last executing test programs: 1m4.964944785s ago: executing program 2 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711077000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x24, 0x0, 0x0, 0xfffffffffffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x800) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x0, 0xfffc, "0a511b", 0xc, 0x33}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250200000008000100000000007947d65b3b503353131df17c8fde06cd5ce994d8e7252c4e2509831988729071edb3b10d22be090101778a1a917a95ea5b90c30c951c876a3a2a6c498b68bc8257c4531413a43fffabb3edadf1f85080ccc5070fa399c942079f8e8e55a50b3a3985a0156820b6042d8bf9eba51ff9f15fd07c2de63cb1287440b09df195fd58c3ca26ba18ef8d014db6eb6d488be68ea89c841afb8a74e7b31353ce995647c3e4c1b20d5e00001b0e07e48e22655c"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x80c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)={0xac, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r9], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}, 0x80) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 55.26620031s ago: executing program 2 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711077000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x24, 0x0, 0x0, 0xfffffffffffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x800) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x0, 0xfffc, "0a511b", 0xc, 0x33}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250200000008000100000000007947d65b3b503353131df17c8fde06cd5ce994d8e7252c4e2509831988729071edb3b10d22be090101778a1a917a95ea5b90c30c951c876a3a2a6c498b68bc8257c4531413a43fffabb3edadf1f85080ccc5070fa399c942079f8e8e55a50b3a3985a0156820b6042d8bf9eba51ff9f15fd07c2de63cb1287440b09df195fd58c3ca26ba18ef8d014db6eb6d488be68ea89c841afb8a74e7b31353ce995647c3e4c1b20d5e00001b0e07e48e22655c"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x80c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)={0xac, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r9], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}, 0x80) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 42.964394491s ago: executing program 2 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711077000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x24, 0x0, 0x0, 0xfffffffffffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x800) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x0, 0xfffc, "0a511b", 0xc, 0x33}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250200000008000100000000007947d65b3b503353131df17c8fde06cd5ce994d8e7252c4e2509831988729071edb3b10d22be090101778a1a917a95ea5b90c30c951c876a3a2a6c498b68bc8257c4531413a43fffabb3edadf1f85080ccc5070fa399c942079f8e8e55a50b3a3985a0156820b6042d8bf9eba51ff9f15fd07c2de63cb1287440b09df195fd58c3ca26ba18ef8d014db6eb6d488be68ea89c841afb8a74e7b31353ce995647c3e4c1b20d5e00001b0e07e48e22655c"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x80c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)={0xac, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r9], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}, 0x80) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 32.284140906s ago: executing program 2 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711077000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x24, 0x0, 0x0, 0xfffffffffffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x800) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x0, 0xfffc, "0a511b", 0xc, 0x33}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250200000008000100000000007947d65b3b503353131df17c8fde06cd5ce994d8e7252c4e2509831988729071edb3b10d22be090101778a1a917a95ea5b90c30c951c876a3a2a6c498b68bc8257c4531413a43fffabb3edadf1f85080ccc5070fa399c942079f8e8e55a50b3a3985a0156820b6042d8bf9eba51ff9f15fd07c2de63cb1287440b09df195fd58c3ca26ba18ef8d014db6eb6d488be68ea89c841afb8a74e7b31353ce995647c3e4c1b20d5e00001b0e07e48e22655c"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x80c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)={0xac, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r9], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}, 0x80) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 22.476812899s ago: executing program 4 (id=559): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 22.247884573s ago: executing program 4 (id=561): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000080)={0x0, 0xffffffb2}, 0x1, 0x7}, 0x4050054) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r2, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/190, 0xbe}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f0000000800)=""/220, 0xdc}, {&(0x7f0000000540)=""/133, 0x85}], 0x5}, 0x8}], 0x1, 0x40002120, 0x0) (async) recvmmsg(r2, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/190, 0xbe}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f0000000800)=""/220, 0xdc}, {&(0x7f0000000540)=""/133, 0x85}], 0x5}, 0x8}], 0x1, 0x40002120, 0x0) recvmmsg$unix(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2001, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = socket(0xf, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x2a, 0x5, 0x838) listen(r5, 0x0) (async) listen(r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffb9) (async) bpf$PROG_LOAD(0x5, 0x0, 0xffffffb9) connect$vsock_stream(r3, 0x0, 0x0) (async) connect$vsock_stream(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a000000000000000000000000400008000a40000000000900020073797a31000019fd0900010073797a4e00000000000005400000000008000840000000001400000011000100000000000000cd32a400251a5c094202749166f2abbc0000000a00001eaf476dec08b88dd2c1e353bdc22f187074db4faec885f9ad059e324e78d9eee74d6daf3d778cc3f6cefee06cebd7e15e3f2e7d9115abf1cd9b463c4d89cfa727f5b7677f160ae41a3eda1a17e57f63914299d20c3b"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000003"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) 21.9125803s ago: executing program 4 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x54, r1, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x54, r1, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) 21.570705974s ago: executing program 4 (id=567): socket$tipc(0x1e, 0x2, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000380)="fe", 0x1}], 0x101d0) socket$phonet_pipe(0x23, 0x5, 0x2) 20.171833877s ago: executing program 4 (id=571): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) (async) write(r0, &(0x7f0000000080)="db4065f60d2d74f48472036a2703ab4fd274e78002222948a758a91f9d7c517fb18ea75be8c12746cded717ee1fb2e64179a5c91123eeeba2b28308cafa151117da8d2dfd64181b1b65fd4b9e3ab994ee802a977a3b3da4bcfe3563d819bfd71e1790ab2c6af2afa07f695aaf8866390fcc526cb456c462aa6567985f7a490f22591a69e4c3ab2b668428b7248d294de5968d99e0eebc21fea693de0daf377c4a8fe2db624f9a9b75d7699686870786fa079ab04426dd47d5bff77f3f76893a8f644be2cf4a541b2c04bfa5163397f6a832202343ee185486252a1", 0xdb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}]}}]}, 0x44}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x31, 0xffffffffffffffff, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x1a9, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x19b, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x187, 0x0, @gue={{0x2, 0x1, 0x1, 0x10}, "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"}}}}}}, 0x0) 19.107061068s ago: executing program 2 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711077000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x24, 0x0, 0x0, 0xfffffffffffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x800) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x0, 0xfffc, "0a511b", 0xc, 0x33}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250200000008000100000000007947d65b3b503353131df17c8fde06cd5ce994d8e7252c4e2509831988729071edb3b10d22be090101778a1a917a95ea5b90c30c951c876a3a2a6c498b68bc8257c4531413a43fffabb3edadf1f85080ccc5070fa399c942079f8e8e55a50b3a3985a0156820b6042d8bf9eba51ff9f15fd07c2de63cb1287440b09df195fd58c3ca26ba18ef8d014db6eb6d488be68ea89c841afb8a74e7b31353ce995647c3e4c1b20d5e00001b0e07e48e22655c"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x80c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)={0xac, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r9], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}, 0x80) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 10.332444864s ago: executing program 4 (id=571): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) (async) write(r0, &(0x7f0000000080)="db4065f60d2d74f48472036a2703ab4fd274e78002222948a758a91f9d7c517fb18ea75be8c12746cded717ee1fb2e64179a5c91123eeeba2b28308cafa151117da8d2dfd64181b1b65fd4b9e3ab994ee802a977a3b3da4bcfe3563d819bfd71e1790ab2c6af2afa07f695aaf8866390fcc526cb456c462aa6567985f7a490f22591a69e4c3ab2b668428b7248d294de5968d99e0eebc21fea693de0daf377c4a8fe2db624f9a9b75d7699686870786fa079ab04426dd47d5bff77f3f76893a8f644be2cf4a541b2c04bfa5163397f6a832202343ee185486252a1", 0xdb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}]}}]}, 0x44}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x31, 0xffffffffffffffff, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x1a9, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x19b, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x187, 0x0, @gue={{0x2, 0x1, 0x1, 0x10}, "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"}}}}}}, 0x0) 9.522894159s ago: executing program 2 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711077000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x24, 0x0, 0x0, 0xfffffffffffffe72, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x800) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x0, 0xfffc, "0a511b", 0xc, 0x33}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250200000008000100000000007947d65b3b503353131df17c8fde06cd5ce994d8e7252c4e2509831988729071edb3b10d22be090101778a1a917a95ea5b90c30c951c876a3a2a6c498b68bc8257c4531413a43fffabb3edadf1f85080ccc5070fa399c942079f8e8e55a50b3a3985a0156820b6042d8bf9eba51ff9f15fd07c2de63cb1287440b09df195fd58c3ca26ba18ef8d014db6eb6d488be68ea89c841afb8a74e7b31353ce995647c3e4c1b20d5e00001b0e07e48e22655c"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x80c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)={0xac, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r9], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}, 0x80) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.363892778s ago: executing program 3 (id=703): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540f2e700001c00188008000240000000000800014000000000080003"], 0xa4}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000900000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r12}, 0x10) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8008) 2.185342987s ago: executing program 3 (id=705): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @dev}, 0x2}}, 0x2e) (async, rerun: 64) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r3 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073787a32000000000900010073797a3000000000080005400000001f080003"], 0xf0}, 0x1, 0x0, 0x0, 0x84}, 0x200000d0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f00000001a0093cf26bd7000fddbdf25ff7fd36b27d9a6bde300000000000000ff0100000000000000000000000000013d2200054e240002020000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000004d332000000ac1e010100000000000000000000000004"], 0xf0}}, 0x28008004) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async) r7 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x4000001) (async) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x38, 0x1402, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4864}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r8, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) (async) syz_emit_ethernet(0x96, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x60, 0x3a, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac150"}, {0x1f, 0x1, "fe906d26cfe3"}]}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000140)=0x1, 0x4) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c100000000000000003000700000000010800034000"/32], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) close(r10) 1.998146197s ago: executing program 1 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000000000001410000001c0017000000001a00dfff6574683a73797a556a3bec507b7d82"], 0x38}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x46, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) unshare(0x62040200) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000540)={0x3, 0xc, 0x6}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x63, &(0x7f0000000440)={'icmp\x00'}, &(0x7f0000000480)=0x1e) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x80, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7f, 0xf, 0x81}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x80, 0x84, 0x38}}, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x80}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4040090}, 