last executing test programs: 1m26.504455003s ago: executing program 2 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1, 0x0, 0x1000000}, 0x10) 1m26.420748559s ago: executing program 2 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0500000000000000001f070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001020"], 0x124}}, 0x0) 1m26.151184143s ago: executing program 2 (id=159): r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_proto_private(r0, 0x89e0, 0x0) 1m25.6622567s ago: executing program 2 (id=163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) (async) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xbe3) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xbe3) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @local}, &(0x7f0000000100)=0xc) (async) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @local, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@local, r4}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[], 0x44}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[], 0x44}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x6) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r7) 1m25.049518067s ago: executing program 2 (id=169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x200000, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2000, 0x0, 0x0, 0x2, 0x20, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {0x0, 0x800}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e24, @private=0xa010100}, 0x10) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000068000100000000000000000002000000000000000400040008000500", @ANYRES32=0x0, @ANYBLOB="4a6898fd030779b10997df333aaf0a080e"], 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x4070bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f000005d000/0x3000)=nil, 0x3000, 0x2, 0x4010, r12, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c4}, 0x0) r13 = socket$rds(0x15, 0x5, 0x0) bind$rds(r13, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {0x0, 0xfff1}, {0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m24.5467106s ago: executing program 2 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) accept4$bt_l2cap(r8, 0x0, 0x0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r11, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000140)={0x10, 0x8}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)="4905d6a348eb34d2c208f0c565", 0xd}}, 0x40) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r12, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) r14 = accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @rose}, [@rose, @remote, @remote, @rose, @null, @netrom, @remote, @default]}, 0x0, 0x80000) accept$netrom(r14, &(0x7f0000000380)={{0x3, @netrom}, [@bcast, @default, @netrom, @default, @rose, @null, @null, @netrom]}, &(0x7f0000000300)=0x48) bind$can_j1939(r12, &(0x7f0000000340)={0x1d, r13, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000004) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r11, {0xfffd, 0xffeb}, {0x6, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c093}, 0x850) 1m9.665106541s ago: executing program 32 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) accept4$bt_l2cap(r8, 0x0, 0x0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r11, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000140)={0x10, 0x8}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)="4905d6a348eb34d2c208f0c565", 0xd}}, 0x40) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r12, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) r14 = accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @rose}, [@rose, @remote, @remote, @rose, @null, @netrom, @remote, @default]}, 0x0, 0x80000) accept$netrom(r14, &(0x7f0000000380)={{0x3, @netrom}, [@bcast, @default, @netrom, @default, @rose, @null, @null, @netrom]}, &(0x7f0000000300)=0x48) bind$can_j1939(r12, &(0x7f0000000340)={0x1d, r13, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000004) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r11, {0xfffd, 0xffeb}, {0x6, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c093}, 0x850) 1.956441558s ago: executing program 0 (id=1356): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, 0xffffffffffffffff, 0x16, 0xce2d3afaee44ac6a, 0x4, @void, @void, @value}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000080)=@x25, 0x80, &(0x7f0000001540)=[{&(0x7f0000000100)="2c056444cadee48f754306168689befef6e6b65f881bed3efa02ddf6067b7a0aab19f2bd72e3d158307cfa8ad372cafaffb6adef528b17f4345994b55fa8c21eda0b907cf590aaf0a66c0dec962e6dd11df30f96436def7df5f1838566d0c4f01361a7e09d4a6b05cbb4121f2d2f7ff169295f68dd8a8bfecbed67ed2f6659cf90539c62757b050919bf3b87a0e39dcaf359be9597b6036da2de5c71f4e56ee66c3ebc413fc98051d88de7f989b6326c04a3b47a8cb784b16e0c", 0xba}, {&(0x7f00000001c0)="34462ac5c0e2e08f7b7d5b", 0xb}, {&(0x7f0000000200)="82ef594f3d63ae0f697967836cf16fc3e6", 0x11}, {&(0x7f0000000240)="3037ca44a3c28dca110537aaf2a528bc", 0x10}, {&(0x7f0000000280)="d857f3826bbdc9a1ad8766a1aa9ca5fec049dc771b8d50b559105991c2d14122715f9d2dc82ab58f7785e5e8c608a6e593cd5604718a514570c9c69980c3eb6ec20ee0b42089fa8ee595a7ad031623f8e11a3b7c0ef6d4dca60e955bf95d3101f2579ffe6a6679d3637924048331494850087e9600a24ac9fc4656fe7d6152fa4ee9c37dbb9c98cc846e40750f33cb7c71473ed26437b2", 0x97}, {&(0x7f0000000340)="65b9f487801653b645edfaa62f982b4cc2041b1619d30de987a443eace97690e66b84eb6ced535006dfd8c86b9fdec7a79062cc3c97e1766a5dc9c4a784bf76e708ebc968a4cda4e0a23008f8d4239943e16640d6ed39a5ddabb98c1b7a780823385907446b02b04a02a60dff65163f3d0cc1cff2996d018ffc9e8e13f091fbf9269fc8d9e3e91d8df068fe26c7d0ba1a23840238c8083c38e973d28a6f2897e8b79d07e37ee3d5bcd370d7e6660840a2330112fb9029c13219d3e2d29c9b0d4ba42296a81256b497aa005d8c7e74035135d1525629646bc35838edfaa7fe9ea03e3037a1700a7d8236bd5fba428c003c1d009297b44b8c1cc95d6eb19935658e00b700fea786cc3d355c7989047279e0527d7cf9311934847efdea1133c85c27a2fd6380928695156772239db521ccfde2ba8621775b5d24bd903573bcb1c19a9f9f896ec28e6f5f130da6737df3827d5c95d4ce926af50c90f2d1a4ec8c9d978dce058672c683114de283aa014187568a16bfdb302f26bce217b386cde4beda9033920a3dd105ccf847b57ee235a2bf3d993c24d801f20535d6171c67efffafaf176a4d29beafc2b11042e976ad93df39ca907497b9200e8984813b511532932df81f7c792598f968d5a07cfd651167565dfcf68416f47c1952d568e20f899c7d62f5648d3f5e4eafdae436f2105cfd2c9eba960aacefddd95f6274115f2869d4293f4973d539875ed1fd07afe28fd06e3219408cb92a740e14c9b753656bdf9fe8409d185683246b156577477b6a9c7fe6120805930e8e757196d03d89872ce5b8cfb5c665e795006769b23c0395d8fb92cc4125d7025c755688dd9763c9ee0ca51de633dddf53ec4b65db27a158bde93f2f92b7415f0d657c8f7d10a227f2db6573ad2e8035f695aa735365858c4f4d6c6029ebb44b6396ccef4a2e692cab9af701e0e27cf294454eceeb4ff133e115effe5776cf8c5b8c4d3bcd618ec0cc28410f0b87580322a48773f64190523f64edfaa8d97aa59597f6f9911ee96e47f72f27d0dfa1a4e4d51779ad399c19ad208f9bbd7cb97847c27265436f9a09049a24822979e059b35eb135d87c51f15b7ae714cf733517535b31a489a2ad2e3402f4ea2b973150d4746ba1383b66c6a1b0f24e7a017419eb6d49101d75e61b98cca78782028325454bd53be95c3db5942d785074014272b0e26f28f2e79181a6900c9163c7f21437a8eeef8d5011442c6b899e4eff78524e51c65ca99383d8fbbb5cbfc2295c56c67f990a449eed900aad6186faf87ba4e396cb1e300537202bdec6cb32b85b035e614d305d4db0d679417fc5a44be789939726e3bb77dd98b1af1b66612e09e0da3e0fe73d0ef8e54ad2d81c3f3aae04e54a681e41daf06ae27306f82889df479ddd4d65dbd6b1989bd13343ffe2d1b6dabafc33e19d394bc8c49accb57c2c8c3958156bebe1036932cf2aa919e299eee347dfec96edbef52f538a538de51c3e7028fbae91feb4148481ffeb7e428bbd6a3759c49337c4f34404b666cbb96fc2b9c64180122dd2e34837873d822ee2610e94ae594d3874a789bd6cc1c4594ac9c182ef76d8d57771efe8b94d1e1cf266225c72a632f2cbe0e414ac26a6a572accd63b74da414fe2048e1cd54c56537dadc48066937ce161a85c37d175d50e000b55af08d5a339b102bceab07e119caa788b4ea1ad7b1179ee31e6f5609722b3b65defcf21b6cc09b71f0debe2da28d075646cd8d07ef36ebb0b056753abf70a4aa8fcdbb73c7574fa84ed330e3dcd542de5abc979444f36d2392d314367cd5660c2989e773d2c11a51b8b2e243850878087693d2dd6ab1cf8183ce363061e5cc837abbd62e273ffe5a1d5e332d088aa1c667129ccd8b5cfc0bb3a9d0cb1fe7709271a106fe3f516223c3a073e38531a7853c2b94efac36d77d7cb9b0b77288a5bfbfca86c5af39d01270d22c3509709e24f33769298603ab74e4c2d4d44f7dd6ea8e0daae199c96d91e65326282abf6e0a1683c4c39a3096ecf0795f57488a7d16b173efb57583ba47fe23f128afc3a0f32483e374fbc541a028500edfe33e02507794777ae905340a6cbcbe4571d4798d3c3b96959f35cc56deb090e77a095376ef51021bf57f41991247417db664643b75adfdb0baf7832e7f0a15e93ee023a41b9b19d5452b7cbe936877601e0668fd330d455f516b82c97d2f14105d65d2b6186dd0d1c6400ca269900d70ee76db16eb98fda12e822261610576cd0c40288f13dcfe637f13f8dd3ef799b39cc6c23b8eb58294377b1a26be9065e000016b0f9aa80785f3157996a815d3a351517bed8fac617474946923acc460114137e0c720a1d967dd9a882d74d03127600cd80e345290e2a69d0d72485d2eef87ed79245ba695f2967d78ce743e0b8e49a99901c50ac1283a1d1d77a4bfe84a63798523d2ab6cc8ec6db52a59656e2bc249506ec32dd76a36c9f948b6835353c82ea1dd4489efbb83bf8ebe242385f61f54d59b8d5888d0320ff5150639a4926dc729cf3bf308315bcb1341c976fb2fb3e668d89e3662daece40e9b1df961f98b496c47fa2518a21feced83983b4cc69d54bc29739575b018b200bcf8eedabce183116ad4971cc5086e3a714491e953924f2e833bab614366ec478bb0533e1688f2d2ebc56629656541dcc2d9a0d3faf88809d1937d757237c296fd64ee5635892dd4f6a955da88a462fe7671dff168abf30e57e9bd6f54c4d9a64bd7459b510ee09f59bf4b50c03418b0c122bc30a4113f72b54fe09642397dfae57824e57e06ff6958dc4bd060520a2f8e49d0f4f1baf19e886b4bc4f2cc97e299fd3e49bd99a933ee6c7e0f7133a46bdf9bdcbb8e132628c861095d79ec1aac7f27738ace808c7b971f6d1e0e53fc57f338f75244560eba4e431f77f3f69d6b4b91d846de5db646e07d15a14bd020ee7b47dc3ee3ce04d6a88390cab7e7ec43bc343912c6cfe0dbab7a85b16b3f5a5b23044a6c811145ce9718c257c7cc8b8ca98b5a7b2843c5f34a2e4580b66ed39aeae427b35c1cf1f005e90ab57ad0e80b49e1fdb13160db3e123f745f3bc23465008d725f34bc6434c08fa706f91ad6d45f8bf89cfdb8d4721234d820ee78bdb6e54370f92827d11c2e0f41df884b5e3f7f5198ac30a57c3f1d5d47768957a304930b4bc846cf82ecf8f54db05504bb3dcc42b9e24629abb8bf2a34b3a28d54c5676a3e55b9ca71a77830fd50b60e3126a43ccabc436b9c4a846ef70be3f754d910ad32f1c478299e4091d085481b7163fca32141c5cddb329cf9bfe86461bbc7c4a100041927be250a0e448fe815c969950eab2007026fe21b32634c4e67769a67efba2f221ba57c58f40355f37b346f516ca8dcca484b04fa8a10f3a382efdd5620868a3f1ebcae917091207d9a6d6eb8d456114ea58939fa3b01bcd567ce6ba3853eb44e861cf4b1b7a52467fdc2f16dff682f30b7ddcf09679c7c1f67555818e1755c3f4ce767bdbd962b97cac04967387187822afabcd18438a734da182119103583a4b8bf5dd28ac2c9ae4bfea0797151815164a479865ecfc664c80331bfac34229e392803927c9989787c23909cad058f649a59db56b391cd84cecf0249606d6edd82ee418a74f5494551f24a514592a108c3e1727a9c6240e7423affbdcd98130cb75c639de8bea2b4fc5445b4f2facd9db25b9c81781db5b38c71a90571ba29332d3b2843248fed386913e5c1db6a88bfbe973c9bc60201b9efc3279858ceed32d90289581a0214fa40fe2b7f2e7754e7f5559d1ba721dcf09e88d8b6851339ef437c21bd8af5b994b1ab8aafdc97f5842f61c87f37691063b248f5f5b85be940768664d7dbbf54389ae3fed3736cadaff5402186034e5c8a6b65ab2d9efbcd94842af095ec49a3782ce5620316c166e47ff6c18d46da0e8be2b0ff3debc0864dc5a965093d55c8e14b9c62bdb84931eb62bb4a487aad87f2263318d40da63db735b687ea98831a08e30e3e63e21cae1449b20b9ed1eb7e90f86685459d1dd9708ba0da67b85cb7559280074267bfee4cb8701b9dc29c513009b1bbbff348a4881f69d3dd8ed8d3c3f4a325d5c03e0d94cf67cf874a2073e49d423492f4cd3f00d95cd7ce7c5b4a1d2b53cfdac9aa84ab1e1baf7317f26676a608b2dc7f22908c961a6fab602709f2c9f81de761b51a4c4f25876420d744210b5c136a5a0bca1129abbabc828d5c9b9821aa529e8526318b8b70fef8df62d728783a2f59fdabbc5c93d1a21723bbe6e7da1e8f83b04a631dce152ba7992f1b469888e741cb1ffd0164a879327b41fc5ed41eee961b014e1b84b2cc95a965203693a5543304787ec2da6907de963552c26f9a4155853858a1e2981c134fc7e42104274ea965b166c3a79486619b99ca8f98e006972e6f4e25052729378eb17f68c43fb3769a5e1774bc1298275c04dd63aa4e58c582ad4ee1eab0876f4c5d9282f6fc96433f0b807310f2348c8375d5d6d7a37a2595d5f2e25bd76430bd329c581b119d72dca74c0771b98831baa762cafbcda5c74cc042e8329be7c925da9664730d9f918ae837877778abe40e0fad34f11deed4e2bb88b8564780ce94474c5ecfc9f3218bb80f4414d38af10dc9a3c543e76896bee59101f9af88c3f4144a6fc090a392cd9f9ddf4f8ba021613de0b6c138558f374f4f5ec9e3dfe242ef043554d9c74a8f6b87c4806c8e8be9e20004256718c0d0b46dcee4606c462b20a0c86d9d394d1329bc83a2887455b6b7e4c983173e10105a215d9524eb6060277c7b8ed6dbd72d6c24e78a0e548ef0600d0bcb81e7fcb875c0c2bef49d35bf5e3b007c7e5c0ef339e2f569c5591a795540a0b16adea2e15355427eafd4100b146e4c6c2d30880f165193bcc39fc0f812d51c6f5d895d51195fbc230f7c2492eab11476bbb0fe7bd4dfacbc001ab09ce9df399a58ddcdaf1fb7af470eb2dc67f2acff699402bc13e394d58024b3dc18a162902eaa839da636d61af397eb7d67847fac8810668b273b8bab71a51fafcde6ee428da7f258ad09eec366b3ac776582493cca2b9251495868fb1986666d3ede7735dfb7685c60c0e703358f555deec10a784e54c1166c8d01019086778ff212087ae6ed10e98786477aa8de200d84c1fe7d527a5909300d6b96061e6766b26c86509a7d6ce6d86b87b99a56a40de4209690b12fb4fc7527389b3bb6d3336b12109aaabdd3d1375bebc58d75e898d26d7644d8000444544826fcd705017fa9c5a4072c62b46ef74d3b66cad5fb1e72677ba95c12d413ab789e1bdebb36d829704e5b62df7133abbab6ca6d336f671e3f6cc636209c0cd92f92c8a18b8b36423dc97492e3b9a88206c5e0bcf455611ea5097da1bc1d6044e23e47c47bd9a624ca4f6b6a2de7a34b7a23be37596e358a545b51401d497d40e491563c02a7ba8712c74a5ab900751cd200cf32aa44faa47b3d46ffd2d8e41470050be6c070632782964e5fa6eb7ffbfd9f0ab1195a7ba44c71d91b8a8fde89156596f648ff814b6588cfb5a7f990588f6c3589d600aa45b691db2a51b7ec525020082628e29deff434cc07d9e085a0d2f62cfb980d0e540bda8e37d3faf6fae3df8e5df1db9f40c737095c062014ae85a5cc21c27571a7263122de0849d1cb2c24c5652f64fb7e8f73472b340f8c896c3b4d106be0e6265470bad9ceee647d8eb0209fb65de8bc5ed02e3114d37d602e721178759b865aa07a2591d37bb8cee3aa82b44cb54d83e3c178db2b1", 0x1000}, {&(0x7f0000001340)="4ae514740a06c90d5eec6172b1c53782b26dfce5209fb2f599de5aa1ddaf89d0893d854eedf0fad240230de5d751468a1b790e3e6865dac071b6be183707f1aea9b08a3d24de7e7973f1e6ec63212bb779900afc0c92862928f0f810de33ce867d8cc4aa2c0551394a252eb47f942f8c17a85bbe0433f88ccec718292be28bd496365878b76c15eea7c7310c8e04d12a1e486b373280f206c86b", 0x9a}, {&(0x7f0000001400)="d828d426e785c7e0f60614f448973b51f50220a2babea892927de2d76cb903aef124d42d5cf2c092d591c15103466e02074b3b2077703e39f5bf846ff2b78ad9015b059544da6784f205622a3a82e355937c5872b591689f5455bfeb7a69856427305fa4a7568bf5b37b50f8d1d8baf3eb4e717b08d1c7e18c9dcdf2151a5886ec81e3ee584132db9283a8c2", 0x8c}, {&(0x7f00000014c0)="62ab4283fd13553e025113d76a8a5149805f72b3e92649549579502b584bd27fee3c56159325f847d7862a23702a94c46698d8cdf35d06a0e06538cbde3df1cda8b241179ce14dee26d5767dadefd1bfbcd1614f980ad3ff0eae7bac603ec545b86d29", 0x63}], 0x9, &(0x7f0000001600)=ANY=[@ANYBLOB="b0000080000000000b01000006000000c38dc4ab1ac95a00deedc4ba235924bfb374697e2d954c15c0f5ad5fa1efa216d5567df9e3fa461eb336ede7ff8a12d582741726d5b0be80ea70d4d50d1280e5775c157a9ef030f00f1f367d2c5370f73949af99fd7a23f82179ff78d2c0fbe4e5a07bd7b435d1b9c0b9c7b8d1185aed2380d9f2acfbf94cdbad9b73846b85b1083fcdc46ce5f854a611665770aba50e8e00"/176], 0xb0}, 0x2000000) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000001700)='ns/pid_for_children\x00') pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0x19, 0x4, 0x8, 0x8, 0x1092, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 1.885799672s ago: executing program 1 (id=1357): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x4c, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25c, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, 0x0) 1.781745902s ago: executing program 4 (id=1358): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611087000000000063013800000000009500098300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0e00000000000000001c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000400"/28], 0x50) 1.736300353s ago: executing program 0 (id=1359): getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000580)=0x4) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000240)=0x9, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000085000000310000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190300000100000000004a000007000000006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) (async, rerun: 64) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000001020300000000000000000003000005040002800600074080000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040000) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x10) (async) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000420000f0ffffff000000000000000c0000000000000000"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r7, @ANYRES32=r7, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="9e36d4fd3108451a7818d854b388", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r9 = socket(0x23, 0x1, 0x3) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000280)={0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r10, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200488d5) (async) setsockopt$sock_attach_bpf(r10, 0x1, 0x31, &(0x7f00000008c0), 0x4) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x4}, 0xfffffffffffffff5) (async) setsockopt$packet_int(r11, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 1.667421194s ago: executing program 4 (id=1360): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd25, 0x25dfdbfd, {0x80, 0x34, 0x20, 0x2, 0xfd, 0x2, 0xfd, 0x5}, ["", "", ""]}, 0x1c}}, 0x20004890) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd25, 0x25dfdbfd, {0x80, 0x34, 0x20, 0x2, 0xfd, 0x2, 0xfd, 0x5}, ["", "", ""]}, 0x1c}}, 0x20004890) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000240)="63eced8e46bc3f00000000f7b986", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) close(0x3) 1.640690044s ago: executing program 5 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x13, 0xa, 0x201}, 0x14}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r1) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0xfa4f75bbacff275d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0) 1.588101979s ago: executing program 1 (id=1362): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x651c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4004090) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x44008000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x451a019a}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r4) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x800, 0x6}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="f2c5deb06756"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r3, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01032bbd7000fddbdf36aaf3500029000700737973f4656d70753a6f626a6509745f723a67726f75706164645f657865635f743a733000000000050001000000000008000400e0000001"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fa}, 0xe) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05fa651ba00000000000010000000900010073797a30000000002c000000030a03000000000000400000010000000900030073797a32000000000900010073797a300000000054000000060a01040000000000000000010000002c00048028000180080001006e6174001c00028008000540000000040800014000000001080002404d89000208000b40000000000900010073797a30"], 0xc8}}, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.514561369s ago: executing program 3 (id=1363): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x0) 1.45859947s ago: executing program 0 (id=1364): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0xd4, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="5a020cb7c563"}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x10}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6d21}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80000001}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4c004}, 0x48d1) 1.328425976s ago: executing program 5 (id=1365): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x29, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="9568000000200040000d1600000008000300", @ANYRES32=r3, @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40048d4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newae={0x5c, 0x1e, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2a, 0x70bd28, 0x70bd2c, 0x5}}]}, 0x5c}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000001000)=0x29) 1.328212258s ago: executing program 4 (id=1366): socket$inet6(0xa, 0x3, 0x3) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x1a4, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x6c, 0x14, {{'cmac(aes)\x00'}, 0x100, 0x0, "e3630dde215f3da533f861c33b10bf7dcb03d1e0dc304addd2f5580dc9771195"}}]}, 0x1a4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x501, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x101, 0x400}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) 1.325260541s ago: executing program 1 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x1f, 0x2, 0x520, 0x360, 0x360, 0x290, 0x1c0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth0_to_hsr\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @mcast1, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'veth0_to_bond\x00', 'caif0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @loopback}, {0x4, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x2, 0x4e23, @remote}, 0x185, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='lo\x00', 0xffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) sendmmsg$alg(r3, &(0x7f00000019c0)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x24008000) close(r3) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0904000000000000000002e2ffff130000001100010000000000000000000000000a"], 0x3c}}, 0x0) 1.296502376s ago: executing program 3 (id=1368): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2808c001800"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000007f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000007fc0)={&(0x7f0000007f80)={0x1c, r5, 0xda45f3845fceee1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40408d4}, 0x800) (async) r7 = gettid() sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r7}}}], 0x20}, 0x0) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00G', @ANYRES16=r10, @ANYBLOB="01002abd7000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="18005a801400018004000100040002000500060001000000"], 0x34}, 0x1, 0x0, 0x0, 0x2048080}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) (async) r12 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r12, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000480)="96bc14585c62", 0x6}], 0x2, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x34}}], 0x18, 0x1000000}, 0x0) 1.211959504s ago: executing program 0 (id=1369): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e23, 0x3, 'ovf\x00', 0x1, 0x7, 0x4f}, 0x2c) syz_emit_ethernet(0x16, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@llc={0x4, {@llc={0xaa, 0x0, 'c', "88a6a1f49f"}}}}}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'sh\x00', 0x19, 0x60000000, 0xc}, {@multicast1, 0x4e21, 0x10000, 0x80000000, 0xe1b2, 0xfffffffd}}, 0x44) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x40880) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000100)=0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f9, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 1.164530077s ago: executing program 4 (id=1370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x1}, {}, {0x6}]}) 1.152268502s ago: executing program 5 (id=1371): r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket(0x11, 0x800000003, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) 1.129459903s ago: executing program 3 (id=1372): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$pppl2tp(r0, &(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x0, 0x0, 0x80}}, 0x26) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x8040001) bind$inet6(r2, &(0x7f0000002b80)={0xa, 0x4e20, 0x10, @dev={0xfe, 0x80, '\x00', 0x24}, 0xffff}, 0x1c) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000600)=0x1, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000feffffff1c000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff4}}], &(0x7f0000000240)='GPL\x00', 0xfffffff9, 0x7d, &(0x7f0000000280)=""/125, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xd, 0x0, 0x48f}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x5, 0x5, 0xf, 0x8b4cbe762e36f45b}, {0x0, 0x1, 0x8}, {0x1, 0x2, 0xe, 0x4}, {0x5, 0x1, 0xf, 0x3}, {0x4, 0x4, 0x7}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='rxrpc_rx_abort\x00', r6, 0x0, 0x2}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.000374219s ago: executing program 1 (id=1373): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x5, 0x601, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000540)=@tcp, 0x3}, 0x20) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000114080)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00'], 0x40}, 0x1, 0x0, 0x0, 0x4044410}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES64=r8, @ANYBLOB="08000b00200000000800020001", @ANYRESHEX=r1, @ANYRES64], 0x3c}}, 0x0) 999.540439ms ago: executing program 0 (id=1374): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x404, @loopback}], 0xfffffde7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x44890) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x44890) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @empty}, 0x1c) listen(r3, 0x5) (async) listen(r3, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="08648e4c23178177"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a3ff200140600fe8000000000000000000000000000bbf68000010100000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500103fc"], 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @local}, 0x2}}, 0x2e) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @local}, 0x2}}, 0x2e) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4c23, 0x81, @ipv4={'\x00', '\xff\xff', @remote}, 0xffbff001}, 0x1c) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4c23, 0x81, @ipv4={'\x00', '\xff\xff', @remote}, 0xffbff001}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x1, @broadcast}, 0x2, 0x4}}, 0x2e) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r0, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) (async) r8 = accept(r0, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000100)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYBLOB="f7a63effeb9c90157ce62db9a9f9c9c25d0d8ee2c3ef9d29c2ed469d3a992ee8884ec14599388a849686edc37449bf780a47148c2e74db84c2eb6c158b396f4b367fa2ba5a185f29f08ee72d2bcf296dc16ce0be6da810be26d032297d1bc2b22dad53c81fa8cdfe3b250cd594eed7b077a312a5d117b07d2e555d00db13f6e042134fcc9838260ab10f0c9610", @ANYRES16=r5, @ANYRES32=r2, @ANYBLOB="0600b500c30500000500190002000000050029000c00000006001a0101000000060012000800000006001a01020000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8808}, 0x42) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x5, 0x8000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000001c0)={r9, 0x1ff}, &(0x7f0000000200)=0x8) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1, 0x4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r10 = socket(0xb, 0x4, 0x9) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r11, 0x1, 0x24, &(0x7f00000002c0)=0x5f53, 0x4) (async) setsockopt$sock_int(r11, 0x1, 0x24, &(0x7f00000002c0)=0x5f53, 0x4) bind$inet6(r11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 935.314256ms ago: executing program 4 (id=1375): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1820000000090000000000060000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1820000000090000000000060000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="d3e1a11972cc70e7c0760995d2ecd391b7ec671a5f876bbd3dda37782c77c3a8c7bbaa279dff5304eb879334433a0ff26072f49881", 0x35, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 764.61031ms ago: executing program 3 (id=1376): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f00000000c0)=0x3e, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnetconf={0x14, 0x52, 0x2, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x20004005) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021692500000000002020207b1a00fe00000000bfa100000000000047010000f8ffffffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) 764.178057ms ago: executing program 4 (id=1377): r0 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x2}, 0x3, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000005080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'W'}]}], {0x14}}, 0x70}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004dc0), 0x0, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}, 0x802}], 0x4, 0x40022000, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d30000000000000080001"], 0xd4}}, 0x0) 762.919704ms ago: executing program 5 (id=1378): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x0) 732.608128ms ago: executing program 3 (id=1379): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0xd4, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="5a020cb7c563"}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x10}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6d21}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80000001}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4c004}, 0x48d1) 564.030991ms ago: executing program 5 (id=1380): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="401a7502018baf188bac0fa823edd197b6727690ddf77550c392c6311197cfec038af5f9a74787ca016450f5ab62db77905aae47e3ab62743d3ab817e30a3cba", 0x40}, {&(0x7f0000000300)="3209c56ca296424de952176fb004f598a136ee56978911d5a5f2d70718c5b9d064237e2bdcd2efde56061a4545d0dd49", 0x30}, {&(0x7f0000000340)="bc4ebb9c1bfcd3fdbc3cf17880f2b5ad1c7e5a8b3f6c1416bced1e4352d11b8fdd65d49ae8b3232009d100898b60e522bc887d14356869d525f639a536b54f27c28f608ed2864442abfce95841cfede6e3e29e7ec6a5034717e2ebccdd2bbb49ebdc488889ece574388537044d433e072b9f82", 0x73}, {&(0x7f00000003c0)="efcdf9ccbe094e6ebbefbaab2031829aa47ed23293953fc94570f5de37b5fa567b931a81c00d9f2fbf2db209d9384b449ef41dace87f8066f45b70cce35def55a2d9712628bfe47a8dfc0d691f83373aef67a77ee35c6c62383bdbbe489dac3060cfc92f23537e200f38527fb13cbe8bd370541e37c797ec964fb01fe0f5cdd973077b88a9a15d206a46b8c2fceee955c3c92e466884370b1fd45c0b6fdab6119c764870fa55e170ce4da171772ba63cd169e6b23eb166deca0050c7176464e72d1e1303783ddc29616b", 0xca}], 0x4, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0xde}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0xc0}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)="47a89140b4e916a8deec20c814cfb0925d9ec4206424a7565c041a333d87d41b1867fbf093659a36a5d260d05e55c905618ada0e63696bb5b44da498a76a175e3d", 0x89}, {&(0x7f0000000c80)="3bd110a2d34b0742cabb1a5e8f55217478833f2a07620b2a6ef881fae9c7c645cff359bc0f0949995680abbe50de2bc1e5e279a5080a90ad5774e40c9f74b2a626df7143f37f139f9a0467f110b9274ce495b79e41bfa017cb1ab68149994528f2991bd931c4be2b87eb353bef38b3c415f854411aeba8d7529dcd2197d9d8ec0957bf353758bd48a100a78c4878236625", 0x91}, {&(0x7f0000000d40)="21f9474ab15a5610e6d4bfa79c33bfb9b9d4d41057bf66cf7053938c6bd4f188a59e5bf456fb6326892617b96bd02c505ba787c8cd5bd438cac5bcc6a81dbf3b9f1891577d64f67221bd2d97a6a8675252455c5c022a6eb8fdb7e5c29597adb219919e3dfc1a9eb5e2a91363fa48dea43beb52f2dce57243febfd52b5b2a9e0a6e915456b086aad50aaf86a40f1c01115d9af74bf4b46977d9207cc19c4b87743ecf17e9c816ad5dc82a16760684d69651f18a11144bd054d983d2a1fcc9b8e2691c3ef71a2801755b2f3c5f87d3fc5f1c241b0d7a03", 0xd6}, {&(0x7f0000000580)="9136f2585269e40955183c4b972388baa175724fe869a85f51b23fc3e9ec7d4077cfa5c67d5e3abde0f91a690c465f4f44660dbce8815e1c897d7e55d12fb2", 0x3f}], 0x4, &(0x7f0000000900)=[@iv={0x50, 0x117, 0x2, 0x38, "aa082ab429b580260c0840e87f39c83c3dd83ae450c2d321fcb3eda08b7ca099ef3f53d4e464f12ec67a6b52936ddb39f9e8a6a066403ad2"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xb8, 0x117, 0x2, 