last executing test programs: 1m31.531125769s ago: executing program 4 (id=486): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000400", @ANYRES16=r3, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000082c6ad13544fdbaed23ee979fd758cf02b6c066827d361b85fbe6389c91f81d09e6b9beb13c1a9a99c1c2796f984989464a52dc53610967a6e6350afca038900add24efc5159440421cc553ebdf558dcb04f447988f75b040a632dcdb84816f4bed452495cb9812e9b7c2bf65723ee28e989135c475e5dea8c99b482baae6dbabe4e015c49ecff6950b10c58a4d6365cd021b494153bde8836d54b5d5ec1c0eefad8050f06ba4f02acc15675e311eb13", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB, @ANYRESOCT, @ANYRES8=r4], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x2ed}], 0x1}, 0x44080) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03d", 0x44}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7", 0xb5}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f", 0xd}], 0x3}}], 0x1, 0x20004050) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_open_procfs$namespace(0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) 1m19.814959455s ago: executing program 0 (id=569): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0x15, &(0x7f0000000340)={@remote, @multicast1, 0x0, "499b0aa0c254f989733b921064eea6ea27f9286a7647df3bd148f288f12ddda9"}, 0x3c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00001500000000feff070008000000000000008f37b00616bca37645c4b981a614ba2c76cb6f6bac45125ebb1f3cbc2c4548d1bf497804e4701a468b420113531676eb4156a0f7a2096136544711f9fb7aff417fffe6ab38c785c6fe636af9561c7eede5f460c4d81a1b", @ANYRES32=r4, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000200)=""/76}, 0x20) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x20008094) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES8=r7, @ANYBLOB="72ea8d8aafb890d9612746118bebf24a8a003cc3ec08817f3bbcd4a1"], 0x64}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340071651f53148917c1fe8d31c247d5101bdb4f11962b82d982870ec8575bca00", @ANYRES32=r8, @ANYBLOB="00000000000000001400128008000100677265000800028004001200"], 0x34}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r13, 0x11c, 0x2, &(0x7f0000000080)=""/44, &(0x7f00000000c0)=0x2c) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) (async) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) 1m18.315189397s ago: executing program 4 (id=486): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000400", @ANYRES16=r3, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000082c6ad13544fdbaed23ee979fd758cf02b6c066827d361b85fbe6389c91f81d09e6b9beb13c1a9a99c1c2796f984989464a52dc53610967a6e6350afca038900add24efc5159440421cc553ebdf558dcb04f447988f75b040a632dcdb84816f4bed452495cb9812e9b7c2bf65723ee28e989135c475e5dea8c99b482baae6dbabe4e015c49ecff6950b10c58a4d6365cd021b494153bde8836d54b5d5ec1c0eefad8050f06ba4f02acc15675e311eb13", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB, @ANYRESOCT, @ANYRES8=r4], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="50e2d0e8f7c79f56fe316075d1848c2846a50934836763ae403f35dbe8580de2c59113798cdc8a74dc21020f4e97e9ac22768c9b7d9aca64aa97212a1826646b4a19ebd05d3e7cbae0f91b621e6ac8e60d7d39df4febd1a8e2a737845dccfdbecde934165ded16e411da023b9fba7840a8e50b7f909cc9d51522dc4ac3075e975b35681f8d16915a3d248396f134273ff13a72f082839bd3021d4f0a5550671bb7d267d74dc8a800f3f7e8be6daea4379e76bc978e801fbd9d83544776580baa62d6156cc3aaec4b79a8ecc46317f48f62ff039722c87db0cd54d937de47619f530c29622e55176b5dfbbd084521a28e89488f57a6d3c19c2df39243d73425d52f0a42cc4a01e39f3c24ecd0e22d696d59320e4ee7d111d3abac17ebfc8aa6bb910c8d1d92efe391d372130bfccdec653e41694e86c79164f36b1ac9fc2812a7944f8b08f6780b102f71f4dc7232c83d20a4aa83db3e540a063f7f13360b6435b755f4af598016caf933a76bf2f2897b04a1efe5793b62c87532ba7fc740372ea2918a0dca9de22c336f6b4ab77b1047e00d693585263f938791e5bf228f297896d3a90f4e87c53e42589eba922b3770644a9a199bd95fca9d25416417924b7b594e88cb3e0b3d48014993d64636c82533a49c239a2305b4e9fe43f2ab23aa972ecfd7bd1eefb2d9f8117a8711e5f4c84704b761fdac68a8ae0e0e2d69bcd3ee3b3101a14459b9aac31b693130e809b72e9a8722029a6ee71faf89daa40d3a98476aeeb172b14d452a38475599d5f8243ff49bbc4fd4341ee82c77d0f7e3a93fb89d9c826697f86a7ed404d82fd358d919af26580bed09ce5f694c7fb2919b181ff08da24a7a95523b67b45098c233abdac18a7816bc2e56092f0f8fc300d44f0c181b7bc103b03fe978410816b1ec59a52f2d08a895028dc4559983701ce75a60ccdec67401e1208ca3f4032aeb7536f6cfb3f9fb1f2fa8e67adcfc8690e904599860f707b1be70a49f60e01e8fd3f46165cd186808e0536bde9356dea4ce245a9cc3293a2c7e42d96c953526", 0x2ed}], 0x1}, 0x44080) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03d", 0x44}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7", 0xb5}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f", 0xd}], 0x3}}], 0x1, 0x20004050) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_open_procfs$namespace(0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) 1m5.006208283s ago: executing program 0 (id=569): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0x15, &(0x7f0000000340)={@remote, @multicast1, 0x0, "499b0aa0c254f989733b921064eea6ea27f9286a7647df3bd148f288f12ddda9"}, 0x3c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00001500000000feff070008000000000000008f37b00616bca37645c4b981a614ba2c76cb6f6bac45125ebb1f3cbc2c4548d1bf497804e4701a468b420113531676eb4156a0f7a2096136544711f9fb7aff417fffe6ab38c785c6fe636af9561c7eede5f460c4d81a1b", @ANYRES32=r4, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000200)=""/76}, 0x20) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x20008094) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES8=r7, @ANYBLOB="72ea8d8aafb890d9612746118bebf24a8a003cc3ec08817f3bbcd4a1"], 0x64}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340071651f53148917c1fe8d31c247d5101bdb4f11962b82d982870ec8575bca00", @ANYRES32=r8, @ANYBLOB="00000000000000001400128008000100677265000800028004001200"], 0x34}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r13, 0x11c, 0x2, &(0x7f0000000080)=""/44, &(0x7f00000000c0)=0x2c) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) (async) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) 1m3.089506476s ago: executing program 4 (id=486): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000400", @ANYRES16=r3, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000082c6ad13544fdbaed23ee979fd758cf02b6c066827d361b85fbe6389c91f81d09e6b9beb13c1a9a99c1c2796f984989464a52dc53610967a6e6350afca038900add24efc5159440421cc553ebdf558dcb04f447988f75b040a632dcdb84816f4bed452495cb9812e9b7c2bf65723ee28e989135c475e5dea8c99b482baae6dbabe4e015c49ecff6950b10c58a4d6365cd021b494153bde8836d54b5d5ec1c0eefad8050f06ba4f02acc15675e311eb13", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB, @ANYRESOCT, @ANYRES8=r4], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="50e2d0e8f7c79f56fe316075d1848c2846a50934836763ae403f35dbe8580de2c59113798cdc8a74dc21020f4e97e9ac22768c9b7d9aca64aa97212a1826646b4a19ebd05d3e7cbae0f91b621e6ac8e60d7d39df4febd1a8e2a737845dccfdbecde934165ded16e411da023b9fba7840a8e50b7f909cc9d51522dc4ac3075e975b35681f8d16915a3d248396f134273ff13a72f082839bd3021d4f0a5550671bb7d267d74dc8a800f3f7e8be6daea4379e76bc978e801fbd9d83544776580baa62d6156cc3aaec4b79a8ecc46317f48f62ff039722c87db0cd54d937de47619f530c29622e55176b5dfbbd084521a28e89488f57a6d3c19c2df39243d73425d52f0a42cc4a01e39f3c24ecd0e22d696d59320e4ee7d111d3abac17ebfc8aa6bb910c8d1d92efe391d372130bfccdec653e41694e86c79164f36b1ac9fc2812a7944f8b08f6780b102f71f4dc7232c83d20a4aa83db3e540a063f7f13360b6435b755f4af598016caf933a76bf2f2897b04a1efe5793b62c87532ba7fc740372ea2918a0dca9de22c336f6b4ab77b1047e00d693585263f938791e5bf228f297896d3a90f4e87c53e42589eba922b3770644a9a199bd95fca9d25416417924b7b594e88cb3e0b3d48014993d64636c82533a49c239a2305b4e9fe43f2ab23aa972ecfd7bd1eefb2d9f8117a8711e5f4c84704b761fdac68a8ae0e0e2d69bcd3ee3b3101a14459b9aac31b693130e809b72e9a8722029a6ee71faf89daa40d3a98476aeeb172b14d452a38475599d5f8243ff49bbc4fd4341ee82c77d0f7e3a93fb89d9c826697f86a7ed404d82fd358d919af26580bed09ce5f694c7fb2919b181ff08da24a7a95523b67b45098c233abdac18a7816bc2e56092f0f8fc300d44f0c181b7bc103b03fe978410816b1ec59a52f2d08a895028dc4559983701ce75a60ccdec67401e1208ca3f4032aeb7536f6cfb3f9fb1f2fa8e67adcfc8690e904599860f707b1be70a49f60e01e8fd3f46165cd186808e0536bde9356dea4ce245a9cc3293a2c7e42d96c953526", 0x2ed}], 0x1}, 0x44080) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03d", 0x44}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7", 0xb5}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f", 0xd}], 0x3}}], 0x1, 0x20004050) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_open_procfs$namespace(0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) 50.807009927s ago: executing program 0 (id=569): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0x15, &(0x7f0000000340)={@remote, @multicast1, 0x0, "499b0aa0c254f989733b921064eea6ea27f9286a7647df3bd148f288f12ddda9"}, 0x3c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00001500000000feff070008000000000000008f37b00616bca37645c4b981a614ba2c76cb6f6bac45125ebb1f3cbc2c4548d1bf497804e4701a468b420113531676eb4156a0f7a2096136544711f9fb7aff417fffe6ab38c785c6fe636af9561c7eede5f460c4d81a1b", @ANYRES32=r4, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000200)=""/76}, 0x20) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x20008094) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES8=r7, @ANYBLOB="72ea8d8aafb890d9612746118bebf24a8a003cc3ec08817f3bbcd4a1"], 0x64}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340071651f53148917c1fe8d31c247d5101bdb4f11962b82d982870ec8575bca00", @ANYRES32=r8, @ANYBLOB="00000000000000001400128008000100677265000800028004001200"], 0x34}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r13, 0x11c, 0x2, &(0x7f0000000080)=""/44, &(0x7f00000000c0)=0x2c) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) (async) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) 49.097007206s ago: executing program 4 (id=486): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000400", @ANYRES16=r3, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000082c6ad13544fdbaed23ee979fd758cf02b6c066827d361b85fbe6389c91f81d09e6b9beb13c1a9a99c1c2796f984989464a52dc53610967a6e6350afca038900add24efc5159440421cc553ebdf558dcb04f447988f75b040a632dcdb84816f4bed452495cb9812e9b7c2bf65723ee28e989135c475e5dea8c99b482baae6dbabe4e015c49ecff6950b10c58a4d6365cd021b494153bde8836d54b5d5ec1c0eefad8050f06ba4f02acc15675e311eb13", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB, @ANYRESOCT, @ANYRES8=r4], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x2ed}], 0x1}, 0x44080) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03d", 0x44}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7", 0xb5}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f", 0xd}], 0x3}}], 0x1, 0x20004050) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_open_procfs$namespace(0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) 33.3600966s ago: executing program 0 (id=569): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0x15, &(0x7f0000000340)={@remote, @multicast1, 0x0, "499b0aa0c254f989733b921064eea6ea27f9286a7647df3bd148f288f12ddda9"}, 0x3c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00001500000000feff070008000000000000008f37b00616bca37645c4b981a614ba2c76cb6f6bac45125ebb1f3cbc2c4548d1bf497804e4701a468b420113531676eb4156a0f7a2096136544711f9fb7aff417fffe6ab38c785c6fe636af9561c7eede5f460c4d81a1b", @ANYRES32=r4, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000200)=""/76}, 0x20) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x20008094) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES8=r7, @ANYBLOB="72ea8d8aafb890d9612746118bebf24a8a003cc3ec08817f3bbcd4a1"], 0x64}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340071651f53148917c1fe8d31c247d5101bdb4f11962b82d982870ec8575bca00", @ANYRES32=r8, @ANYBLOB="00000000000000001400128008000100677265000800028004001200"], 0x34}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r13, 0x11c, 0x2, &(0x7f0000000080)=""/44, &(0x7f00000000c0)=0x2c) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) (async) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) 32.450587065s ago: executing program 4 (id=486): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000400", @ANYRES16=r3, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000082c6ad13544fdbaed23ee979fd758cf02b6c066827d361b85fbe6389c91f81d09e6b9beb13c1a9a99c1c2796f984989464a52dc53610967a6e6350afca038900add24efc5159440421cc553ebdf558dcb04f447988f75b040a632dcdb84816f4bed452495cb9812e9b7c2bf65723ee28e989135c475e5dea8c99b482baae6dbabe4e015c49ecff6950b10c58a4d6365cd021b494153bde8836d54b5d5ec1c0eefad8050f06ba4f02acc15675e311eb13", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB, @ANYRESOCT, @ANYRES8=r4], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x2ed}], 0x1}, 0x44080) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03d", 0x44}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7", 0xb5}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f", 0xd}], 0x3}}], 0x1, 0x20004050) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_open_procfs$namespace(0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) 15.789833572s ago: executing program 0 (id=569): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0x15, &(0x7f0000000340)={@remote, @multicast1, 0x0, "499b0aa0c254f989733b921064eea6ea27f9286a7647df3bd148f288f12ddda9"}, 0x3c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00001500000000feff070008000000000000008f37b00616bca37645c4b981a614ba2c76cb6f6bac45125ebb1f3cbc2c4548d1bf497804e4701a468b420113531676eb4156a0f7a2096136544711f9fb7aff417fffe6ab38c785c6fe636af9561c7eede5f460c4d81a1b", @ANYRES32=r4, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000200)=""/76}, 0x20) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x20008094) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES8=r7, @ANYBLOB="72ea8d8aafb890d9612746118bebf24a8a003cc3ec08817f3bbcd4a1"], 0x64}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340071651f53148917c1fe8d31c247d5101bdb4f11962b82d982870ec8575bca00", @ANYRES32=r8, @ANYBLOB="00000000000000001400128008000100677265000800028004001200"], 0x34}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r13, 0x11c, 0x2, &(0x7f0000000080)=""/44, &(0x7f00000000c0)=0x2c) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) (async) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) 14.803350118s ago: executing program 4 (id=486): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000400", @ANYRES16=r3, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000082c6ad13544fdbaed23ee979fd758cf02b6c066827d361b85fbe6389c91f81d09e6b9beb13c1a9a99c1c2796f984989464a52dc53610967a6e6350afca038900add24efc5159440421cc553ebdf558dcb04f447988f75b040a632dcdb84816f4bed452495cb9812e9b7c2bf65723ee28e989135c475e5dea8c99b482baae6dbabe4e015c49ecff6950b10c58a4d6365cd021b494153bde8836d54b5d5ec1c0eefad8050f06ba4f02acc15675e311eb13", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB, @ANYRESOCT, @ANYRES8=r4], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x2ed}], 0x1}, 0x44080) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03d", 0x44}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7", 0xb5}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f", 0xd}], 0x3}}], 0x1, 0x20004050) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_open_procfs$namespace(0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) 1.912242728s ago: executing program 3 (id=1379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003d0009000000000000000000010000000400000014000180100010800c0000000900000000000000080002"], 0x34}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x180}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x400000000000009) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000240), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) write(r7, &(0x7f0000000280)="8e4e64a6f350aeffd00b27c0016dc45b52e0a3ebc8d6a5160abf407c7b80430b2ffc64c9a44673e13e01ca2ce89f6282950aeb9344fddf4295361efec8eb7733c3cd64fd1f40d33d9be93484c41a44b8d1b68e367b6bdb987e1da90c5daa1fa825d44e3c8eb6407963c716649b01d9ea0b5e146058513f7cd311e7c81ae50c6bbc19bf1743ecc1ef74cb16a1c98eeb", 0x8f) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0xfffffffc, 0x7fff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004881}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r12, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r12, 0xda90) r13 = accept4(r12, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r13, 0x84, 0x6c, &(0x7f0000000400), &(0x7f00000000c0)=0x8) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r14, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) ioctl$int_in(r11, 0x5452, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x20}, {0x4}}]}, 0x30}}, 0x0) socket(0x10, 0x3, 0x0) 1.841086566s ago: executing program 2 (id=1381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0x80000000}, {0x6}]}) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f00000000c0)=0xfff) write$ppp(r5, &(0x7f00000010c0)="1e00", 0x2) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_getnexthop={0x38, 0x6a, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_OIF={0x8, 0x5, r3}]}, 0x38}, 0x1, 0xffffff7f}, 0x4040000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x1}]}}, "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"}}, 0xfce) 1.152243207s ago: executing program 2 (id=1385): syz_emit_ethernet(0x2e, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffff2ecafcc67af208004500002000000000bbe3f6ec00000000e00001001800000000009078994ae2858328f01cfc0c029999958df566bc6c8bc02055a8f010402c9844b6265aa65706346482ab74464e684508a32fbde1acadb9368db60dbfd33326b254dcae6ee0e2"], 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f000084c000/0x3000)=nil, 0x3000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "000001006b2d3cdb", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) listen(r0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @loopback}, 0x80, 0x0}, 0x4007f97) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0xe, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x240008c0}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r8, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000002c0), 0x0, 0x39, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000300), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="01010000000100000000000037000a00e7e33950076e30000000ef4eb0cfbb3068c10d53cde921d1f56da9af3bffdc22e682c032bc289e7a37d4d04da7623376c62eb210bd77bb008d1d42a1e9faf4baff0f216bce8189d8855b1e895f1f2b0dd071574e2eea90c7e43c139c982d3782d6c6beec16bf954ccf9313dbd253ba643d877132f4a87322bf853fe3da27b5a737b8df62d3c5189e3551d9e9c2154cb7e7075f9fbc9695b195bd", @ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYRESDEC=r5, @ANYRESDEC=r3, @ANYRESDEC=r5, @ANYRES8], 0x20}}, 0x0) 1.151266566s ago: