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.283927][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.361066][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.428867][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.529078][ T60] bridge_slave_1: left allmulticast mode [ 904.535101][ T60] bridge_slave_1: left promiscuous mode [ 904.541459][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.551279][ T60] bridge_slave_0: left allmulticast mode [ 904.556946][ T60] bridge_slave_0: left promiscuous mode [ 904.562883][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.951032][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.962654][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.974223][ T60] bond0 (unregistering): Released all slaves [ 905.355879][ T60] hsr_slave_0: left promiscuous mode [ 905.362735][ T60] hsr_slave_1: left promiscuous mode [ 905.368945][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.376732][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 905.385156][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 905.392741][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 905.521043][ T60] veth1_macvtap: left promiscuous mode [ 905.526630][ T60] veth0_macvtap: left promiscuous mode [ 905.536490][ T60] veth1_vlan: left promiscuous mode [ 905.560569][ T60] veth0_vlan: left promiscuous mode [ 905.696511][T30877] FAULT_INJECTION: forcing a failure. [ 905.696511][T30877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 905.730615][T30877] CPU: 0 UID: 0 PID: 30877 Comm: syz.4.8017 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 905.730644][T30877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 905.730657][T30877] Call Trace: [ 905.730665][T30877] [ 905.730674][T30877] dump_stack_lvl+0x189/0x250 [ 905.730705][T30877] ? __pfx____ratelimit+0x10/0x10 [ 905.730726][T30877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.730752][T30877] ? __pfx__printk+0x10/0x10 [ 905.730774][T30877] ? fs_reclaim_acquire+0x7d/0x100 [ 905.730804][T30877] should_fail_ex+0x414/0x560 [ 905.730831][T30877] prepare_alloc_pages+0x213/0x610 [ 905.730861][T30877] __alloc_frozen_pages_noprof+0x123/0x370 [ 905.730887][T30877] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 905.730918][T30877] ? policy_nodemask+0x27c/0x720 [ 905.730935][T30877] ? __pfx__copy_from_iter+0x10/0x10 [ 905.730963][T30877] alloc_pages_mpol+0x232/0x4a0 [ 905.730988][T30877] alloc_pages_noprof+0xa9/0x190 [ 905.731009][T30877] af_alg_sendmsg+0x133a/0x22e0 [ 905.731030][T30877] ? __pfx___might_resched+0x10/0x10 [ 905.731080][T30877] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 905.731101][T30877] ? __pfx_aa_sk_perm+0x10/0x10 [ 905.731120][T30877] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 905.731151][T30877] ? aa_sock_msg_perm+0x94/0x160 [ 905.731174][T30877] ? skcipher_sendmsg+0x26/0xf0 [ 905.731195][T30877] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 905.731219][T30877] __sock_sendmsg+0x219/0x270 [ 905.731243][T30877] ____sys_sendmsg+0x52d/0x830 [ 905.731274][T30877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 905.731309][T30877] ? import_iovec+0x74/0xa0 [ 905.731330][T30877] ___sys_sendmsg+0x21f/0x2a0 [ 905.731358][T30877] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.731430][T30877] ? __fget_files+0x2a/0x420 [ 905.731449][T30877] ? __fget_files+0x3a0/0x420 [ 905.731479][T30877] __sys_sendmmsg+0x227/0x430 [ 905.731510][T30877] ? __pfx___sys_sendmmsg+0x10/0x10 [ 905.731531][T30877] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 905.731582][T30877] ? ksys_write+0x22a/0x250 [ 905.731614][T30877] ? __pfx_ksys_write+0x10/0x10 [ 905.731636][T30877] ? rcu_is_watching+0x15/0xb0 [ 905.731669][T30877] __x64_sys_sendmmsg+0xa0/0xc0 [ 905.731696][T30877] do_syscall_64+0xfa/0x3b0 [ 905.731716][T30877] ? lockdep_hardirqs_on+0x9c/0x150 [ 905.731735][T30877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.731753][T30877] ? clear_bhb_loop+0x60/0xb0 [ 905.731776][T30877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.731793][T30877] RIP: 0033:0x7f321d38e929 [ 905.731811][T30877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.731827][T30877] RSP: 002b:00007f321e220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 905.731846][T30877] RAX: ffffffffffffffda RBX: 00007f321d5b5fa0 RCX: 00007f321d38e929 [ 905.731861][T30877] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 905.731873][T30877] RBP: 00007f321e220090 R08: 0000000000000000 R09: 0000000000000000 [ 905.731885][T30877] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 905.731897][T30877] R13: 0000000000000000 R14: 00007f321d5b5fa0 R15: 00007fffe35dbba8 [ 905.731928][T30877] [ 906.288076][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 906.344286][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 906.395225][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 906.412407][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 906.420317][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 906.807784][ T60] team0 (unregistering): Port device team_slave_1 removed [ 906.858049][ T60] team0 (unregistering): Port device team_slave_0 removed [ 907.360105][T30878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8018'. [ 907.380312][T30878] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8018'. [ 907.389633][T30878] tipc: Invalid UDP bearer configuration [ 907.389700][T30878] tipc: Enabling of bearer rejected, failed to enable media [ 907.498652][T30885] lo speed is unknown, defaulting to 1000 [ 907.581958][T30901] FAULT_INJECTION: forcing a failure. [ 907.581958][T30901] name failslab, interval 1, probability 0, space 0, times 0 [ 907.628941][T30901] CPU: 0 UID: 0 PID: 30901 Comm: syz.4.8022 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 907.628971][T30901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 907.628984][T30901] Call Trace: [ 907.628992][T30901] [ 907.629002][T30901] dump_stack_lvl+0x189/0x250 [ 907.629032][T30901] ? __pfx____ratelimit+0x10/0x10 [ 907.629054][T30901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 907.629080][T30901] ? __pfx__printk+0x10/0x10 [ 907.629106][T30901] ? __pfx___might_resched+0x10/0x10 [ 907.629138][T30901] should_fail_ex+0x414/0x560 [ 907.629166][T30901] should_failslab+0xa8/0x100 [ 907.629187][T30901] __kmalloc_cache_noprof+0x70/0x3d0 [ 907.629214][T30901] ? call_usermodehelper_setup+0x8e/0x270 [ 907.629237][T30901] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 907.629260][T30901] call_usermodehelper_setup+0x8e/0x270 [ 907.629281][T30901] ? __pfx_free_modprobe_argv+0x10/0x10 [ 907.629311][T30901] __request_module+0x39f/0x5e0 [ 907.629334][T30901] ? __lock_acquire+0xab9/0xd20 [ 907.629361][T30901] ? __pfx___request_module+0x10/0x10 [ 907.629389][T30901] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 907.629424][T30901] ? __xfrm_init_state+0x7ef/0x13f0 [ 907.629450][T30901] __xfrm_init_state+0x852/0x13f0 [ 907.629471][T30901] ? __xfrm_init_state+0x7ef/0x13f0 [ 907.629498][T30901] xfrm_init_state+0x18/0xa0 [ 907.629517][T30901] pfkey_add+0x1d38/0x2e00 [ 907.629559][T30901] ? __pfx_pfkey_add+0x10/0x10 [ 907.629576][T30901] ? kmem_cache_free+0x18f/0x400 [ 907.629608][T30901] pfkey_sendmsg+0xbfe/0x1090 [ 907.629645][T30901] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 907.629692][T30901] ? aa_sock_msg_perm+0x94/0x160 [ 907.629716][T30901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 907.629739][T30901] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 907.629760][T30901] __sock_sendmsg+0x219/0x270 [ 907.629784][T30901] ____sys_sendmsg+0x505/0x830 [ 907.629815][T30901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.629849][T30901] ? import_iovec+0x74/0xa0 [ 907.629871][T30901] ___sys_sendmsg+0x21f/0x2a0 [ 907.629898][T30901] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.629961][T30901] ? __fget_files+0x2a/0x420 [ 907.629979][T30901] ? __fget_files+0x3a0/0x420 [ 907.630008][T30901] __x64_sys_sendmsg+0x19b/0x260 [ 907.630033][T30901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.630068][T30901] ? __pfx_ksys_write+0x10/0x10 [ 907.630090][T30901] ? rcu_is_watching+0x15/0xb0 [ 907.630121][T30901] ? do_syscall_64+0xbe/0x3b0 [ 907.630146][T30901] do_syscall_64+0xfa/0x3b0 [ 907.630165][T30901] ? lockdep_hardirqs_on+0x9c/0x150 [ 907.630184][T30901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.630214][T30901] ? clear_bhb_loop+0x60/0xb0 [ 907.630237][T30901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.630255][T30901] RIP: 0033:0x7f321d38e929 [ 907.630273][T30901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.630288][T30901] RSP: 002b:00007f321e220038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.630306][T30901] RAX: ffffffffffffffda RBX: 00007f321d5b5fa0 RCX: 00007f321d38e929 [ 907.630318][T30901] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 907.630330][T30901] RBP: 00007f321e220090 R08: 0000000000000000 R09: 0000000000000000 [ 907.630340][T30901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.630351][T30901] R13: 0000000000000000 R14: 00007f321d5b5fa0 R15: 00007fffe35dbba8 [ 907.630379][T30901] [ 907.977030][T30906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8024'. [ 907.989794][T30907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8024'. [ 908.178020][T30914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8026'. [ 908.232690][T30914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8026'. [ 908.256329][T30918] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8027'. [ 908.480826][T30922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8028'. [ 908.510381][T20598] Bluetooth: hci0: command tx timeout [ 908.614506][T30885] chnl_net:caif_netlink_parms(): no params data found [ 908.746478][T30936] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8033'. [ 908.795086][T30933] netlink: 'syz.4.8032': attribute type 4 has an invalid length. [ 908.803364][T30933] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8032'. [ 908.975544][T30885] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.992261][T30885] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.999959][T30885] bridge_slave_0: entered allmulticast mode [ 909.008193][T30885] bridge_slave_0: entered promiscuous mode [ 909.022218][T30885] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.029570][T30885] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.037208][T30885] bridge_slave_1: entered allmulticast mode [ 909.049962][T30885] bridge_slave_1: entered promiscuous mode [ 909.169287][T30885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.222068][T30885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.383988][T30968] netlink: 'syz.1.8039': attribute type 16 has an invalid length. [ 909.392395][T30968] netlink: 'syz.1.8039': attribute type 17 has an invalid length. [ 909.500926][T30968] gretap0: left promiscuous mode [ 909.536319][T30968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.547026][T30968] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.559308][T30968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 909.586092][T30885] team0: Port device team_slave_0 added [ 909.633743][T30885] team0: Port device team_slave_1 added [ 909.731237][T30885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.738371][T30885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.800245][T30885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.847443][T30885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.868117][T30885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.938522][T30885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.992759][T23433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.048187][T30982] vlan3: entered promiscuous mode [ 910.186403][T30885] hsr_slave_0: entered promiscuous mode [ 910.206137][T30885] hsr_slave_1: entered promiscuous mode [ 910.215274][T30885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 910.227189][T30885] Cannot create hsr debugfs directory [ 910.237190][T30989] sctp: [Deprecated]: syz.1.8046 (pid 30989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 910.237190][T30989] Use struct sctp_sack_info instead [ 910.294391][T30994] FAULT_INJECTION: forcing a failure. [ 910.294391][T30994] name failslab, interval 1, probability 0, space 0, times 0 [ 910.318708][T30994] CPU: 1 UID: 0 PID: 30994 Comm: syz.4.8048 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 910.318734][T30994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 910.318746][T30994] Call Trace: [ 910.318755][T30994] [ 910.318763][T30994] dump_stack_lvl+0x189/0x250 [ 910.318793][T30994] ? __pfx____ratelimit+0x10/0x10 [ 910.318814][T30994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 910.318839][T30994] ? __pfx__printk+0x10/0x10 [ 910.318864][T30994] ? __pfx___might_resched+0x10/0x10 [ 910.318889][T30994] ? fs_reclaim_acquire+0x7d/0x100 [ 910.318912][T30994] should_fail_ex+0x414/0x560 [ 910.318938][T30994] should_failslab+0xa8/0x100 [ 910.318959][T30994] __kmalloc_cache_noprof+0x70/0x3d0 [ 910.318977][T30994] ? nf_tables_newtable+0x435/0x1890 [ 910.319007][T30994] nf_tables_newtable+0x435/0x1890 [ 910.319030][T30994] ? nfnl_pernet+0x1/0x240 [ 910.319075][T30994] nfnetlink_rcv+0x1132/0x2520 [ 910.319136][T30994] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 910.319179][T30994] ? __lock_acquire+0xab9/0xd20 [ 910.319245][T30994] ? netlink_deliver_tap+0x2e/0x1b0 [ 910.319265][T30994] ? netlink_deliver_tap+0x2e/0x1b0 [ 