last executing test programs: 2m17.767174272s ago: executing program 2 (id=2625): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2d941193, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1c, 0x4, 0x5, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @jmp={0x5, 0x1, 0x9, 0xb, 0x3, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000000140)='GPL\x00', 0x2, 0xa2, &(0x7f0000000180)=""/162, 0x41100, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440)=[r4, r5], &(0x7f0000000480)=[{0x5, 0x3, 0x8, 0x3}, {0x0, 0x4, 0xf, 0x8}], 0x10, 0x8, @void, @value}, 0x94) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 2m17.533746436s ago: executing program 2 (id=2631): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073119f000000000003000000000000009574000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0xa, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x59, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback=r3, r0, 0x2, 0x30, 0x0, @void, @void, @void, @value=r4, r2}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009003000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) close(0x3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x15, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6}, [@exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000840)='syzkaller\x00', 0x8, 0x95, &(0x7f0000000880)=""/149, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x7, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1], 0x0, 0x10, 0x25c9, @void, @value}, 0x94) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r7, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@map=r1, r6, 0x22, 0x1c, 0x0, @void, @value=r1, @void, @void, r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x37, 0x3a, &(0x7f0000000000)="d4cb6070b8ee3409f04eb4a0e427b68b80528c5ac45ef6c65e38353ae9876f5ed21c7084b80a99f2e4389c661c9fb1204b527a6633f6b5", &(0x7f0000000080)=""/58, 0x8, 0x0, 0x55, 0x9a, &(0x7f00000000c0)="d42dce290ee04a6ae539a4ec060c4bfb271832d8d038c0f2f6cdfaabbd791e8aea580d0d678d1dc3821434d99d3c7ce6eb3fab2fe495ff429d33663b9032fea340f9f31775be6d7d082ea440d4f6e59883a134aae6", &(0x7f0000000140)="19f8cb8806e19636c9bc1bbcea5f22c0fa44627ce935bb38cc332f001915d6404c3ac9078986d581802b8a085460d861a0ea52635d094c651f22712c0d9a0d6756e1d64a7364d3aa5aaa7c051701cecc433bcdb353c16163971e8096bf3788e9a3ef0c5b5d808cd49987ef76e7bac992e29978969ac99e6e431a48d3e21dd31b8dfd6e1d93b0a3884628ce2d84ef6428700ca27344d3b5a07d81", 0x1, 0x0, 0x1}, 0x50) 2m17.305548381s ago: executing program 2 (id=2636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}]}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 1m56.773264457s ago: executing program 2 (id=2636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}]}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 1m50.367480714s ago: executing program 3 (id=2844): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'pimreg\x00', {'veth1\x00'}, 0x7fff}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x400000000640, 0x0, 0x0, 0x400000000670, 0x4000000006a0], 0x0, 0x0, &(0x7f0000000640)=[{0x20, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 1m50.31380701s ago: executing program 3 (id=2845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) r4 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000500)={0x0, 0x20, 0x30, 0x2, 0x4}, &(0x7f00000005c0)=0x18) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0xf5, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x20, 0x1, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc, 0x6, 0x0, @multicast2, @loopback}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) 1m50.139464215s ago: executing program 3 (id=2848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000d481c0578405999006572d0d9ce545d9296c814628369bf83ca21f16fa4e25baebbbb7d1cc671f9b05cf0cc6cb685e17c505421c95b00005f4482a0278d1f45d4", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newtaction={0x14}, 0x14}}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001400010000000000000000002b"], 0x14}}, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x2c) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0200"], 0x10) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="627afd32fb8ef4c57358eaf229615adeb265477a0715a43172288f67a477af41c16913e6cd4dbfe92c601cd5023240229069dc368946d07dee7b79e0655800000000c3cb6caa6af3fa9b78014f639f47db24fa4a47fce66a5203073da777d514470136a313e820b5b105424382744af9d947afcca4dee8e6362f06df3bb4349a108977529897b3def5a0e4c37dcc0618ed05f75220eb7a6e63df2c5e2d7647c9b462574a2af52add11786be8b5721bdf9ccbe645aa8211f1cacb32639146d3d18336aa6c85b91ad699112209b0e3cc9eb7197803e690301a8b6adc98d27e", @ANYRES64=0x0], 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "0000001500"}}}]}, 0x48}}, 0x0) sendmsg$alg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)="5254e17dfe4a9640b350e535616178d66692b8836e4c00e72cdc5f4ff74db2a2e486dbb103801c271b91d58de10e77", 0x2f}, {&(0x7f00000001c0)="403da639682476242f9031afb9c3e9de6b29d80011592cbb2cc14e63352c1097355d375d1a942e751240e92cae76c66d198819f1d9b4936bed1716309ae00aa1a9bba2858cd776c6c0ed259459e3e6f63ac3e283f73eb461d9f8a8105e70b7546b9839f92f02fc080ae5d71992488fa16155863d0f4eee6c5f80fe401406aac89b440f0cf971c69839adc0b2d32bc81c96ce080f739b7d0380051141e52ed81950ff19cbeacab5a0b92c5a28e12c238e2431fd7b4a1b54091574fcdcf29c593198496de7f4695f8a64", 0xc9}, {&(0x7f0000000500)="dd89cae1238b776ae5924800d8a0529b13a86703bb64dfeca88da86a2174b810a115a0002777d41d9e535f934bfb161e3d5cba040395cb7ad070d0bdd605137218b55a7ba4c65417330a5bbb571532887263df72b57b56019c7ae9859e7a1b10d6e2cf3af3516f31ca14", 0x6a}, {&(0x7f0000000340)="a76bc62542cf38241f84727bd2723abd8244cd6e5e6ab9a7cb0f05a34f9d8cb88c8c418e160142a345a1e6d729844b40d5115e0872700b326c530ac3be1694196a7bcd59bd252e322593081af55d425e355cdd0422d79420ce71ab52808954e3c814e761bb3bf32f24dea59ac6eb17cbcb1fd2c7a6666ba568c688e5a483a9747296784cd68ed2afd75c8a6c65f4ed56e9091d95d9c8bfc70de4356e12145912be4b96787357f285224a65d6a11af930ff8be3dc8c32b1f17a5aa01d467ec0ea0545c656e26d322456f127f6f648368627782de5924538fa2e4169fab577d6ef832cb423fd8760965c", 0xe9}, {&(0x7f0000000440)="33bc062b406f2169508f9acd406e97c6e0ce09a108f8f27d5c79ec077e7de33e3e6a1df95d4893b99527382b440cd9e312271bb4aa3d353548d08ae6d61d64e7204de822f93fdd27c47763ba7aab349f5a97d04b2801eebe586abebed451d9e675c297b140860ca2e69e33a699385d48589c96ab83ab800d9553864ee3b74f177c5989663cf4d014", 0x88}, {&(0x7f0000000b40)="285b3476dbf7fd493260f995e4088f921a1b2f33a26ebd75832905016664edbe6c8fe2fe3428087a792e5fd0de83fe5c19abf3db6f31f597515172ad70701b6851f6d99fd06edb142832fc93edc2644c44390afc0273cdbbcf38f4b126d6e0ad472b01b9c23a06542ff7ed11679252f70c26f75effc9bd864a8a012f35280fc846c4357b11294d88f0f5f50fda95abb77bfa64fdbcf7dd4a54bc5c0208f27823cac698de967d028fe1789602fb93d61e615c1f2d57e9ce46d8aea024fcc6dde43f028be5b74bd8311c", 0xc9}, {&(0x7f0000000c40)="a3d8af7b87ac511162bdd3f8f0d35d15b40eedfc6e89910146f33e0dd59a6b9d8f3d211f4c0039e7b0a1aafe9b7c8804cf1bab5b162fb56f9e879539b96e88fc1a8f55dd94a1ab3f1c07ac4f721fc3532a0cb32fbb935a18ef501adf774efa525ee95b9eb5081116f27e82e71564ade3ca420ca060423d1e44be02075513c1ff6e26f3f2b803d6dffef65ebf8c931fe40098fcf4926b67afd60c64f2b5181f2b8a57465cf886d8606638d468ab644b8c2f9c7365bc86a7e04804c43a532e0ab50bc1f0a0851d412e65b14088b5a98f85a3b66d1fb7285c3d381583ea2f52", 0xde}, {&(0x7f0000000780)="5b65701323cf44952079a38c1b94eb912a0b1eeb817d887cd8d29c0d479c32d59a82443ab7c8509a83b3e475247dacd0cacea6c4be32798a90a2653d29cd8b571d09a3734578152efb163b953630c8000fc6555b522b7957d10afa8d364ac87367e18c2a20d0bd689105f2b3a6760679fecd9447b19b0988afc04176aa4a075f04efc657d7480556258662af0134d170c2d17ceb9d2a0a56cfa5465f781f278effe16738318e6520327c5a7114d29650480c68b550b417650a99455ebf39b91d5de155912817ea5b5719f9463c6603e3d96ec2b582ec1454364cf7714a8da6c1a6776b6205b807dadde9cccae64825e4", 0xf0}, {&(0x7f0000000d80)="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", 0x134}, {&(0x7f0000000880)="fa8f02165e303f4a5e7cf5fc7de04ea26443206f67ac9fa645b2442c7122d86a75758d1a6a99f74b098519de287a554099c3fec65ba7b014d4c0ff164d015d4fe8d98ef894335bfc1b9fc40f92e11d7c2585dbab00cd41c3e77def423a5bf896", 0x60}], 0xa, 0x0, 0x0, 0x4800}, 0x24040041) 1m49.97397777s ago: executing program 2 (id=2636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}]}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 1m49.652946125s ago: executing program 3 (id=2855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x1, 0x3e, &(0x7f0000000200)="07b52866", 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x80000001}, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="4000308014000400403a050c5baee2004ef2b6d713459a7a20000180080001000000000014000380060001000003e1ff0700020003000000050002"], 0x5c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5c020000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf251d0000000c000600020000000200000048012f800800010002000002500003800c00050080000000000000000c00050005000000000000000c0005000180000000000000280003800c0004000201aaaaaaaaaaaa0c00040000000000000000000c0004000202aaaaaaaaaaaa440003800c000500e1ba00000000000008000100020000002c000380060001000300000008000200020000000800020001000000060001000200000006000300a3aa000008000100010000009800038008000400ffffffff0c0005000b000000000000005c00038006000100ffff000006000100000000000c00040000000000000000000c00040000010000000000e405000100010000000c00040000000000000000000c0004000202aaaaaaaaaaaa060003000000000006000300a3aa0000080001000300000008000100030000000c0005000100000000007300050002000100000008000100030000001c002f800c00020000000000000000000c0002000203aaaaaaaaaaaa08000300cfb5823d88c7828b74f3024252fa2996f908dcf5de081b21e587b3e5b0ddf60810877d43e3f5bf0c9e8bd8d93be4179afcce029e4f677c3bc3ebf8d18308b8a72d7c8d84bb890eafa08476eaec5dd7956c", @ANYRES32=r9, @ANYBLOB="c4002f80080001008000000044000380080001000300000008000100010000000c00038008000200010000000800040008000000050002000300000008000100020000000c00038006000300ffff0000640003804c00038006000100000000000c0004000200aaaaaaaaaaaa060001000000000006000300a2aa000006000300a0aa000008000200020000000c0004000201aaaaaaaaaaaa06000100010000000c00050007000000000000000800040081000000080001001a00000008000100bf6500000c0006000300000003000000"], 0x25c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$inet(r10, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x1, 0x5, {{0x13, 0x4, 0x0, 0x3, 0x4c, 0x66, 0x0, 0x8, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x1b, 0x7c, [@remote, @local, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @noop, @timestamp_addr={0x44, 0x1c, 0x5, 0x1, 0x8, [{@multicast2, 0x7f}, {@remote, 0xffff}, {@rand_addr=0x64010102, 0x7fff}]}]}}}}}) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x6, 0x0, 0xc8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='devices.list\x00', 0x0, 0x0) 1m41.454064168s ago: executing program 3 (id=2855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x1, 0x3e, &(0x7f0000000200)="07b52866", 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x80000001}, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="4000308014000400403a050c5baee2004ef2b6d713459a7a20000180080001000000000014000380060001000003e1ff0700020003000000050002"], 0x5c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5c020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="c4002f80080001008000000044000380080001000300000008000100010000000c00038008000200010000000800040008000000050002000300000008000100020000000c00038006000300ffff0000640003804c00038006000100000000000c0004000200aaaaaaaaaaaa060001000000000006000300a2aa000006000300a0aa000008000200020000000c0004000201aaaaaaaaaaaa06000100010000000c00050007000000000000000800040081000000080001001a00000008000100bf6500000c0006000300000003000000"], 0x25c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$inet(r10, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x1, 0x5, {{0x13, 0x4, 0x0, 0x3, 0x4c, 0x66, 0x0, 0x8, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x1b, 0x7c, [@remote, @local, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @noop, @timestamp_addr={0x44, 0x1c, 0x5, 0x1, 0x8, [{@multicast2, 0x7f}, {@remote, 0xffff}, {@rand_addr=0x64010102, 0x7fff}]}]}}}}}) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x6, 0x0, 0xc8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='devices.list\x00', 0x0, 0x0) 1m40.222801697s ago: executing program 2 (id=2636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}]}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 1m34.384812678s ago: executing program 3 (id=2855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x1, 0x3e, &(0x7f0000000200)="07b52866", 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x80000001}, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="4000308014000400403a050c5baee2004ef2b6d713459a7a20000180080001000000000014000380060001000003e1ff0700020003000000050002"], 0x5c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5c020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="c4002f80080001008000000044000380080001000300000008000100010000000c00038008000200010000000800040008000000050002000300000008000100020000000c00038006000300ffff0000640003804c00038006000100000000000c0004000200aaaaaaaaaaaa060001000000000006000300a2aa000006000300a0aa000008000200020000000c0004000201aaaaaaaaaaaa06000100010000000c00050007000000000000000800040081000000080001001a00000008000100bf6500000c0006000300000003000000"], 0x25c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$inet(r10, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x1, 0x5, {{0x13, 0x4, 0x0, 0x3, 0x4c, 0x66, 0x0, 0x8, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x1b, 0x7c, [@remote, @local, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @noop, @timestamp_addr={0x44, 0x1c, 0x5, 0x1, 0x8, [{@multicast2, 0x7f}, {@remote, 0xffff}, {@rand_addr=0x64010102, 0x7fff}]}]}}}}}) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x6, 0x0, 0xc8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='devices.list\x00', 0x0, 0x0) 1m33.543150823s ago: executing program 0 (id=3024): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000480)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_dump={0x0, 0xa}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000140009052bbd70000000000002180f00", @ANYRES32=r3, @ANYBLOB="0800020009"], 0x30}}, 0x0) unshare(0x68040200) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x1003, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r8, &(0x7f0000000180), 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xdd1ff000) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r11, 0x0, 0x10000008ebc, 0x0) splice(r10, 0x0, r13, 0x0, 0x25a5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 1m32.530601616s ago: executing program 4 (id=3029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/81}, {&(0x7f00000014c0)=""/210}], 0x4}, 0x7}, {{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)}, {&(0x7f00000006c0)=""/202, 0xcf}, {&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f0000000840)=""/105, 0x69}], 0x4, &(0x7f0000000900)=""/118, 0x76}, 0x1e1c}, {{&(0x7f0000000580)=@nfc_llcp, 0x80, &(0x7f0000000a80)=[{&(0x7f0000006c00)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/93, 0x6d}], 0x2, &(0x7f0000000ac0)=""/216, 0xd8}, 0x10001}, {{&(0x7f0000000bc0)=@nfc_llcp, 0x80, &(0x7f0000006b80)=[{&(0x7f0000000c40)=""/177, 0xb1}, {&(0x7f0000000d00)=""/187, 0xbb}, {&(0x7f0000007c00)=""/4097, 0xd90}, {&(0x7f0000000dc0)=""/190, 0xbe}, {&(0x7f0000006ac0)=""/148}, {&(0x7f0000000540)=""/30}], 0x4, &(0x7f0000000ec0)=""/146, 0x92}, 0x80000001}, {{&(0x7f0000000f80)=@caif=@util, 0x80, &(0x7f0000000500)=[{&(0x7f0000001000)=""/114, 0xffffffffffffff99}, {&(0x7f0000001080)=""/166, 0xa6}], 0x2, &(0x7f0000001180)=""/88, 0x58}, 0xa}, {{&(0x7f0000001200)=@caif=@dbg, 0x80, &(0x7f0000000580), 0x3, &(0x7f0000001340)=""/61, 0x4a}, 0xe}, {{&(0x7f00000013c0)=@tipc, 0x80, &(0x7f0000001640)=[{&(0x7f0000001440)=""/67, 0x43}, {&(0x7f00000069c0)=""/238, 0xde}, {&(0x7f00000015c0)=""/22, 0x16}, {&(0x7f0000001600)=""/4, 0xa}], 0x4}, 0x3}, {{&(0x7f00000016c0)=@un=@abs, 0x80, &(0x7f0000006740)=[{&(0x7f0000005740)=""/4096, 0x1000}], 0x1, &(0x7f0000006780)=""/40, 0x28}, 0x5}], 0x8, 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x150, r4, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}]}, 0x150}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x24}}, 0x0) 1m32.335390274s ago: executing program 0 (id=3031): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, 0x0) 1m32.33485722s ago: executing program 1 (id=3032): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'filter\x00', 0x0, [0x8, 0x7, 0x1, 0x5, 0x4a0]}, &(0x7f0000000000)=0x54) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="834d288660a4e9b382dad3fcb9a2d4fbfa6e6127c0f25d23bf307c2534d972adc66ef855c3e45d59439e17b8fc414db3595da21230d86f19bc7e16adf0fd85f610c60165577949f7a3e1ff954996cb094d789bc097141604652be56de02fad1ab9cea5005f76756f27a8c9dc475714715b25e6c78e653db48d497e4e3a70fc297c494988201db846771872dfbd7c2f3d692c6bab6fd03ea63bd4731ec3145589dbd7898d7f6e8f0c40a960d8f348e924", 0xb0, 0x80, &(0x7f0000000240)={0x11, 0x9, r3, 0x1, 0x75, 0x6, @random="d18717fb647b"}, 0x14) (async) sendto$packet(r2, &(0x7f0000000180)="834d288660a4e9b382dad3fcb9a2d4fbfa6e6127c0f25d23bf307c2534d972adc66ef855c3e45d59439e17b8fc414db3595da21230d86f19bc7e16adf0fd85f610c60165577949f7a3e1ff954996cb094d789bc097141604652be56de02fad1ab9cea5005f76756f27a8c9dc475714715b25e6c78e653db48d497e4e3a70fc297c494988201db846771872dfbd7c2f3d692c6bab6fd03ea63bd4731ec3145589dbd7898d7f6e8f0c40a960d8f348e924", 0xb0, 0x80, &(0x7f0000000240)={0x11, 0x9, r3, 0x1, 0x75, 0x6, @random="d18717fb647b"}, 0x14) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 1m32.307524032s ago: executing program 4 (id=3033): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x20, &(0x7f0000001040)={&(0x7f0000000000)=""/25, 0x19, 0x0, &(0x7f0000000040)=""/4096, 0x1000}}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={0x1, 0xffffffffffffffff}, 0x4) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00', 0x0, 0xf40712a173daccc3}, 0x18) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001400)={'virt_wifi0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x5, 0x7, 0x3424cfb5, 0x31000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x9, @void, @value, @value}, 0x50) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@o_path={&(0x7f0000001540)='./file0\x00', 0x0, 0x10}, 0x18) (async) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001600)={0xffffffffffffffff, 0x5}, 0xc) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@generic={&(0x7f0000001640)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001740)={{0x1, 0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)='%pK \x00'}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)=@generic={&(0x7f0000001780)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{0x1, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x18, 0x22, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x5, 0x0, 0x5, 0x2, 0x4, 0x20, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0x3, 0x9, 0x4, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x4, 0x7, 0x7, 0x2, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x7, 0x1, 0xa, 0x7dcafc29b842894c, 0xb, 0x50}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x60a1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x4}]}, &(0x7f00000012c0)='GPL\x00', 0x1, 0xeb, &(0x7f0000001300)=""/235, 0x40f00, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x4, 0x8, 0x750, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000018c0)=[r3, r4, r5, r7, r8, r9, r10, r11], &(0x7f0000001900)=[{0x5, 0x4, 0x1, 0x1b}, {0x0, 0x1, 0xf, 0x5}], 0x10, 0x1, @void, @value}, 0x94) r12 = openat$cgroup_ro(r6, &(0x7f0000001a00)='cgroup.controllers\x00', 0x0, 0x0) (async) r13 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r13, 0x0, 0x487, &(0x7f0000001a40)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 'wlc\x00', 0x23, 0x0, 0x79}, {@local, 0x4e24, 0x2000, 0x366c, 0x3, 0x1}}, 0x44) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x1, 0x6, 0x8, 0x1, 0x3, 0x5, 0x4, 0x2, 0x8001, 0x1dda2ece, 0xfe43, 0x2, 0x9, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r13, 0xd0009412, &(0x7f0000001b80)={r14, 0x3}) r15 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r15, &(0x7f0000002b80), 0x10) (async) r16 = socket(0x29, 0x4, 0x401) (async) openat$cgroup_ro(r12, &(0x7f0000002bc0)='cpu.stat\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1e, 0x40010, r11, 0x94fe000) (async) r17 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x80010, r17, 0xa54ec000) (async) getsockname$packet(r5, &(0x7f0000002c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002c40)=0x14) (async) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000002c80)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, {0x306, @random="779c73e9fd9a"}, 0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'hsr0\x00'}) (async) getsockname$packet(r16, &(0x7f0000002d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002d40)=0x14) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002dc0)={0x0}, &(0x7f0000002e00)=0xc) sendmsg$nl_netfilter(r6, &(0x7f0000004380)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004340)={&(0x7f0000002e40)={0x14c4, 0x0, 0x3, 0x801, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x6}, [@generic="d8b2040738134826382bc179df781c6181d9002cb2d704e538d88792064714f384944dbce168cad8118a0861d0fca8424234dbefa6ebc420a6f24348b741b85bff13d31dff52e8ce9ea52dfa6c4f4a62415b78d6afd94b895f39694cd8af35244db479d7876a74cf4502fd6e626b542046422b27fd5790184958c5bd13952f470d0cbf8cf9d5b20d3fb6b782e934edf5881d9f7c6fc8d9cc0749ae94c6b2d8794fd78389fd893a4a31e790cec6e6329b7a9ca63739c012dc807342a23a8eee53b45ef3a1f6b8", @nested={0x1e1, 0x67, 0x0, 0x1, [@nested={0x4, 0xfc}, @generic="6ef56e1c610da36df44b5050e9ccc8c3f62306417d0e37d98724e1601aea35f968f351ac5442e82e7287519ff94e2ee796cbd17638cd4cf448b8f37fdb6b5ade9ce5a4bc31c18b039ebf3642fde70c769a390b5891030d0a89bf36e84f944584ff62c64666a46e84f983b9d0975166bc9c15011ae97df38eea64ba01c1fdb3ac5a69f9357cc19e11ff84", @generic="052c5cf93371fab179cbd4b7c077035fb23d8c9193b6d038e1e7a5a4fe18520d988bb27bc22f7fca3b57469989f9aad453027999859a1644d5a1331dbbc0fb0863f257efac557c065ab272f9f3faa5f0c157ab3fde1a05bfa8f0017799b622cb9b7b3748080482febe28642ad02a5082b29da7269272413fe355170780dda9fe27e391a76f36ff9011af3a56de3875426200defd4cca8c98a5ef00360e8e2876265181f4056bbfa0b6ce3f40a6aed8eba4f95efd4369179527ec51c9ec37ee1bc2a80236f1662336e252ff5ae08da6ac1d3356307c1298", @nested={0x4, 0x48}, @generic="f130d2fa3bd3f6d05d2918c1a44e146210b51f506343321e227f8cac871cd03a61fa7698", @generic="f5cb8ac0aab515dac58a8b56dc189073aca2f47168813aa2945987d9e9edb55a0b69989e8599c1816798dafd7493f548f437955ef16f347362cd35db9d69936f312db0a7d1c734bff0d5a0b46f685565"]}, @typed={0x8, 0x4d, 0x0, 0x0, @str='wlc\x00'}, @nested={0x1fa, 0x147, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @pid=r18}, @generic="c03ada4396ca24a41ea8dedc9c8535858a9e75266343d8491c17cadaaf7496fc23d5aecb95aed087042c9763dfd87423f5f236b7cfbc89edc41c684d16f8a40dc830d94f464aab31777375e12a7a36bd90a7f5dd8848d3af1407dc9ab1b5a3ac46a30d1fa3594cdbcc45ff45bf", @generic="86e2ae05fed743e31f9d78001b7251434d92c6659836ced4883801", @typed={0x6, 0x2c, 0x0, 0x0, @str='#\x00'}, @typed={0x8, 0x103, 0x0, 0x0, @pid}, @typed={0x8, 0x148, 0x0, 0x0, @fd=r7}, @generic="e639bca95774e76cb517379d992e8d3614537d7d9647df88bae5ddc5244a2755cc158d52976814578eb240f1d440e1ba4610bd3f085986964ff373cf66686bac731aec4c3d8ac5ca95df008a1b7ba03a45338f779efdfafb14b8920123b87918fae2fe12f666d8200ab6c93e89724ab662d8474ebe509933ebebfffaf4862ea49ddae013a525832174d97353df7644c2563596f51397d7fb263b585e8fb621634dfd724c60490824c6713f5d42034daab0aece00cfea0f32fee1457b360cd9747930", @nested={0x4, 0x17}, @typed={0x86, 0x6c, 0x0, 0x0, @binary="51b379f3c690ec9277d5d7bc30998eaad48ae6d9029b15bbb47a7628a560b3d9c6349077e4bce012307777c7eaf73f35001e345ff01e8771c4128670055a18570ca9051a6830cb6dda576683fc3993237d7c4bbe0ca8bc65ef8ac62b5e5d4cc6489ee24475541c144598dd72edf6c77da41aa02e9c2b9d48baa1bca5df2ac4a6e69a"}]}, @generic="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"]}, 0x14c4}, 0x1, 0x0, 0x0, 0x8080}, 0x4000080) 1m32.217501832s ago: executing program 0 (id=3034): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@fallback=r1, 0x34, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) ioctl$SIOCSIFHWADDR(r3, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x8, 0x80, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0) 1m32.154688877s ago: executing program 1 (id=3035): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) recvfrom(r1, &(0x7f00000001c0)=""/11, 0xb, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 1m32.136618433s ago: executing program 4 (id=3036): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000cc100"], 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x80, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x19}, 0x40001) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, r10, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2}]}]}, 0x30}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r12, 0x118, 0x1, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) 1m31.893811983s ago: executing program 1 (id=3037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x300400c0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xad, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fff}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000380)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x7f, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x8}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x1e8, 0x1e8, 0xe8, 0x1e8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@uncond, 0xc0, 0x100, 0x0, {0x0, 0x1e03}}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2c3bb27d9d5b379b853c7744b526e29755ec721db80fdb00f95f8a608b8d"}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="208fc24f1fcee5469038f4466d0a050000009f8f18690000020000082900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x20000880) 1m31.691395339s ago: executing program 0 (id=3038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xfffffff7, 0x1, 0x4, 0x40000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0xa, @void, @value, @void, @value}, 0x50) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40c009d}, 0x40000) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) 1m31.667539395s ago: executing program 4 (id=3039): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000071121b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m31.636719328s ago: executing program 1 (id=3040): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="040b0000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf256500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0xb04}, 0x1, 0x0, 0x0, 0x4044840}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m31.379258541s ago: executing program 4 (id=3041): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x4, [@union={0x6, 0x3, 0x0, 0x5, 0x1, 0x7, [{0xe, 0x5, 0x8}, {0xc, 0x5, 0x3f9}, {0x4, 0x0, 0x3}]}, @struct={0x3, 0x1, 0x0, 0x4, 0x0, 0x6, [{0xc, 0x0, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x6519}}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}, @const={0x3, 0x0, 0x0, 0xa, 0x3}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xf}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30, 0x51]}}, &(0x7f0000000400)=""/183, 0xc4, 0xb7, 0x1, 0x200, 0x10000, @value}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x0) 1m31.37892505s ago: executing program 1 (id=3042): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000040)="4709de2d4f737c28296dee6b257ec99083cced6a293767ea30f846745fef78f2544b4e2f7937aef847b9c0dac278427cb6715e67b811c716d3d495d58ebd913ed5652098654798f9498535cd3b3bcbb4124c7fe949df79000dc681f4cf3cf4f57fdd4f2c09684e69fe1f0bb6abe86b2e28e2cecf1c19bb357e177f6bd17420d22636c3a226386edcc5f0f09eb07377096148f871f201d0f12cea481a84e87d9e03f0d4f6c0a5cd45f63d05fbfae02c4b7e8f536ddc4baed544a7041a9e35028c5284d01364858cb01bd7800780") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) 1m31.356538098s ago: executing program 0 (id=3043): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="010026bd7000f8dbdf2501000000000000000841000000140018000000047564703a73797a3200000000639a6666aa14936b17381f050000000000000036af687431ca9eb146f4c6c25de9c75cc217a83dc7dfc6291475cc6c7e5611398dc1d98b1d3d7ce192b67fe1b1bf032e85416bff30b319bd414520cde8a733aff807001c513ef8769a724b46646d2806"], 0x30}}, 0xc800) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="91000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf250c0000000800060000000080"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m31.139164926s ago: executing program 4 (id=3044): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x190, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_USERDATA={0xce, 0xd, 0x1, 0x0, "9611f0a2effd5b55ca0bf1499aa127f6db587e2b2eb01cbbcbb94ddaafb6e13195f665b69badf83762b6dfdc192150b3a12be4a59882187e71ba0cc61f9aee9cf7f81f4a18bc33af5b11bcbfc397fa0badeea38e5f189a92b8c155b403b5e5ebd8eba5038e27d80428cd7229537cc2d454d10cc4b00e5f27a242e9a72f070e761d921e0ae6664d4a3247d5bb0a210af6a57792a5ca62705a66dc37a56e21be25b51142a68f6d3cff811b0c760a57f9810e5773d9f4b4847d7240b47f45dc2527c0561f8009fb394479b0"}, @NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x1b8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000540)=0x7, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000540)=0x7, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="34000029002d0000001ea1058dfe84e2e5557e85928c84948379dbaf70296d36b83bf582c484ac7bba0e5950a3b65874f59a8d989eaa9dc6d37e44e54f665437b03b43184cb4d40b7ae58933c57eefd7a7e544391725a9e9d90fe5d7906591a74ac8a02093ef93d6c2a26725e16e7dc9fd6335bc4818dee6b4fd01217e9a47a509578308fb6e2c40515214fa49294e141ae48c2017a222708ca96d2c2d204c4a2bdf9573dcb38c6879525685f7e9e38169d060e093e58dd24b04e255aa64d4b79b2453c3fa726a7a2cd48e2de4f70c383e07632460232fe2060c3087e66af04842abb2920687c1c3c5575b9d65e7f1f6bcaf", @ANYRES16=r5, @ANYBLOB="010000000000000000001200000018000180140002007465616d5f736c6176655f31000000000800060005000000"], 0x34}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4], 0xfc}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x5efe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001a00)={{r2}, r6, 0x0, @unused=[0x40000000000, 0x8, 0x4, 0x40], @subvolid=0x7ff}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x477e69999bf8fd8, r0}, 0x18) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x477e69999bf8fd8, r0}, 0x18) r8 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xe) shutdown(r9, 0x0) (async) shutdown(r9, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000580), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000580), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r11 = socket$inet(0xa, 0x801, 0x84) connect$inet(r11, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000140)={r13, 0xec, "a13eff0fea088edb2e2f68b7b791dfc091ae5f70c4cf6924a38a025969d93684028eab0b9c27ae2e14510d12b4947eb6b5b958e6ed89e326c0247a8d60415d245bd36c56ea1f87183ff396ab9746550444ab13744b974131a7a541cc299ab8ca7ae2bf6db2d6c379b5a50e4e9166bdc67064741410faa291baf6a7d1063166ed3a0144c910412455282d44afe195d72342d5f9bf4317aff84bfc5829cddbe7499779364453fc02a12dbefc1b50081d6319ce6f3b2a944aafa71a7fa4835b051fc38fcd897ba20064e9bd0fd1d19d0977b18270e4deba8959bf2aaf1489af8b55ab3d0cef5420ac4f9dfe414a"}, &(0x7f0000000240)=0xf4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f00000000c0)="16167ce7d251634eb182eaafcd334f91adb1c7e49d95a88bb5a43bccf14133d157980801b80e9027e8fdf057e7384356b9dabe4b36e1969ac2ce3894e028a98d60864a84d33f3a0d524e5bfaf1dd5a2c900a29", &(0x7f0000000140)=@udp=r8}, 0x20) listen(r0, 0x7) (async) listen(r0, 0x7) 1m31.091244847s ago: executing program 1 (id=3045): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x80, 0x8f, 0x3}}, 0x1c}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnetconf={0x14, 0x52, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040014) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'netdevsim0\x00', @random="0100"}) 1m31.078396668s ago: executing program 0 (id=3046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 0s ago: executing program 32 (id=3046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): et multicast startup query interval below minimum, setting to 100 (1000ms) [ 252.924817][T12657] validate_nla: 3 callbacks suppressed [ 252.924839][T12657] netlink: 'syz.1.1853': attribute type 11 has an invalid length. [ 252.986746][T12657] netlink: 'syz.1.1853': attribute type 11 has an invalid length. [ 253.041625][T12657] netlink: 'syz.1.1853': attribute type 11 has an invalid length. [ 253.071860][T12657] netlink: 'syz.1.1853': attribute type 11 has an invalid length. [ 253.085478][T12657] netlink: 'syz.1.1853': attribute type 11 has an invalid length. [ 253.132522][T12657] netlink: 'syz.1.1853': attribute type 11 has an invalid length. [ 253.156675][T12657] netlink: 'syz.1.1853': attribute type 11 has an invalid length. [ 253.165599][T12657] netlink: 'syz.1.1853': attribute type 11 has an invalid length. [ 253.173971][T12657] netlink: 'syz.1.1853': attribute type 11 has an invalid length. [ 253.182276][T12657] netlink: 'syz.1.1853': attribute type 11 has an invalid length. [ 253.215898][T12673] xfrm0 speed is unknown, defaulting to 1000 [ 253.412571][T12676] tipc: Enabled bearer , priority 0 [ 253.447208][T12691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1862'. [ 253.476021][T12675] tipc: Resetting bearer [ 255.166017][T12675] tipc: Disabling bearer [ 255.246178][T12729] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 255.420233][T12740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 255.450306][T12740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 255.487622][T12740] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 255.497341][T12740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 255.522242][T12740] geneve2: entered promiscuous mode [ 255.532125][T12740] geneve2: entered allmulticast mode [ 255.562082][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1879'. [ 255.608419][T12754] IPVS: stopping backup sync thread 12755 ... [ 255.612638][T12755] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 255.713387][T12759] openvswitch: : Dropping previously announced user features [ 255.898477][T12781] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 256.222776][T12802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.230505][T12802] IPv6: NLM_F_CREATE should be set when creating new route [ 256.464092][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 256.475134][T12821] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1902'. [ 256.497806][T12821] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1902'. [ 256.521951][T12821] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1902'. [ 256.537293][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1899'. [ 256.712974][T12840] xt_TCPMSS: Only works on TCP SYN packets [ 256.953950][T12853] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1909'. [ 257.044010][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'. [ 257.123068][T12867] xfrm0: left promiscuous mode [ 257.524509][T12892] bond5: (slave gre3): The slave device specified does not support setting the MAC address [ 257.538719][T12892] bond5: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 257.549868][T12892] bond5: (slave gre3): Opening slave failed [ 257.940335][T12920] __nla_validate_parse: 10 callbacks suppressed [ 257.940358][T12920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1930'. [ 258.093715][T12926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1932'. [ 258.217347][T12933] warn_alloc: 3 callbacks suppressed [ 258.217368][T12933] syz.2.1932: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 258.224634][T12923] openvswitch: netlink: Missing valid actions attribute. [ 258.250047][T12933] ,cpuset=/,mems_allowed=0-1 [ 258.256785][T12933] CPU: 0 UID: 0 PID: 12933 Comm: syz.2.1932 Not tainted 6.14.0-syzkaller-05901-gf278b6d5bb46 #0 PREEMPT(full) [ 258.256817][T12933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.256834][T12933] Call Trace: [ 258.256842][T12933] [ 258.256852][T12933] dump_stack_lvl+0x241/0x360 [ 258.256897][T12933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.256924][T12933] ? __pfx__printk+0x10/0x10 [ 258.256949][T12933] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 258.256991][T12933] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 258.257015][T12933] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 258.257040][T12933] warn_alloc+0x27c/0x410 [ 258.257059][T12933] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 258.257081][T12933] ? __pfx_warn_alloc+0x10/0x10 [ 258.257101][T12933] ? kasan_save_track+0x3f/0x80 [ 258.257121][T12933] ? __kasan_kmalloc+0x9d/0xb0 [ 258.257143][T12933] ? xsk_setsockopt+0x449/0x840 [ 258.257162][T12933] ? do_sock_setsockopt+0x3b1/0x710 [ 258.257186][T12933] ? __x64_sys_setsockopt+0x1ee/0x280 [ 258.257209][T12933] ? do_syscall_64+0xf3/0x230 [ 258.257236][T12933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.257261][T12933] __vmalloc_node_range_noprof+0x128/0x1390 [ 258.257306][T12933] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.257333][T12933] ? __kasan_kmalloc+0x9d/0xb0 [ 258.257361][T12933] vmalloc_user_noprof+0x74/0x80 [ 258.257381][T12933] ? xskq_create+0xb6/0x170 [ 258.257407][T12933] xskq_create+0xb6/0x170 [ 