executing program 1 (id=1386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x8, 0x10, 0xfe, 0x20c00, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x7, 0x6, 0x4c, @empty, @local, 0x7, 0x7800, 0x9, 0x8}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfffffffd, 0x5, 0x401, 0x5200, r0, 0x5, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xa, @void, @value, @void, @value}, 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', r1, 0x29, 0x4, 0x2, 0x6, 0x1a, @private1, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x40, 0x6d, 0x5}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x4008004) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x501c1240}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2800}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x9000}, 0x2000c081) (async) r7 = accept4(r3, 0x0, &(0x7f0000000640), 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4008000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x29, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @generic={0x2, 0xa, 0x5, 0x6, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0xdf, &(0x7f0000000980)=""/223, 0x40f00, 0x7, '\x00', r5, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x3, 0x0, 0x7, 0x7ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000ac0)=[r0], &(0x7f0000000b00)=[{0x2, 0x2, 0xb}, {0x0, 0x3, 0xc, 0x9}, {0x2, 0x5, 0xf, 0x7}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000780)='rxrpc_rx_lose\x00', r8, 0x0, 0x1ff}, 0x18) (async) bind$l2tp6(r3, &(0x7f0000000c40)={0xa, 0x0, 0x6, @loopback, 0x6, 0x1}, 0x20) (async) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000c80)=@req3={0x8, 0x0, 0x353, 0x100, 0x6306e2df, 0x1, 0x4}, 0x1c) (async) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, &(0x7f0000000cc0)={'ipvs\x00'}, &(0x7f0000000d00)=0x1e) (async) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000d40)={0x3a, @rand_addr=0x64010100, 0x4e23, 0x0, 'wrr\x00', 0x6, 0x3ff, 0x5d}, 0x2c) getpeername$l2tp(r7, &(0x7f0000000d80)={0x2, 0x0, @local}, &(0x7f0000000dc0)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000e00)={r9}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000f00)={&(0x7f0000000e40), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x80000001}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xed}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x2}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x845}, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f40), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000f80)=0x4) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r13, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x60, r14, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20048014) r16 = syz_genetlink_get_family_id$nfc(&(0x7f00000011c0), r13) sendmsg$NFC_CMD_GET_TARGET(r13, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r16, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004005) 1.062592213s ago: executing program 1 (id=1387): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x100}]}, 0x44}}, 0x0) 868.458103ms ago: executing program 1 (id=1388): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044, 0x8, 0x0, 0x0}}, 0xff27) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) (async) r2 = socket(0x3, 0x5, 0x2) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x200000c5) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) shutdown(r3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x22ab, 0x4) sendmmsg$inet(r3, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe4, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xb1, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000067deebc621f3911b00bf852c8986626691b01b2d44e4ce2d712d282dda2c2d23debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @binary="cfe7336f91"}]}]}, 0xe4}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 837.616653ms ago: executing program 3 (id=1389): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) (fail_nth: 52) 389.511206ms ago: executing program 2 (id=1390): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 347.126543ms ago: executing program 1 (id=1391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000140020800c0001006d392948156170000400028008000500", @ANYRES32=r2, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x2, 0x1}, 0x6) 318.220438ms ago: executing program 3 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x10000, 0xfffffffe, 0x200, 0x64}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000005014000000003040002000c00028005000100000004001400000008000200ac789c9e960005404c4157e809000100"/71], 0x58}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x803, 0x0) write$tun(r2, &(0x7f0000000340)={@void, @val={0x1, 0x80, 0x931a, 0x7, 0x7, 0x401}, @x25={0x0, 0x0, 0x1, "3db5"}}, 0xf) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 248.451795ms ago: executing program 2 (id=1393): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x0}, @loopback={0x0, 0xffff888101827518}}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000440)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 236.045438ms ago: executing program 3 (id=1394): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000021801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x24}], 0x1}, 0x24008004) 155.289103ms ago: executing program 3 (id=1395): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYRES64, @ANYBLOB="6ef3405d86ece08b4069a8d1dec4fadec111f127e0e7f2aa4a492003124fef4b7d6c120593b16f17659d48aa1fcbd6546b859a24db78e4f2594a16d1d768ad7e567387f7d11cedcddbb6e05fc4040188acc290538daaebbe4e8b4b3684634f19eef17ccfd3cb2fe1bbf75a847b28772435339f5f778a199c18d77a6ad08345d1a486bea16d874c684c483dcefc695f54a63f5f4557ecfe2c86f69f2b1a13629f5c095ba0f61502", @ANYRES8=r0, @ANYRES8=r1, @ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) 110.345345ms ago: executing program 1 (id=1396): r0 = socket$isdn(0x22, 0x2, 0x22) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async) r2 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0xfffff01c}]}, 0x10) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$ppp(r3, &(0x7f00000002c0)="f34693913496664c29ffc10b9d85ec5d7c6c8a4011ba0c0ab890f1b8a79a5fc4b7feb299a6cf74b3", 0x28) close(r0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000080000000d00000000010000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x50) (async) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x1020400, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000802000001"], 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000800000000000000000008500000050000000181100006dbb817a35b07d487388163de106889a6b90dffba7797a134372af87b43e5babb5db00ab51a4ff3cc2bdbd2829bc32c532a67a97fb3224cbc32b9d3be64b9177854832da33649f30e0a7e56373bfdd0f39dc6916cadbed9ca417417e1f023b36895578f2603efc9b00a9472d1ea9c44053051648866d6a", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) unshare(0x8040480) r6 = socket$inet6(0xa, 0x3, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x40800, &(0x7f00000002c0)={0xa, 0x0, 0x6, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x6e) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) 109.531783ms ago: executing program 2 (id=1397): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b0000080028"], 0x104}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7f}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4ce08cef69e3d735}, 0x20000004) 16.488795ms ago: executing program 1 (id=1398): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x100}]}, 0x44}}, 0x0) 14.577556ms ago: executing program 2 (id=1399): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x1000000000000000}, 0x0) 12.823719ms ago: executing program 3 (id=1400): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="05000000050000000000000000000000000000002000000000000000"], 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x3}}, 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}]}, 0x154}}, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000008d00)={0x2, 'macvlan0\x00', 0x3}, 0x18) socket(0x1f, 0x1, 0x4) (async) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x10000, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "63a70859e552ed63"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0xff, 0x4, 0x2a, 0x0, 0x0, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2baa4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c10c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24682c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd93cff41a9630802f96de02008ea850529827c5e301953a8abaafa1f121e590f74e28233f412968587eee87ec5d42c3ef0619022c00", 0x0, "0300586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) (async) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080003408000000008000240000000030900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) r8 = socket(0x21, 0x2, 0x10000000000002) getsockopt$PNPIPE_IFINDEX(r8, 0x110, 0x2, 0x0, 0x0) (async) sendmmsg$inet(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="fc484e55021886bb", 0x7fffefd8}], 0x2}}], 0x1, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="55ffffff", @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008001700", @ANYRES32=r6, @ANYBLOB="14000800767863616e310000000000000000000014001f00000000000000fe000000000000000000001400200000000000000000000000ffffac1414c5200021000100e800"], 0x70}}, 0x0) 0s ago: executing program 0 (id=569): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0x15, &(0x7f0000000340)={@remote, @multicast1, 0x0, "499b0aa0c254f989733b921064eea6ea27f9286a7647df3bd148f288f12ddda9"}, 0x3c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='rcu_utilization\x00', r3, 0x0, 0x6}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00001500000000feff070008000000000000008f37b00616bca37645c4b981a614ba2c76cb6f6bac45125ebb1f3cbc2c4548d1bf497804e4701a468b420113531676eb4156a0f7a2096136544711f9fb7aff417fffe6ab38c785c6fe636af9561c7eede5f460c4d81a1b", @ANYRES32=r4, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=""/76}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000200)=""/76}, 0x20) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x20008094) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES8=r7, @ANYBLOB="72ea8d8aafb890d9612746118bebf24a8a003cc3ec08817f3bbcd4a1"], 0x64}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340071651f53148917c1fe8d31c247d5101bdb4f11962b82d982870ec8575bca00", @ANYRES32=r8, @ANYBLOB="00000000000000001400128008000100677265000800028004001200"], 0x34}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r13, 0x11c, 0x2, &(0x7f0000000080)=""/44, &(0x7f00000000c0)=0x2c) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) (async) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0xf0c2}, 0x1c) kernel console output (not intermixed with test programs): '. [ 223.829027][T10514] chnl_net:caif_netlink_parms(): no params data found [ 223.887166][ T3518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.261157][T10569] netlink: 332 bytes leftover after parsing attributes in process `syz.2.970'. [ 224.301828][T10514] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.323594][T10514] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.345442][T10514] bridge_slave_0: entered allmulticast mode [ 224.383795][T10514] bridge_slave_0: entered promiscuous mode [ 224.404278][ T3518] bridge_slave_1: left allmulticast mode [ 224.425473][ T3518] bridge_slave_1: left promiscuous mode [ 224.431594][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.460366][ T3518] bridge_slave_0: left allmulticast mode [ 224.466514][ T3518] bridge_slave_0: left promiscuous mode [ 224.472424][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.639792][T10580] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 224.670116][T10580] netlink: 56 bytes leftover after parsing attributes in process `syz.3.973'. [ 224.916431][ T5841] Bluetooth: hci3: command tx timeout [ 225.175916][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 225.197604][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.210322][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.222619][ T3518] bond0 (unregistering): Released all slaves [ 225.245782][T10514] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.253447][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.269624][T10514] bridge_slave_1: entered allmulticast mode [ 225.277619][T10514] bridge_slave_1: entered promiscuous mode [ 225.432029][T10514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.464201][T10514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.552041][T10594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.978'. [ 225.566438][ T5841] Bluetooth: hci1: command tx timeout [ 225.692909][T10514] team0: Port device team_slave_0 added [ 225.717821][T10514] team0: Port device team_slave_1 added [ 225.889304][T10514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.904218][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.990066][T10514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.067653][ T3518] hsr_slave_0: left promiscuous mode [ 226.086300][ T3518] hsr_slave_1: left promiscuous mode [ 226.092325][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.102576][T10611] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 226.121927][T10611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.984'. [ 226.133784][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.150689][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.158841][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.182637][ T3518] veth1_macvtap: left promiscuous mode [ 226.189152][ T3518] veth0_macvtap: left promiscuous mode [ 226.194817][ T3518] veth1_vlan: left promiscuous mode [ 226.205596][ T3518] veth0_vlan: left promiscuous mode [ 226.314617][T10623] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 226.335959][T10623] netlink: 56 bytes leftover after parsing attributes in process `syz.2.988'. [ 226.864241][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 226.925069][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 227.000475][ T5841] Bluetooth: hci3: command tx timeout [ 227.194536][T10630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.989'. [ 227.208341][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 227.518661][T10514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.525772][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.556481][T10514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.570470][T10611] lo speed is unknown, defaulting to 1000 [ 227.646428][ T5841] Bluetooth: hci1: command tx timeout [ 227.654327][T10611] lo speed is unknown, defaulting to 1000 [ 227.701262][T10514] hsr_slave_0: entered promiscuous mode [ 227.719077][T10514] hsr_slave_1: entered promiscuous mode [ 227.725331][T10514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.754070][T10514] Cannot create hsr debugfs directory [ 227.763731][T10611] lo speed is unknown, defaulting to 1000 [ 227.777051][T10611] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 227.802593][T10611] lo speed is unknown, defaulting to 1000 [ 227.898076][T10611] lo speed is unknown, defaulting to 1000 [ 227.957331][T10611] lo speed is unknown, defaulting to 1000 [ 227.973971][T10611] lo speed is unknown, defaulting to 1000 [ 227.975244][T10499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.054541][T10499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.081916][T10611] lo speed is unknown, defaulting to 1000 [ 228.082322][T10499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.141232][T10499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.349948][T10499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.391163][T10499] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.415909][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.423056][ T9736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.441841][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.449038][ T9736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.691197][T10514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.702592][T10514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.713598][T10514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.735283][T10499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.765578][T10514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.848712][T10499] veth0_vlan: entered promiscuous mode [ 228.903896][T10499] veth1_vlan: entered promiscuous mode [ 228.977470][T10514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.997562][T10499] veth0_macvtap: entered promiscuous mode [ 229.008301][T10499] veth1_macvtap: entered promiscuous mode [ 229.039747][T10514] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.073475][ T9735] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.080674][ T9735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.086439][ T5841] Bluetooth: hci3: command tx timeout [ 229.128934][T10499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.143369][T10667] netlink: 'syz.1.999': attribute type 21 has an invalid length. [ 229.162148][T10667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.999'. [ 229.177000][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.184213][ T9738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.203139][T10499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.233153][T10499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.249762][T10499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.265819][T10499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.275335][T10499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.499690][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.519638][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.560548][T10682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.570592][ T9738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.591093][ T9738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.768429][T10682] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.790068][T10682] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.803465][T10682] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 229.950498][T10682] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.965128][T10682] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.976369][T10682] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 230.039028][T10514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.105304][T10682] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.151698][T10682] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.164095][T10682] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 230.291659][T10682] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.333321][T10682] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.376575][T10682] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 