0xa4, "2649aee2aa6615b61c67c04ab5a59d61502dcabb167e11453ef133b361c06e41d385a27857c9a45727b9ec8f00891571d37cf68e59692561180774cecfeac9b6735e1578ce34d3c9cf81ded510102637822d469ea0753e921b0ee8a2387ae0723a8be4f589327c2baa0d3512140e720c6b8c2d715e09b3358790ca7ca4b4e2c6fe03c1284e8a05fbfe3f5806d706e5b20f78ee53ee6ebcf7567466e6625a55c88e71b3f0"}, @iv={0xc8, 0x117, 0x2, 0xb3, "a7f68cf2f21ef68537c052b9d180941fd1fe561876914aa27387c21dbda149990c52794b627ea10fd412dccce8e0b1a0b662fc41f4ac95321d7e57c4e2bba35fa042938dc58d94d360ce2698101c856499bb0ef38fb8b8250a0f1be2edea189b90e2e3e45455f9c1185de01d82f202267c858dbb53d620798fe9f5cc26b06d7a746bc7174b6dcd919a912e2c294025247990f17fa955a9a6d4ac729587e6d7cd1cd439c4a16676933009c5a372d4d15f4181cd"}, @assoc={0x18, 0x117, 0x4, 0xb}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xd0, 0x117, 0x2, 0xb7, "fb0633c2be17757636e76517ee6fa8cd0a3e6f391017d91d81c80e905d0a91405121b4d1e4d75b9eb973433e6e72d760d5c774526d264d48053cb68569551e9e7d5c69de2b5fdf633d02135684fbcf0fc4941abf3d192a6ef7c99abc2046598655d6181e9ed3a3e639ca1b4df09e920b8254d6f478b91b31e5242c48c33f1c9db666fb7e9bc6dda877227e8c4c1e830a5d6b5311329a8c06922b8592aaf90a535a9c74a1a6692ca5606c40e9ca42fe3894ca0e326b2087"}], 0x2e8, 0x800}], 0x2, 0x20) syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, 0xffffffffffffffff) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000040000000b0001006d"], 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r5, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x24, 0x24, [{0xb, 0x1}, {0xc}, {0x6, 0x1}, {0x1b}, {0x36, 0x1}, {0x1b, 0x1}, {0x6}, {0x12, 0x1}, {0x4, 0x1}, {0x24}, {0x1, 0x1}, {0x8, 0x1}, {0x3, 0x1}, {0x36, 0x1}, {0x36, 0x1}, {0x6c}, {0x1b}, {0x3, 0x1}, {0x1}, {0x3}, {0x18}, {0x60}, {0x18}, {0x2, 0x1}, {0x1f99cf9c7b3c1989}, {0x12, 0x1}, {0x16, 0x1}, {0xc}, {0x3}, {0x4}, {0x48}, {0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80000) 563.349285ms ago: executing program 3 (id=1381): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$key(0xf, 0x3, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000240)) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b0ebe3d1ea70200900000000fcdbdf250300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000020000002000000e00000010000000000000000"], 0x50}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000002c0)=0x5f53, 0x4) bind$inet6(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) listen(0xffffffffffffffff, 0x100101) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000880)={0x29}, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000340)={0x3, 0xe0000000000}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000140)={0x80}) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r11, 0x89e2) r12 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockname$inet(r12, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x3ff) 376.359793ms ago: executing program 1 (id=1382): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffff9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000140)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x8, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYRES16=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000071100d00000000009500000000000000e6582da86c9db092d9884e687900612c07cbdb292d7fcb1012058d64e0d3beb6f45f6d44ca13209286e2c5292ab72d1af005079bb5cacc5dda97a274f3dfdb3635e08adcd2e34af526108e1739cae0441844e7e169f98d4c61f31d73b749cb1dc866180f93a9bdc7e8f704a884c835360490bc3b839b1b3a4a90e52a8b4616d1cdcdd7d30c96eb3af966ab897194be1c6f295d9cd6519040a965de87c2"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 202.442219ms ago: executing program 1 (id=1383): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(r1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7}, 0xe) 150.798713ms ago: executing program 5 (id=1384): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0}, &(0x7f0000000140), &(0x7f0000000000)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300021000000000000000040000000200080008000000540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000020000200010000000000000005fd80ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) connect$ax25(r2, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1008}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xffffffffffffff98) 0s ago: executing program 0 (id=1385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x44, r2, 0x917, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYBLOB="00082dbd7000fddbdf25260000000c009900050000004d0000000400d000", @ANYBLOB="4bdcb83a06f15da5798f8b516290545cee72a0311f546509feb111d10a615ae511c38a7ff6fb80932eb05393385a85b9930eb4885f94c0a2250ac81f541850a37623eeb1456163d7b735bfaeb93a3be24728fa6cea31f7d4d94fe93a1039ac0eea637a5b75a550cb2335e496e00a62b92954df0846160dfa861c247f0ba4c8e8e372523f604c88b70219ae0c68d08b16c13e", @ANYRES64=r2, @ANYRESOCT=r0, @ANYRES32=r0], 0x24}}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@bloom_filter={0x1e, 0x1, 0x4, 0x80, 0x16682, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xd, @void, @value, @value}, 0x50) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000400)={0xa}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f00000003c0)={0x1008}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xe9af, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x1a, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001010000000000002600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000001854000003000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000002000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x80000000, 0x5f, &(0x7f00000009c0)=""/95, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000011c0)=[0xffffffffffffffff, r3, r4, 0xffffffffffffffff, r5, r8, r9, 0xffffffffffffffff, r10], &(0x7f0000001200)=[{0x1, 0x3, 0x8, 0x4}], 0x10, 0x6, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r11, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x4004) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"0ddd828809693a875326af5c673ac3cd", 0x0, 0x0, {0xc, 0xffff}, {0xffff, 0xf60}, 0x8, [0x80000001, 0xfffffffffffffffd, 0x7, 0x3, 0xf1, 0xd, 0x7, 0x62, 0x7fffffffffffffff, 0xffffffff, 0x2, 0xee, 0x3, 0x1ff, 0x100000000, 0x264c]}) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f00000003c0)=0x0) r14 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r14, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) bind$inet6(r14, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r11, 0xc0c89425, &(0x7f0000000500)={"3a9a665e437a34ec8d1fe5d667866440", r12, r13, {0x38000003, 0x42c}, {0x6, 0x59c3d222}, 0x5, [0xffffffffffffff01, 0x1, 0xe64, 0xfffffffffffffff7, 0x1, 0x0, 0x4, 0x200, 0x7, 0x82fb, 0xfffffffffffffffb, 0x8, 0x0, 0x7, 0x6, 0x40a]}) r15 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x400, 0xffffffff, 0x0, 0x238, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @dev, [], [], 'erspan0\x00', 'pim6reg0\x00'}, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x11, 0x6, 0x0, [0x2, 0xacf, 0x1, 0x5, 0xb, 0x8809, 0x4225, 0xeaf2, 0x81, 0x5, 0x34, 0x2, 0x6, 0xffc0, 0x5], 0xd}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x814}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. [ 80.387267][ T5821] cgroup: Unknown subsys name 'net' [ 80.499223][ T5821] cgroup: Unknown subsys name 'cpuset' [ 80.508220][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.180986][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.865800][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.881575][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.903346][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.911594][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.921241][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.928621][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.929231][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.937748][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.943581][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.952345][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.959064][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.965619][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.971886][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.986716][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.987112][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.995920][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.002793][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.009038][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.015827][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.025441][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.032668][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.079921][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.122378][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.129546][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.137627][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.747702][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.841556][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 86.004253][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 86.082386][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.090780][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.098233][ T5831] bridge_slave_0: entered allmulticast mode [ 86.107043][ T5831] bridge_slave_0: entered promiscuous mode [ 86.120891][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 86.154723][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.161888][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.169258][ T5831] bridge_slave_1: entered allmulticast mode [ 86.177223][ T5831] bridge_slave_1: entered promiscuous mode [ 86.218705][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 86.310535][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.321248][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.329352][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.336827][ T5832] bridge_slave_0: entered allmulticast mode [ 86.344321][ T5832] bridge_slave_0: entered promiscuous mode [ 86.394986][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.404561][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.411883][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.419517][ T5832] bridge_slave_1: entered allmulticast mode [ 86.427624][ T5832] bridge_slave_1: entered promiscuous mode [ 86.460129][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.467415][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.474905][ T5836] bridge_slave_0: entered allmulticast mode [ 86.482309][ T5836] bridge_slave_0: entered promiscuous mode [ 86.541498][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.548754][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.556219][ T5836] bridge_slave_1: entered allmulticast mode [ 86.563632][ T5836] bridge_slave_1: entered promiscuous mode [ 86.588170][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.670788][ T5831] team0: Port device team_slave_0 added [ 86.679146][ T5831] team0: Port device team_slave_1 added [ 86.687840][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.712813][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.721159][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.728837][ T5841] bridge_slave_0: entered allmulticast mode [ 86.736620][ T5841] bridge_slave_0: entered promiscuous mode [ 86.764392][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.832860][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.841684][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.849794][ T5841] bridge_slave_1: entered allmulticast mode [ 86.857916][ T5841] bridge_slave_1: entered promiscuous mode [ 86.881979][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.889547][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.897414][ T5843] bridge_slave_0: entered allmulticast mode [ 86.905643][ T5843] bridge_slave_0: entered promiscuous mode [ 86.918450][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.929451][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.937185][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.963437][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.979015][ T5832] team0: Port device team_slave_0 added [ 87.004816][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.012033][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.021016][ T5843] bridge_slave_1: entered allmulticast mode [ 87.029966][ T5843] bridge_slave_1: entered promiscuous mode [ 87.056589][ T5832] team0: Port device team_slave_1 added [ 87.074921][ T5845] Bluetooth: hci0: command tx timeout [ 87.087456][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.095005][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.122390][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.138313][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.154143][ T5845] Bluetooth: hci1: command tx timeout [ 87.154356][ T5850] Bluetooth: hci3: command tx timeout [ 87.192814][ T5836] team0: Port device team_slave_0 added [ 87.202572][ T5836] team0: Port device team_slave_1 added [ 87.217484][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.234946][ T5850] Bluetooth: hci4: command tx timeout [ 87.236487][ T5845] Bluetooth: hci2: command tx timeout [ 87.290128][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.297226][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.323702][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.366747][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.376750][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.383727][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.411136][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.423359][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.430366][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.456366][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.498544][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.508945][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.516184][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.542723][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.572858][ T5831] hsr_slave_0: entered promiscuous mode [ 87.579474][ T5831] hsr_slave_1: entered promiscuous mode [ 87.589421][ T5841] team0: Port device team_slave_0 added [ 87.599555][ T5841] team0: Port device team_slave_1 added [ 87.655394][ T5843] team0: Port device team_slave_0 added [ 87.742294][ T5843] team0: Port device team_slave_1 added [ 87.766981][ T5836] hsr_slave_0: entered promiscuous mode [ 87.773420][ T5836] hsr_slave_1: entered promiscuous mode [ 87.780345][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.788360][ T5836] Cannot create hsr debugfs directory [ 87.801967][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.809266][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.835289][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.866089][ T5832] hsr_slave_0: entered promiscuous mode [ 87.872443][ T5832] hsr_slave_1: entered promiscuous mode [ 87.881871][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.889641][ T5832] Cannot create hsr debugfs directory [ 87.911082][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.920961][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.947595][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.973909][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.981337][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.007604][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.045202][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.052189][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.078750][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.194180][ T5843] hsr_slave_0: entered promiscuous mode [ 88.201098][ T5843] hsr_slave_1: entered promiscuous mode [ 88.207808][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.215450][ T5843] Cannot create hsr debugfs directory [ 88.339319][ T5841] hsr_slave_0: entered promiscuous mode [ 88.348371][ T5841] hsr_slave_1: entered promiscuous mode [ 88.355412][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.363002][ T5841] Cannot create hsr debugfs directory [ 88.705647][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.746068][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.795901][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.837922][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.946453][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.959119][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.972221][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.983888][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.110230][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.121264][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.133592][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.154302][ T5845] Bluetooth: hci0: command tx timeout [ 89.156533][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.235991][ T5845] Bluetooth: hci1: command tx timeout [ 89.236001][ T5850] Bluetooth: hci3: command tx timeout [ 89.287079][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.296411][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.309447][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.316977][ T5845] Bluetooth: hci2: command tx timeout [ 89.324174][ T5845] Bluetooth: hci4: command tx timeout [ 89.331150][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.341878][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.411850][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.422004][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.490228][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.497515][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.533883][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.557653][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.569580][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.585570][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.592715][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.614860][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.621824][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.669903][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.677091][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.703913][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.736805][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.744111][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.830694][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.866292][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.910144][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.917381][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.945692][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.952912][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.997945][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.059615][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.066820][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.176124][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.183338][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.419454][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.433897][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.549031][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.606206][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.631573][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.638817][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.710471][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.717707][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.828286][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.941634][ T5832] veth0_vlan: entered promiscuous mode [ 90.988235][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.031899][ T5832] veth1_vlan: entered promiscuous mode [ 91.132484][ T5843] veth0_vlan: entered promiscuous mode [ 91.188851][ T5843] veth1_vlan: entered promiscuous mode [ 91.209898][ T5841] veth0_vlan: entered promiscuous mode [ 91.235664][ T5845] Bluetooth: hci0: command tx timeout [ 91.250409][ T5832] veth0_macvtap: entered promiscuous mode [ 91.265827][ T5832] veth1_macvtap: entered promiscuous mode [ 91.276154][ T5841] veth1_vlan: entered promiscuous mode [ 91.314743][ T5845] Bluetooth: hci1: command tx timeout [ 91.317018][ T5850] Bluetooth: hci3: command tx timeout [ 91.383342][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.396024][ T5850] Bluetooth: hci4: command tx timeout [ 91.396041][ T5845] Bluetooth: hci2: command tx timeout [ 91.433940][ T5831] veth0_vlan: entered promiscuous mode [ 91.445549][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.456437][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.468378][ T5841] veth0_macvtap: entered promiscuous mode [ 91.482978][ T5841] veth1_macvtap: entered promiscuous mode [ 91.505918][ T5843] veth0_macvtap: entered promiscuous mode [ 91.519388][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.528802][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.537744][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.546909][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.563019][ T5843] veth1_macvtap: entered promiscuous mode [ 91.593929][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.603237][ T5831] veth1_vlan: entered promiscuous mode [ 91.649542][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.662353][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.690267][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.700954][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.710732][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.722087][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.748102][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.769708][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.781730][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.792907][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.801784][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.883178][ T1215] cfg80211: failed to load regulatory.db [ 91.885499][ T5836] veth0_vlan: entered promiscuous mode [ 91.902696][ T5831] veth0_macvtap: entered promiscuous mode [ 91.941124][ T5831] veth1_macvtap: entered promiscuous mode [ 91.961466][ T5836] veth1_vlan: entered promiscuous mode [ 91.985379][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.993368][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.071812][ T5836] veth0_macvtap: entered promiscuous mode [ 92.111156][ T5836] veth1_macvtap: entered promiscuous mode [ 92.120449][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.133192][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.141941][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.142626][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.168716][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.211993][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.247464][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.260033][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.270117][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.312370][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.321815][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.322671][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.330983][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.331034][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.389983][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.403581][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.420322][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.430527][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.444791][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.480528][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.508248][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.541162][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.560115][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.587286][ T5927] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.683596][ T5927] bridge0: port 3(gretap0) entered blocking state [ 92.691384][ T5927] bridge0: port 3(gretap0) entered disabled state [ 92.708201][ T5927] gretap0: entered allmulticast mode [ 92.736626][ T5927] gretap0: entered promiscuous mode [ 92.743052][ T5927] bridge0: port 3(gretap0) entered blocking state [ 92.749786][ T5927] bridge0: port 3(gretap0) entered forwarding state [ 92.888471][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.898055][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.962008][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.002363][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.051978][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.073842][ T5940] netlink: 'syz.3.4': attribute type 7 has an invalid length. [ 93.083059][ T5940] netlink: 'syz.3.4': attribute type 8 has an invalid length. [ 93.091986][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.131536][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.143805][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.237683][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.253584][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.320183][ T5845] Bluetooth: hci0: command tx timeout [ 93.394686][ T5845] Bluetooth: hci1: command tx timeout [ 93.396568][ T5850] Bluetooth: hci3: command tx timeout [ 93.439499][ T5947] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.461737][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'. [ 93.470710][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'. [ 93.486599][ T5850] Bluetooth: hci2: command tx timeout [ 93.486609][ T5845] Bluetooth: hci4: command tx timeout [ 93.727606][ T5957] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.082746][ T5959] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 94.107721][ T5964] Zero length message leads to an empty skb [ 94.208820][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 94.548850][ T5988] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 94.805503][ T5997] tipc: Started in network mode [ 94.824674][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.844721][ T5997] tipc: Node identity , cluster identity 4711 [ 94.858191][ T5997] tipc: Failed to set node id, please configure manually [ 94.897151][ T5997] tipc: Enabling of bearer rejected, failed to enable media [ 95.303339][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 95.476814][ T6021] ip6t_srh: unknown srh match flags 536B [ 95.933658][ T6037] netlink: zone id is out of range [ 95.975172][ T6037] netlink: zone id is out of range [ 96.002070][ T6037] netlink: zone id is out of range [ 96.036868][ T6037] netlink: zone id is out of range [ 96.054942][ T6037] netlink: zone id is out of range [ 96.061117][ T6037] netlink: zone id is out of range [ 96.067200][ T6037] netlink: zone id is out of range [ 96.075078][ T6037] netlink: zone id is out of range [ 96.082423][ T6037] netlink: zone id is out of range [ 96.087734][ T6037] netlink: zone id is out of range [ 96.421807][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.42'. [ 96.527702][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 96.577826][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 97.001098][ T6078] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 97.692321][ T6103] tipc: Started in network mode [ 97.707597][ T6103] tipc: Node identity 96cc23c8e085, cluster identity 4711 [ 97.739660][ T6103] tipc: Enabled bearer , priority 0 [ 97.789942][ T6098] syzkaller0: entered promiscuous mode [ 97.825335][ T6098] syzkaller0: entered allmulticast mode [ 97.857648][ T6109] netlink: 'syz.3.62': attribute type 1 has an invalid length. [ 97.892832][ T6098] tipc: Resetting bearer [ 97.899881][ T6109] netlink: 'syz.3.62': attribute type 1 has an invalid length. [ 97.921720][ T6114] xt_SECMARK: invalid mode: 0 [ 97.927975][ T6097] tipc: Resetting bearer [ 97.946420][ T6109] netlink: 'syz.3.62': attribute type 2 has an invalid length. [ 98.019093][ T6097] tipc: Disabling bearer [ 98.071947][ T6107] __nla_validate_parse: 7 callbacks suppressed [ 98.071967][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 98.192169][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.65'. [ 98.249277][ T6127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.65'. [ 98.647152][ T6147] xt_SECMARK: invalid mode: 0 [ 99.035098][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 99.071547][ T6160] netlink: 5 bytes leftover after parsing attributes in process `syz.2.80'. [ 99.281640][ T6174] Bluetooth: MGMT ver 1.23 [ 99.325567][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 100.226463][ T6207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.98'. [ 100.322978][ T6212] xfrm0: entered promiscuous mode [ 100.331875][ T6212] xfrm0: entered allmulticast mode [ 101.215310][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 101.233469][ T6250] x_tables: ip_tables: osf match: only valid for protocol 6 [ 101.643816][ T6266] IPVS: set_ctl: invalid protocol: 115 172.30.1.4:20004 [ 101.669465][ T6267] netlink: 14 bytes leftover after parsing attributes in process `syz.2.114'. [ 103.062665][ T6322] netlink: 44 bytes leftover after parsing attributes in process `syz.1.133'. [ 103.073811][ T6321] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 103.111797][ T6322] netlink: 43 bytes leftover after parsing attributes in process `syz.1.133'. [ 103.166453][ T6322] netlink: 'syz.1.133': attribute type 6 has an invalid length. [ 103.186345][ T6322] netlink: 'syz.1.133': attribute type 5 has an invalid length. [ 103.195041][ T6322] netlink: 43 bytes leftover after parsing attributes in process `syz.1.133'. [ 103.239641][ T6321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.322410][ T6328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.330555][ T6328] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 103.356674][ T6328] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 103.893678][ T6359] net_ratelimit: 5 callbacks suppressed [ 103.893700][ T6359] openvswitch: netlink: Flow key attribute not present in set flow. [ 103.960737][ T6366] bridge0: port 3(gretap0) entered blocking state [ 103.972836][ T6366] bridge0: port 3(gretap0) entered disabled state [ 103.996837][ T6366] gretap0: entered allmulticast mode [ 104.030147][ T6366] gretap0: entered promiscuous mode [ 104.073381][ T6366] bridge0: port 3(gretap0) entered blocking state [ 104.080063][ T6366] bridge0: port 3(gretap0) entered forwarding state [ 104.150639][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 104.198926][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 104.213565][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 104.273683][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 105.104532][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'. [ 105.150748][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'. [ 105.198101][ T6408] FAULT_INJECTION: forcing a failure. [ 105.198101][ T6408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.273432][ T6408] CPU: 0 UID: 0 PID: 6408 Comm: syz.1.158 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 105.273477][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.273494][ T6408] Call Trace: [ 105.273510][ T6408] [ 105.273519][ T6408] dump_stack_lvl+0x189/0x250 [ 105.273567][ T6408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.273598][ T6408] ? __pfx__printk+0x10/0x10 [ 105.273621][ T6408] ? fs_reclaim_acquire+0x7d/0x100 [ 105.273677][ T6408] should_fail_ex+0x414/0x560 [ 105.273710][ T6408] prepare_alloc_pages+0x213/0x610 [ 105.273752][ T6408] __alloc_frozen_pages_noprof+0x123/0x370 [ 105.273777][ T6408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 105.273815][ T6408] ? policy_nodemask+0x27c/0x720 [ 105.273847][ T6408] alloc_pages_mpol+0x232/0x4a0 [ 105.273879][ T6408] folio_alloc_mpol_noprof+0x39/0x70 [ 105.273907][ T6408] shmem_alloc_and_add_folio+0x447/0xf60 [ 105.273938][ T6408] ? filemap_get_entry+0xad/0x2f0 [ 105.273956][ T6408] ? filemap_get_entry+0xad/0x2f0 [ 105.273975][ T6408] ? filemap_get_entry+0xad/0x2f0 [ 105.273995][ T6408] ? filemap_get_entry+0x28f/0x2f0 [ 105.274015][ T6408] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 105.274065][ T6408] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 105.274097][ T6408] shmem_get_folio_gfp+0x597/0x15f0 [ 105.274144][ T6408] shmem_fallocate+0x80f/0xde0 [ 105.274196][ T6408] ? __pfx_shmem_fallocate+0x10/0x10 [ 105.274234][ T6408] ? rcu_read_lock_any_held+0xb3/0x120 [ 105.274255][ T6408] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 105.274292][ T6408] vfs_fallocate+0x6a3/0x830 [ 105.274325][ T6408] ? __pfx_vfs_fallocate+0x10/0x10 [ 105.274364][ T6408] do_vfs_ioctl+0x1b8f/0x1eb0 [ 105.274385][ T6408] ? __se_sys_ioctl+0x47/0x170 [ 105.274404][ T6408] ? do_syscall_64+0xf6/0x210 [ 105.274432][ T6408] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 105.274494][ T6408] ? kasan_quarantine_put+0xdd/0x220 [ 105.274530][ T6408] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 105.274553][ T6408] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 105.274575][ T6408] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 105.274594][ T6408] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 105.274616][ T6408] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 105.274657][ T6408] ? __lock_acquire+0xaac/0xd20 [ 105.274713][ T6408] ? __fget_files+0x2a/0x420 [ 105.274746][ T6408] ? __fget_files+0x3a0/0x420 [ 105.274773][ T6408] ? __fget_files+0x2a/0x420 [ 105.274804][ T6408] ? bpf_lsm_file_ioctl+0x9/0x20 [ 105.274836][ T6408] __se_sys_ioctl+0x82/0x170 [ 105.274861][ T6408] do_syscall_64+0xf6/0x210 [ 105.274889][ T6408] ? clear_bhb_loop+0x60/0xb0 [ 105.274915][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.274934][ T6408] RIP: 0033:0x7eff6938e969 [ 105.274959][ T6408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.274975][ T6408] RSP: 002b:00007eff6a15f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.274997][ T6408] RAX: ffffffffffffffda RBX: 00007eff695b5fa0 RCX: 00007eff6938e969 [ 105.275012][ T6408] RDX: 0000200000000080 RSI: 0000000040305828 RDI: 0000000000000006 [ 105.275024][ T6408] RBP: 00007eff6a15f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.275036][ T6408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.275047][ T6408] R13: 0000000000000000 R14: 00007eff695b5fa0 R15: 00007fffd049d8c8 [ 105.275079][ T6408] [ 105.805628][ T6420] netlink: 'syz.1.162': attribute type 39 has an invalid length. [ 105.936905][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 106.196336][ T5845] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 106.197445][ T5850] Bluetooth: hci0: command 0x0401 tx timeout [ 106.240268][ T6430] macsec0: entered promiscuous mode [ 106.559701][ T6448] FAULT_INJECTION: forcing a failure. [ 106.559701][ T6448] name failslab, interval 1, probability 0, space 0, times 1 [ 106.591796][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz.1.171 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 106.591827][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.591840][ T6448] Call Trace: [ 106.591848][ T6448] [ 106.591857][ T6448] dump_stack_lvl+0x189/0x250 [ 106.591898][ T6448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.591930][ T6448] ? __pfx__printk+0x10/0x10 [ 106.591959][ T6448] ? __pfx___might_resched+0x10/0x10 [ 106.591987][ T6448] should_fail_ex+0x414/0x560 [ 106.592016][ T6448] should_failslab+0xa8/0x100 [ 106.592047][ T6448] __kmalloc_cache_noprof+0x70/0x3d0 [ 106.592076][ T6448] ? allocate_cgrp_cset_links+0xc9/0x320 [ 106.592112][ T6448] allocate_cgrp_cset_links+0xc9/0x320 [ 106.592149][ T6448] find_css_set+0x9f5/0x15e0 [ 106.592197][ T6448] ? __pfx_find_css_set+0x10/0x10 [ 106.592242][ T6448] ? __lock_acquire+0xaac/0xd20 [ 106.592289][ T6448] cgroup_migrate_prepare_dst+0x130/0x700 [ 106.592333][ T6448] cgroup_attach_task+0x5ae/0x970 [ 106.592392][ T6448] ? cgroup_attach_task+0x1fb/0x970 [ 106.592423][ T6448] ? __pfx_cgroup_attach_task+0x10/0x10 [ 106.592469][ T6448] ? cgroup_attach_permissions+0x4f0/0x9e0 [ 106.592519][ T6448] __cgroup_procs_write+0x2a7/0x300 [ 106.592561][ T6448] cgroup_procs_write+0x27/0x50 [ 106.592587][ T6448] ? __pfx_cgroup_procs_write+0x10/0x10 [ 106.592614][ T6448] cgroup_file_write+0x39e/0x740 [ 106.592647][ T6448] ? __pfx_cgroup_file_write+0x10/0x10 [ 106.592689][ T6448] ? __pfx_cgroup_file_write+0x10/0x10 [ 106.592713][ T6448] kernfs_fop_write_iter+0x378/0x4f0 [ 106.592746][ T6448] vfs_write+0x548/0xa90 [ 106.592779][ T6448] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 106.592804][ T6448] ? __pfx_vfs_write+0x10/0x10 [ 106.592842][ T6448] ? __fget_files+0x2a/0x420 [ 106.592883][ T6448] ksys_write+0x145/0x250 [ 106.592906][ T6448] ? rcu_is_watching+0x15/0xb0 [ 106.592927][ T6448] ? __pfx_ksys_write+0x10/0x10 [ 106.592957][ T6448] ? do_syscall_64+0xba/0x210 [ 106.592992][ T6448] do_syscall_64+0xf6/0x210 [ 106.593021][ T6448] ? clear_bhb_loop+0x60/0xb0 [ 106.593049][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.593069][ T6448] RIP: 0033:0x7eff6938e969 [ 106.593088][ T6448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.593106][ T6448] RSP: 002b:00007eff6a15f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.593129][ T6448] RAX: ffffffffffffffda RBX: 00007eff695b5fa0 RCX: 00007eff6938e969 [ 106.593144][ T6448] RDX: 0000000000000012 RSI: 00002000000000c0 RDI: 0000000000000006 [ 106.593157][ T6448] RBP: 00007eff6a15f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.593170][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.593182][ T6448] R13: 0000000000000000 R14: 00007eff695b5fa0 R15: 00007fffd049d8c8 [ 106.593216][ T6448] [ 106.917978][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 106.937022][ T6450] tap0: tun_chr_ioctl cmd 2148553947 [ 106.942768][ T6450] Bluetooth: MGMT ver 1.23 [ 107.021783][ T6457] FAULT_INJECTION: forcing a failure. [ 107.021783][ T6457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 107.036286][ T6457] CPU: 1 UID: 0 PID: 6457 Comm: syz.4.172 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 107.036315][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.036328][ T6457] Call Trace: [ 107.036336][ T6457] [ 107.036345][ T6457] dump_stack_lvl+0x189/0x250 [ 107.036385][ T6457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.036416][ T6457] ? __pfx__printk+0x10/0x10 [ 107.036440][ T6457] ? fs_reclaim_acquire+0x7d/0x100 [ 107.036483][ T6457] should_fail_ex+0x414/0x560 [ 107.036511][ T6457] prepare_alloc_pages+0x213/0x610 [ 107.036563][ T6457] __alloc_frozen_pages_noprof+0x123/0x370 [ 107.036589][ T6457] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.036623][ T6457] ? policy_nodemask+0x27c/0x720 [ 107.036658][ T6457] alloc_pages_mpol+0x232/0x4a0 [ 107.036694][ T6457] folio_alloc_mpol_noprof+0x39/0x70 [ 107.036725][ T6457] shmem_alloc_and_add_folio+0x447/0xf60 [ 107.036759][ T6457] ? filemap_get_entry+0xad/0x2f0 [ 107.036778][ T6457] ? filemap_get_entry+0xad/0x2f0 [ 107.036796][ T6457] ? filemap_get_entry+0xad/0x2f0 [ 107.036818][ T6457] ? filemap_get_entry+0x28f/0x2f0 [ 107.036841][ T6457] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 107.036878][ T6457] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 107.036912][ T6457] shmem_get_folio_gfp+0x597/0x15f0 [ 107.036961][ T6457] shmem_fallocate+0x80f/0xde0 [ 107.037014][ T6457] ? __pfx_shmem_fallocate+0x10/0x10 [ 107.037052][ T6457] ? rcu_read_lock_any_held+0xb3/0x120 [ 107.037074][ T6457] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 107.037112][ T6457] vfs_fallocate+0x6a3/0x830 [ 107.037146][ T6457] ? __pfx_vfs_fallocate+0x10/0x10 [ 107.037186][ T6457] do_vfs_ioctl+0x1b8f/0x1eb0 [ 107.037207][ T6457] ? __se_sys_ioctl+0x47/0x170 [ 107.037226][ T6457] ? do_syscall_64+0xf6/0x210 [ 107.037257][ T6457] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 107.037321][ T6457] ? kasan_quarantine_put+0xdd/0x220 [ 107.037358][ T6457] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 107.037383][ T6457] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 107.037405][ T6457] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 107.037426][ T6457] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 107.037449][ T6457] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.037491][ T6457] ? __lock_acquire+0xaac/0xd20 [ 107.037550][ T6457] ? __fget_files+0x2a/0x420 [ 107.037584][ T6457] ? __fget_files+0x3a0/0x420 [ 107.037612][ T6457] ? __fget_files+0x2a/0x420 [ 107.037644][ T6457] ? bpf_lsm_file_ioctl+0x9/0x20 [ 107.037677][ T6457] __se_sys_ioctl+0x82/0x170 [ 107.037703][ T6457] do_syscall_64+0xf6/0x210 [ 107.037733][ T6457] ? clear_bhb_loop+0x60/0xb0 [ 107.037759][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.037780][ T6457] RIP: 0033:0x7f95c818e969 [ 107.037799][ T6457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.037817][ T6457] RSP: 002b:00007f95c90b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.037839][ T6457] RAX: ffffffffffffffda RBX: 00007f95c83b5fa0 RCX: 00007f95c818e969 [ 107.037854][ T6457] RDX: 0000200000000080 RSI: 0000000040305828 RDI: 0000000000000006 [ 107.037867][ T6457] RBP: 00007f95c90b4090 R08: 0000000000000000 R09: 0000000000000000 [ 107.037880][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.037892][ T6457] R13: 0000000000000000 R14: 00007f95c83b5fa0 R15: 00007fff66c1a368 [ 107.037925][ T6457] [ 107.537531][ T6465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.202904][ T6481] __nla_validate_parse: 1 callbacks suppressed [ 108.202923][ T6481] netlink: 72 bytes leftover after parsing attributes in process `syz.0.183'. [ 108.258744][ T6481] sctp: [Deprecated]: syz.0.183 (pid 6481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.258744][ T6481] Use struct sctp_sack_info instead [ 108.437714][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 108.470196][ T6497] FAULT_INJECTION: forcing a failure. [ 108.470196][ T6497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.490763][ T6497] CPU: 1 UID: 0 PID: 6497 Comm: syz.4.188 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 108.490792][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.490804][ T6497] Call Trace: [ 108.490812][ T6497] [ 108.490821][ T6497] dump_stack_lvl+0x189/0x250 [ 108.490859][ T6497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.490890][ T6497] ? __pfx__printk+0x10/0x10 [ 108.490913][ T6497] ? fs_reclaim_acquire+0x7d/0x100 [ 108.490954][ T6497] should_fail_ex+0x414/0x560 [ 108.490982][ T6497] prepare_alloc_pages+0x213/0x610 [ 108.491023][ T6497] __alloc_frozen_pages_noprof+0x123/0x370 [ 108.491048][ T6497] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.491078][ T6497] ? policy_nodemask+0x27c/0x720 [ 108.491110][ T6497] alloc_pages_mpol+0x232/0x4a0 [ 108.491144][ T6497] folio_alloc_mpol_noprof+0x39/0x70 [ 108.491176][ T6497] shmem_alloc_and_add_folio+0x447/0xf60 [ 108.491209][ T6497] ? filemap_get_entry+0xad/0x2f0 [ 108.491228][ T6497] ? filemap_get_entry+0xad/0x2f0 [ 108.491245][ T6497] ? filemap_get_entry+0xad/0x2f0 [ 108.491266][ T6497] ? filemap_get_entry+0x28f/0x2f0 [ 108.491299][ T6497] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 108.491332][ T6497] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 108.491369][ T6497] shmem_get_folio_gfp+0x597/0x15f0 [ 108.491412][ T6497] shmem_fallocate+0x80f/0xde0 [ 108.491479][ T6497] ? __pfx_shmem_fallocate+0x10/0x10 [ 108.491516][ T6497] ? rcu_read_lock_any_held+0xb3/0x120 [ 108.491537][ T6497] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 108.491574][ T6497] vfs_fallocate+0x6a3/0x830 [ 108.491609][ T6497] ? __pfx_vfs_fallocate+0x10/0x10 [ 108.491647][ T6497] do_vfs_ioctl+0x1b8f/0x1eb0 [ 108.491667][ T6497] ? __se_sys_ioctl+0x47/0x170 [ 108.491686][ T6497] ? do_syscall_64+0xf6/0x210 [ 108.491716][ T6497] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 108.491778][ T6497] ? kasan_quarantine_put+0xdd/0x220 [ 108.491813][ T6497] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 108.491836][ T6497] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 108.491858][ T6497] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 108.491877][ T6497] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 108.491900][ T6497] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 108.491940][ T6497] ? __lock_acquire+0xaac/0xd20 [ 108.491991][ T6497] ? __fget_files+0x2a/0x420 [ 108.492025][ T6497] ? __fget_files+0x3a0/0x420 [ 108.492051][ T6497] ? __fget_files+0x2a/0x420 [ 108.492082][ T6497] ? bpf_lsm_file_ioctl+0x9/0x20 [ 108.492114][ T6497] __se_sys_ioctl+0x82/0x170 [ 108.492139][ T6497] do_syscall_64+0xf6/0x210 [ 108.492167][ T6497] ? clear_bhb_loop+0x60/0xb0 [ 108.492193][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.492251][ T6497] RIP: 0033:0x7f95c818e969 [ 108.492270][ T6497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.492288][ T6497] RSP: 002b:00007f95c90b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.492310][ T6497] RAX: ffffffffffffffda RBX: 00007f95c83b5fa0 RCX: 00007f95c818e969 [ 108.492326][ T6497] RDX: 0000200000000080 RSI: 0000000040305828 RDI: 0000000000000006 [ 108.492339][ T6497] RBP: 00007f95c90b4090 R08: 0000000000000000 R09: 0000000000000000 [ 108.492358][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.492370][ T6497] R13: 0000000000000000 R14: 00007f95c83b5fa0 R15: 00007fff66c1a368 [ 108.492404][ T6497] [ 108.500638][ T6498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.186'. [ 109.054603][ T6510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 109.161469][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 109.377670][ T6526] netlink: 'syz.1.198': attribute type 10 has an invalid length. [ 109.408234][ T6526] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.581404][ T6535] bond0: entered allmulticast mode [ 109.591594][ T6535] bond_slave_0: entered allmulticast mode [ 109.601897][ T6535] bond_slave_1: entered allmulticast mode [ 109.609405][ T6535] dummy0: entered allmulticast mode [ 110.273642][ T6560] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 110.358456][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.210'. [ 110.599199][ T30] audit: type=1107 audit(1747486091.012:2): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 110.773415][ T6585] netlink: 'syz.0.218': attribute type 1 has an invalid length. [ 110.901673][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 110.912151][ T6587] batadv_slave_1: entered promiscuous mode [ 110.929778][ T6585] batadv_slave_1: left promiscuous mode [ 111.220135][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 111.290153][ T6606] netlink: 'syz.3.225': attribute type 1 has an invalid length. [ 111.330901][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 111.593689][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 111.684261][ T6618] bridge0: port 3(gretap0) entered blocking state [ 111.690973][ T6618] bridge0: port 3(gretap0) entered disabled state [ 111.701463][ T6618] gretap0: entered allmulticast mode [ 111.708619][ T6618] gretap0: entered promiscuous mode [ 111.714620][ T6618] bridge0: port 3(gretap0) entered blocking state [ 111.721138][ T6618] bridge0: port 3(gretap0) entered forwarding state [ 111.895298][ T6622] netlink: 'syz.3.231': attribute