0x800) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r13, @ANYBLOB="00000000000000000000b0038df2000040000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.983443702s ago: executing program 3 (id=708): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d30000000000000000000000014"], 0x110}}, 0x800) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f0, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) read$alg(r2, &(0x7f0000001480)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x3}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004c885}, 0x4008000) 1.671923452s ago: executing program 0 (id=709): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val, @void, @eth={@local, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0xa00, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, {0x0, 0x86dd, 0x2c, 0x0, @opaque="dda15c1b5d4cef2629e4eaf347ffa0a0a0d8a29a0059b9e1d62622d502feef9c85d2da69"}}}}}}, 0x5a) sendmsg$NFT_BATCH(r1, 0x0, 0x0) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) close(r4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xd4}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800450000200000000000119078000000000000000000014e20000c9078010000002c9f9a09972e4f69671336320f14fd2d69d16d4d59a3867cf9cd03d54d68ece41a3917b37d5d4cff5ab900fb44"], 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000400)=0x3ff, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="400000000c000501000000000019007f00000028001a000a0101020000009100000000000000000a0101000000000000000000000000000a000609"], 0x40}}, 0x20040810) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0x8c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xab}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2f640}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0xfffffffffffffe84, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.566588644s ago: executing program 3 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r4, 0xffffffffffffffff}}]}, 0x28}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x2e, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3], 0x0, [0x0, 0x2]}}}}]}, 0x88}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=@allocspi={0x7e4, 0x16, 0x400, 0x0, 0x25dfdbfb, {{{@in=@multicast2, @in=@broadcast, 0x4e22, 0x0, 0x4e21, 0x9, 0xa, 0xa0, 0x0, 0x5c, 0x0, r4}, {@in6=@remote, 0x4d3, 0x32}, @in=@remote, {0x7f, 0x7fff, 0x3, 0x2, 0x2, 0x2, 0x3, 0x2}, {0x7, 0x8, 0x0, 0x3}, {0x6, 0x1, 0x8}, 0x70bd2d, 0x3500, 0xa, 0x0, 0x17, 0x8}, 0xb00, 0x6}, [@algo_auth_trunc={0x13e, 0x14, {{'blake2s-256-x86\x00'}, 0x790, 0x180, "c4ba3bc8e4ab5307577b8074637d4433369d8776c875d9d9295f018a8856438bc5611e42a408a52f07d70fa724aa6db29cf658757cfdfaa3ff3642149b7f09443e6cb319dc280bb81bb23d1e99cf870e36a4c1bccdb715f0bd7bfad7b4bd3f27944a47098b756afb8abab2600cc7a713770295c8efebba9a7bb1a5baf9f2963da722597229020f88eaa279c6f5e122c454fe77d841e7db897399ba85f820a91d2f83bcb2f0d4b950c01d93ac5de85d024d83656b9da1080f493f7f020bc081bdffe4e0c780094c78e425e8f59b2965b9945fc725c1a8e8cd1e98bdcdfbac61303ccbeb5af90162abb271b3477eb25a08cbe5"}}, @algo_crypt={0xf6, 0x2, {{'cbc(aes)\x00'}, 0x570, "1b5092509f36ba2d4d95f67dbaabb2370719bafb8a1a36aa6623f46e5f3b4e04a3004378127d4dc4ccef7db8ab00229f34be7bff4cdbd42eb6fa4433a18df4af639a9169bba83449fa7d70413558197da8ea526902cd05d163e20b8f97d477f3e532ef51523838a823aa23e36bd2ea8b63faa3cc92dab06dc61c702a00be7908aa0f65aad121be2d29e5298e4fb91420b0680ad158df5779f710a1dd7fd81cf98cb100b4440a277c7a676de7a3f3"}}, @lifetime_val={0x24, 0x9, {0x2, 0xffffffffffffffff, 0x0, 0x8d}}, @tfcpad={0x8, 0x16, 0x6b3c}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0xa, 0x2, 0x3}}, @tfcpad={0x8, 0x16, 0x2}, @tmpl={0x184, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d6, 0xff}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x34ff, 0x4, 0x1, 0x1, 0x100, 0xffffff10, 0x7}, {{@in6=@mcast2, 0x4d5, 0xff}, 0xa, @in6=@mcast1, 0x3502, 0x1, 0x0, 0x3, 0x10, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x33}, 0x2, @in=@loopback, 0x3501, 0x0, 0x1, 0xf9, 0x3, 0x0, 0x8001}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x2b}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x2, 0x9, 0x5, 0x1}, {{@in6=@loopback, 0x4d4, 0x6c}, 0xa, @in=@empty, 0x3506, 0x3, 0x3, 0xde, 0x8, 0x3ff, 0x8}, {{@in=@private=0xa010101, 0x4d3, 0xff}, 0x2, @in6=@mcast2, 0x3505, 0x3, 0x1, 0x74, 0xc, 0x2, 0x3ff}]}, @tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x3503, 0x0, 0x2, 0x40, 0xfffffff7, 0xdf6e, 0x8}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0xa, @in6=@loopback, 0x3503, 0x0, 0x3, 0x7, 0x4, 0x5, 0xe4d}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010102, 0x3505, 0x4, 0x1, 0x6, 0x0, 0x5, 0x8}, {{@in6=@private2, 0x4d6, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3501, 0x1, 0x2, 0xb, 0x1146, 0xe57d, 0xc32f}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x2b}, 0xa, @in6=@private0, 0x0, 0x2, 0x1, 0x4, 0x101, 0x7ff, 0x2}]}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2c, 0x2}}, @migrate={0x180, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@empty, 0x32, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in=@private=0xa010100, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x33, 0x4, 0x0, 0x3506, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in=@remote, @in6=@private1, @in=@private=0xa010100, 0x33, 0x2, 0x0, 0x3505, 0x0, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x3506, 0x2, 0xa}, {@in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x6c, 0x2, 0x0, 0x0, 0xa, 0xa}]}]}, 0x7e4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac05"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7074d6ca4617fbf6551f73d9f87cec18d308cd692303a6dbe1355f3f601de9b521ee37197d2a0b7358ed1e25291898b08881927e2505a38c9715e1dc2a2d8e06acff4f3cc405cb"], 0xb8}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c702f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153c8df10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f2d3ce9c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac8326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xc4}, {&(0x7f00000003c0)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777a42e01e563f192537c527923b0f362103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa075a70123a788ba8d0e1205af7751df76effba5cb644966e7b7566d2960bab4c5ba6", 0x6c}, {&(0x7f0000000b40)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc628359101e57e31436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ae2ff2e4ad7a3db413358c266a43f743c155d8bcbab110f73f4f12d0728bada715bf5ab80002346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a14386c73e7017cf0fe0275d2d6f9531b12f12e29b903f30c3228aa9ab3a503e951200", 0xcd}, {&(0x7f00000007c0)="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", 0x37e}], 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x40080c0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e22ff1f000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$kcm(r10, &(0x7f00000005c0)={&(0x7f0000000100)=@rc={0x1f, @none, 0x7f}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)="74a0b5347fb5ffe8062ab7a8c4543c7bc645cafd5275ef509f1500335216bf7842dc6f0a1d7215fcaf4d1a55ffa78651e00070bf2fa2cd455d139be3a77136f1dd1fc87eb308ea829a876fc69c05dd5122b051bd11626ae35103ce57b1e6e3c679c4e76f88f9750442b6dbac484a61e59489ee819a39e59532067a22665889be252cfabd29cd32b80a15f2b8332ae16635f426eac046ba238c535b401519319decee8f49d5", 0xa5}, {&(0x7f0000000040)="25b2b3cbea4056eb9d31", 0xa}], 0x2, 0x0, 0x0, 0x900}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e800000ffffffffffffaaaaaaaaaaaa8100250008005000002b020000000004"], 0x41) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000440)=0x4, 0x4) 1.359501112s ago: executing program 1 (id=711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x10014, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000140)={0x9, 0x80000001, 0x0, 0x1f, 0x7, 0x5e, 0x0, 0x8}, &(0x7f0000000180)={0x5, 0x80000001, 0x4, 0x6, 0x1, 0x547f9466, 0x8, 0x8}, &(0x7f00000001c0)={0x80, 0x0, 0x58c, 0xc000000, 0x9, 0xf, 0x8a, 0x7d}, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000400), 0x8}) sendto$inet6(r1, &(0x7f0000000000)="d1a486ba", 0x4, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000000)="d1a486ba", 0x4, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r2, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x11008000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/156, 0x9c}, 0x9}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xffff}], 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x5, 0x38, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00003c0012800b00010067726574617000002c00028006008e854e20000006000e000000000006000e0001000000080014003a0f0000080007006401010108000a00", @ANYRES32=r9, @ANYBLOB], 0x64}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00003c0012800b00010067726574617000002c00028006008e854e20000006000e000000000006000e0001000000080014003a0f0000080007006401010108000a00", @ANYRES32=r9, @ANYBLOB], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x15}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) 1.275875665s ago: executing program 0 (id=712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18005960bd26000000000000000000000000950000000000000041c95551c59899c61efb8e589a20f60f5d272f6701380b95f2415e85dd63297ece43c8ffbd90efec003210996dfd559d87f4462508dc5c05e20e650aeeb4dc1ef9af815ad8595b31c28f2709e0a932fc778eda62c7d48434c41f70c41234878f2caf2eb2f93f93596785f619a17a8584d258f2bb7da99c240008000000fb1bfece180ce410851a3049a91e723284a395ea9ea94152f7d31f698e75418f070000000000000012480a4b0c9424134a951dbab93ea6c9cf1b861d90240f5b5780eec78ab2d7d45c0c346e15a4756362743aeacca300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='percpu_destroy_chunk\x00', r0}, 0xd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x8, 0x2b, 0x1, @remote, @mcast2, {[@routing={0x2f, 0x0, 0x1}]}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.257173185s ago: executing program 1 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x890c, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}]}, 0x20}}, 0x44040) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3, 0x11}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000080701010000000000000000050000080c000340000000000000000b0c00034000000000000000ad14000780080002400000ffff08000140000000c6"], 0x40}}, 0x8014) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) r4 = socket$kcm(0x10, 0x2, 0x10) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r6, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20010182, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x90) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000005c80), 0x0, 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.083748972s ago: executing program 0 (id=714): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x18, 0x40, 0x9, 0x0, 0x0, {0x2}, [@nested={0x4, 0xce}]}, 0x18}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x150, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5d, 0x14, {{'xcbc(aes)\x00'}, 0x88, 0x0, "97a2c2df58bf2babea45840d4da5d43241"}}]}, 0x150}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r5 = socket(0x8, 0x2, 0x1) syz_genetlink_get_family_id$tipc(0x0, r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$unix(0x1, 0x3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@dellinkprop={0x108, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_VFINFO_LIST={0xe0, 0x16, 0x0, 0x1, [{0xdc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x75b, 0x7, 0x88a8}}, {0x14, 0x1, {0x826, 0x708, 0x6410, 0x88a8}}, {0x14, 0x1, {0x7b1d, 0x47, 0x8}}, {0x14, 0x1, {0x3, 0x44, 0x6}}, {0x14, 0x1, {0xc, 0x643, 0x3, 0x8100}}, {0x14, 0x1, {0x8, 0xe77, 0x5, 0x88a8}}, {0x14, 0x1, {0x7, 0xae3, 0xd, 0x88a8}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x729}}, @IFLA_VF_TRUST={0xc, 0x9, {0x658a, 0x1e}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x97}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x200, 0x80}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x300000000}}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0x0, 0x0, 0x10, {[@mss={0x1e, 0x4, 0x2101}, @mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x78, 0x2, 0x9}]}}}}}}}}, 0x0) 1.01310652s ago: executing program 3 (id=715): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x40040) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000018c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x68}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "00000000000000000000000500"}}}]}, 0x48}}, 0x0) recvmsg$kcm(r3, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400b9af0600000408010200000000000000000000000006000240000000000500030088e9ee656de324c93657ea611bf45389b5aa1183bfcf88d7f0517aa7ab341254f64b75fab817c727192d"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5", 0x34}], 0x1}, 0x0) r7 = socket(0x15, 0x5, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000380)={0x0, 