230.499804][T10514] veth0_vlan: entered promiscuous mode [ 230.522951][T10514] veth1_vlan: entered promiscuous mode [ 230.582017][T10682] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.590834][T10682] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 230.604556][T10682] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.633386][T10682] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.643243][T10682] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 230.660224][T10682] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.692395][T10682] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.693805][T10714] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 230.709235][T10682] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 230.731826][T10682] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.790138][T10682] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.815842][T10682] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 230.827665][T10682] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.851625][T10514] veth0_macvtap: entered promiscuous mode [ 230.874813][T10514] veth1_macvtap: entered promiscuous mode [ 230.985028][ T3518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.037592][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.048412][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.060067][T10514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.072448][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.083489][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.094586][T10514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.109186][T10514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.118461][T10514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.128217][T10514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.137306][T10514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.229131][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.247130][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.275865][ T9735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.284028][ T9735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.790002][T10726] sock: sock_timestamping_bind_phc: sock not bind to device [ 231.958302][ T3518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.089517][ T3518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.175407][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.180792][T10749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1021'. [ 232.203050][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.211396][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.236411][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.247823][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.256594][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.338440][ T3518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.469795][T10749] bridge0: port 3(bond0) entered disabled state [ 232.477490][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.485993][T10749] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.507943][T10749] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 232.524712][ T5917] lo speed is unknown, defaulting to 1000 [ 232.533731][T10745] lo speed is unknown, defaulting to 1000 [ 232.540309][ T5917] lo speed is unknown, defaulting to 1000 [ 232.620924][ T3518] bridge_slave_1: left allmulticast mode [ 232.627246][ T3518] bridge_slave_1: left promiscuous mode [ 232.647515][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.663421][ T3518] bridge_slave_0: left allmulticast mode [ 232.671569][ T3518] bridge_slave_0: left promiscuous mode [ 232.684837][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.073950][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.085162][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.095742][ T3518] bond0 (unregistering): Released all slaves [ 233.113506][T10745] lo speed is unknown, defaulting to 1000 [ 233.350961][T10745] chnl_net:caif_netlink_parms(): no params data found [ 233.688016][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.701777][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.712720][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.725889][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.735397][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.743127][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.846648][T10745] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.854697][T10745] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.862537][T10745] bridge_slave_0: entered allmulticast mode [ 233.870836][T10745] bridge_slave_0: entered promiscuous mode [ 233.900920][ T3518] hsr_slave_0: left promiscuous mode [ 233.924902][ T3518] hsr_slave_1: left promiscuous mode [ 233.938511][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.946979][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.955336][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.960461][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 233.964017][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.997271][ T3518] veth1_macvtap: left promiscuous mode [ 234.003144][ T3518] veth0_macvtap: left promiscuous mode [ 234.009443][ T3518] veth1_vlan: left promiscuous mode [ 234.015104][ T3518] veth0_vlan: left promiscuous mode [ 234.291850][ T5848] Bluetooth: hci1: command tx timeout [ 234.670679][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 234.723712][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 235.275104][T10745] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.283273][T10745] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.291183][T10745] bridge_slave_1: entered allmulticast mode [ 235.298384][T10745] bridge_slave_1: entered promiscuous mode [ 235.334744][T10745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.357453][T10745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.374757][T10770] lo speed is unknown, defaulting to 1000 [ 235.428204][T10745] team0: Port device team_slave_0 added [ 235.457094][T10745] team0: Port device team_slave_1 added [ 235.533899][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 235.572505][T10745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.596292][T10745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.654135][T10745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.673554][T10770] lo speed is unknown, defaulting to 1000 [ 235.694996][T10745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.717123][T10745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.767750][T10745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.798400][ T5848] Bluetooth: hci3: command tx timeout [ 235.913226][T10745] hsr_slave_0: entered promiscuous mode [ 235.927667][T10745] hsr_slave_1: entered promiscuous mode [ 235.999353][T10802] xt_l2tp: unknown flags: 10 [ 236.090192][ T9738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.175056][ T9738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.195453][T10770] chnl_net:caif_netlink_parms(): no params data found [ 236.273390][ T9738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.358049][ T5848] Bluetooth: hci1: command tx timeout [ 236.409481][ T9738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.425665][T10812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1034'. [ 236.445046][T10770] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.453004][T10770] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.461709][T10770] bridge_slave_0: entered allmulticast mode [ 236.469153][T10770] bridge_slave_0: entered promiscuous mode [ 236.499593][T10770] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.514241][T10770] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.523141][T10770] bridge_slave_1: entered allmulticast mode [ 236.533601][T10770] bridge_slave_1: entered promiscuous mode [ 236.622944][T10770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.660701][T10770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.743770][ T9738] bridge_slave_1: left allmulticast mode [ 236.750654][ T9738] bridge_slave_1: left promiscuous mode [ 236.756980][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.770789][ T9738] bridge_slave_0: left allmulticast mode [ 236.777813][ T9738] bridge_slave_0: left promiscuous mode [ 236.784251][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.872414][T10818] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1036'. [ 237.469582][T10838] netlink: 1152 bytes leftover after parsing attributes in process `syz.1.1039'. [ 237.495038][T10838] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16) [ 237.503898][T10838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.886307][ T5848] Bluetooth: hci3: command tx timeout [ 237.942188][ T9738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.954127][ T9738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.964605][ T9738] bond0 (unregistering): Released all slaves [ 237.980652][T10770] team0: Port device team_slave_0 added [ 238.214644][T10770] team0: Port device team_slave_1 added [ 238.239508][ T5891] IPVS: starting estimator thread 0... [ 238.253320][T10849] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 238.346857][T10851] IPVS: using max 26 ests per chain, 62400 per kthread [ 238.446923][ T5848] Bluetooth: hci1: command tx timeout [ 239.958680][ T5848] Bluetooth: hci3: command tx timeout [ 240.521924][ T5848] Bluetooth: hci1: command tx timeout [ 240.807498][T10859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.815214][T10859] IPv6: NLM_F_CREATE should be set when creating new route [ 240.822699][T10859] IPv6: NLM_F_CREATE should be set when creating new route [ 240.829991][T10859] IPv6: NLM_F_CREATE should be set when creating new route [ 240.865016][T10770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.899444][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.914049][T10861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1046'. [ 240.944048][T10770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.981781][T10857] lo speed is unknown, defaulting to 1000 [ 240.997106][T10770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.004460][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.031725][T10770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.088775][T10745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.118675][T10745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.187168][T10745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.206783][T10745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.229905][T10770] hsr_slave_0: entered promiscuous mode [ 241.241897][T10770] hsr_slave_1: entered promiscuous mode [ 241.251675][T10770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.272540][T10770] Cannot create hsr debugfs directory [ 241.305757][T10857] lo speed is unknown, defaulting to 1000 [ 241.370699][ T9738] hsr_slave_0: left promiscuous mode [ 241.378546][ T9738] hsr_slave_1: left promiscuous mode [ 241.384512][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.393570][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.405919][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.414069][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.434724][ T9738] veth1_macvtap: left promiscuous mode [ 241.440495][ T9738] veth0_macvtap: left promiscuous mode [ 241.446304][ T9738] veth1_vlan: left promiscuous mode [ 241.451685][ T9738] veth0_vlan: left promiscuous mode [ 242.037486][ T5848] Bluetooth: hci3: command tx timeout [ 242.043343][T10875] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.1050'. [ 242.043972][ T9738] team0 (unregistering): Port device team_slave_1 removed [ 242.054908][T10875] openvswitch: netlink: Message has 8 unknown bytes. [ 242.109723][ T9738] team0 (unregistering): Port device team_slave_0 removed [ 243.051541][T10745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.154872][T10745] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.170632][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.177859][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.221049][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.228283][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.250658][T10887] lo speed is unknown, defaulting to 1000 [ 243.333762][T10745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.522374][T10770] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.559131][T10770] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.576927][T10770] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.614165][T10770] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.685898][T10745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.730605][T10887] lo speed is unknown, defaulting to 1000 [ 243.845200][T10745] veth0_vlan: entered promiscuous mode [ 243.910806][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 243.924452][T10745] veth1_vlan: entered promiscuous mode [ 243.973891][T10770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.032550][T10745] veth0_macvtap: entered promiscuous mode [ 244.059018][T10770] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.073766][T10745] veth1_macvtap: entered promiscuous mode [ 244.097640][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.104933][ T9738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.133707][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.141681][ T9736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.222548][T10745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.247509][T10745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.272478][T10745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.282233][T10745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.295218][T10745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.309526][T10745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.592074][T10912] lo speed is unknown, defaulting to 1000 [ 244.646669][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.695030][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.765563][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.770194][T10770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.782231][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.848066][T10912] lo speed is unknown, defaulting to 1000 [ 245.221636][T10770] veth0_vlan: entered promiscuous mode [ 245.290384][T10770] veth1_vlan: entered promiscuous mode [ 245.374111][T10770] veth0_macvtap: entered promiscuous mode [ 245.390543][T10770] veth1_macvtap: entered promiscuous mode [ 245.431705][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.443379][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.455507][T10770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.473882][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.486519][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.499119][T10770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.515317][T10770] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.542601][T10770] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.561721][T10770] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.583034][T10770] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.685178][ T9735] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.849819][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.857876][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.927072][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.935885][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.137471][ T9735] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.666567][ T9735] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.783461][T10941] FAULT_INJECTION: forcing a failure. [ 246.783461][T10941] name failslab, interval 1, probability 0, space 0, times 0 [ 246.839963][ T9735] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.846451][T10941] CPU: 0 UID: 0 PID: 10941 Comm: syz.1.1064 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 246.846482][T10941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 246.846493][T10941] Call Trace: [ 246.846500][T10941] [ 246.846507][T10941] dump_stack_lvl+0x241/0x360 [ 246.846534][T10941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.846552][T10941] ? __pfx__printk+0x10/0x10 [ 246.846577][T10941] ? kmem_cache_alloc_noprof+0x48/0x380 [ 246.846596][T10941] ? __pfx___might_resched+0x10/0x10 [ 246.846620][T10941] should_fail_ex+0x40a/0x550 [ 246.846644][T10941] should_failslab+0xac/0x100 [ 246.846662][T10941] ? __kernfs_new_node+0xd8/0x870 [ 246.846676][T10941] kmem_cache_alloc_noprof+0x70/0x380 [ 246.846697][T10941] __kernfs_new_node+0xd8/0x870 [ 246.846719][T10941] ? up_write+0x1a9/0x590 [ 246.846735][T10941] ? __pfx___kernfs_new_node+0x10/0x10 [ 246.846754][T10941] ? __pfx_up_write+0x10/0x10 [ 246.846783][T10941] kernfs_new_node+0x137/0x240 [ 246.846803][T10941] __kernfs_create_file+0x49/0x2e0 [ 246.846834][T10941] sysfs_add_file_mode_ns+0x24a/0x310 [ 246.846862][T10941] internal_create_group+0x782/0x12d0 [ 246.846898][T10941] ? __pfx_internal_create_group+0x10/0x10 [ 246.846932][T10941] sysfs_create_groups+0x56/0x120 [ 246.846955][T10941] device_add_attrs+0x199/0x600 [ 246.846975][T10941] ? __pfx_device_add_attrs+0x10/0x10 [ 246.846989][T10941] ? kobject_put+0x446/0x480 [ 246.847021][T10941] device_add+0x576/0xbf0 [ 246.847037][T10941] ? device_initialize+0x266/0x460 [ 246.847055][T10941] wakeup_source_sysfs_add+0x1aa/0x270 [ 246.847073][T10941] wakeup_source_register+0x171/0x250 [ 246.847097][T10941] ep_insert+0xd99/0x1ab0 [ 246.847132][T10941] ? __pfx_ep_insert+0x10/0x10 [ 246.847164][T10941] ? bpf_lsm_capable+0x9/0x10 [ 246.847190][T10941] do_epoll_ctl+0x8bc/0xf80 [ 246.847219][T10941] __x64_sys_epoll_ctl+0x161/0x1a0 [ 246.847242][T10941] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 246.847264][T10941] ? do_syscall_64+0x100/0x230 [ 246.847287][T10941] ? do_syscall_64+0xb6/0x230 [ 246.847310][T10941] do_syscall_64+0xf3/0x230 [ 246.847330][T10941] ? clear_bhb_loop+0x35/0x90 [ 246.847354][T10941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.847374][T10941] RIP: 0033:0x7fbde658cde9 [ 246.847389][T10941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.847403][T10941] RSP: 002b:00007fbde63f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 246.847422][T10941] RAX: ffffffffffffffda RBX: 00007fbde67a5fa0 RCX: 00007fbde658cde9 [ 246.847434][T10941] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 246.847443][T10941] RBP: 00007fbde63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 246.847453][T10941] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000002 [ 246.847463][T10941] R13: 0000000000000000 R14: 00007fbde67a5fa0 R15: 00007ffeee69fbf8 [ 246.847490][T10941] [ 