910.319291][T30994] netlink_unicast+0x75b/0x8d0 [ 910.319319][T30994] netlink_sendmsg+0x805/0xb30 [ 910.319347][T30994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 910.319370][T30994] ? aa_sock_msg_perm+0x94/0x160 [ 910.319391][T30994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 910.319410][T30994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 910.319429][T30994] __sock_sendmsg+0x219/0x270 [ 910.319450][T30994] ____sys_sendmsg+0x505/0x830 [ 910.319479][T30994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 910.319510][T30994] ? import_iovec+0x74/0xa0 [ 910.319531][T30994] ___sys_sendmsg+0x21f/0x2a0 [ 910.319557][T30994] ? __pfx____sys_sendmsg+0x10/0x10 [ 910.319614][T30994] ? __fget_files+0x2a/0x420 [ 910.319633][T30994] ? __fget_files+0x3a0/0x420 [ 910.319664][T30994] __x64_sys_sendmsg+0x19b/0x260 [ 910.319691][T30994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 910.319724][T30994] ? __pfx_ksys_write+0x10/0x10 [ 910.319745][T30994] ? rcu_is_watching+0x15/0xb0 [ 910.319777][T30994] ? do_syscall_64+0xbe/0x3b0 [ 910.319802][T30994] do_syscall_64+0xfa/0x3b0 [ 910.319820][T30994] ? lockdep_hardirqs_on+0x9c/0x150 [ 910.319840][T30994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.319858][T30994] ? clear_bhb_loop+0x60/0xb0 [ 910.319881][T30994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.319898][T30994] RIP: 0033:0x7f321d38e929 [ 910.319916][T30994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.319933][T30994] RSP: 002b:00007f321e220038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.319953][T30994] RAX: ffffffffffffffda RBX: 00007f321d5b5fa0 RCX: 00007f321d38e929 [ 910.319967][T30994] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 910.319980][T30994] RBP: 00007f321e220090 R08: 0000000000000000 R09: 0000000000000000 [ 910.319994][T30994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.320005][T30994] R13: 0000000000000000 R14: 00007f321d5b5fa0 R15: 00007fffe35dbba8 [ 910.320031][T30994] [ 910.664659][T23433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.700410][T20598] Bluetooth: hci0: command tx timeout [ 910.719860][T30995] netlink: 'syz.0.8047': attribute type 4 has an invalid length. [ 911.012302][T23436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.040753][T31017] bond0: (slave bridge_slave_1): Releasing backup interface [ 911.092778][T31017] bridge_slave_1: left promiscuous mode [ 911.236603][T23436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.309489][T31027] tipc: Started in network mode [ 911.329364][T31027] tipc: Node identity 4, cluster identity 4711 [ 911.357415][T31027] tipc: Node number set to 4 [ 911.743549][T31040] 8021q: adding VLAN 0 to HW filter on device bond5 [ 911.968935][T30885] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 912.016369][T30885] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 912.086888][T30885] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 912.129928][T30885] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 912.196378][T31086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 912.203713][T31086] IPv6: NLM_F_CREATE should be set when creating new route [ 912.284377][T31086] lo: entered allmulticast mode [ 912.293563][T31086] tunl0: entered allmulticast mode [ 912.325787][T31086] gre0: entered allmulticast mode [ 912.364948][T31086] gretap0: entered allmulticast mode [ 912.378262][T31086] erspan0: entered allmulticast mode [ 912.397971][T31086] ip_vti0: entered allmulticast mode [ 912.417787][T31086] ip6_vti0: entered allmulticast mode [ 912.432985][T31086] sit0: entered allmulticast mode [ 912.455926][T31086] ip6tnl0: entered allmulticast mode [ 912.467126][T31086] ip6gre0: entered allmulticast mode [ 912.477491][T31086] syz_tun: entered allmulticast mode [ 912.493981][T31086] ip6gretap0: entered allmulticast mode [ 912.507463][T31086] bridge0: entered allmulticast mode [ 912.524660][T31086] vcan0: entered allmulticast mode [ 912.546117][T31086] team0: entered allmulticast mode [ 912.565529][T31086] dummy0: entered allmulticast mode [ 912.594958][T31086] nlmon0: entered allmulticast mode [ 912.615738][T31086] caif0: entered allmulticast mode [ 912.632079][T31086] batadv0: entered allmulticast mode [ 912.676086][T31086] vxcan0: entered allmulticast mode [ 912.683057][T31104] netlink: 'syz.3.8063': attribute type 4 has an invalid length. [ 912.694780][T31104] __nla_validate_parse: 2 callbacks suppressed [ 912.694798][T31104] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8063'. [ 912.721117][T31086] vxcan1: entered allmulticast mode [ 912.728312][T31086] veth0: entered allmulticast mode [ 912.750793][T31086] veth1: entered allmulticast mode [ 912.753907][T20598] Bluetooth: hci0: command tx timeout [ 912.774981][T31086] wg0: entered allmulticast mode [ 912.787013][T31086] wg1: entered allmulticast mode [ 912.796799][T31086] wg2: entered allmulticast mode [ 912.806018][T31086] veth0_to_bridge: entered allmulticast mode [ 912.817199][T31086] bridge_slave_0: entered allmulticast mode [ 912.834209][T31086] veth1_to_bridge: entered allmulticast mode [ 912.853344][T31086] bridge_slave_1: entered allmulticast mode [ 912.859618][T31086] veth0_to_bond: entered allmulticast mode [ 912.865990][T31086] bond_slave_0: entered allmulticast mode [ 912.872900][T31086] veth1_to_bond: entered allmulticast mode [ 912.882374][T31086] bond_slave_1: entered allmulticast mode [ 912.889582][T31086] veth1_to_team: entered allmulticast mode [ 912.898291][T31086] team_slave_1: entered allmulticast mode [ 912.905866][T31086] veth0_to_batadv: entered allmulticast mode [ 912.915845][T31086] batadv_slave_0: left promiscuous mode [ 912.931555][T31086] veth1_to_batadv: entered allmulticast mode [ 912.945761][T31086] batadv_slave_1: entered allmulticast mode [ 912.971474][T31086] xfrm0: entered allmulticast mode [ 912.981352][T31086] veth0_to_hsr: entered allmulticast mode [ 912.993337][T31086] hsr_slave_0: entered allmulticast mode [ 913.012703][T31086] veth1_to_hsr: entered allmulticast mode [ 913.033083][T31086] hsr_slave_1: entered allmulticast mode [ 913.043348][T31086] hsr0: entered allmulticast mode [ 913.061358][T31086] veth1_virt_wifi: entered allmulticast mode [ 913.076893][T31086] veth0_virt_wifi: entered allmulticast mode [ 913.086181][T31086] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 913.095363][T31086] veth1_vlan: entered allmulticast mode [ 913.105465][T31086] @: entered allmulticast mode [ 913.122130][T31086] vlan0: entered allmulticast mode [ 913.127674][T31086] vlan1: entered allmulticast mode [ 913.133973][T31086] macvlan0: entered allmulticast mode [ 913.146937][T31086] macvlan1: entered allmulticast mode [ 913.156150][T31086] ipvlan0: entered allmulticast mode [ 913.163675][T31086] ipvlan1: entered allmulticast mode [ 913.173001][T31086] veth1_macvtap: entered allmulticast mode [ 913.183053][T31086] veth0_macvtap: entered allmulticast mode [ 913.193011][T31086] macvtap0: entered allmulticast mode [ 913.201451][T31086] macsec0: entered allmulticast mode [ 913.209287][T31086] geneve0: entered allmulticast mode [ 913.217941][T31086] geneve1: entered allmulticast mode [ 913.226974][T31086] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 913.238240][T31086] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 913.249405][T31086] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 913.259361][T31086] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 913.278076][T31086] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 913.292822][T31086] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 913.302222][T31086] : entered allmulticast mode [ 913.307194][T31086] bridge1: entered allmulticast mode [ 913.313261][T31086] batadv1: left promiscuous mode [ 913.318970][T31086] ipvlan2: entered allmulticast mode [ 913.329500][T31086] bridge2: entered allmulticast mode [ 913.337483][T31086] ip6gretap1: entered allmulticast mode [ 913.345666][T31086] bridge3: entered allmulticast mode [ 913.352909][T31086] bond1: entered allmulticast mode [ 913.358661][T31086] macvlan2: entered allmulticast mode [ 913.364675][T31086] macvlan3: entered allmulticast mode [ 913.372046][T31086] bond2: entered allmulticast mode [ 913.377746][T31086] ip6tnl1: entered allmulticast mode [ 913.383418][T31086] bond3: entered allmulticast mode [ 913.389247][T31086] hsr1: left promiscuous mode [ 913.394706][T31086] hsr1: entered allmulticast mode [ 913.401614][T31086] bond4: entered allmulticast mode [ 913.406938][T31086] vxlan0: entered allmulticast mode [ 913.412335][T31086] batadv0.5: entered allmulticast mode [ 913.417893][T31086] vlan2: left promiscuous mode [ 913.423003][T31086] vlan2: entered allmulticast mode [ 913.428213][T31086] ipvlan3: entered allmulticast mode [ 913.433876][T31086] syztnl0: entered allmulticast mode [ 913.439891][T31086] bond0: entered allmulticast mode [ 913.445678][T31086] sit1: entered allmulticast mode [ 913.454219][T31086] bond5: entered allmulticast mode [ 913.489393][T31078] batman_adv: batadv0: Adding interface: ipvlan4 [ 913.499274][T31078] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.528261][T31078] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 913.570172][T31060] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.596109][T31060] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.624274][T31084] lo speed is unknown, defaulting to 1000 [ 913.624291][T31060] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.648199][T31060] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.809368][T31123] gretap1: entered promiscuous mode [ 914.055672][T30885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.124648][T30885] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.164696][T31059] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.171921][T31059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.244237][T31053] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.251540][T31053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.278342][T31142] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8071'. [ 914.301931][T31142] FAULT_INJECTION: forcing a failure. [ 914.301931][T31142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.340887][T31142] CPU: 0 UID: 0 PID: 31142 Comm: syz.4.8071 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 914.340918][T31142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 914.340931][T31142] Call Trace: [ 914.340939][T31142] [ 914.340948][T31142] dump_stack_lvl+0x189/0x250 [ 914.340983][T31142] ? __pfx____ratelimit+0x10/0x10 [ 914.341004][T31142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.341030][T31142] ? __pfx__printk+0x10/0x10 [ 914.341062][T31142] should_fail_ex+0x414/0x560 [ 914.341090][T31142] _copy_to_user+0x31/0xb0 [ 914.341110][T31142] simple_read_from_buffer+0xe1/0x170 [ 914.341135][T31142] proc_fail_nth_read+0x1df/0x250 [ 914.341160][T31142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 914.341183][T31142] ? rw_verify_area+0x258/0x650 [ 914.341208][T31142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 914.341231][T31142] vfs_read+0x1fd/0x980 [ 914.341260][T31142] ? __pfx___mutex_lock+0x10/0x10 [ 914.341283][T31142] ? __pfx_vfs_read+0x10/0x10 [ 914.341309][T31142] ? __fget_files+0x2a/0x420 [ 914.341333][T31142] ? __fget_files+0x3a0/0x420 [ 914.341348][T31142] ? __fget_files+0x2a/0x420 [ 914.341372][T31142] ksys_read+0x145/0x250 [ 914.341399][T31142] ? __pfx_ksys_read+0x10/0x10 [ 914.341420][T31142] ? rcu_is_watching+0x15/0xb0 [ 914.341449][T31142] ? do_syscall_64+0xbe/0x3b0 [ 914.341473][T31142] do_syscall_64+0xfa/0x3b0 [ 914.341490][T31142] ? lockdep_hardirqs_on+0x9c/0x150 [ 914.341507][T31142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.341525][T31142] ? clear_bhb_loop+0x60/0xb0 [ 914.341549][T31142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.341568][T31142] RIP: 0033:0x7f321d38d33c [ 914.341585][T31142] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 914.341601][T31142] RSP: 002b:00007f321e220030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 914.341622][T31142] RAX: ffffffffffffffda RBX: 00007f321d5b5fa0 RCX: 00007f321d38d33c [ 914.341636][T31142] RDX: 000000000000000f RSI: 00007f321e2200a0 RDI: 0000000000000004 [ 914.341648][T31142] RBP: 00007f321e220090 R08: 0000000000000000 R09: 0000000000000000 [ 914.341659][T31142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.341671][T31142] R13: 0000000000000000 R14: 00007f321d5b5fa0 R15: 00007fffe35dbba8 [ 914.341710][T31142] [ 914.632272][T30885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 914.647719][T30885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 914.836066][T20598] Bluetooth: hci0: command tx timeout [ 914.989409][T31160] netlink: 'syz.0.8075': attribute type 4 has an invalid length. [ 914.999052][T31160] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8075'. [ 915.003974][T30885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.207780][T30885] veth0_vlan: entered promiscuous mode [ 915.238036][T30885] veth1_vlan: entered promiscuous mode [ 915.306368][T30885] veth0_macvtap: entered promiscuous mode [ 915.338142][T30885] veth1_macvtap: entered promiscuous mode [ 915.408447][T30885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.458987][T30885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.507981][T31060] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.530850][T31179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8080'. [ 