0x3, 0x3, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001a40)=0x2, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c000200010000a586c70004000003e7c2a03f"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[], 0xc4}}, 0x20050000) r10 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 793.900932ms ago: executing program 1 (id=716): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xfff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000077662f61c75edbbe000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000c9e5000000000000000000000018110000b8ad178c5b74e3", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000090000001b00000000000001000000006600660300302e3061615f5f00"], &(0x7f0000000280)=""/67, 0x31, 0x43, 0x1, 0xf9, 0x10000, @value=r4}, 0x28) 684.03298ms ago: executing program 0 (id=717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r6, r7, 0x0, 0x6, &(0x7f0000000280)='wlan1\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r6, r7, 0x0, 0x6, &(0x7f0000000280)='wlan1\x00'}, 0x30) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b1b, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 519.41073ms ago: executing program 1 (id=718): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000040)=0xdd) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)={0x4c, 0x14, 0x501, 0x10, 0x0, {0x10, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x37, 0x1, "f636b7c83a0c9c036b6cb4e78a953971ddab92d8f062ade10f6ba9f7a3dfca81571c8d153b5f66cac5687a051a0deb9c28d652"}]}, 0x4c}}, 0x0) 447.328439ms ago: executing program 0 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 255.94807ms ago: executing program 1 (id=720): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x67f1, 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028004000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe80f0ffffffffffffff0000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400", @ANYBLOB="7981a0356d3a51fe4f7b8f82117d76ba61398f1f931b21f8cf9fcf54e6722346e43093d0c74b44c4a0", @ANYRES32=r1, @ANYRES8=r0, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES16=r4, @ANYBLOB="c53b5bb7ccf2336672131c1bb671d384dc0f69f98bc26f2348ef518ca8a326cf29eec186a96d43e3d9cf7445c80de9bd4bde9490c613acc32fb07462253b77ddbf65eb1b8d73221d179f0ef480a086d0c66b4103970a440723949e74750f1ea2710c0d00ca3be8eff7980586440d1224d66cf283382c1b9abe20d0beb9296c3ecc5a2803bfe6ca1556cbce2e43d66a6c598815a1aea90e68d974f54b6ef3a0891f4505c28e6b7ed90a371182cca8bcd1a3d8727387f95b4fab4ffc9216df8d602f07ae1f6377e605bfd07a2a4818077720c143402e590b87a957f97bf167f92d7801330b6da6e85634d21c136507c026fed2b0f1", @ANYRESHEX=r3, @ANYRESOCT=r4, @ANYRES16=r0, @ANYRESOCT=r4], 0xc8}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(r3, 0x0, r2, 0x0, 0x400000008000f28, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f00000000c0)={0x4d, "d6060f7c63fb1825acae5dbd2ea509d8f92c7a5b33745fadc1e4a7ed7bcec446c4498a83bc21f3589a496671cf412be537ee8e849501164fd7e135479340ed493c9b6c27659fd8f51eee093c1b4b7ac7046d743e174f3447b2c4705344929565a7eeb4ee36d819d54a3c7c685160bd764f1ee910ddb0f07cd47f229a2131b3e9"}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000085000000230000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x40003ff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005748fbcbb3221176e3981e89e93bfc676294e44fd4b349781ee9fae1300d9a30587866a9d9690bf7f3b3067b10b62b60a596f0490f7307838e566eac6f84e17ef38869f8460221977cb1b70b3562c52f648caac6e44993e1251b8b86236c0e611e6f1cb8f36c8c053e09ef9c4e37c5714a08f99f1f956847c0c608"], 0x48) ioctl(r1, 0x8, &(0x7f0000000440)="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") r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000828792546608ddadb8a61000b357d7433d5ba6ed27ee394785632493445e5db5f87c98081ffc2c69403523ed772dfcab61177168d383759b3757633f9e6458d5f725b6a31dd3f517b709c187ef6e75cfbf37bf10ca53809bff190a7c2928f23b711738e26c7f5260693c32a704f8a991cf4990e400"], 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 156.309781ms ago: executing program 0 (id=721): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x40d, 0x70bd28, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x3ff}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (fail_nth: 16) 0s ago: executing program 3 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x20, 0x69, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040004}, 0x40010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/20, &(0x7f0000000140)=0x14) unshare(0x4000000) unshare(0x2020000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000001c0), 0x1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x80, 0x8000, 0x2, 0x5, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x65, 0x3, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}, {[@ra={0x94, 0x4}, @generic={0x94, 0xd, "a04d5b8e6aadf21c76d82b"}, @generic={0x86, 0x3, "b8"}, @noop, @timestamp={0x44, 0x10, 0x4e, 0x0, 0x0, [0x2, 0x7, 0x7]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x9f, 0x4, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x33}, @loopback, 0x8000, 0x8000, 0x10000}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000400)={@ipv4={""/10, ""/2, @multicast2}, 0x0}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'ip6erspan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x20, 0x7800, 0x4, 0xa0, {{0x4c, 0x4, 0x1, 0x0, 0x130, 0x64, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@cipso={0x86, 0x12, 0xffffffffffffffff, [{0x0, 0xc, "88f13a28c5a80b94c018"}]}, @timestamp_addr={0x44, 0x1c, 0xe5, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffe00}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff9}, {@rand_addr=0x64010102, 0x3}]}, @ssrr={0x89, 0x1f, 0xbe, [@loopback, @multicast1, @rand_addr=0x64010100, @private=0xa010102, @multicast1, @loopback, @loopback]}, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x0, 0xa, "88a5a93fdb1d479d"}, {0x7, 0xe, "cf44c34562f9689c0f16daec"}, {0x6, 0xe, "5e5a81477794e55e031a080c"}, {0x6, 0x9, "ac0a9cad724953"}]}, @lsrr={0x83, 0x1b, 0xb3, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @private=0xa010102, @multicast2]}, @generic={0x44, 0x4, "b9e4"}, @cipso={0x86, 0x78, 0x2, [{0x7, 0x6, "ff274458"}, {0x2, 0xc, "7418cd3c1238c961aa03"}, {0x7, 0x6, "95ab3dd2"}, {0x7, 0x11, "38083a3f723ce0ff24541dba0ab18b"}, {0x1, 0xa, "b452450b5ec75a15"}, {0x5, 0x12, "c91369ce21817a7ad580493b18643693"}, {0x2, 0x12, "8c01dda033c95c65f14f0e3cd6a6df19"}, {0x7, 0xc, "6d341244eb48ee629d98"}, {0x7, 0xf, "7333fbf08a6b8e15ac61191027"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000007c0)={@private1, 0x0}, &(0x7f0000000800)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x42002020}, 0xc, &(0x7f0000001280)={&(0x7f00000009c0)={0x88c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x238, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcb49}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6ff}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5c3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xcc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x2, 0x9, 0xaccb}, {0x8, 0x10, 0x0, 0x7}, {0x1, 0x39, 0xe, 0x9}]}}}]}}, {{0x8, 0x1, r14}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r16}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x86, 0x5, 0x9}, {0xc, 0xe, 0xd, 0x8}, {0x3, 0x8, 0x9, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x70, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x70}, 0x1, 0x0, 0x0, 0x44048000}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}, 0x1, 0x0, 0x0, 0x8041}, 0x0) kernel console output (not intermixed with test programs): an_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.537132][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.794718][ T6581] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.831083][ T6581] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.862044][ T6581] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.890376][ T6581] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.098043][ T6581] syz.2.169 (6581) used greatest stack depth: 18704 bytes left [ 88.175687][ T6621] netlink: 'syz.4.180': attribute type 1 has an invalid length. [ 88.196023][ T6621] netlink: 'syz.4.180': attribute type 1 has an invalid length. [ 88.411596][ T6632] bond1: entered allmulticast mode [ 88.431544][ T6632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.639503][ T6647] Bluetooth: MGMT ver 1.23 [ 88.652177][ T6647] __nla_validate_parse: 4 callbacks suppressed [ 88.652194][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 88.680606][ T6647] macvlan2: entered promiscuous mode [ 88.717356][ T6647] bond0: entered promiscuous mode [ 88.735858][ T6647] bond_slave_0: entered promiscuous mode [ 88.752122][ T6647] bond_slave_1: entered promiscuous mode [ 88.785735][ T6647] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 88.867220][ T6660] netlink: 276 bytes leftover after parsing attributes in process `syz.4.192'. [ 88.945028][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.194'. [ 89.025138][ T6668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.193'. [ 89.099859][ T6670] trusted_key: syz.2.195 sent an empty control message without MSG_MORE. [ 89.319612][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 89.656289][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.199'. [ 89.723833][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 89.745389][ T6689] IPVS: stopping master sync thread 6690 ... [ 89.745609][ T6690] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 2, id = 0 [ 89.841852][ T6692] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 89.850076][ T6692] netlink: 224 bytes leftover after parsing attributes in process `syz.3.202'. [ 90.183486][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 90.193164][ T6701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.204'. [ 90.207603][ T6701] gretap1: entered promiscuous mode [ 90.214038][ T6701] gretap1: entered allmulticast mode [ 90.599149][ T6719] netlink: 'syz.2.206': attribute type 20 has an invalid length. [ 90.683742][ T5836] Bluetooth: hci0: command tx timeout [ 90.755831][ T6724] netlink: 'syz.3.208': attribute type 1 has an invalid length. [ 90.763927][ T6724] netlink: 'syz.3.208': attribute type 2 has an invalid length. [ 90.776837][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 90.937201][ T6732] netlink: 'syz.4.210': attribute type 10 has an invalid length. [ 90.975841][ T6729] pim6reg1: entered promiscuous mode [ 90.981194][ T6729] pim6reg1: entered allmulticast mode [ 91.562172][ T6752] netlink: 'syz.2.216': attribute type 8 has an invalid length. [ 92.253090][ T6772] netlink: 'syz.4.223': attribute type 1 has an invalid length. [ 92.563832][ T6772] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 92.789167][ T6782] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 92.810567][ T6782] netlink: 'syz.3.224': attribute type 3 has an invalid length. [ 92.972610][ T6793] FAULT_INJECTION: forcing a failure. [ 92.972610][ T6793] name failslab, interval 1, probability 0, space 0, times 1 [ 93.005703][ T6793] CPU: 0 UID: 0 PID: 6793 Comm: syz.3.227 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 93.005731][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 93.005744][ T6793] Call Trace: [ 93.005750][ T6793] [ 93.005758][ T6793] dump_stack_lvl+0x241/0x360 [ 93.005795][ T6793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.005813][ T6793] ? __pfx__printk+0x10/0x10 [ 93.005838][ T6793] ? __kmalloc_cache_noprof+0x48/0x390 [ 93.005857][ T6793] ? __pfx___might_resched+0x10/0x10 [ 93.005880][ T6793] should_fail_ex+0x40a/0x550 [ 93.005904][ T6793] should_failslab+0xac/0x100 [ 93.005922][ T6793] __kmalloc_cache_noprof+0x70/0x390 [ 93.005938][ T6793] ? tcf_proto_create+0x62/0x370 [ 93.005962][ T6793] tcf_proto_create+0x62/0x370 [ 93.005985][ T6793] tc_new_tfilter+0x15ca/0x1a70 [ 93.006027][ T6793] ? __pfx_tc_new_tfilter+0x10/0x10 [ 93.006061][ T6793] ? rcu_read_unlock+0x87/0xa0 [ 93.006095][ T6793] ? __pfx_tc_new_tfilter+0x10/0x10 [ 93.006114][ T6793] rtnetlink_rcv_msg+0x791/0xcf0 [ 93.006131][ T6793] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 93.006154][ T6793] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.006178][ T6793] ? ref_tracker_free+0x643/0x7e0 [ 93.006202][ T6793] netlink_rcv_skb+0x1e3/0x430 [ 93.006228][ T6793] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.006247][ T6793] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.006284][ T6793] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.006301][ T6793] netlink_unicast+0x7f6/0x990 [ 93.006330][ T6793] ? __pfx_netlink_unicast+0x10/0x10 [ 93.006349][ T6793] ? __virt_addr_valid+0x45f/0x530 [ 93.006371][ T6793] ? __phys_addr_symbol+0x2f/0x70 [ 93.006391][ T6793] ? __check_object_size+0x47a/0x730 [ 93.006412][ T6793] netlink_sendmsg+0x8e4/0xcb0 [ 93.006439][ T6793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.006459][ T6793] ? aa_sock_msg_perm+0x91/0x160 [ 93.006487][ T6793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.006501][ T6793] __sock_sendmsg+0x221/0x270 [ 93.006522][ T6793] ____sys_sendmsg+0x52a/0x7e0 [ 93.006545][ T6793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.006557][ T6793] ? __fget_files+0x2a/0x410 [ 93.006575][ T6793] ? __fget_files+0x2a/0x410 [ 93.006600][ T6793] __sys_sendmsg+0x269/0x350 [ 93.006620][ T6793] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.006646][ T6793] ? do_sys_openat2+0x17a/0x1d0 [ 93.006685][ T6793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.006708][ T6793] ? do_syscall_64+0x100/0x230 [ 93.006732][ T6793] ? do_syscall_64+0xb6/0x230 [ 93.006754][ T6793] do_syscall_64+0xf3/0x230 [ 93.006773][ T6793] ? clear_bhb_loop+0x35/0x90 [ 93.006803][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.006820][ T6793] RIP: 0033:0x7fe764f8cde9 [ 93.006841][ T6793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.006851][ T6793] RSP: 002b:00007fe765e20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.006866][ T6793] RAX: ffffffffffffffda RBX: 00007fe7651a5fa0 RCX: 00007fe764f8cde9 [ 93.006875][ T6793] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 93.006883][ T6793] RBP: 00007fe765e20090 R08: 0000000000000000 R09: 0000000000000000 [ 93.006890][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.006897][ T6793] R13: 0000000000000000 R14: 00007fe7651a5fa0 R15: 00007ffde28bcee8 [ 93.006918][ T6793] [ 93.942550][ T6806] openvswitch: netlink: IP tunnel dst address not specified [ 93.956869][ T6808] openvswitch: netlink: IP tunnel dst address not specified [ 93.965660][ T6808] openvswitch: netlink: IP tunnel dst address not specified [ 94.014281][ T6808] openvswitch: netlink: IP tunnel dst address not specified [ 94.229919][ T6818] tc_dump_action: action bad kind [ 94.386109][ T6821] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 94.420391][ T6821] netlink: 'syz.3.237': attribute type 2 has an invalid length. [ 94.530623][ T6745] Set syz1 is full, maxelem 65536 reached [ 95.272816][ T6499] bridge_slave_1: left allmulticast mode [ 95.278784][ T6499] bridge_slave_1: left promiscuous mode [ 95.292565][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.320915][ T6499] bridge_slave_0: left allmulticast mode [ 95.335878][ T6499] bridge_slave_0: left promiscuous mode [ 95.341633][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.507787][ T6841] can: request_module (can-proto-0) failed. [ 95.566065][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.580651][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.592003][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.605039][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.612873][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.620710][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.955254][ T6499] bond0 (unregistering): left promiscuous mode [ 95.961795][ T6499] bond_slave_0: left promiscuous mode [ 95.969735][ T6499] bond_slave_1: left promiscuous mode [ 95.998879][ T6499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.009685][ T6499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.020099][ T6499] bond0 (unregistering): Released all slaves [ 96.358909][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 96.460629][ T6499] hsr_slave_0: left promiscuous mode [ 96.473496][ T6499] hsr_slave_1: left promiscuous mode [ 96.480565][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.496980][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.675235][ T6879] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000 [ 96.697476][ T6879] __nla_validate_parse: 3 callbacks suppressed [ 96.697495][ T6879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.250'. [ 96.717382][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 96.757564][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 96.852692][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 97.017049][ T6499] team0 (unregistering): Port device team_slave_1 removed [ 97.079422][ T6499] team0 (unregistering): Port device team_slave_0 removed [ 97.652712][ T5836] Bluetooth: hci1: command tx timeout [ 98.130888][ T6910] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 98.139058][ T6910] netlink: 224 bytes leftover after parsing attributes in process `syz.3.256'. [ 98.303746][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.317838][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.340477][ T6845] bridge_slave_0: entered allmulticast mode [ 98.350534][ T6845] bridge_slave_0: entered promiscuous mode [ 98.463732][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.472386][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.491057][ T6845] bridge_slave_1: entered allmulticast mode [ 98.513454][ T6845] bridge_slave_1: entered promiscuous mode [ 98.598198][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.613291][ T6926] tap0: tun_chr_ioctl cmd 1074025673 [ 98.635512][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.736124][ T6924] tap0: tun_chr_ioctl cmd 1074025678 [ 98.741545][ T6924] tap0: group set to 0 [ 98.769992][ T6845] team0: Port device team_slave_0 added [ 98.817311][ T6845] team0: Port device team_slave_1 added [ 98.875060][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.882181][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.921108][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.000030][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.020769][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.055408][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.180863][ T6944] netlink: 216 bytes leftover after parsing attributes in process `syz.0.264'. [ 99.260695][ T6845] hsr_slave_0: entered promiscuous mode [ 99.271834][ T6845] hsr_slave_1: entered promiscuous mode [ 99.288798][ T6845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.310637][ T6845] Cannot create hsr debugfs directory [ 99.494556][ T6953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.268'. [ 99.603565][ T6957] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 99.724639][ T5836] Bluetooth: hci1: command tx timeout [ 99.863042][ T6966] Cannot find add_set index 3 as target [ 99.879794][ T6966] tipc: Started in network mode [ 99.888963][ T6966] tipc: Node identity ffffffff, cluster identity 4711 [ 99.916927][ T6966] tipc: Node number set to 4294967295 [ 99.926517][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 99.946118][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 99.989646][ T6972] ip6gretap0: entered promiscuous mode [ 99.997957][ T6972] erspan0: entered promiscuous mode [ 100.047163][ T6974] xt_bpf: check failed: parse error [ 100.065694][ T6845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.100232][ T6845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.156578][ T6845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.190594][ T6985] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 100.191687][ T6845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.228703][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 100.240513][ T6985] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 100.249373][ T6991] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.439902][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.470367][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.508087][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.515321][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.532588][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.539782][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.558974][ T7005] netlink: 'syz.0.282': attribute type 10 has an invalid length. [ 100.567675][ T7005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.282'. [ 100.694926][ T6845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.738003][ T29] audit: type=1107 audit(1739248113.139:2): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=')‘' [ 100.941407][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.966305][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.986947][ T7031] sctp: [Deprecated]: syz.1.289 (pid 7031) Use of int in maxseg socket option. [ 100.986947][ T7031] Use struct sctp_assoc_value instead [ 101.081397][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.210192][ T6845] veth0_vlan: entered promiscuous mode [ 101.236077][ T6845] veth1_vlan: entered promiscuous mode [ 101.292657][ T6845] veth0_macvtap: entered promiscuous mode [ 101.318964][ T6845] veth1_macvtap: entered promiscuous mode [ 101.441204][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.476633][ T7055] netlink: 'syz.4.296': attribute type 3 has an invalid length. [ 101.482542][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.485245][ T7055] netlink: 'syz.4.296': attribute type 3 has an invalid length. [ 101.513786][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.539051][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.559407][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.571313][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.581791][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.592704][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.604053][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.675027][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.702577][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.726419][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.775486][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.802459][ T5836] Bluetooth: hci1: command tx timeout [ 101.808282][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.819081][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.829044][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.839914][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.851696][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.862049][ T7071] __nla_validate_parse: 3 callbacks suppressed [ 101.862066][ T7071] netlink: 2 bytes leftover after parsing attributes in process `syz.3.302'. [ 101.929318][ T6845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.942970][ T6845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.958405][ T6845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.982188][ T6845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.007558][ T7076] netlink: 'syz.4.304': attribute type 29 has an invalid length. [ 102.161695][ T7080] netlink: 'syz.4.304': attribute type 29 has an invalid length. [ 102.200802][ T7093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.308'. [ 102.220687][ T7094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.308'. [ 102.315011][ T6497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.365289][ T6497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.506145][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.306'. [ 102.526818][ T6497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.543094][ T6497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.734927][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.306'. [ 102.977759][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 103.007613][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 103.051356][ T7108] netlink: 'syz.4.310': attribute type 5 has an invalid length. [ 103.080335][ T7112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.331186][ T7118] tipc: Started in network mode [ 103.336378][ T7118] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 103.343916][ T7118] tipc: Enabled bearer , priority 0 [ 103.943866][ T7139] netlink: 60 bytes leftover after parsing attributes in process `syz.3.317'. [ 103.999791][ T7141] netlink: 68 bytes leftover after parsing attributes in process `syz.1.318'. [ 104.166741][ T6497] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.390045][ T7156] dccp_invalid_packet: P.Data Offset(4) too small [ 104.463983][ T25] tipc: Node number set to 11578026 [ 104.607112][ T6497] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.709032][ T6497] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.800162][ T6497] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.816488][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.826803][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.836490][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.846046][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.855689][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.863260][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.965169][ T7189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.199383][ T6497] bridge_slave_1: left allmulticast mode [ 105.212582][ T6497] bridge_slave_1: left promiscuous mode [ 105.218500][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.237534][ T7201] sctp: [Deprecated]: syz.1.329 (pid 7201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.237534][ T7201] Use struct sctp_sack_info instead [ 105.260464][ T6497] bridge_slave_0: left allmulticast mode [ 105.271807][ T6497] bridge_slave_0: left promiscuous mode [ 105.279817][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.852477][ T6497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.864974][ T6497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.876836][ T6497] bond0 (unregistering): Released all slaves [ 106.201148][ T7221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.333'. [ 106.268732][ T7182] chnl_net:caif_netlink_parms(): no params data found [ 106.776699][ T6497] hsr_slave_0: left promiscuous mode [ 106.798485][ T6497] hsr_slave_1: left promiscuous mode [ 106.810143][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.830694][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.866853][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.887781][ T7251] netlink: 'syz.0.341': attribute type 4 has an invalid length. [ 106.888207][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.895748][ T7248] netlink: 'syz.0.341': attribute type 4 has an invalid length. [ 106.910577][ T7251] __nla_validate_parse: 2 callbacks suppressed [ 106.910591][ T7251] netlink: 152 bytes leftover after parsing attributes in process `syz.0.341'. [ 106.922421][ T7248] netlink: 152 bytes leftover after parsing attributes in process `syz.0.341'. [ 106.935779][ T5836] Bluetooth: hci1: command tx timeout [ 106.966367][ T6497] veth1_macvtap: left promiscuous mode [ 106.974076][ T6497] veth0_macvtap: left promiscuous mode [ 106.979875][ T6497] veth1_vlan: left promiscuous mode [ 106.986321][ T6497] veth0_vlan: left promiscuous mode [ 107.368284][ T6497] team0 (unregistering): Port device team_slave_1 removed [ 107.407539][ T6497] team0 (unregistering): Port device team_slave_0 removed [ 107.846789][ T7251] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 107.862887][ T7248] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 108.003614][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.037651][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.056291][ T7182] bridge_slave_0: entered allmulticast mode [ 108.068372][ T7182] bridge_slave_0: entered promiscuous mode [ 108.119766][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.162433][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.170004][ T7182] bridge_slave_1: entered allmulticast mode [ 108.187615][ T7182] bridge_slave_1: entered promiscuous mode [ 108.355255][ T7182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.400211][ T7182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.537363][ T7182] team0: Port device team_slave_0 added [ 108.549470][ T7295] netlink: 'syz.3.352': attribute type 11 has an invalid length. [ 108.606887][ T7182] team0: Port device team_slave_1 added [ 108.655305][ T7295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.352'. [ 108.665569][ T7295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.352'. [ 108.674822][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.352'. [ 108.685062][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.700658][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.735106][ T7182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.751102][ T7299] netem: change failed [ 108.781901][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.802436][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.850892][ T7182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.910937][ T7301] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 108.996391][ T7182] hsr_slave_0: entered promiscuous mode [ 109.002664][ T5836] Bluetooth: hci1: command tx timeout [ 109.007730][ T7182] hsr_slave_1: entered promiscuous mode [ 109.016945][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 109.034292][ T7182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.050985][ T7182] Cannot create hsr debugfs directory [ 109.164332][ T7310] netlink: 'syz.3.357': attribute type 4 has an invalid length. [ 109.238406][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.356'. [ 109.575213][ T7306] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1851878519) [ 109.611864][ T7306] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 109.650708][ T7327] veth1_macvtap: left promiscuous mode [ 109.659009][ T7327] macsec0: entered promiscuous mode [ 109.670070][ T7327] macsec0: entered allmulticast mode [ 109.728465][ T7323] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.801252][ T7323] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.942430][ T7331] netlink: 'syz.0.361': attribute type 10 has an invalid length. [ 110.000131][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.007699][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.069094][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.076576][ T7331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.085520][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.093387][ T7331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.161749][ T7331] team0: Port device bridge0 added [ 110.323077][ T7344] bridge4: entered promiscuous mode [ 110.348510][ T7344] bridge4: entered allmulticast mode [ 110.414005][ T7347] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 110.421979][ T7344] team0: Port device bridge4 added [ 110.541831][ T7344] bridge0: port 3(ip6gretap0) entered blocking state [ 110.569876][ T7344] bridge0: port 3(ip6gretap0) entered disabled state [ 110.590551][ T7344] ip6gretap0: entered allmulticast mode [ 110.626579][ T7344] ip6gretap0: entered promiscuous mode [ 110.649685][ T7344] bridge0: port 3(ip6gretap0) entered blocking state [ 110.657754][ T7344] bridge0: port 3(ip6gretap0) entered forwarding state [ 110.743216][ T7351] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.366'. [ 110.789439][ T7347] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 110.929632][ T7182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.963821][ T7357] netlink: zone id is out of range [ 110.971941][ T7182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.990461][ T7357] netlink: zone id is out of range [ 110.999965][ T7357] netlink: zone id is out of range [ 111.009228][ T7182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.071492][ T7182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.082509][ T5836] Bluetooth: hci1: command tx timeout [ 111.113401][ T7357] netlink: set zone limit has 4 unknown bytes [ 111.305803][ T7182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.361203][ T7182] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.389336][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.397428][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.409034][ T7372] FAULT_INJECTION: forcing a failure. [ 111.409034][ T7372] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.438377][ T7372] CPU: 0 UID: 0 PID: 7372 Comm: syz.0.373 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 111.438404][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 111.438414][ T7372] Call Trace: [ 111.438420][ T7372] [ 111.438427][ T7372] dump_stack_lvl+0x241/0x360 [ 111.438453][ T7372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.438470][ T7372] ? __pfx__printk+0x10/0x10 [ 111.438495][ T7372] ? __pfx_lock_release+0x10/0x10 [ 111.438524][ T7372] should_fail_ex+0x40a/0x550 [ 111.438547][ T7372] _copy_from_user+0x2d/0xb0 [ 111.438564][ T7372] copy_msghdr_from_user+0xae/0x680 [ 111.438589][ T7372] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 111.438607][ T7372] ? __fget_files+0x2a/0x410 [ 111.438626][ T7372] ? __fget_files+0x2a/0x410 [ 111.438650][ T7372] __sys_sendmsg+0x209/0x350 [ 111.438671][ T7372] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.438699][ T7372] ? do_sys_openat2+0x17a/0x1d0 [ 111.438741][ T7372] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.438763][ T7372] ? do_syscall_64+0x100/0x230 [ 111.438787][ T7372] ? do_syscall_64+0xb6/0x230 [ 111.438810][ T7372] do_syscall_64+0xf3/0x230 [ 111.438830][ T7372] ? clear_bhb_loop+0x35/0x90 [ 111.438854][ T7372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.438880][ T7372] RIP: 0033:0x7ff89798cde9 [ 111.438896][ T7372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.438909][ T7372] RSP: 002b:00007ff8957d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.438926][ T7372] RAX: ffffffffffffffda RBX: 00007ff897ba6080 RCX: 00007ff89798cde9 [ 111.438938][ T7372] RDX: 0000000004040000 RSI: 0000400000000c80 RDI: 0000000000000004 [ 111.438948][ T7372] RBP: 00007ff8957d5090 R08: 0000000000000000 R09: 0000000000000000 [ 111.438958][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.438967][ T7372] R13: 0000000000000000 R14: 00007ff897ba6080 R15: 00007ffe3d454f68 [ 111.438992][ T7372] [ 111.691467][ T7182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.716599][ T7182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.736177][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.743389][ T6503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.921298][ T7182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.057748][ T7182] veth0_vlan: entered promiscuous mode [ 112.107046][ T7182] veth1_vlan: entered promiscuous mode [ 112.257446][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.266118][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.300106][ T7402] FAULT_INJECTION: forcing a failure. [ 112.300106][ T7402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.321249][ T7394] tipc: Resetting bearer [ 112.343626][ T7394] vxcan0: left promiscuous mode [ 112.348526][ T7394] vxcan0: left allmulticast mode [ 112.356995][ T7402] CPU: 1 UID: 0 PID: 7402 Comm: syz.0.380 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 112.357019][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 112.357029][ T7402] Call Trace: [ 112.357034][ T7402] [ 112.357042][ T7402] dump_stack_lvl+0x241/0x360 [ 112.357067][ T7402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.357084][ T7402] ? __pfx__printk+0x10/0x10 [ 112.357109][ T7402] ? __pfx_lock_release+0x10/0x10 [ 112.357138][ T7402] should_fail_ex+0x40a/0x550 [ 112.357161][ T7402] _copy_from_user+0x2d/0xb0 [ 112.357179][ T7402] __sys_bpf+0x1a4/0x810 [ 112.357200][ T7402] ? __pfx___sys_bpf+0x10/0x10 [ 112.357229][ T7402] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.357252][ T7402] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.357274][ T7402] ? do_syscall_64+0x100/0x230 [ 112.357299][ T7402] __x64_sys_bpf+0x7c/0x90 [ 112.357317][ T7402] do_syscall_64+0xf3/0x230 [ 112.357338][ T7402] ? clear_bhb_loop+0x35/0x90 [ 112.357361][ T7402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.357380][ T7402] RIP: 0033:0x7ff89798cde9 [ 112.357395][ T7402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.357407][ T7402] RSP: 002b:00007ff8957f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.357425][ T7402] RAX: ffffffffffffffda RBX: 00007ff897ba5fa0 RCX: 00007ff89798cde9 [ 112.357435][ T7402] RDX: 0000000000000094 RSI: 0000400000000040 RDI: 0000000000000005 [ 112.357445][ T7402] RBP: 00007ff8957f6090 R08: 0000000000000000 R09: 0000000000000000 [ 112.357455][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.357464][ T7402] R13: 0000000000000001 R14: 00007ff897ba5fa0 R15: 00007ffe3d454f68 [ 112.357489][ T7402] [ 112.596336][ T7394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.627376][ T7394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.715829][ T7394] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.726400][ T7394] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.737758][ T7394] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.747318][ T7394] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.818888][ T7394] bridge1: left promiscuous mode [ 112.824401][ T7394] bridge1: left allmulticast mode [ 112.920155][ T7182] veth0_macvtap: entered promiscuous mode [ 112.940015][ T7182] veth1_macvtap: entered promiscuous mode [ 112.999919][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.028712][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.051527][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.082770][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.095078][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.112382][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.131076][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.162561][ T5836] Bluetooth: hci1: command tx timeout [ 113.245014][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.297713][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.299961][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 113.322497][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.349315][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.369529][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.388019][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.420846][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.436902][ T7422] hsr_slave_0: left promiscuous mode [ 113.448364][ T7422] hsr_slave_1: left promiscuous mode [ 113.526667][ T7182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.548111][ T7182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.571808][ T7182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.594134][ T7182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.726842][ T6504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.742473][ T6504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.802690][ T6497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.810558][ T6497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.840743][ T7430] FAULT_INJECTION: forcing a failure. [ 113.840743][ T7430] name failslab, interval 1, probability 0, space 0, times 0 [ 113.865057][ T7430] CPU: 0 UID: 0 PID: 7430 Comm: syz.0.387 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 113.865084][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 113.865094][ T7430] Call Trace: [ 113.865099][ T7430] [ 113.865107][ T7430] dump_stack_lvl+0x241/0x360 [ 113.865132][ T7430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.865148][ T7430] ? __pfx__printk+0x10/0x10 [ 113.865174][ T7430] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 113.865193][ T7430] ? __pfx___might_resched+0x10/0x10 [ 113.865209][ T7430] ? aa_label_sk_perm+0x4f3/0x6c0 [ 113.865229][ T7430] should_fail_ex+0x40a/0x550 [ 113.865250][ T7430] should_failslab+0xac/0x100 [ 113.865267][ T7430] kmem_cache_alloc_node_noprof+0x77/0x380 [ 113.865283][ T7430] ? __alloc_skb+0x1c3/0x440 [ 113.865306][ T7430] __alloc_skb+0x1c3/0x440 [ 113.865330][ T7430] ? __pfx___alloc_skb+0x10/0x10 [ 113.865359][ T7430] netlink_sendmsg+0x638/0xcb0 [ 113.865384][ T7430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.865401][ T7430] ? aa_sock_msg_perm+0x91/0x160 [ 113.865425][ T7430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.865437][ T7430] __sock_sendmsg+0x221/0x270 [ 113.865458][ T7430] ____sys_sendmsg+0x52a/0x7e0 [ 113.865480][ T7430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.865492][ T7430] ? __fget_files+0x2a/0x410 [ 113.865511][ T7430] ? __fget_files+0x2a/0x410 [ 113.865535][ T7430] __sys_sendmsg+0x269/0x350 [ 113.865555][ T7430] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.865580][ T7430] ? do_sys_openat2+0x17a/0x1d0 [ 113.865620][ T7430] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.865652][ T7430] ? do_syscall_64+0x100/0x230 [ 113.865675][ T7430] ? do_syscall_64+0xb6/0x230 [ 113.865697][ T7430] do_syscall_64+0xf3/0x230 [ 113.865716][ T7430] ? clear_bhb_loop+0x35/0x90 [ 113.865739][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.865759][ T7430] RIP: 0033:0x7ff89798cde9 [ 113.865774][ T7430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.865786][ T7430] RSP: 002b:00007ff8957d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.865803][ T7430] RAX: ffffffffffffffda RBX: 00007ff897ba6080 RCX: 00007ff89798cde9 [ 113.865815][ T7430] RDX: 0000000004040000 RSI: 0000400000000c80 RDI: 0000000000000004 [ 113.865825][ T7430] RBP: 00007ff8957d5090 R08: 0000000000000000 R09: 0000000000000000 [ 113.865834][ T7430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.865843][ T7430] R13: 0000000000000000 R14: 00007ff897ba6080 R15: 00007ffe3d454f68 [ 113.865868][ T7430] [ 114.273278][ T7434] dvmrp0: entered allmulticast mode [ 114.310806][ T7436] dvmrp0: left allmulticast mode [ 114.535145][ T7440] FAULT_INJECTION: forcing a failure. [ 114.535145][ T7440] name failslab, interval 1, probability 0, space 0, times 0 [ 114.570270][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: syz.0.391 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 114.570298][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 114.570306][ T7440] Call Trace: [ 114.570311][ T7440] [ 114.570318][ T7440] dump_stack_lvl+0x241/0x360 [ 114.570342][ T7440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.570359][ T7440] ? __pfx__printk+0x10/0x10 [ 114.570382][ T7440] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 114.570400][ T7440] ? __pfx___might_resched+0x10/0x10 [ 114.570422][ T7440] should_fail_ex+0x40a/0x550 [ 114.570444][ T7440] should_failslab+0xac/0x100 [ 114.570459][ T7440] ? __get_vm_area_node+0x132/0x2d0 [ 114.570476][ T7440] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 114.570499][ T7440] __get_vm_area_node+0x132/0x2d0 [ 114.570520][ T7440] __vmalloc_node_range_noprof+0x344/0x1380 [ 114.570546][ T7440] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 114.570569][ T7440] ? mark_lock+0x9a/0x360 [ 114.570611][ T7440] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 114.570640][ T7440] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 114.570658][ T7440] __vmalloc_noprof+0x79/0x90 [ 114.570677][ T7440] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 114.570696][ T7440] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 114.570713][ T7440] ? bpf_prog_alloc+0x28/0x1b0 [ 114.570733][ T7440] bpf_prog_alloc+0x3a/0x1b0 [ 114.570752][ T7440] bpf_prog_load+0x7f4/0x20e0 [ 114.570783][ T7440] ? __pfx_bpf_prog_load+0x10/0x10 [ 114.570801][ T7440] ? __pfx___might_resched+0x10/0x10 [ 114.570827][ T7440] ? __might_fault+0xaa/0x120 [ 114.570852][ T7440] __sys_bpf+0x4ee/0x810 [ 114.570872][ T7440] ? __pfx___sys_bpf+0x10/0x10 [ 114.570898][ T7440] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.570921][ T7440] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.570942][ T7440] ? do_syscall_64+0x100/0x230 [ 114.570966][ T7440] __x64_sys_bpf+0x7c/0x90 [ 114.570983][ T7440] do_syscall_64+0xf3/0x230 [ 114.571002][ T7440] ? clear_bhb_loop+0x35/0x90 [ 114.571024][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.571043][ T7440] RIP: 0033:0x7ff89798cde9 [ 114.571057][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.571070][ T7440] RSP: 002b:00007ff8957f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.571088][ T7440] RAX: ffffffffffffffda RBX: 00007ff897ba5fa0 RCX: 00007ff89798cde9 [ 114.571099][ T7440] RDX: 0000000000000094 RSI: 0000400000000040 RDI: 0000000000000005 [ 114.571109][ T7440] RBP: 00007ff8957f6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.571117][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.571125][ T7440] R13: 0000000000000001 R14: 00007ff897ba5fa0 R15: 00007ffe3d454f68 [ 114.571148][ T7440] [ 114.571374][ T7440] syz.0.391: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 114.839902][ T7445] netlink: 244 bytes leftover after parsing attributes in process `syz.3.393'. [ 114.854852][ T7440] ,cpuset= [ 114.869130][ T7448] gre1: entered promiscuous mode [ 114.882295][ T7440] /,mems_allowed=0-1 [ 114.886359][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: syz.0.391 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 114.886380][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 114.886389][ T7440] Call Trace: [ 114.886396][ T7440] [ 114.886402][ T7440] dump_stack_lvl+0x241/0x360 [ 114.886426][ T7440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.886443][ T7440] ? __pfx__printk+0x10/0x10 [ 114.886467][ T7440] ? __rcu_read_unlock+0xa1/0x110 [ 114.886490][ T7440] warn_alloc+0x278/0x410 [ 114.886511][ T7440] ? __pfx_warn_alloc+0x10/0x10 [ 114.886525][ T7440] ? __kasan_kmalloc+0x23/0xb0 [ 114.886543][ T7440] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 114.886562][ T7440] ? __get_vm_area_node+0x280/0x2d0 [ 114.886581][ T7440] __vmalloc_node_range_noprof+0x369/0x1380 [ 114.886598][ T7440] ? mark_lock+0x9a/0x360 [ 114.886632][ T7440] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 114.886654][ T7440] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 114.886669][ T7440] __vmalloc_noprof+0x79/0x90 [ 114.886684][ T7440] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 114.886699][ T7440] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 114.886713][ T7440] ? bpf_prog_alloc+0x28/0x1b0 [ 114.886729][ T7440] bpf_prog_alloc+0x3a/0x1b0 [ 114.886746][ T7440] bpf_prog_load+0x7f4/0x20e0 [ 114.886770][ T7440] ? __pfx_bpf_prog_load+0x10/0x10 [ 114.886785][ T7440] ? __pfx___might_resched+0x10/0x10 [ 114.886809][ T7440] ? __might_fault+0xaa/0x120 [ 114.886830][ T7440] __sys_bpf+0x4ee/0x810 [ 114.886846][ T7440] ? __pfx___sys_bpf+0x10/0x10 [ 114.886868][ T7440] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.886887][ T7440] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.886904][ T7440] ? do_syscall_64+0x100/0x230 [ 114.886924][ T7440] __x64_sys_bpf+0x7c/0x90 [ 114.886937][ T7440] do_syscall_64+0xf3/0x230 [ 114.886953][ T7440] ? clear_bhb_loop+0x35/0x90 [ 114.886972][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.886988][ T7440] RIP: 0033:0x7ff89798cde9 [ 114.887000][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.887010][ T7440] RSP: 002b:00007ff8957f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.887023][ T7440] RAX: ffffffffffffffda RBX: 00007ff897ba5fa0 RCX: 00007ff89798cde9 [ 114.887032][ T7440] RDX: 0000000000000094 RSI: 0000400000000040 RDI: 0000000000000005 [ 114.887040][ T7440] RBP: 00007ff8957f6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.887048][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.887055][ T7440] R13: 0000000000000001 R14: 00007ff897ba5fa0 R15: 00007ffe3d454f68 [ 114.887074][ T7440] [ 114.887082][ T7440] Mem-Info: [ 115.155052][ T7440] active_anon:7893 inactive_anon:0 isolated_anon:0 [ 115.155052][ T7440] active_file:1398 inactive_file:38319 isolated_file:0 [ 115.155052][ T7440] unevictable:768 dirty:232 writeback:0 [ 115.155052][ T7440] slab_reclaimable:10544 slab_unreclaimable:97734 [ 115.155052][ T7440] mapped:28437 shmem:1431 pagetables:731 [ 115.155052][ T7440] sec_pagetables:0 bounce:0 [ 115.155052][ T7440] kernel_misc_reclaimable:0 [ 115.155052][ T7440] free:1341330 free_pcp:107 free_cma:0 [ 115.231923][ T7440] Node 0 active_anon:31620kB inactive_anon:0kB active_file:5592kB inactive_file:153208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113724kB dirty:924kB writeback:0kB shmem:4188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10776kB pagetables:2928kB sec_pagetables:0kB all_unreclaimable? no [ 115.272575][ T7440] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 115.316344][ T7440] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.382405][ T7440] lowmem_reserve[]: 0 2491 2491 0 0 [ 115.391890][ T7440] Node 0 DMA32 free:1440684kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:32284kB inactive_anon:0kB active_file:5592kB inactive_file:152640kB unevictable:1536kB writepending:920kB present:3129332kB managed:2551084kB mlocked:0kB bounce:0kB free_pcp:1656kB local_pcp:912kB free_cma:0kB [ 115.461938][ T7440] lowmem_reserve[]: 0 0 0 0 0 [ 115.466840][ T7440] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:568kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 115.505391][ T7455] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 115.513586][ T7455] veth0_vlan: left promiscuous mode [ 115.522424][ T7455] veth0_vlan: entered promiscuous mode [ 115.532039][ T7440] lowmem_reserve[]: 0 0 0 0 0 [ 115.550284][ T7455] team0: Device veth0_vlan failed to register rx_handler [ 115.557734][ T7440] Node 1 Normal free:3907920kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.602360][ T7457] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 115.615961][ T7440] lowmem_reserve[]: 0 0 0 0 0 [ 115.620752][ T7440] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.637003][ T7440] Node 0 DMA32: 92*4kB (UME) 331*8kB (UME) 248*16kB (UME) 308*32kB (UME) 136*64kB (UME) 66*128kB (UME) 135*256kB (UME) 102*512kB (UM) 68*1024kB (UM) 5*2048kB (UME) 304*4096kB (M) = 1445832kB [ 115.701574][ T7440] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 115.716032][ T7440] Node 1 Normal: 210*4kB (UME) 51*8kB (UME) 45*16kB (UME) 221*32kB (UME) 100*64kB (UME) 44*128kB (UME) 15*256kB (UME) 10*512kB (UME) 3*1024kB (UM) 4*2048kB (UE) 944*4096kB (M) = 3907920kB [ 115.742168][ T7440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.751949][ T7440] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.761670][ T7440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.772864][ T7440] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.782367][ T7440] 41149 total pagecache pages [ 115.790362][ T7440] 0 pages in swap cache [ 115.795765][ T7440] Free swap = 124996kB [ 115.800018][ T7440] Total swap = 124996kB [ 115.804632][ T7440] 2097051 pages RAM [ 115.808652][ T7440] 0 pages HighMem/MovableOnly [ 115.813450][ T7440] 427494 pages reserved [ 115.818056][ T7440] 0 pages cma reserved [ 115.929749][ T7455] syz.1.395 (7455) used greatest stack depth: 17808 bytes left [ 116.240043][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 116.272762][ T7483] netlink: 48 bytes leftover after parsing attributes in process `syz.1.404'. [ 116.668053][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 116.730426][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.774591][ T7505] netlink: 'syz.4.411': attribute type 10 has an invalid length. [ 116.833765][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 116.857532][ T5836] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 