247.162086][T10945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.392381][T10956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1070'. [ 247.470888][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.481677][ T9735] bridge_slave_1: left allmulticast mode [ 247.488421][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.498709][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.506857][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.507419][ T9735] bridge_slave_1: left promiscuous mode [ 247.514728][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 247.527952][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.538893][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.559728][ T9735] bridge_slave_0: left allmulticast mode [ 247.565436][ T9735] bridge_slave_0: left promiscuous mode [ 247.596351][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.117267][ T9735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.130021][ T9735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.140993][ T9735] bond0 (unregistering): Released all slaves [ 248.214345][T10958] lo speed is unknown, defaulting to 1000 [ 248.351672][T10958] lo speed is unknown, defaulting to 1000 [ 248.501250][T10958] chnl_net:caif_netlink_parms(): no params data found [ 248.588466][ T9735] hsr_slave_0: left promiscuous mode [ 248.594245][ T9735] hsr_slave_1: left promiscuous mode [ 248.605418][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.615115][ T9735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.623570][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.631187][ T9735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.651117][ T9735] veth1_macvtap: left promiscuous mode [ 248.657019][ T9735] veth0_macvtap: left promiscuous mode [ 248.662914][ T9735] veth1_vlan: left promiscuous mode [ 248.669034][ T9735] veth0_vlan: left promiscuous mode [ 248.772091][T10976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1075'. [ 249.061303][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 249.066439][T10984] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1076'. [ 249.070674][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 249.089058][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 249.142699][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.174092][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.184987][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.204699][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.214589][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 249.222259][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.609976][ T9735] team0 (unregistering): Port device team_slave_1 removed [ 249.639438][ T5848] Bluetooth: hci1: command tx timeout [ 249.673178][ T9735] team0 (unregistering): Port device team_slave_0 removed [ 250.380267][T10997] siw: device registration error -23 [ 250.387944][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.409563][T10958] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.430658][T10958] bridge_slave_0: entered allmulticast mode [ 250.447623][T10958] bridge_slave_0: entered promiscuous mode [ 250.465544][T10985] lo speed is unknown, defaulting to 1000 [ 250.494315][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.508755][T10958] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.522434][T10958] bridge_slave_1: entered allmulticast mode [ 250.549993][T10958] bridge_slave_1: entered promiscuous mode [ 250.621778][T10958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.641512][T10958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.708042][T10985] lo speed is unknown, defaulting to 1000 [ 250.711019][T10958] team0: Port device team_slave_0 added [ 250.728744][T10958] team0: Port device team_slave_1 added [ 250.849684][T10958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.864646][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.918521][T10958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.973398][ T9735] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.015940][T10958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.036241][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.070255][T10958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.138879][ T9735] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.180975][T11018] netlink: 'syz.1.1088': attribute type 58 has an invalid length. [ 251.194081][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 251.194760][T11018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1088'. [ 251.268039][T10958] hsr_slave_0: entered promiscuous mode [ 251.278772][T10958] hsr_slave_1: entered promiscuous mode [ 251.305351][ T9735] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.316520][ T5848] Bluetooth: hci3: command tx timeout [ 251.414206][T11027] FAULT_INJECTION: forcing a failure. [ 251.414206][T11027] name failslab, interval 1, probability 0, space 0, times 0 [ 251.428799][T11027] CPU: 0 UID: 0 PID: 11027 Comm: syz.1.1092 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 251.428826][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 251.428836][T11027] Call Trace: [ 251.428843][T11027] [ 251.428851][T11027] dump_stack_lvl+0x241/0x360 [ 251.428876][T11027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.428894][T11027] ? __pfx__printk+0x10/0x10 [ 251.428920][T11027] ? kmem_cache_alloc_noprof+0x48/0x380 [ 251.428940][T11027] ? __pfx___might_resched+0x10/0x10 [ 251.428964][T11027] should_fail_ex+0x40a/0x550 [ 251.428988][T11027] should_failslab+0xac/0x100 [ 251.429007][T11027] ? __kernfs_new_node+0xd8/0x870 [ 251.429021][T11027] kmem_cache_alloc_noprof+0x70/0x380 [ 251.429043][T11027] __kernfs_new_node+0xd8/0x870 [ 251.429066][T11027] ? up_write+0x1a9/0x590 [ 251.429082][T11027] ? __pfx___kernfs_new_node+0x10/0x10 [ 251.429102][T11027] ? __pfx_up_write+0x10/0x10 [ 251.429132][T11027] kernfs_new_node+0x137/0x240 [ 251.429153][T11027] __kernfs_create_file+0x49/0x2e0 [ 251.429176][T11027] sysfs_add_file_mode_ns+0x24a/0x310 [ 251.429223][T11027] internal_create_group+0x782/0x12d0 [ 251.429262][T11027] ? __pfx_internal_create_group+0x10/0x10 [ 251.429297][T11027] sysfs_create_groups+0x56/0x120 [ 251.429321][T11027] device_add_attrs+0x199/0x600 [ 251.429341][T11027] ? __pfx_device_add_attrs+0x10/0x10 [ 251.429357][T11027] ? kobject_put+0x446/0x480 [ 251.429399][T11027] device_add+0x576/0xbf0 [ 251.429415][T11027] ? device_initialize+0x266/0x460 [ 251.429432][T11027] wakeup_source_sysfs_add+0x1aa/0x270 [ 251.429452][T11027] wakeup_source_register+0x171/0x250 [ 251.429478][T11027] ep_insert+0xd99/0x1ab0 [ 251.429514][T11027] ? __pfx_ep_insert+0x10/0x10 [ 251.429547][T11027] ? bpf_lsm_capable+0x9/0x10 [ 251.429584][T11027] do_epoll_ctl+0x8bc/0xf80 [ 251.429614][T11027] __x64_sys_epoll_ctl+0x161/0x1a0 [ 251.429638][T11027] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 251.429661][T11027] ? do_syscall_64+0x100/0x230 [ 251.429686][T11027] ? do_syscall_64+0xb6/0x230 [ 251.429709][T11027] do_syscall_64+0xf3/0x230 [ 251.429730][T11027] ? clear_bhb_loop+0x35/0x90 [ 251.429754][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.429774][T11027] RIP: 0033:0x7fbde658cde9 [ 251.429790][T11027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.429804][T11027] RSP: 002b:00007fbde63f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 251.429822][T11027] RAX: ffffffffffffffda RBX: 00007fbde67a5fa0 RCX: 00007fbde658cde9 [ 251.429834][T11027] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 251.429844][T11027] RBP: 00007fbde63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 251.429854][T11027] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000002 [ 251.429864][T11027] R13: 0000000000000000 R14: 00007fbde67a5fa0 R15: 00007ffeee69fbf8 [ 251.429892][T11027] [ 251.724978][ T5848] Bluetooth: hci1: command tx timeout [ 251.813137][T11031] netlink: 'syz.3.1094': attribute type 1 has an invalid length. [ 251.813692][ T9735] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.821063][T11031] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1094'. [ 252.164303][T10985] chnl_net:caif_netlink_parms(): no params data found [ 252.260454][ T9735] bridge_slave_1: left allmulticast mode [ 252.273839][ T9735] bridge_slave_1: left promiscuous mode [ 252.280968][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.297545][ T9735] bridge_slave_0: left allmulticast mode [ 252.304057][ T9735] bridge_slave_0: left promiscuous mode [ 252.311829][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.662577][T11056] x_tables: duplicate underflow at hook 2 [ 252.800328][T11064] FAULT_INJECTION: forcing a failure. [ 252.800328][T11064] name failslab, interval 1, probability 0, space 0, times 0 [ 252.819555][T11064] CPU: 1 UID: 0 PID: 11064 Comm: syz.1.1103 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 252.819582][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 252.819591][T11064] Call Trace: [ 252.819597][T11064] [ 252.819604][T11064] dump_stack_lvl+0x241/0x360 [ 252.819628][T11064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.819643][T11064] ? __pfx__printk+0x10/0x10 [ 252.819666][T11064] ? __kmalloc_noprof+0xb5/0x4c0 [ 252.819682][T11064] ? __pfx___might_resched+0x10/0x10 [ 252.819704][T11064] should_fail_ex+0x40a/0x550 [ 252.819725][T11064] should_failslab+0xac/0x100 [ 252.819741][T11064] __kmalloc_noprof+0xdd/0x4c0 [ 252.819755][T11064] ? kobject_get_path+0xb8/0x230 [ 252.819778][T11064] kobject_get_path+0xb8/0x230 [ 252.819800][T11064] kobject_uevent_env+0x2a5/0x8e0 [ 252.819814][T11064] ? bus_add_device+0xde/0x460 [ 252.819840][T11064] device_add+0x63b/0xbf0 [ 252.819859][T11064] wakeup_source_sysfs_add+0x1aa/0x270 [ 252.819876][T11064] wakeup_source_register+0x171/0x250 [ 252.819899][T11064] ep_insert+0xd99/0x1ab0 [ 252.819932][T11064] ? __pfx_ep_insert+0x10/0x10 [ 252.819961][T11064] ? bpf_lsm_capable+0x9/0x10 [ 252.819985][T11064] do_epoll_ctl+0x8bc/0xf80 [ 252.820012][T11064] __x64_sys_epoll_ctl+0x161/0x1a0 [ 252.820033][T11064] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 252.820052][T11064] ? do_syscall_64+0x100/0x230 [ 252.820079][T11064] ? do_syscall_64+0xb6/0x230 [ 252.820099][T11064] do_syscall_64+0xf3/0x230 [ 252.820117][T11064] ? clear_bhb_loop+0x35/0x90 [ 252.820138][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.820156][T11064] RIP: 0033:0x7fbde658cde9 [ 252.820171][T11064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.820183][T11064] RSP: 002b:00007fbde63f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 252.820200][T11064] RAX: ffffffffffffffda RBX: 00007fbde67a5fa0 RCX: 00007fbde658cde9 [ 252.820210][T11064] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 252.820218][T11064] RBP: 00007fbde63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 252.820227][T11064] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000002 [ 252.820236][T11064] R13: 0000000000000000 R14: 00007fbde67a5fa0 R15: 00007ffeee69fbf8 [ 252.820260][T11064] [ 253.201372][ T9735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.214440][ T9735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.225263][ T9735] bond0 (unregistering): Released all slaves [ 253.397465][ T5848] Bluetooth: hci3: command tx timeout [ 253.475690][T11080] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 253.652510][T10985] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.672779][T10985] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.681251][T10985] bridge_slave_0: entered allmulticast mode [ 253.688813][T10985] bridge_slave_0: entered promiscuous mode [ 253.719860][T10985] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.758693][T10985] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.766021][T10985] bridge_slave_1: entered allmulticast mode [ 253.784605][T10985] bridge_slave_1: entered promiscuous mode [ 253.794346][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 253.803837][ T5848] Bluetooth: hci1: command tx timeout [ 253.809706][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 253.873657][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 253.979439][T10985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.994242][T10985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.016645][ T9735] hsr_slave_0: left promiscuous mode [ 254.022930][ T9735] hsr_slave_1: left promiscuous mode [ 254.031782][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.040940][ T9735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.050357][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.058238][ T9735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.080105][ T9735] veth1_macvtap: left promiscuous mode [ 254.085674][ T9735] veth0_macvtap: left promiscuous mode [ 254.091805][ T9735] veth1_vlan: left promiscuous mode [ 254.097343][ T9735] veth0_vlan: left promiscuous mode [ 254.302869][T11103] netlink: 'syz.1.1113': attribute type 11 has an invalid length. [ 254.311128][T11103] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1113'. [ 254.774910][ T9735] team0 (unregistering): Port device team_slave_1 removed [ 254.831351][ T9735] team0 (unregistering): Port device team_slave_0 removed [ 255.486833][ T5848] Bluetooth: hci3: command tx timeout [ 255.488886][T10985] team0: Port device team_slave_0 added [ 255.548425][T10985] team0: Port device team_slave_1 added [ 255.700669][T10958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.726907][T10985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.727269][T11121] FAULT_INJECTION: forcing a failure. [ 255.727269][T11121] name failslab, interval 1, probability 0, space 0, times 0 [ 255.753330][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.776274][T11121] CPU: 0 UID: 0 PID: 11121 Comm: syz.1.1119 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 255.776303][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 255.776312][T11121] Call Trace: [ 255.776320][T11121] [ 255.776327][T11121] dump_stack_lvl+0x241/0x360 [ 255.776354][T11121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.776371][T11121] ? __pfx__printk+0x10/0x10 [ 255.776396][T11121] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 255.776415][T11121] ? __pfx___might_resched+0x10/0x10 [ 255.776448][T11121] should_fail_ex+0x40a/0x550 [ 255.776471][T11121] should_failslab+0xac/0x100 [ 255.776489][T11121] kmem_cache_alloc_node_noprof+0x77/0x380 [ 255.776506][T11121] ? __alloc_skb+0x1c3/0x440 [ 255.776532][T11121] __alloc_skb+0x1c3/0x440 [ 255.776554][T11121] ? __pfx_lock_release+0x10/0x10 [ 255.776572][T11121] ? add_uevent_var+0x274/0x450 [ 255.776591][T11121] ? __pfx___alloc_skb+0x10/0x10 [ 255.776621][T11121] alloc_uevent_skb+0x74/0x230 [ 255.776641][T11121] kobject_uevent_net_broadcast+0x2fd/0x580 [ 255.776664][T11121] kobject_uevent_env+0x57d/0x8e0 [ 255.776689][T11121] device_add+0x63b/0xbf0 [ 255.776712][T11121] wakeup_source_sysfs_add+0x1aa/0x270 [ 255.776730][T11121] wakeup_source_register+0x171/0x250 [ 255.776756][T11121] ep_insert+0xd99/0x1ab0 [ 255.776790][T11121] ? __pfx_ep_insert+0x10/0x10 [ 255.776823][T11121] ? bpf_lsm_capable+0x9/0x10 [ 255.776849][T11121] do_epoll_ctl+0x8bc/0xf80 [ 255.776884][T11121] __x64_sys_epoll_ctl+0x161/0x1a0 [ 255.776908][T11121] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 255.776930][T11121] ? do_syscall_64+0x100/0x230 [ 255.776953][T11121] ? do_syscall_64+0xb6/0x230 [ 255.776976][T11121] do_syscall_64+0xf3/0x230 [ 255.776996][T11121] ? clear_bhb_loop+0x35/0x90 [ 255.777020][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.777040][T11121] RIP: 0033:0x7fbde658cde9 [ 255.777054][T11121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.777068][T11121] RSP: 002b:00007fbde63f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 255.777087][T11121] RAX: ffffffffffffffda RBX: 00007fbde67a5fa0 RCX: 00007fbde658cde9 [ 255.777098][T11121] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 255.777107][T11121] RBP: 00007fbde63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 255.777117][T11121] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000002 [ 255.777127][T11121] R13: 0000000000000000 R14: 00007fbde67a5fa0 R15: 00007ffeee69fbf8 [ 255.777151][T11121] [ 255.886683][ T5848] Bluetooth: hci1: command tx timeout [ 255.902122][T10985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.081882][T10958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 256.103709][T10958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.122460][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.166879][T11135] FAULT_INJECTION: forcing a failure. [ 256.166879][T11135] name failslab, interval 1, probability 0, space 0, times 0 [ 256.204129][T11135] CPU: 1 UID: 0 PID: 11135 Comm: syz.1.1124 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 256.204158][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 256.204168][T11135] Call Trace: [ 256.204175][T11135] [ 256.204183][T11135] dump_stack_lvl+0x241/0x360 [ 256.204209][T11135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.204226][T11135] ? __pfx__printk+0x10/0x10 [ 256.204251][T11135] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 256.204271][T11135] ? __pfx___might_resched+0x10/0x10 [ 256.204294][T11135] should_fail_ex+0x40a/0x550 [ 256.204317][T11135] should_failslab+0xac/0x100 [ 256.204336][T11135] kmem_cache_alloc_node_noprof+0x77/0x380 [ 256.204353][T11135] ? __alloc_skb+0x1c3/0x440 [ 256.204379][T11135] __alloc_skb+0x1c3/0x440 [ 256.204406][T11135] ? __pfx___alloc_skb+0x10/0x10 [ 256.204430][T11135] ? netlink_autobind+0xd6/0x2f0 [ 256.204447][T11135] ? netlink_autobind+0x2b0/0x2f0 [ 256.204468][T11135] netlink_sendmsg+0x638/0xcb0 [ 256.204495][T11135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.204516][T11135] ? aa_sock_msg_perm+0x91/0x160 [ 256.204542][T11135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.204557][T11135] __sock_sendmsg+0x221/0x270 [ 256.204579][T11135] ____sys_sendmsg+0x52a/0x7e0 [ 256.204599][T11135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.204611][T11135] ? __fget_files+0x2a/0x410 [ 256.204629][T11135] ? __fget_files+0x2a/0x410 [ 256.204652][T11135] __sys_sendmsg+0x269/0x350 [ 256.204672][T11135] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.204700][T11135] ? do_sys_openat2+0x17a/0x1d0 [ 256.204739][T11135] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.204762][T11135] ? do_syscall_64+0x100/0x230 [ 256.204785][T11135] ? do_syscall_64+0xb6/0x230 [ 256.204808][T11135] do_syscall_64+0xf3/0x230 [ 256.204828][T11135] ? clear_bhb_loop+0x35/0x90 [ 256.204849][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.204866][T11135] RIP: 0033:0x7fbde658cde9 [ 256.204882][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.204895][T11135] RSP: 002b:00007fbde63f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.204911][T11135] RAX: ffffffffffffffda RBX: 00007fbde67a5fa0 RCX: 