915.538529][T31060] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.602182][T31178] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 915.613346][T31060] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.641952][T31060] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.932352][T31184] lo speed is unknown, defaulting to 1000 [ 915.946609][T31194] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input56 [ 915.984524][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.995651][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.477806][T31060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.486852][T31060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.644064][T31204] batman_adv: batadv0: Removing interface: ipvlan4 [ 916.814608][T31213] netlink: 'syz.3.8087': attribute type 4 has an invalid length. [ 916.822872][T31213] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8087'. [ 916.844074][T31214] xt_cgroup: path and classid specified [ 917.188312][T31222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8091'. [ 917.223626][T31222] Bluetooth: MGMT ver 1.23 [ 917.609316][T31228] bond0: entered promiscuous mode [ 917.640397][T31228] bond0: left promiscuous mode [ 917.878191][T31226] lo speed is unknown, defaulting to 1000 [ 918.089326][T31242] netlink: 'syz.0.8098': attribute type 6 has an invalid length. [ 918.215783][T31243] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8098'. [ 918.349936][T31056] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.492446][T31056] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.594749][T31056] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.716274][T31056] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.929279][T31056] bridge_slave_1: left allmulticast mode [ 918.938609][T31056] bridge_slave_1: left promiscuous mode [ 918.944356][T31056] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.957627][T31056] bridge_slave_0: left allmulticast mode [ 918.963879][T31056] bridge_slave_0: left promiscuous mode [ 918.969591][T31056] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.367840][T31056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.379487][T31056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.394158][T31056] bond0 (unregistering): Released all slaves [ 919.825331][T31056] hsr_slave_0: left promiscuous mode [ 919.831554][T31056] hsr_slave_1: left promiscuous mode [ 919.837418][T31056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.845035][T31056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.853537][T31056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.861226][T31056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.886539][T31056] veth1_macvtap: left promiscuous mode [ 919.893160][T31056] veth0_macvtap: left promiscuous mode [ 919.898734][T31056] veth1_vlan: left promiscuous mode [ 919.904323][T31056] veth0_vlan: left promiscuous mode [ 920.425475][T31260] netlink: 'syz.1.8100': attribute type 4 has an invalid length. [ 920.438442][T31260] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8100'. [ 920.483837][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 920.493976][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 920.503391][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 920.522044][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 920.541048][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 920.767585][T31056] team0 (unregistering): Port device team_slave_1 removed [ 920.825885][T31056] team0 (unregistering): Port device team_slave_0 removed [ 921.340417][T31253] tipc: Started in network mode [ 921.345322][T31253] tipc: Node identity , cluster identity 4711 [ 921.371395][T31253] tipc: Failed to set node id, please configure manually [ 921.378519][T31253] tipc: Enabling of bearer rejected, failed to enable media [ 921.498405][T31261] lo speed is unknown, defaulting to 1000 [ 921.516442][T31266] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input57 [ 921.681977][T31280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8108'. [ 921.703123][T31280] nbd: illegal input index -381222912 [ 921.743488][T31277] vlan3: entered promiscuous mode [ 921.986424][T31293] Cannot find set identified by id 0 to match [ 922.141203][T31284] lo speed is unknown, defaulting to 1000 [ 922.352434][T31056] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.390452][T31056] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.404064][T31056] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.469628][T31056] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.590567][ T5845] Bluetooth: hci0: command tx timeout [ 922.677088][T23435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.818867][T31326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8120'. [ 922.838702][T31261] chnl_net:caif_netlink_parms(): no params data found [ 922.921840][T31329] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8121'. [ 923.032425][T31329] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8121'. [ 923.238623][T31329] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8121'. [ 923.259292][T31261] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.269791][T31261] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.281351][T31261] bridge_slave_0: entered allmulticast mode [ 923.289698][T31261] bridge_slave_0: entered promiscuous mode [ 923.298777][T31261] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.307069][T31261] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.314545][T31261] bridge_slave_1: entered allmulticast mode [ 923.332684][T31261] bridge_slave_1: entered promiscuous mode [ 923.451038][T31261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.470535][T23435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.474379][T31261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.644336][T31261] team0: Port device team_slave_0 added [ 923.654888][T31261] team0: Port device team_slave_1 added [ 923.669381][T31351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8127'. [ 923.709942][T31353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8128'. [ 923.725319][T31261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.732897][T31261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.759772][T31261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.791206][T31356] FAULT_INJECTION: forcing a failure. [ 923.791206][T31356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.820959][T31356] CPU: 0 UID: 0 PID: 31356 Comm: syz.0.8128 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 923.820982][T31356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 923.820989][T31356] Call Trace: [ 923.820994][T31356] [ 923.821000][T31356] dump_stack_lvl+0x189/0x250 [ 923.821021][T31356] ? __pfx____ratelimit+0x10/0x10 [ 923.821033][T31356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 923.821048][T31356] ? __pfx__printk+0x10/0x10 [ 923.821066][T31356] should_fail_ex+0x414/0x560 [ 923.821082][T31356] _copy_to_user+0x31/0xb0 [ 923.821093][T31356] simple_read_from_buffer+0xe1/0x170 [ 923.821107][T31356] proc_fail_nth_read+0x1df/0x250 [ 923.821121][T31356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 923.821134][T31356] ? rw_verify_area+0x258/0x650 [ 923.821148][T31356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 923.821160][T31356] vfs_read+0x1fd/0x980 [ 923.821176][T31356] ? __pfx___mutex_lock+0x10/0x10 [ 923.821189][T31356] ? __pfx_vfs_read+0x10/0x10 [ 923.821204][T31356] ? __fget_files+0x2a/0x420 [ 923.821217][T31356] ? __fget_files+0x3a0/0x420 [ 923.821227][T31356] ? __fget_files+0x2a/0x420 [ 923.821242][T31356] ksys_read+0x145/0x250 [ 923.821257][T31356] ? __pfx_ksys_read+0x10/0x10 [ 923.821269][T31356] ? rcu_is_watching+0x15/0xb0 [ 923.821287][T31356] ? do_syscall_64+0xbe/0x3b0 [ 923.821302][T31356] do_syscall_64+0xfa/0x3b0 [ 923.821312][T31356] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.821323][T31356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.821333][T31356] ? clear_bhb_loop+0x60/0xb0 [ 923.821346][T31356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.821355][T31356] RIP: 0033:0x7febccb8d33c [ 923.821366][T31356] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 923.821375][T31356] RSP: 002b:00007febcd910030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 923.821388][T31356] RAX: ffffffffffffffda RBX: 00007febccdb6080 RCX: 00007febccb8d33c [ 923.821395][T31356] RDX: 000000000000000f RSI: 00007febcd9100a0 RDI: 0000000000000006 [ 923.821402][T31356] RBP: 00007febcd910090 R08: 0000000000000000 R09: fffffffffffffef0 [ 923.821408][T31356] R10: 0000000000000880 R11: 0000000000000246 R12: 0000000000000001 [ 923.821415][T31356] R13: 0000000000000000 R14: 00007febccdb6080 R15: 00007ffe4e341b18 [ 923.821431][T31356] [ 923.862747][T31261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.072356][T31261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.098532][T31261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.358265][T31261] hsr_slave_0: entered promiscuous mode [ 924.375302][T31261] hsr_slave_1: entered promiscuous mode [ 924.401495][T31261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 924.409262][T31261] Cannot create hsr debugfs directory [ 924.557200][T31374] 8021q: adding VLAN 0 to HW filter on device bond6 [ 924.671303][ T5845] Bluetooth: hci0: command tx timeout [ 925.156689][T31410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8148'. [ 925.178926][T31412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8147'. [ 925.358343][T31261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 925.374440][T31261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 925.395581][T31261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 925.417061][T31261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 925.598030][T31428] ipt_ECN: cannot use operation on non-tcp rule [ 925.646848][T31261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.688161][T31261] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.713083][T31053] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.720329][T31053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.748154][T31432] bond0: entered promiscuous mode [ 925.764611][T31432] bond0: left promiscuous mode [ 925.775459][T31434] netlink: 'syz.1.8153': attribute type 7 has an invalid length. [ 925.806275][T31060] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.813563][T31060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.245587][T31454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8160'. [ 926.309317][T31454] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 926.456657][T31465] vlan3: entered promiscuous mode [ 926.506752][T31261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.529094][T31467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8164'. [ 926.568326][T31261] veth0_vlan: entered promiscuous mode [ 926.600244][T31261] veth1_vlan: entered promiscuous mode [ 926.656778][T31261] veth0_macvtap: entered promiscuous mode [ 926.671601][T31261] veth1_macvtap: entered promiscuous mode [ 926.705428][T31261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.726179][T31261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.745236][T31056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.755374][ T5845] Bluetooth: hci0: command tx timeout [ 926.767216][T31056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.785716][T31056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.829865][T31056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.978196][T31480] 8021q: adding VLAN 0 to HW filter on device bond6 [ 927.022307][T31057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.044883][T31057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.108902][T31056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.134078][T31056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.158213][T31484] lo speed is unknown, defaulting to 1000 [ 927.339449][T31488] syzkaller1: entered promiscuous mode [ 927.351383][T31488] syzkaller1: entered allmulticast mode [ 927.369146][T31488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8170'. [ 927.826594][T31502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8173'. [ 928.300924][T31524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8176'. [ 929.275837][T31060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.948790][T31547] netlink: 'syz.4.8182': attribute type 15 has an invalid length. [ 930.967635][T31547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8182'. [ 930.982060][T31546] netlink: 'syz.3.8181': attribute type 10 has an invalid length. [ 931.083400][T31552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.410803][T20598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 931.430650][T20598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 931.449626][T20598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 931.477565][T20598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 931.492419][T20598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 932.734009][T31060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.796008][ C1] Unknown status report in ack skb [ 932.923431][T31060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.962245][T31565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8185'. [ 932.993998][T31562] lo speed is unknown, defaulting to 1000 [ 933.053496][T31060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.118432][T31565] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 