last executing test programs: 1m6.752666715s ago: executing program 0 (id=1313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000100)) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0800191db0becff04bdb4872473de38af5771dd295a0fd8724fc0fbcad89041bf64f29c9dd0f7b66fd97d268c35d01460d7d8db5f19c2604b33389d55968458ff56c4baea29e69edd22441289c45ceebc20ebd3d517a2feee6878ffa22054e8b6a02b4e21473dabd7a9c4e05517570000000000000000000"], 0x30}}, 0x0) (async) pipe(&(0x7f0000001180)={0xffffffffffffffff}) bind$alg(r8, &(0x7f0000001380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-arm\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x3c, 0x3c, 0x4, [@enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xf, 0xf}, {0x6, 0xfffffff9}, {0x4, 0x3}, {0x4, 0x9}, {0xa, 0x8}, {0xf, 0x4}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000000c0)=""/190, 0x58, 0xbe, 0x1}, 0x28) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 56.523247307s ago: executing program 0 (id=1313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000100)) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0800191db0becff04bdb4872473de38af5771dd295a0fd8724fc0fbcad89041bf64f29c9dd0f7b66fd97d268c35d01460d7d8db5f19c2604b33389d55968458ff56c4baea29e69edd22441289c45ceebc20ebd3d517a2feee6878ffa22054e8b6a02b4e21473dabd7a9c4e05517570000000000000000000"], 0x30}}, 0x0) (async) pipe(&(0x7f0000001180)={0xffffffffffffffff}) bind$alg(r8, &(0x7f0000001380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-arm\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x3c, 0x3c, 0x4, [@enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xf, 0xf}, {0x6, 0xfffffff9}, {0x4, 0x3}, {0x4, 0x9}, {0xa, 0x8}, {0xf, 0x4}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000000c0)=""/190, 0x58, 0xbe, 0x1}, 0x28) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 43.834607991s ago: executing program 0 (id=1313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000100)) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0800191db0becff04bdb4872473de38af5771dd295a0fd8724fc0fbcad89041bf64f29c9dd0f7b66fd97d268c35d01460d7d8db5f19c2604b33389d55968458ff56c4baea29e69edd22441289c45ceebc20ebd3d517a2feee6878ffa22054e8b6a02b4e21473dabd7a9c4e05517570000000000000000000"], 0x30}}, 0x0) (async) pipe(&(0x7f0000001180)={0xffffffffffffffff}) bind$alg(r8, &(0x7f0000001380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-arm\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x3c, 0x3c, 0x4, [@enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xf, 0xf}, {0x6, 0xfffffff9}, {0x4, 0x3}, {0x4, 0x9}, {0xa, 0x8}, {0xf, 0x4}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000000c0)=""/190, 0x58, 0xbe, 0x1}, 0x28) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 32.053306714s ago: executing program 0 (id=1313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000100)) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0800191db0becff04bdb4872473de38af5771dd295a0fd8724fc0fbcad89041bf64f29c9dd0f7b66fd97d268c35d01460d7d8db5f19c2604b33389d55968458ff56c4baea29e69edd22441289c45ceebc20ebd3d517a2feee6878ffa22054e8b6a02b4e21473dabd7a9c4e05517570000000000000000000"], 0x30}}, 0x0) (async) pipe(&(0x7f0000001180)={0xffffffffffffffff}) bind$alg(r8, &(0x7f0000001380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-arm\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x3c, 0x3c, 0x4, [@enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xf, 0xf}, {0x6, 0xfffffff9}, {0x4, 0x3}, {0x4, 0x9}, {0xa, 0x8}, {0xf, 0x4}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000000c0)=""/190, 0x58, 0xbe, 0x1}, 0x28) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 21.039393431s ago: executing program 0 (id=1313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000100)) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0800191db0becff04bdb4872473de38af5771dd295a0fd8724fc0fbcad89041bf64f29c9dd0f7b66fd97d268c35d01460d7d8db5f19c2604b33389d55968458ff56c4baea29e69edd22441289c45ceebc20ebd3d517a2feee6878ffa22054e8b6a02b4e21473dabd7a9c4e05517570000000000000000000"], 0x30}}, 0x0) (async) pipe(&(0x7f0000001180)={0xffffffffffffffff}) bind$alg(r8, &(0x7f0000001380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-arm\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x3c, 0x3c, 0x4, [@enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xf, 0xf}, {0x6, 0xfffffff9}, {0x4, 0x3}, {0x4, 0x9}, {0xa, 0x8}, {0xf, 0x4}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000000c0)=""/190, 0x58, 0xbe, 0x1}, 0x28) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 10.993354829s ago: executing program 0 (id=1313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000100)) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0800191db0becff04bdb4872473de38af5771dd295a0fd8724fc0fbcad89041bf64f29c9dd0f7b66fd97d268c35d01460d7d8db5f19c2604b33389d55968458ff56c4baea29e69edd22441289c45ceebc20ebd3d517a2feee6878ffa22054e8b6a02b4e21473dabd7a9c4e05517570000000000000000000"], 0x30}}, 0x0) (async) pipe(&(0x7f0000001180)={0xffffffffffffffff}) bind$alg(r8, &(0x7f0000001380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-arm\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x3c, 0x3c, 0x4, [@enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xf, 0xf}, {0x6, 0xfffffff9}, {0x4, 0x3}, {0x4, 0x9}, {0xa, 0x8}, {0xf, 0x4}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000000c0)=""/190, 0x58, 0xbe, 0x1}, 0x28) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 4.937072416s ago: executing program 4 (id=2389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @multicast2}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000002020104000000000000628d1b8e6600000a000000300002802c00018014000300fe8000000000000000000000000000001400040000000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x18, 0x3c, 0x107, 0x400, 0x0, {0x9, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="080100000000000000000000d8d13e660665cea50ea279ca3d00bdefc35991e3d74f82c0b96a7db2dc421cc56952438eaa8ce2dc6eab0e1271ab72d67c3edc257dc05d33efd8699213ee4441778c71f08c02d145054405f93db354dd407aebfd"], 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="29cf2910", @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) r11 = socket(0x10, 0x3, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x8, 0x6}, {0xc, 0x10}, {0x19, 0x7}}, ["", "", "", "", ""]}, 0x24}}, 0x810) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004d80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x4, {0x0, 0x0, 0x0, r14, {0xc, 0x1}, {}, {0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000091}, 0x8004) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r12, @ANYRES32=0x0, @ANYBLOB="f7e80100000000001c0012800b0001006d616373650700000c0002800500030002000800"], 0x3c}}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) 4.307577892s ago: executing program 4 (id=2397): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit={0x95, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdf}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x5}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3ff, 0x3ff, 0x1, 0x0, 0x20000007}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x20040800) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8, @bcast, @rose={'rose', 0x0}, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @default]}) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x100000}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r6, r8, 0x8f5, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c11350c88e6eb18a", "6a24bfa5688b4a6544317769c9417c51bca80df77b75b65a9b93e715bedb6429", "89276b75", "2d24e0b7ee22f022"}, 0x38) 2.207213559s ago: executing program 2 (id=2420): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x2000}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r1}, 0x38) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x9, 0x49, {{0x23, 0x4, 0x2, 0x26, 0x8c, 0x64, 0x0, 0xb2, 0x29, 0x0, @multicast1, @private=0xa010101, {[@timestamp_prespec={0x44, 0x54, 0x3e, 0x3, 0x9, [{@broadcast, 0x1000}, {@rand_addr=0x64010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@remote, 0x7}, {@remote, 0x5}, {@broadcast, 0x40}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local}, {@multicast1, 0xb}]}, @lsrr={0x83, 0x23, 0xdb, [@private=0xa010102, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x21}]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func={0x8, 0x0, 0x0, 0xc, 0x5}, @enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x1, 0x7, 0x6}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x0, 0x5f, 0x0]}}, &(0x7f0000000500)=""/5, 0x44, 0x5, 0x1, 0xfff}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x8, 0x18}, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000930018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000a00008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xd, &(0x7f0000001e40)=""/4107}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa3bb}, [@generic={0x60, 0x3, 0x6, 0x1000, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x7fff, 0x3d, &(0x7f0000000280)=""/61, 0x41100, 0x4, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x0, 0x8, 0xfffffffa}, 0x10, 0x27c21, 0xffffffffffffffff, 0x2, &(0x7f0000000840)=[r4, r5, r6, r7, 0x1, r9, r10], &(0x7f0000000880)=[{0x5, 0x2, 0x7, 0x8}, {0x2, 0x3, 0x3, 0x2}], 0x10, 0x609}, 0x94) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r12, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r12, 0x89e8) r13 = socket$netlink(0x10, 0x3, 0x4) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r15, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r15, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r15, 0x400448e7, &(0x7f0000000080)) sendmsg$TIPC_NL_PUBL_GET(r13, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r14, 0x300, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r9, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r11}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a00)={r16, &(0x7f00000009c0)="d986c7a8", &(0x7f0000000b40)=""/199, 0x4}, 0x20) 1.727710538s ago: executing program 2 (id=2425): bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x608402}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x40800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28820}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff0200000000000000000000000000010001c204"], 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r3, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_TIMEOUT={0xc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400078008000640000000000900010073797a30"], 0x10c}}, 0x0) 1.459907007s ago: executing program 2 (id=2429): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gretap0\x00'}}, 0x1e) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="aa", 0x1}, {0x0}], 0x2}, 0x4004000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.419260721s ago: executing program 1 (id=2431): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, 0x0) (rerun: 64) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100004000000000000000000e600000a20000000000a05000000000000000000070000010900010073797a30020000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000902010073797a3000000000080005400000002100000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000100c0001400000000000000000140000001000010000000000000000000084000a"], 0xf0}}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300070004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0xfffffffffffffd66}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f00000009c0)) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000a00)={0x6fa, 0x5, 0x4, 0x8, 0x9d, 0x225, 0x5, 0x5}, 0x20) (async, rerun: 32) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) (async) r7 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) (async) readv(r5, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/245, 0xf5}, {0x0}], 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x80, 0x0}, 0x8) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="090300000a0000ff004c0008000000000c200000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000100"/28], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7f, 0x3e, &(0x7f0000000240)=""/62, 0x0, 0x0, '\x00', r8, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0xfffffffd, 0x8, 0x51, 0x5}, 0x10, r9, 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[0x1, r10, r10, r11], &(0x7f0000000580)=[{0x5, 0x1, 0x14, 0x4}], 0x10, 0xffffffff}, 0x94) pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x1) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) 1.360936708s ago: executing program 2 (id=2432): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b471ae2}, 0x94) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e", 0xbb}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed", 0xe3}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x5760, 0x0) r8 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x6a, 0x10, 0x0, &(0x7f0000000080)) write(r3, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000600)={0x2a, 0x1, 0x7ffe}, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004"], 0x64}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r9 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x1, 0x1, 0x40, 0x7, {{0x1e, 0x4, 0x0, 0x9, 0x78, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, {[@generic={0x89, 0x3, "f5"}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x5, 0xd, "2b7e1169f769acf59bdfdf"}]}, @rr={0x7, 0x7, 0x54, [@dev={0xac, 0x14, 0x14, 0x24}]}, @cipso={0x86, 0x3e, 0x0, [{0x6, 0xe, "8697856850f3d48f0f6cbd66"}, {0x1, 0x10, "6a654b16e136f99316b7fdcbf0fa"}, {0x2, 0xe, "2525a5d6b91e148464603484"}, {0x2, 0xc, "85b75ba173b8732968eb"}]}, @timestamp={0x44, 0x8, 0x42, 0x0, 0x0, [0xa9]}]}}}}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in=@local, 0x4e22, 0xffff, 0x4e24, 0xa1b5, 0x2, 0x20, 0xb0, 0x2b, r10, r11}, {0x1, 0x52, 0x80000001, 0x7fff, 0x5, 0x178, 0x6, 0x5}, {0x0, 0x7, 0xffffffffffffffff, 0x1}, 0x401, 0x0, 0x2, 0x1, 0x1, 0x2}, {{@in6=@private2, 0x4d4, 0x3c}, 0xa, @in=@multicast1, 0x3504, 0x2, 0x2, 0x8, 0x2, 0xa1, 0x8}}, 0xe8) close(r1) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00383c0020010000000000000000000000000000ff0200000000000000000000000000012c03000000000000c910"], 0x0) 1.215136874s ago: executing program 1 (id=2434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x9, r0, 0x0, 0x7, 0x9) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xc}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x66}, 0x28) 1.204045492s ago: executing program 4 (id=2435): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.044150371s ago: executing program 3 (id=2436): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e", @ANYRESDEC=r0, @ANYBLOB="0000003300000000628ce0608049000800000000000000000000000000000700000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb0000924a0000000000000000000000006c"], 0x23c}}, 0x0) 1.043268494s ago: executing program 1 (id=2437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000000)={0x0, 0x31, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x9, 0x13, @l2={'ib', 0x3a, 'team0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x200c48a4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0xb, 0x5, 0xfffffff7, 0xffffffff}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000010205000000000000000000020000002c00028014000180080001"], 0x40}}, 0x80) r5 = socket(0x2a, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 968.200002ms ago: executing program 4 (id=2438): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a603f00ff0f040b067c55a1bc000900b80006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x4}, 0x90) 967.479185ms ago: executing program 2 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x24040011}, 0x4008010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4(r2, &(0x7f0000000380)=@hci, &(0x7f0000000400)=0x80, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x80ff, 0x1000000}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x90) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xf, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x0, 0x6}}}}]}, 0x44}}, 0x4010) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001200000000000000f314000200000000000000000000040000000000000000000000880b33dbe9fa4bc53886dd1242e3e6e2d21fbdd3cfc1aaa3d94a17d8a402f27c2be28d50becbf7bdac83c56525052ed0d54f8d9348c79cfa"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r7], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r7, 0x4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x400) bpf$PROG_LOAD(0x23, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400234894783623c8cac10527dd635b8ae500000", @ANYRES16=r9, @ANYBLOB="020026bd7000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x40048d4}, 0x801) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r11, 0x8982, &(0x7f00000007c0)={0x0, 'macvtap0\x00', {0x3}}) 937.49148ms ago: executing program 3 (id=2440): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/240, 0xf0}], 0x1) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1002, &(0x7f00000017c0)=""/4098, 0x40f00}, 0x94) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)="46ffff00", 0x26}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237fcda97b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x401c5820, &(0x7f0000000080)=0x800000) (async) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2b, &(0x7f0000000180)) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="1400e2ff121b155fadfa00000600"/28], 0x14}], 0x1}, 0x0) 887.97168ms ago: executing program 4 (id=2441): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3003}, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 759.926623ms ago: executing program 1 (id=2442): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000002010000000000000000000000811214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 702.743837ms ago: executing program 1 (id=2443): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000014000780080011400000000005001500100000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000180)) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) 660.737039ms ago: executing program 2 (id=2444): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x10a0}, 0x50) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/3, 0x3}}], 0x1, 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c0000001c0a010400000000000000000700000008000a40000000000900020073797a31000000000900"], 0x364}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r10, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 551.58028ms ago: executing program 3 (id=2445): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv6_newroute={0x30, 0x18, 0x2, 0x70bd25, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x8, 0xfc, 0x0, 0xfe, 0xb, 0x200}, [@RTA_EXPIRES={0x8, 0x17, 0x3}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0xfc3738ac799e8367, 0x4, r2}}]}, 0x30}}, 0x40480d1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x8000000, 0x0, {[{{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xff000000, 