00007fbde658cde9 [ 256.204920][T11135] RDX: 0000000000000814 RSI: 00004000000004c0 RDI: 0000000000000004 [ 256.204928][T11135] RBP: 00007fbde63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 256.204936][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.204945][T11135] R13: 0000000000000000 R14: 00007fbde67a5fa0 R15: 00007ffeee69fbf8 [ 256.204968][T11135] [ 256.482131][T10985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.489953][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.516452][T10985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.598786][T10958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.693382][T10985] hsr_slave_0: entered promiscuous mode [ 256.700846][T10985] hsr_slave_1: entered promiscuous mode [ 256.707281][T10985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.714889][T10985] Cannot create hsr debugfs directory [ 256.854818][T11151] netlink: 'syz.1.1130': attribute type 1 has an invalid length. [ 256.874411][T11151] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1130'. [ 256.962487][T10958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.081095][T10958] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.104684][ T9735] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.111962][ T9735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.161687][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.168951][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.365269][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 257.551428][T10985] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.559012][ T5848] Bluetooth: hci3: command tx timeout [ 257.593099][T10985] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.623504][T10985] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.640558][T10985] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.694601][T10958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.778420][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 257.803420][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 257.884472][T10985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.919719][T10958] veth0_vlan: entered promiscuous mode [ 257.968114][T10985] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.997638][T10958] veth1_vlan: entered promiscuous mode [ 258.027562][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.034780][ T9736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.067111][T11192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1144'. [ 258.067988][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.083364][ T9736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.141316][T10958] veth0_macvtap: entered promiscuous mode [ 258.202344][T10958] veth1_macvtap: entered promiscuous mode [ 258.239243][T11200] netlink: 'syz.3.1148': attribute type 21 has an invalid length. [ 258.336523][T10958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.372348][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 258.374646][T11204] lo speed is unknown, defaulting to 1000 [ 258.392437][T10958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.415200][T10985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.442104][T10958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.452143][T10958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.461012][T10958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.492482][T10958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.524326][T11210] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 258.554972][T11210] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1151'. [ 258.692695][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.768957][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.834784][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.856428][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.884449][T11204] lo speed is unknown, defaulting to 1000 [ 258.924347][T10985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.260043][T11204] lo speed is unknown, defaulting to 1000 [ 259.315515][T10985] veth0_vlan: entered promiscuous mode [ 259.350770][T10985] veth1_vlan: entered promiscuous mode [ 259.409813][T11204] lo speed is unknown, defaulting to 1000 [ 259.411527][T10985] veth0_macvtap: entered promiscuous mode [ 259.480509][T10985] veth1_macvtap: entered promiscuous mode [ 259.515469][T11232] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 259.516014][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 259.531009][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.553188][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.576811][T10985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.596472][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.612896][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.632597][T10985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.660064][T10985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.675602][T10985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.695877][T10985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.721054][T10985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.830022][T11236] FAULT_INJECTION: forcing a failure. [ 259.830022][T11236] name failslab, interval 1, probability 0, space 0, times 0 [ 259.864652][T11236] CPU: 1 UID: 0 PID: 11236 Comm: syz.1.1156 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 259.864678][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 259.864688][T11236] Call Trace: [ 259.864695][T11236] [ 259.864702][T11236] dump_stack_lvl+0x241/0x360 [ 259.864729][T11236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.864746][T11236] ? __pfx__printk+0x10/0x10 [ 259.864771][T11236] ? kmem_cache_alloc_noprof+0x48/0x380 [ 259.864789][T11236] ? __pfx___might_resched+0x10/0x10 [ 259.864805][T11236] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.864829][T11236] should_fail_ex+0x40a/0x550 [ 259.864852][T11236] should_failslab+0xac/0x100 [ 259.864870][T11236] ? skb_clone+0x20c/0x390 [ 259.864884][T11236] kmem_cache_alloc_noprof+0x70/0x380 [ 259.864900][T11236] ? __pfx__raw_read_unlock_irqrestore+0x10/0x10 [ 259.864923][T11236] skb_clone+0x20c/0x390 [ 259.864937][T11236] ? netlink_broadcast_filtered+0x6f9/0x12a0 [ 259.864963][T11236] netlink_broadcast_filtered+0x707/0x12a0 [ 259.864998][T11236] netlink_broadcast+0x39/0x50 [ 259.865020][T11236] kobject_uevent_net_broadcast+0x38f/0x580 [ 259.865041][T11236] kobject_uevent_env+0x57d/0x8e0 [ 259.865063][T11236] device_add+0x63b/0xbf0 [ 259.865083][T11236] wakeup_source_sysfs_add+0x1aa/0x270 [ 259.865100][T11236] wakeup_source_register+0x171/0x250 [ 259.865124][T11236] ep_insert+0xd99/0x1ab0 [ 259.865157][T11236] ? __pfx_ep_insert+0x10/0x10 [ 259.865190][T11236] ? bpf_lsm_capable+0x9/0x10 [ 259.865213][T11236] do_epoll_ctl+0x8bc/0xf80 [ 259.865240][T11236] __x64_sys_epoll_ctl+0x161/0x1a0 [ 259.865260][T11236] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 259.865279][T11236] ? do_syscall_64+0x100/0x230 [ 259.865301][T11236] ? do_syscall_64+0xb6/0x230 [ 259.865324][T11236] do_syscall_64+0xf3/0x230 [ 259.865342][T11236] ? clear_bhb_loop+0x35/0x90 [ 259.865363][T11236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.865379][T11236] RIP: 0033:0x7fbde658cde9 [ 259.865393][T11236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.865405][T11236] RSP: 002b:00007fbde63f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 259.865423][T11236] RAX: ffffffffffffffda RBX: 00007fbde67a5fa0 RCX: 00007fbde658cde9 [ 259.865434][T11236] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 259.865442][T11236] RBP: 00007fbde63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 259.865451][T11236] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000002 [ 259.865472][T11236] R13: 0000000000000000 R14: 00007fbde67a5fa0 R15: 00007ffeee69fbf8 [ 259.865495][T11236] [ 259.867760][ T9735] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.320286][ T9735] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.431359][ T9735] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.523188][ T9735] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.544610][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.561689][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.610723][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.619639][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.868145][ T9735] bridge_slave_1: left allmulticast mode [ 260.873952][ T9735] bridge_slave_1: left promiscuous mode [ 260.880774][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.891536][ T9735] bridge_slave_0: left allmulticast mode [ 260.899777][ T9735] bridge_slave_0: left promiscuous mode [ 260.905586][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.266614][T11249] xt_socket: unknown flags 0x8 [ 261.645825][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 262.093990][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.117916][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.127779][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.145678][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.168136][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 262.175562][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.459496][ T9735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.501638][ T9735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.538568][ T9735] bond0 (unregistering): Released all slaves [ 262.651986][T11261] lo speed is unknown, defaulting to 1000 [ 262.873919][T11261] lo speed is unknown, defaulting to 1000 [ 263.099979][T11267] netlink: 'syz.1.1164': attribute type 5 has an invalid length. [ 263.161981][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 263.267376][T11267] : entered promiscuous mode [ 263.382313][ T9735] hsr_slave_0: left promiscuous mode [ 263.431610][ T9735] hsr_slave_1: left promiscuous mode [ 263.447745][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.466542][ T9735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.482631][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.484198][T11280] FAULT_INJECTION: forcing a failure. [ 263.484198][T11280] name failslab, interval 1, probability 0, space 0, times 0 [ 263.509021][ T9735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.530523][T11280] CPU: 1 UID: 0 PID: 11280 Comm: syz.1.1168 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 263.530551][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 263.530562][T11280] Call Trace: [ 263.530568][T11280] [ 263.530577][T11280] dump_stack_lvl+0x241/0x360 [ 263.530602][T11280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.530618][T11280] ? __pfx__printk+0x10/0x10 [ 263.530644][T11280] ? __kmalloc_cache_noprof+0x48/0x390 [ 263.530663][T11280] ? __pfx___might_resched+0x10/0x10 [ 263.530687][T11280] should_fail_ex+0x40a/0x550 [ 263.530710][T11280] should_failslab+0xac/0x100 [ 263.530728][T11280] __kmalloc_cache_noprof+0x70/0x390 [ 263.530744][T11280] ? wakeup_source_register+0x57/0x250 [ 263.530769][T11280] wakeup_source_register+0x57/0x250 [ 263.530793][T11280] ep_insert+0xe94/0x1ab0 [ 263.530828][T11280] ? __pfx_ep_insert+0x10/0x10 [ 263.530860][T11280] ? bpf_lsm_capable+0x9/0x10 [ 263.530886][T11280] do_epoll_ctl+0x8bc/0xf80 [ 263.530915][T11280] __x64_sys_epoll_ctl+0x161/0x1a0 [ 263.530938][T11280] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 263.530959][T11280] ? do_syscall_64+0x100/0x230 [ 263.530984][T11280] ? do_syscall_64+0xb6/0x230 [ 263.531006][T11280] do_syscall_64+0xf3/0x230 [ 263.531026][T11280] ? clear_bhb_loop+0x35/0x90 [ 263.531051][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.531072][T11280] RIP: 0033:0x7fbde658cde9 [ 263.531087][T11280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.531099][T11280] RSP: 002b:00007fbde63f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 263.531118][T11280] RAX: ffffffffffffffda RBX: 00007fbde67a5fa0 RCX: 00007fbde658cde9 [ 263.531139][T11280] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 263.531147][T11280] RBP: 00007fbde63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 263.531157][T11280] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000002 [ 263.531167][T11280] R13: 0000000000000000 R14: 00007fbde67a5fa0 R15: 00007ffeee69fbf8 [ 263.531193][T11280] [ 263.557883][ T9735] veth1_macvtap: left promiscuous mode [ 263.756560][ T9735] veth0_macvtap: left promiscuous mode [ 263.762291][ T9735] veth1_vlan: left promiscuous mode [ 263.768212][ T9735] veth0_vlan: left promiscuous mode [ 263.885245][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.898178][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.907867][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.918064][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.930633][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.939402][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.284301][ T5848] Bluetooth: hci1: command tx timeout [ 264.799975][ T9735] team0 (unregistering): Port device team_slave_1 removed [ 264.873377][ T9735] team0 (unregistering): Port device team_slave_0 removed [ 265.210303][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1173'. [ 265.364095][T11297] ip6t_rpfilter: unknown options [ 265.692324][T11261] chnl_net:caif_netlink_parms(): no params data found [ 265.704926][T11276] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 265.931050][T11282] lo speed is unknown, defaulting to 1000 [ 266.037102][ T5848] Bluetooth: hci3: command tx timeout [ 266.184791][T11282] lo speed is unknown, defaulting to 1000 [ 266.186307][T11261] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.226467][T11312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1176'. [ 266.235618][T11261] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.278041][T11261] bridge_slave_0: entered allmulticast mode [ 266.285077][T11261] bridge_slave_0: entered promiscuous mode [ 266.357837][ T5848] Bluetooth: hci1: command tx timeout [ 266.523317][T11261] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.552544][T11261] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.577031][T11261] bridge_slave_1: entered allmulticast mode [ 266.592081][T11261] bridge_slave_1: entered promiscuous mode [ 266.734219][T11261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.777722][T11261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.895886][T11334] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 266.932555][T11261] team0: Port device team_slave_0 added [ 267.033753][ T9735] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.081853][T11261] team0: Port device team_slave_1 added [ 267.260588][ T9735] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.369903][T11343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 267.478441][ T9735] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.501475][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 267.530147][T11261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.553820][T11261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.603538][T11348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1186'. [ 267.624486][T11261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.665092][T11261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.675606][T11261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.708493][T11261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.751188][T11340] lo speed is unknown, defaulting to 1000 [ 267.808081][ T9735] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.111994][T11340] lo speed is unknown, defaulting to 1000 [ 268.116658][ T5848] Bluetooth: hci3: command tx timeout [ 268.177870][T11261] hsr_slave_0: entered promiscuous mode [ 268.184293][T11261] hsr_slave_1: entered promiscuous mode [ 268.270699][T11282] chnl_net:caif_netlink_parms(): no params data found [ 268.436269][ T5848] Bluetooth: hci1: command tx timeout [ 268.501709][ T9735] bridge_slave_1: left allmulticast mode [ 268.514328][ T9735] bridge_slave_1: left promiscuous mode [ 268.545376][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.577987][ T9735] bridge_slave_0: left allmulticast mode [ 268.599667][ T9735] bridge_slave_0: left promiscuous mode [ 268.618613][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.240097][ T9735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.252166][ T9735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.266015][ T9735] bond0 (unregistering): Released all slaves [ 269.407190][T11383] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1195'. [ 269.446964][T11379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1195'. [ 269.592283][T11282] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.618292][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.625605][T11282] bridge_slave_0: entered allmulticast mode [ 269.649980][T11282] bridge_slave_0: entered promiscuous mode [ 269.696142][T11282] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.703347][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.720436][T11282] bridge_slave_1: entered allmulticast mode [ 269.732319][T11282] bridge_slave_1: entered promiscuous mode [ 269.892146][T11282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.062977][T11282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.149054][T11389] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 270.196301][ T5848] Bluetooth: hci3: command tx timeout [ 270.371915][T11282] team0: Port device team_slave_0 added [ 270.416913][T11282] team0: Port device team_slave_1 added [ 270.508220][T11394] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1199'. [ 270.516389][ T5848] Bluetooth: hci1: command tx timeout [ 270.529013][ T9735] hsr_slave_0: left promiscuous mode [ 270.541676][ T9735] hsr_slave_1: left promiscuous mode [ 270.557609][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.576024][ T9735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.604870][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.631831][ T9735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.696306][ T9735] veth1_macvtap: left promiscuous mode [ 270.714390][ T9735] veth0_macvtap: left promiscuous mode [ 270.725849][ T9735] veth1_vlan: left promiscuous mode [ 270.736612][ T9735] veth0_vlan: left promiscuous mode [ 271.755698][ T9735] team0 (unregistering): Port device team_slave_1 removed [ 271.818310][ T9735] team0 (unregistering): Port device team_slave_0 removed [ 272.276387][ T5848] Bluetooth: hci3: command tx timeout [ 272.581052][T11282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.594908][T11282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.638612][T11282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.663930][T11282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.678568][T11282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.741299][T11282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.930228][T11282] hsr_slave_0: entered promiscuous mode [ 272.957171][T11282] hsr_slave_1: entered promiscuous mode [ 272.973730][T11282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.989737][T11282] Cannot create hsr debugfs directory [ 273.004300][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 273.108834][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 273.228026][T11261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.253879][T11261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.331779][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1206'. [ 273.352772][T11261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.428128][T11261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.648507][T11419] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1207'. [ 273.675176][T11419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1207'. [ 273.739838][T11261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.750878][T11420] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1208'. [ 273.810036][T11261] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.844174][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.851407][ T9738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.877895][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.885085][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.069645][T11282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 274.090461][T11282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 274.113163][T11282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.140924][T11282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.291390][T11282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.359115][T11282] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.401219][ T9735] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.408477][ T9735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.450844][ T9735] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.458077][ T9735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.521283][T11261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.602905][T11434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1211'. [ 274.605125][T11282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.654913][T11436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.738421][T11261] veth0_vlan: entered promiscuous mode [ 274.795882][T11261] veth1_vlan: entered promiscuous mode [ 274.847080][T11441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1213'. [ 274.887251][T11441] ip6t_rpfilter: unknown options [ 274.911775][T11261] veth0_macvtap: entered promiscuous mode [ 274.939373][T11261] veth1_macvtap: entered promiscuous mode [ 275.059720][T11261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.101041][T11282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.119010][T11449] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 275.131910][T11261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.158100][T11261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.177744][T11261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.231035][T11261] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.251881][T11261] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.439770][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.477226][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.573665][ T9736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.600710][ T9736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.693875][T11466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1219'. [ 275.857804][T11471] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1220'. [ 275.864330][T11282] veth0_vlan: entered promiscuous mode [ 275.922246][T11282] veth1_vlan: entered promiscuous mode [ 275.928839][T11467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1220'. [ 276.033733][T11474] dvmrp5: entered allmulticast mode [ 276.084524][T11474] dvmrp5: left allmulticast mode [ 276.194765][T11282] veth0_macvtap: entered promiscuous mode [ 276.239579][T11282] veth1_macvtap: entered promiscuous mode [ 276.289374][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.326018][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.348256][T11282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.375986][T11282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.414866][T11282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.443608][T11486] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 276.448586][T11282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.500672][T11282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.536897][T11282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.555896][T11282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.567186][T11282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.580807][T11491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1226'. [ 276.671532][T11491] ip6t_rpfilter: unknown options [ 276.844301][T11495] trusted_key: syz.2.1227 sent an empty control message without MSG_MORE. [ 276.864698][ T9738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.884899][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 276.892151][ T9738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.989462][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.030760][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.489205][ T9738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.945443][ T9738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.030151][ T9738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.201226][ T9738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.452442][ T9738] bridge_slave_1: left allmulticast mode [ 278.466207][ T9738] bridge_slave_1: left promiscuous mode [ 278.472013][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.498577][ T9738] bridge_slave_0: left allmulticast mode [ 278.504306][ T9738] bridge_slave_0: left promiscuous mode [ 278.528289][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.618132][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.631852][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.640980][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.652202][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.668930][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.676760][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.340565][ T9738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.364082][ T9738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.389000][ T9738] bond0 (unregistering): Released all slaves [ 279.470499][T11542] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1236'. [ 279.475556][T11526] lo speed is unknown, defaulting to 1000 [ 279.484299][T11542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'. [ 279.521735][T11541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1238'. [ 279.640693][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 279.703900][T11548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.980607][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.997361][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.006272][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.014536][T11526] lo speed is unknown, defaulting to 1000 [ 280.015188][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.028341][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'. [ 280.043101][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.051560][T11556] tc_dump_action: action bad kind [ 280.051711][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.320489][T11552] lo speed is unknown, defaulting to 1000 [ 280.418578][ T9738] hsr_slave_0: left promiscuous mode [ 280.448871][ T9738] hsr_slave_1: left promiscuous mode [ 280.460068][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.472304][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.497247][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.511497][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.534951][T11568] FAULT_INJECTION: forcing a failure. [ 280.534951][T11568] name failslab, interval 1, probability 0, space 0, times 0 [ 280.554558][T11568] CPU: 0 UID: 0 PID: 11568 Comm: syz.1.1246 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 280.554587][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 280.554597][T11568] Call Trace: [ 280.554603][T11568] [ 280.554611][T11568] dump_stack_lvl+0x241/0x360 [ 280.554637][T11568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.554653][T11568] ? __pfx__printk+0x10/0x10 [ 280.554677][T11568] ? kmem_cache_alloc_noprof+0x48/0x380 [ 280.554698][T11568] ? __pfx___might_resched+0x10/0x10 [ 280.554723][T11568] should_fail_ex+0x40a/0x550 [ 280.554747][T11568] should_failslab+0xac/0x100 [ 280.554767][T11568] ? __kernfs_new_node+0xd8/0x870 [ 280.554782][T11568] kmem_cache_alloc_noprof+0x70/0x380 [ 280.554804][T11568] __kernfs_new_node+0xd8/0x870 [ 280.554818][T11568] ? mark_lock+0x9a/0x360 [ 280.554845][T11568] ? __lock_acquire+0x1397/0x2100 [ 280.554866][T11568] ? __pfx___kernfs_new_node+0x10/0x10 [ 280.554901][T11568] kernfs_new_node+0x137/0x240 [ 280.554922][T11568] kernfs_create_dir_ns+0x43/0x120 [ 280.554943][T11568] sysfs_create_dir_ns+0x189/0x3a0 [ 280.554969][T11568] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 280.554998][T11568] kobject_add_internal+0x435/0x8d0 [ 280.555029][T11568] kobject_add+0x152/0x220 [ 280.555053][T11568] ? kobject_put+0x43d/0x480 [ 280.555075][T11568] ? __pfx_kobject_add+0x10/0x10 [ 280.555101][T11568] ? get_device_parent+0x25d/0x410 [ 280.555115][T11568] ? device_add+0x318/0xbf0 [ 280.555130][T11568] device_add+0x4e5/0xbf0 [ 280.555147][T11568] ? device_initialize+0x266/0x460 [ 280.555166][T11568] wakeup_source_sysfs_add+0x1aa/0x270 [ 280.555186][T11568] wakeup_source_register+0x171/0x250 [ 280.555208][T11568] ep_insert+0xe94/0x1ab0 [ 280.555243][T11568] ? __pfx_ep_insert+0x10/0x10 [ 280.555274][T11568] ? bpf_lsm_capable+0x9/0x10 [ 280.555300][T11568] do_epoll_ctl+0x8bc/0xf80 [ 280.555328][T11568] __x64_sys_epoll_ctl+0x161/0x1a0 [ 280.555350][T11568] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 280.555372][T11568] ? do_syscall_64+0x100/0x230 [ 280.555396][T11568] ? do_syscall_64+0xb6/0x230 [ 280.555417][T11568] do_syscall_64+0xf3/0x230 [ 280.555448][T11568] ? clear_bhb_loop+0x35/0x90 [ 280.555473][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.555491][T11568] RIP: 0033:0x7fbde658cde9 [ 280.555508][T11568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.555521][T11568] RSP: 002b:00007fbde63f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 280.555541][T11568] RAX: ffffffffffffffda RBX: 00007fbde67a5fa0 RCX: 00007fbde658cde9 [ 280.555552][T11568] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 280.555562][T11568] RBP: 00007fbde63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 280.555573][T11568] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000002 [ 280.555584][T11568] R13: 0000000000000000 R14: 00007fbde67a5fa0 R15: 00007ffeee69fbf8 [ 280.555613][T11568] [ 280.555639][T11568] kobject: kobject_add_internal failed for wakeup13 (error: -12 parent: wakeup) [ 280.561596][ T9738] veth1_macvtap: left promiscuous mode [ 280.874380][ T5848] Bluetooth: hci1: command tx timeout [ 280.881194][ T9738] veth0_macvtap: left promiscuous mode [ 280.888658][ T9738] veth1_vlan: left promiscuous mode [ 280.894004][ T9738] veth0_vlan: left promiscuous mode [ 281.099644][T11572] __nla_validate_parse: 1 callbacks suppressed [ 281.099664][T11572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1248'. [ 281.697772][ T9738] team0 (unregistering): Port device team_slave_1 removed [ 281.764269][ T9738] team0 (unregistering): Port device team_slave_0 removed [ 282.116353][ T5848] Bluetooth: hci3: command tx timeout [ 282.527179][T11552] lo speed is unknown, defaulting to 1000 [ 282.644986][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1250'. [ 282.712280][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1249'. [ 282.768252][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1249'. [ 282.777627][T11577] nbd: device at index 64 is going down [ 282.785515][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 282.812864][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 282.926422][ T5848] Bluetooth: hci1: command tx timeout [ 283.154117][T11526] chnl_net:caif_netlink_parms(): no params data found [ 283.514554][T11526] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.532530][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.544112][T11526] bridge_slave_0: entered allmulticast mode [ 283.557218][T11526] bridge_slave_0: entered promiscuous mode [ 283.614425][T11526] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.628711][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.641683][T11526] bridge_slave_1: entered allmulticast mode [ 283.648926][T11526] bridge_slave_1: entered promiscuous mode [ 283.755770][ T9738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.842606][T11526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.868311][T11601] syzkaller1: entered promiscuous mode [ 283.888858][T11601] syzkaller1: entered allmulticast mode [ 284.071586][ T9738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.114289][T11526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.157870][T11597] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 284.174041][T11597] syzkaller1: linktype set to 0 [ 284.185289][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1257'. [ 284.191552][T11608] lo speed is unknown, defaulting to 1000 [ 284.200889][ T5848] Bluetooth: hci3: command tx timeout [ 284.280258][T11526] team0: Port device team_slave_0 added [ 284.312175][T11620] netlink: 'syz.1.1258': attribute type 10 has an invalid length. [ 284.363869][T11621] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 284.397510][ T9738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.453976][T11552] chnl_net:caif_netlink_parms(): no params data found [ 284.510955][T11620] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.535044][T11620] bond0: (slave team0): Enslaving as an active interface with an up link [ 284.568582][T11526] team0: Port device team_slave_1 added [ 284.621258][ T9738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.658184][T11608] lo speed is unknown, defaulting to 1000 [ 284.806072][T11526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.827240][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.856907][T11526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.914337][T11526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.922548][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.956545][T11526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.996321][ T5848] Bluetooth: hci1: command tx timeout [ 284.998695][T11631] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1260'. [ 285.030483][T11552] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.037812][T11552] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.045167][T11552] bridge_slave_0: entered allmulticast mode [ 285.053307][T11552] bridge_slave_0: entered promiscuous mode [ 285.070252][T11552] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.079335][T11552] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.086800][T11552] bridge_slave_1: entered allmulticast mode [ 285.093871][T11552] bridge_slave_1: entered promiscuous mode [ 285.192595][ T9738] bridge_slave_1: left allmulticast mode [ 285.198762][ T9738] bridge_slave_1: left promiscuous mode [ 285.204675][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.213776][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'. [ 285.214014][ T9738] bridge_slave_0: left allmulticast mode [ 285.229736][ T9738] bridge_slave_0: left promiscuous mode [ 285.235601][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.864537][ T9738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.890342][ T9738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.907483][ T9738] bond0 (unregistering): Released all slaves [ 286.060673][T11526] hsr_slave_0: entered promiscuous mode [ 286.075336][T11526] hsr_slave_1: entered promiscuous mode [ 286.175536][T11552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.219105][T11552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.276431][ T5848] Bluetooth: hci3: command tx timeout [ 286.303394][T11645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1265'. [ 286.492328][T11552] team0: Port device team_slave_0 added [ 286.499355][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 286.525981][T11652] netlink: 'syz.2.1268': attribute type 39 has an invalid length. [ 286.607937][T11552] team0: Port device team_slave_1 added [ 286.885666][T11552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.911881][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.987042][T11552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.038248][T11552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.058021][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.084120][ T5848] Bluetooth: hci1: command tx timeout [ 287.147838][T11552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.176832][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 287.326854][T11661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.382138][ T9738] hsr_slave_0: left promiscuous mode [ 287.404800][ T9738] hsr_slave_1: left promiscuous mode [ 287.411670][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.420080][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.434302][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.442618][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.478654][ T9738] veth1_macvtap: left promiscuous mode [ 287.484295][ T9738] veth0_macvtap: left promiscuous mode [ 287.490773][ T9738] veth1_vlan: left promiscuous mode [ 287.496628][ T9738] veth0_vlan: left promiscuous mode [ 288.363826][ T5848] Bluetooth: hci3: command tx timeout [ 288.391818][ T9738] team0 (unregistering): Port device team_slave_1 removed [ 288.451785][ T9738] team0 (unregistering): Port device team_slave_0 removed [ 289.264428][T11661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.470452][T11661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.506473][T11679] lo speed is unknown, defaulting to 1000 [ 289.531735][T11552] hsr_slave_0: entered promiscuous mode [ 289.544707][T11552] hsr_slave_1: entered promiscuous mode [ 289.581713][T11552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.599813][T11552] Cannot create hsr debugfs directory [ 289.627224][T11688] ip6gretap1: entered promiscuous mode [ 289.633093][T11688] ip6gretap1: entered allmulticast mode [ 289.736038][T11690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1277'. [ 