933.132451][T31573] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input58 [ 933.310724][T31060] bridge_slave_1: left allmulticast mode [ 933.316573][T31060] bridge_slave_1: left promiscuous mode [ 933.343550][T31060] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.373823][T31060] bridge_slave_0: left allmulticast mode [ 933.390626][T31060] bridge_slave_0: left promiscuous mode [ 933.396430][T31060] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.467311][T31586] netlink: 'syz.0.8192': attribute type 7 has an invalid length. [ 933.630581][ T5845] Bluetooth: hci0: command tx timeout [ 933.875069][T31060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.887408][T31060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.897647][T31060] bond0 (unregistering): Released all slaves [ 934.153607][T31599] 2g,{: renamed from lo (while UP) [ 934.608320][T31619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8200'. [ 934.774802][T31060] hsr_slave_0: left promiscuous mode [ 934.782098][T31060] hsr_slave_1: left promiscuous mode [ 934.788065][T31060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.796168][T31060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.809483][T31060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.817351][T31060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.854283][T31060] veth1_macvtap: left promiscuous mode [ 934.864151][T31060] veth0_macvtap: left promiscuous mode [ 934.869794][T31060] veth1_vlan: left promiscuous mode [ 934.877454][T31060] veth0_vlan: left promiscuous mode [ 935.453566][T31060] team0 (unregistering): Port device team_slave_1 removed [ 935.504661][T31060] team0 (unregistering): Port device team_slave_0 removed [ 935.721674][ T5845] Bluetooth: hci0: command tx timeout [ 936.133775][T31630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8203'. [ 936.144454][T31630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8203'. [ 936.201315][T31562] chnl_net:caif_netlink_parms(): no params data found [ 936.477487][T31646] Cannot find set identified by id 0 to match [ 936.490418][T31562] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.507567][T31562] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.517236][T31562] bridge_slave_0: entered allmulticast mode [ 936.526299][T31562] bridge_slave_0: entered promiscuous mode [ 936.545289][T31562] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.559619][T31562] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.580851][T31562] bridge_slave_1: entered allmulticast mode [ 936.594382][T31562] bridge_slave_1: entered promiscuous mode [ 936.619891][T31636] 2g,{ speed is unknown, defaulting to 1000 [ 936.702830][T31562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.731915][T31562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.922486][T31562] team0: Port device team_slave_0 added [ 936.952419][T31562] team0: Port device team_slave_1 added [ 937.072854][T31562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.079847][T31562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.093520][T31657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8212'. [ 937.143728][T31657] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8212'. [ 937.143990][T31562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.170222][T31562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.177364][T31562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.194262][T31657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8212'. [ 937.230574][T31562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.237999][T31661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8214'. [ 937.525376][T31562] hsr_slave_0: entered promiscuous mode [ 937.538776][T31562] hsr_slave_1: entered promiscuous mode [ 937.545521][T31562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 937.553400][T31562] Cannot create hsr debugfs directory [ 937.559700][T31659] 2g,{ speed is unknown, defaulting to 1000 [ 937.796703][ T5845] Bluetooth: hci0: command tx timeout [ 938.315837][T31665] 2g,{ speed is unknown, defaulting to 1000 [ 938.528693][T31685] batman_adv: batadv0: Removing interface: ipvlan4 [ 938.665134][T31688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8221'. [ 938.734084][T31562] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 938.755641][T31562] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 938.777702][T31562] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 938.808852][T31562] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 938.894412][T31688] 2g,{ speed is unknown, defaulting to 1000 [ 939.167286][T31701] netlink: 'syz.3.8223': attribute type 2 has an invalid length. [ 939.218042][T31703] netlink: 'syz.3.8223': attribute type 2 has an invalid length. [ 939.506656][T31562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.599108][T31562] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.792549][T31058] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.799745][T31058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.853671][T31058] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.860915][T31058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.875719][ T5845] Bluetooth: hci0: command tx timeout [ 940.353250][T31720] netlink: 'syz.0.8227': attribute type 13 has an invalid length. [ 940.892850][T31059] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.957531][T31059] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.974244][T31059] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.998322][T31562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.034141][ T60] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.093638][T31739] vlan3: entered promiscuous mode [ 941.158385][T31742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8231'. [ 941.263043][T31562] veth0_vlan: entered promiscuous mode [ 941.292870][T31562] veth1_vlan: entered promiscuous mode [ 941.343378][T31748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8235'. [ 941.364947][T31749] netlink: 536 bytes leftover after parsing attributes in process `syz.0.8234'. [ 941.401716][T31562] veth0_macvtap: entered promiscuous mode [ 941.429607][T31562] veth1_macvtap: entered promiscuous mode [ 941.495625][T31562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.534859][T31562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.569725][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.594967][T31758] netlink: 'syz.3.8233': attribute type 1 has an invalid length. [ 941.596395][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.635377][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.644522][T31758] netlink: 784 bytes leftover after parsing attributes in process `syz.3.8233'. [ 941.662518][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.873581][T31057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.895137][T31057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.939823][T31057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.957106][T31057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.082222][T31769] vlan3: entered promiscuous mode [ 942.292277][T31771] netlink: 'syz.3.8241': attribute type 1 has an invalid length. [ 942.306673][T31771] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.8241'. [ 942.480536][T31777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8244'. [ 942.496741][T31777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8244'. [ 942.766875][T31789] netlink: 'syz.0.8249': attribute type 7 has an invalid length. [ 942.816934][T31059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.065654][T31059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.240962][T31059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.378066][T31059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.771022][T31059] bridge_slave_1: left allmulticast mode [ 943.776698][T31059] bridge_slave_1: left promiscuous mode [ 943.782575][T31059] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.793493][T31059] bridge_slave_0: left allmulticast mode [ 943.799250][T31059] bridge_slave_0: left promiscuous mode [ 943.805180][T31059] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.168215][T31059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.179340][T31059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.189848][T31059] bond0 (unregistering): Released all slaves [ 944.489802][T31059] hsr_slave_0: left promiscuous mode [ 944.520195][T31059] hsr_slave_1: left promiscuous mode [ 944.528209][T31059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.535817][T31059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.545523][T31059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.553133][T31059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.578110][T31059] veth1_macvtap: left promiscuous mode [ 944.583993][T31059] veth0_macvtap: left promiscuous mode [ 944.589577][T31059] veth1_vlan: left promiscuous mode [ 944.595060][T31059] veth0_vlan: left promiscuous mode [ 945.336997][T31825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8255'. [ 945.418072][T20598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 945.430145][T20598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 945.464056][T20598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 945.475143][T20598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 945.483216][T20598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 945.556835][T31829] FAULT_INJECTION: forcing a failure. [ 945.556835][T31829] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 945.571631][T31059] team0 (unregistering): Port device team_slave_1 removed [ 945.580678][T31829] CPU: 1 UID: 0 PID: 31829 Comm: syz.0.8256 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 945.580706][T31829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 945.580718][T31829] Call Trace: [ 945.580727][T31829] [ 945.580735][T31829] dump_stack_lvl+0x189/0x250 [ 945.580766][T31829] ? __pfx____ratelimit+0x10/0x10 [ 945.580788][T31829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 945.580813][T31829] ? __pfx__printk+0x10/0x10 [ 945.580835][T31829] ? fs_reclaim_acquire+0x7d/0x100 [ 945.580865][T31829] should_fail_ex+0x414/0x560 [ 945.580893][T31829] prepare_alloc_pages+0x213/0x610 [ 945.580923][T31829] __alloc_frozen_pages_noprof+0x123/0x370 [ 945.580951][T31829] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 945.580980][T31829] ? policy_nodemask+0x27c/0x720 [ 945.580998][T31829] ? __pfx__copy_from_iter+0x10/0x10 [ 945.581026][T31829] alloc_pages_mpol+0x232/0x4a0 [ 945.581052][T31829] alloc_pages_noprof+0xa9/0x190 [ 945.581073][T31829] af_alg_sendmsg+0x133a/0x22e0 [ 945.581094][T31829] ? __pfx___might_resched+0x10/0x10 [ 945.581146][T31829] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 945.581165][T31829] ? __pfx_aa_sk_perm+0x10/0x10 [ 945.581183][T31829] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 945.581215][T31829] ? aa_sock_msg_perm+0x94/0x160 [ 945.581239][T31829] ? skcipher_sendmsg+0x26/0xf0 [ 945.581259][T31829] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 945.581282][T31829] __sock_sendmsg+0x219/0x270 [ 945.581306][T31829] ____sys_sendmsg+0x52d/0x830 [ 945.581335][T31829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.581370][T31829] ? import_iovec+0x74/0xa0 [ 945.581391][T31829] ___sys_sendmsg+0x21f/0x2a0 [ 945.581425][T31829] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.581489][T31829] ? __fget_files+0x2a/0x420 [ 945.581507][T31829] ? __fget_files+0x3a0/0x420 [ 945.581537][T31829] __sys_sendmmsg+0x227/0x430 [ 945.581568][T31829] ? __pfx___sys_sendmmsg+0x10/0x10 [ 945.581590][T31829] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 945.581641][T31829] ? ksys_write+0x22a/0x250 [ 945.581668][T31829] ? __pfx_ksys_write+0x10/0x10 [ 945.581691][T31829] ? rcu_is_watching+0x15/0xb0 [ 945.581724][T31829] __x64_sys_sendmmsg+0xa0/0xc0 [ 945.581751][T31829] do_syscall_64+0xfa/0x3b0 [ 945.581771][T31829] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.581791][T31829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.581809][T31829] ? clear_bhb_loop+0x60/0xb0 [ 945.581831][T31829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.581849][T31829] RIP: 0033:0x7febccb8e929 [ 945.581866][T31829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.581881][T31829] RSP: 002b:00007febcd931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 945.581901][T31829] RAX: ffffffffffffffda RBX: 00007febccdb5fa0 RCX: 00007febccb8e929 [ 945.581915][T31829] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 945.581927][T31829] RBP: 00007febcd931090 R08: 0000000000000000 R09: 0000000000000000 [ 945.581939][T31829] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 945.581951][T31829] R13: 0000000000000000 R14: 00007febccdb5fa0 R15: 00007ffe4e341b18 [ 945.581982][T31829] [ 945.947724][T31059] team0 (unregistering): Port device team_slave_0 removed [ 946.494769][T31819] tipc: Started in network mode [ 946.499688][T31819] tipc: Node identity ac1414aa, cluster identity 4711 [ 946.506640][T31819] tipc: Enabling of bearer rejected, failed to enable media [ 946.564820][T31826] 2g,{ speed is unknown, defaulting to 1000 [ 946.732373][T31839] Bluetooth: MGMT ver 1.23 [ 946.772318][T31839] geneve2: entered promiscuous mode [ 946.846453][T31843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 946.871610][T31839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8260'. [ 