last executing test programs: 2.803796907s ago: executing program 3 (id=1116): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2.644708077s ago: executing program 2 (id=1117): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x1, @mcast1, 0x7}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7aa3b272}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) 2.481791225s ago: executing program 2 (id=1119): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r1, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe, @void, @value}, 0xc3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="415b7ac700000000", 0x8) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="0147d3709ddeb55546ac5385a1b5", 0xe}], 0x1, 0x0, 0x0, 0x60020804}], 0x1, 0x8000) recvmsg(r3, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/14, 0x4}, {&(0x7f0000000200)=""/145, 0xfb7b}], 0x65, 0x0, 0x22}, 0x0) recvmsg(r3, &(0x7f0000000540)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000005c0)=""/230, 0xe6}], 0x3, &(0x7f0000000880)=""/228, 0xe4}, 0x2000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r4, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) sendmmsg$unix(r3, &(0x7f0000003080)=[{{0x0, 0xfffffffffffffda6, &(0x7f0000000480), 0x2, 0x0, 0x0, 0x8c2}}], 0x1, 0x48010) 1.883642679s ago: executing program 4 (id=1127): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000fc0200000000000000000000000000000000000000000000020001000000000000000a000000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x40000c0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='-', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x14, 0x4) listen(r0, 0x52d7) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x88, &(0x7f0000000200), 0x0) sendto$inet6(r6, &(0x7f00000002c0)="e9c1cfb1418b7e8cbb5064c174666f18733716854b0a8218e7171247ff075537f94e19f0daedfbb3967ad42b17aba06fa6f588026324b6ed452d1f76242f31fa61e18a8a6703890535b9e7a6d7d443e3379b6abf16b72678928f9d724b2b66aa46255566f55894d5fffba22bd54bf9c2bff9e1c0aa38909227a227ca10611ac16637a28dbd99cd11a22add65a31c72b84de746518eeb485ea6914854c9806d8dcb562eb5572bd7e7a02ed06475aa4329fd", 0xb1, 0x1d, &(0x7f0000000100)={0xa, 0x4e22, 0x42, @empty, 0xfffffffa}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r9 = epoll_create1(0x80000) socket(0x40000000015, 0x805, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "1332b8d5dbabacf7", "a177e8b1af3ec18be135ce99c7f9a82e", "81549a6a", "a1fd332905973b41"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x28, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}, [@RTA_MULTIPATH={0xc, 0x9, {0x40, 0x30, 0x3}}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x7, 0x400, 0x3455, 0x9, 0x77, 0x6}) 1.831597769s ago: executing program 3 (id=1128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000006a00010025bd7000ffdbdf25000000000b0004000b"], 0x24}}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'geneve0\x00', @multicast}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6, 0x2, 0xff, 0xc, 0x10}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000300000014000200ff010000000000000000000000000001130007"], 0x6c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x4000000}, 0x0) 1.617511016s ago: executing program 1 (id=1131): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 1.265713973s ago: executing program 2 (id=1132): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xfffffffffffffff9) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) (async, rerun: 64) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) (async, rerun: 64) accept4(r6, 0x0, 0x0, 0x0) (rerun: 64) socket$inet(0x2, 0xa, 0x7) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24044800}, 0x24000815) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.265319426s ago: executing program 4 (id=1133): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$802154_dgram(r0, &(0x7f0000001980)={&(0x7f0000001800)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0x4000144}, 0x20000098) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000000c0)={0xa}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.209367529s ago: executing program 0 (id=1134): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20000000}, 0x4814) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000740)=[{0xa, 0xfa, 0xdb, 0x2}]}, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.190686573s ago: executing program 3 (id=1135): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8932, &(0x7f0000000080)={'veth0_to_bond\x00', 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1b, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x404328fdcdb9280e, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfca, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000a407000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x3) epoll_create1(0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) close(r3) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket(0x11, 0x5, 0x80005) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) unshare(0x4020400) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x18) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) 1.081841287s ago: executing program 4 (id=1136): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x7}, {0xf, 0x5}, {0xd, 0x5}, {0xe, 0x4}, {0xf, 0x5}, {0x6, 0x4}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000180)=""/44, 0x64, 0x2c, 0x1, 0x5, 0x0, @void, @value}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, 0x33, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="dd5f"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0x8, 0x8}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.081591776s ago: executing program 1 (id=1137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000002cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="00006006000000000000aaaaaaaaaaaa88a8600081"], 0x1a5) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f00000012c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 1.058467929s ago: executing program 2 (id=1138): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 982.261916ms ago: executing program 0 (id=1139): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_macvtap\x00', 0x0}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) socket$qrtr(0x2a, 0x2, 0x0) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000480), 0x0}}, @mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0}}], 0xb0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000800000000080afa12e5dc21ab82fe9b5524cd0aadd4ce320ab568353"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 899.501593ms ago: executing program 4 (id=1140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00061800007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000580), 0x7, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket(0x2a, 0x2, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f00000001c0)={0x1d, r9}, 0x10, &(0x7f0000000440)={&(0x7f0000000380)={0x0, 0x401, 0x6, {r10, r11/1000+60000}, {}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x1}, 0x9, 0x0, 0x0, 0x0, "50de5b6576532a3ec3702aaca2ce1a16c2e2c88db7101f0b08e46b1d325d7e68d62a6ad5aad4f64a57ffca648fb10eeec6634356d954869c2209af09648b4869"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x858) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r7, {0xffe0}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 797.828788ms ago: executing program 0 (id=1141): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="d87c94a3d4f5662f7e50db18dbe17bfd16552715635a6a0198f11afc02ac9b374fa754d5a6d176d1485ca5118ba0e07f2ae1e51f900953e798ef3b2c96701facae32a81512a3e180d3871ad44c235a41e314c63bb6279f6b2cc7855a49ca5da267ad875af7f57c0e61c054a5a54824aa740e61739bce404d5ad1047007d765cbbff900be4f5b9aee2057b1afc0983378172b6aff", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x1, 0x7}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x10000000, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = socket(0x1e, 0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRESDEC=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 796.693265ms ago: executing program 3 (id=1142): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @remote}, 0x10) 752.151379ms ago: executing program 1 (id=1143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000d060104000000000000000000000000050001"], 0x1c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1216000002000000b777ce9a6100000000", @ANYRES32, @ANYBLOB="0400000000000000000000eaffffec0000000000", @ANYRES64=r1, @ANYRESDEC=r1, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000540)={0x0, 0x3}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r1, 0x1}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x47, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000180)={@none}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="18080000d0ff00000000000800000000851000000600170018000000", @ANYBLOB="7dad070014e6", @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x9c}}, 0x0) r7 = socket$inet(0x2, 0x5, 0x400080) socket$can_bcm(0x1d, 0x2, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000007c008500000022000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x40, 0x0, &(0x7f0000000040)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r7, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x6, @mcast1, 0x3ff}}, {{0xa, 0x4e23, 0xfffffffd, @empty, 0x8}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}}}, 0x108) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r10, &(0x7f0000000000)=""/246, 0xf6, 0x222, &(0x7f0000000100)={0xa, 0x4e24, 0x10002, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}, 0x1c) 681.602475ms ago: executing program 0 (id=1144): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000200)={0x640, 0x2e, 0x400, 0x70bd28, 0x25dfdbfb, {0x12}, [@generic="c1abcbfb8105b0cda5d01893fc081d49df6fcf567c341cd100f5be006e92664c15507c74ddfadad9ab74c3", @nested={0x1a4, 0x2, 0x0, 0x1, [@generic="510cc7db7c16a25551839aba0ac2393b9377f320e859f921aefc15e79d4e53dfa028d3353e0faf56f74391c788065ea160ad0f0ad011c8035c6555bf3f4cf6851a2c44561d9a90b43f49fd53dc39b075922deb21cb23cff5d205fc0ee976b74072d71cf9f9e89f2b3fb50cc0e3327179afbd9e243db4ab85bca91b93c2abc824c946d1bd241b51e943d701dbb08a6d3337859f1f7e216461f91ccfca760373307e34935cd70be34263516903cce65d8c63fa32cb3c5211ae560465e43d1aae1a01fa28986b8343d2a196c3ff86ec324818cd5333ad9694246cfa5462b85e68e4b8a921f1dc3a5f68890463fbaf358106", @generic="a804fc3814ba8cb077e17324a0502121ca77c45dfa785116da74177cb478baf9fb062307c662cb106641ae7d2c1b2369f9f381805ab2539e348069eb6900abea40e687d13198ec42cceec73b2ace69ac2ee9cbef449122e3a02522f6c1c5bb399ca2d1a40a4d0bb46821891550192244744a13e754604729498e0a8911c7979efed66ea4eccc36c1bd6c6b471a6f3e6517c4d48f106c7d71", @nested={0x4, 0xdd}, @typed={0x12, 0xed, 0x0, 0x0, @binary="cd31fe2261f2f7938904953bfcd5"}]}, @nested={0x1a5, 0x61, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0x73}, @generic="bb63e6146aaaffe52cb89e502d995e4875ba373b03b56292c2e876b263b73bdc883c7ffb5f6869c06f253db037bfe7d52631507bf6678ff7160b79cd404ec9722ec6916bf17b23fd34b7650211cb5fca81aa1a689c3aeb5fbfab59d24cd3e68215611fc7c9a1e69f92291d572e8770abbc35131cb91247cd8d97b5b24527f58ee8c5bf2a5ac5a8c70c432ccd43349551752fc797e1e92a3a9accdc0e86c59c2f5dfd49c4cb0ca8c7", @typed={0x85, 0x72, 0x0, 0x0, @binary="78ddd6abbd33f294b3084f3ed22165506d2a64faeffd22f156c4fd9098ed0bf23c489a12f0adce71ac1b87916fd5e37467a2e661618d9177d209ab84ab612f4205fe3a35660dfb5beb2ce27c7e5c864596bd82f72583c51f9042fd7786daea889a283379898fa9336ffdafb279861e998f185cc48e24c8c3110e40426c799aa979"}, @nested={0x4, 0xc7}, @typed={0x8, 0x16, 0x0, 0x0, @uid=r1}, @generic="642e7d5950eaa34ceff767b0550a618e73328c4293ec69f107c05ca1e1b428ffc1c197aa2a986e8b02c7899dd9ba0b89c19f4f066da887e0cb310537ae4d9ee6e9efaaaf30834aead524dab264e0b75e89712aec11", @nested={0x4, 0xab}]}, @typed={0xa3, 0xdc, 0x0, 0x0, @binary="011303a6f3ab7ba0864ca86e39100946b70c26da26f8950404df3810c71b735d7851494fdc402a8ed6e14b79256121883f861cd83654f1ec6c65518c6a0dc4612caa28a91e531d7ca58ab4f647e5b71723cc010cc1d6c04b901fe75f5c108505f5aca1627c7411c25255aca15a7215c57a26dfc5e659ce9ddd134dc71193a9ff85042995fd1bc1ab978662ef05e758420c7628ada4ea9ad3bc6185bd75c03a"}, @nested={0x1a, 0xdd, 0x0, 0x1, [@generic="afb288a1fc5529602dfd0dd9a19cfd25f21113a19128"]}, @generic="28837eb78830bbf8e8cb85158397074879ad68689309124c6a6fa9a9817dadff38c73a73ea91f1b5b2e5966d3b92056088887c25446c7e1ce5dd10cb30c5faa52c8c2eead9c2d04e7023689290d53b7d459f972d3bed7208e2bf3e9eab151f4de10f8dd64f9314a74dd355552a82a2b2390dfd00c4ce77b7cccec21823857ffec0ccb06b7d4a0f6ec147e19f79b118393b7c15b464ef18b31308e5a20f942dcdbda08c861b7645f0dbb3a8b4b73932d2451e70ffd240f4285ecdd8127a5bc36c7fd6e20282851b43b27f2e8fabe6b525779b4084fc02972d84c30735eb15", @typed={0xfe, 0x3, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x12c, 0x0, 0x0, @uid=r3}, @typed={0xc, 0xb7, 0x0, 0x0, @u64}]}, 0x640}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000008c0)) (async) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x100}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x85f2, 0x1, 0x7, 0x3, 0x3]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) (async, rerun: 64) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000ac0)) (async, rerun: 64) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000b00)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2009041}, 0xe78102f793cd17e3) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0xcd6b5da61bf914c7}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10001}, 0x40000) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40) socketpair(0x2b, 0x6, 0x7, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000e80)={0x0, 0xe78}, &(0x7f0000000ec0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r11, 0x84, 0x5, &(0x7f0000000f00)={r12, @in6={{0xa, 0x4e22, 0x9, @local, 0x35}}}, 0x84) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r4) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x84, r13, 0x100, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffff9, 0x7b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfe}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x16b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5}}]}, 0x84}}, 0x2000c880) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001200)={'syztnl1\x00', &(0x7f0000001180)={'syztnl0\x00', r2, 0x4, 0x5, 0x2, 0x2, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x7800, 0x8, 0xe77, 0x22b4853c}}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x4004f506, &(0x7f0000001240)=0x1) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x20048051) (async, rerun: 64) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r10) (rerun: 64) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r14, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r8, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x1) socketpair(0x27, 0xa, 0xb58, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r15, &(0x7f0000001600)={0xa, 0x4e23, 0xc, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1}, 0x1c) 597.782967ms ago: executing program 3 (id=1145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x20003, 0x1}, {0x2, 0x7, 0x1}, {0x5, 0x9, 0x3}, {0x5, 0x2, 0x3}, {0x4, 0x78}, {0xc, 0xa, 0xd302}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0x7}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x16c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x130, 0x2, [@TCA_MATCHALL_ACT={0x12c, 0x2, [@m_skbedit={0x128, 0x0, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xffffff6b, 0xffffffffffffffff, 0x11, 0xf}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x10}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4000}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0x4}}]}, {0xa9, 