289.749910][T11661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.797069][T11679] lo speed is unknown, defaulting to 1000 [ 290.044324][T11661] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.100382][T11661] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.173188][T11661] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.207097][T11661] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.560022][T11526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 291.266571][T11526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 291.315457][T11526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 291.343329][T11526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 291.706830][T11526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.766563][T11526] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.820900][T11552] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.882886][T11552] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.909605][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.916830][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.964626][T11552] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.981182][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.988401][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.030415][T11552] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 292.089822][T11526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.283324][T11552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.344956][T11552] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.389648][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.396865][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.498904][ T9735] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.506053][ T9735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.581174][T11552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.606943][T11552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.703360][T11526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.869446][T11526] veth0_vlan: entered promiscuous mode [ 292.975041][T11526] veth1_vlan: entered promiscuous mode [ 293.153194][T11552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.194572][T11526] veth0_macvtap: entered promiscuous mode [ 293.261578][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 293.272599][T11526] veth1_macvtap: entered promiscuous mode [ 293.342459][T11526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.374017][T11526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.402319][T11526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.428388][T11526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.452719][T11526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.476890][T11526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.500794][T11740] xt_SECMARK: invalid mode: 0 [ 293.732547][ T9736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.755100][ T9736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.765368][T11552] veth0_vlan: entered promiscuous mode [ 293.848825][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.872440][T11552] veth1_vlan: entered promiscuous mode [ 293.886382][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.980576][T11552] veth0_macvtap: entered promiscuous mode [ 294.015356][T11552] veth1_macvtap: entered promiscuous mode [ 294.092976][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.119364][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.144910][T11552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.223393][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.247708][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.270415][T11552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.273253][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 294.285259][T11552] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.298263][T11552] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.315259][T11552] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.324797][T11758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1293'. [ 294.338117][T11552] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.555519][T11767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1293'. [ 294.591933][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.627851][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.691067][ T9739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.713594][ T9739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.951679][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.051579][T11775] lo speed is unknown, defaulting to 1000 [ 295.305722][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.412457][T11775] lo speed is unknown, defaulting to 1000 [ 295.474446][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.724531][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.812013][T11777] tun0: tun_chr_ioctl cmd 21731 [ 296.088239][ T11] bridge_slave_1: left allmulticast mode [ 296.093955][ T11] bridge_slave_1: left promiscuous mode [ 296.107477][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.133035][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.135972][ T11] bridge_slave_0: left allmulticast mode [ 296.151165][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.160235][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.162988][ T11] bridge_slave_0: left promiscuous mode [ 296.168380][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.181410][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.182092][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.196771][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.873010][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.890653][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.904471][ T11] bond0 (unregistering): Released all slaves [ 296.964763][T11786] lo speed is unknown, defaulting to 1000 [ 297.060810][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1302'. [ 297.297179][T11798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1304'. [ 297.346020][T11786] lo speed is unknown, defaulting to 1000 [ 297.496465][T11805] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1306'. [ 297.615547][T11805] netlink: 'syz.2.1306': attribute type 1 has an invalid length. [ 297.646237][T11805] netlink: 'syz.2.1306': attribute type 1 has an invalid length. [ 297.661072][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1305'. [ 297.677626][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1305'. [ 297.707436][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.734338][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.743201][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.770524][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.789678][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 297.798960][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.862898][T11816] vlan5: entered promiscuous mode [ 297.903112][T11816] bridge0: entered promiscuous mode [ 297.923611][T11816] vlan5: entered allmulticast mode [ 297.953558][T11816] bridge0: entered allmulticast mode [ 298.053197][ T11] hsr_slave_0: left promiscuous mode [ 298.069020][ T11] hsr_slave_1: left promiscuous mode [ 298.075014][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.090013][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.124372][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.140825][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.194920][ T11] veth1_macvtap: left promiscuous mode [ 298.210621][ T11] veth0_macvtap: left promiscuous mode [ 298.216463][ T11] veth1_vlan: left promiscuous mode [ 298.221820][ T11] veth0_vlan: left promiscuous mode [ 298.278261][ T5841] Bluetooth: hci1: command tx timeout [ 298.295776][T11830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1313'. [ 299.051165][ T11] team0 (unregistering): Port device team_slave_1 removed [ 299.123718][ T11] team0 (unregistering): Port device team_slave_0 removed [ 299.877439][ T5841] Bluetooth: hci3: command tx timeout [ 299.970292][T11810] lo speed is unknown, defaulting to 1000 [ 300.083865][T11786] chnl_net:caif_netlink_parms(): no params data found [ 300.364437][ T5841] Bluetooth: hci1: command tx timeout [ 300.521428][T11810] lo speed is unknown, defaulting to 1000 [ 300.536758][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.558702][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.597782][T11786] bridge_slave_0: entered allmulticast mode [ 300.619362][T11786] bridge_slave_0: entered promiscuous mode [ 300.640056][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.666240][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.688458][T11786] bridge_slave_1: entered allmulticast mode [ 300.705884][T11786] bridge_slave_1: entered promiscuous mode [ 300.867976][T11786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.909097][T11786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.936726][T11866] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1323'. [ 301.280609][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.340704][T11786] team0: Port device team_slave_0 added [ 301.376637][T11786] team0: Port device team_slave_1 added [ 301.704322][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.761256][T11786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.776709][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.848875][T11786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.960081][ T5841] Bluetooth: hci3: command tx timeout [ 302.002355][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.058982][T11786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.076300][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.137722][T11895] netlink: 'syz.2.1329': attribute type 10 has an invalid length. [ 302.148634][T11786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.209060][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.294064][T11810] chnl_net:caif_netlink_parms(): no params data found [ 302.396031][T11903] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1331'. [ 302.406037][T11903] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1331'. [ 302.416705][T11903] netlink: 'syz.3.1331': attribute type 5 has an invalid length. [ 302.432313][T11903] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1331'. [ 302.436328][ T5841] Bluetooth: hci1: command tx timeout [ 302.621069][T11915] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1334'. [ 302.648280][T11786] hsr_slave_0: entered promiscuous mode [ 302.655259][T11786] hsr_slave_1: entered promiscuous mode [ 302.687915][T11915] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1334'. [ 302.808353][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.827383][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.848974][T11810] bridge_slave_0: entered allmulticast mode [ 302.907661][T11810] bridge_slave_0: entered promiscuous mode [ 302.951699][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.972868][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.986944][T11810] bridge_slave_1: entered allmulticast mode [ 302.994456][T11810] bridge_slave_1: entered promiscuous mode [ 303.031560][T11920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.076669][ T11] bridge_slave_1: left allmulticast mode [ 303.091204][ T11] bridge_slave_1: left promiscuous mode [ 303.104236][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.130497][ T11] bridge_slave_0: left allmulticast mode [ 303.136424][ T11] bridge_slave_0: left promiscuous mode [ 303.142680][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.294943][T11934] netlink: 'syz.1.1339': attribute type 10 has an invalid length. [ 303.303303][T11934] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1339'. [ 303.639825][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.654451][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.665291][ T11] bond0 (unregistering): Released all slaves [ 303.691295][T11934] netlink: 'syz.1.1339': attribute type 30 has an invalid length. [ 303.763004][T11810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.782233][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.952491][T11810] team0: Port device team_slave_0 added [ 304.021574][T11810] team0: Port device team_slave_1 added [ 304.036590][ T5841] Bluetooth: hci3: command tx timeout [ 304.201235][T11810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.227240][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.281010][T11810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.295156][T11810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.302272][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.330170][T11810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.516483][ T5841] Bluetooth: hci1: command tx timeout [ 304.523352][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'. [ 304.684340][T11956] smc: removing net device vxcan1 with user defined pnetid SYZ0 [ 304.720254][ T11] hsr_slave_0: left promiscuous mode [ 304.726637][ T11] hsr_slave_1: left promiscuous mode [ 304.732538][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.741536][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.751832][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.762256][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.799067][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1353'. [ 304.799591][ T11] veth1_macvtap: left promiscuous mode [ 304.813853][ T11] veth0_macvtap: left promiscuous mode [ 304.819633][ T11] veth1_vlan: left promiscuous mode [ 304.824968][ T11] veth0_vlan: left promiscuous mode [ 304.865762][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1353'. [ 304.875616][T11971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1353'. [ 305.409887][ T11] team0 (unregistering): Port device team_slave_1 removed [ 305.464528][ T11] team0 (unregistering): Port device team_slave_0 removed [ 306.044622][T11810] hsr_slave_0: entered promiscuous mode [ 306.056065][T11810] hsr_slave_1: entered promiscuous mode [ 306.062545][T11810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.070599][T11810] Cannot create hsr debugfs directory [ 306.087250][T11963] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 306.105771][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1353'. [ 306.117256][ T5841] Bluetooth: hci3: command tx timeout [ 306.541734][T11984] bridge3: entered promiscuous mode [ 306.547453][T11984] bridge3: entered allmulticast mode [ 306.567391][T11984] team0: Port device bridge3 added [ 306.574653][T11786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 306.588255][T11786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.646902][T11786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 306.668706][T11989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1359'. [ 306.693897][T11786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 306.858294][T11786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.911651][T11786] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.925173][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.932436][ T9736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.961752][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.968939][ T9736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.169319][T11810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.198603][T11810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.224121][T11810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.247497][T11810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.399849][T11786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.463199][T11810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.504878][T11810] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.737723][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.745218][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.802911][T11786] veth0_vlan: entered promiscuous mode [ 307.812394][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.819663][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.853117][T11786] veth1_vlan: entered promiscuous mode [ 307.991533][T11810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.044546][T12035] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1370'. [ 308.052696][T11786] veth0_macvtap: entered promiscuous mode [ 308.111098][T11786] veth1_macvtap: entered promiscuous mode [ 308.118786][T12042] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1371'. [ 308.146214][T12042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1371'. [ 308.154549][T11786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.202723][T12042] vlan6: entered promiscuous mode [ 308.225671][T12042] macvtap0: entered promiscuous mode [ 308.259602][T11786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.331053][T11786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.340838][T11786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.354189][T11786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.364908][T11786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.421711][T12052] __nla_validate_parse: 3 callbacks suppressed [ 308.421730][T12052] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1374'. [ 308.444590][T12052] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1374'. [ 308.457917][T12052] netlink: 'syz.3.1374': attribute type 6 has an invalid length. [ 308.475111][T11810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.477829][T12052] netlink: 'syz.3.1374': attribute type 5 has an invalid length. [ 308.490625][T12052] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1374'. [ 308.598483][ T9736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.619998][ T9736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.678083][ T5841] Bluetooth: hci3: command tx timeout [ 308.703503][ T9735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.713645][ T9735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.780990][T12065] openvswitch: netlink: IP tunnel dst address not specified [ 308.921437][T12079] syzkaller1: entered promiscuous mode [ 308.935005][T12079] syzkaller1: entered allmulticast mode [ 309.143835][T11810] veth0_vlan: entered promiscuous mode [ 309.168555][T11810] veth1_vlan: entered promiscuous mode [ 309.225954][T12086] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1383'. [ 309.253287][T11810] veth0_macvtap: entered promiscuous mode [ 309.277772][T11810] veth1_macvtap: entered promiscuous mode [ 309.299335][T12088] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 