947.191107][T31826] chnl_net:caif_netlink_parms(): no params data found [ 947.216990][T31856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8263'. [ 947.427880][T31826] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.436452][T31826] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.443991][T31826] bridge_slave_0: entered allmulticast mode [ 947.454741][T31826] bridge_slave_0: entered promiscuous mode [ 947.469732][T31826] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.492519][T31826] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.499833][T31826] bridge_slave_1: entered allmulticast mode [ 947.507790][T31826] bridge_slave_1: entered promiscuous mode [ 947.551428][T20598] Bluetooth: hci0: command tx timeout [ 947.657750][T31826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.688450][T31876] Cannot find del_set index 2 as target [ 947.704826][T31826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.728122][T31874] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8267'. [ 947.819925][T31879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8269'. [ 947.820952][T31826] team0: Port device team_slave_0 added [ 947.849959][T31826] team0: Port device team_slave_1 added [ 947.948184][T31889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8272'. [ 948.093322][T31826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.102671][T31826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.150474][T31826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.171883][T31889] 2g,{ speed is unknown, defaulting to 1000 [ 948.198650][T31826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.207900][T31826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.284821][T31826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.488119][T31826] hsr_slave_0: entered promiscuous mode [ 948.501829][T31826] hsr_slave_1: entered promiscuous mode [ 948.511968][T31826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 948.525570][T31826] Cannot create hsr debugfs directory [ 948.722470][T31883] batman_adv: batadv0: Adding interface: ipvlan5 [ 948.728850][T31883] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.764104][T31883] batman_adv: batadv0: Interface activated: ipvlan5 [ 948.783631][T31904] pim6reg1: entered promiscuous mode [ 948.789038][T31904] pim6reg1: entered allmulticast mode [ 949.221362][T31916] netlink: 'syz.4.8278': attribute type 4 has an invalid length. [ 949.229141][T31916] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8278'. [ 949.623741][T31935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8283'. [ 949.645233][T20598] Bluetooth: hci0: command tx timeout [ 949.688717][T31826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 949.700599][T31826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 949.713147][T31826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 949.723632][T31826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 949.844122][T31826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.888356][T31826] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.926135][T31060] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.933414][T31060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.959627][T31060] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.965928][T31949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8287'. [ 949.966904][T31060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.994831][T31948] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8286'. [ 950.024447][T31948] nbd: illegal input index 65508 [ 950.037641][T31948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8286'. [ 950.248166][T31953] 2g,{ speed is unknown, defaulting to 1000 [ 950.367971][T31957] netlink: 'syz.0.8289': attribute type 4 has an invalid length. [ 950.507151][T31826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.668057][T31826] veth0_vlan: entered promiscuous mode [ 950.729464][T31826] veth1_vlan: entered promiscuous mode [ 950.853956][T31826] veth0_macvtap: entered promiscuous mode [ 950.871761][T31826] veth1_macvtap: entered promiscuous mode [ 950.909875][T31826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.934283][T31826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.955056][ T3455] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.968154][ T3455] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.993285][ T3455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.003202][ T3455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.487849][T31985] Cannot find set identified by id 0 to match [ 951.583129][T31059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.610694][T31059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.684948][T31059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.710489][T20598] Bluetooth: hci0: command tx timeout [ 951.716561][T31059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.855944][T31995] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 952.051797][T32002] netlink: 'syz.1.8300': attribute type 10 has an invalid length. [ 952.132289][T32002] bridge_slave_1: entered promiscuous mode [ 952.147638][T32002] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 952.227505][T32001] 2g,{ speed is unknown, defaulting to 1000 [ 952.382086][T32014] __nla_validate_parse: 3 callbacks suppressed [ 952.382106][T32014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8306'. [ 952.477466][T32014] netlink: 'syz.1.8306': attribute type 13 has an invalid length. [ 952.486186][T32014] netlink: 'syz.1.8306': attribute type 17 has an invalid length. [ 952.510245][T32014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 952.793190][T32030] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 952.808749][T32030] batman_adv: batadv0: Removing interface: ipvlan5 [ 952.968722][T32038] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8314'. [ 953.370199][T32052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8317'. [ 953.598195][T32055] 2g,{ speed is unknown, defaulting to 1000 [ 953.814836][T31057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.177275][T31057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.229857][T31057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.270225][ T5845] Bluetooth: hci3: command 0x0405 tx timeout [ 954.322177][T31057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.428044][T31057] bridge_slave_1: left allmulticast mode [ 954.434287][T31057] bridge_slave_1: left promiscuous mode [ 954.440271][T31057] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.453105][T31057] bridge_slave_0: left allmulticast mode [ 954.458760][T31057] bridge_slave_0: left promiscuous mode [ 954.464679][T31057] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.853440][T31057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.865392][T31057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.876045][T31057] bond0 (unregistering): Released all slaves [ 955.175360][T31057] hsr_slave_0: left promiscuous mode [ 955.184296][T31057] hsr_slave_1: left promiscuous mode [ 955.190370][T31057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.197785][T31057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.211671][T31057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.219136][T31057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.245072][T31057] veth1_macvtap: left promiscuous mode [ 955.250830][T31057] veth0_macvtap: left promiscuous mode [ 955.256421][T31057] veth1_vlan: left promiscuous mode [ 955.261839][T31057] veth0_vlan: left promiscuous mode [ 955.612997][T32069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8319'. [ 955.676254][T32072] netlink: 'syz.3.8321': attribute type 1 has an invalid length. [ 955.684265][T32072] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.8321'. [ 955.866892][T32078] netlink: 'syz.1.8320': attribute type 1 has an invalid length. [ 955.908475][T32078] netlink: 784 bytes leftover after parsing attributes in process `syz.1.8320'. [ 956.042576][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 956.066711][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 956.076105][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 956.085070][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 956.094056][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 956.417439][T31057] team0 (unregistering): Port device team_slave_1 removed [ 956.467969][T31057] team0 (unregistering): Port device team_slave_0 removed [ 956.997045][T32062] : entered promiscuous mode [ 957.015419][T32069] kthread_run failed with err -4 [ 957.040350][T32074] erspan0: Device is already in use. [ 957.098079][T32080] 2g,{ speed is unknown, defaulting to 1000 [ 957.159001][T32087] tun0: tun_chr_ioctl cmd 1074025675 [ 957.170387][T32087] tun0: persist disabled [ 957.533644][T32106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8327'. [ 957.567428][T27787] IPVS: starting estimator thread 0... [ 957.670197][T32107] IPVS: using max 30 ests per chain, 72000 per kthread [ 957.731209][T32114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8330'. [ 957.942592][T32113] 2g,{ speed is unknown, defaulting to 1000 [ 958.048590][T32126] netlink: 404 bytes leftover after parsing attributes in process `syz.1.8333'. [ 958.182316][T32135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8333'. [ 958.201374][ T5845] Bluetooth: hci0: command tx timeout [ 958.209251][T32131] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input59 [ 958.324570][T32131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8334'. [ 958.675759][T32080] chnl_net:caif_netlink_parms(): no params data found [ 958.994324][T32080] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.008211][T32080] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.015887][T32080] bridge_slave_0: entered allmulticast mode [ 959.057474][T32080] bridge_slave_0: entered promiscuous mode [ 959.079471][T32080] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.094388][T32080] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.102700][T32080] bridge_slave_1: entered allmulticast mode [ 959.131175][T32080] bridge_slave_1: entered promiscuous mode [ 959.221158][T32080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.244731][T32080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.349600][T32080] team0: Port device team_slave_0 added [ 959.359523][T32080] team0: Port device team_slave_1 added [ 959.483670][T32080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.492258][T32174] netlink: 'syz.3.8342': attribute type 1 has an invalid length. [ 959.513813][T32080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.516653][T32174] netlink: 'syz.3.8342': attribute type 10 has an invalid length. [ 959.557344][T32080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.586203][T32174] netlink: 236 bytes leftover after parsing attributes in process `syz.3.8342'. [ 959.593072][T32080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.616661][T32080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.654961][T32080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.956495][T32080] hsr_slave_0: entered promiscuous mode [ 959.967747][T32080] hsr_slave_1: entered promiscuous mode [ 959.975748][T32080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.983747][T32080] Cannot create hsr debugfs directory [ 960.193517][T32204] netlink: 'syz.4.8350': attribute type 1 has an invalid length. [ 960.225309][T32209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8351'. [ 960.270306][ T5845] Bluetooth: hci0: command tx timeout [ 960.349673][T32212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8352'. [ 960.669244][T32216] 2g,{ speed is unknown, defaulting to 1000 [ 960.827394][T32228] Cannot find set identified by id 0 to match [ 960.944898][T32233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8358'. [ 961.237322][T32080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 961.261444][T32080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 961.295691][T32080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 961.345624][T32080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 961.415996][T32241] bond0: (slave bridge_slave_1): Releasing backup interface [ 961.442440][T32241] bridge_slave_1: left promiscuous mode [ 961.995695][T32259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8366'. [ 962.009217][T32259] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 962.126667][ T30] audit: type=1804 audit(1751290566.067:9): pid=32264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8367" name="/newroot/554/cgroup.controllers" dev="tmpfs" ino=2834 res=1 errno=0 [ 962.158943][ T30] audit: type=1800 audit(1751290566.067:10): pid=32264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8367" name="cgroup.controllers" dev="tmpfs" ino=2834 res=0 errno=0 [ 962.318436][T23435] IPVS: starting estimator thread 0... [ 962.350344][ T5845] Bluetooth: hci0: command tx timeout [ 962.410106][T32277] netlink: 'syz.3.8370': attribute type 4 has an invalid length. [ 962.460174][T32278] IPVS: using max 32 ests per chain, 76800 per kthread [ 962.491161][T32080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.535899][T32080] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.557880][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.565127][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.608162][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.615403][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.661206][T32284] __nla_validate_parse: 