0x7fffff7f, 0xff000000], 'veth1_vlan\x00', 'wlan0\x00', {}, {}, 0x3b, 0x6, 0x3, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x0, 0x2}, {0x3, 0x6, 0x3}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e24, @empty}}}, 0x90) socket$inet6(0xa, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000bb00000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @cgroup_skb}, 0x94) 546.742495ms ago: executing program 1 (id=2446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000001c0)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r4, 0x2000}, &(0x7f0000000140)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r6}, 0x38) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @private0, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x2, 0xfffffffd, @mcast2}}}, &(0x7f0000000180)=0x84) sendmmsg$inet6(r7, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="46a6", 0x2}], 0x1}}], 0x1, 0xc841) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 230.569816ms ago: executing program 3 (id=2447): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b400000000000000710e42000000000040000000000000009500000000000000691770ea726390bd"], &(0x7f0000000080)='GPL\x00', 0x4, 0xa, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="3f3a5bfa1f00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0xb37}}}}}, 0x0) sendmmsg(r1, &(0x7f0000003900)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x1, 0x4, {0xa, 0x4e24, 0x0, @private2, 0x2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)="fc1219a1572bfabcd990ddc66ca40373b89e9891f98b4d2815accb98e8ec9e85635f6b35bcf21950a2013a7d7eb05d220a45c2ae5d718db92e8e4eb1139a268bc29f4c6360dcb42f4889d313936d677127db208b2eafc2e439fed6de6262fcf73dec68e1d1c80e904b502c32b98f445d1c096de41b5f89", 0x77}, {&(0x7f0000000040)="4894b5a20eb5858397e05201382fa2f159c7f87307451eb107f087bdd73b57cde7648d9264", 0x25}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000240)="c56491eda17e2e6b363610adcf92bfd4339c85a0eea4a9b2c87c4cd831406f1c5af15332a0824cdcb8f7b8f3410a3f91b227307e500035fead6e981d0f9eab2b0a5d838f2aa7f98c8f594d137b3bb685f9f2c08706ce9a6e9731acaca2b0983900493e1d1754d01138cd7e6bb946b97f27a87c311064f68cdab67c651e1143167c83fdeb89a6682fea6871f6bf18183eb1c41c131bfa13249bd3e19f7f62287dd0656074191a8449ee4a90b5cde1913fbfdf5f1362c588fef016a6c0f42f28e640f53ba93a25e47220e0dc28265ac1f2a4bf8542cf7e4fbc24f4c246ca569effc04254502d6301ba9298d6c121", 0xed}, {&(0x7f00000001c0)="d9fc86cc27efca5fa9aaff3846018544315ead6723dc17b0d8cc7719240b3ad7d55958fdeb819d5f20fbae81", 0x2c}], 0x5, &(0x7f0000001500)=[{0x78, 0x109, 0x6, "be328d89928c6f7b617a5837b590b9a92dfe5daccf2350683a202aaeb2834ed2deb37b9802b6cce91b4d9fc7cb73bd3a5d33971eaacb1879fb422dd35e0b472195e8500bf900bfe7072b4490e86dbb9f2cba29cb4491caf775fbb004b11e387ac19b7903e1"}, {0x90, 0x102, 0x3, "0b256d1c6a2a4bfd6f0c61457403771a5aaf31c2585ca7c5c51674abc66e4687373db09645c00a1350a4bc504c3e38b461b072a93bc269f073d6b6da0090cc0ef2310c75376cbbe157723d83ef1d45701ea80a1df293964b7bfbba66d01c7ebfe4920cc3b33f92dbab5a2a5b5a0580075d102e0cae85ca7f42"}], 0x108}}, {{&(0x7f0000001640)=@caif=@dbg={0x25, 0x8, 0x5e}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000400)="943d78ada7d864bea480fb74dcceb354d19066936ee73c32f6624776339355", 0x1f}, {&(0x7f00000016c0)="4e04b805a6528c950acccc83993a2a", 0xf}, {&(0x7f0000001700)="4ff5707df07c317a08ef1df5", 0xc}, {&(0x7f0000001740)="4a0a032ade7ffeb5fe9b30d17c10d4c36d6e1a917b155bb03b3accc6dcc425b25720fc340ad644f227f44cb13ab0cca713dfab18ae0c32cac9c4cf993bf74c608d8c876023a2641d0c8475dafcb30c3424c6fd5fc9fc58a6e5e3dd6b44bdff3cc4f3f18369156c6887456009b2dc26f4b41a7fc2b5c0b84666dcfd7c1e09ebf83d04b14a25b3e931d8f4726c50a78af126109d0b329bc3f8f6c094163eafbe660f74b2739e02721ef1ee0e20b25a4a1c27c8524057f3ef7b05287c213188d0b0576d9c59c1c231e7bb15b6f557dbb8313af3722f03bd64c350c40a32b40e63283c558fae1e5ecf5fcd435b83205890ba4e3cfe07", 0xf4}, {&(0x7f0000001840)="f3b733f05fb0ea034d9f257400aa54c5d58a78f470bb5457a6a2cb5d39154de6c436196d4e9b2b7692f6faf7ac1dea90bc2a93728257956e53b1b5cdcb575b3f7e1252a3fe358882aa5a8e77aecf7bf54d18688b9b0cf932aa9424aa322c3c1b5f5f3958d4e543d5a11d75d2f66088e360d12a73c5d9005d2cf7eebe3615340de264384a1128eb57e8902e1d61ea2206edeb571e683a254964046371ceb550ffe7a0e456b8e1541fa44bd64160638f4289be0d3440dcadf5459e4c2549b9", 0xbe}, {&(0x7f0000001900)="6e96aa5e6cf092ff7dd73afc7b1a5cdfeedcde5722c254dfa2897911912e7e123f2d533ae47521294fe3fe8f219653b03e4b7e7003d18d220dce6152625ef1ab0a286db6dd26d898185e6b0bb5b2613d35b380050f806647c39e25458cd28a98bc01801304f8cc044d7b301bde96495aa005ccc11f2b910a01de3729a3803207f0bee96b6967", 0x86}, {&(0x7f00000019c0)="b65c1f58ec650b4a96ecdd", 0xb}, {&(0x7f0000001a00)="8efa4ffff49e4bad7056078681d1b6ed7cb4974f89b12bf11afa900ad4e5ba07420f38064d0cbb391f9b9ef0508affb3b54cf422c90c592635d6b0ea84c1f4926ac73b46cc6e1cedd0b2bbf15a608786d6f08cc39571196d0b6c16bf526ced88446b49360b5cbc35286c9b7979fedceaba3890d08e5f25c795cccea05d3a92e54719fd9aefbc3360c3bceb59fd610dba92e354d39ec57b5f5607b29aa3e26f664839edee302ae58e4a70d362bd20c138", 0xb0}, {&(0x7f0000001ac0)="42ff55d47ce39918482011274200606a9fc2ffa52d6765b2d5b28ee030beb45ff8e608bdba45ad73f7d8efbc2a07f8bfaa33d84359991faa3881d08354cd5f908d568873dfff4a4c4209c4fa2133af0abe89b716e01d3f3af69dc82b044fb46f50a949642137e84a7742d6285d904812d165d697ef283368dea5ff5c4cfd3d07e423389d7864b20d2048e6f853646b19c079254cd8398879ae1f0d449eedf93ee91547646a05393d56fd5392311afb9abef0d28c78cd44c4eaa596418fa6b93e", 0xc0}], 0x9, &(0x7f0000001c40)=[{0xb8, 0xff, 0x7fffffff, "f7c6e6c26c072bcd16e0c849927a7675365f8412c3214b1bdb549422ab72bff5552389eec462003b5d6a7cf80213b21e7b4d52bf6d6e4c57a5143e6a1507d7eabc09fb5e635bea7a4477b410a326c0d79b671adc5c851b43440af874e2bfd3472e708a1586d0f97300aedc4d10e679eaf64fccca2cf398e59e1b3b525ea6629cc1e3efb47a1eea27b8031f2f9d923a921a15743b185315d1bf40061e2f73c7eed9b4dd7cd3fcde38"}, {0x40, 0x1, 0x0, "affc1ff2902eff2afed191664edb743188a46aa469229b798aafcb6c5e1ac73918668b5723d07457d7d6bdd3983c"}], 0xf8}}, {{&(0x7f0000001d40)=@llc={0x1a, 0x310, 0x6, 0xa, 0x7, 0x6, @random="debf8c4c52cd"}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001dc0)="ea522c1054d6cac0d33fe9a2dedbb79ba1bcdcfc41b1bb02cda1ff93d3070c35b41ba981624bb9eb94a25ccfce16fab0", 0x30}, {&(0x7f0000001e00)="467ffb5487a90ef495dbe7d11e121a55d03f67ba4a682125f928b91aa2b246f6ea40be718a234e3c1f41079d426b062f74a3281bcc350575ddd7ac0ea4904bb4582067d9277ab15876636c475b3bfc8afb3d22dfc039c4305db8036fd81447729df2a531dd1419687fb9c8a672cee64eed2727e7c0bc9b3719aa522f414d3865", 0x80}, {&(0x7f0000001e80)="b5ad07f255b8113b6681fb82255fc6de68cabafb836aefb565a53e84d1fe1b69d950f02f46a8975dc6112002da0d87088da27cec822cbd0c8401955112d158f984b0fa070aeddadc3cf4982cac9ac1a6c3e3c5e9ca3111c6c68b17e3a5907b6d9644e62018222a588ad7", 0x6a}], 0x3, &(0x7f0000001f40)=ANY=[@ANYBLOB="e0000000000000000d01000009000000115e0a89474dc37dfd09a9be201b291492019f4618f827ffbd6c4c88a39bfc27bd4823976e233778372ea00dd52951c73e99e3eb44c16d60761df69ce76f883b1d5b31651678ee6af84ba4bbfa68751835168a9d925e66769bb42be7e71fa5ce098086c6510361e5fa2bda1e9d1f1bd7fd7a24e9b76e32758d0c4cb9719e84c3fed29fe6b1a52235559772d6436b318cab000b8e5e1fde951cba817733e6ee9eb056a2d3592887fb87c2577e341a6e92a7b884d5db160b90367e4d8b08825c79579ecc2f4f75a2fc60bc6a1f00000000"], 0xe0}}, {{&(0x7f0000002040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, &(0x7f0000003500)=[{&(0x7f00000020c0)="40503ae24f04ab43a7aeaa71783bf29eaf61ad66b8f406eeb323323f07ce128cd086bfca573476c82179c482c88f87632bd1ffe39c9705bf49883de848e4a12aec3276c47f770d43f802e0f677072d7fda3ba0c741021e1c79eb989c7a438f4753104d0e98da3a23e4df4718c9368c13e5edf31ed8de62cb235e3adc7cfa8d9f2793a01c2243c9a04593fb449647d5f29f2c6adfa2aef0e718309af690df8c61403ea51526494b5122cd784b20", 0xad}, {&(0x7f0000002180)="4f905742b63f466e443432d0a94a5ae50c929f5e5566a9da48fc1caf92d371017fcdcc477809b0c1139366f4883c2520c96cb37e3c9dcae4217905566992b39568b839a1e2a427917e2e2602d20bd6825b01bdeb895ad9de0092470b9a7de9b9537ed40be06b6d849397ddf11a0f99b9b0d06488743ffc9391300fb56cc5da978d65d7d19baf2dfa781b80cf6fa26bc357c4feac7d5d3ec9a30e", 0x9a}, {&(0x7f0000002240)="5aaa68b503161b55fae5a387de22f819a160b7568320fb903783baedc41da4a14754ee52dc589ad215d744cca2006241ddc88db32b05ec45d89b9eb63e4765d763b5d6c3bf01c4539b7bf841526925965d866fd68a712b4c02250eddb4170a7ecbfde892a6551e04904196f6dec8e0c13878f425ec23b6a92ddbfa9a2b1c52767853da6bd3e4a2c03b60d5b567993bcb69d0ec2668843b7aed97bc0ecd0404794c3bf8c0b01e59a172f26257f7bc7088f53db4a1f716588077c0e213f6620df070bb2d242f5be57285e29c367fc6627a2c24a23e2859eb1671a2ecd11fa0604d94663785df1fd92b71a0b8fdb180f716d1ec4598ca9d558e7781542e25357a6a8a7d71ff1dee91a6f39216152b3eff3b6f08eab9f0e5651f013e8c52324f9a330b40101804e9d9ef972636dd20032572b4d3247412a6afce48def9bd9124c8f1c940f45fb20ea1844b98e526f327904a798ea2083983803b60de73fa2249e02dc3dc61aa7652b22e6b1f9ef97550924d0e1350f8dfb4eef93fb326763df692174d4c5de1190afc940cf9fe58d407994c04177a6e0cef06e689dca568b1ac2f83a15c6f19904827ea6bd4afeca8c395e405ad7c3666c644a2ecc3152fcf42dcb365908d45f83acd98c6e6041746c60b574a56c8c0c38db14b1c5f2a98522e5835eb2ea46f0b70d1f4c633b57f3814299d72b530a4395e5c77f555c1320208ea8aca6654fdd26c7ff9b609008355270886410dd973bc0977eb80d192a95d37d97c24285b698dfbc6d08c86d12430236aaaccc4f0e07d8c5e18eb2ab767edd570ea4d4c61894ce3425ffc4357143e60946b5d8d98b85d5e8cfec3143bf397fb41eaf4e143a51e54d87b210366511d1a62828d7a33e4ca72e3e9b1260c62171af2d9a2fc662c507a8604d08380c877a0386fdfdaff89e70550d42faaaf3da03adffc02dadb3970d042a161821df8d1d6428d0a1032fa8abc942a0f79b26403b34161e1ed40228c84cad5e483baf3f8b003152c59b57a68aee3fb74c1802f33983c84aa25c19ba4664eecacf11592328efac205d8540cf446ebbf8c834183843c8d75d86b75e0c292ffce6957acb8ee7390e0c87f074b132aecf7ba991df6e5621879426f3109cea27bfccd1c071170bfb105a1c76784c2791237727858f1c49171fe10044ad0ff57b8cfb9a42869e8e5ec41d692e42b27a172bae051727c4ab9cb1fe9ce8cb6a6ee057f91da2966329736b0f2df9a338b8474dab9ae5698a1b84e6dc39d9337cda4617a0fe8032d663d8da7acc67178d30049cee2c94111ed409201b0d33ab297898a9b6c14d1a2643184588ba5e315bdf10ca280d57d3f41b203056a6bbaa94d3cea0049ae7328b59501507431e620d67a7d0a880afaf8e98ac751618a3bce856442eff4721a5437cce5419b2593ce8aab4dd8c9525ac63e62129b1f75f1e5551b3056943b6fea461920922355a1dba60734ec927e877cfbca27f67055c40085e1c3b3debfb063bdf1ba62cf0a2ff5977fee985cf8b55a40c8f59d34453672f4946ed96a28f89005ed2ee4b341a8832e5bcead247bd62a71d26fb7a82b8fb797a69b29c3e0d4c7a4523f0d2cc34249c01dda85512483879d0b135bd94e49282f515501608bd286bb0b621b32b37d11c42bbd4da5c750f102d727daf30d50bd5b155f451239de807181abef8e498b971024874eb0a808689da51c793ace4a0169966c2da6e6269a5aa43490809d50851b30269c2656118a42a86fa34ddb5e369a5d7f4e8d09d2719822faa72c611322d4d538719aa3afbb8e16c9e81b775f039ecc4caf5ae74a2c9d80ef1cab52707ca1ea4640cf46a0739d887a027f63772e6071dc186f4d727f2cffe0535026cf2cae69dc37745fefe3fcfa75648791a5d45ce56c9a89728ae7e83a8bfb7589522ab9df54fa5cabab7ccc9363074f28216b162e2a3805d134c49e01b23736b076a3e1849e56c2e0d7ba2abccb817c5ecc10eb3c1aa8a25936f3474e11b52241d20ba24288c879b87d96172d09731f7d847d687cfb76f2cd3038d6ee19fe6cd839775ececf3f9784b628393da095be1b00328616a31928da0e3a00d4560f59d502d586de7026dbfc7ec852a912f72e14d41d297dab35852a8378c7d04f1c6abe533137e42c6118cf1abfb12b23ab7a6613abab5f71a5866b4613ec136e548dfe8c1cf4ab6fcd84d7278cdea186598866fbbdb88cea8fef426e56099fd8ef3365834ea9de7b652369455c09f35041dd8cf55590f159d0aa8fb326b0e13b118a1b5f2f7fa9bd35ece338c849fad6ab71676ea746ea35e836cc95f295ed25875df104c8724b1abdb78c4d308fc5f8238dfab0fc85a5387d15734494abe51f9b8cab536390d9d477a057b376bc3cec46fa58b3c6a0101cf3f1724883844611bdb4c800b3d8362920f1c8f8a10b46a6c129fc8fd11efaf893206c4c5a7b794acc580064c150609cf43dac61ac46132f305da2fe3226dbdfd0b2ae833ad3b5c444abab259849e6ca50fdd51b864fefaa422abb7baf47962a3e9bf74f8c415d1ab2f506fd24cf33ad214d8fd4e4b9088ca923d800f6b261d916b3aa728130133107f6d8ec17eedf2911e600cdb0fe784326ca919c1eab282d096ef5dbdd7e039b7ca3f0aeca2bc962f4735a4a423c7aca5688e91ffefccc58171c370fd649381782fde1e310918c2a052ed63f337a10efa5ead41f65394f638a0a290c7a2f7019484a5d265f6661dcacdc0457408e214aa62d317fb048fc745de92b3f9bb1483761cf4c836da6f40a799e9cee1516e84e60e5d63417e2036e2ef1268d96a3be7edc72a0a07155bd50ba74f726761747fbc62a241150fd6a083e4e73a0a8fb58c952712fada074afa4598930459a67dd28e4c230298d14455dbc1e2d0ef27468ee171a6333da7d17d6c1c2522089c9e1f3d9cef539833a724dd5fb5cc9d4b81017e57e25ad86d42388b5123273c52a430b601ccbf616949914ae3b6a7995804d94aee41dc3d303d78a45d888b58d08a2ae16e2b69c5a299c6fe95fba6e3655abce5854140614a96b99dcef43c4ed77d092a0e9f99e9c9d7c1b1a489c2c49d35300220b6e22c943b5b487f44f85156e80b2f7d440b2b750bf31873c8f2a0722ca32d4c28c61fe590532604122f3889688f3a9c93ef4c957dcdc4045348f84023c6fab51ea9ea662fcc025bb3f561d5c9be20bd7239d25168d3a662db88bd25b36e387727e88a229d1e2a99601ea5de5e79ec3aa25f64db090a295cbd2b3cae1799addadc2e401c43e654f8516cf19381b2a1714aa3452d575abf62d0ead9b0214ae4bda32b789e4d6678b815d0910e8e84074877d57d462b3f43b63956c467aef87b70c426340fd5fe9128357f0c9852b90be6a5fcd0a6a2d15263c2715f6eb2355a31ce0da6b8ed6bebd78349e273fe254f230550ab87682824c8761c5f401a9d78978d5118c7bc78d021b164d2bc11679cab4a88dcef170be227ccf2d031909fd55e7830add81b3b3a5e186d26681ec20bbbde28b5dcab21d4e9850f83dc1ad0af18aac4f855582e20a1785680995f2e15a7f714fd7f5c687ca4ec7ba858d76e42c68fd820387f33a166a84f81af3a5dd10b9f12ed19e9d2fcbd4d59d9ca51d496d102e929d42ba0a4132bae7cab22fd980b3e1dac605326d567513ad73d7b6f79cb8b41b8a1025301fed5485c4e3fedad970eb83b4f4ec15b5ff22050468b23ab2a4351dcc84060d7d6ba830d424a3d449e735d078855a1c0840914965317342aa229e3a4a2240efd8785db0ded7defc2399556314dddcacba1a4209563856c7d317dedbdfdcfe37947efa26f0380c09f3556feba5259075c96c94acce7856c55de8777c90a57cb696ab325d36a6c81fdf0b83de347af09d135f4fbd2812504575cfc3f635c9648f0c925c3e6f0d544df3ea2849ec01719c2ba744ce3b5d9515ecc9a23a938caa4d7b1ad4dd28063f6db96c1ab5d2c3b97a76a6958c1ae4267aa09d1af088d7d0fe70eec85d332499c612ab05f7e9791efb4f75c13fea0622da2b6b51883cc2c5582896cb300a0fbac1cebf55da31184a8c5ed87926e1fbc6854c57f88dac86d696abb7e97feaec0675e5d79b83ce5d269cd84f1f72114ebf80810ccb3794b7eaaaa21e0fab82805c8b575457f00fc0cd361ce726f8b3f2862ad75651df47eb45672e172353f23e79cb4f506fb33e93d0399b2aeb41a1dfbfc31536b9b0e9050fa2f9205c5d31fa08152fbdb582e6bebba3f3bec028485afb6c3cc0e5ef6d0b38ae1548fd77fc0a664275cada7c6cb84bb0176e57513f18e5ddc6c9fcb5c4b38f73b741f56f9052d65fc99457712c034bccc94a47d8f6320394543c77f83686775e5cfd78fc0e0705e138822877bb3af41f96c0e6051fe02e8a50bffb8a4d6b5c2912d5decad4dce77c5a9dbb297e024990a7ef5151be80f3e62acc425961255261f6e3d0941a87d8d63e3e86c92c4ab5a26a8054852408357486136938c5896768ce9337e9254028403362e6913cc724411fb5cc83833878f8430c70e10035f1ec24706debdcb1cd5f9ac3d905d33400fb66501d27bba4792b70846e3c3745a04ea5435bc06644b309ab4a063136442118e28b6ac18fa53db338cdf800a526ad941b506e9f0026561f069224facd49b7f3c8585254af53d2395a54a6b9586af0e02f119447894c22d93236b5a1db542958e04beec3e7e71734484110e717a8b9e178fca87e7ebf52e2a0d81bab7327238bbeabbba00e5f4c7bb1fc785e411fca01b1f2ff5613732e22757908e78cbe0787d056a4192769f2d446fdd84eb6284fc4ab7bcd7957fdedad534582151c1aa0c9078c6feb7941017974582e0ea1fd48269032de88a9bece48208b0b53b2e384b7de8fd221ef471b53ab85eb2354021f4dd8ebe5d6923dfa46b899e6a2f94bc150c49e974ee6a2361ab79350868ba9cbacb250cf0813c21a5e020b073c995ee1789dc4b66c0e25c4351677829ae821eec436f237ec42eb3094088fbe07c1725dca7b4249229286502e7557716be512b0e60bebab4492281f218aca08e54c29a48b0b1b5335274910370febe69ea7ebf723783ca91fbdf0fd46f2fdc4f7a6d24bad9f3825f0d8792b8ea385c888b6abd539d3bb22b8ab74a1c2468b78e4168dd0e16f09433f6ff850f4eb712ecd9b1b32bec9c5c5346bfec9bc699d6e045101f5190ff353c3ac5a9242e9ca3db89b9379fcc780887ef37f233afb9dd0e949951ddfe77638fd68d8481e071b1658be0e0d978cbc5aa6fed7c475f166ae69259e93c63c293da35686242413faf348c74cacb7339533b2d6bf7975583d5d7dd0414b352c07d5f4104937a0716c43cdc500c6b00cd4aedbad3665f897fd09be610d620e790376ba24bae474a07871be3cb25f823be82d25d35fe6ebf14f5c44a0e60e1737281367e90b548fa5f8063f2aec774acf66dbb97adb52bb82151d1ce2c903daafe2fe39c5fba33514eafd691e546767fd0ed825172f983221c78095d26e9f9d912610d20b7daefc17ed45d14f066d00f30451cc8b91d2832ba0130a22c574130ab789ad1c823211fd7a8585ad0be26d15b871d182fe3d321b0576b0e0be1f37a8822196dd40fad43673fb12091497cfd1e6cd4b7097fabe971003a317c695ddee30d58210f0ac0a73c9b4649174633f4109a394a144337769950f0f636816b344a381acf3d838edce874cfe7b1967db680b8f7fb2de91572c7dbff6b04ab8a53fdef69e22c88a117d82205dc1815a3bf95ed908f71f009c0e", 0x1000}, {&(0x7f0000003240)="0afd022421d23713c70a7a9d7f42d5e8ee6b92c1670731272a036a579aad349f9e0c65150e85d2eadf3f10693304b0063ed08d3acce6ce4024f68facc5d2f1bfdc7b1ee2a946306aac685d0e89923365a78254aa883d6ba2fb2a9e39c71fd291fbf492781b463a79159bc9", 0x6b}, {&(0x7f00000032c0)="3ebaf519e8ec50b4d7479e19c9240fc2712b", 0x12}, {&(0x7f0000003300)="82a63aa84a4bae8de0b8e38d2d5cb5f8f2f3cb3bcc0b7f024160af58129fd9f506d815253c44c18ce530c6de9fbf49845ea3b3654080daac15a7e2cd0666878e733295cd50ef33861d42a74eaba3dd64dd33cc21752c1612338a9e71969498f84e52a108f857fbfd997342d57d04bee145619a84f475e63e7c772cec46fb544797653702308f1c43149701d0e2b7b6b536ba54840dd24180d3dbdcbfa62939a1bec83dfc417061a4dcc3de7afaa065bc71eabd617f214437", 0xb8}, {&(0x7f00000033c0)="c31114a1de063d42a0f3fb096a302436912e713bfe59cbd66b04ca92534e5de6d7d34bb69a8cd29ca554ae4fb94432cd5efd7e723e61dff700b45468", 0x3c}, {&(0x7f0000003400)="8d2f2084f9f497cf4eed9c42424edd0f0d2c907fc060b6907e60bf79e4e0aea838785f9bfb538918039d464aba7b192ea580a8190dd9e80a2ae2b1cd1644b78544d00064335c8f152c6182c3b3ecaa902c677b1249f4a42ba466504e2d66a122b9582e69c2150c605463ffb527eb48a786b17aaa2b67ca341fec798f51ba94aa76e5ec439a9bcf76361c95e422f0b1452c907dbb5f9389a109cba374c393ada9a611334acd69f9da3b0178e60b2e4e5a27db3bbf91150aca58bcae2002b9d05983d42b44580afb50e05b8348ab55b52a889984936edcd865174b9812fca579b73fa19b2c74601f2c02ea330f4430d39033cfc63fdd7701", 0xf7}], 0x8, &(0x7f0000003580)=[{0x20, 0x10e, 0x6, "e4884de7b1e1dff464"}], 0x20}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f00000035c0)="f11133c07e9e8f1292d2ee13b000cc080b9ea20afcc1e90d28d6f26a41db9e20e2f0a5dcc783a69971e8f4423801377c9cab86f52f44a3f74c96f8b4c9c3fec61a4d20ac44ec74ff9b8dd8fb6c0257c074cacb9bded3eeb1ffdc0e1e84b0e6b4e462b508d89b216f7eb8684bf7", 0x6d}], 0x1, &(0x7f0000003680)=[{0x100, 0x109, 0x8001, "5b8816a536c8f93f83db779d6f903798931332f60549d2c61e6f59bbd7fae1d654f851b510aeab9dc6fbb12d8ef83eb9edccbe6fd3b8df68abd35014aa1d9c2d132e00d9e9269d6b96d5d4d06a8627cde117ce95d9da06410f6847dbb456103c7b87215951e1ab1a73b110bc748f170bb050d9f9ffe19c403f8f453331fdf46a326c610d63c656720a483103242c0c39c613b9a80ed01871031e918a1bfd02134a412f3e440af86ee168c6b3a07b25505119afe9d67d7c78786cd855e92b2d261097ffb6efdb0d65ec30f9f760a4e2f041f8e483c00ee5effb3189b641ea6ae7099992d780d5805c1a3f"}, {0x98, 0x116, 0x9, "b037ebce0c76e26b2afad197f178a8b15d2e883c6ac20b29487fd3bc2e2c897bd892580f6be55d3b505b3ac8c4fb8e4440f9edfd6a84bfa8e83e9c0390ad27bb7825bb0cf229fa66547941e53f9e46689b3a831487984ce06665b246a4f91a447385f514a2b26ab8f35b386df972958af46d63a74adb0cbb9e4803bae38dbb6b27"}, {0x48, 0x29, 0x1ff, "8b8b998a15eb6798fc3e6636ebcd4ded0698a6666dc2a65265cc7aae7ae137c160984c17eaa87d884eb7a487c176b952ecdd5b"}, {0x60, 0x0, 0xfffffffd, "b68320dfefc74e7f107c3b3c306d907f1f8d7d95099b7728f516ce0fed5c322e3297d566d694f3cf638d8b441b882ffe1ae8d5a29e7623df7d1e034cbb3e884acc91f51df2725613b352b30f5354"}, {0x38, 