309.320426][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.340072][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.355122][T11810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.372937][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.389804][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.407076][T11810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.434305][T11810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.449780][T11810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.461145][T11810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.474085][T11810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.611507][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.638890][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.705146][ T9736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.727291][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'. [ 309.751721][ T9736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.893906][T12109] FAULT_INJECTION: forcing a failure. [ 309.893906][T12109] name failslab, interval 1, probability 0, space 0, times 0 [ 309.908050][T12109] CPU: 0 UID: 0 PID: 12109 Comm: syz.3.1389 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 309.908076][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 309.908099][T12109] Call Trace: [ 309.908106][T12109] [ 309.908113][T12109] dump_stack_lvl+0x241/0x360 [ 309.908138][T12109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.908156][T12109] ? __pfx__printk+0x10/0x10 [ 309.908182][T12109] ? __kmalloc_noprof+0xb5/0x4c0 [ 309.908201][T12109] ? __pfx___might_resched+0x10/0x10 [ 309.908226][T12109] should_fail_ex+0x40a/0x550 [ 309.908250][T12109] should_failslab+0xac/0x100 [ 309.908266][T12109] __kmalloc_noprof+0xdd/0x4c0 [ 309.908281][T12109] ? kobject_get_path+0xb8/0x230 [ 309.908306][T12109] kobject_get_path+0xb8/0x230 [ 309.908330][T12109] kobject_uevent_env+0x2a5/0x8e0 [ 309.908344][T12109] ? bus_add_device+0xde/0x460 [ 309.908373][T12109] device_add+0x63b/0xbf0 [ 309.908394][T12109] wakeup_source_sysfs_add+0x1aa/0x270 [ 309.908411][T12109] wakeup_source_register+0x171/0x250 [ 309.908447][T12109] ep_insert+0xe94/0x1ab0 [ 309.908480][T12109] ? __pfx_ep_insert+0x10/0x10 [ 309.908507][T12109] ? bpf_lsm_capable+0x9/0x10 [ 309.908531][T12109] do_epoll_ctl+0x8bc/0xf80 [ 309.908557][T12109] __x64_sys_epoll_ctl+0x161/0x1a0 [ 309.908579][T12109] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 309.908599][T12109] ? do_syscall_64+0x100/0x230 [ 309.908622][T12109] ? do_syscall_64+0xb6/0x230 [ 309.908644][T12109] do_syscall_64+0xf3/0x230 [ 309.908663][T12109] ? clear_bhb_loop+0x35/0x90 [ 309.908684][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.908703][T12109] RIP: 0033:0x7f23bab8cde9 [ 309.908716][T12109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.908729][T12109] RSP: 002b:00007f23b89f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 309.908746][T12109] RAX: ffffffffffffffda RBX: 00007f23bada5fa0 RCX: 00007f23bab8cde9 [ 309.908758][T12109] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 309.908768][T12109] RBP: 00007f23b89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 309.908778][T12109] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000002 [ 309.908789][T12109] R13: 0000000000000000 R14: 00007f23bada5fa0 R15: 00007ffebf81dab8 [ 309.908815][T12109] [ 310.254951][T12116] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1392'. [ 310.450128][T12126] delete_channel: no stack [ 310.462678][T12131] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1397'. [ 310.612920][T12137] netlink: 'syz.3.1400': attribute type 32 has an invalid length. [ 310.613997][T12138] IPVS: stopping backup sync thread 7335 ... [ 310.627225][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.674394][T12138] [ 310.676774][T12138] ====================================================== [ 310.683806][T12138] WARNING: possible circular locking dependency detected [ 310.690837][T12138] 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 Not tainted [ 310.697940][T12138] ------------------------------------------------------ [ 310.704950][T12138] syz.3.1400/12138 is trying to acquire lock: [ 310.711003][T12138] ffffffff8fcc0108 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x81/0x280 [ 310.720326][T12138] [ 310.720326][T12138] but task is already holding lock: [ 310.727684][T12138] ffff88804d482d28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 310.737780][T12138] [ 310.737780][T12138] which lock already depends on the new lock. [ 310.737780][T12138] [ 310.748176][T12138] [ 310.748176][T12138] the existing dependency chain (in reverse order) is: [ 310.757179][T12138] [ 310.757179][T12138] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 310.765777][T12138] lock_acquire+0x1ed/0x550 [ 310.770815][T12138] __mutex_lock+0x19c/0x1010 [ 310.776034][T12138] smc_switch_to_fallback+0x35/0xd90 [ 310.781841][T12138] smc_sendmsg+0x11f/0x530 [ 310.786778][T12138] __sock_sendmsg+0x221/0x270 [ 310.791972][T12138] __sys_sendto+0x363/0x4c0 [ 310.796996][T12138] __x64_sys_sendto+0xde/0x100 [ 310.802332][T12138] do_syscall_64+0xf3/0x230 [ 310.807379][T12138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.813812][T12138] [ 310.813812][T12138] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 310.821473][T12138] lock_acquire+0x1ed/0x550 [ 310.826505][T12138] lock_sock_nested+0x48/0x100 [ 310.831836][T12138] do_ip_setsockopt+0x1a2d/0x3cd0 [ 310.837380][T12138] ip_setsockopt+0x63/0x100 [ 310.842406][T12138] do_sock_setsockopt+0x3af/0x720 [ 310.847955][T12138] __x64_sys_setsockopt+0x1ee/0x280 [ 310.853705][T12138] do_syscall_64+0xf3/0x230 [ 310.858731][T12138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.865174][T12138] [ 310.865174][T12138] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 310.872398][T12138] validate_chain+0x18ef/0x5920 [ 310.877781][T12138] __lock_acquire+0x1397/0x2100 [ 310.883170][T12138] lock_acquire+0x1ed/0x550 [ 310.888226][T12138] __mutex_lock+0x19c/0x1010 [ 310.893357][T12138] ip_mc_drop_socket+0x81/0x280 [ 310.898730][T12138] inet_release+0x96/0x200 [ 310.903660][T12138] sock_release+0x82/0x150 [ 310.908633][T12138] stop_sync_thread+0x4e6/0x5e0 [ 310.914049][T12138] do_ip_vs_set_ctl+0x47b/0x13d0 [ 310.919509][T12138] nf_setsockopt+0x295/0x2c0 [ 310.924621][T12138] smc_setsockopt+0x275/0xe50 [ 310.929817][T12138] do_sock_setsockopt+0x3af/0x720 [ 310.935383][T12138] __x64_sys_setsockopt+0x1ee/0x280 [ 310.941115][T12138] do_syscall_64+0xf3/0x230 [ 310.946141][T12138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.952664][T12138] [ 310.952664][T12138] other info that might help us debug this: [ 310.952664][T12138] [ 310.962896][T12138] Chain exists of: [ 310.962896][T12138] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 310.962896][T12138] [ 310.976459][T12138] Possible unsafe locking scenario: [ 310.976459][T12138] [ 310.983904][T12138] CPU0 CPU1 [ 310.989264][T12138] ---- ---- [ 310.994883][T12138] lock(&smc->clcsock_release_lock); [ 311.000255][T12138] lock(sk_lock-AF_INET); [ 311.007209][T12138] lock(&smc->clcsock_release_lock); [ 311.015113][T12138] lock(rtnl_mutex); [ 311.019096][T12138] [ 311.019096][T12138] *** DEADLOCK *** [ 311.019096][T12138] [ 311.027247][T12138] 1 lock held by syz.3.1400/12138: [ 311.032351][T12138] #0: ffff88804d482d28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 311.042885][T12138] [ 311.042885][T12138] stack backtrace: [ 311.048770][T12138] CPU: 0 UID: 0 PID: 12138 Comm: syz.3.1400 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 311.048790][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 311.048798][T12138] Call Trace: [ 311.048805][T12138] [ 311.048812][T12138] dump_stack_lvl+0x241/0x360 [ 311.048831][T12138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.048844][T12138] ? __pfx__printk+0x10/0x10 [ 311.048866][T12138] print_circular_bug+0x13a/0x1b0 [ 311.048881][T12138] check_noncircular+0x36a/0x4a0 [ 311.048895][T12138] ? __pfx_check_noncircular+0x10/0x10 [ 311.048907][T12138] ? lockdep_lock+0x123/0x2b0 [ 311.048923][T12138] ? kasan_save_stack+0x4f/0x60 [ 311.048939][T12138] ? kasan_save_stack+0x3f/0x60 [ 311.048953][T12138] ? kasan_record_aux_stack+0xaa/0xc0 [ 311.048970][T12138] validate_chain+0x18ef/0x5920 [ 311.048981][T12138] ? __x64_sys_setsockopt+0x1ee/0x280 [ 311.048999][T12138] ? do_syscall_64+0xf3/0x230 [ 311.049016][T12138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.049040][T12138] ? __pfx_validate_chain+0x10/0x10 [ 311.049051][T12138] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 311.049067][T12138] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 311.049085][T12138] ? lockdep_hardirqs_on+0x99/0x150 [ 311.049105][T12138] ? put_task_stack+0x146/0x230 [ 311.049119][T12138] ? mark_lock+0x9a/0x360 [ 311.049136][T12138] __lock_acquire+0x1397/0x2100 [ 311.049157][T12138] lock_acquire+0x1ed/0x550 [ 311.049172][T12138] ? ip_mc_drop_socket+0x81/0x280 [ 311.049190][T12138] ? __pfx_lock_acquire+0x10/0x10 [ 311.049207][T12138] ? __pfx___might_resched+0x10/0x10 [ 311.049225][T12138] __mutex_lock+0x19c/0x1010 [ 311.049241][T12138] ? ip_mc_drop_socket+0x81/0x280 [ 311.049257][T12138] ? __pfx_lock_release+0x10/0x10 [ 311.049273][T12138] ? lockdep_hardirqs_on+0x99/0x150 [ 311.049288][T12138] ? ip_mc_drop_socket+0x81/0x280 [ 311.049309][T12138] ? wait_for_completion+0x555/0x620 [ 311.049323][T12138] ? __pfx___mutex_lock+0x10/0x10 [ 311.049338][T12138] ? try_to_wake_up+0x9c3/0x1470 [ 311.049357][T12138] ? _printk+0xd5/0x120 [ 311.049376][T12138] ip_mc_drop_socket+0x81/0x280 [ 311.049393][T12138] inet_release+0x96/0x200 [ 311.049406][T12138] sock_release+0x82/0x150 [ 311.049421][T12138] stop_sync_thread+0x4e6/0x5e0 [ 311.049439][T12138] ? __might_fault+0xc6/0x120 [ 311.049456][T12138] do_ip_vs_set_ctl+0x47b/0x13d0 [ 311.049470][T12138] ? nf_setsockopt+0x240/0x2c0 [ 311.049482][T12138] ? do_ip_setsockopt+0x1f44/0x3cd0 [ 311.049497][T12138] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 311.049512][T12138] ? __mutex_lock+0x397/0x1010 [ 311.049529][T12138] ? __mutex_unlock_slowpath+0x227/0x800 [ 311.049548][T12138] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.049566][T12138] ? __pfx___mutex_lock+0x10/0x10 [ 311.049585][T12138] nf_setsockopt+0x295/0x2c0 [ 311.049598][T12138] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 311.049616][T12138] smc_setsockopt+0x275/0xe50 [ 311.049635][T12138] ? __pfx_smc_setsockopt+0x10/0x10 [ 311.049651][T12138] ? aa_sock_opt_perm+0x79/0x120 [ 311.049670][T12138] ? __pfx_smc_setsockopt+0x10/0x10 [ 311.049685][T12138] do_sock_setsockopt+0x3af/0x720 [ 311.049705][T12138] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 311.049724][T12138] ? __fget_files+0x395/0x410 [ 311.049737][T12138] ? __fget_files+0x2a/0x410 [ 311.049752][T12138] __x64_sys_setsockopt+0x1ee/0x280 [ 311.049771][T12138] do_syscall_64+0xf3/0x230 [ 311.049787][T12138] ? clear_bhb_loop+0x35/0x90 [ 311.049805][T12138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.049822][T12138] RIP: 0033:0x7f23bab8cde9 [ 311.049835][T12138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.049846][T12138] RSP: 002b:00007f23b89d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.049861][T12138] RAX: ffffffffffffffda RBX: 00007f23bada6080 RCX: 00007f23bab8cde9 [ 311.049870][T12138] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000006 [ 311.049878][T12138] RBP: 00007f23bac0e2a0 R08: 0000000000000018 R09: 0000000000000000 [ 311.049887][T12138] R10: 0000400000008d00 R11: 0000000000000246 R12: 0000000000000000 [ 311.049895][T12138] R13: 0000000000000000 R14: 00007f23bada6080 R15: 00007ffebf81dab8 [ 311.049909][T12138] SYZFAIL: failed to send rpc fd=3 want=432 sent=0 n=-1 (errno 32: Broken pipe) [ 311.762058][T12143] FAULT_INJECTION: forcing a failure. [ 311.762058][T12143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.790509][T12143] CPU: 1 UID: 0 PID: 12143 Comm: syz.2.1402 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 311.790538][T12143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 311.790546][T12143] Call Trace: [ 311.790552][T12143] [ 311.790558][T12143] dump_stack_lvl+0x241/0x360 [ 311.790580][T12143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.790595][T12143] ? __pfx__printk+0x10/0x10 [ 311.790618][T12143] ? snprintf+0xda/0x120 [ 311.790636][T12143] should_fail_ex+0x40a/0x550 [ 311.790657][T12143] _copy_to_user+0x31/0xb0 [ 311.790673][T12143] simple_read_from_buffer+0xca/0x150 [ 311.790698][T12143] proc_fail_nth_read+0x1e9/0x250 [ 311.790720][T12143] ? common_file_perm+0x1a6/0x210 [ 311.790741][T12143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.790765][T12143] ? rw_verify_area+0x243/0x630 [ 311.790784][T12143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.790807][T12143] vfs_read+0x1f8/0xb40 [ 311.790826][T12143] ? fdget_pos+0x254/0x320 [ 311.790842][T12143] ? __pfx___mutex_lock+0x10/0x10 [ 311.790863][T12143] ? __pfx_vfs_read+0x10/0x10 [ 311.790883][T12143] ? __fget_files+0x2a/0x410 [ 311.790900][T12143] ? __fget_files+0x395/0x410 [ 311.790915][T12143] ? __fget_files+0x2a/0x410 [ 311.790935][T12143] ksys_read+0x18f/0x2b0 [ 311.790955][T12143] ? __pfx_ksys_read+0x10/0x10 [ 311.790973][T12143] ? rcu_is_watching+0x15/0xb0 [ 311.790991][T12143] ? rcu_is_watching+0x15/0xb0 [ 311.791007][T12143] do_syscall_64+0xf3/0x230 [ 311.791026][T12143] ? clear_bhb_loop+0x35/0x90 [ 311.791049][T12143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.791068][T12143] RIP: 0033:0x7f20fdf8b7fc [ 311.791083][T12143] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 311.791097][T12143] RSP: 002b:00007f20fed3a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.791116][T12143] RAX: ffffffffffffffda RBX: 00007f20fe1a5fa0 RCX: 00007f20fdf8b7fc [ 311.791128][T12143] RDX: 000000000000000f RSI: 00007f20fed3a0a0 RDI: 0000000000000005 [ 311.791138][T12143] RBP: 00007f20fed3a090 R08: 0000000000000000 R09: 0000000000000000 [ 311.791149][T12143] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000002 [ 311.791159][T12143] R13: 0000000000000000 R14: 00007f20fe1a5fa0 R15: 00007fff5e811fc8 [ 311.791178][T12143] [ 311.815619][T12144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1401'. [ 312.280860][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.369643][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.420496][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.473169][ T69] bridge_slave_1: left allmulticast mode [ 312.479063][ T69] bridge_slave_1: left promiscuous mode [ 312.484713][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.492898][ T69] bridge_slave_0: left allmulticast mode [ 312.499087][ T69] bridge_slave_0: left promiscuous mode [ 312.504775][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.582144][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.592550][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.602611][ T69] bond0 (unregistering): Released all slaves [ 312.796487][ T69] hsr_slave_0: left promiscuous mode [ 312.802406][ T69] hsr_slave_1: left promiscuous mode [ 312.808476][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.815915][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.823730][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.831326][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.855893][ T69] veth1_macvtap: left promiscuous mode [ 312.861676][ T69] veth0_macvtap: left promiscuous mode [ 312.867433][ T69] veth1_vlan: left promiscuous mode [ 312.872702][ T69] veth0_vlan: left promiscuous mode [ 313.015623][ T69] team0 (unregistering): Port device team_slave_1 removed [ 313.043622][ T69] team0 (unregistering): Port device team_slave_0 removed [ 313.340103][ T69] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.350011][ T69] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.360012][ T69] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.388773][ T69] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.399230][ T69] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.409230][ T69] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.458923][ T69] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.468783][ T69] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.478760][ T69] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.561523][ T69] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.571521][ T69] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.581979][ T69] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.641365][ T69] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.670739][ T69] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.709864][ T69] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.769553][ T69] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.841593][ T69] bridge_slave_1: left allmulticast mode [ 313.847461][ T69] bridge_slave_1: left promiscuous mode [ 313.853171][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.861316][ T69] bridge_slave_0: left allmulticast mode [ 313.867379][ T69] bridge_slave_0: left promiscuous mode [ 313.873051][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.001898][ T69] dvmrp8 (unregistering): left allmulticast mode [ 314.043669][ T69] bridge0 (unregistering): left allmulticast mode [ 314.050227][ T69] bridge0 (unregistering): left promiscuous mode [ 314.506356][ T69] bond0 (unregistering): Released all slaves [ 314.662050][ T69] bond1 (unregistering): Released all slaves [ 314.670457][ T69] bond2 (unregistering): Released all slaves [ 314.684683][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.694703][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.707512][ T69] bond0 (unregistering): Released all slaves [ 315.193351][ T69] hsr_slave_0: left promiscuous mode [ 315.199183][ T69] hsr_slave_1: left promiscuous mode [ 315.204903][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.212807][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.220471][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.230267][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.240731][ T69] macvtap0: left promiscuous mode [ 315.245944][ T69] dummy0: left allmulticast mode [ 315.251021][ T69] dummy0: left promiscuous mode [ 315.256064][ T69] team0: left allmulticast mode [ 315.261032][ T69] team0: left promiscuous mode [ 315.266020][ T69] veth0_macvtap: left promiscuous mode [ 315.271659][ T69] veth1_vlan: left promiscuous mode [ 315.277016][ T69] veth0_vlan: left promiscuous mode [ 315.282807][ T69] veth1_macvtap: left promiscuous mode [ 315.288425][ T69] veth0_macvtap: left promiscuous mode [ 315.293974][ T69] veth1_vlan: left promiscuous mode [ 315.299310][ T69] veth0_vlan: left promiscuous mode [ 315.930475][ T69] team0 (unregistering): Port device team_slave_1 removed [ 315.957082][ T69] team0 (unregistering): Port device team_slave_0 removed [ 316.030802][ T46] infiniband syz1: ib_query_port failed (-19) [ 316.349516][ T69] IPVS: stop unused estimator thread 0... [ 317.558272][ T1296] ieee802154 phy1 wpan1: encryption failed: -22