0x6, "96825e98099828915fdfe570a146dc5e60aa5ba6d84361cfd59c91096effac4679b76fe64fdde544f5ad4f4d7204349c16cd932a5a0a6ce69badf50b03332e90a7e3a6cb8e42deccc8e27ef0f1b37792c7273b86f424a7d828535a84aef58be25176e61d3b30e0fa6821b4b209134c89217b000ded7b234ddb969145573b32f5d615b3e8ead135d2f1a8efcff706fe5e783dd4aec64cf30abe86ad477a44f4d468da8c87b1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x16c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r7 = socket(0x28, 0x805, 0x0) connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$can_bcm(r7, 0x0, 0x0) 562.68663ms ago: executing program 1 (id=1146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x403}, @NFACCT_FLAGS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008005}, 0x80) 434.534219ms ago: executing program 0 (id=1147): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) unshare(0x22020600) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@delqdisc={0x138, 0x25, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe, 0xf}, {0xd, 0x3}, {0x4f036cc047da3701, 0xfff1}}, [@TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x1, 0xfffffffd, 0x0, 0x464, 0x5, 0x7}}, {0x12, 0x2, [0x0, 0x9, 0x1ff, 0x8, 0x8001, 0x1, 0x6]}}, {{0x1c, 0x1, {0x81, 0x4, 0x800, 0x4, 0x1, 0x101, 0x80, 0x1}}, {0x6, 0x2, [0xb]}}, {{0x1c, 0x1, {0x1, 0x0, 0x42, 0x447a, 0x0, 0x8, 0x8, 0x3}}, {0xa, 0x2, [0x10, 0x9, 0x5]}}, {{0x1c, 0x1, {0x9, 0xb0, 0x10, 0x80000000, 0x1, 0x800, 0x1, 0x4}}, {0xc, 0x2, [0xb5, 0x0, 0x2, 0x5]}}, {{0x1c, 0x1, {0x3, 0x2, 0x2, 0x7fff, 0x1, 0x0, 0x5, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x3, 0x90, 0x8, 0x8001, 0x1, 0x2, 0x4, 0x3}}, {0xa, 0x2, [0xb89, 0x5, 0xffff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffff89}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x84}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x138}, 0x1, 0x0, 0x0, 0x14040800}, 0x0) 293.806076ms ago: executing program 1 (id=1148): unshare(0x20000400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffe36, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC], 0x10) r3 = socket$rxrpc(0x21, 0x2, 0xa) listen(r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x20, 0xfffd, 0x0, 0x0, 0x20, 0xa0, 0x32}, {@in=@loopback, 0x0, 0x2b}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x3503, 0xa, 0x4, 0xfd, 0x2c}, [@tfcpad={0x8, 0x16, 0xa}]}, 0xf8}, 0x1, 0x0, 0x0, 0x50}, 0x4000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f00000001c0)=0x10, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r5, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 293.356875ms ago: executing program 4 (id=1149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa1}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 289.769669ms ago: executing program 3 (id=1150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000400)=0x2, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r2, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2000, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$cgroup_ro(r4, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001010000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001010000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r9}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r10, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r12, @ANYBLOB="080007c4", @ANYRES32=r12, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r12, @ANYBLOB="080007c4", @ANYRES32=r12, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 173.94005ms ago: executing program 1 (id=1151): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x8c, 0x32, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x816, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x8c}}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x8c, 0x32, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x816, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x8c}}, 0x4000080) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) 129.828164ms ago: executing program 2 (id=1152): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000)=0x5, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%pI4 \x00'}, 0x20) sendfile(r1, r0, 0x0, 0x1) 129.430331ms ago: executing program 4 (id=1153): r0 = socket$inet6(0xa, 0x4, 0x2000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001240)=ANY=[@ANYBLOB="3313000000000000010500000000000502f4820401260502000405020009c20400004800c20400000000071800000002040501d50404000000000000008100000000000000c910ff020000000000000000000000000001074800000001100d00000900000000000000020000000000000005000000000000002b06000000000000ff0300000000000003000000000000006f00000000000000ffffffffffffffff"], 0xa0) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0x2e}]}}}}}}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000f00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000004208000000bd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="280000004821658d1ad4c6d9494979ec435f0a5ca810a0d2b35c97cd58f113a5d8931609909a88b3799d317d6e4bb1e9d705c955aa967f13926ced5ff6d15dd8090bec7791268b42247422211f", @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf252600000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000"], 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r8, 0x89e2) (async) connect$netrom(0xffffffffffffffff, &(0x7f0000001300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @bcast, @default, @null]}, 0x48) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newchain={0x6c, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x5, 0x8}, {0xc, 0xfff1}, {0x0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x1, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xf}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_RATE={0x6, 0x5, {0x5, 0x7b}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4002}, 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7553972", 0x6c}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0)={0x40}, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000240)={"683761cf9dc39b6a353cb6de65a90c67", 0x0, 0x0, {0xf99, 0x80000000}, {0x9, 0x400}, 0xbe2, [0x0, 0x5, 0x2, 0x1, 0x44, 0x10, 0x8, 0xffffffffffff0001, 0x40, 0x10, 0x0, 0x91, 0x8, 0xa, 0x3ff, 0x2]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000340)={0x0, 0x5, 0x2}) r9 = socket(0x2a, 0x5, 0x81) (async) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/108, 0x6c}, {0x0}], 0x2}, 0xfffffffc}], 0x1, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001e9bebb5d575583cc90f00c7eaa6c93c313b3088646ea9254c93", @ANYRES16=r13, @ANYBLOB="200025bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24008015) sendmsg$NL80211_CMD_SET_PMK(r9, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)={0x48, r10, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c72e92405bd30eef216025666a0a96b9"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2ec970f6a2a117ccf139cd7257ed356e"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40884}, 0x4) 15.285835ms ago: executing program 0 (id=1154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xa, 0xd, &(0x7f0000001480)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x46, 0x0, 0x0, 0x0, 0xfffffffffffffe7d}, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x20004}, 0x20) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x891b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f0000000380)=""/4098, 0x40f00, 0x66, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) socket(0x15, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xa, 0xd, &(0x7f0000001480)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x46, 0x0, 0x0, 0x0, 0xfffffffffffffe7d}, 0x0) (async) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x20004}, 0x20) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r1, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x891b, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f0000000380)=""/4098, 0x40f00, 0x66, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) (async) 0s ago: executing program 2 (id=1155): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x568}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xe4, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x48, 0x1, {0xa2d, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5735, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0xe265}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x48, 0xef8}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf03b, 0x15}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0x54, 0x1, {0x48, 0x81}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0xe4}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=ANY=[@ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x10000000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r7 = socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x29, 0x5, 0x0) ioctl(r7, 0x8b21, &(0x7f0000000040)) close(r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. [ 84.010479][ T5821] cgroup: Unknown subsys name 'net' [ 84.158837][ T5821] cgroup: Unknown subsys name 'cpuset' [ 84.168338][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.927152][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.603719][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.612466][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.629606][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.637618][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.639412][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.652445][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.656942][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.660328][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.674483][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.682805][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.691204][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.692129][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.703959][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.714990][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.723064][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.730355][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.738444][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.747360][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.755444][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.755660][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.771545][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.779715][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.795917][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.805030][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.819644][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.424082][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.593761][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.673465][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.768871][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.880178][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.897687][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.905298][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.913412][ T5832] bridge_slave_0: entered allmulticast mode [ 89.922560][ T5832] bridge_slave_0: entered promiscuous mode [ 89.940456][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.948309][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.955686][ T5832] bridge_slave_1: entered allmulticast mode [ 89.962877][ T5832] bridge_slave_1: entered promiscuous mode [ 89.991605][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.999178][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.007269][ T5844] bridge_slave_0: entered allmulticast mode [ 90.014346][ T5844] bridge_slave_0: entered promiscuous mode [ 90.098067][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.105468][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.112669][ T5844] bridge_slave_1: entered allmulticast mode [ 90.120025][ T5844] bridge_slave_1: entered promiscuous mode [ 90.148691][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.159143][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.166997][ T5836] bridge_slave_0: entered allmulticast mode [ 90.175387][ T5836] bridge_slave_0: entered promiscuous mode [ 90.209899][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.223853][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.247617][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.256073][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.263349][ T5836] bridge_slave_1: entered allmulticast mode [ 90.270784][ T5836] bridge_slave_1: entered promiscuous mode [ 90.353004][ T5832] team0: Port device team_slave_0 added [ 90.364192][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.378019][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.422612][ T5832] team0: Port device team_slave_1 added [ 90.445786][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.458869][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.547411][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.554634][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.563151][ T5842] bridge_slave_0: entered allmulticast mode [ 90.570837][ T5842] bridge_slave_0: entered promiscuous mode [ 90.578716][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.586124][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.593314][ T5833] bridge_slave_0: entered allmulticast mode [ 90.600754][ T5833] bridge_slave_0: entered promiscuous mode [ 90.626628][ T5844] team0: Port device team_slave_0 added [ 90.648691][ T5836] team0: Port device team_slave_0 added [ 90.658460][ T5836] team0: Port device team_slave_1 added [ 90.664665][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.672196][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.679846][ T5842] bridge_slave_1: entered allmulticast mode [ 90.688123][ T5842] bridge_slave_1: entered promiscuous mode [ 90.712018][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.719268][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.727275][ T5833] bridge_slave_1: entered allmulticast mode [ 90.735793][ T5833] bridge_slave_1: entered promiscuous mode [ 90.764018][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.771333][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.797759][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.812700][ T5844] team0: Port device team_slave_1 added [ 90.871652][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.879417][ T5848] Bluetooth: hci0: command tx timeout [ 90.879423][ T5841] Bluetooth: hci2: command tx timeout [ 90.879602][ T5841] Bluetooth: hci4: command tx timeout [ 90.885093][ T5848] Bluetooth: hci3: command tx timeout [ 90.890487][ T5841] Bluetooth: hci1: command tx timeout [ 90.908183][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.935710][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.961797][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.968902][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.995477][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.010607][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.022541][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.053380][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.060899][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.087165][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.101206][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.112898][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.143794][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.150911][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.177336][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.257769][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.265055][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.291344][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.340216][ T5842] team0: Port device team_slave_0 added [ 91.350080][ T5833] team0: Port device team_slave_0 added [ 91.360289][ T5833] team0: Port device team_slave_1 added [ 91.371984][ T5832] hsr_slave_0: entered promiscuous mode [ 91.378692][ T5832] hsr_slave_1: entered promiscuous mode [ 91.405241][ T5842] team0: Port device team_slave_1 added [ 91.456489][ T5836] hsr_slave_0: entered promiscuous mode [ 91.462879][ T5836] hsr_slave_1: entered promiscuous mode [ 91.469570][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.478200][ T5836] Cannot create hsr debugfs directory [ 91.499239][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.506326][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.532610][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.597852][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.604884][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.632072][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.644226][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.651217][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.677273][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.701081][ T5844] hsr_slave_0: entered promiscuous mode [ 91.708317][ T5844] hsr_slave_1: entered promiscuous mode [ 91.714426][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.722300][ T5844] Cannot create hsr debugfs directory [ 91.737171][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.744327][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.770425][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.035675][ T5842] hsr_slave_0: entered promiscuous mode [ 92.042020][ T5842] hsr_slave_1: entered promiscuous mode [ 92.049144][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.056844][ T5842] Cannot create hsr debugfs directory [ 92.111486][ T5833] hsr_slave_0: entered promiscuous mode [ 92.118208][ T5833] hsr_slave_1: entered promiscuous mode [ 92.124319][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.132597][ T5833] Cannot create hsr debugfs directory [ 92.158188][ T844] cfg80211: failed to load regulatory.db [ 92.526633][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.557154][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.592878][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.630279][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.689624][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.701206][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.720998][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.742826][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.810920][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.822761][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.839788][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.852636][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.962866][ T5841] Bluetooth: hci3: command tx timeout [ 92.962885][ T5849] Bluetooth: hci4: command tx timeout [ 92.962924][ T5849] Bluetooth: hci0: command tx timeout [ 92.968732][ T5841] Bluetooth: hci1: command tx timeout [ 92.974540][ T5849] Bluetooth: hci2: command tx timeout [ 93.004298][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.019335][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.031826][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.065463][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.159204][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.172310][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.187799][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.212550][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.279842][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.317692][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.357280][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.378873][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.411384][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.418674][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.430137][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.437697][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.469394][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.476650][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.499862][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.512173][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.519416][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.587023][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.627196][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.634371][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.668674][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.675907][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.821036][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.910632][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.937528][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.968346][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.975595][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.061302][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.109241][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.116541][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.180258][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.187577][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.202820][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.210194][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.361973][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.497999][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.553047][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.668149][ T5832] veth0_vlan: entered promiscuous mode [ 94.749613][ T5832] veth1_vlan: entered promiscuous mode [ 94.798657][ T5844] veth0_vlan: entered promiscuous mode [ 94.850086][ T5844] veth1_vlan: entered promiscuous mode [ 94.931571][ T5832] veth0_macvtap: entered promiscuous mode [ 94.972861][ T5832] veth1_macvtap: entered promiscuous mode [ 95.035698][ T5849] Bluetooth: hci1: command tx timeout [ 95.036793][ T5848] Bluetooth: hci0: command tx timeout [ 95.041148][ T5849] Bluetooth: hci3: command tx timeout [ 95.046758][ T5848] Bluetooth: hci4: command tx timeout [ 95.046795][ T5848] Bluetooth: hci2: command tx timeout [ 95.097111][ T5844] veth0_macvtap: entered promiscuous mode [ 95.112573][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.131040][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.160026][ T5844] veth1_macvtap: entered promiscuous mode [ 95.170619][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.223742][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.233263][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.244767][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.253524][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.276265][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.323359][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.357743][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.367285][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.376699][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.386853][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.404638][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.503490][ T5842] veth0_vlan: entered promiscuous mode [ 95.529544][ T5836] veth0_vlan: entered promiscuous mode [ 95.570552][ T5836] veth1_vlan: entered promiscuous mode [ 95.598261][ T5842] veth1_vlan: entered promiscuous mode [ 95.620474][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.636816][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.681578][ T5833] veth0_vlan: entered promiscuous mode [ 95.705265][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.720652][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.732904][ T5842] veth0_macvtap: entered promiscuous mode [ 95.788095][ T5842] veth1_macvtap: entered promiscuous mode [ 95.809447][ T5833] veth1_vlan: entered promiscuous mode [ 95.809830][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.824168][ T5836] veth0_macvtap: entered promiscuous mode [ 95.830244][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.889308][ T5836] veth1_macvtap: entered promiscuous mode [ 95.899089][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.919024][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.956093][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.988894][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.017587][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.038059][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.064478][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.101000][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.134876][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.143913][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.184227][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.222628][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.233961][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.234268][ T5926] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 96.249762][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.260453][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.402238][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 96.497470][ T5833] veth0_macvtap: entered promiscuous mode [ 96.592543][ T5833] veth1_macvtap: entered promiscuous mode [ 96.679718][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.702836][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.777909][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.841959][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.867424][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.878952][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.903176][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.917203][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.929638][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.939591][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.995631][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.034192][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.114794][ T5849] Bluetooth: hci3: command tx timeout [ 97.115471][ T5841] Bluetooth: hci2: command tx timeout [ 97.120250][ T5849] Bluetooth: hci4: command tx timeout [ 97.126200][ T5848] Bluetooth: hci0: command tx timeout [ 97.131910][ T5849] Bluetooth: hci1: command tx timeout [ 97.215463][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.252107][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.345546][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.353443][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.562892][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.611423][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.756622][ T5950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.766848][ T5950] bridge0: port 3(bond1) entered blocking state [ 97.784315][ T5950] bridge0: port 3(bond1) entered disabled state [ 97.792460][ T5950] bond1: entered allmulticast mode [ 97.800081][ T5955] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.801127][ T5950] bond1: entered promiscuous mode [ 97.819964][ T5950] bridge0: port 3(bond1) entered blocking state [ 97.826678][ T5950] bridge0: port 3(bond1) entered forwarding state [ 98.014580][ T5958] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.148439][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.188089][ T5968] sctp: [Deprecated]: syz.4.16 (pid 5968) Use of int in maxseg socket option. [ 98.188089][ T5968] Use struct sctp_assoc_value instead [ 98.192693][ T47] IPVS: starting estimator thread 0... [ 98.219939][ T5956] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 98.271362][ T5964] netlink: 'syz.3.4': attribute type 12 has an invalid length. [ 98.305038][ T5964] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.315971][ T5969] IPVS: using max 25 ests per chain, 60000 per kthread [ 98.360377][ T5973] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.667501][ T5981] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.742963][ T12] bridge0: port 3(bond1) entered disabled state [ 98.793957][ T5981] netlink: 'syz.1.19': attribute type 10 has an invalid length. [ 98.881814][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.907302][ T5981] bond0: (slave team0): Enslaving as an active interface with an up link [ 98.949041][ T5995] netlink: 'syz.3.25': attribute type 27 has an invalid length. [ 99.851509][ T6021] Zero length message leads to an empty skb [ 100.361753][ T6045] Illegal XDP return value 4294967274 on prog (id 18) dev N/A, expect packet loss! [ 100.527767][ T6050] bond0: entered promiscuous mode [ 100.544781][ T6050] bond_slave_0: entered promiscuous mode [ 100.561489][ T6050] bond_slave_1: entered promiscuous mode [ 101.142140][ T6050] bond0: left promiscuous mode [ 101.150981][ T6050] bond_slave_0: left promiscuous mode [ 101.163499][ T6050] bond_slave_1: left promiscuous mode [ 101.452119][ T6062] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 101.475884][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 101.548205][ T6066] netlink: 'syz.2.40': attribute type 11 has an invalid length. [ 101.769951][ T6080] syz.4.45 uses obsolete (PF_INET,SOCK_PACKET) [ 101.991278][ T5892] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 102.042818][ T6072] pim6reg1: entered promiscuous mode [ 102.059883][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 102.069310][ T6072] pim6reg1: entered allmulticast mode [ 102.118323][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 102.128674][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 102.185866][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 102.200238][ T6093] ip6gretap0: entered promiscuous mode [ 102.213751][ T6090] netlink: 'syz.1.49': attribute type 10 has an invalid length. [ 102.224061][ T6093] ip6gretap0: left promiscuous mode [ 102.253182][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 102.505700][ T6090] team0: Port device wlan1 added [ 102.521987][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 102.822241][ T6107] batadv_slave_1: entered promiscuous mode [ 102.850479][ T6107] netlink: 44 bytes leftover after parsing attributes in process `syz.2.54'. [ 102.982403][ T6105] batadv_slave_1: left promiscuous mode [ 103.087447][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57'. [ 103.150937][ T6117] netlink: 48 bytes leftover after parsing attributes in process `syz.1.57'. [ 103.385224][ T6125] ip6gretap1: entered allmulticast mode [ 103.491402][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.61'. [ 103.603639][ T6131] wireguard0: entered promiscuous mode [ 103.609834][ T6131] wireguard0: entered allmulticast mode [ 103.618588][ T6128] 8021q: VLANs not supported on ip6_vti0 [ 104.038293][ T6152] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 104.103398][ T6148] bridge0: port 3(vxlan0) entered blocking state [ 104.141078][ T6148] bridge0: port 3(vxlan0) entered disabled state [ 104.149976][ T6148] vxlan0: entered allmulticast mode [ 104.175523][ T6148] vxlan0: entered promiscuous mode [ 104.494502][ T6161] netlink: 'syz.0.70': attribute type 10 has an invalid length. [ 104.561061][ T6161] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.589649][ T6161] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.180678][ T6190] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 105.243950][ T6192] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 105.981212][ T6221] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 106.234881][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 106.835650][ T6243] netlink: 'syz.0.92': attribute type 3 has an invalid length. [ 107.111507][ T6237] bridge_slave_0: left allmulticast mode [ 107.197928][ T6237] bridge_slave_0: left promiscuous mode [ 107.204644][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.536531][ T6237] bridge_slave_1: left allmulticast mode [ 107.542265][ T6237] bridge_slave_1: left promiscuous mode [ 107.644388][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.932521][ T6299] netlink: del zone limit has 4 unknown bytes [ 107.972263][ T6237] bond0: (slave bond_slave_0): Releasing backup interface [ 108.103890][ T6237] bond0: (slave bond_slave_1): Releasing backup interface [ 108.311428][ T6312] netlink: 'syz.4.99': attribute type 10 has an invalid length. [ 108.317321][ T6237] team0: Port device team_slave_0 removed [ 108.374160][ T6237] team0: Port device team_slave_1 removed [ 108.409228][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.427181][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.446798][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.475698][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.540785][ T6237] vxlan0: left allmulticast mode [ 108.554348][ T6237] vxlan0: left promiscuous mode [ 108.569582][ T6237] bridge0: port 3(vxlan0) entered disabled state [ 108.582034][ T6254] !: renamed from dummy0 (while UP) [ 108.628166][ T6318] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 108.646643][ T6320] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 108.661987][ T6178] team0: Mode changed to "loadbalance" [ 108.705597][ T6312] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.716284][ T6312] bond0: (slave team0): Enslaving as an active interface with an up link [ 109.344208][ T6335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.376359][ T6343] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 109.408496][ T6343] Cannot find set identified by id 0 to match [ 109.610733][ T6335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.754370][ T6349] __nla_validate_parse: 7 callbacks suppressed [ 109.754391][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 109.844340][ T6335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.991888][ T6365] netlink: 14 bytes leftover after parsing attributes in process `syz.1.110'. [ 110.069142][ T6335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.307053][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.315566][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.490575][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.517279][ T6392] IPv6: addrconf: prefix option has invalid lifetime [ 110.546447][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.681572][ T6371] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.691006][ T6371] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.700091][ T6371] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.709587][ T6371] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.811430][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.116'. [ 110.844769][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.116'. [ 111.082410][ T6335] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.092413][ T6410] netlink: 'syz.1.122': attribute type 1 has an invalid length. [ 111.122565][ T6412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.124'. [ 111.137165][ T6409] Cannot find set identified by id 2 to match [ 111.162676][ T6335] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.229393][ T6335] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.371246][ T6335] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.378541][ T6418] ieee802154 phy1 wpan1: encryption failed: -22 [ 111.648805][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 111.687667][ T6429] syz_tun: entered allmulticast mode [ 113.355177][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 114.228213][ T6426] syz_tun: left allmulticast mode [ 114.375995][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 114.511497][ T6459] netlink: 68 bytes leftover after parsing attributes in process `syz.2.138'. [ 114.523480][ T6459] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 114.538145][ T6459] netlink: 228 bytes leftover after parsing attributes in process `syz.2.138'. [ 114.623271][ T6467] netlink: 'syz.2.138': attribute type 5 has an invalid length. [ 114.713633][ T6470] netlink: 'syz.3.140': attribute type 2 has an invalid length. [ 114.722185][ T6470] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 114.731760][ T6470] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 115.211814][ T6485] !: renamed from dummy0 (while UP) [ 115.352079][ T6495] nbd: must specify an index to disconnect [ 115.403834][ T6496] tipc: Started in network mode [ 115.430664][ T6496] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 115.449106][ T6496] tipc: Enabled bearer , priority 10 [ 115.464590][ T6503] netlink: 14 bytes leftover after parsing attributes in process `syz.3.147'. [ 115.559822][ T6503] tipc: Resetting bearer [ 115.691760][ T6503] tipc: Disabling bearer [ 115.842356][ T6526] Bluetooth: MGMT ver 1.23 [ 115.860785][ T6520] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 116.180087][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 116.197600][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 116.792674][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 116.816128][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 116.840479][ T6554] netlink: 2 bytes leftover after parsing attributes in process `syz.3.160'. [ 117.734400][ T6583] veth3: entered allmulticast mode [ 117.740662][ T6583] bridge0: port 3(veth3) entered blocking state [ 117.769202][ T6583] bridge0: port 3(veth3) entered disabled state [ 117.779451][ T6583] veth3: entered promiscuous mode [ 117.786440][ T6583] bridge0: port 3(veth3) entered blocking state [ 117.792925][ T6583] bridge0: port 3(veth3) entered forwarding state [ 117.815640][ T1111] bridge0: port 3(veth3) entered disabled state [ 117.911406][ T6592] bond0: (slave team0): Releasing backup interface [ 117.918980][ T5143] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.975534][ T6592] team0 (unregistering): Port device team_slave_0 removed [ 118.038319][ T6592] team0 (unregistering): Port device team_slave_1 removed [ 118.082699][ T6592] team0 (unregistering): Port device wlan1 removed [ 118.158848][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 118.197411][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 118.263488][ T6611] Bluetooth: MGMT ver 1.23 [ 118.443402][ T6609] netlink: 'syz.3.173': attribute type 303 has an invalid length. [ 118.484617][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 118.529232][ T6594] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 118.571898][ T6594] trusted_key: syz.0.168 sent an empty control message without MSG_MORE. [ 118.591629][ T6625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.124922][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'. [ 120.183994][ T6606] syz.3.173 (6606) used greatest stack depth: 18232 bytes left [ 120.326524][ T6639] tipc: Started in network mode [ 120.333271][ T6639] tipc: Node identity 65d, cluster identity 4711 [ 120.353021][ T6639] tipc: Node number set to 1629 [ 120.397082][ T6645] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 120.439305][ T6645] gretap1: entered promiscuous mode [ 120.460833][ T6645] gretap1: entered allmulticast mode [ 120.569393][ T6641] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.584350][ T6660] netlink: 'syz.4.185': attribute type 1 has an invalid length. [ 120.592412][ T6660] __nla_validate_parse: 2 callbacks suppressed [ 120.592430][ T6660] netlink: 144 bytes leftover after parsing attributes in process `syz.4.185'. [ 120.618448][ T6660] netlink: 'syz.4.185': attribute type 1 has an invalid length. [ 120.627436][ T6660] netlink: 76 bytes leftover after parsing attributes in process `syz.4.185'. [ 120.802039][ T6641] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.824409][ T6668] hsr0: entered promiscuous mode [ 120.836825][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 120.857531][ T6668] hsr_slave_0: left promiscuous mode [ 120.870803][ T6668] hsr_slave_1: left promiscuous mode [ 120.914583][ T6668] hsr0 (unregistering): left promiscuous mode [ 120.956252][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 120.993781][ T6641] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.043430][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 121.119407][ T6641] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.258928][ T6684] netlink: 508 bytes leftover after parsing attributes in process `syz.4.190'. [ 121.337227][ T6684] netlink: 44 bytes leftover after parsing attributes in process `syz.4.190'. [ 121.341553][ T6647] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.363467][ T6684] netlink: 88 bytes leftover after parsing attributes in process `syz.4.190'. [ 121.392458][ T6647] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.460691][ T6647] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.493786][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 121.498525][ T6647] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.626979][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 122.349076][ T6699] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 122.399755][ T6699] syzkaller0: entered promiscuous mode [ 122.405576][ T6699] syzkaller0: entered allmulticast mode [ 122.862722][ T6740] x_tables: duplicate underflow at hook 3 [ 123.998141][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 124.308008][ T6754] netlink: 'syz.2.208': attribute type 10 has an invalid length. [ 124.402850][ T6754] team0: Port device wlan1 added [ 124.993340][ T6784] vlan2: entered promiscuous mode [ 125.002625][ T6784] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 125.011162][ T6784] vlan2: entered allmulticast mode [ 125.028349][ T6784] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 125.431069][ T6791] tipc: Enabling of bearer rejected, media not registered [ 126.304067][ T6836] __nla_validate_parse: 3 callbacks suppressed [ 126.304087][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 126.743712][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 126.983938][ T6863] veth0: entered promiscuous mode [ 127.022560][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 127.077418][ T6871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.243'. [ 127.173480][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 127.232537][ T6880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.245'. [ 127.288137][ T6877] xt_CT: No such helper "pptp" [ 127.577974][ T6861] veth0: left promiscuous mode [ 127.772065][ T6901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.249'. [ 127.828167][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 127.859105][ T6908] netlink: 176 bytes leftover after parsing attributes in process `syz.1.250'. [ 127.878891][ T6905] netlink: 3 bytes leftover after parsing attributes in process `syz.2.249'. [ 127.986007][ T6905] batadv1: entered promiscuous mode [ 128.012820][ T6905] batadv1: entered allmulticast mode [ 128.065853][ T6914] xt_TCPMSS: Only works on TCP SYN packets [ 128.216971][ T6917] vlan0: entered promiscuous mode [ 128.244539][ T6918] netlink: 'syz.1.254': attribute type 3 has an invalid length. [ 128.810643][ T6942] syzkaller1: entered promiscuous mode [ 128.831739][ T6942] syzkaller1: entered allmulticast mode [ 129.521147][ T6975] IPv6: Can't replace route, no match found [ 129.768658][ T6982] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 129.793126][ T6982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.781166][ T7028] bond_slave_1: entered promiscuous mode [ 130.838005][ T7028] bond0: (slave bond_slave_1): Releasing backup interface [ 130.877871][ T7028] bond_slave_1 (unregistering): left promiscuous mode [ 130.940577][ T7033] xt_bpf: check failed: parse error [ 131.265065][ T7048] tap0: tun_chr_ioctl cmd 1074025677 [ 131.314911][ T7048] tap0: linktype set to 270 [ 131.538055][ T7061] __nla_validate_parse: 13 callbacks suppressed [ 131.538080][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 131.549611][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 131.620781][ T7061] netlink: 96 bytes leftover after parsing attributes in process `syz.4.296'. [ 131.699023][ T7072] x_tables: duplicate underflow at hook 1 [ 131.885391][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 131.988461][ T7080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.000746][ T7080] bridge0: port 4(bond1) entered blocking state [ 132.008366][ T7080] bridge0: port 4(bond1) entered disabled state [ 132.015192][ T7080] bond1: entered allmulticast mode [ 132.023118][ T7080] bond1: entered promiscuous mode [ 132.029308][ T7080] bridge0: port 4(bond1) entered blocking state [ 132.035757][ T7080] bridge0: port 4(bond1) entered forwarding state [ 132.177188][ T7089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.303'. [ 132.408025][ T6289] bridge0: port 4(bond1) entered disabled state [ 132.468873][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.307'. [ 132.519955][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.307'. [ 132.726223][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'. [ 133.125155][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.362105][ T7130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.741601][ T7140] TCP: TCP_TX_DELAY enabled [ 134.258202][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 134.288628][ T7159] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 134.329759][ T7159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.561050][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.569099][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.753268][ T7172] x_tables: duplicate underflow at hook 2 [ 134.821947][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 134.946737][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.982498][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.224160][ T7163] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.239942][ T7163] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.250195][ T7163] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.265199][ T7163] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.573552][ T7166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.742487][ T7166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.819945][ T7180] macvtap1: entered promiscuous mode [ 135.835644][ T7180] hsr0: entered promiscuous mode [ 135.846800][ T7180] macvtap1: entered allmulticast mode [ 135.861910][ T7180] hsr0: entered allmulticast mode [ 135.874890][ T7180] hsr_slave_0: entered allmulticast mode [ 135.880848][ T7180] hsr_slave_1: entered allmulticast mode [ 135.889738][ T7180] hsr0: left allmulticast mode [ 135.897503][ T7180] hsr_slave_0: left allmulticast mode [ 135.902929][ T7180] hsr_slave_1: left allmulticast mode [ 135.909979][ T7180] hsr0: left promiscuous mode [ 135.974115][ T7166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.025144][ T7188] netlink: 'syz.4.331': attribute type 1 has an invalid length. [ 136.154213][ T7166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.184142][ T7203] netlink: 'syz.3.333': attribute type 3 has an invalid length. [ 136.204907][ T7203] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 136.410676][ T7166] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.413535][ T7210] GUP no longer grows the stack in syz.4.336 (7210): 200000006000-20000000a000 (200000005000) [ 136.438815][ T7210] CPU: 1 UID: 0 PID: 7210 Comm: syz.4.336 Not tainted 6.15.0-rc7-syzkaller-01759-gf5b60d6a575a #0 PREEMPT(full) [ 136.438845][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.438856][ T7210] Call Trace: [ 136.438864][ T7210] [ 136.438872][ T7210] dump_stack_lvl+0x189/0x250 [ 136.438908][ T7210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.438935][ T7210] ? __pfx__printk+0x10/0x10 [ 136.438951][ T7210] ? find_vma+0xe7/0x160 [ 136.438989][ T7210] __get_user_pages+0x24e4/0x2a40 [ 136.439050][ T7210] ? __pfx___get_user_pages+0x10/0x10 [ 136.439071][ T7210] ? __gup_longterm_locked+0xbf7/0x15b0 [ 136.439093][ T7210] ? down_read_killable+0x1d1/0x350 [ 136.439113][ T7210] ? try_get_folio+0x633/0x660 [ 136.439139][ T7210] __gup_longterm_locked+0xd66/0x15b0 [ 136.439168][ T7210] ? try_grab_folio_fast+0x19a/0x4d0 [ 136.439197][ T7210] ? gup_fast_fallback+0x1672/0x1d60 [ 136.439217][ T7210] gup_fast_fallback+0x1843/0x1d60 [ 136.439267][ T7210] ? __pfx_gup_fast_fallback+0x10/0x10 [ 136.439281][ T7210] ? __mutex_lock+0x330/0xe80 [ 136.439300][ T7210] ? update_curr_dl_se+0x107/0xa20 [ 136.439329][ T7210] ? is_valid_gup_args+0x11f/0x200 [ 136.439347][ T7210] ? get_user_pages_fast+0x4d/0xb0 [ 136.439375][ T7210] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 136.439412][ T7210] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 136.439437][ T7210] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 136.439451][ T7210] ? wait_for_space+0x24d/0x2d0 [ 136.439479][ T7210] iov_iter_get_pages2+0x5e/0xa0 [ 136.439512][ T7210] __se_sys_vmsplice+0x548/0x10e0 [ 136.439573][ T7210] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 136.439602][ T7210] ? __pfx_futex_wake+0x10/0x10 [ 136.439635][ T7210] ? __lock_acquire+0xaac/0xd20 [ 136.439718][ T7210] ? rcu_is_watching+0x15/0xb0 [ 136.439748][ T7210] ? do_syscall_64+0xba/0x210 [ 136.439774][ T7210] do_syscall_64+0xf6/0x210 [ 136.439796][ T7210] ? clear_bhb_loop+0x60/0xb0 [ 136.439818][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.439835][ T7210] RIP: 0033:0x7f5f1938e969 [ 136.439853][ T7210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.439867][ T7210] RSP: 002b:00007f5f1a1c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 136.439887][ T7210] RAX: ffffffffffffffda RBX: 00007f5f195b5fa0 RCX: 00007f5f1938e969 [ 136.439901][ T7210] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 136.439911][ T7210] RBP: 00007f5f19410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 136.439922][ T7210] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 136.439933][ T7210] R13: 0000000000000000 R14: 00007f5f195b5fa0 R15: 00007fff3e49cd18 [ 136.439966][ T7210] [ 136.459452][ T7166] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.760082][ T7166] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.824590][ T7166] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.203114][ T7231] bridge_slave_0: left allmulticast mode [ 137.229266][ T7231] bridge_slave_0: left promiscuous mode [ 137.255740][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.266001][ T7233] netlink: 'syz.2.340': attribute type 10 has an invalid length. [ 137.298655][ T7232] netlink: 'syz.1.341': attribute type 23 has an invalid length. [ 137.299472][ T7231] bridge_slave_1: left allmulticast mode [ 137.372779][ T7231] bridge_slave_1: left promiscuous mode [ 137.410428][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.410491][ T7237] IPv6: Can't replace route, no match found [ 137.447041][ T7231] bond0: (slave bond_slave_0): Releasing backup interface [ 137.461532][ T7231] bond0: (slave bond_slave_1): Releasing backup interface [ 137.499862][ T7231] team0: Port device team_slave_0 removed [ 137.522474][ T7231] team0: Port device team_slave_1 removed [ 137.529184][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.550989][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.613447][ T7231] team0: Port device wlan1 removed [ 137.632658][ T7231] veth3: left promiscuous mode [ 137.652475][ T7231] bridge0: port 3(veth3) entered disabled state [ 137.679838][ T7231] bond1: left allmulticast mode [ 137.704816][ T7231] bond1: left promiscuous mode [ 137.712927][ T7231] bridge0: port 4(bond1) entered disabled state [ 137.890013][ T7253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.954559][ T7233] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 138.893194][ T7292] Cannot find del_set index 0 as target [ 140.611596][ T7300] vlan2: entered promiscuous mode [ 140.616746][ T7300] bond0: entered promiscuous mode [ 140.621793][ T7300] bond_slave_0: entered promiscuous mode [ 140.627851][ T7300] bond_slave_1: entered promiscuous mode [ 140.633736][ T7300] vlan2: entered allmulticast mode [ 140.639313][ T7300] bond0: entered allmulticast mode [ 140.644539][ T7300] bond_slave_0: entered allmulticast mode [ 140.652836][ T7300] bond_slave_1: entered allmulticast mode [ 141.125000][ T7336] bridge: RTM_NEWNEIGH with invalid ether address [ 141.305119][ T7343] batman_adv: batadv0: Adding interface: ip6gretap1 [ 141.329134][ T7343] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.382528][ T7343] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 141.420275][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.436162][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.480204][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.494033][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.521243][ T7344] batman_adv: batadv0: Removing interface: ip6gretap1 [ 141.890314][ T7359] pim6reg1: entered promiscuous mode [ 141.928384][ T7359] pim6reg1: entered allmulticast mode [ 142.214365][ T7359] __nla_validate_parse: 6 callbacks suppressed [ 142.214387][ T7359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.376'. [ 142.498858][ T7369] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 142.608424][ T7371] 8021q: VLANs not supported on nlmon0 [ 142.736211][ T7376] netlink: 'syz.2.379': attribute type 10 has an invalid length. [ 142.744034][ T7376] macvlan0: entered promiscuous mode [ 142.965451][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 142.995342][ T7389] vlan0: entered promiscuous mode [ 143.000889][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 143.136758][ T7399] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 143.187201][ T7399] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 143.371873][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.392'. [ 143.460742][ T7412] netlink: 'syz.2.393': attribute type 9 has an invalid length. [ 143.469528][ T7412] netlink: 'syz.2.393': attribute type 6 has an invalid length. [ 143.473721][ T7406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.509252][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 143.527938][ T7410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.537914][ T7410] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 143.550566][ T7410] bond1: (slave vcan1): Error -95 calling set_mac_address [ 143.621573][ T7406] bond2: entered allmulticast mode [ 143.731079][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 143.740175][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 144.026419][ T7427] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.180924][ T7427] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.202198][ T7440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.401'. [ 144.248331][ T7443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.398'. [ 144.314384][ T7427] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.437671][ T7427] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.592987][ T7446] syzkaller0: entered promiscuous mode [ 144.599546][ T7446] syzkaller0: entered allmulticast mode [ 144.680063][ T7427] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.936020][ T7427] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.955084][ T7427] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.000701][ T7427] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.225748][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 146.258724][ T7466] block nbd0: not configured, cannot reconfigure [ 146.336870][ T7479] netlink: 'syz.1.412': attribute type 4 has an invalid length. [ 146.642100][ T7490] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 146.738775][ T7501] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 146.765371][ T7499] Bluetooth: MGMT ver 1.23 [ 146.780112][ T7499] geneve2: entered promiscuous mode [ 147.039260][ T7511] vlan2: entered promiscuous mode [ 147.055063][ T7511] bond0: entered promiscuous mode [ 147.925160][ T7541] tipc: Started in network mode [ 147.935434][ T7541] tipc: Node identity 76699db74b5c, cluster identity 4711 [ 147.952051][ T7541] tipc: Enabled bearer , priority 0 [ 148.163471][ T7537] syzkaller0: entered promiscuous mode [ 148.197391][ T7537] syzkaller0: entered allmulticast mode [ 148.214102][ T7537] tipc: Resetting bearer [ 148.332535][ T2911] tipc: Resetting bearer [ 148.356388][ T7549] batadv1: entered allmulticast mode [ 148.363360][ T7549] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.402401][ T7557] __nla_validate_parse: 3 callbacks suppressed [ 148.402423][ T7557] netlink: 92 bytes leftover after parsing attributes in process `syz.2.428'. [ 148.449539][ T7557] tc_dump_action: action bad kind [ 148.465482][ T7534] tipc: Resetting bearer [ 148.735290][ T7568] sctp: [Deprecated]: syz.1.433 (pid 7568) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.735290][ T7568] Use struct sctp_sack_info instead [ 148.801356][ T7570] IPVS: length: 180 != 8 [ 149.026082][ T47] tipc: Node number set to 1026923959 [ 149.182864][ T7574] x_tables: duplicate underflow at hook 2 [ 149.632050][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 149.668041][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 149.687741][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 149.707301][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 149.727894][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 149.747902][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 149.790913][ T10] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v4.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 150.970365][ T7587] IPVS: length: 78 != 8 [ 151.037219][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 151.070996][ T7534] tipc: Disabling bearer [ 151.086520][ T7576] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 151.088514][ T7579] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 151.131296][ T7579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.398193][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 151.713255][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 151.868370][ T7627] netlink: 308 bytes leftover after parsing attributes in process `syz.0.449'. [ 151.891435][ T7627] netlink: 308 bytes leftover after parsing attributes in process `syz.0.449'. [ 151.971889][ T7632] netlink: 'syz.2.450': attribute type 23 has an invalid length. [ 152.021740][ T7634] netlink: 140 bytes leftover after parsing attributes in process `syz.0.451'. [ 152.026977][ T7614] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 152.044496][ T7614] openvswitch: netlink: Message has 4 unknown bytes. [ 152.051397][ T7614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.528769][ T7654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.456'. [ 152.755060][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.459'. [ 153.193103][ T7676] tipc: Started in network mode [ 153.198580][ T7676] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 153.215104][ T7676] tipc: Enabling of bearer rejected, failed to enable media [ 153.235006][ T7678] netlink: 'syz.2.463': attribute type 10 has an invalid length. [ 153.487076][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 153.578111][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 153.735667][ T7700] netlink: 'syz.1.468': attribute type 32 has an invalid length. [ 153.872286][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 153.904198][ T7698] geneve2: entered promiscuous mode [ 153.951647][ T7698] geneve2: entered allmulticast mode [ 154.003599][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.461'. [ 154.010765][ T7708] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 154.014584][ T7714] netlink: 596 bytes leftover after parsing attributes in process `syz.0.472'. [ 154.440183][ T7727] veth0_macvtap: left promiscuous mode [ 154.457301][ T7727] macvtap0: entered promiscuous mode [ 154.466305][ T7727] macvtap0: entered allmulticast mode [ 154.484937][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.477'. [ 154.539430][ T7731] veth1_macvtap: left promiscuous mode [ 154.702895][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.480'. [ 155.350210][ T7756] netlink: 'syz.4.486': attribute type 32 has an invalid length. [ 155.756015][ T7770] xt_TPROXY: Can be used only with -p tcp or -p udp [ 155.767774][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.493'. [ 155.850762][ T7776] raw_sendmsg: syz.3.494 forgot to set AF_INET. Fix it! [ 155.903342][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 156.002602][ T5848] Bluetooth: hci4: link tx timeout [ 156.009325][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.473448][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.502'. [ 156.749914][ T7819] macsec1: entered allmulticast mode [ 156.772006][ T7819] batadv0: entered allmulticast mode [ 156.816732][ T7819] batadv0: left allmulticast mode [ 157.758342][ T7854] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.860938][ T7854] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.921354][ T7854] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.998505][ T7854] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.067580][ T5943] IPVS: starting estimator thread 0... [ 158.085035][ T5143] Bluetooth: hci4: command 0x0405 tx timeout [ 158.092134][ T7869] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.105654][ T7870] netlink: 'syz.2.521': attribute type 39 has an invalid length. [ 158.176752][ T7854] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.194807][ T7871] IPVS: using max 25 ests per chain, 60000 per kthread [ 158.200374][ T7854] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.260688][ T7854] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.300606][ T7854] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.310138][ T7876] netlink: 'syz.0.524': attribute type 4 has an invalid length. [ 158.336393][ T7876] netlink: 'syz.0.524': attribute type 4 has an invalid length. [ 158.531727][ T7883] __nla_validate_parse: 2 callbacks suppressed [ 158.531746][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 158.539802][ T7885] netlink: 140 bytes leftover after parsing attributes in process `syz.1.529'. [ 158.955268][ T7902] netlink: 'syz.2.533': attribute type 38 has an invalid length. [ 158.999893][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 159.011777][ T7898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.128734][ T5892] IPVS: starting estimator thread 0... [ 159.133162][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.225548][ T7914] netlink: 'syz.0.538': attribute type 9 has an invalid length. [ 159.235108][ T7911] IPVS: using max 23 ests per chain, 55200 per kthread [ 159.314538][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.539'. [ 159.400427][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 159.409498][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 159.536940][ T7926] geneve0: entered allmulticast mode [ 159.672475][ T7932] Cannot find set identified by id 2 to match [ 159.687185][ T7929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.543'. [ 159.703647][ T7934] netlink: 60 bytes leftover after parsing attributes in process `syz.4.543'. [ 159.854520][ T7941] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 160.005408][ T7946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.475106][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 160.496631][ T7961] netlink: 68 bytes leftover after parsing attributes in process `syz.0.551'. [ 160.656983][ T7970] IPv6: Can't replace route, no match found [ 160.891906][ T7980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.944981][ T7985] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 161.229226][ T8000] tipc: Enabling of bearer rejected, failed to enable media [ 161.682820][ T8029] netlink: 'syz.4.568': attribute type 1 has an invalid length. [ 161.714201][ T8029] netlink: 'syz.4.568': attribute type 2 has an invalid length. [ 162.537570][ T8063] netlink: 'syz.3.578': attribute type 10 has an invalid length. [ 162.546147][ T8059] netlink: 'syz.4.577': attribute type 12 has an