258.257435][T12933] xsk_init_queue+0xa1/0x100 [ 258.257463][T12933] xsk_setsockopt+0x449/0x840 [ 258.257490][T12933] ? __pfx_xsk_setsockopt+0x10/0x10 [ 258.257514][T12933] ? __lock_acquire+0xad5/0xd80 [ 258.257546][T12933] ? __pfx_aa_sk_perm+0x10/0x10 [ 258.257574][T12933] ? aa_sock_opt_perm+0x79/0x120 [ 258.257607][T12933] ? __pfx_xsk_setsockopt+0x10/0x10 [ 258.257629][T12933] do_sock_setsockopt+0x3b1/0x710 [ 258.257659][T12933] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 258.257684][T12933] ? __fget_files+0x2a/0x420 [ 258.257717][T12933] ? __fget_files+0x39d/0x420 [ 258.257750][T12933] ? __fget_files+0x2a/0x420 [ 258.257785][T12933] __x64_sys_setsockopt+0x1ee/0x280 [ 258.257819][T12933] do_syscall_64+0xf3/0x230 [ 258.257848][T12933] ? clear_bhb_loop+0x45/0xa0 [ 258.257872][T12933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.257901][T12933] RIP: 0033:0x7f087198d169 [ 258.257926][T12933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.257946][T12933] RSP: 002b:00007f0872784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 258.257976][T12933] RAX: ffffffffffffffda RBX: 00007f0871ba6080 RCX: 00007f087198d169 [ 258.257993][T12933] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 258.258006][T12933] RBP: 00007f0871a0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 258.258021][T12933] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.258035][T12933] R13: 0000000000000000 R14: 00007f0871ba6080 R15: 00007ffc29c04fe8 [ 258.258062][T12933] [ 258.258437][T12933] Mem-Info: [ 258.311652][T12923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.455166][T12935] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1934'. [ 258.456596][T12933] active_anon:8231 inactive_anon:0 isolated_anon:0 [ 258.456596][T12933] active_file:1602 inactive_file:38360 isolated_file:0 [ 258.456596][T12933] unevictable:768 dirty:123 writeback:0 [ 258.456596][T12933] slab_reclaimable:10920 slab_unreclaimable:107323 [ 258.456596][T12933] mapped:29783 shmem:4907 pagetables:828 [ 258.456596][T12933] sec_pagetables:0 bounce:0 [ 258.456596][T12933] kernel_misc_reclaimable:0 [ 258.456596][T12933] free:1331692 free_pcp:948 free_cma:0 [ 258.645435][T12933] Node 0 active_anon:24424kB inactive_anon:0kB active_file:6408kB inactive_file:153368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119132kB dirty:492kB writeback:0kB shmem:9892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13336kB pagetables:3312kB sec_pagetables:0kB all_unreclaimable? no [ 258.679188][T12933] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 258.714391][T12933] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.769267][T12933] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 258.775490][T12933] Node 0 DMA32 free:1406964kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:18888kB inactive_anon:0kB active_file:6408kB inactive_file:153040kB unevictable:1536kB writepending:492kB present:3129332kB managed:2550096kB mlocked:0kB bounce:0kB free_pcp:11420kB local_pcp:10756kB free_cma:0kB [ 258.808400][T12940] validate_nla: 35 callbacks suppressed [ 258.808423][T12940] netlink: 'syz.1.1937': attribute type 2 has an invalid length. [ 258.851768][T12933] lowmem_reserve[]: 0 0 0 0 0 [ 258.860483][T12933] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.910962][T12933] lowmem_reserve[]: 0 0 0 0 0 [ 258.917442][T12933] Node 1 Normal free:3911372kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.954139][T12933] lowmem_reserve[]: 0 0 0 0 0 [ 258.959035][T12933] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 258.984550][T12933] Node 0 DMA32: 197*4kB (UM) 338*8kB (UME) 570*16kB (UME) 460*32kB (UME) 721*64kB (UME) 361*128kB (UME) 308*256kB (UME) 242*512kB (UME) 171*1024kB (UME) 10*2048kB (UME) 219*4096kB (M) = 1415044kB [ 259.006292][T12933] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 259.049220][T12933] Node 1 Normal: 167*4kB (UM) 44*8kB (UME) 31*16kB (UME) 193*32kB (UME) 87*64kB (UME) 34*128kB (UME) 12*256kB (UM) 9*512kB (UME) 3*1024kB (UME) 4*2048kB (UE) 946*4096kB (M) = 3911372kB [ 259.071764][T12933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.082432][T12933] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 259.097613][T12933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.107436][T12933] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.116976][T12933] 41387 total pagecache pages [ 259.121931][T12933] 0 pages in swap cache [ 259.126115][T12933] Free swap = 124996kB [ 259.130412][T12933] Total swap = 124996kB [ 259.157165][T12933] 2097051 pages RAM [ 259.161122][T12933] 0 pages HighMem/MovableOnly [ 259.176758][T12933] 427805 pages reserved [ 259.192221][T12958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1942'. [ 259.201855][T12933] 0 pages cma reserved [ 259.215264][T12958] netlink: 'syz.0.1942': attribute type 10 has an invalid length. [ 259.223910][T12958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1942'. [ 259.233811][T12958] openvswitch: netlink: Invalid VLAN frame [ 259.362204][T12970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1944'. [ 259.376787][T12968] Bluetooth: MGMT ver 1.23 [ 259.388703][T12967] syz.3.1946 uses old SIOCAX25GETINFO [ 259.630961][T12989] veth7: entered allmulticast mode [ 259.799363][T13000] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1955'. [ 259.810815][T12994] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1955'. [ 259.854126][T13004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1958'. [ 259.982990][T13008] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1960'. [ 260.462235][T13039] tipc: Enabled bearer , priority 0 [ 260.563075][T13039] syzkaller0: entered promiscuous mode [ 260.568628][T13039] syzkaller0: entered allmulticast mode [ 260.575220][T13039] tipc: Resetting bearer [ 260.583436][T13050] C: renamed from team_slave_0 [ 260.604560][T13050] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 260.621943][T13050] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 260.701713][T13038] tipc: Resetting bearer [ 262.015751][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 262.150290][T13038] tipc: Disabling bearer [ 262.159547][T13049] xfrm0 speed is unknown, defaulting to 1000 [ 262.370823][T13073] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 262.389428][T13073] xt_hashlimit: invalid rate [ 262.977622][T13122] netlink: 'syz.4.1992': attribute type 4 has an invalid length. [ 262.989209][T13121] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 263.029601][T13129] netlink: 'syz.2.1995': attribute type 39 has an invalid length. [ 263.290572][T13145] netlink: 'syz.2.2000': attribute type 1 has an invalid length. [ 263.307493][T13147] __nla_validate_parse: 2 callbacks suppressed [ 263.307515][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2002'. [ 263.337528][T13145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.366244][T13152] netlink: 'syz.0.2002': attribute type 11 has an invalid length. [ 263.378949][T13152] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2002'. [ 263.673488][T13173] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2009'. [ 264.270595][T13211] x_tables: duplicate underflow at hook 2 [ 264.395734][T13222] netlink: 'syz.2.2024': attribute type 1 has an invalid length. [ 265.725663][T13222] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 265.726233][T13221] netlink: 'syz.1.2026': attribute type 4 has an invalid length. [ 265.744176][T13224] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 266.109412][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 266.230098][T13257] netlink: 'syz.3.2036': attribute type 1 has an invalid length. [ 266.329606][T13259] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 266.340829][T13259] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 266.350385][T13259] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 266.359511][T13259] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 266.370381][T13259] bond4: (slave geneve3): making interface the new active one [ 266.380346][T13259] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 266.393614][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'. [ 266.429791][T13275] bond0: (slave macvlan0): Releasing backup interface [ 266.501163][T13282] netlink: 18 bytes leftover after parsing attributes in process `syz.4.2043'. [ 266.502745][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2041'. [ 266.520944][T13257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2036'. [ 266.532650][T13257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.551992][T13257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2036'. [ 266.635675][T13291] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2043'. [ 266.732522][T13298] netlink: 'syz.2.2041': attribute type 4 has an invalid length. [ 266.944351][T13314] can: request_module (can-proto-5) failed. [ 267.119841][T13322] netlink: 'syz.3.2051': attribute type 1 has an invalid length. [ 267.134923][T13322] x_tables: duplicate underflow at hook 1 [ 267.152098][T13331] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 267.152853][T13332] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 267.276244][T13343] 8021q: VLANs not supported on tunl0 [ 267.293787][T13343] Cannot find set identified by id 752 to match [ 267.514430][T13360] vlan1: entered promiscuous mode [ 267.589059][T13364] vlan1: left promiscuous mode [ 268.339756][T13401] __nla_validate_parse: 9 callbacks suppressed [ 268.339776][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2073'. [ 268.404888][T13410] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 268.443729][T13413] netlink: 'syz.3.2076': attribute type 10 has an invalid length. [ 268.446958][T13410] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 268.509040][T13413] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2076'. [ 268.522563][T13413] geneve0: left promiscuous mode [ 268.539630][T13413] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0 [ 268.567687][T13413] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0 [ 268.576714][T13413] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0 [ 268.585746][T13413] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0 [ 268.599812][T13413] geneve0: entered promiscuous mode [ 268.606348][T13413] team0: Port device geneve0 added [ 268.983010][T13442] syz.0.2084: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 269.002371][T13442] CPU: 0 UID: 0 PID: 13442 Comm: syz.0.2084 Not tainted 6.14.0-syzkaller-05901-gf278b6d5bb46 #0 PREEMPT(full) [ 269.002406][T13442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.002428][T13442] Call Trace: [ 269.002436][T13442] [ 269.002446][T13442] dump_stack_lvl+0x241/0x360 [ 269.002484][T13442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.002523][T13442] ? __pfx__printk+0x10/0x10 [ 269.002550][T13442] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 269.002579][T13442] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 269.002606][T13442] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 269.002635][T13442] warn_alloc+0x27c/0x410 [ 269.002657][T13442] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 269.002680][T13442] ? __pfx_warn_alloc+0x10/0x10 [ 269.002702][T13442] ? kasan_save_track+0x3f/0x80 [ 269.002723][T13442] ? __kasan_kmalloc+0x9d/0xb0 [ 269.002748][T13442] ? xsk_setsockopt+0x449/0x840 [ 269.002778][T13442] ? do_sock_setsockopt+0x3b1/0x710 [ 269.002809][T13442] ? __x64_sys_setsockopt+0x1ee/0x280 [ 269.002835][T13442] ? do_syscall_64+0xf3/0x230 [ 269.002864][T13442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.002892][T13442] __vmalloc_node_range_noprof+0x128/0x1390 [ 269.002935][T13442] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.002961][T13442] ? __kasan_kmalloc+0x9d/0xb0 [ 269.002990][T13442] vmalloc_user_noprof+0x74/0x80 [ 269.003011][T13442] ? xskq_create+0xb6/0x170 [ 269.003036][T13442] xskq_create+0xb6/0x170 [ 269.003064][T13442] xsk_init_queue+0xa1/0x100 [ 269.003091][T13442] xsk_setsockopt+0x449/0x840 [ 269.003118][T13442] ? __pfx_xsk_setsockopt+0x10/0x10 [ 269.003140][T13442] ? __lock_acquire+0xad5/0xd80 [ 269.003171][T13442] ? __pfx_aa_sk_perm+0x10/0x10 [ 269.003199][T13442] ? aa_sock_opt_perm+0x79/0x120 [ 269.003243][T13442] ? __pfx_xsk_setsockopt+0x10/0x10 [ 269.003265][T13442] do_sock_setsockopt+0x3b1/0x710 [ 269.003296][T13442] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 269.003320][T13442] ? __fget_files+0x2a/0x420 [ 269.003351][T13442] ? __fget_files+0x39d/0x420 [ 269.003379][T13442] ? __fget_files+0x2a/0x420 [ 269.003413][T13442] __x64_sys_setsockopt+0x1ee/0x280 [ 269.003444][T13442] do_syscall_64+0xf3/0x230 [ 269.003472][T13442] ? clear_bhb_loop+0x45/0xa0 [ 269.003495][T13442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.003516][T13442] RIP: 0033:0x7f783eb8d169 [ 269.003533][T13442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.003552][T13442] RSP: 002b:00007f783f98a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.003575][T13442] RAX: ffffffffffffffda RBX: 00007f783eda6080 RCX: 00007f783eb8d169 [ 269.003591][T13442] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 269.003603][T13442] RBP: 00007f783ec0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 269.003616][T13442] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.003628][T13442] R13: 0000000000000000 R14: 00007f783eda6080 R15: 00007ffe9c6db3a8 [ 269.003654][T13442] [ 269.003736][T13442] Mem-Info: [ 269.230607][ T5834] Bluetooth: hci0: command tx timeout [ 269.331570][T13442] active_anon:4854 inactive_anon:0 isolated_anon:0 [ 269.331570][T13442] active_file:1602 inactive_file:38364 isolated_file:0 [ 269.331570][T13442] unevictable:768 dirty:156 writeback:0 [ 269.331570][T13442] slab_reclaimable:10920 slab_unreclaimable:107245 [ 269.331570][T13442] mapped:28713 shmem:1477 pagetables:864 [ 269.331570][T13442] sec_pagetables:0 bounce:0 [ 269.331570][T13442] kernel_misc_reclaimable:0 [ 269.331570][T13442] free:1331993 free_pcp:4202 free_cma:0 [ 269.382577][T13442] Node 0 active_anon:19416kB inactive_anon:0kB active_file:6408kB inactive_file:153384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114952kB dirty:624kB writeback:0kB shmem:4372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13460kB pagetables:3456kB sec_pagetables:0kB all_unreclaimable? no [ 269.501627][T13442] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 269.547553][T13442] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.577296][T13442] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 269.631459][T13442] Node 0 DMA32 free:1406796kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:20880kB inactive_anon:0kB active_file:6408kB inactive_file:153056kB unevictable:1536kB writepending:624kB present:3129332kB managed:2550096kB mlocked:0kB bounce:0kB free_pcp:9972kB local_pcp:9484kB free_cma:0kB [ 269.775266][T13442] lowmem_reserve[]: 0 0 0 0 0 [ 269.780095][T13442] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.824964][T13459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.838484][T13442] lowmem_reserve[]: 0 0 0 0 0 [ 269.851720][T13442] Node 1 Normal free:3911384kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.907190][T13442] lowmem_reserve[]: 0 0 0 0 0 [ 269.913213][T13442] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 269.957220][T13442] Node 0 DMA32: 129*4kB (UM) 524*8kB (UME) 536*16kB (UME) 476*32kB (UME) 721*64kB (UME) 362*128kB (UME) 314*256kB (UME) 247*512kB (UME) 172*1024kB (UME) 11*2048kB (UME) 217*4096kB (UM) = 1415332kB [ 269.990413][T13442] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 270.008088][T13442] Node 1 Normal: 170*4kB (UM) 44*8kB (UME) 31*16kB (UME) 193*32kB (UME) 87*64kB (UME) 34*128kB (UME) 12*256kB (UM) 9*512kB (UME) 3*1024kB (UME) 4*2048kB (UE) 946*4096kB (M) = 3911384kB [ 270.032643][T13442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.050071][T13442] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 270.067041][T13442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.076894][T13442] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.093861][T13442] 41392 total pagecache pages [ 270.098663][T13442] 0 pages in swap cache [ 270.107765][T13442] Free swap = 124996kB [ 270.113391][T13442] Total swap = 124996kB [ 270.117653][T13442] 2097051 pages RAM [ 270.126484][T13442] 0 pages HighMem/MovableOnly [ 270.131268][T13442] 427805 pages reserved [ 270.136642][T13442] 0 pages cma reserved [ 270.605978][T13509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2108'. [ 270.616787][T13509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2108'. [ 270.626826][T13509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2108'. [ 270.636465][T13509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2108'. [ 270.645582][T13509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2108'. [ 270.654934][T13509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2108'. [ 270.664187][T13509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2108'. [ 270.673459][T13509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2108'. [ 271.538573][T13547] 0ªî{X¹¦: left allmulticast mode [ 271.556873][T13547] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 271.585734][T13547] 1ªî{X¹¦: entered allmulticast mode [ 271.597844][T13547] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 271.769417][T13559] netlink: 'syz.2.2121': attribute type 2 has an invalid length. [ 271.814927][T13559] tipc: Enabled bearer , priority 10 [ 271.841872][T13555] netlink: 'syz.2.2121': attribute type 11 has an invalid length. [ 272.076812][T13577] tipc: Can't bind to reserved service type 2 [ 272.239304][T13586] tipc: Enabling of bearer rejected, failed to enable media [ 272.361187][T13598] x_tables: unsorted entry at hook 2 [ 272.759922][T13629] ipt_ECN: cannot use operation on non-tcp rule [ 272.918811][T13640] netlink: 'syz.3.2148': attribute type 39 has an invalid length. [ 272.931599][ T5880] tipc: Node number set to 1213738240 [ 273.025896][T13649] lo: entered promiscuous mode [ 273.031201][T13649] tunl0: entered promiscuous mode [ 273.043708][T13649] tunl0: left allmulticast mode [ 273.050421][T13649] gre0: entered promiscuous mode [ 273.067666][T13649] gre0: left allmulticast mode [ 273.075590][T13649] gretap0: entered promiscuous mode [ 273.081012][T13649] gretap0: left allmulticast mode [ 273.086848][T13649] erspan0: entered promiscuous mode [ 273.092407][T13649] erspan0: left allmulticast mode [ 273.098378][T13649] ip_vti0: entered promiscuous mode [ 273.104515][T13649] ip_vti0: left allmulticast mode [ 273.233486][T13658] FAULT_INJECTION: forcing a failure. [ 273.233486][T13658] name failslab, interval 1, probability 0, space 0, times 0 [ 273.277109][T13658] CPU: 0 UID: 0 PID: 13658 Comm: syz.2.2155 Not tainted 6.14.0-syzkaller-05901-gf278b6d5bb46 #0 PREEMPT(full) [ 273.277141][T13658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.277154][T13658] Call Trace: [ 273.277162][T13658] [ 273.277170][T13658] dump_stack_lvl+0x241/0x360 [ 273.277205][T13658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.277232][T13658] ? __pfx__printk+0x10/0x10 [ 273.277260][T13658] ? __pfx___might_resched+0x10/0x10 [ 273.277284][T13658] should_fail_ex+0x424/0x570 [ 273.277315][T13658] should_failslab+0xac/0x100 [ 273.277352][T13658] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 273.277382][T13658] ? __alloc_skb+0x1c2/0x480 [ 273.277408][T13658] __alloc_skb+0x1c2/0x480 [ 273.277434][T13658] ? __pfx___alloc_skb+0x10/0x10 [ 273.277460][T13658] ? netlink_autobind+0xd6/0x2f0 [ 273.277480][T13658] ? netlink_autobind+0x2b0/0x2f0 [ 273.277504][T13658] netlink_sendmsg+0x638/0xcd0 [ 273.277534][T13658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.277559][T13658] ? aa_sock_msg_perm+0x91/0x160 [ 273.277590][T13658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.277610][T13658] __sock_sendmsg+0x221/0x270 [ 273.277633][T13658] ____sys_sendmsg+0x523/0x860 [ 273.277665][T13658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.277690][T13658] ? __fget_files+0x2a/0x420 [ 273.277720][T13658] ? __fget_files+0x2a/0x420 [ 273.277753][T13658] __sys_sendmsg+0x271/0x360 [ 273.277783][T13658] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.277841][T13658] ? do_syscall_64+0xb6/0x230 [ 273.277872][T13658] do_syscall_64+0xf3/0x230 [ 273.277900][T13658] ? clear_bhb_loop+0x45/0xa0 [ 273.277923][T13658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.277942][T13658] RIP: 0033:0x7f087198d169 [ 273.277960][T13658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.277978][T13658] RSP: 002b:00007f08727a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.278000][T13658] RAX: ffffffffffffffda RBX: 00007f0871ba5fa0 RCX: 00007f087198d169 [ 273.278015][T13658] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 273.278027][T13658] RBP: 00007f08727a5090 R08: 0000000000000000 R09: 0000000000000000 [ 273.278039][T13658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.278051][T13658] R13: 0000000000000000 R14: 00007f0871ba5fa0 R15: 00007ffc29c04fe8 [ 273.278076][T13658] [ 273.591483][T13672] __nla_validate_parse: 137 callbacks suppressed [ 273.591505][T13672] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2160'. [ 274.279550][T13717] netlink: 'syz.0.2174': attribute type 33 has an invalid length. [ 274.504470][T13734] x_tables: duplicate entry at hook 3 [ 274.693928][T13751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2185'. [ 274.725250][T13753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2186'. [ 274.790105][T13758] FAULT_INJECTION: forcing a failure. [ 274.790105][T13758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.827978][T13758] CPU: 0 UID: 0 PID: 13758 Comm: syz.0.2187 Not tainted 6.14.0-syzkaller-05901-gf278b6d5bb46 #0 PREEMPT(full) [ 274.828012][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.828025][T13758] Call Trace: [ 274.828033][T13758] [ 274.828042][T13758] dump_stack_lvl+0x241/0x360 [ 274.828089][T13758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.828116][T13758] ? __pfx__printk+0x10/0x10 [ 274.828150][T13758] should_fail_ex+0x424/0x570 [ 274.828182][T13758] _copy_from_iter+0x211/0x1c70 [ 274.828209][T13758] ? __build_skb_around+0x247/0x3d0 [ 274.828243][T13758] ? __alloc_skb+0x298/0x480 [ 274.828266][T13758] ? __pfx__copy_from_iter+0x10/0x10 [ 274.828290][T13758] ? __pfx___alloc_skb+0x10/0x10 [ 274.828316][T13758] ? skb_put+0x114/0x1f0 [ 274.828343][T13758] netlink_sendmsg+0x73c/0xcd0 [ 274.828374][T13758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.828398][T13758] ? aa_sock_msg_perm+0x91/0x160 [ 274.828429][T13758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.828449][T13758] __sock_sendmsg+0x221/0x270 [ 274.828471][T13758] ____sys_sendmsg+0x523/0x860 [ 274.828503][T13758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.828546][T13758] ? __fget_files+0x2a/0x420 [ 274.828577][T13758] ? __fget_files+0x2a/0x420 [ 274.828613][T13758] __sys_sendmsg+0x271/0x360 [ 274.828644][T13758] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.828711][T13758] ? do_syscall_64+0xb6/0x230 [ 274.828744][T13758] do_syscall_64+0xf3/0x230 [ 274.828772][T13758] ? clear_bhb_loop+0x45/0xa0 [ 274.828796][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.828817][T13758] RIP: 0033:0x7f783eb8d169 [ 274.828835][T13758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.828853][T13758] RSP: 002b:00007f783f9ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.828875][T13758] RAX: ffffffffffffffda RBX: 00007f783eda5fa0 RCX: 00007f783eb8d169 [ 274.828891][T13758] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 274.828905][T13758] RBP: 00007f783f9ab090 R08: 0000000000000000 R09: 0000000000000000 [ 274.828917][T13758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.828930][T13758] R13: 0000000000000000 R14: 00007f783eda5fa0 R15: 00007ffe9c6db3a8 [ 274.828956][T13758] [ 275.368093][T13778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2193'. [ 275.493371][T13790] netlink: 'syz.3.2197': attribute type 11 has an invalid length. [ 275.501252][T13790] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2197'. [ 275.599178][T13796] FAULT_INJECTION: forcing a failure. [ 275.599178][T13796] name failslab, interval 1, probability 0, space 0, times 0 [ 275.651131][T13796] CPU: 0 UID: 0 PID: 13796 Comm: syz.4.2200 Not tainted 6.14.0-syzkaller-05901-gf278b6d5bb46 #0 PREEMPT(full) [ 275.651165][T13796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.651178][T13796] Call Trace: [ 275.651186][T13796] [ 275.651194][T13796] dump_stack_lvl+0x241/0x360 [ 275.651231][T13796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.651259][T13796] ? __pfx__printk+0x10/0x10 [ 275.651284][T13796] ? trace_contention_end+0x3c/0x120 [ 275.651309][T13796] ? __pfx___might_resched+0x10/0x10 [ 275.651334][T13796] should_fail_ex+0x424/0x570 [ 275.651371][T13796] should_failslab+0xac/0x100 [ 275.651400][T13796] __kmalloc_cache_noprof+0x73/0x370 [ 275.651429][T13796] ? genl_start+0x1cb/0x6d0 [ 275.651458][T13796] genl_start+0x1cb/0x6d0 [ 275.651491][T13796] __netlink_dump_start+0x45c/0x790 [ 275.651520][T13796] genl_rcv_msg+0x8a4/0xf00 [ 275.651554][T13796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.651579][T13796] ? stack_trace_save+0x11a/0x1d0 [ 275.651610][T13796] ? __pfx_genl_start+0x10/0x10 [ 275.651633][T13796] ? __pfx_genl_dumpit+0x10/0x10 [ 275.651658][T13796] ? __pfx_genl_done+0x10/0x10 [ 275.651696][T13796] ? __lock_acquire+0xad5/0xd80 [ 275.651727][T13796] ? __pfx_l2tp_nl_cmd_session_dump+0x10/0x10 [ 275.651760][T13796] netlink_rcv_skb+0x208/0x480 [ 275.651782][T13796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.651811][T13796] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.651848][T13796] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.651888][T13796] genl_rcv+0x28/0x40 [ 275.651912][T13796] netlink_unicast+0x7f8/0x9a0 [ 275.651967][T13796] ? __pfx_netlink_unicast+0x10/0x10 [ 275.652000][T13796] ? skb_put+0x114/0x1f0 [ 275.652041][T13796] netlink_sendmsg+0x8c3/0xcd0 [ 275.652078][T13796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.652104][T13796] ? aa_sock_msg_perm+0x91/0x160 [ 275.652135][T13796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.652155][T13796] __sock_sendmsg+0x221/0x270 [ 275.652177][T13796] ____sys_sendmsg+0x523/0x860 [ 275.652228][T13796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.652255][T13796] ? __fget_files+0x2a/0x420 [ 275.652287][T13796] ? __fget_files+0x2a/0x420 [ 275.652335][T13796] __sys_sendmsg+0x271/0x360 [ 275.652365][T13796] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.652450][T13796] ? do_syscall_64+0xb6/0x230 [ 275.652482][T13796] do_syscall_64+0xf3/0x230 [ 275.652512][T13796] ? clear_bhb_loop+0x45/0xa0 [ 275.652535][T13796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.652556][T13796] RIP: 0033:0x7fd0f978d169 [ 275.652575][T13796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.652593][T13796] RSP: 002b:00007fd0fa5d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.652616][T13796] RAX: ffffffffffffffda RBX: 00007fd0f99a5fa0 RCX: 00007fd0f978d169 [ 275.652632][T13796] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 275.652645][T13796] RBP: 00007fd0fa5d0090 R08: 0000000000000000 R09: 0000000000000000 [ 275.652658][T13796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.652671][T13796] R13: 0000000000000000 R14: 00007fd0f99a5fa0 R15: 00007fff477f55b8 [ 275.652698][T13796] [ 276.527235][T13830] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2213'. [ 276.578482][T13837] netlink: 'syz.2.2214': attribute type 1 has an invalid length. [ 276.600276][T13839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2212'. [ 276.636602][T13839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2212'. [ 276.671955][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'. [ 276.692421][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'. [ 276.707132][T13845] : entered promiscuous mode [ 276.820974][T13850] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 276.893377][T13850] 8021q: adding VLAN 0 to HW filter on device bond6 [ 276.961563][T13869] netlink: 'syz.4.2222': attribute type 9 has an invalid length. [ 276.968869][T13859] bond6: (slave gretap0): making interface the new active one [ 276.982369][T13870] netlink: 'syz.4.2222': attribute type 9 has an invalid length. [ 277.017898][T13859] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 277.078960][T13869] netlink: 'syz.4.2222': attribute type 21 has an invalid length. [ 277.151270][T13859] syz.1.2219 (13859) used greatest stack depth: 16864 bytes left [ 277.274256][T13885] netlink: 'syz.2.2228': attribute type 29 has an invalid length. [ 277.291076][T13890] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 277.306830][T13885] netlink: 'syz.2.2228': attribute type 29 has an invalid length. [ 277.922948][T13923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.533910][T13959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.575494][T13960] vlan2: entered allmulticast mode [ 278.596434][T13966] hsr_slave_0: left promiscuous mode [ 278.610031][T13966] hsr_slave_1: left promiscuous mode [ 278.765217][T13976] netlink: 'syz.0.2255': attribute type 4 has an invalid length. [ 279.190607][T13981] netlink: 'syz.0.2256': attribute type 4 has an invalid length. [ 279.461750][T14004] netlink: 'syz.2.2266': attribute type 1 has an invalid length. [ 279.489457][T14004] __nla_validate_parse: 12 callbacks suppressed [ 279.489483][T14004] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.2266'. [ 279.841736][T14029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2273'. [ 279.845390][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2275'. [ 279.858434][T14031] netlink: 'syz.2.2272': attribute type 1 has an invalid length. [ 279.881238][T14026] delete_channel: no stack [ 280.000392][T14040] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2276'. [ 280.053819][T14042] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2277'. [ 280.309312][T14047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.105226][T14082] validate_nla: 1 callbacks suppressed [ 282.105242][T14082] netlink: 'syz.1.2289': attribute type 29 has an invalid length. [ 282.253178][T14111] macvlan1: left promiscuous mode [ 282.346271][T14114] bond5 (unregistering): Released all slaves [ 282.383347][T14126] unknown channel width for channel at 909000KHz? [ 282.417012][T14126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2300'. [ 282.446385][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2300'. [ 282.479198][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'. [ 282.631019][T14140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2303'. [ 282.652738][T14142] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20003 [ 282.884691][T14164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2308'. [ 283.381222][T14194] xfrm0 speed is unknown, defaulting to 1000 [ 283.525327][T14201] netlink: 'syz.4.2315': attribute type 5 has an invalid length. [ 283.605377][T14201] : entered promiscuous mode [ 283.997625][T14223] openvswitch: netlink: Multiple metadata blocks provided [ 284.558005][T14245] __nla_validate_parse: 3 callbacks suppressed [ 284.558026][T14245] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2330'. [ 285.377370][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 285.784531][T14322] tipc: Failed to remove unknown binding: 66,1,1/0:3431148310/3431148312 [ 285.799931][T14322] tipc: Failed to remove unknown binding: 66,1,1/0:3431148310/3431148312 [ 285.821157][T14322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2353'. [ 286.142015][T14335] sctp: [Deprecated]: syz.2.2354 (pid 14335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.142015][T14335] Use struct sctp_sack_info instead [ 286.206340][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'. [ 286.263909][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 286.459507][T14355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2365'. [ 286.664250][T14372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2371'. [ 286.741946][T14377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.761177][T14375] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 286.830290][T14382] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2373'. [ 286.875232][T14382] vlan3: entered allmulticast mode [ 287.028364][T14393] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2377'. [ 287.330627][T14417] bridge4: entered allmulticast mode [ 287.543344][T14429] vlan2: entered promiscuous mode [ 287.548722][T14429] vlan2: entered allmulticast mode [ 287.556408][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2389'. [ 288.035940][T14442] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 288.063617][T14442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.113079][T14446] Cannot find del_set index 65531 as target [ 288.132831][T14449] tipc: Enabling of bearer rejected, media not registered [ 289.674507][T14549] netlink: 'syz.2.2424': attribute type 1 has an invalid length. [ 289.709604][T14546] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 289.847715][T14555] __nla_validate_parse: 8 callbacks suppressed [ 289.847738][T14555] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2431'. [ 289.947219][T14558] bond0: entered allmulticast mode [ 290.093762][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2433'. [ 290.125206][T14565] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 290.539636][T14594] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 290.594284][T14597] openvswitch: netlink: Flow key attr not present in new flow. [ 290.763840][T14612] netlink: 'syz.0.2449': attribute type 1 has an invalid length. [ 291.045937][T14631] block nbd3: not configured, cannot reconfigure [ 291.058592][T14631] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2454'. [ 291.180753][T14636] netlink: zone id is out of range [ 291.204085][T14636] netlink: del zone limit has 8 unknown bytes [ 291.218033][T14636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2456'. [ 292.202573][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2472'. [ 292.568991][T14719] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 292.579646][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2481'. [ 292.684871][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 292.699927][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2484'. [ 293.135635][T14759] netlink: 1084 bytes leftover after parsing attributes in process `syz.0.2490'. [ 293.187387][T14760] netlink: 'syz.1.2491': attribute type 21 has an invalid length. [ 293.229221][T14760] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2491'. [ 293.456020][T14776] netlink: 'syz.2.2495': attribute type 1 has an invalid length. [ 293.879304][T14795] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 293.890669][T14795] netlink: 'syz.4.2502': attribute type 26 has an invalid length. [ 294.044522][T14799] syzkaller1: entered promiscuous mode [ 294.057961][T14799] syzkaller1: entered allmulticast mode [ 294.103283][T14800] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.166187][T14802] netlink: 'syz.1.2505': attribute type 5 has an invalid length. [ 294.376870][T14812] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 295.010729][T14840] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 295.051774][T14840] sctp: [Deprecated]: syz.1.2517 (pid 14840) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.051774][T14840] Use struct sctp_sack_info instead [ 295.233176][T14847] dvmrp0: entered allmulticast mode [ 295.351776][T14861] __nla_validate_parse: 3 callbacks suppressed [ 295.351797][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2522'. [ 295.556946][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'. [ 295.590237][T14868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2526'. [ 295.599566][T14873] xt_hashlimit: size too large, truncated to 1048576 [ 295.763766][T14884] netlink: 'syz.1.2530': attribute type 2 has an invalid length. [ 295.797469][T14884] netlink: 'syz.1.2530': attribute type 8 has an invalid length. [ 295.807484][T14884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2530'. [ 295.846495][T14884] netlink: 'syz.1.2530': attribute type 2 has an invalid length. [ 295.883364][T14884] netlink: 'syz.1.2530': attribute type 8 has an invalid length. [ 295.891156][T14884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2530'. [ 296.093630][T14898] netlink: 'syz.4.2535': attribute type 29 has an invalid length. [ 296.148968][T14898] netlink: 'syz.4.2535': attribute type 29 has an invalid length. [ 296.205435][T14898] netlink: 'syz.4.2535': attribute type 29 has an invalid length. [ 296.243397][T14910] netlink: 'syz.3.2539': attribute type 1 has an invalid length. [ 296.251195][T14910] netlink: 'syz.3.2539': attribute type 4 has an invalid length. [ 296.309149][T14910] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2539'. [ 296.375577][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'. [ 296.406448][T14915] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 296.557915][T14930] netlink: 'syz.1.2547': attribute type 1 has an invalid length. [ 296.592032][T14930] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 296.661890][T14933] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2546'. [ 296.876243][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2548'. [ 296.968915][T14940] tipc: Enabling of bearer rejected, media not registered [ 297.119880][T14950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2552'. [ 