6 callbacks suppressed [ 962.661225][T32284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8373'. [ 963.013158][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.228712][T32080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.298398][T32313] netlink: 'syz.3.8381': attribute type 7 has an invalid length. [ 963.306666][T32080] veth0_vlan: entered promiscuous mode [ 963.343727][T32080] veth1_vlan: entered promiscuous mode [ 963.417435][T32080] veth0_macvtap: entered promiscuous mode [ 963.428734][T32080] veth1_macvtap: entered promiscuous mode [ 963.479331][T32080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.509131][T32080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.539793][T31057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.581683][T23433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.683824][T31057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.705880][T31057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.745755][T31057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.839550][T32325] tipc: Started in network mode [ 963.845069][T32325] tipc: Node identity , cluster identity 4711 [ 963.851652][T32325] tipc: Failed to set node id, please configure manually [ 963.861269][T32325] tipc: Enabling of bearer rejected, failed to enable media [ 964.001764][T31053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.028142][T31053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.096790][T31060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.132720][T31060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.245236][T32344] macvtap1: entered allmulticast mode [ 964.864721][T31057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.285726][T31057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.728980][T31057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.919322][T31057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.006769][T31057] bridge_slave_1: left allmulticast mode [ 966.012744][T31057] bridge_slave_1: left promiscuous mode [ 966.018440][T31057] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.027576][T31057] bridge_slave_0: left allmulticast mode [ 966.033467][T31057] bridge_slave_0: left promiscuous mode [ 966.039205][T31057] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.454222][T31057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.465820][T31057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.476624][T31057] bond0 (unregistering): Released all slaves [ 966.816887][T31057] hsr_slave_0: left promiscuous mode [ 966.878899][T31057] hsr_slave_1: left promiscuous mode [ 966.899439][T31057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.920316][T32377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8401'. [ 966.930645][T31057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.966543][T31057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.987544][T32381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8402'. [ 967.007441][T31057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.078386][T32385] xt_HMARK: spi-set and port-set can't be combined [ 967.115967][T32385] netlink: 'syz.3.8401': attribute type 10 has an invalid length. [ 967.127541][T31057] veth1_macvtap: left promiscuous mode [ 967.143036][T31057] veth0_macvtap: left promiscuous mode [ 967.147948][T32385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8401'. [ 967.179023][T31057] veth1_vlan: left promiscuous mode [ 967.199218][T31057] veth0_vlan: left promiscuous mode [ 967.520127][T20598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 967.544705][T20598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 967.563499][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 967.570788][T32403] netlink: 'syz.4.8404': attribute type 4 has an invalid length. [ 967.570812][T32403] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8404'. [ 967.598787][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 967.608148][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 967.998501][T31057] team0 (unregistering): Port device team_slave_1 removed [ 968.055727][T31057] team0 (unregistering): Port device team_slave_0 removed [ 968.593597][T32394] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 968.610647][T32394] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 968.619116][T32394] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 968.663452][T32399] 2g,{ speed is unknown, defaulting to 1000 [ 968.872679][T32412] vlan3: entered promiscuous mode [ 969.037836][T32417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8410'. [ 969.174835][T32421] tipc: Enabling of bearer rejected, failed to enable media [ 969.640550][ T5840] Bluetooth: hci0: command tx timeout [ 969.659576][T32399] chnl_net:caif_netlink_parms(): no params data found [ 969.820097][T32459] netlink: 'syz.1.8419': attribute type 4 has an invalid length. [ 969.840365][T32459] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8419'. [ 969.881787][T32399] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.889184][T32399] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.897011][T32399] bridge_slave_0: entered allmulticast mode [ 969.905693][T32399] bridge_slave_0: entered promiscuous mode [ 969.924346][T32399] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.933535][T32399] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.941228][T32399] bridge_slave_1: entered allmulticast mode [ 969.949315][T32399] bridge_slave_1: entered promiscuous mode [ 970.046647][T32399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.123943][T32399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.237234][T32399] team0: Port device team_slave_0 added [ 970.249803][T32399] team0: Port device team_slave_1 added [ 970.314390][T32399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.325096][T32399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.359759][T32399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.379618][T32399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.403417][T32399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.439849][T32399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.548155][T32399] hsr_slave_0: entered promiscuous mode [ 970.557695][T32399] hsr_slave_1: entered promiscuous mode [ 970.564961][T32399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 970.573908][T32399] Cannot create hsr debugfs directory [ 970.705849][T32493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8432'. [ 970.749716][T32494] netlink: 'syz.1.8431': attribute type 4 has an invalid length. [ 970.758254][T32494] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8431'. [ 970.772096][T32493] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 970.996611][T32502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8435'. [ 971.103573][T32506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8436'. [ 971.450395][T32399] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 971.475985][T32399] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 971.505596][T32399] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 971.517880][T32399] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 971.710848][ T5840] Bluetooth: hci0: command tx timeout [ 971.866722][T32399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.931484][T32549] netlink: 'syz.4.8450': attribute type 1 has an invalid length. [ 971.939266][T32549] netlink: 'syz.4.8450': attribute type 1 has an invalid length. [ 971.961804][T32399] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.016393][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.023614][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.044593][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.051994][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.278907][T32557] 2g,{ speed is unknown, defaulting to 1000 [ 972.657118][T32399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.775009][T32399] veth0_vlan: entered promiscuous mode [ 972.798753][T32399] veth1_vlan: entered promiscuous mode [ 972.892414][T32565] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8453'. [ 972.924931][T32565] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8453'. [ 972.965163][T32399] veth0_macvtap: entered promiscuous mode [ 973.003821][T32399] veth1_macvtap: entered promiscuous mode [ 973.071662][T32399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.102185][T32399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.154798][T31053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.169211][T31053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.206247][T31053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.218281][T31053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.219041][T32576] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8455'. [ 973.236876][T32577] bridge_slave_0: default FDB implementation only supports local addresses [ 973.267043][T32576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8455'. [ 973.376413][T31057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.400045][T31057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.465030][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.486665][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.790524][ T5840] Bluetooth: hci0: command tx timeout [ 973.793453][T32592] FAULT_INJECTION: forcing a failure. [ 973.793453][T32592] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 973.824178][T32592] CPU: 1 UID: 0 PID: 32592 Comm: syz.4.8462 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 973.824206][T32592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 973.824229][T32592] Call Trace: [ 973.824236][T32592] [ 973.824245][T32592] dump_stack_lvl+0x189/0x250 [ 973.824277][T32592] ? __pfx____ratelimit+0x10/0x10 [ 973.824297][T32592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 973.824320][T32592] ? __pfx__printk+0x10/0x10 [ 973.824340][T32592] ? fs_reclaim_acquire+0x7d/0x100 [ 973.824368][T32592] should_fail_ex+0x414/0x560 [ 973.824395][T32592] prepare_alloc_pages+0x213/0x610 [ 973.824422][T32592] __alloc_frozen_pages_noprof+0x123/0x370 [ 973.824447][T32592] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 973.824475][T32592] ? policy_nodemask+0x27c/0x720 [ 973.824491][T32592] ? __pfx__copy_from_iter+0x10/0x10 [ 973.824512][T32592] alloc_pages_mpol+0x232/0x4a0 [ 973.824533][T32592] alloc_pages_noprof+0xa9/0x190 [ 973.824552][T32592] af_alg_sendmsg+0x133a/0x22e0 [ 973.824572][T32592] ? __pfx___might_resched+0x10/0x10 [ 973.824620][T32592] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 973.824639][T32592] ? __pfx_aa_sk_perm+0x10/0x10 [ 973.824657][T32592] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 973.824686][T32592] ? aa_sock_msg_perm+0x94/0x160 [ 973.824709][T32592] ? skcipher_sendmsg+0x26/0xf0 [ 973.824729][T32592] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 973.824753][T32592] __sock_sendmsg+0x219/0x270 [ 973.824775][T32592] ____sys_sendmsg+0x52d/0x830 [ 973.824805][T32592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 973.824838][T32592] ? import_iovec+0x74/0xa0 [ 973.824858][T32592] ___sys_sendmsg+0x21f/0x2a0 [ 973.824884][T32592] ? __pfx____sys_sendmsg+0x10/0x10 [ 973.824947][T32592] ? __fget_files+0x2a/0x420 [ 973.824964][T32592] ? __fget_files+0x3a0/0x420 [ 973.824992][T32592] __sys_sendmmsg+0x227/0x430 [ 973.825023][T32592] ? __pfx___sys_sendmmsg+0x10/0x10 [ 973.825045][T32592] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 973.825095][T32592] ? ksys_write+0x22a/0x250 [ 973.825123][T32592] ? __pfx_ksys_write+0x10/0x10 [ 973.825156][T32592] __x64_sys_sendmmsg+0xa0/0xc0 [ 973.825181][T32592] do_syscall_64+0xfa/0x3b0 [ 973.825201][T32592] ? lockdep_hardirqs_on+0x9c/0x150 [ 973.825226][T32592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.825244][T32592] ? clear_bhb_loop+0x60/0xb0 [ 973.825267][T32592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.825284][T32592] RIP: 0033:0x7f321d38e929 [ 973.825301][T32592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.825316][T32592] RSP: 002b:00007f321e220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 973.825336][T32592] RAX: ffffffffffffffda RBX: 00007f321d5b5fa0 RCX: 00007f321d38e929 [ 973.825350][T32592] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 973.825360][T32592] RBP: 00007f321e220090 R08: 0000000000000000 R09: 0000000000000000 [ 973.825370][T32592] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 973.825381][T32592] R13: 0000000000000000 R14: 00007f321d5b5fa0 R15: 00007fffe35dbba8 [ 973.825409][T32592] [ 974.219364][T32595] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 974.230957][T32595] CPU: 0 UID: 0 PID: 32595 Comm: syz.3.8463 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 974.230988][T32595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 974.231000][T32595] Call Trace: [ 974.231008][T32595] [ 974.231016][T32595] dump_stack_lvl+0x189/0x250 [ 974.231052][T32595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 974.231080][T32595] ? __pfx__printk+0x10/0x10 [ 974.231099][T32595] ? kernfs_path_from_node+0x2c/0x260 [ 974.231119][T32595] ? kernfs_path_from_node+0x2c/0x260 [ 974.231138][T32595] ? kernfs_path_from_node+0x2c/0x260 [ 974.231161][T32595] ? kernfs_path_from_node+0x22c/0x260 [ 974.231181][T32595] ? kernfs_path_from_node+0x2c/0x260 [ 974.231206][T32595] sysfs_warn_dup+0x8e/0xa0 [ 974.231225][T32595] sysfs_do_create_link_sd+0xc0/0x110 [ 974.231249][T32595] device_add_class_symlinks+0x1cf/0x240 [ 974.231275][T32595] device_add+0x475/0xb50 [ 974.231301][T32595] wiphy_register+0x1ba6/0x28d0 [ 974.231344][T32595] ? __pfx_wiphy_register+0x10/0x10 [ 974.231364][T32595] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 974.231400][T32595] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 974.231430][T32595] ieee80211_register_hw+0x33e1/0x4120 [ 974.231486][T32595] ? ieee80211_register_hw+0x1441/0x4120 [ 974.231522][T32595] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 974.231554][T32595] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 974.231584][T32595] ? __hrtimer_setup+0x187/0x210 [ 974.231609][T32595] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 974.231636][T32595] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 974.231693][T32595] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 974.231713][T32595] ? trace_kmalloc+0x1f/0xd0 [ 974.231737][T32595] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 974.231756][T32595] ? kstrndup+0xbf/0x160 [ 974.231789][T32595] hwsim_new_radio_nl+0xea4/0x1b10 [ 974.231813][T32595] ? __pfx___nla_validate_parse+0x10/0x10 [ 974.231853][T32595] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 974.231890][T32595] ? __nla_parse+0x40/0x60 [ 974.231919][T32595] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 974.231956][T32595] genl_family_rcv_msg_doit+0x212/0x300 [ 974.231991][T32595] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 974.232033][T32595] ? bpf_lsm_capable+0x9/0x20 [ 974.232049][T32595] ? security_capable+0x7e/0x2e0 [ 974.232080][T32595] genl_rcv_msg+0x60e/0x790 [ 974.232113][T32595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.232138][T32595] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 974.232176][T32595] netlink_rcv_skb+0x208/0x470 [ 974.232199][T32595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.232226][T32595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 974.232268][T32595] ? down_read+0x1ad/0x2e0 [ 974.232294][T32595] genl_rcv+0x28/0x40 [ 974.232318][T32595] netlink_unicast+0x75b/0x8d0 [ 974.232352][T32595] netlink_sendmsg+0x805/0xb30 [ 974.232385][T32595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.232412][T32595] ? aa_sock_msg_perm+0x94/0x160 [ 974.232436][T32595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 974.232466][T32595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.232490][T32595] __sock_sendmsg+0x219/0x270 [ 974.232516][T32595] ____sys_sendmsg+0x505/0x830 [ 974.232549][T32595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.232586][T32595] ? import_iovec+0x74/0xa0 [ 974.232608][T32595] ___sys_sendmsg+0x21f/0x2a0 [ 974.232637][T32595] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.232705][T32595] ? __fget_files+0x2a/0x420 [ 974.232725][T32595] ? __fget_files+0x3a0/0x420 [ 974.232758][T32595] __x64_sys_sendmsg+0x19b/0x260 [ 974.232787][T32595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.232825][T32595] ? rcu_is_watching+0x15/0xb0 [ 974.232859][T32595] ? do_syscall_64+0xbe/0x3b0 [ 974.232886][T32595] do_syscall_64+0xfa/0x3b0 [ 974.232906][T32595] ? lockdep_hardirqs_on+0x9c/0x150 [ 974.232928][T32595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.232947][T32595] ? clear_bhb_loop+0x60/0xb0 [ 974.232970][T32595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.232988][T32595] RIP: 0033:0x7f1e6fb8e929 [ 974.233007][T32595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.233024][T32595] RSP: 002b:00007f1e7094d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.233046][T32595] RAX: ffffffffffffffda RBX: 00007f1e6fdb5fa0 RCX: 00007f1e6fb8e929 [ 974.233061][T32595] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000004 [ 974.233073][T32595] RBP: 00007f1e6fc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 974.233085][T32595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.233097][T32595] R13: 0000000000000000 R14: 00007f1e6fdb5fa0 R15: 00007ffd14ebbe68 [ 974.233130][T32595] [ 975.138132][T27787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.330387][T27787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.512961][ T3455] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.107739][ T3455] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.187149][ T3455] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.257133][ T3455] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.368441][ T3455] bridge_slave_1: left allmulticast mode [ 976.374364][ T3455] bridge_slave_1: left promiscuous mode [ 976.380170][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.390949][ T3455] bridge_slave_0: left allmulticast mode [ 976.396648][ T3455] bridge_slave_0: left promiscuous mode [ 976.402533][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.803539][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.815454][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.826533][ T3455] bond0 (unregistering): Released all slaves [ 977.179734][ T3455] hsr_slave_0: left promiscuous mode [ 977.202276][ T3455] hsr_slave_1: left promiscuous mode [ 977.221214][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.228670][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.239200][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.246896][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.273303][ T3455] veth1_macvtap: left promiscuous mode [ 977.278829][ T3455] veth0_macvtap: left promiscuous mode [ 977.286039][ T3455] veth1_vlan: left promiscuous mode [ 977.291878][ T3455] veth0_vlan: left promiscuous mode [ 978.061652][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 978.071669][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 978.080994][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 978.098784][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 978.110202][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 978.199625][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 978.258937][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 978.633469][T32657] netlink: 'syz.1.8478': attribute type 10 has an invalid length. [ 978.637325][T32656] __nla_validate_parse: 1 callbacks suppressed [ 978.637344][T32656] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8477'. [ 978.702387][T32658] netlink: 'syz.1.8478': attribute type 10 has an invalid length. [ 978.718487][T32658] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8478'. [ 979.011799][T32657] batman_adv: batadv0: Adding interface: team0 [ 979.026927][T32657] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.058604][T32657] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 979.081583][T32665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8479'. [ 979.091334][T32665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8479'. [ 979.105780][T32658] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.121044][T32658] batman_adv: batadv0: Interface activated: team0 [ 979.127786][T32658] batman_adv: batadv0: Interface deactivated: team0 [ 979.140994][T32658] batman_adv: batadv0: Removing interface: team0 [ 979.148868][T32658] bridge0: port 1(team0) entered blocking state [ 979.161818][T32658] bridge0: port 1(team0) entered disabled state [ 979.168520][T32658] team0: entered allmulticast mode [ 979.199265][T32668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8480'. [ 979.217819][T32656] 2g,{ speed is unknown, defaulting to 1000 [ 979.257908][T32668] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 979.439844][T32649] 2g,{ speed is unknown, defaulting to 1000 [ 979.645606][T32682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8484'. [ 979.919383][T32687] netlink: 'syz.0.8485': attribute type 4 has an invalid length. [ 979.946733][T32687] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8485'. [ 980.190102][ T5840] Bluetooth: hci0: command tx timeout [ 980.535636][T32712] netlink: 'syz.3.8491': attribute type 7 has an invalid length. [ 980.566573][T32715] FAULT_INJECTION: forcing a failure. [ 980.566573][T32715] name failslab, interval 1, probability 0, space 0, times 0 [ 980.591530][T32715] CPU: 1 UID: 0 PID: 32715 Comm: syz.0.8492 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 980.591558][T32715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 980.591571][T32715] Call Trace: [ 980.591579][T32715] [ 980.591588][T32715] dump_stack_lvl+0x189/0x250 [ 980.591620][T32715] ? __pfx____ratelimit+0x10/0x10 [ 980.591642][T32715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 980.591668][T32715] ? __pfx__printk+0x10/0x10 [ 980.591692][T32715] ? __pfx___might_resched+0x10/0x10 [ 980.591717][T32715] ? fs_reclaim_acquire+0x7d/0x100 [ 980.591744][T32715] should_fail_ex+0x414/0x560 [ 980.591779][T32715] should_failslab+0xa8/0x100 [ 980.591802][T32715] __kmalloc_noprof+0xcb/0x4f0 [ 980.591818][T32715] ? kfree+0x4d/0x440 [ 980.591840][T32715] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 980.591870][T32715] tomoyo_realpath_from_path+0xe3/0x5d0 [ 980.591895][T32715] ? tomoyo_domain+0xd9/0x130 [ 980.591943][T32715] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 980.591970][T32715] tomoyo_path_number_perm+0x1e8/0x5a0 [ 980.591994][T32715] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 980.592032][T32715] ? __lock_acquire+0xab9/0xd20 [ 980.592078][T32715] ? __fget_files+0x2a/0x420 [ 980.592101][T32715] ? __fget_files+0x2a/0x420 [ 980.592119][T32715] ? __fget_files+0x3a0/0x420 [ 980.592137][T32715] ? __fget_files+0x2a/0x420 [ 980.592161][T32715] security_file_ioctl+0xcb/0x2d0 [ 980.592183][T32715] __se_sys_ioctl+0x47/0x170 [ 980.592211][T32715] do_syscall_64+0xfa/0x3b0 [ 980.592230][T32715] ? lockdep_hardirqs_on+0x9c/0x150 [ 980.592249][T32715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.592266][T32715] ? clear_bhb_loop+0x60/0xb0 [ 980.592288][T32715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.592306][T32715] RIP: 0033:0x7febccb8e929 [ 980.592324][T32715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.592339][T32715] RSP: 002b:00007febcd931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.592359][T32715] RAX: ffffffffffffffda RBX: 00007febccdb5fa0 RCX: 00007febccb8e929 [ 980.592372][T32715] RDX: 0000200000000140 RSI: 0000000040086602 RDI: 0000000000000003 [ 980.592385][T32715] RBP: 00007febcd931090 R08: 0000000000000000 R09: 0000000000000000 [ 980.592397][T32715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.592409][T32715] R13: 0000000000000000 R14: 00007febccdb5fa0 R15: 00007ffe4e341b18 [ 980.592450][T32715] [ 980.592479][T32715] ERROR: Out of memory at tomoyo_realpath_from_path. [ 980.874890][T32718] gtp0: entered promiscuous mode [ 980.879882][T32718] gtp0: entered allmulticast mode [ 980.911032][T32649] chnl_net:caif_netlink_parms(): no params data found [ 981.003849][T32722] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8495'. [ 981.035770][T32722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8495'. [ 981.114502][T32731] netlink: 'syz.4.8498': attribute type 10 has an invalid length. [ 981.217359][T32649] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.234520][T32649] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.245866][T32649] bridge_slave_0: entered allmulticast mode [ 981.258451][T32649] bridge_slave_0: entered promiscuous mode [ 981.267977][T32728] tun0: tun_chr_ioctl cmd 1074025677 [ 981.279420][T32728] tun0: linktype set to 778 [ 981.305618][T32728] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8497'. [ 981.309688][T32649] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.341930][T32649] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.349862][T32649] bridge_slave_1: entered allmulticast mode [ 981.369560][T32649] bridge_slave_1: entered promiscuous mode [ 981.423947][T32740] 2g,{ speed is unknown, defaulting to 1000 [ 981.427756][T32649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.446748][T32649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.746721][T32649] team0: Port device team_slave_0 added [ 981.768468][T32649] team0: Port device team_slave_1 added [ 981.898132][T32752] tipc: Started in network mode [ 981.940216][T32752] tipc: Node identity , cluster identity 4711 [ 981.946399][T32752] tipc: Failed to set node id, please configure manually [ 981.974781][T32752] tipc: Enabling of bearer rejected, failed to enable media [ 981.988264][T32649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.002181][T32649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.042612][T32649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.062553][T32649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.082000][T32649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.147713][T32649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.362382][ T5840] Bluetooth: hci0: command tx timeout [ 982.584281][T32649] hsr_slave_0: entered promiscuous mode [ 982.608979][T32649] hsr_slave_1: entered promiscuous mode [ 982.620969][T32649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.637279][T32649] Cannot create hsr debugfs directory [ 982.759063][ T311] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input60 [ 982.795229][ T317] netlink: 'syz.3.8511': attribute type 1 has an invalid length. [ 983.429746][ T335] netlink: 'syz.1.8520': attribute type 7 has an invalid length. [ 983.525888][ T337] FAULT_INJECTION: forcing a failure. [ 983.525888][ T337] name failslab, interval 1, probability 0, space 0, times 0 [ 983.539043][ T337] CPU: 0 UID: 0 PID: 337 Comm: syz.3.8521 