invalid length. [ 162.562732][ T8063] team0: Device veth1_macvtap failed to register rx_handler [ 162.671375][ T8059] syzkaller0: entered promiscuous mode [ 162.690155][ T8059] syzkaller0: entered allmulticast mode [ 163.440476][ T8103] x_tables: duplicate underflow at hook 1 [ 163.548470][ T8106] __nla_validate_parse: 10 callbacks suppressed [ 163.548492][ T8106] netlink: 72 bytes leftover after parsing attributes in process `syz.3.591'. [ 163.570572][ T8106] netlink: 72 bytes leftover after parsing attributes in process `syz.3.591'. [ 163.603452][ T8109] netlink: 72 bytes leftover after parsing attributes in process `syz.3.591'. [ 163.614514][ T8109] netlink: 72 bytes leftover after parsing attributes in process `syz.3.591'. [ 163.629372][ T8106] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 163.721344][ T8112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 163.761720][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 164.180180][ T8125] netlink: 152 bytes leftover after parsing attributes in process `syz.0.597'. [ 164.302965][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.595'. [ 164.307884][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.599'. [ 164.354293][ T8133] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 164.485096][ T8133] netlink: 40 bytes leftover after parsing attributes in process `syz.3.599'. [ 164.581505][ T8147] sctp: [Deprecated]: syz.2.602 (pid 8147) Use of int in maxseg socket option. [ 164.581505][ T8147] Use struct sctp_assoc_value instead [ 164.869733][ T8157] syzkaller1: entered promiscuous mode [ 164.926008][ T8157] syzkaller1: entered allmulticast mode [ 164.987646][ T8159] gtp0: entered promiscuous mode [ 164.992684][ T8159] gtp0: entered allmulticast mode [ 165.705972][ T8186] netlink: 'syz.2.610': attribute type 1 has an invalid length. [ 165.923971][ T8199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.083365][ T8202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.154093][ T8202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.186295][ T8255] netlink: 'syz.4.626': attribute type 7 has an invalid length. [ 167.220293][ T8257] FAULT_INJECTION: forcing a failure. [ 167.220293][ T8257] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.235296][ T8257] CPU: 0 UID: 0 PID: 8257 Comm: syz.2.629 Not tainted 6.15.0-rc7-syzkaller-01759-gf5b60d6a575a #0 PREEMPT(full) [ 167.235323][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.235333][ T8257] Call Trace: [ 167.235342][ T8257] [ 167.235350][ T8257] dump_stack_lvl+0x189/0x250 [ 167.235381][ T8257] ? __lock_acquire+0xaac/0xd20 [ 167.235410][ T8257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.235435][ T8257] ? __pfx__printk+0x10/0x10 [ 167.235455][ T8257] ? __might_fault+0xb0/0x130 [ 167.235493][ T8257] should_fail_ex+0x414/0x560 [ 167.235520][ T8257] _copy_from_user+0x2d/0xb0 [ 167.235559][ T8257] __sys_connect+0x123/0x440 [ 167.235583][ T8257] ? __fget_files+0x3a0/0x420 [ 167.235610][ T8257] ? __pfx___sys_connect+0x10/0x10 [ 167.235659][ T8257] __x64_sys_connect+0x7a/0x90 [ 167.235685][ T8257] do_syscall_64+0xf6/0x210 [ 167.235708][ T8257] ? clear_bhb_loop+0x60/0xb0 [ 167.235731][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.235749][ T8257] RIP: 0033:0x7fa480d8e969 [ 167.235765][ T8257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.235780][ T8257] RSP: 002b:00007fa481b93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 167.235800][ T8257] RAX: ffffffffffffffda RBX: 00007fa480fb5fa0 RCX: 00007fa480d8e969 [ 167.235814][ T8257] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 167.235825][ T8257] RBP: 00007fa481b93090 R08: 0000000000000000 R09: 0000000000000000 [ 167.235836][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.235847][ T8257] R13: 0000000000000000 R14: 00007fa480fb5fa0 R15: 00007fffd89e7cf8 [ 167.235878][ T8257] [ 167.516110][ T5143] Bluetooth: hci4: command 0x0405 tx timeout [ 167.609129][ T8255] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.657548][ T8266] ip6tnl0: entered promiscuous mode [ 167.663367][ T8266] ip6tnl0: entered allmulticast mode [ 167.694284][ T8255] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.777964][ T8272] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 167.890074][ T8255] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.010244][ T8279] x_tables: duplicate underflow at hook 3 [ 168.038319][ T8255] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.249387][ T8255] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.313952][ T8255] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.363478][ T8255] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.534478][ T8255] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.792254][ T8307] __nla_validate_parse: 16 callbacks suppressed [ 168.792276][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.643'. [ 168.847055][ T8305] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 168.949227][ T8316] pim6reg1: entered promiscuous mode [ 168.984510][ T8316] pim6reg1: entered allmulticast mode [ 169.491960][ T8343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.523616][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 169.533228][ T8345] bond0: option use_carrier: invalid value (116) [ 169.542698][ T8345] netlink: 'syz.0.651': attribute type 10 has an invalid length. [ 169.631662][ T8352] ipt_ECN: cannot use operation on non-tcp rule [ 169.755783][ T8354] syzkaller0: entered allmulticast mode [ 169.787420][ T8354] syzkaller0 (unregistering): left allmulticast mode [ 170.031668][ T8359] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 170.043153][ T8359] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 170.382244][ T8367] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 170.417929][ T8367] team0: Device ipvlan1 failed to register rx_handler [ 170.457675][ T8372] netlink: 40 bytes leftover after parsing attributes in process `syz.2.661'. [ 170.522185][ T8375] netlink: 240 bytes leftover after parsing attributes in process `syz.4.660'. [ 170.631310][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.663'. [ 170.632340][ T8369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.651965][ T8369] bond0: (slave bond3): Enslaving as an active interface with an up link [ 170.660818][ T8373] netlink: 96 bytes leftover after parsing attributes in process `syz.4.660'. [ 171.194312][ T8412] netlink: 'syz.4.671': attribute type 10 has an invalid length. [ 171.229008][ T8412] netlink: 2 bytes leftover after parsing attributes in process `syz.4.671'. [ 171.254908][ T8412] team0: entered promiscuous mode [ 171.281853][ T8412] team_slave_0: entered promiscuous mode [ 171.289070][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 171.308238][ T8412] team_slave_1: entered promiscuous mode [ 171.338479][ T8412] bond0: (slave team0): Releasing backup interface [ 171.393216][ T8412] bridge0: port 3(team0) entered blocking state [ 171.416224][ T8412] bridge0: port 3(team0) entered disabled state [ 171.444116][ T8412] team0: entered allmulticast mode [ 171.471307][ T8412] team_slave_0: entered allmulticast mode [ 171.490159][ T8412] team_slave_1: entered allmulticast mode [ 171.691141][ T30] audit: type=1804 audit(1748338514.399:2): pid=8439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.678" name="/newroot/140/cgroup.controllers" dev="tmpfs" ino=738 res=1 errno=0 [ 171.754578][ T30] audit: type=1800 audit(1748338514.399:3): pid=8439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.678" name="cgroup.controllers" dev="tmpfs" ino=738 res=0 errno=0 [ 171.799087][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.680'. [ 171.817964][ T8444] netlink: 56 bytes leftover after parsing attributes in process `syz.3.679'. [ 172.227604][ T8468] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 172.614526][ T8488] netlink: 'syz.1.689': attribute type 16 has an invalid length. [ 172.623124][ T8488] netlink: 'syz.1.689': attribute type 17 has an invalid length. [ 172.665471][ T8488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.688819][ T844] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 172.765025][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 174.144874][ T8550] __nla_validate_parse: 5 callbacks suppressed [ 174.144985][ T8550] netlink: 84 bytes leftover after parsing attributes in process `syz.0.710'. [ 174.373190][ T8563] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20002 [ 174.423275][ T8568] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 174.489110][ T8571] netlink: 192 bytes leftover after parsing attributes in process `syz.2.714'. [ 174.568930][ T8568] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.585424][ T8574] netlink: 'syz.3.715': attribute type 8 has an invalid length. [ 174.746878][ T8583] netlink: 'syz.0.717': attribute type 4 has an invalid length. [ 174.766521][ T8581] netlink: 'syz.0.717': attribute type 4 has an invalid length. [ 175.319881][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'. [ 175.403201][ T8616] sctp: [Deprecated]: syz.1.726 (pid 8616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.403201][ T8616] Use struct sctp_sack_info instead [ 175.420110][ T8616] sctp: [Deprecated]: syz.1.726 (pid 8616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.420110][ T8616] Use struct sctp_sack_info instead [ 176.059605][ T8646] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 176.097487][ T8646] batman_adv: batadv0: Adding interface: ip6gretap1 [ 176.104312][ T8646] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.195406][ T8646] batman_adv: batadv0: Interface activated: ip6gretap1 [ 176.621493][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 176.658544][ T8671] netlink: 253 bytes leftover after parsing attributes in process `syz.4.741'. [ 176.691175][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 176.718743][ T8673] tap0: tun_chr_ioctl cmd 2147767506 [ 176.739658][ T8673] tap0: tun_chr_ioctl cmd 3489698834 [ 176.952062][ T8683] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 177.041086][ T8696] netlink: 96 bytes leftover after parsing attributes in process `syz.3.752'. [ 177.419765][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 177.575549][ T8711] hsr0: entered promiscuous mode [ 177.602945][ T8711] hsr0: entered allmulticast mode [ 177.635050][ T8711] hsr_slave_0: entered allmulticast mode [ 177.642317][ T8711] hsr_slave_1: entered allmulticast mode [ 177.651087][ T8714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.758'. [ 177.858796][ T8721] netlink: 48 bytes leftover after parsing attributes in process `syz.4.759'. [ 177.933426][ T8723] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 178.327971][ T8748] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 178.979978][ T8780] pim6reg1: entered promiscuous mode [ 179.029527][ T8780] pim6reg1: entered allmulticast mode [ 179.572517][ T8788] __nla_validate_parse: 1 callbacks suppressed [ 179.572538][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.779'. [ 179.883585][ T8811] Cannot find add_set index 0 as target [ 180.313079][ T8830] vlan2: entered promiscuous mode [ 180.623415][ T8851] netlink: 72 bytes leftover after parsing attributes in process `syz.1.795'. [ 180.727700][ T8856] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 180.770911][ T8860] netlink: 'syz.0.796': attribute type 10 has an invalid length. [ 180.779198][ T8857] netlink: 'syz.0.796': attribute type 10 has an invalid length. [ 180.789569][ T8857] netlink: 2 bytes leftover after parsing attributes in process `syz.0.796'. [ 180.809207][ T8860] netlink: 2 bytes leftover after parsing attributes in process `syz.0.796'. [ 180.821851][ T8857] team0: entered promiscuous mode [ 180.837130][ T8857] team_slave_0: entered promiscuous mode [ 180.843399][ T8857] team_slave_1: entered promiscuous mode [ 180.875080][ T8857] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.917600][ T8857] bond0: (slave team0): Releasing backup interface [ 180.968374][ T8857] bridge0: port 3(team0) entered blocking state [ 180.988603][ T8857] bridge0: port 3(team0) entered disabled state [ 181.009276][ T8857] team0: entered allmulticast mode [ 181.014707][ T8857] team_slave_0: entered allmulticast mode [ 181.031421][ T8857] team_slave_1: entered allmulticast mode [ 181.060058][ T8860] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.077242][ T8863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.798'. [ 181.759475][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 181.832789][ T8914] netlink: 44 bytes leftover after parsing attributes in process `syz.4.812'. [ 182.049336][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.814'. [ 182.303662][ T8933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.819'. [ 182.336919][ T8933] netlink: 56 bytes leftover after parsing attributes in process `syz.1.819'. [ 182.373582][ T8933] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 182.413086][ T8933] gretap2: entered promiscuous mode [ 182.433153][ T8933] gretap2: entered allmulticast mode [ 182.903903][ T8963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.030854][ T8967] geneve2: entered promiscuous mode [ 183.355924][ T8987] xt_hashlimit: size too large, truncated to 1048576 [ 185.069503][ T8986] xfrm1: entered promiscuous mode [ 185.074608][ T8986] xfrm1: entered allmulticast mode [ 185.082960][ T8998] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 185.087367][ T9000] IPVS: Error connecting to the multicast addr [ 185.305033][ T9017] __nla_validate_parse: 11 callbacks suppressed [ 185.305054][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 185.355095][ T9017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.054262][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 186.457011][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 186.653418][ T9074] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 186.705235][ T9078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.858'. [ 186.812063][ T9085] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 186.827603][ T9074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.851737][ T9086] vlan0: entered allmulticast mode [ 186.857210][ T9086] bond2: entered allmulticast mode [ 186.879331][ T9087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.931485][ T9083] ip6erspan0: entered promiscuous mode [ 186.942535][ T9083] bond2: (slave ip6erspan0): making interface the new active one [ 186.951817][ T9083] ip6erspan0: entered allmulticast mode [ 186.959948][ T9083] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 187.224258][ T9099] netlink: 'syz.3.864': attribute type 4 has an invalid length. [ 187.336790][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 187.353000][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 187.365905][ T9108] netlink: 10 bytes leftover after parsing attributes in process `syz.0.863'. [ 187.664314][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.868'. [ 187.690444][ T9124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.868'. [ 187.760007][ T9124] sctp: [Deprecated]: syz.3.868 (pid 9124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.760007][ T9124] Use struct sctp_sack_info instead [ 187.835882][ T5943] IPVS: starting estimator thread 0... [ 187.873481][ T844] IPVS: starting estimator thread 0... [ 187.931276][ T9131] IPVS: using max 23 ests per chain, 55200 per kthread [ 187.978165][ T9133] IPVS: using max 27 ests per chain, 64800 per kthread [ 188.257006][ T9153] netlink: 48 bytes leftover after parsing attributes in process `syz.4.878'. [ 188.574373][ T9162] veth5: entered promiscuous mode [ 189.022947][ T9191] batman_adv: batadv0: Adding interface: ip6gretap2 [ 189.053768][ T9191] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.089527][ T9191] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 189.102471][ T9195] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 189.141831][ T9195] batman_adv: batadv0: Removing interface: ip6gretap1 [ 189.155283][ T9195] batman_adv: batadv0: Removing interface: ip6gretap2 [ 189.894375][ T9232] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (20) [ 189.914577][ T9230] vlan0: entered promiscuous mode [ 190.722862][ T8980] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 190.771504][ T9277] dummy0: mtu less than device minimum [ 190.818912][ T9280] netlink: 'syz.4.915': attribute type 21 has an invalid length. [ 190.888220][ T9280] __nla_validate_parse: 5 callbacks suppressed [ 190.888239][ T9280] netlink: 132 bytes leftover after parsing attributes in process `syz.4.915'. [ 190.918819][ T9288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 191.057304][ T9302] ipt_ECN: cannot use operation on non-tcp rule [ 191.098046][ T9308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.920'. [ 191.138953][ T9308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.920'. [ 191.323817][ T9319] netlink: 'syz.2.924': attribute type 23 has an invalid length. [ 191.611697][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 191.625041][ T9340] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 191.636671][ T9340] netlink: 232 bytes leftover after parsing attributes in process `syz.3.930'. [ 191.651660][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 191.735502][ T9350] netlink: 60 bytes leftover after parsing attributes in process `syz.2.931'. [ 191.764188][ T9341] netlink: 60 bytes leftover after parsing attributes in process `syz.2.931'. [ 191.776445][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'. [ 191.807204][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'. [ 192.157829][ T9369] vlan4: entered promiscuous mode [ 192.586378][ T9398] netlink: 'syz.4.946': attribute type 32 has an invalid length. [ 192.595998][ T9398] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 192.833341][ T9411] wg2: entered promiscuous mode [ 192.839089][ T9411] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 192.882167][ T9410] syzkaller1: entered promiscuous mode [ 192.887836][ T9410] syzkaller1: entered allmulticast mode [ 192.946993][ T9415] FAULT_INJECTION: forcing a failure. [ 192.946993][ T9415] name failslab, interval 1, probability 0, space 0, times 1 [ 192.960160][ T9415] CPU: 0 UID: 0 PID: 9415 Comm: syz.3.953 Not tainted 6.15.0-rc7-syzkaller-01759-gf5b60d6a575a #0 PREEMPT(full) [ 192.960184][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.960191][ T9415] Call Trace: [ 192.960196][ T9415] [ 192.960201][ T9415] dump_stack_lvl+0x189/0x250 [ 192.960222][ T9415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.960237][ T9415] ? __pfx__printk+0x10/0x10 [ 192.960251][ T9415] ? __lock_acquire+0xaac/0xd20 [ 192.960269][ T9415] should_fail_ex+0x414/0x560 [ 192.960285][ T9415] should_failslab+0xa8/0x100 [ 192.960300][ T9415] kmem_cache_alloc_noprof+0x73/0x3c0 [ 192.960313][ T9415] ? __inet_hash_connect+0x151e/0x2310 [ 192.960334][ T9415] __inet_hash_connect+0x151e/0x2310 [ 192.960356][ T9415] ? __inet_hash_connect+0x4fa/0x2310 [ 192.960375][ T9415] ? __pfx___inet_hash_connect+0x10/0x10 [ 192.960393][ T9415] ? inet_hash_connect+0x12f/0x240 [ 192.960408][ T9415] tcp_v4_connect+0xd42/0x19d0 [ 192.960432][ T9415] ? __pfx_tcp_v4_connect+0x10/0x10 [ 192.960446][ T9415] ? tcp_v6_connect+0x635/0x1880 [ 192.960462][ T9415] tcp_v6_connect+0xab7/0x1880 [ 192.960481][ T9415] ? __pfx_tcp_v6_connect+0x10/0x10 [ 192.960494][ T9415] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 192.960527][ T9415] __inet_stream_connect+0x298/0xf10 [ 192.960562][ T9415] ? __local_bh_enable_ip+0x12d/0x1c0 [ 192.960580][ T9415] ? __pfx___inet_stream_connect+0x10/0x10 [ 192.960601][ T9415] ? __local_bh_enable_ip+0x12d/0x1c0 [ 192.960618][ T9415] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 192.960649][ T9415] inet_stream_connect+0x66/0xa0 [ 192.960670][ T9415] __sys_connect+0x313/0x440 [ 192.960684][ T9415] ? __fget_files+0x3a0/0x420 [ 192.960698][ T9415] ? __pfx___sys_connect+0x10/0x10 [ 192.960722][ T9415] __x64_sys_connect+0x7a/0x90 [ 192.960736][ T9415] do_syscall_64+0xf6/0x210 [ 192.960749][ T9415] ? clear_bhb_loop+0x60/0xb0 [ 192.960762][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.960773][ T9415] RIP: 0033:0x7f0a4078e969 [ 192.960784][ T9415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.960793][ T9415] RSP: 002b:00007f0a41616038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 192.960806][ T9415] RAX: ffffffffffffffda RBX: 00007f0a409b5fa0 RCX: 00007f0a4078e969 [ 192.960813][ T9415] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 192.960820][ T9415] RBP: 00007f0a41616090 R08: 0000000000000000 R09: 0000000000000000 [ 192.960827][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.960833][ T9415] R13: 0000000000000000 R14: 00007f0a409b5fa0 R15: 00007ffd4d67e398 [ 192.960849][ T9415] [ 193.482171][ T9417] ip6gre1: entered allmulticast mode [ 193.523032][ T9423] wg1 speed is unknown, defaulting to 1000 [ 193.604424][ T9423] wg1 speed is unknown, defaulting to 1000 [ 193.615820][ T9423] wg1 speed is unknown, defaulting to 1000 [ 193.689778][ T9423] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 193.695242][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 193.713825][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 193.744595][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 193.766527][ T9423] wg1 speed is unknown, defaulting to 1000 [ 193.789109][ T9423] wg1 speed is unknown, defaulting to 1000 [ 193.836333][ T9423] wg1 speed is unknown, defaulting to 1000 [ 193.886873][ T9423] wg1 speed is unknown, defaulting to 1000 [ 193.917061][ T9423] wg1 speed is unknown, defaulting to 1000 [ 193.979461][ T9445] netlink: 'syz.1.963': attribute type 39 has an invalid length. [ 194.004677][ T9446] IPv6: Can't replace route, no match found [ 194.181172][ T9454] FAULT_INJECTION: forcing a failure. [ 194.181172][ T9454] name failslab, interval 1, probability 0, space 0, times 0 [ 194.196429][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 194.211225][ T9454] CPU: 0 UID: 0 PID: 9454 Comm: syz.2.967 Not tainted 6.15.0-rc7-syzkaller-01759-gf5b60d6a575a #0 PREEMPT(full) [ 194.211253][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.211263][ T9454] Call Trace: [ 194.211271][ T9454] [ 194.211279][ T9454] dump_stack_lvl+0x189/0x250 [ 194.211323][ T9454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.211349][ T9454] ? __pfx__printk+0x10/0x10 [ 194.211376][ T9454] ? __pfx___might_resched+0x10/0x10 [ 194.211392][ T9454] ? fs_reclaim_acquire+0x7d/0x100 [ 194.211426][ T9454] should_fail_ex+0x414/0x560 [ 194.211453][ T9454] should_failslab+0xa8/0x100 [ 194.211480][ T9454] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 194.211503][ T9454] ? __alloc_skb+0x112/0x2d0 [ 194.211533][ T9454] __alloc_skb+0x112/0x2d0 [ 194.211562][ T9454] tcp_stream_alloc_skb+0x3d/0x340 [ 194.211590][ T9454] tcp_connect+0x1087/0x46f0 [ 194.211621][ T9454] ? tcp_fastopen_defer_connect+0xf0/0x370 [ 194.211653][ T9454] ? secure_tcp_ts_off+0xbd/0x180 [ 194.211683][ T9454] ? sk_setup_caps+0x850/0xac0 [ 194.211718][ T9454] tcp_v4_connect+0x10e7/0x19d0 [ 194.211764][ T9454] ? __pfx_tcp_v4_connect+0x10/0x10 [ 194.211789][ T9454] ? tcp_v6_connect+0x635/0x1880 [ 194.211816][ T9454] tcp_v6_connect+0xab7/0x1880 [ 194.211854][ T9454] ? __pfx_tcp_v6_connect+0x10/0x10 [ 194.211877][ T9454] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 194.211930][ T9454] __inet_stream_connect+0x298/0xf10 [ 194.211965][ T9454] ? __local_bh_enable_ip+0x12d/0x1c0 [ 194.211983][ T9454] ? __pfx___inet_stream_connect+0x10/0x10 [ 194.212007][ T9454] ? __local_bh_enable_ip+0x12d/0x1c0 [ 194.212021][ T9454] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 194.212048][ T9454] inet_stream_connect+0x66/0xa0 [ 194.212072][ T9454] __sys_connect+0x313/0x440 [ 194.212094][ T9454] ? __fget_files+0x3a0/0x420 [ 194.212119][ T9454] ? __pfx___sys_connect+0x10/0x10 [ 194.212173][ T9454] __x64_sys_connect+0x7a/0x90 [ 194.212197][ T9454] do_syscall_64+0xf6/0x210 [ 194.212219][ T9454] ? clear_bhb_loop+0x60/0xb0 [ 194.212243][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.212260][ T9454] RIP: 0033:0x7fa480d8e969 [ 194.212277][ T9454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.212291][ T9454] RSP: 002b:00007fa481b93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 194.212324][ T9454] RAX: ffffffffffffffda RBX: 00007fa480fb5fa0 RCX: 00007fa480d8e969 [ 194.212336][ T9454] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 194.212347][ T9454] RBP: 00007fa481b93090 R08: 0000000000000000 R09: 0000000000000000 [ 194.212357][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.212367][ T9454] R13: 0000000000000000 R14: 00007fa480fb5fa0 R15: 00007fffd89e7cf8 [ 194.212397][ T9454] [ 194.526458][ T5895] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 194.560085][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.749696][ T9473] IPVS: Error connecting to the multicast addr [ 194.781124][ T9473] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 195.034482][ T9477] wg1 speed is unknown, defaulting to 1000 [ 195.835996][ T6302] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 195.972775][ T9538] __nla_validate_parse: 7 callbacks suppressed [ 195.972796][ T9538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.983'. [ 196.195156][ T9546] netlink: 'syz.4.988': attribute type 2 has an invalid length. [ 196.536406][ T9563] wg1 speed is unknown, defaulting to 1000 [ 196.787779][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.998'. [ 196.804121][ T9578] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 196.823383][ T9579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.998'. [ 197.206265][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 197.639167][ T9626] wg1 speed is unknown, defaulting to 1000 [ 197.721610][ T9625] tipc: New replicast peer: 255.255.255.255 [ 197.729504][ T9625] tipc: Enabled bearer , priority 10 [ 197.933830][ T9638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1016'. [ 197.995348][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 198.029551][ T9636] wg1 speed is unknown, defaulting to 1000 [ 198.244608][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 198.403452][ T9643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1018'. [ 198.459942][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 198.481377][ T9643] Cannot find add_set index 0 as target [ 198.510317][ T9647] batadv0: entered promiscuous mode [ 198.522875][ T9647] macvtap1: entered promiscuous mode [ 198.530040][ T9647] macvtap1: entered allmulticast mode [ 198.540530][ T9647] batadv0: entered allmulticast mode [ 198.551473][ T9647] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 198.580666][ T9647] netlink: 1432 bytes leftover after parsing attributes in process `syz.1.1019'. [ 198.903903][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 198.913417][ T9677] netlink: 'syz.1.1026': attribute type 12 has an invalid length. [ 199.089132][ T9687] netlink: 'syz.2.1030': attribute type 5 has an invalid length. [ 199.263706][ T9690] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 199.611064][ T9711] netlink: zone id is out of range [ 199.629270][ T9711] netlink: get zone limit has 8 unknown bytes [ 200.028853][ T9742] netlink: 'syz.0.1042': attribute type 10 has an invalid length. [ 200.554276][ T9759] xt_CT: No such helper "netbios-ns" [ 200.620151][ T9769] netlink: 'syz.2.1049': attribute type 4 has an invalid length. [ 200.641639][ T9768] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 200.651098][ T9768] macsec1: entered promiscuous mode [ 200.657781][ T9768] macsec1: entered allmulticast mode [ 200.663189][ T9768] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 200.852201][ T9782] netlink: 'syz.0.1051': attribute type 39 has an invalid length. [ 200.957086][ T6304] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 201.053004][ T9798] ipt_ECN: cannot use operation on non-tcp rule [ 201.102769][ T9800] netlink: 'syz.1.1057': attribute type 10 has an invalid length. [ 201.163471][ T9803] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 201.197784][ T9805] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 201.225331][ T9803] __nla_validate_parse: 9 callbacks suppressed [ 201.225351][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 201.311163][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 201.345007][ T9803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.363754][ T9815] netlink: 'syz.1.1060': attribute type 10 has an invalid length. [ 201.376804][ T6304] bond0: (slave bond_slave_0): interface is now down [ 201.399097][ T6304] bond0: (slave bond_slave_1): interface is now down [ 201.425651][ T9815] syz_tun: entered promiscuous mode [ 201.498274][ T9815] syz_tun: entered allmulticast mode [ 201.543622][ T9815] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 201.574231][ T9819] netlink: 'syz.3.1062': attribute type 2 has an invalid length. [ 201.760311][ T9826] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 202.151399][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1065'. [ 202.349659][ T9842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1065'. [ 202.361143][ T9797] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 202.471204][ T9838] wg1 speed is unknown, defaulting to 1000 [ 203.101167][ T9863] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1072'. [ 203.157410][ T9863] netlink: zone id is out of range [ 203.189475][ T9863] netlink: zone id is out of range [ 203.239277][ T9875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.241511][ T9863] netlink: zone id is out of range [ 203.263451][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 203.309942][ T9863] netlink: zone id is out of range [ 203.330201][ T9863] netlink: zone id is out of range [ 203.339202][ T9863] netlink: get zone limit has 8 unknown bytes [ 203.356916][ T7468] bond0: (slave bond_slave_0): interface is now down [ 203.367821][ T7468] bond0: (slave bond_slave_1): interface is now down [ 203.410431][ T9883] 8021q: VLANs not supported on vxcan0 [ 203.955384][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1081'. [ 204.490973][ T9924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1085'. [ 204.540343][ T9924] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1085'. [ 204.585149][ T9924] tipc: Invalid UDP bearer configuration [ 204.585218][ T9924] tipc: Enabling of bearer rejected, failed to enable media [ 204.612638][ T9928] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1087'. [ 204.658452][ T9916] netlink: 'syz.1.1085': attribute type 18 has an invalid length. [ 205.227034][ T9958] wg1 speed is unknown, defaulting to 1000 [ 205.277424][ T8980] bond0: (slave syz_tun): interface is now down [ 205.618740][ T9976] wg1 speed is unknown, defaulting to 1000 [ 205.659214][ T9978] netlink: 'syz.1.1098': attribute type 6 has an invalid length. [ 205.735220][ T9980] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 205.764992][ T9980] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 205.900322][ T9985] tipc: Enabling of bearer rejected, failed to enable media [ 206.086923][ T6283] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 206.509698][ T9998] netlink: 'syz.1.1104': attribute type 1 has an invalid length. [ 206.544817][ T9998] __nla_validate_parse: 3 callbacks suppressed [ 206.544837][ T9998] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1104'. [ 206.562643][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 206.663002][T10024] netlink: 'syz.3.1109': attribute type 10 has an invalid length. [ 206.703230][T10020] syz.0.1107: vmalloc error: size 41943040, failed to allocated page array size 81920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 206.766820][T10024] team0: Port device wlan1 added [ 206.792743][T10020] CPU: 0 UID: 0 PID: 10020 Comm: syz.0.1107 Not tainted 6.15.0-rc7-syzkaller-01759-gf5b60d6a575a #0 PREEMPT(full) [ 206.792775][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.792786][T10020] Call Trace: [ 206.792794][T10020] [ 206.792802][T10020] dump_stack_lvl+0x189/0x250 [ 206.792837][T10020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.792864][T10020] ? __pfx__printk+0x10/0x10 [ 206.792884][T10020] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.792904][T10020] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.792926][T10020] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 206.792947][T10020] warn_alloc+0x214/0x310 [ 206.792980][T10020] ? __pfx_warn_alloc+0x10/0x10 [ 206.793015][T10020] ? __get_vm_area_node+0x28f/0x300 [ 206.793047][T10020] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 206.793071][T10020] ? __asan_memset+0x22/0x50 [ 206.793100][T10020] ? __kernel_text_address+0xd/0x40 [ 206.793144][T10020] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.793167][T10020] ? __kasan_kmalloc_large+0x1a/0xa0 [ 206.793192][T10020] ? rcu_is_watching+0x15/0xb0 [ 206.793211][T10020] ? translate_table+0x1a8/0x1f90 [ 206.793228][T10020] ? translate_table+0x1a8/0x1f90 [ 206.793243][T10020] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 206.793267][T10020] ? translate_table+0x1a8/0x1f90 [ 206.793282][T10020] ? xt_alloc_table_info+0x3b/0xa0 [ 206.793308][T10020] translate_table+0x1a8/0x1f90 [ 206.793358][T10020] ? __pfx_translate_table+0x10/0x10 [ 206.793395][T10020] ? _copy_from_user+0x94/0xb0 [ 206.793428][T10020] do_arpt_set_ctl+0x993/0xf10 [ 206.793451][T10020] ? __mutex_trylock_common+0x153/0x260 [ 206.793475][T10020] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 206.793498][T10020] ? rcu_is_watching+0x15/0xb0 [ 206.793532][T10020] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 206.793558][T10020] ? __pfx___mutex_lock+0x10/0x10 [ 206.793579][T10020] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.793596][T10020] ? aa_sk_perm+0x81e/0x950 [ 206.793618][T10020] ? file_init_path+0x3b/0x590 [ 206.793643][T10020] ? __pfx_aa_sk_perm+0x10/0x10 [ 206.793672][T10020] nf_setsockopt+0x26c/0x290 [ 206.793702][T10020] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 206.793748][T10020] do_sock_setsockopt+0x257/0x3e0 [ 206.793783][T10020] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 206.793806][T10020] ? __fget_files+0x2a/0x420 [ 206.793835][T10020] ? __fget_files+0x3a0/0x420 [ 206.793856][T10020] ? __fget_files+0x2a/0x420 [ 206.793888][T10020] __x64_sys_setsockopt+0x18b/0x220 [ 206.793919][T10020] do_syscall_64+0xf6/0x210 [ 206.793941][T10020] ? clear_bhb_loop+0x60/0xb0 [ 206.793965][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.793982][T10020] RIP: 0033:0x7f322c18e969 [ 206.793999][T10020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.794012][T10020] RSP: 002b:00007f3229ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.794032][T10020] RAX: ffffffffffffffda RBX: 00007f322c3b5fa0 RCX: 00007f322c18e969 [ 206.794045][T10020] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 206.794054][T10020] RBP: 00007f322c210ab1 R08: 0000000000000068 R09: 0000000000000000 [ 206.794065][T10020] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 206.794076][T10020] R13: 0000000000000000 R14: 00007f322c3b5fa0 R15: 00007ffe2dd16f68 [ 206.794119][T10020] [ 207.165044][T10020] Mem-Info: [ 207.168235][T10020] active_anon:3608 inactive_anon:0 isolated_anon:0 [ 207.168235][T10020] active_file:1393 inactive_file:39877 isolated_file:0 [ 207.168235][T10020] unevictable:768 dirty:246 writeback:0 [ 207.168235][T10020] slab_reclaimable:11506 slab_unreclaimable:100735 [ 207.168235][T10020] mapped:31121 shmem:1369 pagetables:703 [ 207.168235][T10020] sec_pagetables:0 bounce:0 [ 207.168235][T10020] kernel_misc_reclaimable:0 [ 207.168235][T10020] free:1340218 free_pcp:597 free_cma:0 [ 207.237249][ T6283] bond0: (slave syz_tun): interface is now down [ 207.303976][T10020] Node 0 active_anon:14340kB inactive_anon:0kB active_file:5572kB inactive_file:159312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124328kB dirty:984kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11480kB pagetables:2576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.338261][T10020] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.369837][T10020] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.398654][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 207.404972][T10020] lowmem_reserve[]: 0 2503 2503 2503 2503 [ 207.405985][T10036] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 207.411625][T10020] Node 0 DMA32 free:1437840kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:14432kB inactive_anon:0kB active_file:5572kB inactive_file:159220kB unevictable:1536kB writepending:984kB present:3129332kB managed:2563940kB mlocked:0kB bounce:0kB free_pcp:13024kB local_pcp:1836kB free_cma:0kB [ 207.488561][T10040] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1112'. [ 207.503835][T10020] lowmem_reserve[]: 0 0 0 0 0 [ 207.610198][T10020] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 207.664164][T10020] lowmem_reserve[]: 0 0 0 0 0 [ 207.679155][T10020] Node 1 Normal free:3907080kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.736672][T10046] wg1 speed is unknown, defaulting to 1000 [ 207.741368][T10053] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 207.744853][T10020] lowmem_reserve[]: 0 0 0 0 0 [ 207.754504][T10053] netlink: 'syz.2.1115': attribute type 39 has an invalid length. [ 207.755804][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1114'. [ 207.816477][T10020] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 207.858979][T10020] Node 0 DMA32: 425*4kB (UM) 372*8kB (UME) 204*16kB (UME) 93*32kB (UME) 110*64kB (UME) 97*128kB (UME) 47*256kB (UM) 29*512kB (UME) 14*1024kB (UM) 10*2048kB (UME) 329*4096kB (UM) = 1439652kB [ 207.899291][T10020] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 207.937521][T10020] Node 1 Normal: 240*4kB (UM) 69*8kB (UME) 42*16kB (UME) 210*32kB (UME) 107*64kB (UME) 27*128kB (UME) 15*256kB (UME) 12*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3907080kB [ 207.974411][T10020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.984579][T10020] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.045440][T10020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.055631][T10020] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.065200][T10020] 42626 total pagecache pages [ 208.070153][T10020] 0 pages in swap cache [ 208.074524][T10020] Free swap = 124996kB [ 208.078985][T10020] Total swap = 124996kB [ 208.084201][T10020] 2097051 pages RAM [ 208.088268][T10020] 0 pages HighMem/MovableOnly [ 208.093105][T10020] 424408 pages reserved [ 208.098156][T10020] 0 pages cma reserved [ 208.456378][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 208.467021][T10078] syzkaller1: entered promiscuous mode [ 208.473937][T10078] syzkaller1: entered allmulticast mode [ 208.491307][T10081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1126'. [ 208.524847][T10082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1126'. [ 208.652474][T10086] sch_tbf: burst 2 is lower than device lo mtu (39799) ! [ 208.692952][T10082] sch_tbf: burst 2 is lower than device lo mtu (39799) ! [ 208.720328][T10086] sch_tbf: burst 2 is lower than device lo mtu (39799) ! [ 208.749082][T10094] team0: left allmulticast mode [ 208.774570][T10094] team_slave_0: left allmulticast mode [ 208.800247][T10094] team_slave_1: left allmulticast mode [ 208.810183][T10094] bridge0: port 3(team0) entered disabled state [ 208.830036][T10101] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1128'. [ 208.860971][T10094] bridge_slave_0: left allmulticast mode [ 208.867605][T10094] bridge_slave_0: left promiscuous mode [ 208.873634][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.898956][T10094] bridge_slave_1: left allmulticast mode [ 208.917208][T10094] bridge_slave_1: left promiscuous mode [ 208.923770][T10094] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.946164][T10094] bond0: (slave bond_slave_0): Releasing backup interface [ 208.974462][T10094] bond0: (slave bond_slave_1): Releasing backup interface [ 208.990676][T10094] team_slave_0: left promiscuous mode [ 209.018958][T10094] team0: Port device team_slave_0 removed [ 209.025742][T10094] team_slave_1: left promiscuous mode [ 209.042585][T10094] team0: Port device team_slave_1 removed [ 209.062833][T10094] bond0: (slave bond3): Releasing backup interface [ 209.090120][T10108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1130'. [ 209.168154][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1130'. [ 209.208613][T10115] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 209.217622][ T8980] bond0: (slave syz_tun): interface is now down [ 209.267368][ T8980] bond0: now running without any active interface! [ 209.447764][T10130] netlink: 'syz.4.1136': attribute type 15 has an invalid length. [ 209.711695][T10145] batadv_slave_1: entered promiscuous mode [ 209.723083][T10143] batadv_slave_1: left promiscuous mode [ 210.421897][T10173] netlink: 'syz.1.1151': attribute type 1 has an invalid length. [ 210.448079][T10180] [ 210.450472][T10180] ====================================================== [ 210.457508][T10180] WARNING: possible circular locking dependency detected [ 210.464529][T10180] 6.15.0-rc7-syzkaller-01759-gf5b60d6a575a #0 Not tainted [ 210.471727][T10180] ------------------------------------------------------ [ 210.478745][T10180] syz.4.1153/10180 is trying to acquire lock: [ 210.485079][T10180] ffffffff8f453518 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 210.494247][T10180] [ 210.494247][T10180] but task is already holding lock: [ 210.501717][T10180] ffff88807a8d0670 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 210.511127][T10180] [ 210.511127][T10180] which lock already depends on the new lock. [ 210.511127][T10180] [ 210.521530][T10180] [ 210.521530][T10180] the existing dependency chain (in reverse order) is: [ 210.530814][T10180] [ 210.530814][T10180] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 210.539050][T10180] lock_acquire+0x120/0x360 [ 210.544094][T10180] _raw_spin_lock_bh+0x36/0x50 [ 210.549390][T10180] nr_rt_ioctl+0x193/0xd50 [ 210.554630][T10180] sock_do_ioctl+0xdc/0x300 [ 210.559664][T10180] sock_ioctl+0x576/0x790 [ 210.564512][T10180] __se_sys_ioctl+0xf9/0x170 [ 210.569623][T10180] do_syscall_64+0xf6/0x210 [ 210.574653][T10180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.581078][T10180] [ 210.581078][T10180] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 210.588993][T10180] lock_acquire+0x120/0x360 [ 210.594030][T10180] _raw_spin_lock_bh+0x36/0x50 [ 210.599316][T10180] nr_rt_device_down+0xa9/0x720 [ 210.604691][T10180] nr_device_event+0x137/0x150 [ 210.609985][T10180] notifier_call_chain+0x1b3/0x3e0 [ 210.615705][T10180] __dev_notify_flags+0x18d/0x2e0 [ 210.621256][T10180] netif_change_flags+0xe8/0x1a0 [ 210.626741][T10180] dev_change_flags+0x130/0x260 [ 210.632158][T10180] dev_ioctl+0x7b4/0x1150 [ 210.637040][T10180] sock_do_ioctl+0x22c/0x300 [ 210.642168][T10180] sock_ioctl+0x576/0x790 [ 210.647385][T10180] __se_sys_ioctl+0xf9/0x170 [ 210.652588][T10180] do_syscall_64+0xf6/0x210 [ 210.657616][T10180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.664034][T10180] [ 210.664034][T10180] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 210.671953][T10180] validate_chain+0xb9b/0x2140 [ 210.677251][T10180] __lock_acquire+0xaac/0xd20 [ 210.682456][T10180] lock_acquire+0x120/0x360 [ 210.687583][T10180] _raw_spin_lock_bh+0x36/0x50 [ 210.692960][T10180] nr_rt_ioctl+0x390/0xd50 [ 210.697905][T10180] sock_do_ioctl+0xdc/0x300 [ 210.702930][T10180] sock_ioctl+0x576/0x790 [ 210.707781][T10180] __se_sys_ioctl+0xf9/0x170 [ 210.712903][T10180] do_syscall_64+0xf6/0x210 [ 210.717931][T10180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.724351][T10180] [ 210.724351][T10180] other info that might help us debug this: [ 210.724351][T10180] [ 210.734671][T10180] Chain exists of: [ 210.734671][T10180] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 210.734671][T10180] [ 210.748619][T10180] Possible unsafe locking scenario: [ 210.748619][T10180] [ 210.756079][T10180] CPU0 CPU1 [ 210.761538][T10180] ---- ---- [ 210.766903][T10180] lock(&nr_node->node_lock); [ 210.771761][T10180] lock(nr_node_list_lock); [ 210.778878][T10180] lock(&nr_node->node_lock); [ 210.786168][T10180] lock(nr_neigh_list_lock); [ 210.790943][T10180] [ 210.790943][T10180] *** DEADLOCK *** [ 210.790943][T10180] [ 210.799084][T10180] 2 locks held by syz.4.1153/10180: [ 210.804304][T10180] #0: ffffffff8f453578 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 210.813824][T10180] #1: ffff88807a8d0670 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 210.823709][T10180] [ 210.823709][T10180] stack backtrace: [ 210.829610][T10180] CPU: 1 UID: 0 PID: 10180 Comm: syz.4.1153 Not tainted 6.15.0-rc7-syzkaller-01759-gf5b60d6a575a #0 PREEMPT(full) [ 210.829631][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.829640][T10180] Call Trace: [ 210.829649][T10180] [ 210.829657][T10180] dump_stack_lvl+0x189/0x250 [ 210.829682][T10180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.829701][T10180] ? __pfx__printk+0x10/0x10 [ 210.829715][T10180] ? print_lock_name+0xde/0x100 [ 210.829728][T10180] print_circular_bug+0x2ee/0x310 [ 210.829745][T10180] check_noncircular+0x134/0x160 [ 210.829761][T10180] validate_chain+0xb9b/0x2140 [ 210.829782][T10180] __lock_acquire+0xaac/0xd20 [ 210.829804][T10180] ? nr_rt_ioctl+0x390/0xd50 [ 210.829819][T10180] lock_acquire+0x120/0x360 [ 210.829836][T10180] ? nr_rt_ioctl+0x390/0xd50 [ 210.829851][T10180] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 210.829868][T10180] ? nr_rt_ioctl+0x390/0xd50 [ 210.829882][T10180] _raw_spin_lock_bh+0x36/0x50 [ 210.829894][T10180] ? nr_rt_ioctl+0x390/0xd50 [ 210.829908][T10180] nr_rt_ioctl+0x390/0xd50 [ 210.829926][T10180] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 210.829945][T10180] ? apparmor_capable+0x137/0x1b0 [ 210.829966][T10180] ? capable+0x89/0xe0 [ 210.829979][T10180] ? nr_ioctl+0x1b1/0x3b0 [ 210.829992][T10180] sock_do_ioctl+0xdc/0x300 [ 210.830008][T10180] ? __pfx_sock_do_ioctl+0x10/0x10 [ 210.830022][T10180] ? __lock_acquire+0xaac/0xd20 [ 210.830050][T10180] sock_ioctl+0x576/0x790 [ 210.830064][T10180] ? __pfx_sock_ioctl+0x10/0x10 [ 210.830079][T10180] ? __fget_files+0x3a0/0x420 [ 210.830096][T10180] ? __fget_files+0x2a/0x420 [ 210.830114][T10180] ? bpf_lsm_file_ioctl+0x9/0x20 [ 210.830131][T10180] ? __pfx_sock_ioctl+0x10/0x10 [ 210.830143][T10180] __se_sys_ioctl+0xf9/0x170 [ 210.830158][T10180] do_syscall_64+0xf6/0x210 [ 210.830174][T10180] ? clear_bhb_loop+0x60/0xb0 [ 210.830190][T10180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.830203][T10180] RIP: 0033:0x7f5f1938e969 [ 210.830217][T10180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.830228][T10180] RSP: 002b:00007f5f1a1c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.830244][T10180] RAX: ffffffffffffffda RBX: 00007f5f195b5fa0 RCX: 00007f5f1938e969 [ 210.830254][T10180] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000008 [ 210.830262][T10180] RBP: 00007f5f19410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 210.830271][T10180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.830279][T10180] R13: 0000000000000000 R14: 00007f5f195b5fa0 R15: 00007fff3e49cd18 [ 210.830294][T10180] [ 211.200489][T10188] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 211.835255][ T6304] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 211.994864][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 212.004964][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 212.004993][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 215.036398][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 217.595313][ T8980] IPVS: sh: UDP 127.0.0.1:0 - no destination available