0x102, 0x9, "b8810eba58bf41339d802df3a3c8f83f9cfcdfe4f9c82857a7ca1cbc020f0b95ccd159"}], 0x278}}], 0x5, 0x805) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={0x14, r3, 0x201, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "afe428970548fc3c7b00040000000000fcff00ec00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 151.515944ms ago: executing program 3 (id=2448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x9, r0, 0x0, 0x7, 0x9) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xc}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x66}, 0x28) 60.17376ms ago: executing program 3 (id=2449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x200, 0x70bd2a, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffc}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a8}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c000100080c10000000000000000000", 0x58}], 0x1) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="abba97f0df"], 0x10}, 0x1, 0x0, 0x0, 0x4008885}, 0x4008000) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de", @ANYRES64=0x0, @ANYBLOB="00ca"], 0x48}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0xeb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=2450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e", @ANYRESDEC=r0, @ANYBLOB="0000003c00000000628ce0608049000800000000000000000000000000000700000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb0000924a0000000000000000000000006c"], 0x23c}}, 0x0) kernel console output (not intermixed with test programs): HW filter on device bond0 [ 256.837685][T12177] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1588'. [ 256.897301][T12022] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.904967][T12180] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1588'. [ 256.919313][ T9179] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.926475][ T9179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.968048][ T9179] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.975309][ T9179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.068294][ T5863] Bluetooth: hci0: command tx timeout [ 257.377363][T12196] ipvlan0: entered promiscuous mode [ 257.385694][T12196] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 257.398485][T12196] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 257.629548][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 257.812073][T12022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.961903][T12022] veth0_vlan: entered promiscuous mode [ 257.970197][T12211] IPv6: NLM_F_REPLACE set, but no existing node found! [ 257.997356][T12022] veth1_vlan: entered promiscuous mode [ 258.079005][T12022] veth0_macvtap: entered promiscuous mode [ 258.107199][T12022] veth1_macvtap: entered promiscuous mode [ 258.163487][T12022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.203422][T12022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.236582][ T9179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.253721][ T9179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.278358][ T9179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.298945][ T9179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.447616][ T9191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.467274][ T9191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.523931][T12220] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 258.548314][T12220] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 258.590523][ T9192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.599137][ T9192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.803044][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1601'. [ 258.812888][T12229] netlink: 'syz.1.1601': attribute type 1 has an invalid length. [ 258.821949][T12229] netlink: 'syz.1.1601': attribute type 2 has an invalid length. [ 258.829989][T12229] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1601'. [ 259.077684][T12241] netlink: 'syz.1.1605': attribute type 9 has an invalid length. [ 259.133557][T12241] netlink: 'syz.1.1605': attribute type 6 has an invalid length. [ 259.509509][T12258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1610'. [ 259.536650][T12258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1610'. [ 259.693492][T12261] xt_CT: No such helper "snmp" [ 259.813420][T12258] geneve2: entered allmulticast mode [ 259.997117][ T9191] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.214946][ T9191] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.233244][ T9191] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.263349][ T9191] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.452344][ T9179] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.840013][ T9179] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.016710][ T9179] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.264766][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.275808][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.288393][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.305176][ T9179] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.317444][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.331090][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.807325][ T9179] bridge_slave_1: left allmulticast mode [ 261.814968][ T9179] bridge_slave_1: left promiscuous mode [ 261.821810][ T9179] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.860728][ T9179] bridge_slave_0: left allmulticast mode [ 261.866426][ T9179] bridge_slave_0: left promiscuous mode [ 261.888195][ T9179] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.078316][T12297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1618'. [ 262.136051][T12311] SET target dimension over the limit! [ 262.151554][T12311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1618'. [ 262.504667][ T9179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.517048][ T9179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.527334][ T9179] bond0 (unregistering): Released all slaves [ 262.779633][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 262.876254][T12339] netlink: 'syz.1.1628': attribute type 14 has an invalid length. [ 262.891970][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'. [ 263.165657][T12354] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1633'. [ 263.175639][T12295] chnl_net:caif_netlink_parms(): no params data found [ 263.288156][ T9179] hsr_slave_0: left promiscuous mode [ 263.357965][ T9179] hsr_slave_1: left promiscuous mode [ 263.364149][ T9179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.378703][ T9179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.388260][ T5863] Bluetooth: hci0: command tx timeout [ 263.427392][ T9179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.445794][ T9179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.466930][T12363] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1636'. [ 263.516849][ T9179] veth1_macvtap: left promiscuous mode [ 263.528506][ T9179] veth0_macvtap: left promiscuous mode [ 263.534282][ T9179] veth1_vlan: left promiscuous mode [ 263.545484][T12369] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 263.554862][ T9179] veth0_vlan: left promiscuous mode [ 263.563217][T12369] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1638'. [ 263.572854][T12369] NCSI netlink: No device for ifindex 0 [ 264.141388][ T9179] team0 (unregistering): Port device team_slave_1 removed [ 264.186589][ T9179] team0 (unregistering): Port device team_slave_0 removed [ 264.591508][T12353] netlink: 'syz.1.1632': attribute type 12 has an invalid length. [ 264.724553][T12380] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 264.922933][T12394] Cannot find add_set index 0 as target [ 264.945885][T12392] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1643'. [ 265.039931][T12295] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.072974][T12295] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.082313][T12295] bridge_slave_0: entered allmulticast mode [ 265.091166][T12295] bridge_slave_0: entered promiscuous mode [ 265.106490][T12295] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.124126][T12295] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.138060][T12295] bridge_slave_1: entered allmulticast mode [ 265.146072][T12295] bridge_slave_1: entered promiscuous mode [ 265.322709][T12295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.342823][T12295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.468117][ T5863] Bluetooth: hci0: command tx timeout [ 265.501841][T12295] team0: Port device team_slave_0 added [ 265.561840][T12295] team0: Port device team_slave_1 added [ 265.742590][T12295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.760404][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.876134][T12295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.888692][T12437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1657'. [ 265.891790][T12295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.905276][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.934622][T12295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.099559][T12295] hsr_slave_0: entered promiscuous mode [ 266.115322][T12295] hsr_slave_1: entered promiscuous mode [ 266.122293][T12295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.130540][T12295] Cannot create hsr debugfs directory [ 266.189992][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 266.221919][T12446] netlink: 'syz.4.1660': attribute type 2 has an invalid length. [ 266.624232][T12456] unsupported nlmsg_type 40 [ 267.178415][T12483] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 267.226020][T12483] bond2: entered promiscuous mode [ 267.235732][T12483] bond2: entered allmulticast mode [ 267.242646][T12483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.315640][T12489] netlink: 'syz.3.1675': attribute type 2 has an invalid length. [ 267.351325][T12480] netlink: 'syz.4.1670': attribute type 1 has an invalid length. [ 267.361028][T12492] netlink: 'syz.4.1670': attribute type 1 has an invalid length. [ 267.417362][T12490] ip6tnl3: entered promiscuous mode [ 267.422989][T12490] ip6tnl3: entered allmulticast mode [ 267.434796][T12490] team0: Device ip6tnl3 is of different type [ 267.548740][ T51] Bluetooth: hci0: command tx timeout [ 267.703306][T12505] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.727334][ T9192] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 267.742523][ T9192] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 267.779431][ T9192] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 267.795560][ T9192] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 267.844427][T12505] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.882505][T12295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.893691][T12295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.904160][T12295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.920075][T12505] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.934563][T12295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.995051][T12505] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.221606][T12295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.263151][ T9179] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.330783][ T9179] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.362615][ T9192] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.396424][T12295] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.442763][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.449984][ T9192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.473697][ T9179] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.531941][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.539155][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.565322][T12540] __nla_validate_parse: 6 callbacks suppressed [ 268.565339][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'. [ 268.652442][T12543] sctp: [Deprecated]: syz.3.1686 (pid 12543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.652442][T12543] Use struct sctp_sack_info instead [ 268.870124][T12552] netlink: 'syz.3.1688': attribute type 7 has an invalid length. [ 269.104043][T12295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.157704][T12571] netlink: 'syz.1.1694': attribute type 10 has an invalid length. [ 269.183063][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'. [ 269.258190][T12295] veth0_vlan: entered promiscuous mode [ 269.278393][T12295] veth1_vlan: entered promiscuous mode [ 269.331225][T12582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1696'. [ 269.343061][T12295] veth0_macvtap: entered promiscuous mode [ 269.363422][T12295] veth1_macvtap: entered promiscuous mode [ 269.407000][T12295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.441511][T12295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.493495][ T3552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.503056][ T3552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.541763][ T3552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.557184][ T3552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.628160][ T51] Bluetooth: hci0: command 0x0419 tx timeout [ 269.759910][ T9192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.782768][ T9192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.819890][T12571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.825001][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.843377][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.306265][T12608] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 270.324085][T12608] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1707'. [ 270.450424][T12616] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 270.695971][T12629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1714'. [ 270.807452][T12634] netlink: 'syz.1.1716': attribute type 1 has an invalid length. [ 270.868742][T12634] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 271.123436][T12626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1715'. [ 271.174407][T12630] SET target dimension over the limit! [ 271.184295][ T9177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.210400][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 271.242472][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'. [ 271.526764][ T9177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.927126][T12655] netlink: 'syz.3.1719': attribute type 11 has an invalid length. [ 271.945516][T12655] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1719'. [ 272.324422][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.335105][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.344927][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.353800][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.363372][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.473365][T12663] Bluetooth: MGMT ver 1.23 [ 272.561463][ T9177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.586453][ T3552] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.604802][ T3552] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.623963][ T9172] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.640148][ T9172] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.693555][T12665] FAULT_INJECTION: forcing a failure. [ 272.693555][T12665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.694968][ T9177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.717358][T12665] CPU: 1 UID: 0 PID: 12665 Comm: syz.2.1722 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 272.717387][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.717424][T12665] Call Trace: [ 272.717431][T12665] [ 272.717439][T12665] dump_stack_lvl+0x189/0x250 [ 272.717467][T12665] ? __pfx____ratelimit+0x10/0x10 [ 272.717490][T12665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.717511][T12665] ? __pfx__printk+0x10/0x10 [ 272.717535][T12665] ? __might_fault+0xb0/0x130 [ 272.717570][T12665] should_fail_ex+0x414/0x560 [ 272.717609][T12665] _copy_from_user+0x2d/0xb0 [ 272.717632][T12665] __sys_bpf+0x1ed/0x860 [ 272.717652][T12665] ? __pfx___sys_bpf+0x10/0x10 [ 272.717680][T12665] ? ksys_write+0x22a/0x250 [ 272.717705][T12665] ? __pfx_ksys_write+0x10/0x10 [ 272.717736][T12665] __x64_sys_bpf+0x7c/0x90 [ 272.717767][T12665] do_syscall_64+0xfa/0x3b0 [ 272.717790][T12665] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.717812][T12665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.717831][T12665] ? clear_bhb_loop+0x60/0xb0 [ 272.717852][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.717871][T12665] RIP: 0033:0x7f0c57b8e929 [ 272.717888][T12665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.717904][T12665] RSP: 002b:00007f0c58a30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.717924][T12665] RAX: ffffffffffffffda RBX: 00007f0c57db5fa0 RCX: 00007f0c57b8e929 [ 272.717937][T12665] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 272.717949][T12665] RBP: 00007f0c58a30090 R08: 0000000000000000 R09: 0000000000000000 [ 272.717961][T12665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.717973][T12665] R13: 0000000000000001 R14: 00007f0c57db5fa0 R15: 00007fffef271968 [ 272.718004][T12665] [ 273.118730][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 273.209848][T12662] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 273.451927][ T9177] bridge_slave_1: left allmulticast mode [ 273.460033][ T9177] bridge_slave_1: left promiscuous mode [ 273.479536][ T9177] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.517581][ T9177] bridge_slave_0: left allmulticast mode [ 273.525582][ T9177] bridge_slave_0: left promiscuous mode [ 273.533859][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.672237][T12710] FAULT_INJECTION: forcing a failure. [ 273.672237][T12710] name failslab, interval 1, probability 0, space 0, times 0 [ 273.691925][T12710] CPU: 1 UID: 0 PID: 12710 Comm: syz.2.1735 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 273.691955][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.691966][T12710] Call Trace: [ 273.691974][T12710] [ 273.691981][T12710] dump_stack_lvl+0x189/0x250 [ 273.692008][T12710] ? __pfx____ratelimit+0x10/0x10 [ 273.692033][T12710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.692056][T12710] ? __pfx__printk+0x10/0x10 [ 273.692087][T12710] ? __pfx___might_resched+0x10/0x10 [ 273.692115][T12710] should_fail_ex+0x414/0x560 [ 273.692146][T12710] should_failslab+0xa8/0x100 [ 273.692172][T12710] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 273.692196][T12710] ? __get_vm_area_node+0x13f/0x300 [ 273.692223][T12710] __get_vm_area_node+0x13f/0x300 [ 273.692250][T12710] __vmalloc_node_range_noprof+0x301/0x12f0 [ 273.692276][T12710] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 273.692298][T12710] ? is_bpf_text_address+0x26/0x2b0 [ 273.692339][T12710] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.692361][T12710] ? __might_fault+0xb0/0x130 [ 273.692381][T12710] ? __pfx_aa_get_newest_label+0x10/0x10 [ 273.692407][T12710] ? _parse_integer_limit+0x1ae/0x1f0 [ 273.692439][T12710] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 273.692458][T12710] __vmalloc_noprof+0xb1/0xf0 [ 273.692483][T12710] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 273.692505][T12710] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 273.692531][T12710] bpf_prog_alloc+0x3c/0x1a0 [ 273.692562][T12710] bpf_prog_load+0x735/0x1930 [ 273.692596][T12710] ? __pfx_bpf_prog_load+0x10/0x10 [ 273.692636][T12710] ? bpf_lsm_bpf+0x9/0x20 [ 273.692654][T12710] ? security_bpf+0x7e/0x300 [ 273.692680][T12710] __sys_bpf+0x5f1/0x860 [ 273.692699][T12710] ? __pfx___sys_bpf+0x10/0x10 [ 273.692731][T12710] ? ksys_write+0x22a/0x250 [ 273.692757][T12710] ? __pfx_ksys_write+0x10/0x10 [ 273.692787][T12710] __x64_sys_bpf+0x7c/0x90 [ 273.692815][T12710] do_syscall_64+0xfa/0x3b0 [ 273.692841][T12710] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.692864][T12710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.692882][T12710] ? clear_bhb_loop+0x60/0xb0 [ 273.692905][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.692922][T12710] RIP: 0033:0x7f0c57b8e929 [ 273.692940][T12710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.692958][T12710] RSP: 002b:00007f0c58a30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.692979][T12710] RAX: ffffffffffffffda RBX: 00007f0c57db5fa0 RCX: 00007f0c57b8e929 [ 273.692993][T12710] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 273.693006][T12710] RBP: 00007f0c58a30090 R08: 0000000000000000 R09: 0000000000000000 [ 273.693019][T12710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.693031][T12710] R13: 0000000000000001 R14: 00007f0c57db5fa0 R15: 00007fffef271968 [ 273.693062][T12710] [ 273.693295][T12710] syz.2.1735: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 274.006663][T12710] CPU: 1 UID: 0 PID: 12710 Comm: syz.2.1735 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 274.006695][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.006705][T12710] Call Trace: [ 274.006718][T12710] [ 274.006726][T12710] dump_stack_lvl+0x189/0x250 [ 274.006755][T12710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.006774][T12710] ? __pfx__printk+0x10/0x10 [ 274.006796][T12710] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 274.006819][T12710] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 274.006842][T12710] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 274.006866][T12710] warn_alloc+0x214/0x310 [ 274.006895][T12710] ? __pfx_warn_alloc+0x10/0x10 [ 274.006918][T12710] ? __get_vm_area_node+0x13f/0x300 [ 274.006943][T12710] ? __get_vm_area_node+0x2b5/0x300 [ 274.006969][T12710] __vmalloc_node_range_noprof+0x326/0x12f0 [ 274.006993][T12710] ? is_bpf_text_address+0x26/0x2b0 [ 274.007035][T12710] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 274.007055][T12710] ? __might_fault+0xb0/0x130 [ 274.007073][T12710] ? __pfx_aa_get_newest_label+0x10/0x10 [ 274.007097][T12710] ? _parse_integer_limit+0x1ae/0x1f0 [ 274.007127][T12710] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 274.007142][T12710] __vmalloc_noprof+0xb1/0xf0 [ 274.007164][T12710] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 274.007186][T12710] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 274.007209][T12710] bpf_prog_alloc+0x3c/0x1a0 [ 274.007230][T12710] bpf_prog_load+0x735/0x1930 [ 274.007259][T12710] ? __pfx_bpf_prog_load+0x10/0x10 [ 274.007298][T12710] ? bpf_lsm_bpf+0x9/0x20 [ 274.007316][T12710] ? security_bpf+0x7e/0x300 [ 274.007341][T12710] __sys_bpf+0x5f1/0x860 [ 274.007360][T12710] ? __pfx___sys_bpf+0x10/0x10 [ 274.007389][T12710] ? ksys_write+0x22a/0x250 [ 274.007412][T12710] ? __pfx_ksys_write+0x10/0x10 [ 274.007439][T12710] __x64_sys_bpf+0x7c/0x90 [ 274.007463][T12710] do_syscall_64+0xfa/0x3b0 [ 274.007486][T12710] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.007507][T12710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.007524][T12710] ? clear_bhb_loop+0x60/0xb0 [ 274.007545][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.007562][T12710] RIP: 0033:0x7f0c57b8e929 [ 274.007578][T12710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.007594][T12710] RSP: 002b:00007f0c58a30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.007612][T12710] RAX: ffffffffffffffda RBX: 00007f0c57db5fa0 RCX: 00007f0c57b8e929 [ 274.007625][T12710] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 274.007636][T12710] RBP: 00007f0c58a30090 R08: 0000000000000000 R09: 0000000000000000 [ 274.007647][T12710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.007657][T12710] R13: 0000000000000001 R14: 00007f0c57db5fa0 R15: 00007fffef271968 [ 274.007694][T12710] [ 274.007715][T12710] Mem-Info: [ 274.298658][T12710] active_anon:3875 inactive_anon:0 isolated_anon:0 [ 274.298658][T12710] active_file:1680 inactive_file:39919 isolated_file:0 [ 274.298658][T12710] unevictable:768 dirty:69 writeback:0 [ 274.298658][T12710] slab_reclaimable:12440 slab_unreclaimable:133555 [ 274.298658][T12710] mapped:31132 shmem:1364 pagetables:957 [ 274.298658][T12710] sec_pagetables:0 bounce:0 [ 274.298658][T12710] kernel_misc_reclaimable:0 [ 274.298658][T12710] free:1289031 free_pcp:18940 free_cma:0 [ 274.344056][T12710] Node 0 active_anon:15500kB inactive_anon:0kB active_file:6720kB inactive_file:159472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124528kB dirty:276kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14056kB pagetables:3700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 274.395541][T12710] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 274.463101][T12710] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.502179][T12710] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 274.514884][T12710] Node 0 DMA32 free:1241972kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15548kB inactive_anon:0kB active_file:6720kB inactive_file:157920kB unevictable:1536kB writepending:276kB present:3129332kB managed:2558304kB mlocked:0kB bounce:0kB free_pcp:59428kB local_pcp:38660kB free_cma:0kB [ 274.547694][T12710] lowmem_reserve[]: 0 0 1 1 1 [ 274.553118][T12710] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1552kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 274.582390][T12710] lowmem_reserve[]: 0 0 0 0 0 [ 274.587140][T12710] Node 1 Normal free:3898768kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16920kB local_pcp:8032kB free_cma:0kB [ 274.636685][T12710] lowmem_reserve[]: 0 0 0 0 0 [ 274.651970][T12710] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 274.675010][T12710] Node 0 DMA32: 405*4kB (UME) 666*8kB (UM) 311*16kB (M) 596*32kB (UME) 166*64kB (UM) 83*128kB (UME) 86*256kB (UM) 50*512kB (UM) 28*1024kB (UM) 6*2048kB (UME) 269*4096kB (M) = 1242644kB [ 274.693930][T12710] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 274.712043][T12710] Node 1 Normal: 136*4kB (UME) 52*8kB (UME) 57*16kB (UME) 122*32kB (UME) 38*64kB (UME) 5*128kB (UME) 3*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3898768kB [ 274.730584][T12710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.740295][T12710] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.749808][T12710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.759458][T12710] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.769036][T12710] 42960 total pagecache pages [ 274.773776][T12710] 0 pages in swap cache [ 274.778295][T12710] Free swap = 124996kB [ 274.782465][T12710] Total swap = 124996kB [ 274.786619][T12710] 2097051 pages RAM [ 274.790555][T12710] 0 pages HighMem/MovableOnly [ 274.795259][T12710] 425433 pages reserved [ 274.799533][T12710] 0 pages cma reserved [ 274.906937][ T9177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.919702][ T9177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.930827][ T9177] bond0 (unregistering): Released all slaves [ 275.100466][ T9172] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.118227][ T9172] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 275.168354][ T9172] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.176973][ T9172] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 275.186000][ T9172] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.198492][ T9172] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 275.281814][T12734] bond3: entered promiscuous mode [ 275.287873][T12734] bond3: entered allmulticast mode [ 275.293371][T12734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.313079][ T9172] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.321810][ T9172] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 275.338124][T12659] chnl_net:caif_netlink_parms(): no params data found [ 275.497681][T12743] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 275.510942][T12743] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 275.605601][ T9177] hsr_slave_0: left promiscuous mode [ 275.642560][ T9177] hsr_slave_1: left promiscuous mode [ 275.651650][T12752] __nla_validate_parse: 1 callbacks suppressed [ 275.651669][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'. [ 275.668818][ T9177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.668890][ T9177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.685921][ T9177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.713486][ T9177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.769501][ T9177] veth1_macvtap: left promiscuous mode [ 275.775116][ T9177] veth0_macvtap: left promiscuous mode [ 275.781511][ T9177] veth1_vlan: left promiscuous mode [ 275.786901][ T9177] veth0_vlan: left promiscuous mode [ 275.795650][ T30] audit: type=1804 audit(1752182765.110:8): pid=12758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1751" name="memory.events" dev="tmpfs" ino=1959 res=1 errno=0 [ 275.817521][ T30] audit: type=1800 audit(1752182765.110:9): pid=12758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1751" name="memory.events" dev="tmpfs" ino=1959 res=0 errno=0 [ 276.366636][ T9177] team0 (unregistering): Port device team_slave_1 removed [ 276.443047][ T9177] team0 (unregistering): Port device team_slave_0 removed [ 276.507177][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 276.931346][T12659] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.948014][T12659] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.962126][T12659] bridge_slave_0: entered allmulticast mode [ 276.970724][T12659] bridge_slave_0: entered promiscuous mode [ 276.999674][T12659] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.006846][T12659] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.038580][T12659] bridge_slave_1: entered allmulticast mode [ 277.046439][T12659] bridge_slave_1: entered promiscuous mode [ 277.159492][T12776] netlink: 'syz.3.1756': attribute type 13 has an invalid length. [ 277.184075][T12776] netlink: 'syz.3.1756': attribute type 17 has an invalid length. [ 277.223640][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1756'. [ 277.273285][T12776] gretap0: refused to change device tx_queue_len [ 277.291509][T12776] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 277.367659][T12659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.397222][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1756'. [ 277.428142][T12659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.669281][T12795] netlink: 'syz.1.1763': attribute type 2 has an invalid length. [ 277.672771][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 277.679681][T12659] team0: Port device team_slave_0 added [ 277.702163][T12795] netlink: 'syz.1.1763': attribute type 1 has an invalid length. [ 277.730948][T12659] team0: Port device team_slave_1 added [ 277.864613][T12800] openvswitch: netlink: EtherType 10 is less than min 600 [ 277.900042][T12659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.907022][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.963682][T12659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.984232][T12659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.992313][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.038434][T12659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.217948][T12818] netlink: 'syz.2.1769': attribute type 4 has an invalid length. [ 278.220140][T12659] hsr_slave_0: entered promiscuous mode [ 278.238576][T12659] hsr_slave_1: entered promiscuous mode [ 278.240938][T12818] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1769'. [ 278.245475][T12659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.267172][T12659] Cannot create hsr debugfs directory [ 279.256950][T12849] netdevsim0: renamed from gre0 [ 279.266277][T12849] netdevsim0: entered promiscuous mode [ 279.294123][T12849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1772'. [ 279.303373][T12849] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 279.484983][T12863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1778'. [ 279.549395][T12863] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1778'. [ 279.598990][T12863] hsr_slave_0: left promiscuous mode [ 279.605238][T12863] hsr_slave_1: left promiscuous mode [ 279.626622][T12866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1779'. [ 281.559379][T12873] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 281.569424][T12873] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 281.579094][T12873] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 281.702207][T12896] __nla_validate_parse: 1 callbacks suppressed [ 281.702227][T12896] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1788'. [ 281.728639][T12896] netlink: 1532 bytes leftover after parsing attributes in process `syz.3.1788'. [ 281.768428][T12896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1788'. [ 281.956631][T12659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.976777][T12659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.014652][T12659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.034272][T12659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.076066][T12924] netlink: 'syz.4.1793': attribute type 3 has an invalid length. [ 282.100851][T12924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 282.128934][T12924] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1793'. [ 282.225322][T12659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.260754][T12659] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.282509][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.289753][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.316404][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.323671][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.809994][T12659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.856817][T12659] veth0_vlan: entered promiscuous mode [ 282.882909][T12659] veth1_vlan: entered promiscuous mode [ 283.003402][T12659] veth0_macvtap: entered promiscuous mode [ 283.043014][T12659] veth1_macvtap: entered promiscuous mode [ 283.220962][T12973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1805'. [ 283.229176][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'. [ 283.265932][T12659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.286725][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'. [ 283.321828][T12659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.363185][ T3552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.423956][ T3552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.444642][ T3552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.514833][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 283.524152][ T3552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.593760][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 283.832006][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.856669][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.956483][T12993] batman_adv: batadv0: Interface deactivated: gretap2 [ 284.197462][ T9192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.216307][ T9192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.248371][T13009] syzkaller1: entered promiscuous mode [ 284.261996][T13009] syzkaller1: entered allmulticast mode [ 284.421123][T13014] netlink: 'syz.4.1818': attribute type 10 has an invalid length. [ 284.651175][T13019] tipc: Cannot configure node identity twice [ 284.663775][T13019] tipc: Cannot configure node identity twice [ 284.697397][T13020] tipc: Cannot configure node identity twice [ 284.717333][T13020] tipc: Cannot configure node identity twice [ 284.951108][T13046] netlink: 'syz.4.1825': attribute type 5 has an invalid length. [ 285.177702][T13068] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 285.818750][T13096] netlink: 'syz.2.1838': attribute type 10 has an invalid length. [ 285.889355][T13096] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 286.200227][ T3552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.291304][ T3552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.367558][ T3552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.460883][ T3552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.553702][ T3552] bridge_slave_1: left allmulticast mode [ 286.560582][ T3552] bridge_slave_1: left promiscuous mode [ 286.566492][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.575739][ T3552] bridge_slave_0: left allmulticast mode [ 286.581645][ T3552] bridge_slave_0: left promiscuous mode [ 286.587346][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.203385][T13123] __nla_validate_parse: 14 callbacks suppressed [ 287.203405][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'. [ 287.231148][T13123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1845'. [ 287.242708][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.300926][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.331575][ T3552] bond0 (unregistering): Released all slaves [ 287.396465][T13131] netlink: 'syz.1.1847': attribute type 4 has an invalid length. [ 287.397291][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 287.413418][T13130] netlink: 'syz.1.1847': attribute type 4 has an invalid length. [ 287.500177][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.519436][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.528374][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.538510][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.548857][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.766324][T13141] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 287.995424][T13153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1853'. [ 288.068071][ T3552] hsr_slave_0: left promiscuous mode [ 288.076571][ T3552] hsr_slave_1: left promiscuous mode [ 288.094925][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.124180][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.133876][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.141917][T13164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1858'. [ 288.153609][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.187468][ T3552] veth1_macvtap: left promiscuous mode [ 