298.020276][T14973] pimreg3: entered allmulticast mode [ 298.368701][T14987] sit0: entered promiscuous mode [ 299.096381][T15013] openvswitch: netlink: Message has 6 unknown bytes. [ 304.705909][T15048] __nla_validate_parse: 11 callbacks suppressed [ 304.705934][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'. [ 304.774934][T15048] validate_nla: 5 callbacks suppressed [ 304.774956][T15048] netlink: 'syz.2.2585': attribute type 30 has an invalid length. [ 304.859149][T15048] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.868122][T15048] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.877255][T15048] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.886072][T15048] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.160044][T15059] delete_channel: no stack [ 305.198755][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2589'. [ 305.287940][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2590'. [ 305.507181][T15068] vlan3: entered promiscuous mode [ 305.530332][T15068] bridge0: entered promiscuous mode [ 305.579412][T15077] ipt_REJECT: TCP_RESET invalid for non-tcp [ 305.600998][T15072] RDS: rds_bind could not find a transport for 300::, load rds_tcp or rds_rdma? [ 305.665636][T15073] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 305.782364][T15079] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 305.824316][T15079] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2592'. [ 306.434981][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2602'. [ 306.727299][T15121] openvswitch: netlink: Flow actions attr not present in new flow. [ 306.754374][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 306.828664][T15129] netlink: 'syz.4.2614': attribute type 2 has an invalid length. [ 306.932034][T15136] netlink: 'syz.2.2615': attribute type 11 has an invalid length. [ 307.100567][T15147] sctp: [Deprecated]: syz.1.2620 (pid 15147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.100567][T15147] Use struct sctp_sack_info instead [ 307.238499][T15154] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2621'. [ 307.252616][T15157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2622'. [ 307.289058][T15156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2622'. [ 307.289084][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2623'. [ 307.330100][T15159] netlink: 'syz.1.2623': attribute type 20 has an invalid length. [ 307.417523][T15166] netlink: 'syz.4.2626': attribute type 3 has an invalid length. [ 307.498813][T15170] netlink: 'syz.2.2625': attribute type 9 has an invalid length. [ 307.986441][ T7570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.005761][ T7570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.080807][ T7570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.096618][ T7570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.269501][ T7570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.287480][ T7570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.312809][T15205] netlink: 'syz.3.2639': attribute type 10 has an invalid length. [ 308.341517][T15205] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 308.414276][T15212] netlink: 'syz.1.2642': attribute type 12 has an invalid length. [ 308.462669][ T7570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.479087][ T7570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.503180][T15212] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 308.536950][T15218] tipc: Enabling of bearer rejected, failed to enable media [ 308.630686][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.651826][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.666605][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.679190][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.692186][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.828029][ T7570] tipc: Resetting bearer [ 309.239602][ T7570] tipc: Disabling bearer [ 309.294508][ T7570] dvmrp0 (unregistering): left allmulticast mode [ 309.713417][ T7570] bond0 (unregistering): Released all slaves [ 309.807286][ T7570] bond1 (unregistering): (slave bond2): Releasing backup interface [ 309.816083][ T7570] bond1 (unregistering): Released all slaves [ 309.913326][ T7570] bond2 (unregistering): Released all slaves [ 309.923777][ T7570] bond3 (unregistering): Released all slaves [ 310.025985][ T7570] bond4 (unregistering): Released all slaves [ 310.038531][T15222] xfrm0 speed is unknown, defaulting to 1000 [ 310.189437][T15269] netlink: 'syz.1.2655': attribute type 11 has an invalid length. [ 310.201177][T15269] __nla_validate_parse: 4 callbacks suppressed [ 310.201198][T15269] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2655'. [ 310.228015][ T7570] : left promiscuous mode [ 310.429792][ T7570] tipc: Left network mode [ 310.466634][T15284] veth0_virt_wifi: entered promiscuous mode [ 310.482846][T15284] veth0_virt_wifi: left promiscuous mode [ 310.506539][ T7570] IPVS: stopping master sync thread 11298 ... [ 310.618593][T15222] chnl_net:caif_netlink_parms(): no params data found [ 310.671987][T15295] netlink: 'syz.1.2664': attribute type 1 has an invalid length. [ 310.679790][T15295] netlink: 'syz.1.2664': attribute type 2 has an invalid length. [ 310.697645][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2666'. [ 310.743741][ T5837] Bluetooth: hci2: command tx timeout [ 310.745983][T15297] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 310.766105][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2665'. [ 310.786566][ T7552] batman_adv: batadv1: IGMP Querier appeared [ 310.792933][ T7552] batman_adv: batadv1: MLD Querier appeared [ 310.802172][T15302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 310.819123][T15302] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2665'. [ 311.123235][T15222] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.153112][T15222] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.169977][T15222] bridge_slave_0: entered allmulticast mode [ 311.186097][T15222] bridge_slave_0: entered promiscuous mode [ 311.206927][T15222] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.222415][T15222] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.240538][T15222] bridge_slave_1: entered allmulticast mode [ 311.268889][T15222] bridge_slave_1: entered promiscuous mode [ 311.755981][T15222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.811636][ T5837] Bluetooth: hci2: command tx timeout [ 313.502921][ T7570] veth1_vlan: left promiscuous mode [ 313.508658][ T7570] veth0_vlan: left promiscuous mode [ 313.740355][ T7570] pimreg3 (unregistering): left allmulticast mode [ 314.898449][ T5837] Bluetooth: hci2: command tx timeout [ 315.173460][T15222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.415000][T15222] team0: Port device team_slave_0 added [ 315.478722][T15349] wg2: left allmulticast mode [ 315.498324][T15222] team0: Port device team_slave_1 added [ 315.549002][T15352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2678'. [ 315.639650][T15349] wg2: entered promiscuous mode [ 315.656496][T15349] wg2: entered allmulticast mode [ 315.777415][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2680'. [ 315.821112][T15358] netlink: 'syz.3.2679': attribute type 1 has an invalid length. [ 315.847948][T15358] netlink: 'syz.3.2679': attribute type 2 has an invalid length. [ 315.892237][T15222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.919384][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.970454][T15222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.046437][T15222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.100055][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.241928][T15222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.292595][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2685'. [ 316.585463][T15222] hsr_slave_0: entered promiscuous mode [ 316.645872][T15222] hsr_slave_1: entered promiscuous mode [ 316.683826][T15222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.708890][T15222] Cannot create hsr debugfs directory [ 316.962999][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2688'. [ 316.972689][ T5837] Bluetooth: hci2: command tx timeout [ 317.287316][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2689'. [ 317.449268][T15405] No such timeout policy "syz0" [ 318.102486][T15416] netlink: 'syz.0.2693': attribute type 6 has an invalid length. [ 318.664333][T15437] xt_hashlimit: size too large, truncated to 1048576 [ 319.345306][T15450] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2701'. [ 319.403260][T15452] netlink: 'syz.1.2701': attribute type 2 has an invalid length. [ 320.335104][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 320.358933][T15458] xt_hashlimit: invalid interval [ 320.374611][T15456] veth9: entered allmulticast mode [ 320.492411][T15460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2704'. [ 320.641860][T15457] veth3: entered allmulticast mode [ 320.659397][T15222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 320.713395][T15222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 320.779013][T15222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 320.865708][T15222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 320.968463][T15476] xt_l2tp: unknown flags: 18 [ 321.264635][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2712'. [ 321.304651][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2712'. [ 321.332551][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2712'. [ 321.383790][T15222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.426007][T15493] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2713'. [ 321.456436][T15495] xt_recent: Unsupported userspace flags (00000042) [ 321.585790][T15222] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.597600][T15495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2715'. [ 321.617818][T15495] tipc: Invalid UDP bearer configuration [ 321.617916][T15495] tipc: Enabling of bearer rejected, failed to enable media [ 321.652676][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.659885][ T7552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.731810][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.738993][ T7552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.964135][T15505] netlink: 'syz.3.2718': attribute type 27 has an invalid length. [ 322.045350][T15512] lo: left promiscuous mode [ 322.111204][T15512] tunl0: left promiscuous mode [ 322.174833][T15512] gre0: left promiscuous mode [ 322.205748][T15512] gretap0: left promiscuous mode [ 322.246821][T15512] erspan0: left promiscuous mode [ 322.269127][T15512] ip_vti0: left promiscuous mode [ 322.302934][T15512] ip6_vti0: left promiscuous mode [ 322.345166][T15512] sit0: left promiscuous mode [ 322.382086][T15512] ip6tnl0: left promiscuous mode [ 322.424864][T15512] ip6gre0: left promiscuous mode [ 322.454315][T15512] ip6gretap0: left promiscuous mode [ 322.466676][T15512] team0: left promiscuous mode [ 322.488336][T15512] geneve0: left promiscuous mode [ 322.498352][T15512] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.510266][T15512] dummy0: left promiscuous mode [ 322.519861][T15512] nlmon0: left promiscuous mode [ 322.542301][T15512] caif0: left promiscuous mode [ 322.552702][T15512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.573292][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'. [ 322.622661][ T7580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.645628][ T7580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.084211][T15536] netlink: 'syz.1.2726': attribute type 11 has an invalid length. [ 323.100255][T15536] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2726'. [ 323.124299][T15536] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2726'. [ 324.093396][T15505] batadv0: left promiscuous mode [ 324.098519][T15505] veth0: left promiscuous mode [ 324.117724][T15505] veth1: left promiscuous mode [ 324.127469][T15505] wg0: left promiscuous mode [ 324.133964][T15505] wg1: left promiscuous mode [ 324.138898][T15505] wg2: left promiscuous mode [ 324.149080][T15505] veth0_to_bridge: left promiscuous mode [ 324.157368][T15505] bridge_slave_0: left promiscuous mode [ 324.166822][T15505] veth1_to_bridge: left promiscuous mode [ 324.181699][T15505] bridge_slave_1: left promiscuous mode [ 324.194648][T15505] veth0_to_bond: left promiscuous mode [ 324.200431][T15505] @ÿ: left promiscuous mode [ 324.208457][T15505] veth1_to_bond: left promiscuous mode [ 324.217375][T15505] bond_slave_1: left promiscuous mode [ 324.224612][T15505] veth0_to_team: left promiscuous mode [ 324.230215][T15505] team_slave_0: left promiscuous mode [ 324.240710][T15505] veth1_to_team: left promiscuous mode [ 324.247208][T15505] team_slave_1: left promiscuous mode [ 324.259721][T15505] veth0_to_batadv: left promiscuous mode [ 324.266755][T15505] batadv_slave_0: left promiscuous mode [ 324.278109][T15505] veth0_to_hsr: left promiscuous mode [ 324.284648][T15505] veth1_to_hsr: left promiscuous mode [ 324.290470][T15505] hsr0: left promiscuous mode [ 324.300562][T15505] veth1_virt_wifi: left promiscuous mode [ 324.307671][T15505] veth0_virt_wifi: left promiscuous mode [ 324.318486][T15505] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 324.327585][T15505] vlan1: left promiscuous mode [ 324.337524][T15505] ipvlan0: left promiscuous mode [ 324.346146][T15505] ipvlan1: left promiscuous mode [ 324.351312][T15505] veth1_macvtap: left promiscuous mode [ 324.364928][T15505] macsec0: left promiscuous mode [ 324.378581][T15505] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 324.390186][T15505] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 324.405870][T15505] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 324.416686][T15505] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 324.469538][T15505] geneve1: left promiscuous mode [ 324.491205][T15505] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 324.500476][T15505] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 324.514071][T15505] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 324.524180][T15505] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 324.531931][T15505] syztnl1: left promiscuous mode [ 324.537073][T15505] bond1: left promiscuous mode [ 324.542304][T15505] vlan0.1: left promiscuous mode [ 324.547345][T15505] vlan0: left promiscuous mode [ 324.552817][T15505] macvlan2: left promiscuous mode [ 324.558060][T15505] vxlan0: left promiscuous mode [ 324.563491][T15505] ip6tnl1: left promiscuous mode [ 324.568628][T15505] bond2: left promiscuous mode [ 324.573862][T15505] veth2: left promiscuous mode [ 324.578848][T15505] veth3: left promiscuous mode [ 324.585549][T15505] veth4: left promiscuous mode [ 324.590553][T15505] veth5: left promiscuous mode [ 324.595841][T15505] gretap1: left promiscuous mode [ 324.600985][T15505] bond0: left promiscuous mode [ 324.652704][T15505] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 324.668375][T15505] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 324.677950][T15505] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 324.692973][T15505] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 324.712873][T15505] geneve2: left promiscuous mode [ 324.717870][T15505] geneve2: left allmulticast mode [ 324.734233][T15505] veth7: left allmulticast mode [ 324.787023][T15505] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 324.816648][T15505] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 324.847767][T15505] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 324.859552][T15505] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 324.965854][T15520] netlink: 'syz.4.2721': attribute type 3 has an invalid length. [ 325.038595][T15537] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2726'. [ 325.309403][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2728'. [ 325.399421][T15222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.459799][T15546] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 325.615537][T15552] syzkaller1: entered promiscuous mode [ 325.627790][T15552] syzkaller1: entered allmulticast mode [ 325.669262][T15222] veth0_vlan: entered promiscuous mode [ 325.899820][T15222] veth1_vlan: entered promiscuous mode [ 326.065207][T15222] veth0_macvtap: entered promiscuous mode [ 326.134658][T15222] veth1_macvtap: entered promiscuous mode [ 326.215061][T15222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.281236][T15222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.300291][T15222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.338507][T15566] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 326.354290][T10462] syzkaller1: tun_net_xmit 90 [ 326.383167][T15566] syzkaller1: Linktype set failed because interface is up [ 326.401035][T15222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.419733][T15222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.437908][T15222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.454630][T15566] xt_nat: multiple ranges no longer supported [ 326.490545][T15573] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 326.558909][T15574] lo: entered promiscuous mode [ 326.580588][T15574] lo: entered allmulticast mode [ 326.633358][T15574] tunl0: entered promiscuous mode [ 326.667182][T15574] tunl0: entered allmulticast mode [ 326.680108][T15577] __nla_validate_parse: 2 callbacks suppressed [ 326.680129][T15577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2739'. [ 326.772766][T15574] gre0: entered promiscuous mode [ 326.777791][T15574] gre0: entered allmulticast mode [ 326.792818][T15574] gretap0: entered promiscuous mode [ 326.798078][T15574] gretap0: entered allmulticast mode [ 326.811265][T15574] erspan0: entered promiscuous mode [ 326.845853][T15574] erspan0: entered allmulticast mode [ 326.862419][T15574] ip_vti0: entered promiscuous mode [ 326.875715][T15574] ip_vti0: entered allmulticast mode [ 326.885890][T15574] ip6_vti0: entered promiscuous mode [ 326.898086][T15574] ip6_vti0: entered allmulticast mode [ 326.908763][T15574] sit0: entered promiscuous mode [ 326.918333][T15574] sit0: entered allmulticast mode [ 326.931219][T15574] ip6tnl0: entered promiscuous mode [ 326.941288][T15574] ip6tnl0: entered allmulticast mode [ 326.957230][T15574] ip6gre0: entered promiscuous mode [ 326.966115][T15574] ip6gre0: entered allmulticast mode [ 326.980308][T15574] ip6gretap0: entered promiscuous mode [ 326.989417][T15574] ip6gretap0: entered allmulticast mode [ 327.000378][T15574] team0: entered promiscuous mode [ 327.009109][T15574] team_slave_0: entered promiscuous mode [ 327.031680][T15574] team_slave_1: entered promiscuous mode [ 327.041145][T15574] geneve0: entered promiscuous mode [ 327.063318][T15574] team0: entered allmulticast mode [ 327.070194][T15574] team_slave_0: entered allmulticast mode [ 327.085993][T15574] team_slave_1: entered allmulticast mode [ 327.094423][T15574] geneve0: entered allmulticast mode [ 327.104457][T15574] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.117044][T15574] dummy0: entered promiscuous mode [ 327.126139][T15574] dummy0: entered allmulticast mode [ 327.139015][T15574] nlmon0: entered promiscuous mode [ 327.147107][T15574] nlmon0: entered allmulticast mode [ 327.160120][T15574] caif0: entered promiscuous mode [ 327.179776][T15574] caif0: entered allmulticast mode [ 327.187567][T15574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.214349][T15222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.237012][T15222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.249639][T15222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.265631][T15222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.439614][T15566] bond0 (unregistering): Released all slaves [ 327.458444][T10462] syzkaller1: tun_net_xmit 90 [ 327.698238][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'. [ 327.969725][ T7584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.986360][ T7584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.007362][ T7584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.016657][ T7584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.072308][T15596] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2745'. [ 328.193345][T15606] netlink: 'syz.0.2749': attribute type 10 has an invalid length. [ 328.210334][T15606] macvtap0: left allmulticast mode [ 328.227922][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2749'. [ 328.363350][T15612] team0: entered promiscuous mode [ 328.368501][T15612] team_slave_0: entered promiscuous mode [ 328.385597][T15612] team_slave_1: entered promiscuous mode [ 328.393164][T15612] batadv_slave_1: entered promiscuous mode [ 328.489195][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2753'. [ 328.502727][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2753'. [ 328.648807][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2756'. [ 328.966742][T15646] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2761'. [ 329.011691][T15648] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2763'. [ 329.023912][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.034214][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.044354][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.056903][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.068712][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.112519][T15651] xfrm0 speed is unknown, defaulting to 1000 [ 329.156191][T15655] netlink: 'syz.0.2764': attribute type 1 has an invalid length. [ 329.175906][T15655] netlink: 'syz.0.2764': attribute type 11 has an invalid length. [ 329.186635][T15655] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2764'. [ 329.285214][T15651] chnl_net:caif_netlink_parms(): no params data found [ 329.513479][T15651] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.533016][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.533572][T15678] netlink: 'syz.4.2769': attribute type 4 has an invalid length. [ 329.540322][T15651] bridge_slave_0: entered allmulticast mode [ 329.582086][T15651] bridge_slave_0: entered promiscuous mode [ 329.621120][T15651] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.623001][T15675] netlink: 'syz.4.2769': attribute type 4 has an invalid length. [ 329.637665][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.650277][T15651] bridge_slave_1: entered allmulticast mode [ 329.658739][T15651] bridge_slave_1: entered promiscuous mode [ 329.794268][T15651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.830697][T15651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.918293][T15651] team0: Port device team_slave_0 added [ 329.958074][T15651] team0: Port device team_slave_1 added [ 329.998442][T15700] xfrm0 speed is unknown, defaulting to 1000 [ 330.042742][T15651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.061706][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.138441][T15651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.169658][T15651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.177581][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.204551][T15651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.309973][T15651] hsr_slave_0: entered promiscuous mode [ 330.324432][T15651] hsr_slave_1: entered promiscuous mode [ 330.330860][T15651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.340272][T15651] Cannot create hsr debugfs directory [ 330.641192][T15651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.695969][T15729] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 330.750688][T15651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.012742][T15651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.132048][ T5837] Bluetooth: hci2: command tx timeout [ 331.329895][T15651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.410285][T15759] netlink: 'syz.0.2794': attribute type 3 has an invalid length. [ 331.434770][T15760] FAULT_INJECTION: forcing a failure. [ 331.434770][T15760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.448090][T15760] CPU: 0 UID: 0 PID: 15760 Comm: syz.4.2793 Not tainted 6.14.0-syzkaller-05901-gf278b6d5bb46 #0 PREEMPT(full) [ 331.448134][T15760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.448154][T15760] Call Trace: [ 331.448167][T15760] [ 331.448180][T15760] dump_stack_lvl+0x241/0x360 [ 331.448217][T15760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.448245][T15760] ? __pfx__printk+0x10/0x10 [ 331.448279][T15760] should_fail_ex+0x424/0x570 [ 331.448311][T15760] _copy_from_iter+0x211/0x1c70 [ 331.448337][T15760] ? __build_skb_around+0x247/0x3d0 [ 331.448365][T15760] ? __alloc_skb+0x298/0x480 [ 331.448388][T15760] ? __pfx__copy_from_iter+0x10/0x10 [ 331.448411][T15760] ? __pfx___alloc_skb+0x10/0x10 [ 331.448437][T15760] ? skb_put+0x114/0x1f0 [ 331.448464][T15760] netlink_sendmsg+0x73c/0xcd0 [ 331.448494][T15760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.448518][T15760] ? aa_sock_msg_perm+0x91/0x160 [ 331.448549][T15760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.448569][T15760] __sock_sendmsg+0x221/0x270 [ 331.448590][T15760] ____sys_sendmsg+0x523/0x860 [ 331.448623][T15760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.448649][T15760] ? __fget_files+0x2a/0x420 [ 331.448679][T15760] ? __fget_files+0x2a/0x420 [ 331.448714][T15760] __sys_sendmsg+0x271/0x360 [ 331.448744][T15760] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.448818][T15760] ? do_syscall_64+0xb6/0x230 [ 331.448868][T15760] do_syscall_64+0xf3/0x230 [ 331.448896][T15760] ? clear_bhb_loop+0x45/0xa0 [ 331.448920][T15760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.448940][T15760] RIP: 0033:0x7fd0f978d169 [ 331.448957][T15760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.448976][T15760] RSP: 002b:00007fd0fa5d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.448999][T15760] RAX: ffffffffffffffda RBX: 00007fd0f99a5fa0 RCX: 00007fd0f978d169 [ 331.449015][T15760] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 331.449028][T15760] RBP: 00007fd0fa5d0090 R08: 0000000000000000 R09: 0000000000000000 [ 331.449042][T15760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.449054][T15760] R13: 0000000000000000 R14: 00007fd0f99a5fa0 R15: 00007fff477f55b8 [ 331.449081][T15760] [ 331.731033][T15764] __nla_validate_parse: 7 callbacks suppressed [ 331.731053][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2796'. [ 331.861974][T15775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2798'. [ 331.903624][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2798'. [ 332.050947][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2799'. [ 332.058698][T15651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 332.088514][T15790] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2802'. [ 332.168007][T15651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.242038][T15651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.282835][T15651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 332.334731][T15801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2806'. [ 332.408817][T15651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.431807][T15651] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.452942][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.460103][ T7580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.489247][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.496548][ T7584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.592698][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 332.734132][ T5837] Bluetooth: hci0: command tx timeout [ 332.833371][T15651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.883697][T15651] veth0_vlan: entered promiscuous mode [ 332.897597][T15651] veth1_vlan: entered promiscuous mode [ 332.977589][T15651] veth0_macvtap: entered promiscuous mode [ 333.003800][T15651] veth1_macvtap: entered promiscuous mode [ 333.040270][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.087749][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.121694][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.155636][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.186608][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.213695][ T5837] Bluetooth: hci2: command tx timeout [ 333.221072][T15839] netlink: 'syz.0.2816': attribute type 10 has an invalid length. [ 333.233956][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.244923][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.254993][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.281568][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.317711][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.375443][T15839] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 333.389006][T15839] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 333.442642][T15651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.459009][T15651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.519765][T15651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.561820][T15651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.808982][ T7580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.819464][ T7580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.929560][ T7593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.938445][ T7593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.943516][T15871] openvswitch: netlink: Missing key (keys=40, expected=80) [ 334.174195][T15882] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2829'. [ 334.413551][T15900] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2834'. [ 334.423442][T15900] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2834'. [ 336.044532][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.061752][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.071517][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.094119][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.111615][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.171055][T15979] xfrm0 speed is unknown, defaulting to 1000 [ 336.195379][T15982] netlink: 'syz.0.2864': attribute type 7 has an invalid length. [ 336.224878][T15982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.240266][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.260114][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.272676][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.280645][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.296965][T15982] vlan2: left promiscuous mode [ 336.303928][T15982] vlan2: left allmulticast mode [ 336.309543][T15982] hsr_slave_1: left allmulticast mode [ 336.309709][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.468991][T15986] xfrm0 speed is unknown, defaulting to 1000 [ 336.786759][T16016] netlink: 'syz.0.2874': attribute type 21 has an invalid length. [ 336.808470][T15979] chnl_net:caif_netlink_parms(): no params data found [ 336.820745][T16016] __nla_validate_parse: 10 callbacks suppressed [ 336.820767][T16016] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2874'. [ 336.878365][T15986] chnl_net:caif_netlink_parms(): no params data found [ 336.962982][T16016] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2874'. [ 337.215193][T16028] xt_CT: No such helper "pptp" [ 337.308862][T16040] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 337.362091][T15986] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.376897][T15986] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.390215][T15986] bridge_slave_0: entered allmulticast mode [ 337.414989][T15986] bridge_slave_0: entered promiscuous mode [ 337.433779][T15979] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.444741][T15979] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.459786][T15979] bridge_slave_0: entered allmulticast mode [ 337.476287][T15979] bridge_slave_0: entered promiscuous mode [ 337.494794][T16051] xt_ecn: cannot match TCP bits for non-tcp packets [ 337.496068][T15986] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.509013][T15986] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.517404][T15986] bridge_slave_1: entered allmulticast mode [ 337.524761][T15986] bridge_slave_1: entered promiscuous mode [ 337.525445][T16051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.531787][T15979] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.570396][T15979] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.578314][T15979] bridge_slave_1: entered allmulticast mode [ 337.585616][T15979] bridge_slave_1: entered promiscuous mode [ 337.608276][T16051] batman_adv: batadv0: Adding interface: dummy0 [ 337.615845][T16051] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 337.642942][T16051] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 337.752295][T15979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.824412][T15986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.843436][T15979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.890639][T15986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.945962][T15979] team0: Port device team_slave_0 added [ 337.975272][T16067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2888'. [ 338.046625][T15979] team0: Port device team_slave_1 added [ 338.106634][T15986] team0: Port device team_slave_0 added [ 338.125111][T15986] team0: Port device team_slave_1 added [ 338.170547][T15979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.177709][ T5834] Bluetooth: hci1: command tx timeout [ 338.192260][T15979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.227985][T15979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.272335][T15986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.279330][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.307424][T15986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.329118][T15979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.357071][T15979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.383638][T15979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.395399][T15986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.409578][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.437017][ T5834] Bluetooth: hci2: command tx timeout [ 338.448199][T15986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.603362][T16095] sctp: [Deprecated]: syz.0.2895 (pid 16095) Use of int in maxseg socket option. [ 338.603362][T16095] Use struct sctp_assoc_value instead [ 338.606189][T15979] hsr_slave_0: entered promiscuous mode [ 338.632068][T15979] hsr_slave_1: entered promiscuous mode [ 338.639922][T15979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.648000][T15979] Cannot create hsr debugfs directory [ 338.657747][T15986] hsr_slave_0: entered promiscuous mode [ 338.664417][T15986] hsr_slave_1: entered promiscuous mode [ 338.670509][T15986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.679116][T15986] Cannot create hsr debugfs directory [ 338.712970][T16102] xt_CT: No such helper "snmp_trap" [ 338.858627][T16110] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 338.966590][T16114] netlink: 'syz.1.2902': attribute type 1 has an invalid length. [ 339.028526][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2901'. [ 339.565946][T15979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.605193][ T30] audit: type=1800 audit(1743573312.163:4): pid=16137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2907" name=D6 dev="tmpfs" ino=3076 res=0 errno=0 [ 339.650249][T16140] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2908'. [ 339.662674][T16140] unsupported nlmsg_type 40 [ 339.773149][T15979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.867499][T15979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.948172][T15979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.990295][T16151] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2909'. [ 340.253353][ T5834] Bluetooth: hci1: command tx timeout [ 340.263637][T15986] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.311205][T15986] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.328511][T15986] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.345954][T15986] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.485629][T15979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 340.492572][ T5834] Bluetooth: hci2: command tx timeout [ 340.529102][T15979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.557414][T15979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 340.641595][T15979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.757010][T15986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.811843][T15986] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.838818][ T7563] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.846035][ T7563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.904196][ T7593] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.911433][ T7593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.016245][T15979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.059888][T15979] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.119544][ T7563] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.126739][ T7563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.150978][ T7563] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.158135][ T7563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.260273][T16197] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2926'. [ 341.280263][T16200] SET target dimension over the limit! [ 341.290985][T16200] unsupported