type 1 has an invalid length. [ 111.908484][ T6622] netlink: 'syz.3.231': attribute type 11 has an invalid length. [ 111.916343][ T6622] netlink: 'syz.3.231': attribute type 4 has an invalid length. [ 112.578069][ T6647] netdevsim netdevsim1: Direct firmware load for . [ 112.578069][ T6647] failed with error -2 [ 112.592389][ T6647] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 112.592389][ T6647] [ 112.738271][ T6655] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 113.676220][ T6699] __nla_validate_parse: 8 callbacks suppressed [ 113.676238][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.254'. [ 113.692755][ T6698] netlink: 44 bytes leftover after parsing attributes in process `syz.1.254'. [ 113.701861][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.254'. [ 113.791024][ T6705] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 113.961640][ T6710] xt_CT: No such helper "pptp" [ 114.212529][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 114.226840][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 114.289282][ T6727] syzkaller1: entered promiscuous mode [ 114.317599][ T6727] syzkaller1: entered allmulticast mode [ 115.659559][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.284'. [ 115.685954][ T6798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.284'. [ 115.796203][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 116.130254][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.287'. [ 116.327565][ T6820] netlink: 'syz.0.290': attribute type 1 has an invalid length. [ 116.439614][ T6828] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 116.469206][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 117.459893][ T6875] x_tables: duplicate underflow at hook 2 [ 117.566092][ T6881] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 117.844147][ T6895] xt_SECMARK: invalid mode: 0 [ 117.888838][ T6897] xt_socket: unknown flags 0x2 [ 118.298400][ T6912] netlink: 'syz.3.322': attribute type 21 has an invalid length. [ 118.320925][ T6912] netlink: 'syz.3.322': attribute type 6 has an invalid length. [ 118.545657][ T6926] xt_SECMARK: invalid mode: 0 [ 119.237694][ T6940] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.870352][ T6965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.905481][ T6967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.395425][ T6988] __nla_validate_parse: 11 callbacks suppressed [ 120.395446][ T6988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.344'. [ 120.597934][ T6999] xt_SECMARK: invalid mode: 0 [ 120.822041][ T7009] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 121.079251][ T7019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'. [ 121.112033][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'. [ 122.436758][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.447196][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.456290][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.467447][ T7074] openvswitch: netlink: Duplicate or invalid key (type 0). [ 122.467975][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.483406][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.532151][ T7074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.556237][ T7077] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 122.743313][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.375'. [ 122.803906][ T7085] netlink: 36 bytes leftover after parsing attributes in process `syz.1.376'. [ 123.277610][ T7072] chnl_net:caif_netlink_parms(): no params data found [ 123.835413][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 123.902595][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.914861][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.926643][ T7072] bridge_slave_0: entered allmulticast mode [ 123.938208][ T7072] bridge_slave_0: entered promiscuous mode [ 123.965849][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.975192][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.982506][ T7072] bridge_slave_1: entered allmulticast mode [ 124.013682][ T7072] bridge_slave_1: entered promiscuous mode [ 124.247315][ T7128] syz.1.390 (7128) used greatest stack depth: 19688 bytes left [ 124.289431][ T7072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.363467][ T7072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.595297][ T5850] Bluetooth: hci5: command tx timeout [ 124.662863][ T7141] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 124.712101][ C0] Illegal XDP return value 16128 on prog (id 124) dev veth0_to_bridge, expect packet loss! [ 124.718583][ T7072] team0: Port device team_slave_0 added [ 124.786707][ T7072] team0: Port device team_slave_1 added [ 124.925163][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.943170][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.034124][ T7072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.112514][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.151151][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.210952][ T7072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.580416][ T7072] hsr_slave_0: entered promiscuous mode [ 125.590417][ T7072] hsr_slave_1: entered promiscuous mode [ 125.615376][ T7072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.628283][ T7189] netlink: 'syz.1.407': attribute type 28 has an invalid length. [ 125.632629][ T7072] Cannot create hsr debugfs directory [ 125.671929][ T7189] netlink: 'syz.1.407': attribute type 3 has an invalid length. [ 125.701565][ T7189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.407'. [ 125.985423][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.412'. [ 126.320228][ T7206] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 126.422548][ T7217] tipc: Started in network mode [ 126.445182][ T7217] tipc: Node identity 8eac2e454947, cluster identity 4711 [ 126.456605][ T7217] tipc: Enabled bearer , priority 0 [ 126.503394][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 126.540746][ T7217] syzkaller0: entered promiscuous mode [ 126.547226][ T7217] syzkaller0: entered allmulticast mode [ 126.582852][ T7217] tipc: Resetting bearer [ 126.633603][ T7217] tipc: Enabling of bearer rejected, already enabled [ 126.685312][ T5850] Bluetooth: hci5: command tx timeout [ 126.703348][ T7217] tipc: Resetting bearer [ 126.739814][ T7217] tipc: Disabling bearer [ 126.761020][ T7072] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.799432][ T7072] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.837558][ T7072] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.877923][ T7072] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.979745][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 127.014841][ T7237] netlink: 48 bytes leftover after parsing attributes in process `syz.1.419'. [ 127.118150][ T7247] netlink: 348 bytes leftover after parsing attributes in process `syz.1.419'. [ 127.156354][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 127.171740][ T7072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.182762][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 127.245225][ T7072] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.313796][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.321084][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.375619][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.382857][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.883179][ T7270] x_tables: duplicate underflow at hook 1 [ 127.900639][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'. [ 127.906444][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.428'. [ 127.954316][ T7275] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 128.273067][ T7072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.755355][ T5850] Bluetooth: hci5: command tx timeout [ 129.019182][ T7323] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 129.232812][ T7072] veth0_vlan: entered promiscuous mode [ 129.280358][ T7072] veth1_vlan: entered promiscuous mode [ 129.350828][ T7072] veth0_macvtap: entered promiscuous mode [ 129.381975][ T7072] veth1_macvtap: entered promiscuous mode [ 129.450197][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.470324][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.493547][ T7072] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.502861][ T7072] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.512561][ T7072] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.537742][ T7072] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.650471][ T7339] netlink: 'syz.1.448': attribute type 3 has an invalid length. [ 129.855630][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.873547][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.882121][ T7349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.918541][ T7343] nbd: couldn't find device at index 64 [ 129.924773][ T7343] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.053258][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.090539][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.375388][ T7368] x_tables: duplicate underflow at hook 1 [ 130.844475][ T5850] Bluetooth: hci5: command tx timeout [ 131.114096][ T7387] __nla_validate_parse: 6 callbacks suppressed [ 131.114116][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'. [ 131.209730][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 131.293561][ T7399] xt_SECMARK: invalid mode: 0 [ 132.060080][ T7430] xt_SECMARK: invalid mode: 0 [ 132.261944][ T7443] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 132.282560][ T7443] netlink: 165 bytes leftover after parsing attributes in process `syz.3.487'. [ 132.494188][ T7437] tipc: Started in network mode [ 132.524130][ T7437] tipc: Node identity 080211, cluster identity 4711 [ 132.541898][ T7437] tipc: Enabled bearer , priority 0 [ 132.631517][ T7444] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 132.644653][ T7444] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 132.730826][ T7453] tipc: Resetting bearer [ 132.843390][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.034404][ T7473] ipt_REJECT: ECHOREPLY no longer supported. [ 133.052897][ T7476] xt_SECMARK: invalid mode: 0 [ 133.079629][ T10] IPVS: starting estimator thread 0... [ 133.181692][ T7478] IPVS: using max 27 ests per chain, 64800 per kthread [ 133.235296][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 133.564588][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.501'. [ 133.588009][ T1215] tipc: Node number set to 134353152 [ 133.625345][ T7496] netlink: 'syz.0.502': attribute type 8 has an invalid length. [ 133.790208][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 133.819677][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'. [ 133.891697][ T7504] sctp: [Deprecated]: syz.4.506 (pid 7504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.891697][ T7504] Use struct sctp_sack_info instead [ 133.989361][ T7510] xt_SECMARK: invalid mode: 0 [ 134.315837][ T7524] netlink: 108 bytes leftover after parsing attributes in process `syz.4.511'. [ 134.388025][ T7530] netlink: 56 bytes leftover after parsing attributes in process `syz.0.513'. [ 134.420358][ T7524] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 134.729506][ T7546] netlink: 'syz.1.519': attribute type 20 has an invalid length. [ 134.774700][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 135.163729][ T7552] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 135.290376][ T7568] netlink: 'syz.1.524': attribute type 4 has an invalid length. [ 135.403089][ T7560] netlink: 'syz.1.524': attribute type 4 has an invalid length. [ 136.058077][ T7596] xt_limit: Overflow, try lower: 0/0 [ 136.070223][ T7594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.470906][ T7607] __nla_validate_parse: 3 callbacks suppressed [ 136.470927][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 136.759653][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 136.835828][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.542'. [ 136.929050][ T7625] netlink: 24 bytes leftover after parsing attributes in process `syz.5.542'. [ 138.063548][ T7635] bridge1: entered promiscuous mode [ 138.073536][ T7635] bridge1: entered allmulticast mode [ 138.322950][ T7651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.550'. [ 138.446355][ T7649] veth0: entered promiscuous mode [ 138.519911][ T7665] xt_SECMARK: invalid mode: 0 [ 138.555826][ T7649] veth0: left promiscuous mode [ 138.733106][ T7670] netlink: 'syz.3.556': attribute type 4 has an invalid length. [ 138.741260][ T7669] netlink: 'syz.3.556': attribute type 4 has an invalid length. [ 138.754100][ T7669] netlink: 152 bytes leftover after parsing attributes in process `syz.3.556'. [ 138.778434][ T7670] netlink: 152 bytes leftover after parsing attributes in process `syz.3.556'. [ 139.293897][ T7694] veth1_virt_wifi: mtu less than device minimum [ 139.302989][ T7693] sctp: [Deprecated]: syz.0.564 (pid 7693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.302989][ T7693] Use struct sctp_sack_info instead [ 139.420010][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 139.687828][ T7712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.571'. [ 139.725580][ T7712] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 139.766837][ T7718] netlink: 'syz.5.574': attribute type 1 has an invalid length. [ 139.779406][ T7718] netlink: 228 bytes leftover after parsing attributes in process `syz.5.574'. [ 139.966724][ T7729] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 139.986960][ T7728] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 140.123822][ T7736] netlink: 'syz.5.578': attribute type 1 has an invalid length. [ 140.585428][ T7753] tipc: Enabling of bearer rejected, already enabled [ 140.672359][ T7758] netlink: 'syz.5.585': attribute type 12 has an invalid length. [ 140.873920][ T7768] sctp: [Deprecated]: syz.3.589 (pid 7768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.873920][ T7768] Use struct sctp_sack_info instead [ 141.087290][ T7778] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.105681][ T7778] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 141.747140][ T7807] __nla_validate_parse: 8 callbacks suppressed [ 141.747160][ T7807] netlink: 256 bytes leftover after parsing attributes in process `syz.1.603'. [ 142.483804][ T7835] netlink: 'syz.0.613': attribute type 32 has an invalid length. [ 142.991524][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 143.009353][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'. [ 143.619979][ T7881] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 143.872518][ T7888] xt_SECMARK: invalid mode: 0 [ 144.793854][ T7940] xt_SECMARK: invalid mode: 0 [ 144.947607][ T7946] netlink: 116 bytes leftover after parsing attributes in process `syz.3.647'. [ 145.030054][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.648'. [ 145.054854][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'. [ 145.317824][ T7966] unsupported nlmsg_type 40 [ 145.346793][ T7970] netlink: 'syz.4.654': attribute type 8 has an invalid length. [ 145.357966][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 145.416501][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 145.574267][ T7974] xt_SECMARK: invalid mode: 0 [ 145.681860][ T7978] veth3: entered allmulticast mode [ 145.842451][ T7989] trusted_key: syz.5.664 sent an empty control message without MSG_MORE. [ 145.895337][ T7989] netlink: 52 bytes leftover after parsing attributes in process `syz.5.664'. [ 145.913564][ T7995] syzkaller1: entered promiscuous mode [ 145.921084][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 145.931880][ T7995] syzkaller1: entered allmulticast mode [ 146.138384][ T8005] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 146.201649][ T8005] bond3: entered promiscuous mode [ 146.208015][ T8005] bond3: entered allmulticast mode [ 146.214008][ T8005] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.238234][ T8010] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 146.315490][ T8013] batadv0: entered promiscuous mode [ 146.321024][ T8013] batadv0: entered allmulticast mode [ 146.342445][ T8015] xt_SECMARK: invalid mode: 0 [ 147.368450][ T8048] __nla_validate_parse: 2 callbacks suppressed [ 147.368470][ T8048] netlink: 48 bytes leftover after parsing attributes in process `syz.0.685'. [ 147.701116][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.691'. [ 148.103845][ T8079] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 148.292831][ T8086] ªªªªªª†³?