288.201800][ T3552] veth0_macvtap: left promiscuous mode [ 288.213483][ T3552] veth1_vlan: left promiscuous mode [ 288.224236][ T3552] veth0_vlan: left promiscuous mode [ 288.736306][ T3552] team0 (unregistering): Port device team_slave_1 removed [ 288.783030][ T3552] team0 (unregistering): Port device team_slave_0 removed [ 289.232095][T13155] 8021q: VLANs not supported on vcan0 [ 289.241183][T13154] 8021q: VLANs not supported on vcan0 [ 289.256904][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 289.278059][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 289.297982][T13162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.395612][T13177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1862'. [ 289.455699][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'. [ 289.555772][T13182] Bluetooth: MGMT ver 1.23 [ 289.577210][T13132] chnl_net:caif_netlink_parms(): no params data found [ 289.628325][ T51] Bluetooth: hci0: command tx timeout [ 289.995946][T13132] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.004921][T13132] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.020149][T13132] bridge_slave_0: entered allmulticast mode [ 290.029841][T13132] bridge_slave_0: entered promiscuous mode [ 290.055921][T13132] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.067027][T13132] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.075260][T13132] bridge_slave_1: entered allmulticast mode [ 290.086926][T13132] bridge_slave_1: entered promiscuous mode [ 290.207420][T13132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.239851][T13132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.434358][T13132] team0: Port device team_slave_0 added [ 290.452763][T13132] team0: Port device team_slave_1 added [ 290.729212][T13211] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1869'. [ 290.789716][T13132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.796899][T13132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.903921][T13132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.969834][T13132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.995040][T13132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.065375][T13132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.369750][T13132] hsr_slave_0: entered promiscuous mode [ 291.385747][T13132] hsr_slave_1: entered promiscuous mode [ 291.685391][T13252] xt_CT: No such helper "snmp" [ 291.713641][ T51] Bluetooth: hci0: command tx timeout [ 292.086060][T13266] netlink: 'syz.1.1882': attribute type 1 has an invalid length. [ 292.094446][T13266] netlink: 'syz.1.1882': attribute type 1 has an invalid length. [ 292.548662][T13287] veth1_to_bond: entered allmulticast mode [ 292.621378][T13287] __nla_validate_parse: 3 callbacks suppressed [ 292.621389][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 292.716199][T13287] veth1_to_bond (unregistering): left allmulticast mode [ 292.977641][T13132] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.991743][T13132] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.012541][T13132] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.034949][T13132] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.313257][T13132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.372969][T13132] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.418360][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.425578][ T9192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.485595][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.492803][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.802869][ T51] Bluetooth: hci0: command tx timeout [ 294.059619][T13132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.151844][T13132] veth0_vlan: entered promiscuous mode [ 294.224255][T13132] veth1_vlan: entered promiscuous mode [ 294.233855][T13362] syz_tun: entered allmulticast mode [ 294.246667][T13362] bond0: entered promiscuous mode [ 294.252603][T13362] bond_slave_0: entered promiscuous mode [ 294.280899][T13362] bond_slave_1: entered promiscuous mode [ 294.302143][T13362] bond1: entered promiscuous mode [ 294.309428][ T5919] srz1: Port: 1 Link DOWN [ 294.339457][T13361] syz_tun: left allmulticast mode [ 294.387271][T13132] veth0_macvtap: entered promiscuous mode [ 294.418525][T13132] veth1_macvtap: entered promiscuous mode [ 294.459215][T13132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.481675][T13132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.516911][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.535543][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.573481][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.599275][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.661518][T13382]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 294.685021][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'. [ 294.826543][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.854213][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.922416][ T9192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.932857][ T9192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.289205][T13406] netlink: 'syz.3.1921': attribute type 3 has an invalid length. [ 295.297560][T13406] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1921'. [ 295.664725][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'. [ 296.156467][ T9191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.280933][T13450] xt_CT: No such helper "snmp" [ 296.756928][ T9191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.933694][ T9191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.995541][ T9191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.093239][ T9191] bridge_slave_1: left allmulticast mode [ 297.099245][ T9191] bridge_slave_1: left promiscuous mode [ 297.104937][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.114449][ T9191] bridge_slave_0: left allmulticast mode [ 297.120575][ T9191] bridge_slave_0: left promiscuous mode [ 297.126298][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.636147][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'. [ 298.021890][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.040055][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.050954][ T9191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.052920][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.070096][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.078679][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.086724][ T9191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.106946][ T9191] bond0 (unregistering): Released all slaves [ 298.292815][T13497] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1942'. [ 298.649337][T13506]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 298.767040][ T9191] hsr_slave_0: left promiscuous mode [ 298.788166][ T9191] hsr_slave_1: left promiscuous mode [ 298.801285][T13514] xt_CT: No such helper "snmp" [ 298.805884][ T9191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.815379][ T9191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.836517][ T9191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.845181][ T9191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.876095][ T9191] veth1_macvtap: left promiscuous mode [ 298.881832][ T9191] veth0_macvtap: left promiscuous mode [ 298.887680][ T9191] veth1_vlan: left promiscuous mode [ 298.893604][ T9191] veth0_vlan: left promiscuous mode [ 299.459521][ T9191] team0 (unregistering): Port device team_slave_1 removed [ 299.501814][ T9191] team0 (unregistering): Port device team_slave_0 removed [ 300.108026][ T51] Bluetooth: hci0: command tx timeout [ 300.273480][T13491] chnl_net:caif_netlink_parms(): no params data found [ 300.643587][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.650925][T13491] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.668223][T13491] bridge_slave_0: entered allmulticast mode [ 300.676156][T13491] bridge_slave_0: entered promiscuous mode [ 300.707176][T13491] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.714590][T13491] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.722025][T13491] bridge_slave_1: entered allmulticast mode [ 300.729944][T13491] bridge_slave_1: entered promiscuous mode [ 300.754256][T13550] x_tables: duplicate underflow at hook 3 [ 300.956806][T13491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.001244][T13491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.146467][T13491] team0: Port device team_slave_0 added [ 301.190185][T13491] team0: Port device team_slave_1 added [ 301.283327][T13561] xt_hashlimit: size too large, truncated to 1048576 [ 301.357640][T13491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.377404][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.445634][T13491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.475927][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'. [ 301.486581][T13491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.496824][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.590723][T13491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.621140][T13574] netlink: 'syz.4.1963': attribute type 3 has an invalid length. [ 301.669308][T13573] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1962'. [ 301.794972][T13491] hsr_slave_0: entered promiscuous mode [ 301.810462][T13491] hsr_slave_1: entered promiscuous mode [ 302.187984][ T51] Bluetooth: hci0: command tx timeout [ 302.270145][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1972'. [ 302.402526][T13624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1975'. [ 302.602488][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 302.614846][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1976'. [ 302.768410][T13636] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1977'. [ 303.296074][T13656] netlink: 'syz.1.1983': attribute type 1 has an invalid length. [ 303.327930][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 303.328531][T13660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.366679][T13661] macsec2: entered allmulticast mode [ 303.402505][T13661] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 303.426343][T13653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.483801][T13653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.530322][T13664] bond2: (slave gretap3): making interface the new active one [ 303.545353][T13664] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 303.614828][T13491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 303.646269][T13491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 303.692991][T13491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 303.745023][T13491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 304.064002][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 304.076132][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1990'. [ 304.085612][T13687] netlink: 'syz.4.1990': attribute type 20 has an invalid length. [ 304.087363][T13491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.254416][T13491] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.268297][ T51] Bluetooth: hci0: command tx timeout [ 304.293714][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.301029][ T9192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.326175][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.333356][ T9192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.751067][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1995'. [ 304.777039][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 305.167605][T13727] xt_CT: No such helper "snmp" [ 305.376900][T13491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.477365][T13491] veth0_vlan: entered promiscuous mode [ 305.494164][T13491] veth1_vlan: entered promiscuous mode [ 305.559576][T13491] veth0_macvtap: entered promiscuous mode [ 305.600070][T13491] veth1_macvtap: entered promiscuous mode [ 305.763516][T13491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.828653][T13491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.955185][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.991257][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.097125][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.135636][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.250589][T13783] netlink: 'syz.1.2017': attribute type 10 has an invalid length. [ 306.348263][ T5863] Bluetooth: hci0: command tx timeout [ 306.439963][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.475082][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.550616][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.563794][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.601648][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 306.611867][T13800] xt_CT: No such helper "snmp" [ 307.137706][T13827] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 307.250867][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2030'. [ 307.683126][T13843] netlink: 'syz.4.2035': attribute type 10 has an invalid length. [ 307.692434][T13843] bond0: (slave wlan1): refused to change device type [ 308.298081][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2036'. [ 308.401022][T13871] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 308.433819][ T5863] Bluetooth: hci0: command 0x0405 tx timeout [ 308.433910][T13871] team0: Device macvtap1 is already an upper device of the team interface [ 308.729967][T13875] xt_CT: No such helper "snmp" [ 308.843593][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.986930][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.105502][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.211795][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.377008][ T36] bridge_slave_1: left allmulticast mode [ 309.387788][ T36] bridge_slave_1: left promiscuous mode [ 309.393772][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.416483][ T36] bridge_slave_0: left allmulticast mode [ 309.423923][ T36] bridge_slave_0: left promiscuous mode [ 309.435540][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.172332][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 310.197861][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 310.216105][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 310.261089][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'. [ 310.339900][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.365165][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.405229][ T36] bond0 (unregistering): Released all slaves [ 310.585782][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.595799][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.617526][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.651647][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.679115][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.764749][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2052'. [ 311.119179][ T36] hsr_slave_0: left promiscuous mode [ 311.131751][ T36] hsr_slave_1: left promiscuous mode [ 311.148482][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.157694][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.181032][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.193937][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.227563][ T36] veth1_macvtap: left promiscuous mode [ 311.233877][ T36] veth0_macvtap: left promiscuous mode [ 311.245972][ T36] veth1_vlan: left promiscuous mode [ 311.251705][ T36] veth0_vlan: left promiscuous mode [ 312.051063][ T36] team0 (unregistering): Port device team_slave_1 removed [ 312.097261][ T36] team0 (unregistering): Port device team_slave_0 removed [ 312.220948][T13935] xt_CT: No such helper "snmp" [ 312.573754][T13927] netlink: 'syz.1.2054': attribute type 6 has an invalid length. [ 312.748298][ T5857] Bluetooth: hci0: command tx timeout [ 312.895935][T13903] chnl_net:caif_netlink_parms(): no params data found [ 312.983769][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'. [ 312.998170][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'. [ 313.242388][T13903] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.257723][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'. [ 313.259237][T13903] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.298844][T13903] bridge_slave_0: entered allmulticast mode [ 313.306635][T13903] bridge_slave_0: entered promiscuous mode [ 313.315433][T13903] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.322728][T13903] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.330010][T13903] bridge_slave_1: entered allmulticast mode [ 313.337872][T13903] bridge_slave_1: entered promiscuous mode [ 313.490074][T13971] netlink: 'syz.2.2065': attribute type 9 has an invalid length. [ 313.522045][T13971] netlink: 'syz.2.2065': attribute type 6 has an invalid length. [ 313.579671][T13971] netlink: 'syz.2.2065': attribute type 7 has an invalid length. [ 313.612863][T13971] netlink: 'syz.2.2065': attribute type 8 has an invalid length. [ 313.763285][T13903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.873933][T13982] bridge0: port 1(vlan2) entered blocking state [ 313.881502][T13982] bridge0: port 1(vlan2) entered disabled state [ 313.888348][T13982] vlan2: entered allmulticast mode [ 313.893761][T13982] bond0: entered allmulticast mode [ 313.915301][T13982] vlan2: entered promiscuous mode [ 313.920635][T13982] bond0: entered promiscuous mode [ 313.960644][T13903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.009612][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2073'. [ 314.033831][T13994] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2073'. [ 314.111606][T13996] netlink: 'syz.4.2074': attribute type 39 has an invalid length. [ 314.218945][T13903] team0: Port device team_slave_0 added [ 314.275580][T13903] team0: Port device team_slave_1 added [ 314.275827][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 314.382255][T14015] netlink: 'syz.4.2079': attribute type 2 has an invalid length. [ 314.475424][T14015] : entered promiscuous mode [ 314.486074][T13903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.515627][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.574668][T13903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.620286][T13903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.630668][T14021] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2082'. [ 314.639074][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.680933][T13903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.827951][ T51] Bluetooth: hci0: command tx timeout [ 314.863491][T14036] netlink: 'syz.4.2086': attribute type 1 has an invalid length. [ 314.865190][T13903] hsr_slave_0: entered promiscuous mode [ 314.881326][T14036] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2086'. [ 314.888098][T13903] hsr_slave_1: entered promiscuous mode [ 315.398536][T14062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2093'. [ 315.651901][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 