nla_type 17672 [ 341.374407][T15979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.387713][T15979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.471898][T15986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.583341][T15986] veth0_vlan: entered promiscuous mode [ 341.624036][T15986] veth1_vlan: entered promiscuous mode [ 341.712988][T15986] veth0_macvtap: entered promiscuous mode [ 341.750428][T15986] veth1_macvtap: entered promiscuous mode [ 341.788407][T15986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.802235][T15986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.827765][T15986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.838564][T15986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.849554][T15986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.881025][T15986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.903324][T15986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.942780][T15979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.958145][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2933'. [ 341.971271][T15986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.001008][T15986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.012287][T15986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.024375][T15986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.034714][T15986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.045935][T15986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.057812][T15986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.066319][T16225] bridge_slave_1: left allmulticast mode [ 342.072993][T16225] bridge_slave_1: left promiscuous mode [ 342.078819][T16225] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.090009][T16225] bridge_slave_0: left allmulticast mode [ 342.100871][T16225] bridge_slave_0: left promiscuous mode [ 342.109200][T16225] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.175241][T16223] tap0: tun_chr_ioctl cmd 2148553947 [ 342.249770][T15986] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.261562][T15986] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.270690][T15986] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.301545][T15986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.340284][ T5834] Bluetooth: hci1: command tx timeout [ 342.543573][T15979] veth0_vlan: entered promiscuous mode [ 342.556286][ T7584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.564903][T15979] veth1_vlan: entered promiscuous mode [ 342.573201][ T5834] Bluetooth: hci2: command tx timeout [ 342.603065][ T7584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.674475][ T7584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.708976][ T7584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.739353][T15979] veth0_macvtap: entered promiscuous mode [ 342.790010][T15979] veth1_macvtap: entered promiscuous mode [ 342.835038][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.858176][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.883902][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.906818][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.927356][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.938265][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2942'. [ 342.941802][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.967748][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.987144][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.001031][T15979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.063435][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.078301][T16260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2944'. [ 343.100412][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.115836][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.136363][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.152206][T16266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.161684][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.175757][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.186425][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.197145][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.204049][T16270] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 343.208779][T15979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.229694][T16270] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 343.238543][T16270] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 343.249817][T16270] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 343.258926][T16270] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 343.272341][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.281146][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.291291][T16266] bond0: entered promiscuous mode [ 343.297322][T16266] bond0: entered allmulticast mode [ 343.303071][T16266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.310625][T16266] bridge7: port 2(bond0) entered blocking state [ 343.315755][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.317375][T16266] bridge7: port 2(bond0) entered disabled state [ 343.367563][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.392558][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.399525][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.407027][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.414154][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.420966][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.428765][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.436661][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.443752][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.450918][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.458512][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.485934][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.507427][T15979] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.517370][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.525215][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.535500][T16277] can: request_module (can-proto-0) failed. [ 343.541929][T15979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.551526][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.558586][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.565844][T15979] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.574893][T15979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.584188][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.591083][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.600355][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.610449][T16282] netlink: 'syz.1.2948': attribute type 10 has an invalid length. [ 343.618640][T16282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2948'. [ 343.628151][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.635829][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.642886][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.649766][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.656697][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.663853][T16270] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:25859 [ 343.744537][T16285] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 343.795309][T16282] geneve0: entered promiscuous mode [ 343.802448][T16282] team0: Port device geneve0 added [ 343.985908][ T7585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.004455][ T7585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.063737][ T7593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.072662][ T7593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.168931][T16296] netlink: 'syz.0.2952': attribute type 10 has an invalid length. [ 344.184145][T16294] GUP no longer grows the stack in syz.4.2954 (16294): 200000006000-20000000a000 (200000005000) [ 344.199356][T16296] batman_adv: batadv0: Adding interface: wlan0 [ 344.205884][T16294] CPU: 0 UID: 0 PID: 16294 Comm: syz.4.2954 Not tainted 6.14.0-syzkaller-05901-gf278b6d5bb46 #0 PREEMPT(full) [ 344.205916][T16294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 344.205931][T16294] Call Trace: [ 344.205938][T16294] [ 344.205946][T16294] dump_stack_lvl+0x241/0x360 [ 344.205984][T16294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.206013][T16294] ? __pfx__printk+0x10/0x10 [ 344.206037][T16294] ? find_vma+0xfa/0x170 [ 344.206066][T16294] __get_user_pages+0x3b49/0x4180 [ 344.206111][T16294] ? __lock_acquire+0xad5/0xd80 [ 344.206145][T16294] ? __pfx___get_user_pages+0x10/0x10 [ 344.206163][T16294] ? __gup_longterm_locked+0xd86/0x1850 [ 344.206188][T16294] ? __pfx_down_read_killable+0x10/0x10 [ 344.206222][T16294] ? __lock_acquire+0xad5/0xd80 [ 344.206265][T16294] __gup_longterm_locked+0xec1/0x1850 [ 344.206298][T16294] ? try_get_folio+0xf1/0x6e0 [ 344.206323][T16294] ? try_grab_folio_fast+0x1d8/0x700 [ 344.206345][T16294] ? __pfx___gup_longterm_locked+0x10/0x10 [ 344.206374][T16294] ? gup_fast_fallback+0x2083/0x29d0 [ 344.206406][T16294] gup_fast_fallback+0x226b/0x29d0 [ 344.206453][T16294] ? __pfx_gup_fast_fallback+0x10/0x10 [ 344.206483][T16294] ? kvm_sched_clock_read+0x11/0x20 [ 344.206509][T16294] ? sched_clock+0x4a/0x70 [ 344.206540][T16294] ? sched_clock_cpu+0x77/0x4d0 [ 344.206569][T16294] ? __lock_acquire+0xad5/0xd80 [ 344.206603][T16294] ? is_valid_gup_args+0x124/0x200 [ 344.206626][T16294] get_user_pages_fast+0xd2/0x160 [ 344.206651][T16294] ? __pfx_get_user_pages_fast+0x10/0x10 [ 344.206674][T16294] ? rcu_is_watching+0x15/0xb0 [ 344.206697][T16294] ? trace_contention_end+0x3c/0x120 [ 344.206723][T16294] __iov_iter_get_pages_alloc+0x39d/0xa90 [ 344.206757][T16294] ? __se_sys_vmsplice+0x4bc/0x1430 [ 344.206790][T16294] iov_iter_get_pages2+0xd1/0x130 [ 344.206819][T16294] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 344.206853][T16294] __se_sys_vmsplice+0x6c6/0x1430 [ 344.206899][T16294] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 344.206930][T16294] ? __pfx_futex_wake+0x10/0x10 [ 344.207005][T16294] ? do_syscall_64+0xb6/0x230 [ 344.207036][T16294] do_syscall_64+0xf3/0x230 [ 344.207063][T16294] ? clear_bhb_loop+0x45/0xa0 [ 344.207086][T16294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.207106][T16294] RIP: 0033:0x7fd0f978d169 [ 344.207124][T16294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.207142][T16294] RSP: 002b:00007fd0fa5d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 344.207165][T16294] RAX: ffffffffffffffda RBX: 00007fd0f99a5fa0 RCX: 00007fd0f978d169 [ 344.207182][T16294] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 344.207196][T16294] RBP: 00007fd0f980e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 344.207209][T16294] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 344.207222][T16294] R13: 0000000000000000 R14: 00007fd0f99a5fa0 R15: 00007fff477f55b8 [ 344.207250][T16294] [ 344.209295][T16296] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 344.441888][ T5834] Bluetooth: hci1: command tx timeout [ 344.458486][T16296] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 344.759025][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2957'. [ 344.778239][T16309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2957'. [ 344.842521][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.853544][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.864509][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.872476][T16322] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2960'. [ 344.885060][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.893361][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.060658][T16318] xfrm0 speed is unknown, defaulting to 1000 [ 345.230780][T16318] chnl_net:caif_netlink_parms(): no params data found [ 345.283727][T16318] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.290884][T16318] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.298884][T16318] bridge_slave_0: entered allmulticast mode [ 345.307345][T16318] bridge_slave_0: entered promiscuous mode [ 345.315517][T16318] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.323228][T16318] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.330464][T16318] bridge_slave_1: entered allmulticast mode [ 345.337665][T16318] bridge_slave_1: entered promiscuous mode [ 345.363380][T16318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.375244][T16318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.407147][T16318] team0: Port device team_slave_0 added [ 345.415451][T16318] team0: Port device team_slave_1 added [ 345.439536][T16318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.447193][T16318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.474207][T16318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.488066][T16318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.495078][T16318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.521750][T16318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.674043][T16318] hsr_slave_0: entered promiscuous mode [ 345.692008][T16318] hsr_slave_1: entered promiscuous mode [ 345.713398][T16318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.730040][T16318] Cannot create hsr debugfs directory [ 346.036643][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.046414][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.056804][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.065993][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.073751][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.104792][T16318] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.245326][T16318] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.302488][T16355] xfrm0 speed is unknown, defaulting to 1000 [ 346.354022][T16318] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.448879][T16318] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.667696][T16318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.680476][T16318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.693244][T16318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.729054][T16318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.739947][T16355] chnl_net:caif_netlink_parms(): no params data found [ 346.933968][T16355] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.952340][T16355] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.969643][T16355] bridge_slave_0: entered allmulticast mode [ 346.975805][ T5834] Bluetooth: hci1: command tx timeout [ 346.985228][T16355] bridge_slave_0: entered promiscuous mode [ 347.002736][T16355] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.010530][T16355] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.018168][T16355] bridge_slave_1: entered allmulticast mode [ 347.025863][T16355] bridge_slave_1: entered promiscuous mode [ 347.080509][T16355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.117422][T16318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.130585][T16355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.199555][T16395] xfrm0 speed is unknown, defaulting to 1000 [ 347.208413][T16355] team0: Port device team_slave_0 added [ 347.318768][T16355] team0: Port device team_slave_1 added [ 347.332377][T16402] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2982'. [ 347.403072][T16355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.410068][T16355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.446592][T16355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.475960][T16318] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.487343][T16355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.495171][T16355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.522267][T16355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.557609][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2985'. [ 347.569590][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.576758][ T7575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.620320][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.627510][ T7575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.682823][T16355] hsr_slave_0: entered promiscuous mode [ 347.702891][T16355] hsr_slave_1: entered promiscuous mode [ 347.709692][T16355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.729082][T16355] Cannot create hsr debugfs directory [ 348.172328][ T5834] Bluetooth: hci2: command tx timeout [ 348.246777][T16355] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.376216][T16355] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.427055][T16318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.487882][T16355] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.510108][T16459] netlink: 'syz.4.2998': attribute type 8 has an invalid length. [ 348.634643][T16355] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.684881][T16318] veth0_vlan: entered promiscuous mode [ 348.744566][T16318] veth1_vlan: entered promiscuous mode [ 348.827545][T16318] veth0_macvtap: entered promiscuous mode [ 348.856698][T16318] veth1_macvtap: entered promiscuous mode [ 348.894592][T16355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.907484][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.931742][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.953023][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.971927][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.991389][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.004533][T16470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'. [ 349.008507][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.050631][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.052202][ T5834] Bluetooth: hci1: command tx timeout [ 349.065578][T16471] netlink: 'syz.1.3001': attribute type 1 has an invalid length. [ 349.075245][T16471] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3001'. [ 349.096799][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.106827][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.117549][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.119362][T16471] netlink: 'syz.1.3001': attribute type 1 has an invalid length. [ 349.129524][T16318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.148529][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.160007][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.170160][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.201681][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.230371][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.248481][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.263139][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.274618][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.285507][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.296701][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.309878][T16318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.317688][T16355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.328124][T16355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.361187][T16318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.400656][T16318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.420248][T16318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.430138][T16318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.459855][T16355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.505428][T16485] IPv6: Can't replace route, no match found [ 349.513339][T16485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3007'. [ 349.536008][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3004'. [ 349.684444][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'. [ 349.719916][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3008'. [ 349.738670][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3008'. [ 349.761557][ T7585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.769396][ T7585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.841148][T16493] 8021q: adding VLAN 0 to HW filter on device bond9 [ 349.913120][T16504] Cannot find del_set index 4 as target [ 349.935568][T16501] 8021q: adding VLAN 0 to HW filter on device bond9 [ 349.949258][T16501] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 349.972691][T16501] bond9: (slave vcan1): Error -95 calling set_mac_address [ 350.016171][T16512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3011'. [ 350.044804][ T7593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.078422][ T7593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.104093][T16355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.177286][T16355] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.222704][ T7593] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.229870][ T7593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.251923][ T5834] Bluetooth: hci2: command tx timeout [ 350.318184][ T7563] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.325371][ T7563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.528738][T16355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 350.543071][T16355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.698760][T16537] tipc: Started in network mode [ 350.721020][T16537] tipc: Node identity 1ae77781c036, cluster identity 4711 [ 350.750375][T16537] tipc: Enabled bearer , priority 0 [ 350.778382][T16533] syzkaller0: entered promiscuous mode [ 350.791979][T16533] syzkaller0: entered allmulticast mode [ 350.819187][T16544] netlink: 'syz.0.3019': attribute type 29 has an invalid length. [ 350.861287][T16533] tipc: Resetting bearer [ 350.887415][T16355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.971142][T16355] veth0_vlan: entered promiscuous mode [ 350.995422][T16355] veth1_vlan: entered promiscuous mode [ 351.069952][T16355] veth0_macvtap: entered promiscuous mode [ 351.071546][T16549] netlink: 'syz.0.3021': attribute type 1 has an invalid length. [ 351.090255][T16355] veth1_macvtap: entered promiscuous mode [ 351.128239][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.170647][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.200774][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.225375][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.247069][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.267934][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.290302][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.315595][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.316559][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.334796][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.343270][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.343793][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.362079][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.363899][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.380668][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.386372][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.391786][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.421623][T16355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.438385][T16531] tipc: Resetting bearer [ 351.480827][T16531] tipc: Disabling bearer [ 351.496195][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.507970][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.519746][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.530420][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.540657][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.551963][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.562515][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.573477][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.583815][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.594485][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.604363][T16355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.616029][T16355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.632471][T16355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.665629][T16355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.692683][T16355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.701997][T16355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.711435][T16355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.764003][T16559] xfrm0 speed is unknown, defaulting to 1000 [ 351.933352][T16553] xfrm0 speed is unknown, defaulting to 1000 [ 352.107955][ T7584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.121652][ T7584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.343005][ T5837] Bluetooth: hci2: command tx timeout [ 352.626064][ T7584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.661584][ T7584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.795454][T16553] chnl_net:caif_netlink_parms(): no params data found [ 352.919298][T16596] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20004 [ 353.097474][T16608] __nla_validate_parse: 5 callbacks suppressed [ 353.097495][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3036'. [ 353.148107][T16553] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.213157][T16553] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.233218][T16553] bridge_slave_0: entered allmulticast mode [ 353.263766][T16553] bridge_slave_0: entered promiscuous mode [ 353.293305][T16608] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 353.316230][T16608] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 353.471639][ T5837] Bluetooth: hci1: command tx timeout [ 353.772674][T16553] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.823752][T16553] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.831080][T16553] bridge_slave_1: entered allmulticast mode [ 353.882820][T16553] bridge_slave_1: entered promiscuous mode [ 356.065672][ T5837] Bluetooth: hci1: command tx timeout [ 358.195447][ T5837] Bluetooth: hci1: command tx timeout [ 360.455115][ C1] sched: DL replenish lagged too much [ 360.932128][ T5837] Bluetooth: hci1: command tx timeout [ 479.959169][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 625.923884][ T31] INFO: task kworker/u8:2:36 blocked for more than 147 seconds. [ 626.073418][ T31] Not tainted 6.14.0-syzkaller-05901-gf278b6d5bb46 #0 [ 626.080770][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.342653][ T31] task:kworker/u8:2 state:D stack:22616 pid:36 tgid:36 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 626.511599][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 626.517680][ T31] Call Trace: [ 626.520983][ T31] [ 626.691562][ T31] __schedule+0x1b18/0x50e0 [ 626.696168][ T31] ? __lock_acquire+0xad5/0xd80 [ 626.701069][ T31] ? __pfx___schedule+0x10/0x10 [ 626.881340][ T31] ? schedule+0x90/0x360 [ 626.885679][ T31] ? schedule+0x90/0x360 [ 626.889964][ T31] schedule+0x163/0x360 [ 627.061367][ T31] schedule_preempt_disabled+0x13/0x30 [ 627.066918][ T31] __mutex_lock+0x7fa/0x1000 [ 627.181354][ T31] ? __mutex_lock+0x5ed/0x1000 [ 627.186209][ T31] ? addrconf_dad_work+0x110/0x16a0 [ 627.291431][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 627.296641][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 627.411467][ T31] ? look_up_lock_class+0x7b/0x170 [ 627.416667][ T31] addrconf_dad_work+0x110/0x16a0 [ 627.521412][ T31] ? __lock_acquire+0xad5/0xd80 [ 627.526378][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 627.701440][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 627.707241][ T31] process_scheduled_works+0xac3/0x18e0 [ 627.822714][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 627.828802][ T31] ? assign_work+0x367/0x3d0 [ 627.951373][ T31] worker_thread+0x870/0xd30 [ 627.956056][ T31] ? __kthread_parkme+0x169/0x1d0 [ 627.961119][ T31] ? __pfx_worker_thread+0x10/0x10 [ 628.111318][ T31] kthread+0x7a9/0x920 [ 628.115474][ T31] ? __pfx_worker_thread+0x10/0x10 [ 628.120618][ T31] ? __pfx_kthread+0x10/0x10 [ 628.291451][ T31] ? __pfx_kthread+0x10/0x10 [ 628.296139][ T31] ? __pfx_kthread+0x10/0x10 [ 628.441441][ T31] ? __pfx_kthread+0x10/0x10 [ 628.446112][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 628.531430][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 628.536722][ T31] ? __pfx_kthread+0x10/0x10 [ 628.601512][ T31] ret_from_fork+0x4b/0x80 [ 628.606006][ T31] ? __pfx_kthread+0x10/0x10 [ 628.632167][ T31] ret_from_fork_asm+0x1a/0x30 [ 628.637009][ T31] [ 628.731558][ T31] [ 628.731558][ T31] Showing all locks held in the system: [ 628.739354][ T31] 3 locks held by kworker/0:0/9: [ 628.861423][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 628.931304][ T31] #1: ffffc900000e7c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 628.971680][ T31] #2: ffffffff900e59c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 629.016580][ T31] 1 lock held by khungtaskd/31: [ 629.031365][ T31] #0: ffffffff8ed3a260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 629.091445][ T31] 3 locks held by kworker/u8:2/36: [ 629.096628][ T31] #0: ffff8880315a8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 629.181395][ T31] #1: ffffc90000ad7c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 629.251317][ T31] #2: ffffffff900e59c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x110/0x16a0 [ 629.260947][ T31] 2 locks held by kworker/u8:7/3027: [ 629.321337][ T31] 4 locks held by kworker/1:2/3171: [ 629.327609][ T31] 4 locks held by udevd/5209: [ 629.381839][ T31] 2 locks held by getty/5592: [ 629.386576][ T31] #0: ffff888031f460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 629.461408][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 [ 629.511538][ T31] 2 locks held by syz-executor/5821: [ 629.516896][ T31] 2 locks held by syz-executor/5843: [ 629.541336][ T31] 1 lock held by syz-executor/5845: [ 629.546600][ T31] #0: ffffffff900e59c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 629.621473][ T31] 4 locks held by kworker/u8:31/7570: [ 629.626910][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 629.681516][ T31] #1: ffffc9000d087c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 629.731561][ T31] #2: ffffffff900d8d90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 629.761761][ T31] #3: ffffffff8ed3f640 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 629.811584][ T31] 1 lock held by syz-executor/16355: [ 629.816942][ T31] #0: ffffffff900e59c8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x821/0xf30 [ 629.871546][ T31] 3 locks held by syz-executor/16553: [ 629.876982][ T31] 3 locks held by kworker/1:6/16631: [ 629.911602][ T31] 2 locks held by syz-executor/16633: [ 629.917041][ T31] 1 lock held by syz-executor/16635: [ 629.960663][ T31] #0: ffffffff8ed3f778 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 630.011604][ T31] [ 630.013992][ T31] ============================================= [ 630.013992][ T31] [ 630.091718][ T31] NMI backtrace for cpu 1 [ 630.091754][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-05901-gf278b6d5bb46 #0 PREEMPT(full) [ 630.091781][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 630.091794][ T31] Call Trace: [ 630.091802][ T31] [ 630.091811][ T31] dump_stack_lvl+0x241/0x360 [ 630.091848][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.091875][ T31] ? __pfx__printk+0x10/0x10 [ 630.091910][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 630.091940][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 630.091961][ T31] ? _printk+0xd5/0x120 [ 630.091987][ T31] ? __wake_up_klogd+0xcc/0x110 [ 630.092014][ T31] ? __pfx__printk+0x10/0x10 [ 630.092042][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 630.092063][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 630.092091][ T31] watchdog+0x1058/0x10a0 [ 630.092121][ T31] ? watchdog+0x1ea/0x10a0 [ 630.092154][ T31] ? __pfx_watchdog+0x10/0x10 [ 630.092183][ T31] kthread+0x7a9/0x920 [ 630.092210][ T31] ? __pfx_watchdog+0x10/0x10 [ 630.092239][ T31] ? __pfx_kthread+0x10/0x10 [ 630.092263][ T31] ? __pfx_kthread+0x10/0x10 [ 630.092288][ T31] ? __pfx_kthread+0x10/0x10 [ 630.092312][ T31] ? __pfx_kthread+0x10/0x10 [ 630.092337][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.092361][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 630.092389][ T31] ? __pfx_kthread+0x10/0x10 [ 630.092415][ T31] ret_from_fork+0x4b/0x80 [ 630.092434][ T31] ? __pfx_kthread+0x10/0x10 [ 630.092459][ T31] ret_from_fork_asm+0x1a/0x30 [ 630.092486][ T31] [ 630.092494][ T31] Sending NMI from CPU 1 to CPUs 0: [ 630.257175][ C0] NMI backtrace for cpu 0 [ 630.257194][ C0] CPU: 0 UID: 0 PID: 16630 Comm: kworker/0:11 Not tainted 6.14.0-syzkaller-05901-gf278b6d5bb46 #0 PREEMPT(full) [ 630.257216][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 630.257228][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 630.257262][ C0] RIP: 0010:wg_ratelimiter_gc_entries+0x3d2/0x470 [ 630.257291][ C0] Code: 87 6b 05 4d 85 ff 48 8b 5c 24 18 74 35 e8 36 1e 08 fb 48 c7 c7 a0 51 d8 8c be 4e 00 00 00 31 d2 e8 43 14 d7 fa 2e 2e 2e 31 c0 <48> ff c3 8b 05 15 81 e9 13 48 39 c3 73 11 e8 0b 1e 08 fb e9 6a fc [ 630.257306][ C0] RSP: 0000:ffffc90002ff7ac8 EFLAGS: 00000246 [ 630.257320][ C0] RAX: 0000000000000000 RBX: 0000000000000d49 RCX: ffff88805a4c0000 [ 630.257331][ C0] RDX: ffff88805a4c0000 RSI: ffffffff8e4dd585 RDI: ffffffff8ca0f000 [ 630.257343][ C0] RBP: ffffc90002ff7d20 R08: ffffffff8f853323 R09: 1ffffffff1f0a664 [ 630.257356][ C0] R10: dffffc0000000000 R11: fffffbfff1f0a665 R12: 0000000000000000 [ 630.257367][ C0] R13: dffffc0000000000 R14: 00000092ba734b14 R15: ffffffff8f853440 [ 630.257380][ C0] FS: 0000000000000000(0000) GS:ffff888124fea000(0000) knlGS:0000000000000000 [ 630.257394][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.257405][ C0] CR2: 000055558d411350 CR3: 000000008c468000 CR4: 00000000003526f0 [ 630.257420][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 630.257429][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 630.257439][ C0] Call Trace: [ 630.257446][ C0] [ 630.257454][ C0] ? nmi_cpu_backtrace+0x3d1/0x4e0 [ 630.257483][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 630.257502][ C0] ? look_up_lock_class+0x7b/0x170 [ 630.257526][ C0] ? lock_acquire+0x1fc/0x2f0 [ 630.257554][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 630.257570][ C0] ? nmi_handle+0x196/0x5e0 [ 630.257589][ C0] ? nmi_handle+0x7e/0x5e0 [ 630.257608][ C0] ? wg_ratelimiter_gc_entries+0x3d2/0x470 [ 630.257633][ C0] ? default_do_nmi+0x63/0x160 [ 630.257651][ C0] ? exc_nmi+0x123/0x1f0 [ 630.257667][ C0] ? end_repeat_nmi+0xf/0x53 [ 630.257689][ C0] ? wg_ratelimiter_gc_entries+0x3d2/0x470 [ 630.257715][ C0] ? wg_ratelimiter_gc_entries+0x3d2/0x470 [ 630.257744][ C0] ? wg_ratelimiter_gc_entries+0x3d2/0x470 [ 630.257771][ C0] [ 630.257776][ C0] [ 630.257784][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 630.257801][ C0] process_scheduled_works+0xac3/0x18e0 [ 630.257830][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 630.257850][ C0] ? assign_work+0x367/0x3d0 [ 630.257868][ C0] worker_thread+0x870/0xd30 [ 630.257892][ C0] ? __kthread_parkme+0x169/0x1d0 [ 630.257912][ C0] ? __pfx_worker_thread+0x10/0x10 [ 630.257929][ C0] kthread+0x7a9/0x920 [ 630.257952][ C0] ? __pfx_worker_thread+0x10/0x10 [ 630.257969][ C0] ? __pfx_kthread+0x10/0x10 [ 630.257989][ C0] ? __pfx_kthread+0x10/0x10 [ 630.258010][ C0] ? __pfx_kthread+0x10/0x10 [ 630.258030][ C0] ? __pfx_kthread+0x10/0x10 [ 630.258050][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.258069][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 630.258091][ C0] ? __pfx_kthread+0x10/0x10 [ 630.258112][ C0] ret_from_fork+0x4b/0x80 [ 630.258129][ C0] ? __pfx_kthread+0x10/0x10 [ 630.258149][ C0] ret_from_fork_asm+0x1a/0x30 [ 630.258171][ C0] [ 630.331416][ T7570] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 631.121460][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 631.128401][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-05901-gf278b6d5bb46 #0 PREEMPT(full) [ 631.139895][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 631.149983][ T31] Call Trace: [ 631.153284][ T31] [ 631.156231][ T31] dump_stack_lvl+0x241/0x360 [ 631.160947][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.166176][ T31] ? __pfx__printk+0x10/0x10 [ 631.170814][ T31] ? vscnprintf+0x5d/0x90 [ 631.175175][ T31] panic+0x349/0x880 [ 631.179096][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 631.184500][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 631.190681][ T31] ? __pfx_panic+0x10/0x10 [ 631.195132][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 631.200543][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 631.205938][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 631.212102][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 631.218261][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 631.224419][ T31] watchdog+0x1097/0x10a0 [ 631.228767][ T31] ? watchdog+0x1ea/0x10a0 [ 631.233200][ T31] ? __pfx_watchdog+0x10/0x10 [ 631.237888][ T31] kthread+0x7a9/0x920 [ 631.241966][ T31] ? __pfx_watchdog+0x10/0x10 [ 631.246653][ T31] ? __pfx_kthread+0x10/0x10 [ 631.251248][ T31] ? __pfx_kthread+0x10/0x10 [ 631.255846][ T31] ? __pfx_kthread+0x10/0x10 [ 631.260441][ T31] ? __pfx_kthread+0x10/0x10 [ 631.265041][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 631.270244][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 631.275458][ T31] ? __pfx_kthread+0x10/0x10 [ 631.280060][ T31] ret_from_fork+0x4b/0x80 [ 631.284484][ T31] ? __pfx_kthread+0x10/0x10 [ 631.289089][ T31] ret_from_fork_asm+0x1a/0x30 [ 631.293861][ T31] [ 631.297213][ T31] Kernel Offset: disabled [ 631.301546][ T31] Rebooting in 86400 seconds..