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 983.539071][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 983.539083][ T337] Call Trace: [ 983.539091][ T337] [ 983.539099][ T337] dump_stack_lvl+0x189/0x250 [ 983.539130][ T337] ? __pfx____ratelimit+0x10/0x10 [ 983.539151][ T337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.539176][ T337] ? __pfx__printk+0x10/0x10 [ 983.539198][ T337] ? __pfx___might_resched+0x10/0x10 [ 983.539222][ T337] ? fs_reclaim_acquire+0x7d/0x100 [ 983.539244][ T337] should_fail_ex+0x414/0x560 [ 983.539266][ T337] should_failslab+0xa8/0x100 [ 983.539284][ T337] __kmalloc_noprof+0xcb/0x4f0 [ 983.539298][ T337] ? tomoyo_encode+0x28b/0x550 [ 983.539321][ T337] tomoyo_encode+0x28b/0x550 [ 983.539345][ T337] tomoyo_realpath_from_path+0x58d/0x5d0 [ 983.539373][ T337] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 983.539390][ T337] tomoyo_path_number_perm+0x1e8/0x5a0 [ 983.539409][ T337] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 983.539447][ T337] ? __lock_acquire+0xab9/0xd20 [ 983.539484][ T337] ? __fget_files+0x2a/0x420 [ 983.539502][ T337] ? __fget_files+0x2a/0x420 [ 983.539516][ T337] ? __fget_files+0x3a0/0x420 [ 983.539530][ T337] ? __fget_files+0x2a/0x420 [ 983.539549][ T337] security_file_ioctl+0xcb/0x2d0 [ 983.539567][ T337] __se_sys_ioctl+0x47/0x170 [ 983.539590][ T337] do_syscall_64+0xfa/0x3b0 [ 983.539606][ T337] ? lockdep_hardirqs_on+0x9c/0x150 [ 983.539622][ T337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.539636][ T337] ? clear_bhb_loop+0x60/0xb0 [ 983.539655][ T337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.539669][ T337] RIP: 0033:0x7f1e6fb8e929 [ 983.539683][ T337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.539696][ T337] RSP: 002b:00007f1e7094d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 983.539712][ T337] RAX: ffffffffffffffda RBX: 00007f1e6fdb5fa0 RCX: 00007f1e6fb8e929 [ 983.539723][ T337] RDX: 0000200000000140 RSI: 0000000040086602 RDI: 0000000000000003 [ 983.539733][ T337] RBP: 00007f1e7094d090 R08: 0000000000000000 R09: 0000000000000000 [ 983.539742][ T337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.539751][ T337] R13: 0000000000000000 R14: 00007f1e6fdb5fa0 R15: 00007ffd14ebbe68 [ 983.539776][ T337] [ 983.786036][ T337] ERROR: Out of memory at tomoyo_realpath_from_path. [ 983.997820][T32649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 984.025074][T32649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 984.069069][T32649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 984.109641][T32649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 984.125254][ T358] __nla_validate_parse: 6 callbacks suppressed [ 984.125269][ T358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8528'. [ 984.172077][ T357] vlan3: entered promiscuous mode [ 984.237163][ T362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8528'. [ 984.434592][ T5840] Bluetooth: hci0: command tx timeout [ 984.477166][T32649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.515309][ T376] tipc: Enabling of bearer rejected, failed to enable media [ 984.587700][T32649] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.626696][T31057] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.633930][T31057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.697102][T31060] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.704384][T31060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.983901][ T391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8535'. [ 985.218975][ T400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8537'. [ 985.457410][ T407] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8539'. [ 985.531686][T32649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.652545][ T414] 2g,{ speed is unknown, defaulting to 1000 [ 985.697200][T32649] veth0_vlan: entered promiscuous mode [ 985.773230][T32649] veth1_vlan: entered promiscuous mode [ 985.929251][T32649] veth0_macvtap: entered promiscuous mode [ 986.044644][ T430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8545'. [ 986.092839][T32649] veth1_macvtap: entered promiscuous mode [ 986.174696][T32649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.187037][ T430] netlink: 'syz.0.8545': attribute type 1 has an invalid length. [ 986.217084][T32649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.299830][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.329276][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.364871][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.393287][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.808391][T31057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.824708][T31057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.981468][T31060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.989336][T31060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.109185][ T461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8554'. [ 987.129048][ T463] bond0: entered promiscuous mode [ 987.144449][ T463] bond0: left promiscuous mode [ 987.302105][ T466] [ 987.304483][ T466] ====================================================== [ 987.311503][ T466] WARNING: possible circular locking dependency detected [ 987.318541][ T466] 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 Not tainted [ 987.325642][ T466] ------------------------------------------------------ [ 987.332670][ T466] syz.1.8556/466 is trying to acquire lock: [ 987.338558][ T466] ffffffff8f669fb8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 987.348172][ T466] [ 987.348172][ T466] but task is already holding lock: [ 987.355527][ T466] ffffffff8f669f58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 987.365128][ T466] [ 987.365128][ T466] which lock already depends on the new lock. [ 987.365128][ T466] [ 987.375539][ T466] [ 987.375539][ T466] the existing dependency chain (in reverse order) is: [ 987.384549][ T466] [ 987.384549][ T466] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 987.392458][ T466] lock_acquire+0x120/0x360 [ 987.397488][ T466] _raw_spin_lock_bh+0x36/0x50 [ 987.402771][ T466] nr_rt_ioctl+0x390/0xd50 [ 987.407708][ T466] sock_do_ioctl+0xd9/0x300 [ 987.412726][ T466] sock_ioctl+0x576/0x790 [ 987.417572][ T466] __se_sys_ioctl+0xfc/0x170 [ 987.422686][ T466] do_syscall_64+0xfa/0x3b0 [ 987.427720][ T466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.434135][ T466] [ 987.434135][ T466] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 987.442127][ T466] lock_acquire+0x120/0x360 [ 987.447154][ T466] _raw_spin_lock_bh+0x36/0x50 [ 987.452428][ T466] nr_rt_ioctl+0x193/0xd50 [ 987.457354][ T466] sock_do_ioctl+0xd9/0x300 [ 987.462365][ T466] sock_ioctl+0x576/0x790 [ 987.467203][ T466] __se_sys_ioctl+0xfc/0x170 [ 987.472312][ T466] do_syscall_64+0xfa/0x3b0 [ 987.477330][ T466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.483935][ T466] [ 987.483935][ T466] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 987.491773][ T466] validate_chain+0xb9b/0x2140 [ 987.497066][ T466] __lock_acquire+0xab9/0xd20 [ 987.502262][ T466] lock_acquire+0x120/0x360 [ 987.507281][ T466] _raw_spin_lock_bh+0x36/0x50 [ 987.512557][ T466] nr_rt_device_down+0xa9/0x720 [ 987.517917][ T466] nr_device_event+0x137/0x150 [ 987.523201][ T466] notifier_call_chain+0x1b3/0x3e0 [ 987.528835][ T466] __dev_notify_flags+0x18d/0x2e0 [ 987.534377][ T466] netif_change_flags+0xe8/0x1a0 [ 987.539842][ T466] dev_change_flags+0x130/0x260 [ 987.545210][ T466] dev_ioctl+0x7b4/0x1150 [ 987.550054][ T466] sock_do_ioctl+0x22c/0x300 [ 987.555165][ T466] sock_ioctl+0x576/0x790 [ 987.560011][ T466] __se_sys_ioctl+0xfc/0x170 [ 987.565127][ T466] do_syscall_64+0xfa/0x3b0 [ 987.570145][ T466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.576563][ T466] [ 987.576563][ T466] other info that might help us debug this: [ 987.576563][ T466] [ 987.586779][ T466] Chain exists of: [ 987.586779][ T466] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 987.586779][ T466] [ 987.600597][ T466] Possible unsafe locking scenario: [ 987.600597][ T466] [ 987.608040][ T466] CPU0 CPU1 [ 987.613433][ T466] ---- ---- [ 987.618784][ T466] lock(nr_neigh_list_lock); [ 987.623458][ T466] lock(&nr_node->node_lock); [ 987.630737][ T466] lock(nr_neigh_list_lock); [ 987.637927][ T466] lock(nr_node_list_lock); [ 987.642508][ T466] [ 987.642508][ T466] *** DEADLOCK *** [ 987.642508][ T466] [ 987.650638][ T466] 2 locks held by syz.1.8556/466: [ 987.655646][ T466] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 987.664485][ T466] #1: ffffffff8f669f58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 987.674488][ T466] [ 987.674488][ T466] stack backtrace: [ 987.680368][ T466] CPU: 0 UID: 0 PID: 466 Comm: syz.1.8556 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 987.680391][ T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 987.680401][ T466] Call Trace: [ 987.680408][ T466] [ 987.680416][ T466] dump_stack_lvl+0x189/0x250 [ 987.680443][ T466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.680465][ T466] ? __pfx__printk+0x10/0x10 [ 987.680482][ T466] ? print_lock_name+0xde/0x100 [ 987.680499][ T466] print_circular_bug+0x2ee/0x310 [ 987.680516][ T466] check_noncircular+0x134/0x160 [ 987.680534][ T466] validate_chain+0xb9b/0x2140 [ 987.680550][ T466] ? rt6_disable_ip+0x6b3/0x720 [ 987.680574][ T466] ? __lock_acquire+0xab9/0xd20 [ 987.680595][ T466] __lock_acquire+0xab9/0xd20 [ 987.680617][ T466] ? nr_rt_device_down+0xa9/0x720 [ 987.680631][ T466] lock_acquire+0x120/0x360 [ 987.680650][ T466] ? nr_rt_device_down+0xa9/0x720 [ 987.680669][ T466] ? nr_rt_device_down+0xa9/0x720 [ 987.680683][ T466] _raw_spin_lock_bh+0x36/0x50 [ 987.680698][ T466] ? nr_rt_device_down+0xa9/0x720 [ 987.680712][ T466] nr_rt_device_down+0xa9/0x720 [ 987.680728][ T466] ? do_raw_spin_unlock+0x122/0x240 [ 987.680748][ T466] nr_device_event+0x137/0x150 [ 987.680770][ T466] notifier_call_chain+0x1b3/0x3e0 [ 987.680796][ T466] __dev_notify_flags+0x18d/0x2e0 [ 987.680817][ T466] ? __pfx___dev_notify_flags+0x10/0x10 [ 987.680836][ T466] ? __dev_change_flags+0x4cc/0x6d0 [ 987.680857][ T466] ? __pfx___dev_change_flags+0x10/0x10 [ 987.680876][ T466] ? dev_ioctl+0x7a4/0x1150 [ 987.680893][ T466] ? full_name_hash+0x92/0xe0 [ 987.680913][ T466] netif_change_flags+0xe8/0x1a0 [ 987.680935][ T466] dev_change_flags+0x130/0x260 [ 987.680962][ T466] dev_ioctl+0x7b4/0x1150 [ 987.680980][ T466] sock_do_ioctl+0x22c/0x300 [ 987.680997][ T466] ? __pfx_sock_do_ioctl+0x10/0x10 [ 987.681011][ T466] ? __lock_acquire+0xab9/0xd20 [ 987.681036][ T466] sock_ioctl+0x576/0x790 [ 987.681051][ T466] ? __pfx_sock_ioctl+0x10/0x10 [ 987.681065][ T466] ? __fget_files+0x2a/0x420 [ 987.681081][ T466] ? __fget_files+0x3a0/0x420 [ 987.681096][ T466] ? __fget_files+0x2a/0x420 [ 987.681112][ T466] ? bpf_lsm_file_ioctl+0x9/0x20 [ 987.681134][ T466] ? __pfx_sock_ioctl+0x10/0x10 [ 987.681147][ T466] __se_sys_ioctl+0xfc/0x170 [ 987.681169][ T466] do_syscall_64+0xfa/0x3b0 [ 987.681187][ T466] ? lockdep_hardirqs_on+0x9c/0x150 [ 987.681203][ T466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.681219][ T466] ? clear_bhb_loop+0x60/0xb0 [ 987.681235][ T466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.681251][ T466] RIP: 0033:0x7f585bf8e929 [ 987.681267][ T466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.681281][ T466] RSP: 002b:00007f585ce65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 987.681298][ T466] RAX: ffffffffffffffda RBX: 00007f585c1b6080 RCX: 00007f585bf8e929 [ 987.681310][ T466] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 987.681320][ T466] RBP: 00007f585c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 987.681331][ T466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.681340][ T466] R13: 0000000000000000 R14: 00007f585c1b6080 R15: 00007fffd2ca4eb8 [ 987.681357][ T466] [ 988.206870][T31053] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.801175][T31053] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.844905][T31053] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.906412][T31053] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.000861][T31053] bridge_slave_1: left allmulticast mode [ 989.006539][T31053] bridge_slave_1: left promiscuous mode [ 989.016259][T31053] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.025965][T31053] bridge_slave_0: left allmulticast mode [ 989.034521][T31053] bridge_slave_0: left promiscuous mode [ 989.040302][T31053] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.176124][T31053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.201815][T31053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.213642][T31053] bond0 (unregistering): Released all slaves [ 989.551562][T31053] hsr_slave_0: left promiscuous mode [ 989.558000][T31053] hsr_slave_1: left promiscuous mode [ 989.581041][T31053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.588504][T31053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.598389][T31053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.606272][T31053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.619482][T31053] veth1_macvtap: left promiscuous mode [ 989.625371][T31053] veth0_macvtap: left promiscuous mode [ 989.633451][T31053] veth1_vlan: left promiscuous mode [ 989.638752][T31053] veth0_vlan: left promiscuous mode [ 989.879294][T31053] team0 (unregistering): Port device team_slave_1 removed [ 989.918413][T31053] team0 (unregistering): Port device team_slave_0 removed