316.152914][T14095] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 316.161173][T14095] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2100'. [ 316.161321][T14089] veth7: entered promiscuous mode [ 316.176355][T14098] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2101'. [ 316.203974][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2101'. [ 316.266000][T14098] vlan0: entered promiscuous mode [ 316.393746][T14106] netlink: 'syz.2.2104': attribute type 9 has an invalid length. [ 316.401718][T14106] netlink: 'syz.2.2104': attribute type 6 has an invalid length. [ 316.402457][T14104] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 316.836198][T13903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 316.867075][T13903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 316.899905][T13903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.907942][ T51] Bluetooth: hci0: command tx timeout [ 317.019209][T13903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.237196][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.287251][T13903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.354379][T13903] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.396857][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.404063][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.446374][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.453594][ T9191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.693241][T14175] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 317.952148][T14192] IPv6: sit1: Disabled Multicast RS [ 318.085306][T14189] xt_CT: No such helper "snmp" [ 318.332017][T13903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.411384][T13903] veth0_vlan: entered promiscuous mode [ 318.455539][T13903] veth1_vlan: entered promiscuous mode [ 318.756808][T13903] veth0_macvtap: entered promiscuous mode [ 318.772995][T14229] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 318.806184][T13903] veth1_macvtap: entered promiscuous mode [ 318.812040][T14229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.965174][T14235] tipc: Enabling of bearer rejected, failed to enable media [ 318.985372][T13903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.995305][ T51] Bluetooth: hci0: command tx timeout [ 319.035183][T14240] validate_nla: 2 callbacks suppressed [ 319.035202][T14240] netlink: 'syz.2.2141': attribute type 9 has an invalid length. [ 319.036039][T14239] __nla_validate_parse: 7 callbacks suppressed [ 319.036054][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 319.041178][T14240] netlink: 'syz.2.2141': attribute type 6 has an invalid length. [ 319.072149][T14240] netlink: 'syz.2.2141': attribute type 7 has an invalid length. [ 319.080081][T14240] netlink: 'syz.2.2141': attribute type 8 has an invalid length. [ 319.147395][T13903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.239522][T14247] netlink: 'syz.2.2142': attribute type 9 has an invalid length. [ 319.247299][T14247] netlink: 'syz.2.2142': attribute type 6 has an invalid length. [ 319.279849][ T3552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.307433][ T3552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.330817][T14247] netlink: 'syz.2.2142': attribute type 7 has an invalid length. [ 319.346402][ T3552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.362154][T14247] netlink: 'syz.2.2142': attribute type 8 has an invalid length. [ 319.388885][ T3552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.740275][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 319.742829][ T9192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.764676][ T9192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.765999][T14266] netlink: 'syz.1.2149': attribute type 2 has an invalid length. [ 319.869207][ T9192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.878328][ T9192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.885819][T14270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2151'. [ 320.063059][T14274] netlink: 'syz.2.2153': attribute type 9 has an invalid length. [ 321.055326][ T9191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.177477][ T9191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.265197][ T9191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.327236][ T9191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.449236][ T9191] bridge_slave_1: left allmulticast mode [ 321.454910][ T9191] bridge_slave_1: left promiscuous mode [ 321.460970][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.471020][ T9191] bridge_slave_0: left allmulticast mode [ 321.476691][ T9191] bridge_slave_0: left promiscuous mode [ 321.482828][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.822901][ T9191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.834098][ T9191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.845965][ T9191] bond0 (unregistering): Released all slaves [ 322.158241][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2160'. [ 322.397218][T14313] block nbd1: NBD_DISCONNECT [ 322.406936][T14313] block nbd1: Send disconnect failed -32 [ 322.407936][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.426646][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.436686][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.450684][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.468430][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.595651][ T9191] hsr_slave_0: left promiscuous mode [ 322.605324][ T9191] hsr_slave_1: left promiscuous mode [ 322.616001][ T9191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.623851][ T9191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.636949][ T9191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.657363][ T9191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.702102][ T9191] veth1_macvtap: left promiscuous mode [ 322.713558][ T9191] veth0_macvtap: left promiscuous mode [ 322.721954][ T9191] veth1_vlan: left promiscuous mode [ 322.734571][ T9191] veth0_vlan: left promiscuous mode [ 322.787199][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 323.024657][T14335] xt_hashlimit: size too large, truncated to 1048576 [ 323.039163][T14335] syz.2.2171: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 323.056606][T14335] CPU: 0 UID: 0 PID: 14335 Comm: syz.2.2171 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 323.056635][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.056647][T14335] Call Trace: [ 323.056656][T14335] [ 323.056665][T14335] dump_stack_lvl+0x189/0x250 [ 323.056696][T14335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.056725][T14335] ? __pfx__printk+0x10/0x10 [ 323.056751][T14335] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 323.056778][T14335] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 323.056807][T14335] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 323.056837][T14335] warn_alloc+0x214/0x310 [ 323.056870][T14335] ? __pfx_warn_alloc+0x10/0x10 [ 323.056907][T14335] ? __get_vm_area_node+0x28f/0x300 [ 323.056932][T14335] ? htable_create+0xfc/0x7a0 [ 323.056962][T14335] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 323.057021][T14335] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 323.057054][T14335] ? rcu_is_watching+0x15/0xb0 [ 323.057079][T14335] ? htable_create+0xfc/0x7a0 [ 323.057096][T14335] ? htable_create+0xfc/0x7a0 [ 323.057113][T14335] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 323.057139][T14335] ? htable_create+0xfc/0x7a0 [ 323.057155][T14335] ? hashlimit_pernet+0x23/0x240 [ 323.057183][T14335] htable_create+0xfc/0x7a0 [ 323.057211][T14335] hashlimit_mt_check_common+0x719/0xa10 [ 323.057242][T14335] hashlimit_mt_check_v1+0x221/0x360 [ 323.057266][T14335] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 323.057293][T14335] ? xt_find_match+0x1f7/0x250 [ 323.057330][T14335] xt_check_match+0x3ce/0xab0 [ 323.057358][T14335] ? __pfx___mutex_lock+0x10/0x10 [ 323.057390][T14335] ? __pfx_xt_check_match+0x10/0x10 [ 323.057423][T14335] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 323.057458][T14335] ? xt_find_match+0x1f7/0x250 [ 323.057498][T14335] translate_table+0x1553/0x2040 [ 323.057553][T14335] ? __pfx_translate_table+0x10/0x10 [ 323.057585][T14335] ? __might_fault+0xb0/0x130 [ 323.057631][T14335] ? _copy_from_user+0x94/0xb0 [ 323.057660][T14335] do_ip6t_set_ctl+0x970/0xce0 [ 323.057687][T14335] ? rcu_is_watching+0x15/0xb0 [ 323.057708][T14335] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 323.057757][T14335] ? __pfx___mutex_lock+0x10/0x10 [ 323.057783][T14335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 323.057815][T14335] ? __pfx_futex_wait+0x10/0x10 [ 323.057843][T14335] nf_setsockopt+0x26c/0x290 [ 323.057879][T14335] rawv6_setsockopt+0x23b/0x5b0 [ 323.057899][T14335] ? __lock_acquire+0xab9/0xd20 [ 323.057921][T14335] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 323.057942][T14335] ? aa_sock_opt_perm+0x74/0x110 [ 323.057978][T14335] ? sock_common_setsockopt+0x36/0xc0 [ 323.058001][T14335] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 323.058029][T14335] do_sock_setsockopt+0x257/0x3e0 [ 323.058061][T14335] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 323.058095][T14335] ? __fget_files+0x2a/0x420 [ 323.058130][T14335] __x64_sys_setsockopt+0x18b/0x220 [ 323.058164][T14335] do_syscall_64+0xfa/0x3b0 [ 323.058189][T14335] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.058213][T14335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.058232][T14335] ? clear_bhb_loop+0x60/0xb0 [ 323.058256][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.058274][T14335] RIP: 0033:0x7f0c57b8e929 [ 323.058292][T14335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.058309][T14335] RSP: 002b:00007f0c58a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 323.058330][T14335] RAX: ffffffffffffffda RBX: 00007f0c57db6080 RCX: 00007f0c57b8e929 [ 323.058345][T14335] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 323.058356][T14335] RBP: 00007f0c57c10b39 R08: 00000000000004c0 R09: 0000000000000000 [ 323.058369][T14335] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 323.058381][T14335] R13: 0000000000000000 R14: 00007f0c57db6080 R15: 00007fffef271968 [ 323.058413][T14335] [ 323.453359][T14335] Mem-Info: [ 323.456576][T14335] active_anon:3864 inactive_anon:0 isolated_anon:0 [ 323.456576][T14335] active_file:1715 inactive_file:39946 isolated_file:0 [ 323.456576][T14335] unevictable:768 dirty:164 writeback:0 [ 323.456576][T14335] slab_reclaimable:12424 slab_unreclaimable:134550 [ 323.456576][T14335] mapped:29125 shmem:1364 pagetables:917 [ 323.456576][T14335] sec_pagetables:0 bounce:0 [ 323.456576][T14335] kernel_misc_reclaimable:0 [ 323.456576][T14335] free:1291198 free_pcp:13388 free_cma:0 [ 323.502444][T14335] Node 0 active_anon:15456kB inactive_anon:0kB active_file:6860kB inactive_file:159580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116500kB dirty:652kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13764kB pagetables:3540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 323.535849][T14335] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 323.567638][T14335] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.596617][T14335] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 323.602494][T14335] Node 0 DMA32 free:1249312kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15404kB inactive_anon:0kB active_file:6860kB inactive_file:158028kB unevictable:1536kB writepending:648kB present:3129332kB managed:2558304kB mlocked:0kB bounce:0kB free_pcp:37852kB local_pcp:21676kB free_cma:0kB [ 323.634852][T14335] lowmem_reserve[]: 0 0 1 1 1 [ 323.639705][T14335] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1552kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 323.669173][T14335] lowmem_reserve[]: 0 0 0 0 0 [ 323.673920][T14335] Node 1 Normal free:3900096kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15652kB local_pcp:8132kB free_cma:0kB [ 323.705268][T14335] lowmem_reserve[]: 0 0 0 0 0 [ 323.710117][T14335] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 323.722946][T14335] Node 0 DMA32: 29*4kB (UME) 353*8kB (UME) 230*16kB (UM) 465*32kB (UME) 284*64kB (UME) 121*128kB (UME) 97*256kB (UME) 58*512kB (UM) 33*1024kB (UME) 6*2048kB (UM) 267*4096kB (UM) = 1249404kB [ 323.741931][T14335] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 323.754381][T14335] Node 1 Normal: 196*4kB (UME) 52*8kB (UME) 57*16kB (UME) 142*32kB (UME) 43*64kB (UME) 6*128kB (UME) 3*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3900096kB [ 323.772874][T14335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.785562][T14335] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.795112][T14335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.804898][T14335] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.814546][T14335] 43022 total pagecache pages [ 323.825545][T14335] 0 pages in swap cache [ 323.829902][T14335] Free swap = 124996kB [ 323.834276][T14335] Total swap = 124996kB [ 323.838754][T14335] 2097051 pages RAM [ 323.842631][T14335] 0 pages HighMem/MovableOnly [ 323.847530][T14335] 425433 pages reserved [ 323.856679][T14335] 0 pages cma reserved [ 324.061112][ T9191] team0 (unregistering): Port device team_slave_1 removed [ 324.104477][ T9191] team0 (unregistering): Port device team_slave_0 removed [ 324.521781][ T5857] Bluetooth: hci0: command tx timeout [ 324.575524][T14323] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2168'. [ 324.639283][T14334] xfrm2: entered promiscuous mode [ 324.645103][T14334] xfrm2: entered allmulticast mode [ 324.874685][T14347] xt_CT: No such helper "snmp_trap" [ 324.888359][T14344] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 324.957310][T14355] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2176'. [ 325.015223][T14311] chnl_net:caif_netlink_parms(): no params data found [ 325.023982][T14354] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2176'. [ 325.171280][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 325.179068][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 325.186606][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 325.194424][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 325.202097][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 325.209667][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 325.217585][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 325.230313][ T5919] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 325.478299][T14311] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.494431][T14311] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.519744][T14311] bridge_slave_0: entered allmulticast mode [ 325.527009][T14311] bridge_slave_0: entered promiscuous mode [ 325.569952][T14311] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.577125][T14311] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.591458][T14311] bridge_slave_1: entered allmulticast mode [ 325.600906][T14311] bridge_slave_1: entered promiscuous mode [ 325.684652][T14311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.733989][T14311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.866999][T14311] team0: Port device team_slave_0 added [ 325.897369][T14311] team0: Port device team_slave_1 added [ 326.015012][T14414] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2188'. [ 326.113197][T14311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.126077][T14311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.159296][T14311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.174939][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 326.194259][T14417] bond0: option lp_interval: invalid value (18446744073709551604) [ 326.202392][T14417] bond0: option lp_interval: allowed values 1 - 2147483647 [ 326.216479][T14311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.224020][T14311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.255522][T14311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.434742][T14311] hsr_slave_0: entered promiscuous mode [ 326.445843][T14311] hsr_slave_1: entered promiscuous mode [ 326.457519][T14429] tipc: Enabling of bearer rejected, failed to enable media [ 326.491963][T14428] tipc: Enabling of bearer rejected, failed to enable media [ 326.588737][ T5857] Bluetooth: hci0: command tx timeout [ 326.694374][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2196'. [ 326.722379][T14440] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2197'. [ 327.272014][T14466] xt_TPROXY: Can be used only with -p tcp or -p udp [ 327.283930][T14466] validate_nla: 3 callbacks suppressed [ 327.283946][T14466] netlink: 'syz.4.2206': attribute type 1 has an invalid length. [ 327.357520][T14466] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.446963][T14474] netlink: 'syz.3.2207': attribute type 21 has an invalid length. [ 327.540307][T14469] bond7: (slave gretap1): making interface the new active one [ 327.564662][T14469] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 327.611999][T14474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2207'. [ 327.649822][T14476] netlink: 'syz.1.2208': attribute type 6 has an invalid length. [ 327.780983][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2209'. [ 327.844048][T14480] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2209'. [ 328.064503][T14311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.078155][T14311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.093866][T14311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.146867][T14311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.580950][T14508] team0: Port device veth7 added [ 328.667887][ T5857] Bluetooth: hci0: command tx timeout [ 328.681905][T14311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.712312][T14311] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.798696][T14521] macsec2: entered promiscuous mode [ 328.808471][T14521] batadv0: entered promiscuous mode [ 328.834282][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.841538][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.858217][T14520] xt_CT: No such helper "snmp" [ 328.982836][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.990057][ T9172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.318548][T14539] can: request_module (can-proto-0) failed. [ 329.646789][T14568] __nla_validate_parse: 5 callbacks suppressed [ 329.646806][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 329.688023][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 329.709413][T14311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.725694][T14568] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2234'. [ 329.791715][T14577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2237'. [ 329.798118][T14311] veth0_vlan: entered promiscuous mode [ 329.814871][T14311] veth1_vlan: entered promiscuous mode [ 329.901388][T14311] veth0_macvtap: entered promiscuous mode [ 329.924587][T14311] veth1_macvtap: entered promiscuous mode [ 