ÂHº: renamed from lo (while UP) [ 148.499798][ T8092] IPVS: ip_vs_edit_dest(): server weight less than zero [ 148.510674][ T9] IPVS: starting estimator thread 0... [ 148.624862][ T8095] IPVS: using max 27 ests per chain, 64800 per kthread [ 148.832951][ T8111] netlink: 'syz.0.706': attribute type 33 has an invalid length. [ 148.883333][ T8114] netlink: 44 bytes leftover after parsing attributes in process `syz.3.704'. [ 148.924234][ T8114] netlink: 43 bytes leftover after parsing attributes in process `syz.3.704'. [ 148.960035][ T8114] netlink: 'syz.3.704': attribute type 6 has an invalid length. [ 148.979276][ T8114] netlink: 'syz.3.704': attribute type 5 has an invalid length. [ 149.013121][ T8114] netlink: 43 bytes leftover after parsing attributes in process `syz.3.704'. [ 149.497342][ T8135] vlan1: entered allmulticast mode [ 149.502544][ T8135] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 150.027748][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 150.049844][ T8163] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 150.068114][ T8163] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 150.078536][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 150.365810][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 150.508047][ T8182] netlink: 'syz.5.728': attribute type 1 has an invalid length. [ 150.508245][ T8181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.730'. [ 150.534352][ T8182] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.728'. [ 151.159225][ T8217] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 151.987698][ T8259] pim6reg1: entered promiscuous mode [ 152.014533][ T8259] pim6reg1: entered allmulticast mode [ 152.484869][ T8296] netlink: 'syz.5.762': attribute type 4 has an invalid length. [ 152.500506][ T8296] __nla_validate_parse: 7 callbacks suppressed [ 152.500526][ T8296] netlink: 17 bytes leftover after parsing attributes in process `syz.5.762'. [ 152.830577][ T8313] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 152.902220][ T8317] netlink: 9 bytes leftover after parsing attributes in process `syz.0.771'. [ 152.920714][ T8317] 0·: renamed from hsr_slave_1 (while UP) [ 152.942468][ T8317] 0·: entered allmulticast mode [ 152.948363][ T8317] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 153.184940][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 153.277489][ T8332] Unsupported ieee802154 address type: 0 [ 153.310235][ T8332] netlink: 'syz.4.778': attribute type 2 has an invalid length. [ 153.336214][ T8332] netlink: 188 bytes leftover after parsing attributes in process `syz.4.778'. [ 153.383624][ T8338] Unsupported ieee802154 address type: 0 [ 153.407093][ T8340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.780'. [ 153.597786][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.782'. [ 154.243477][ T8385] Dead loop on virtual device ip6_vti0, fix it urgently! [ 154.255494][ T8385] Dead loop on virtual device ip6_vti0, fix it urgently! [ 154.265775][ T8385] Dead loop on virtual device ip6_vti0, fix it urgently! [ 154.351002][ T8389] netlink: 'syz.0.792': attribute type 20 has an invalid length. [ 154.491781][ T8385] syz.0.792 (8385) used greatest stack depth: 19416 bytes left [ 154.782035][ T8408] netlink: 'syz.5.799': attribute type 4 has an invalid length. [ 154.790433][ T8407] netlink: 'syz.5.799': attribute type 4 has an invalid length. [ 154.809739][ T8407] netlink: 'syz.5.799': attribute type 4 has an invalid length. [ 154.876916][ T8410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.800'. [ 154.929828][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 155.202026][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 155.213240][ T8426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.807'. [ 155.260908][ T8430] netlink: 'syz.4.809': attribute type 28 has an invalid length. [ 155.271541][ T8430] netlink: 'syz.4.809': attribute type 3 has an invalid length. [ 155.451414][ T8435] xt_CT: No such helper "pptp" [ 156.341577][ T8491] netlink: 'syz.0.828': attribute type 4 has an invalid length. [ 156.435071][ T8493] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 156.459308][ T8493] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 156.792865][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.983574][ T8522] netlink: 'syz.3.840': attribute type 12 has an invalid length. [ 156.995841][ T8522] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 157.003893][ T8522] netlink: 'syz.3.840': attribute type 4 has an invalid length. [ 157.073227][ T8526] netlink: 'syz.0.842': attribute type 8 has an invalid length. [ 157.094871][ T8526] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 157.143419][ T8527] netlink: 'syz.0.842': attribute type 8 has an invalid length. [ 157.158735][ T8527] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 157.470647][ T8543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.810677][ T8551] __nla_validate_parse: 11 callbacks suppressed [ 157.810710][ T8551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.847'. [ 158.241749][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 158.253264][ T8576] netlink: 244 bytes leftover after parsing attributes in process `syz.3.855'. [ 158.532817][ T8587] netlink: 32 bytes leftover after parsing attributes in process `syz.3.860'. [ 158.543269][ T8587] netlink: 132 bytes leftover after parsing attributes in process `syz.3.860'. [ 158.609209][ T8590] netlink: 'syz.1.861': attribute type 3 has an invalid length. [ 158.641511][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'. [ 158.875098][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 158.900807][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 159.225603][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 159.246616][ T8624] netlink: 272 bytes leftover after parsing attributes in process `syz.0.874'. [ 159.459867][ T8637] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 159.562100][ T8648] netlink: 'syz.3.882': attribute type 32 has an invalid length. [ 159.853402][ T8664] x_tables: duplicate underflow at hook 1 [ 159.870144][ T8664] syz.5.888 uses old SIOCAX25GETINFO [ 159.999996][ T8671] xt_hashlimit: invalid rate [ 160.281870][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.291573][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.386422][ T8691] netlink: zone id is out of range [ 160.391963][ T8691] netlink: zone id is out of range [ 160.399422][ T8691] netlink: zone id is out of range [ 160.407210][ T8691] netlink: zone id is out of range [ 160.413822][ T8691] netlink: zone id is out of range [ 160.430984][ T8691] netlink: zone id is out of range [ 160.438303][ T8691] netlink: zone id is out of range [ 160.443757][ T8691] netlink: zone id is out of range [ 160.449854][ T8691] netlink: zone id is out of range [ 160.455659][ T8691] netlink: zone id is out of range [ 160.586008][ T8696] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 160.620398][ T8699] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 160.639247][ T8699] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 160.892646][ T8713] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 160.973668][ T8718] smc: net device bond0 applied user defined pnetid SYZ2 [ 162.403165][ T8806] validate_nla: 3 callbacks suppressed [ 162.403184][ T8806] netlink: 'syz.5.937': attribute type 1 has an invalid length. [ 164.464603][ T8891] __nla_validate_parse: 11 callbacks suppressed [ 164.464624][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 164.491974][ T8891] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.501805][ T8891] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.511116][ T8891] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.520182][ T8891] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.533407][ T8891] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.542764][ T8891] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.551777][ T8891] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.560780][ T8891] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.841332][ T8899] netlink: 'syz.1.971': attribute type 13 has an invalid length. [ 164.859494][ T8899] netlink: 'syz.1.971': attribute type 17 has an invalid length. [ 164.935664][ T8899] bond0: left allmulticast mode [ 164.940601][ T8899] bond_slave_0: left allmulticast mode [ 164.948319][ T8899] bond_slave_1: left allmulticast mode [ 164.958909][ T8899] dummy0: left allmulticast mode [ 164.987334][ T8901] netlink: 'syz.3.972': attribute type 1 has an invalid length. [ 165.133570][ T8914] xfrm0: entered promiscuous mode [ 165.143447][ T8914] xfrm0: entered allmulticast mode [ 165.283465][ T8921] sctp: [Deprecated]: syz.0.978 (pid 8921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.283465][ T8921] Use struct sctp_sack_info instead [ 165.360701][ T8923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.979'. [ 165.499945][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 165.547162][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.983'. [ 165.679394][ T8939] pim6reg: entered allmulticast mode [ 165.707141][ T8937] vlan2: entered promiscuous mode [ 165.712376][ T8937] bridge0: entered promiscuous mode [ 165.729244][ T8938] pim6reg: left allmulticast mode [ 165.807814][ T8946] nbd: must specify a device to reconfigure [ 165.830413][ T8946] netlink: 'syz.0.988': attribute type 27 has an invalid length. [ 166.139118][ T8962] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.993'. [ 166.215474][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.994'. [ 166.474838][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 166.623771][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.999'. [ 166.686167][ T8980] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 166.786551][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 166.802783][ T8992] ipvlan2: entered allmulticast mode [ 166.808902][ T8992] veth0_vlan: entered allmulticast mode [ 167.098145][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 167.300628][ T9023] net_ratelimit: 9 callbacks suppressed [ 167.300649][ T9023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.273472][ T9071] x_tables: duplicate underflow at hook 2 [ 168.364766][ T9074] nbd: must specify a size in bytes for the device [ 168.586733][ T9087] veth1_macvtap: left promiscuous mode [ 168.602567][ T9087] macsec0: entered promiscuous mode [ 168.774277][ T9096] netlink: 'syz.1.1036': attribute type 18 has an invalid length. [ 168.833732][ T9099] xt_l2tp: v2 sid > 0xffff: 262144 [ 168.841553][ T9099] netlink: 'syz.0.1037': attribute type 29 has an invalid length. [ 169.496670][ T9131] __nla_validate_parse: 5 callbacks suppressed [ 169.496690][ T9131] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1048'. [ 169.639457][ T9140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'. [ 169.696042][ T9142] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 169.744811][ T9142] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 169.793204][ T9147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1053'. [ 169.809612][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1053'. [ 169.823422][ T9147] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1053'. [ 169.843897][ T9147] netlink: 'syz.0.1053': attribute type 3 has an invalid length. [ 169.863061][ T9147] netlink: 'syz.0.1053': attribute type 2 has an invalid length. [ 169.871679][ T9147] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1053'. [ 170.028496][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1056'. [ 170.050598][ T9156] hsr_slave_0: left promiscuous mode [ 170.108371][ T9156] 0·: left promiscuous mode [ 170.525805][ T9186] pimreg: entered allmulticast mode [ 170.916170][ T63] wlan1: Trigger new scan to find an IBSS to join [ 170.960763][ T9212] netlink: 'syz.4.1073': attribute type 39 has an invalid length. [ 171.251966][ T9226] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1078'. [ 171.340461][ T9231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1079'. [ 171.907050][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 172.002774][ T9264] netlink: 'syz.3.1088': attribute type 5 has an invalid length. [ 172.361322][ T9292] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 172.950273][ T9314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.957941][ T9314] IPv6: NLM_F_CREATE should be set when creating new route [ 173.031998][ T9320] netlink: 'syz.1.1103': attribute type 10 has an invalid length. [ 173.064315][ T9320] bridge0: port 3(team0) entered blocking state [ 173.071237][ T9320] bridge0: port 3(team0) entered disabled state [ 173.099586][ T9320] team0: entered allmulticast mode [ 173.109982][ T9320] team_slave_0: entered allmulticast mode [ 173.134268][ T9320] team_slave_1: entered allmulticast mode [ 173.150802][ T9320] team0: entered promiscuous mode [ 173.166255][ T9324] xt_bpf: check failed: parse error [ 173.171961][ T9320] team_slave_0: entered promiscuous mode [ 173.183443][ T9320] team_slave_1: entered promiscuous mode [ 173.199038][ T9320] bridge0: port 3(team0) entered blocking state [ 173.205491][ T9320] bridge0: port 3(team0) entered forwarding state [ 173.320195][ T9308] xt_TPROXY: Can be used only with -p tcp or -p udp [ 173.330506][ T9327] xt_HMARK: proto mask must be zero with L3 mode [ 173.340957][ T9308] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 173.383289][ T9308] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 173.878806][ T63] wlan1: Trigger new scan to find an IBSS to join [ 174.108746][ T9362] netlink: 'syz.3.1117': attribute type 1 has an invalid length. [ 174.122136][ T9362] netlink: 'syz.3.1117': attribute type 4 has an invalid length. [ 174.131857][ T9362] NCSI netlink: No device for ifindex 458760 [ 174.152008][ T9364] netlink: 'syz.0.1116': attribute type 4 has an invalid length. [ 174.946973][ T9393] tipc: Started in network mode [ 174.958626][ T9393] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 174.998856][ T9393] tipc: Enabling of bearer rejected, failed to enable media [ 175.249926][ T9410] __nla_validate_parse: 11 callbacks suppressed [ 175.249947][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 175.398621][ T9417] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1134'. [ 175.517443][ T9423] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 175.529423][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 175.551996][ T9426] batadv_slave_1: entered allmulticast mode [ 175.565839][ T9425] batadv_slave_1: left allmulticast mode [ 175.737987][ T9430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.204962][ T9460] netlink: 'syz.4.1150': attribute type 30 has an invalid length. [ 176.273418][ T9460] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.286797][ T9460] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.297751][ T9460] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.308051][ T9460] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.357806][ T9460] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.367873][ T9460] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.377552][ T9460] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.387651][ T9460] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.772952][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 176.835112][ T1140] wlan1: Trigger new scan to find an IBSS to join [ 176.870033][ T9488] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20004 [ 177.117672][ T9506] netlink: 'syz.0.1166': attribute type 32 has an invalid length. [ 177.153223][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 177.184505][ T9506] (unnamed net_device) (uninitialized): option coupled_control: invalid value (252) [ 177.287520][ T9506] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1166'. [ 177.307838][ T9524] netlink: 'syz.1.1170': attribute type 1 has an invalid length. [ 177.339371][ T9525] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1171'. [ 177.349934][ T9524] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 177.397230][ T9532] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1172'. [ 177.472358][ T9531] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1172'. [ 177.785890][ T12] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 177.836094][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 178.135748][ T9567] openvswitch: netlink: Flow key attribute not present in set flow. [ 178.149506][ T9567] netdevsim netdevsim4: Direct firmware load for . [ 178.149506][ T9567] failed with error -2 [ 178.184971][ T9567] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 178.184971][ T9567] [ 178.499265][ T9585] netlink: 'syz.5.1190': attribute type 25 has an invalid length. [ 178.588481][ T9587] No such timeout policy "syz0" [ 178.603153][ T9590] xt_l2tp: v2 doesn't support IP mode [ 178.618030][ T9588] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 178.623408][ T9590] xt_l2tp: v2 doesn't support IP mode [ 178.641824][ T9590] xt_l2tp: v2 doesn't support IP mode [ 178.859967][ T9603] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 178.887340][ T9603] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 179.302144][ T9623] openvswitch: netlink: Flow key attr not present in new flow. [ 179.640319][ T9630] tipc: Can't bind to reserved service type 1 [ 179.786231][ T9635] syzkaller0: entered promiscuous mode [ 179.791936][ T9635] syzkaller0: entered allmulticast mode [ 179.815702][ T9635] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 180.600699][ T9679] netlink: 'syz.4.1215': attribute type 12 has an invalid length. [ 181.246655][ T9714] __nla_validate_parse: 3 callbacks suppressed [ 181.246675][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1221'. [ 181.292725][ T9712] netlink: 'syz.5.1222': attribute type 4 has an invalid length. [ 181.318879][ T9712] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1222'. [ 181.332677][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1221'. [ 181.401114][ T5845] Bluetooth: hci5: command 0x0405 tx timeout [ 181.629609][ T9727] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1227'. [ 181.646493][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 181.659865][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 181.703168][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'. [ 181.931430][ T9727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.992259][ T9727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.032348][ T9727] bond0 (unregistering): Released all slaves [ 182.088106][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 182.127793][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 182.148472][ T9744] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 182.200999][ T9726] bond1: entered promiscuous mode [ 182.206447][ T9726] bond1: entered allmulticast mode [ 182.212362][ T9726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.258622][ T9752] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1234'. [ 182.276146][ T9752] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 182.309862][ T9754] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 182.350906][ T9749] syzkaller1: entered promiscuous mode [ 182.370378][ T9749] syzkaller1: entered allmulticast mode [ 182.701001][ T9772] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 182.719977][ T9772] dvmrp0: entered allmulticast mode [ 182.730484][ T9774] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 183.235311][ T9791] netlink: 'syz.5.1248': attribute type 1 has an invalid length. [ 183.278320][ T9791] netlink: 'syz.5.1248': attribute type 20 has an invalid length. [ 183.308306][ T9797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.470465][ T9803] x_tables: duplicate underflow at hook 2 [ 183.559502][ T9806] netlink: 'syz.1.1254': attribute type 4 has an invalid length. [ 183.605406][ T9806] netlink: 'syz.1.1254': attribute type 4 has an invalid length. [ 183.956217][ T9822] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 184.181424][ T9837] xfrm1: entered promiscuous mode [ 184.187296][ T9837] xfrm1: entered allmulticast mode [ 184.496223][ T9852] sctp: [Deprecated]: syz.1.1273 (pid 9852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.496223][ T9852] Use struct sctp_sack_info instead [ 184.647475][ T9859] syzkaller1: entered promiscuous mode [ 184.658301][ T9859] syzkaller1: entered allmulticast mode [ 184.826851][ T9868] netlink: 'syz.3.1278': attribute type 30 has an invalid length. [ 184.936049][ T9871] netlink: 'syz.3.1278': attribute type 30 has an invalid length. [ 184.950917][ T9871] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 185.355363][ T9892] netlink: 'syz.0.1284': attribute type 5 has an invalid length. [ 185.696748][ T9910] netlink: 'syz.3.1293': attribute type 9 has an invalid length. [ 185.735028][ T9913] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 186.022201][ T9924] netlink: 'syz.3.1296': attribute type 11 has an invalid length. [ 186.592729][ T9958] tipc: Started in network mode [ 186.604194][ T9958] tipc: Node identity , cluster identity 4711 [ 186.610334][ T9958] tipc: Failed to set node id, please configure manually [ 186.642811][ T9958] tipc: Enabling of bearer rejected, failed to enable media [ 186.665565][ T9960] netlink: 'syz.4.1308': attribute type 5 has an invalid length. [ 186.957938][ T9977] __nla_validate_parse: 12 callbacks suppressed [ 186.957957][ T9977] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1313'. [ 187.020768][ T9980] netlink: 'syz.5.1314': attribute type 32 has an invalid length. [ 187.211350][ T9996] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1317'. [ 187.301140][T10002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.311611][ T9999] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1319'. [ 187.352813][ T9999] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1319'. [ 187.386278][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1319'. [ 187.848849][T10022] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 188.066084][T10034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.073644][T10034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.139152][T10034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.160407][T10034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.358200][T10050] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1336'. [ 188.371191][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 188.409166][T10050] xfrm2: entered allmulticast mode [ 188.432358][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 188.573559][T10059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1340'. [ 188.595711][T10065] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1342'. [ 188.642578][T10065] netlink: 'syz.3.1342': attribute type 2 has an invalid length. [ 188.690606][T10068] netlink: 'syz.3.1342': attribute type 2 has an invalid length. [ 189.131524][T10090] xfrm0: left promiscuous mode [ 189.166078][T10090] xfrm0: left allmulticast mode [ 189.426350][T10099] sctp: [Deprecated]: syz.5.1353 (pid 10099) Use of int in max_burst socket option. [ 189.426350][T10099] Use struct sctp_assoc_value instead [ 189.746118][T10079] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 190.963663][T10189] netlink: 'syz.3.1381': attribute type 1 has an invalid length. [ 190.994670][ T5850] Bluetooth: hci3: command 0x0401 tx timeout [ 191.049780][ T30] audit: type=1800 audit(1747486171.462:3): pid=10195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1382" name="memory.events" dev="tmpfs" ino=1343 res=0 errno=0 [ 191.062050][T10189] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.245815][T10192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.268669][T10192] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.293270][T10199] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 191.301995][T10192] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 191.374252][T10205] [ 191.376654][T10205] ====================================================== [ 191.383692][T10205] WARNING: possible circular locking dependency detected [ 191.391260][T10205] 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 Not tainted [ 191.398372][T10205] ------------------------------------------------------ [ 191.405405][T10205] syz.3.1381/10205 is trying to acquire lock: [ 191.411474][T10205] ffffffff8f44d898 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 191.420680][T10205] [ 191.420680][T10205] but task is already holding lock: [ 191.428059][T10205] ffff888032756170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 191.437329][T10205] [ 191.437329][T10205] which lock already depends on the new lock. [ 191.437329][T10205] [ 191.447753][T10205] [ 191.447753][T10205] the existing dependency chain (in reverse order) is: [ 191.456782][T10205] [ 191.456782][T10205] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 191.464799][T10205] lock_acquire+0x120/0x360 [ 191.469850][T10205] _raw_spin_lock_bh+0x36/0x50 [ 191.475148][T10205] nr_rt_ioctl+0x193/0xd50 [ 191.480104][T10205] sock_do_ioctl+0xd9/0x300 [ 191.485138][T10205] sock_ioctl+0x576/0x790 [ 191.490007][T10205] __se_sys_ioctl+0xf9/0x170 [ 191.495153][T10205] do_syscall_64+0xf6/0x210 [ 191.500191][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.506608][T10205] [ 191.506608][T10205] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 191.514443][T10205] lock_acquire+0x120/0x360 [ 191.519478][T10205] _raw_spin_lock_bh+0x36/0x50 [ 191.525293][T10205] nr_rt_device_down+0xa9/0x720 [ 191.530689][T10205] nr_device_event+0x137/0x150 [ 191.536012][T10205] notifier_call_chain+0x1b3/0x3e0 [ 191.541677][T10205] __dev_notify_flags+0x18d/0x2e0 [ 191.547240][T10205] netif_change_flags+0xe8/0x1a0 [ 191.552709][T10205] dev_change_flags+0x130/0x260 [ 191.558085][T10205] dev_ioctl+0x7b4/0x1150 [ 191.562953][T10205] sock_do_ioctl+0x22c/0x300 [ 191.568066][T10205] sock_ioctl+0x576/0x790 [ 191.572927][T10205] __se_sys_ioctl+0xf9/0x170 [ 191.578046][T10205] do_syscall_64+0xf6/0x210 [ 191.583081][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.589502][T10205] [ 191.589502][T10205] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 191.597427][T10205] validate_chain+0xb9b/0x2140 [ 191.602734][T10205] __lock_acquire+0xaac/0xd20 [ 191.607954][T10205] lock_acquire+0x120/0x360 [ 191.612995][T10205] _raw_spin_lock_bh+0x36/0x50 [ 191.618296][T10205] nr_rt_ioctl+0x390/0xd50 [ 191.623254][T10205] sock_do_ioctl+0xd9/0x300 [ 191.628289][T10205] sock_ioctl+0x576/0x790 [ 191.633149][T10205] __se_sys_ioctl+0xf9/0x170 [ 191.638273][T10205] do_syscall_64+0xf6/0x210 [ 191.643312][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.649736][T10205] [ 191.649736][T10205] other info that might help us debug this: [ 191.649736][T10205] [ 191.659967][T10205] Chain exists of: [ 191.659967][T10205] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 191.659967][T10205] [ 191.673802][T10205] Possible unsafe locking scenario: [ 191.673802][T10205] [ 191.681251][T10205] CPU0 CPU1 [ 191.686617][T10205] ---- ---- [ 191.691987][T10205] lock(&nr_node->node_lock); [ 191.696757][T10205] lock(nr_node_list_lock); [ 191.703884][T10205] lock(&nr_node->node_lock); [ 191.711184][T10205] lock(nr_neigh_list_lock); [ 191.715886][T10205] [ 191.715886][T10205] *** DEADLOCK *** [ 191.715886][T10205] [ 191.724031][T10205] 2 locks held by syz.3.1381/10205: [ 191.729230][T10205] #0: ffffffff8f44d8f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 191.738759][T10205] #1: ffff888032756170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 191.748461][T10205] [ 191.748461][T10205] stack backtrace: [ 191.754372][T10205] CPU: 0 UID: 0 PID: 10205 Comm: syz.3.1381 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 191.754394][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.754405][T10205] Call Trace: [ 191.754412][T10205] [ 191.754419][T10205] dump_stack_lvl+0x189/0x250 [ 191.754451][T10205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.754476][T10205] ? __pfx__printk+0x10/0x10 [ 191.754493][T10205] ? print_lock_name+0xde/0x100 [ 191.754521][T10205] print_circular_bug+0x2ee/0x310 [ 191.754541][T10205] check_noncircular+0x134/0x160 [ 191.754561][T10205] validate_chain+0xb9b/0x2140 [ 191.754588][T10205] ? irqentry_exit+0x74/0x90 [ 191.754609][T10205] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.754631][T10205] __lock_acquire+0xaac/0xd20 [ 191.754657][T10205] ? nr_rt_ioctl+0x390/0xd50 [ 191.754681][T10205] lock_acquire+0x120/0x360 [ 191.754704][T10205] ? nr_rt_ioctl+0x390/0xd50 [ 191.754729][T10205] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 191.754751][T10205] ? nr_rt_ioctl+0x390/0xd50 [ 191.754775][T10205] _raw_spin_lock_bh+0x36/0x50 [ 191.754793][T10205] ? nr_rt_ioctl+0x390/0xd50 [ 191.754817][T10205] nr_rt_ioctl+0x390/0xd50 [ 191.754848][T10205] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 191.754879][T10205] ? apparmor_capable+0x137/0x1b0 [ 191.754908][T10205] ? capable+0x89/0xe0 [ 191.754924][T10205] ? nr_ioctl+0x1b1/0x3b0 [ 191.754946][T10205] sock_do_ioctl+0xd9/0x300 [ 191.754963][T10205] ? __pfx_sock_do_ioctl+0x10/0x10 [ 191.754979][T10205] ? __lock_acquire+0xaac/0xd20 [ 191.755008][T10205] sock_ioctl+0x576/0x790 [ 191.755024][T10205] ? __pfx_sock_ioctl+0x10/0x10 [ 191.755040][T10205] ? __fget_files+0x3a0/0x420 [ 191.755062][T10205] ? __fget_files+0x2a/0x420 [ 191.755086][T10205] ? bpf_lsm_file_ioctl+0x9/0x20 [ 191.755109][T10205] ? __pfx_sock_ioctl+0x10/0x10 [ 191.755124][T10205] __se_sys_ioctl+0xf9/0x170 [ 191.755142][T10205] do_syscall_64+0xf6/0x210 [ 191.755165][T10205] ? clear_bhb_loop+0x60/0xb0 [ 191.755185][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.755201][T10205] RIP: 0033:0x7f122f98e969 [ 191.755222][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.755236][T10205] RSP: 002b:00007f12307b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.755254][T10205] RAX: ffffffffffffffda RBX: 00007f122fbb6240 RCX: 00007f122f98e969 [ 191.755267][T10205] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000c [ 191.755277][T10205] RBP: 00007f122fa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 191.755287][T10205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.755297][T10205] R13: 0000000000000000 R14: 00007f122fbb6240 R15: 00007ffd7cd62cb8 [ 191.755315][T10205] [ 192.059797][T10189] veth5: entered promiscuous mode [ 192.070374][T10189] bond6: (slave veth5): Enslaving as an active interface with a down link [ 192.079825][T10196] erspan0: entered allmulticast mode [ 192.092403][T10208] __nla_validate_parse: 62 callbacks suppressed [ 192.092421][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 192.121218][T10196] bond6: (slave erspan0): making interface the new active one [ 192.129389][T10196] bond6: (slave erspan0): Enslaving as an active interface with an up link