330.019716][T14311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.081271][T14311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.135818][T14582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2239'. [ 330.152155][ T9191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.180309][ T9191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.334177][ T9191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.347492][ T9191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.414755][T14598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2246'. [ 330.554838][T14601] xt_CT: No such helper "snmp" [ 330.601284][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.635030][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.723048][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.732540][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.749629][ T5857] Bluetooth: hci0: command tx timeout [ 331.164459][T14638] netlink: 'syz.2.2258': attribute type 1 has an invalid length. [ 331.335730][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 331.423593][T14646] netlink: 'syz.1.2260': attribute type 39 has an invalid length. [ 331.621778][ T3008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.665814][T14658] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 331.678686][T14658] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 331.743167][ T3008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.004748][ T3008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.338836][ T3008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.444900][ T3008] bridge_slave_1: left allmulticast mode [ 332.451040][ T3008] bridge_slave_1: left promiscuous mode [ 332.458106][ T3008] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.467238][ T3008] bridge_slave_0: left allmulticast mode [ 332.473295][ T3008] bridge_slave_0: left promiscuous mode [ 332.479490][ T3008] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.981076][ T3008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.015596][ T3008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.042690][ T3008] bond0 (unregistering): Released all slaves [ 333.232441][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 333.432302][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.445989][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.455414][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.465416][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.473273][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.572216][T14695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.742466][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'. [ 333.772616][T14695] tls_set_device_offload: netdev not found [ 333.855535][T14708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2279'. [ 333.880302][ T3008] hsr_slave_0: left promiscuous mode [ 333.887197][ T3008] hsr_slave_1: left promiscuous mode [ 333.902903][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.914364][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.939856][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.947700][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.017697][ T3008] veth1_macvtap: left promiscuous mode [ 334.041264][ T3008] veth0_macvtap: left promiscuous mode [ 334.046985][ T3008] veth1_vlan: left promiscuous mode [ 334.066168][ T3008] veth0_vlan: left promiscuous mode [ 334.713668][ T3008] team0 (unregistering): Port device team_slave_1 removed [ 334.756087][ T3008] team0 (unregistering): Port device team_slave_0 removed [ 335.221298][T14735] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 335.238096][T14735] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 335.257893][T14735] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 335.548068][ T5857] Bluetooth: hci0: command tx timeout [ 335.618141][T14754] __nla_validate_parse: 1 callbacks suppressed [ 335.618159][T14754] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2290'. [ 335.645154][T14691] chnl_net:caif_netlink_parms(): no params data found [ 336.013556][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.017007][T14773] FAULT_INJECTION: forcing a failure. [ 336.017007][T14773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.022507][T14691] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.040073][T14773] CPU: 0 UID: 0 PID: 14773 Comm: syz.1.2293 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 336.040101][T14773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.040112][T14773] Call Trace: [ 336.040120][T14773] [ 336.040128][T14773] dump_stack_lvl+0x189/0x250 [ 336.040156][T14773] ? __pfx____ratelimit+0x10/0x10 [ 336.040181][T14773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.040204][T14773] ? __pfx__printk+0x10/0x10 [ 336.040229][T14773] ? __might_fault+0xb0/0x130 [ 336.040265][T14773] should_fail_ex+0x414/0x560 [ 336.040297][T14773] _copy_from_iter+0x1db/0x16f0 [ 336.040322][T14773] ? rcu_is_watching+0x15/0xb0 [ 336.040345][T14773] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 336.040370][T14773] ? __pfx__copy_from_iter+0x10/0x10 [ 336.040391][T14773] ? __build_skb_around+0x257/0x3e0 [ 336.040422][T14773] ? netlink_sendmsg+0x642/0xb30 [ 336.040446][T14773] ? skb_put+0x11b/0x210 [ 336.040475][T14773] netlink_sendmsg+0x6b2/0xb30 [ 336.040510][T14773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.040539][T14773] ? aa_sock_msg_perm+0x94/0x160 [ 336.040567][T14773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.040584][T14773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.040610][T14773] __sock_sendmsg+0x219/0x270 [ 336.040636][T14773] ____sys_sendmsg+0x505/0x830 [ 336.040676][T14773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.040714][T14773] ? import_iovec+0x74/0xa0 [ 336.040740][T14773] ___sys_sendmsg+0x21f/0x2a0 [ 336.040760][T14773] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.040814][T14773] ? __fget_files+0x2a/0x420 [ 336.040839][T14773] ? __fget_files+0x3a0/0x420 [ 336.040874][T14773] __x64_sys_sendmsg+0x19b/0x260 [ 336.040895][T14773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.040923][T14773] ? __pfx_ksys_write+0x10/0x10 [ 336.040943][T14773] ? rcu_is_watching+0x15/0xb0 [ 336.040969][T14773] ? do_syscall_64+0xbe/0x3b0 [ 336.040998][T14773] do_syscall_64+0xfa/0x3b0 [ 336.041022][T14773] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.041046][T14773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.041063][T14773] ? clear_bhb_loop+0x60/0xb0 [ 336.041086][T14773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.041108][T14773] RIP: 0033:0x7f0c0018e929 [ 336.041125][T14773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.041141][T14773] RSP: 002b:00007f0c00f1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.041161][T14773] RAX: ffffffffffffffda RBX: 00007f0c003b6160 RCX: 00007f0c0018e929 [ 336.041175][T14773] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 336.041187][T14773] RBP: 00007f0c00f1c090 R08: 0000000000000000 R09: 0000000000000000 [ 336.041198][T14773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.041209][T14773] R13: 0000000000000000 R14: 00007f0c003b6160 R15: 00007ffc6073d758 [ 336.041239][T14773] [ 336.287014][T14777] IPVS: length: 167 != 187531613888 [ 336.292605][T14691] bridge_slave_0: entered allmulticast mode [ 336.343219][T14691] bridge_slave_0: entered promiscuous mode [ 336.352117][T14691] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.359374][T14691] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.366616][T14691] bridge_slave_1: entered allmulticast mode [ 336.373855][T14691] bridge_slave_1: entered promiscuous mode [ 336.439741][T14691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.463010][T14691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.550179][T14691] team0: Port device team_slave_0 added [ 336.564243][T14691] team0: Port device team_slave_1 added [ 336.570772][T14780] netlink: 'syz.4.2297': attribute type 5 has an invalid length. [ 336.601250][T14781] netlink: 'syz.4.2297': attribute type 5 has an invalid length. [ 336.651255][T14691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.658308][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.684469][T14691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.773789][T14691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.781895][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.808019][T14691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.956211][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'. [ 337.084268][T14691] hsr_slave_0: entered promiscuous mode [ 337.091211][T14691] hsr_slave_1: entered promiscuous mode [ 337.162646][T14800] netlink: 'syz.4.2302': attribute type 3 has an invalid length. [ 337.406886][T14810] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2305'. [ 337.603510][T14818] FAULT_INJECTION: forcing a failure. [ 337.603510][T14818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.629608][ T5857] Bluetooth: hci0: command tx timeout [ 337.648786][T14818] CPU: 1 UID: 0 PID: 14818 Comm: syz.2.2309 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 337.648815][T14818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.648827][T14818] Call Trace: [ 337.648835][T14818] [ 337.648844][T14818] dump_stack_lvl+0x189/0x250 [ 337.648872][T14818] ? __pfx____ratelimit+0x10/0x10 [ 337.648898][T14818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.648921][T14818] ? __pfx__printk+0x10/0x10 [ 337.648960][T14818] should_fail_ex+0x414/0x560 [ 337.648994][T14818] _copy_to_user+0x31/0xb0 [ 337.649018][T14818] simple_read_from_buffer+0xe1/0x170 [ 337.649047][T14818] proc_fail_nth_read+0x1df/0x250 [ 337.649077][T14818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.649108][T14818] ? rw_verify_area+0x258/0x650 [ 337.649129][T14818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.649160][T14818] vfs_read+0x200/0x980 [ 337.649188][T14818] ? __pfx___mutex_lock+0x10/0x10 [ 337.649216][T14818] ? __pfx_vfs_read+0x10/0x10 [ 337.649250][T14818] ? __fget_files+0x2a/0x420 [ 337.649278][T14818] ? __fget_files+0x3a0/0x420 [ 337.649301][T14818] ? __fget_files+0x2a/0x420 [ 337.649333][T14818] ksys_read+0x145/0x250 [ 337.649355][T14818] ? __pfx_ksys_read+0x10/0x10 [ 337.649373][T14818] ? rcu_is_watching+0x15/0xb0 [ 337.649402][T14818] ? do_syscall_64+0xbe/0x3b0 [ 337.649429][T14818] do_syscall_64+0xfa/0x3b0 [ 337.649454][T14818] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.649478][T14818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.649497][T14818] ? clear_bhb_loop+0x60/0xb0 [ 337.649521][T14818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.649537][T14818] RIP: 0033:0x7f0c57b8d33c [ 337.649551][T14818] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 337.649567][T14818] RSP: 002b:00007f0c58a30030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 337.649586][T14818] RAX: ffffffffffffffda RBX: 00007f0c57db5fa0 RCX: 00007f0c57b8d33c [ 337.649600][T14818] RDX: 000000000000000f RSI: 00007f0c58a300a0 RDI: 0000000000000005 [ 337.649611][T14818] RBP: 00007f0c58a30090 R08: 0000000000000000 R09: 0000000000000000 [ 337.649622][T14818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.649633][T14818] R13: 0000000000000000 R14: 00007f0c57db5fa0 R15: 00007fffef271968 [ 337.649665][T14818] [ 338.129020][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'. [ 338.227116][T14840] netlink: 212924 bytes leftover after parsing attributes in process `syz.4.2313'. [ 338.294614][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2312'. [ 338.638584][T14691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.664919][T14691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.687093][T14691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.722662][T14691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.814371][T14859] netlink: 'syz.1.2319': attribute type 9 has an invalid length. [ 338.823235][T14859] netlink: 'syz.1.2319': attribute type 6 has an invalid length. [ 339.184449][T14691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.344315][T14691] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.411525][ T9172] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.418815][ T9172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.428680][T14880] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2324'. [ 339.463630][ T30] audit: type=1800 audit(1752182828.760:10): pid=14877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2325" name="memory.events" dev="tmpfs" ino=2613 res=0 errno=0 [ 339.494078][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.497553][T14877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2325'. [ 339.501257][ T9172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.650296][T14869] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2320'. [ 339.694072][T14886] xt_CT: No such helper "snmp" [ 339.708173][ T5857] Bluetooth: hci0: command tx timeout [ 340.127319][T14906] netlink: 'syz.4.2330': attribute type 9 has an invalid length. [ 340.143130][T14906] netlink: 'syz.4.2330': attribute type 6 has an invalid length. [ 340.215495][T14691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.306107][T14691] veth0_vlan: entered promiscuous mode [ 340.335090][T14691] veth1_vlan: entered promiscuous mode [ 340.396466][T14691] veth0_macvtap: entered promiscuous mode [ 340.415211][T14691] veth1_macvtap: entered promiscuous mode [ 340.455691][T14691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.478766][T14691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.497013][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2333'. [ 340.507875][ T9192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.516717][ T9192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.539593][ T9192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.549172][ T9192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.660474][ T9192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.686972][ T9192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.730527][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.743592][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.260379][T14941] netlink: 'syz.1.2342': attribute type 9 has an invalid length. [ 341.275191][T14941] netlink: 'syz.1.2342': attribute type 6 has an invalid length. [ 341.527033][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 341.636620][T14952] netlink: 'syz.4.2347': attribute type 1 has an invalid length. [ 341.684714][ T9192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.709234][T14950] netlink: 'syz.3.2346': attribute type 10 has an invalid length. [ 341.719891][T14950] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.728967][T14950] team0: entered promiscuous mode [ 341.734031][T14950] veth7: entered promiscuous mode [ 341.740411][T14955] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2347'. [ 341.740607][T14950] team0: entered allmulticast mode [ 341.756923][T14950] veth7: entered allmulticast mode [ 341.765505][T14950] bond0: (slave team0): Enslaving as an active interface with a down link [ 341.802238][T14955] batadv1: entered promiscuous mode [ 341.828818][T14955] batadv1: entered allmulticast mode [ 341.919693][T14958] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2347'. [ 342.115941][ T9192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.805440][ T9192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.915089][ T9192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.023698][ T9192] bridge_slave_1: left allmulticast mode [ 343.029780][ T9192] bridge_slave_1: left promiscuous mode [ 343.035468][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.044443][ T9192] bridge_slave_0: left allmulticast mode [ 343.050404][ T9192] bridge_slave_0: left promiscuous mode [ 343.056097][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.165275][T14967] No such timeout policy "syz1" [ 343.380268][T14979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2353'. [ 343.636047][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.646819][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.658562][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.668994][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.678535][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.788891][ T9192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.800925][ T9192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.811324][ T9192] bond0 (unregistering): Released all slaves [ 343.941295][T14989] netlink: 'syz.1.2355': attribute type 9 has an invalid length. [ 343.950087][T14989] netlink: 'syz.1.2355': attribute type 7 has an invalid length. [ 343.958239][T14989] netlink: 'syz.1.2355': attribute type 8 has an invalid length. [ 344.035352][T14991] FAULT_INJECTION: forcing a failure. [ 344.035352][T14991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.075992][T14991] CPU: 0 UID: 0 PID: 14991 Comm: syz.3.2356 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 344.076021][T14991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.076033][T14991] Call Trace: [ 344.076041][T14991] [ 344.076048][T14991] dump_stack_lvl+0x189/0x250 [ 344.076076][T14991] ? __pfx____ratelimit+0x10/0x10 [ 344.076101][T14991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.076123][T14991] ? __pfx__printk+0x10/0x10 [ 344.076148][T14991] ? __might_fault+0xb0/0x130 [ 344.076184][T14991] should_fail_ex+0x414/0x560 [ 344.076217][T14991] _copy_from_user+0x2d/0xb0 [ 344.076240][T14991] ___sys_sendmsg+0x158/0x2a0 [ 344.076262][T14991] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.076317][T14991] ? __fget_files+0x2a/0x420 [ 344.076340][T14991] ? __fget_files+0x3a0/0x420 [ 344.076374][T14991] __x64_sys_sendmsg+0x19b/0x260 [ 344.076395][T14991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.076423][T14991] ? __pfx_ksys_write+0x10/0x10 [ 344.076443][T14991] ? rcu_is_watching+0x15/0xb0 [ 344.076471][T14991] ? do_syscall_64+0xbe/0x3b0 [ 344.076501][T14991] do_syscall_64+0xfa/0x3b0 [ 344.076525][T14991] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.076550][T14991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.076569][T14991] ? clear_bhb_loop+0x60/0xb0 [ 344.076592][T14991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.076610][T14991] RIP: 0033:0x7fe94af8e929 [ 344.076628][T14991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.076652][T14991] RSP: 002b:00007fe94bed3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.076673][T14991] RAX: ffffffffffffffda RBX: 00007fe94b1b5fa0 RCX: 00007fe94af8e929 [ 344.076688][T14991] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000003 [ 344.076700][T14991] RBP: 00007fe94bed3090 R08: 0000000000000000 R09: 0000000000000000 [ 344.076711][T14991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.076723][T14991] R13: 0000000000000000 R14: 00007fe94b1b5fa0 R15: 00007ffdcb6740c8 [ 344.076755][T14991] [ 344.358208][T15002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2360'. [ 344.418717][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 344.674016][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 344.683946][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 344.720834][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 344.731596][T15020] netlink: 'syz.2.2364': attribute type 2 has an invalid length. [ 344.738652][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 344.772884][T15020] netlink: 'syz.2.2364': attribute type 1 has an invalid length. [ 344.801823][T15019] netlink: 'syz.2.2364': attribute type 2 has an invalid length. [ 344.815046][T15019] netlink: 'syz.2.2364': attribute type 1 has an invalid length. [ 344.865382][ T9192] hsr_slave_0: left promiscuous mode [ 344.891951][ T9192] hsr_slave_1: left promiscuous mode [ 344.918448][ T9192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.925932][ T9192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.939414][ T9192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.951357][ T9192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.952432][T15031] FAULT_INJECTION: forcing a failure. [ 344.952432][T15031] name failslab, interval 1, probability 0, space 0, times 0 [ 344.971909][T15031] CPU: 1 UID: 0 PID: 15031 Comm: syz.1.2370 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 344.971933][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.971943][T15031] Call Trace: [ 344.971950][T15031] [ 344.971956][T15031] dump_stack_lvl+0x189/0x250 [ 344.971980][T15031] ? __pfx____ratelimit+0x10/0x10 [ 344.972003][T15031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.972025][T15031] ? __pfx__printk+0x10/0x10 [ 344.972056][T15031] ? __pfx___might_resched+0x10/0x10 [ 344.972085][T15031] should_fail_ex+0x414/0x560 [ 344.972117][T15031] should_failslab+0xa8/0x100 [ 344.972144][T15031] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 344.972169][T15031] ? __alloc_skb+0x112/0x2d0 [ 344.972198][T15031] __alloc_skb+0x112/0x2d0 [ 344.972227][T15031] netlink_sendmsg+0x5c6/0xb30 [ 344.972258][T15031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.972287][T15031] ? aa_sock_msg_perm+0x94/0x160 [ 344.972317][T15031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 344.972335][T15031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.972360][T15031] __sock_sendmsg+0x219/0x270 [ 344.972386][T15031] ____sys_sendmsg+0x505/0x830 [ 344.972419][T15031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.972467][T15031] ? import_iovec+0x74/0xa0 [ 344.972492][T15031] ___sys_sendmsg+0x21f/0x2a0 [ 344.972508][T15031] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.972562][T15031] ? __fget_files+0x2a/0x420 [ 344.972584][T15031] ? __fget_files+0x3a0/0x420 [ 344.972613][T15031] __x64_sys_sendmsg+0x19b/0x260 [ 344.972630][T15031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.972651][T15031] ? __pfx_ksys_write+0x10/0x10 [ 344.972668][T15031] ? rcu_is_watching+0x15/0xb0 [ 344.972691][T15031] ? do_syscall_64+0xbe/0x3b0 [ 344.972717][T15031] do_syscall_64+0xfa/0x3b0 [ 344.972735][T15031] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.972757][T15031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.972773][T15031] ? clear_bhb_loop+0x60/0xb0 [ 344.972793][T15031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.972810][T15031] RIP: 0033:0x7f0c0018e929 [ 344.972825][T15031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.972840][T15031] RSP: 002b:00007f0c00f5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.972859][T15031] RAX: ffffffffffffffda RBX: 00007f0c003b5fa0 RCX: 00007f0c0018e929 [ 344.972871][T15031] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000003 [ 344.972881][T15031] RBP: 00007f0c00f5e090 R08: 0000000000000000 R09: 0000000000000000 [ 344.972891][T15031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.972902][T15031] R13: 0000000000000000 R14: 00007f0c003b5fa0 R15: 00007ffc6073d758 [ 344.972928][T15031] [ 345.288303][ T9192] veth1_macvtap: left promiscuous mode [ 345.297446][ T9192] veth0_macvtap: left promiscuous mode [ 345.306104][ T9192] veth1_vlan: left promiscuous mode [ 345.314860][ T9192] veth0_vlan: left promiscuous mode [ 345.793608][ T51] Bluetooth: hci0: command tx timeout [ 345.873481][ T9192] team0 (unregistering): Port device team_slave_1 removed [ 345.920006][ T9192] team0 (unregistering): Port device team_slave_0 removed [ 346.431239][T15037] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 346.482922][T15037] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 346.556122][T15037] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 346.638981][T14986] chnl_net:caif_netlink_parms(): no params data found [ 346.687976][T15053] pim6reg1: entered promiscuous mode [ 346.718184][T15053] pim6reg1: entered allmulticast mode [ 347.008659][T15064] netdevsim0: left promiscuous mode [ 347.014417][T15064] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 347.054729][T15065] veth9: entered promiscuous mode [ 347.151028][T15074] __nla_validate_parse: 79 callbacks suppressed [ 347.151048][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2380'. [ 347.185847][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2380'. [ 347.199897][T14986] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.208883][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.216342][T14986] bridge_slave_0: entered allmulticast mode [ 347.225380][T14986] bridge_slave_0: entered promiscuous mode [ 347.244166][T14986] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.255965][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.263623][T14986] bridge_slave_1: entered allmulticast mode [ 347.271683][T14986] bridge_slave_1: entered promiscuous mode [ 347.297395][T15074] ip6t_srh: unknown srh match flags 4000 [ 347.447140][T14986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.474100][T15084] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2384'. [ 347.496534][T14986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.744103][T14986] team0: Port device team_slave_0 added [ 347.744209][T15095] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2389'. [ 347.759028][T14986] team0: Port device team_slave_1 added [ 347.822473][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2389'. [ 347.871419][ T51] Bluetooth: hci0: command tx timeout [ 347.959899][T14986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.971561][T15115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2395'. [ 347.984599][T15115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2395'. [ 347.992118][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.028316][T14986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.045595][T14986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.052860][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.116252][T14986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.161040][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2393'. [ 348.321555][T14986] hsr_slave_0: entered promiscuous mode [ 348.342194][T14986] hsr_slave_1: entered promiscuous mode [ 348.583304][T15144] FAULT_INJECTION: forcing a failure. [ 348.583304][T15144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.619466][T15144] CPU: 1 UID: 0 PID: 15144 Comm: syz.2.2400 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 348.619494][T15144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.619506][T15144] Call Trace: [ 348.619513][T15144] [ 348.619521][T15144] dump_stack_lvl+0x189/0x250 [ 348.619546][T15144] ? __pfx____ratelimit+0x10/0x10 [ 348.619570][T15144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.619593][T15144] ? __pfx__printk+0x10/0x10 [ 348.619618][T15144] ? __might_fault+0xb0/0x130 [ 348.619653][T15144] should_fail_ex+0x414/0x560 [ 348.619687][T15144] _copy_from_iter+0x1db/0x16f0 [ 348.619714][T15144] ? rcu_is_watching+0x15/0xb0 [ 348.619738][T15144] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 348.619764][T15144] ? __pfx__copy_from_iter+0x10/0x10 [ 348.619787][T15144] ? __build_skb_around+0x257/0x3e0 [ 348.619817][T15144] ? netlink_sendmsg+0x642/0xb30 [ 348.619841][T15144] ? skb_put+0x11b/0x210 [ 348.619872][T15144] netlink_sendmsg+0x6b2/0xb30 [ 348.619908][T15144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.619938][T15144] ? aa_sock_msg_perm+0x94/0x160 [ 348.619968][T15144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.619986][T15144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.620013][T15144] __sock_sendmsg+0x219/0x270 [ 348.620039][T15144] ____sys_sendmsg+0x505/0x830 [ 348.620073][T15144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.620120][T15144] ? import_iovec+0x74/0xa0 [ 348.620145][T15144] ___sys_sendmsg+0x21f/0x2a0 [ 348.620160][T15144] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.620203][T15144] ? __fget_files+0x2a/0x420 [ 348.620222][T15144] ? __fget_files+0x3a0/0x420 [ 348.620249][T15144] __x64_sys_sendmsg+0x19b/0x260 [ 348.620266][T15144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.620288][T15144] ? __pfx_ksys_write+0x10/0x10 [ 348.620302][T15144] ? rcu_is_watching+0x15/0xb0 [ 348.620322][T15144] ? do_syscall_64+0xbe/0x3b0 [ 348.620344][T15144] do_syscall_64+0xfa/0x3b0 [ 348.620361][T15144] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.620380][T15144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.620394][T15144] ? clear_bhb_loop+0x60/0xb0 [ 348.620411][T15144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.620424][T15144] RIP: 0033:0x7f0c57b8e929 [ 348.620445][T15144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.620462][T15144] RSP: 002b:00007f0c58a30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.620478][T15144] RAX: ffffffffffffffda RBX: 00007f0c57db5fa0 RCX: 00007f0c57b8e929 [ 348.620489][T15144] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000003 [ 348.620499][T15144] RBP: 00007f0c58a30090 R08: 0000000000000000 R09: 0000000000000000 [ 348.620508][T15144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.620516][T15144] R13: 0000000000000000 R14: 00007f0c57db5fa0 R15: 00007fffef271968 [ 348.620540][T15144] [ 349.004259][T15148] netlink: 'syz.2.2403': attribute type 9 has an invalid length. [ 349.012992][T15148] netlink: 'syz.2.2403': attribute type 7 has an invalid length. [ 349.021215][T15148] netlink: 'syz.2.2403': attribute type 8 has an invalid length. [ 349.430946][T14986] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 349.445597][T14986] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 349.461962][T14986] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 349.571725][T14986] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 349.595299][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2412'. [ 349.659828][T15188] netlink: 'syz.1.2413': attribute type 1 has an invalid length. [ 349.667848][T15188] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2413'. [ 349.887579][T15192] tipc: Enabled bearer , priority 0 [ 349.898460][T15192] syzkaller0: entered promiscuous mode [ 349.903951][T15192] syzkaller0: entered allmulticast mode [ 349.920522][T15192] tipc: Resetting bearer [ 349.940283][T14986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.948178][ T51] Bluetooth: hci0: command tx timeout [ 349.982208][T14986] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.996760][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.004011][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.036587][ T9179] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.043805][ T9179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.075697][T15191] tipc: Resetting bearer [ 350.094618][T15191] tipc: Disabling bearer [ 350.163901][T14986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.284658][ T9192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.312733][T15208] pim6reg: entered allmulticast mode [ 350.317808][ T9192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.319940][T15208] pim6reg: left allmulticast mode [ 350.722402][T14986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.022915][T14986] veth0_vlan: entered promiscuous mode [ 351.037014][T14986] veth1_vlan: entered promiscuous mode [ 351.144679][T14986] veth0_macvtap: entered promiscuous mode [ 351.167595][T14986] veth1_macvtap: entered promiscuous mode [ 351.213539][T14986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.240214][T14986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.257525][ T9179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.320981][ T9179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.386353][ T9179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.412730][ T9179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.499514][T15255] netlink: 'syz.2.2432': attribute type 4 has an invalid length. [ 351.575550][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.588173][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.742163][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.767365][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.038131][ T51] Bluetooth: hci0: command tx timeout [ 352.525052][T15306] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 352.535973][T15306] tipc: Enabled bearer , priority 0 [ 352.570955][T15306] tipc: Resetting bearer [ 352.585024][T15306] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 352.596957][T15306] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 352.605372][T15306] CPU: 1 UID: 0 PID: 15306 Comm: syz.3.2449 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 352.617437][T15306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.627484][T15306] RIP: 0010:qfq_qlen_notify+0x29/0x70 [ 352.632865][T15306] Code: 90 f3 0f 1e fa 41 57 41 56 53 48 89 f3 49 89 fe e8 ac 38 37 f8 4c 8d 7b 58 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 f9 b8 9a f8 49 8b 07 4c 39 f8 74 1c [ 352.652467][T15306] RSP: 0018:ffffc90004717108 EFLAGS: 00010202 [ 352.658532][T15306] RAX: 000000000000000b RBX: 0000000000000000 RCX: dffffc0000000000 [ 352.666664][T15306] RDX: ffffc9000cdea000 RSI: 000000000000037e RDI: 000000000000037f [ 352.674629][T15306] RBP: dffffc0000000000 R08: ffff888030e80000 R09: 0000000000000002 [ 352.682592][T15306] R10: 00000000ffffffff R11: ffffffff89892740 R12: 0000000000000000 [ 352.690555][T15306] R13: ffff8880596e8000 R14: ffff8880596e8000 R15: 0000000000000058 [ 352.698514][T15306] FS: 00007fe94bed36c0(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 352.707438][T15306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.714008][T15306] CR2: 00002000000017c0 CR3: 000000006a52c000 CR4: 00000000003526f0 [ 352.721973][T15306] Call Trace: [ 352.725237][T15306] [ 352.728155][T15306] qdisc_tree_reduce_backlog+0x299/0x480 [ 352.733784][T15306] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 352.739503][T15306] hhf_change+0x764/0xad0 [ 352.743873][T15306] ? __pfx_hhf_change+0x10/0x10 [ 352.748719][T15306] ? __raw_spin_lock_init+0x45/0x100 [ 352.754004][T15306] ? qdisc_alloc+0x7a1/0xaa0 [ 352.758595][T15306] ? __pfx_hhf_init+0x10/0x10 [ 352.763258][T15306] hhf_init+0x213/0x950 [ 352.767401][T15306] ? __pfx_hhf_init+0x10/0x10 [ 352.772065][T15306] qdisc_create+0x7a9/0xea0 [ 352.776564][T15306] tc_modify_qdisc+0x1426/0x2010 [ 352.781498][T15306] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 352.786783][T15306] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 352.792061][T15306] rtnetlink_rcv_msg+0x77c/0xb70 [ 352.796993][T15306] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 352.802099][T15306] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.807547][T15306] ? ref_tracker_free+0x63a/0x7d0 [ 352.812558][T15306] ? __copy_skb_header+0xa7/0x550 [ 352.817571][T15306] ? __pfx_ref_tracker_free+0x10/0x10 [ 352.822930][T15306] netlink_rcv_skb+0x205/0x470 [ 352.827688][T15306] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.833141][T15306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.838424][T15306] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.843618][T15306] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.848813][T15306] netlink_unicast+0x758/0x8d0 [ 352.853578][T15306] netlink_sendmsg+0x805/0xb30 [ 352.858342][T15306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.863621][T15306] ? aa_sock_msg_perm+0x94/0x160 [ 352.868554][T15306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 352.873823][T15306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.879101][T15306] __sock_sendmsg+0x219/0x270 [ 352.883772][T15306] ____sys_sendmsg+0x505/0x830 [ 352.888537][T15306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.893824][T15306] ? import_iovec+0x74/0xa0 [ 352.898323][T15306] ___sys_sendmsg+0x21f/0x2a0 [ 352.902988][T15306] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.908192][T15306] ? __fget_files+0x2a/0x420 [ 352.912779][T15306] ? __fget_files+0x3a0/0x420 [ 352.917461][T15306] __x64_sys_sendmsg+0x19b/0x260 [ 352.922412][T15306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.927873][T15306] ? rcu_is_watching+0x15/0xb0 [ 352.932655][T15306] ? do_syscall_64+0xbe/0x3b0 [ 352.937345][T15306] do_syscall_64+0xfa/0x3b0 [ 352.941847][T15306] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.947040][T15306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.953098][T15306] ? clear_bhb_loop+0x60/0xb0 [ 352.957771][T15306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.963825][T15306] RIP: 0033:0x7fe94af8e929 [ 352.968231][T15306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.987826][T15306] RSP: 002b:00007fe94bed3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.996234][T15306] RAX: ffffffffffffffda RBX: 00007fe94b1b5fa0 RCX: 00007fe94af8e929 [ 353.004192][T15306] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 000000000000000b [ 353.012150][T15306] RBP: 00007fe94b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 353.020108][T15306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.028060][T15306] R13: 0000000000000000 R14: 00007fe94b1b5fa0 R15: 00007ffdcb6740c8 [ 353.036030][T15306] [ 353.039040][T15306] Modules linked in: [ 353.043033][T15306] ---[ end trace 0000000000000000 ]--- [ 353.048527][T15306] RIP: 0010:qfq_qlen_notify+0x29/0x70 [ 353.054187][T15306] Code: 90 f3 0f 1e fa 41 57 41 56 53 48 89 f3 49 89 fe e8 ac 38 37 f8 4c 8d 7b 58 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 f9 b8 9a f8 49 8b 07 4c 39 f8 74 1c [ 353.073847][T15306] RSP: 0018:ffffc90004717108 EFLAGS: 00010202 [ 353.079975][T15306] RAX: 000000000000000b RBX: 0000000000000000 RCX: dffffc0000000000 [ 353.087992][T15306] RDX: ffffc9000cdea000 RSI: 000000000000037e RDI: 000000000000037f [ 353.095979][T15306] RBP: dffffc0000000000 R08: ffff888030e80000 R09: 0000000000000002 [ 353.103969][T15306] R10: 00000000ffffffff R11: ffffffff89892740 R12: 0000000000000000 [ 353.111960][T15306] R13: ffff8880596e8000 R14: ffff8880596e8000 R15: 0000000000000058 [ 353.119950][T15306] FS: 00007fe94bed36c0(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 353.128885][T15306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.135452][T15306] CR2: 00002000000017c0 CR3: 000000006a52c000 CR4: 00000000003526f0 [ 353.143437][T15306] Kernel panic - not syncing: Fatal exception in interrupt [ 353.150884][T15306] Kernel Offset: disabled [ 353.155194][T15306] Rebooting in 86400 seconds..