116.923859][ T5836] Bluetooth: hci0: command 0x0401 tx timeout [ 116.984833][ T7505] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.090625][ T7528] FAULT_INJECTION: forcing a failure. [ 117.090625][ T7528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.094264][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.143692][ T7528] CPU: 0 UID: 0 PID: 7528 Comm: syz.3.415 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 117.143719][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 117.143728][ T7528] Call Trace: [ 117.143734][ T7528] [ 117.143741][ T7528] dump_stack_lvl+0x241/0x360 [ 117.143766][ T7528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.143784][ T7528] ? __pfx__printk+0x10/0x10 [ 117.143809][ T7528] ? __pfx_lock_release+0x10/0x10 [ 117.143838][ T7528] should_fail_ex+0x40a/0x550 [ 117.143860][ T7528] _copy_from_iter+0x1e9/0x1c20 [ 117.143881][ T7528] ? __virt_addr_valid+0x183/0x530 [ 117.143911][ T7528] ? __alloc_skb+0x28f/0x440 [ 117.143932][ T7528] ? __pfx__copy_from_iter+0x10/0x10 [ 117.143955][ T7528] ? __virt_addr_valid+0x183/0x530 [ 117.143976][ T7528] ? __virt_addr_valid+0x183/0x530 [ 117.143995][ T7528] ? __virt_addr_valid+0x45f/0x530 [ 117.144016][ T7528] ? __phys_addr_symbol+0x2f/0x70 [ 117.144037][ T7528] ? __check_object_size+0x47a/0x730 [ 117.144057][ T7528] netlink_sendmsg+0x73d/0xcb0 [ 117.144085][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.144105][ T7528] ? aa_sock_msg_perm+0x91/0x160 [ 117.144131][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.144146][ T7528] __sock_sendmsg+0x221/0x270 [ 117.144168][ T7528] ____sys_sendmsg+0x52a/0x7e0 [ 117.144192][ T7528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.144206][ T7528] ? __fget_files+0x2a/0x410 [ 117.144226][ T7528] ? __fget_files+0x2a/0x410 [ 117.144256][ T7528] __sys_sendmsg+0x269/0x350 [ 117.144276][ T7528] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.144303][ T7528] ? do_sys_openat2+0x17a/0x1d0 [ 117.144345][ T7528] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.144367][ T7528] ? do_syscall_64+0x100/0x230 [ 117.144391][ T7528] ? do_syscall_64+0xb6/0x230 [ 117.144413][ T7528] do_syscall_64+0xf3/0x230 [ 117.144434][ T7528] ? clear_bhb_loop+0x35/0x90 [ 117.144457][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.144477][ T7528] RIP: 0033:0x7fe764f8cde9 [ 117.144492][ T7528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.144504][ T7528] RSP: 002b:00007fe765dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.144523][ T7528] RAX: ffffffffffffffda RBX: 00007fe7651a6080 RCX: 00007fe764f8cde9 [ 117.144534][ T7528] RDX: 0000000004040000 RSI: 0000400000000c80 RDI: 0000000000000004 [ 117.144545][ T7528] RBP: 00007fe765dff090 R08: 0000000000000000 R09: 0000000000000000 [ 117.144554][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.144564][ T7528] R13: 0000000000000000 R14: 00007fe7651a6080 R15: 00007ffde28bcee8 [ 117.144589][ T7528] [ 117.420729][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.434063][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.444572][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.454105][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.461691][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.469195][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.498603][ T7511] bridge_slave_1: left allmulticast mode [ 117.504835][ T7511] bridge_slave_1: left promiscuous mode [ 117.510604][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.526881][ T7511] bridge_slave_0: left allmulticast mode [ 117.534592][ T7511] bridge_slave_0: left promiscuous mode [ 117.540285][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.567269][ T7511] bond0: (slave bridge0): Releasing backup interface [ 117.798090][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 117.979627][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.019506][ T7552] bridge_slave_0: left allmulticast mode [ 118.025853][ T7552] bridge_slave_0: left promiscuous mode [ 118.032136][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.047792][ T7552] bridge_slave_1: left allmulticast mode [ 118.054294][ T7552] bridge_slave_1: left promiscuous mode [ 118.059976][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.069982][ T7552] bond0: (slave bond_slave_0): Releasing backup interface [ 118.080164][ T7552] bond0: (slave bond_slave_1): Releasing backup interface [ 118.093697][ T7552] team0: Port device team_slave_0 removed [ 118.101965][ T7552] team0: Port device team_slave_1 removed [ 118.108225][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.116603][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.127292][ T7552] team0: Port device bridge1 removed [ 118.159077][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.271813][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'. [ 118.381352][ T35] bridge_slave_1: left allmulticast mode [ 118.407814][ T35] bridge_slave_1: left promiscuous mode [ 118.430562][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.456760][ T35] bridge_slave_0: left allmulticast mode [ 118.471327][ T35] bridge_slave_0: left promiscuous mode [ 118.499317][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.555522][ T7584] FAULT_INJECTION: forcing a failure. [ 118.555522][ T7584] name failslab, interval 1, probability 0, space 0, times 0 [ 118.587059][ T7584] CPU: 1 UID: 0 PID: 7584 Comm: syz.0.428 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 118.587091][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 118.587100][ T7584] Call Trace: [ 118.587106][ T7584] [ 118.587114][ T7584] dump_stack_lvl+0x241/0x360 [ 118.587139][ T7584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.587157][ T7584] ? __pfx__printk+0x10/0x10 [ 118.587183][ T7584] ? __kmalloc_noprof+0xb5/0x4c0 [ 118.587201][ T7584] ? __pfx___might_resched+0x10/0x10 [ 118.587219][ T7584] ? aa_get_newest_label+0xff/0x6f0 [ 118.587245][ T7584] should_fail_ex+0x40a/0x550 [ 118.587269][ T7584] should_failslab+0xac/0x100 [ 118.587287][ T7584] __kmalloc_noprof+0xdd/0x4c0 [ 118.587304][ T7584] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 118.587324][ T7584] ? apparmor_capable+0x13b/0x1b0 [ 118.587344][ T7584] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 118.587371][ T7584] genl_rcv_msg+0x802/0xec0 [ 118.587400][ T7584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.587448][ T7584] ? __pfx_lock_acquire+0x10/0x10 [ 118.587468][ T7584] ? __pfx_ieee802154_set_macparams+0x10/0x10 [ 118.587493][ T7584] ? __pfx___might_resched+0x10/0x10 [ 118.587521][ T7584] netlink_rcv_skb+0x1e3/0x430 [ 118.587537][ T7584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.587557][ T7584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.587605][ T7584] genl_rcv+0x28/0x40 [ 118.587623][ T7584] netlink_unicast+0x7f6/0x990 [ 118.587651][ T7584] ? __pfx_netlink_unicast+0x10/0x10 [ 118.587670][ T7584] ? __virt_addr_valid+0x45f/0x530 [ 118.587692][ T7584] ? __phys_addr_symbol+0x2f/0x70 [ 118.587712][ T7584] ? __check_object_size+0x47a/0x730 [ 118.587734][ T7584] netlink_sendmsg+0x8e4/0xcb0 [ 118.587762][ T7584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.587782][ T7584] ? aa_sock_msg_perm+0x91/0x160 [ 118.587808][ T7584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.587823][ T7584] __sock_sendmsg+0x221/0x270 [ 118.587846][ T7584] ____sys_sendmsg+0x52a/0x7e0 [ 118.587872][ T7584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.587886][ T7584] ? __fget_files+0x2a/0x410 [ 118.587907][ T7584] ? __fget_files+0x2a/0x410 [ 118.587933][ T7584] __sys_sendmsg+0x269/0x350 [ 118.587953][ T7584] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.587983][ T7584] ? do_sys_openat2+0x17a/0x1d0 [ 118.588028][ T7584] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.588051][ T7584] ? do_syscall_64+0x100/0x230 [ 118.588084][ T7584] ? do_syscall_64+0xb6/0x230 [ 118.588108][ T7584] do_syscall_64+0xf3/0x230 [ 118.588129][ T7584] ? clear_bhb_loop+0x35/0x90 [ 118.588153][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.588172][ T7584] RIP: 0033:0x7ff89798cde9 [ 118.588187][ T7584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.588200][ T7584] RSP: 002b:00007ff8957d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.588228][ T7584] RAX: ffffffffffffffda RBX: 00007ff897ba6080 RCX: 00007ff89798cde9 [ 118.588240][ T7584] RDX: 0000000004040000 RSI: 0000400000000c80 RDI: 0000000000000004 [ 118.588250][ T7584] RBP: 00007ff8957d5090 R08: 0000000000000000 R09: 0000000000000000 [ 118.588260][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.588269][ T7584] R13: 0000000000000000 R14: 00007ff897ba6080 R15: 00007ffe3d454f68 [ 118.588296][ T7584] [ 119.373181][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.386374][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.396991][ T35] bond0 (unregistering): Released all slaves [ 119.440997][ T7591] IPVS: Error connecting to the multicast addr [ 119.572395][ T5836] Bluetooth: hci1: command tx timeout [ 119.859784][ T7529] chnl_net:caif_netlink_parms(): no params data found [ 119.967988][ T7625] xt_limit: Overflow, try lower: 0/0 [ 119.995473][ T35] hsr_slave_0: left promiscuous mode [ 120.021410][ T35] hsr_slave_1: left promiscuous mode [ 120.033111][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.040570][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.114253][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.149481][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.188255][ T35] veth1_macvtap: left promiscuous mode [ 120.193984][ T35] veth0_macvtap: left promiscuous mode [ 120.199944][ T35] veth1_vlan: left promiscuous mode [ 120.204531][ T7637] netlink: 17 bytes leftover after parsing attributes in process `syz.3.443'. [ 120.205444][ T35] veth0_vlan: left promiscuous mode [ 120.708747][ T35] team0 (unregistering): Port device team_slave_1 removed [ 120.751154][ T35] team0 (unregistering): Port device team_slave_0 removed [ 121.244117][ T7662] netlink: 276 bytes leftover after parsing attributes in process `syz.3.450'. [ 121.384234][ T7664] bond1: entered promiscuous mode [ 121.406142][ T7664] bond1: entered allmulticast mode [ 121.427478][ T7664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.438207][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.452481][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.471938][ T7529] bridge_slave_0: entered allmulticast mode [ 121.479351][ T7529] bridge_slave_0: entered promiscuous mode [ 121.488086][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.496821][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.504333][ T7529] bridge_slave_1: entered allmulticast mode [ 121.511239][ T7529] bridge_slave_1: entered promiscuous mode [ 121.587756][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 121.607093][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 121.630939][ T7529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.643911][ T5836] Bluetooth: hci1: command tx timeout [ 121.693260][ T7529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.821003][ T7675] bond1: entered promiscuous mode [ 121.847675][ T7675] bond1: entered allmulticast mode [ 121.872762][ T7675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.938674][ T7529] team0: Port device team_slave_0 added [ 121.964228][ T7529] team0: Port device team_slave_1 added [ 122.051610][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.060338][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.092403][ T7529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.110424][ T7685] netlink: 'syz.4.455': attribute type 11 has an invalid length. [ 122.119059][ T7685] netlink: 'syz.4.455': attribute type 5 has an invalid length. [ 122.140806][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.148783][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.175633][ T7529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.240629][ T7529] hsr_slave_0: entered promiscuous mode [ 122.249454][ T7529] hsr_slave_1: entered promiscuous mode [ 122.259466][ T7529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.274339][ T7529] Cannot create hsr debugfs directory [ 122.760261][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 122.825197][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.458'. [ 123.752610][ T5836] Bluetooth: hci1: command tx timeout [ 123.774306][ T7529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.849782][ T7529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.906266][ T7529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.985622][ T7724] dvmrp0: left allmulticast mode [ 124.064539][ T7529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.315988][ T7529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.386542][ T7529] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.412594][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.419790][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.453096][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.460289][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.622165][ T7743] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 124.709704][ T7529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.762846][ T7529] veth0_vlan: entered promiscuous mode [ 124.779151][ T7529] veth1_vlan: entered promiscuous mode [ 124.821513][ T7529] veth0_macvtap: entered promiscuous mode [ 124.863312][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 124.899166][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.472'. [ 124.910705][ T7529] veth1_macvtap: entered promiscuous mode [ 124.929182][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.941598][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.952601][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.968851][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.979555][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.990176][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.024055][ T7529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.044370][ T7757] dvmrp5: entered allmulticast mode [ 125.054288][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.066368][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.077857][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.089044][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.176142][ T7529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.187173][ T7529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.207364][ T7529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.234540][ T7755] dvmrp5: left allmulticast mode [ 125.356929][ T7529] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.413948][ T7529] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.443135][ T7529] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.451906][ T7529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.775611][ T6499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.802519][ T5836] Bluetooth: hci1: command tx timeout [ 125.822347][ T6499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.880066][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'. [ 125.929467][ T6502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.956278][ T6502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.790279][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.490'. [ 126.859203][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.490'. [ 126.995416][ T7832] batadv_slave_1: entered promiscuous mode [ 127.265663][ T6502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.360189][ T7810] batadv_slave_1: left promiscuous mode [ 127.946304][ T7851] No such timeout policy "syz0" [ 128.009061][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 128.146504][ T7852] batman_adv: batadv0: Adding interface: dummy0 [ 128.157466][ T7852] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.192620][ T7852] batman_adv: batadv0: Interface activated: dummy0 [ 128.310754][ T6502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.347240][ T7852] batadv0: mtu less than device minimum [ 128.374961][ T7852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.387847][ T7852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.400368][ T7852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.412888][ T7852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.425442][ T7852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.438140][ T7852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.450703][ T7852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.463304][ T7852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.475837][ T7852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.634815][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.646951][ T6502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.657999][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.667188][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.676544][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.684270][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 128.691806][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.813072][ T7869] batman_adv: batadv0: Adding interface: ip6gretap1 [ 128.819713][ T7869] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.857677][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 128.869721][ T7869] batman_adv: batadv0: Interface activated: ip6gretap1 [ 129.072371][ T6502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.159589][ T7876] netlink: 36 bytes leftover after parsing attributes in process `syz.1.502'. [ 129.436729][ T7888] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 129.451899][ T7888] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 129.461094][ T7888] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 129.574504][ T6502] bridge_slave_1: left allmulticast mode [ 129.590323][ T6502] bridge_slave_1: left promiscuous mode [ 129.598773][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.637163][ T6502] bridge_slave_0: left allmulticast mode [ 129.656072][ T6502] bridge_slave_0: left promiscuous mode [ 129.661844][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.230402][ T6502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.243231][ T6502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.254213][ T6502] bond0 (unregistering): Released all slaves [ 130.421324][ T7863] chnl_net:caif_netlink_parms(): no params data found [ 130.487832][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.510'. [ 130.609232][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 130.624067][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 130.762700][ T5839] Bluetooth: hci1: command tx timeout [ 130.889899][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.912524][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.940091][ T7863] bridge_slave_0: entered allmulticast mode [ 130.956472][ T7863] bridge_slave_0: entered promiscuous mode [ 130.973942][ T6502] hsr_slave_0: left promiscuous mode [ 130.981916][ T6502] hsr_slave_1: left promiscuous mode [ 130.996725][ T6502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.011167][ T6502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.030135][ T6502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.047937][ T6502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.099318][ T6502] veth1_macvtap: left promiscuous mode [ 131.119792][ T6502] veth0_macvtap: left promiscuous mode [ 131.131868][ T6502] veth1_vlan: left promiscuous mode [ 131.145031][ T6502] veth0_vlan: left promiscuous mode [ 131.176548][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 132.030252][ T6502] team0 (unregistering): Port device team_slave_1 removed [ 132.101961][ T6502] team0 (unregistering): Port device team_slave_0 removed [ 132.708336][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.716157][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.726405][ T7863] bridge_slave_1: entered allmulticast mode [ 132.743146][ T7863] bridge_slave_1: entered promiscuous mode [ 132.842915][ T5839] Bluetooth: hci1: command tx timeout [ 132.997101][ T7863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.017069][ T7956] af_packet: tpacket_rcv: packet too big, clamped from 3788 to 3696. macoff=96 [ 133.027767][ T7863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.040224][ T7956] netlink: 3520 bytes leftover after parsing attributes in process `syz.3.523'. [ 133.049668][ T7958] netlink: 'syz.0.521': attribute type 7 has an invalid length. [ 133.094863][ T7956] netlink: 3520 bytes leftover after parsing attributes in process `syz.3.523'. [ 133.108482][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 133.174755][ T7863] team0: Port device team_slave_0 added [ 133.251342][ T7863] team0: Port device team_slave_1 added [ 133.402002][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.413486][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.448998][ T7863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.519809][ T7967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.546363][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.569237][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.652117][ T7863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.972861][ T7863] hsr_slave_0: entered promiscuous mode [ 133.996012][ T7863] hsr_slave_1: entered promiscuous mode [ 134.022981][ T7863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.040870][ T7863] Cannot create hsr debugfs directory [ 134.639451][ T8028] xt_bpf: check failed: parse error [ 134.657411][ T8022] bond0: entered promiscuous mode [ 134.673999][ T8022] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 134.703316][ T8022] bond0: left promiscuous mode [ 134.924740][ T5839] Bluetooth: hci1: command tx timeout [ 135.252714][ T7863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.290296][ T7863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.335815][ T7863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.387249][ T7863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.689703][ T7863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.755924][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.547'. [ 135.766916][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.547'. [ 135.786060][ T7863] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.811663][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.818801][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.863447][ T8080] netlink: 'syz.1.547': attribute type 4 has an invalid length. [ 135.890282][ T6502] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.897484][ T6502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.032918][ T7863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.055814][ T7863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.567032][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.694450][ T7863] veth0_vlan: entered promiscuous mode [ 136.727926][ T7863] veth1_vlan: entered promiscuous mode [ 136.827318][ T7863] veth0_macvtap: entered promiscuous mode [ 136.864772][ T7863] veth1_macvtap: entered promiscuous mode [ 136.912072][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.945363][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.972530][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.002494][ T5839] Bluetooth: hci1: command tx timeout [ 137.010908][ T8136] netlink: 'syz.1.560': attribute type 2 has an invalid length. [ 137.012617][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.052292][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.078734][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.114602][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.140520][ T8136] fþ²¹¥‰: entered promiscuous mode [ 137.153251][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.164267][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.188652][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.211216][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.223983][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.238861][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.257208][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.357962][ T7863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.409884][ T7863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.452272][ T7863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.461026][ T7863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.531613][ T8150] tipc: Started in network mode [ 137.549334][ T8150] tipc: Node identity e0000001, cluster identity 4711 [ 137.578724][ T8150] tipc: Enabling of bearer rejected, failed to enable media [ 138.051841][ T8154] bridge0: port 3(ip6gretap0) entered disabled state [ 138.073741][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.081224][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.183257][ T8154] batman_adv: batadv0: Interface deactivated: dummy0 [ 138.649681][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.672036][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.759515][ T8154] macsec0: left promiscuous mode [ 138.764760][ T8154] macsec0: left allmulticast mode [ 138.778935][ T8154] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.788125][ T8154] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.797839][ T8154] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.807026][ T8154] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.860959][ T8154] bridge1: left promiscuous mode [ 138.868507][ T8154] bridge1: left allmulticast mode [ 138.884524][ T8154] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.893900][ T8154] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.902830][ T8154] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.911690][ T8154] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.927434][ T8154] gretap1: left promiscuous mode [ 138.932590][ T8154] gretap1: left allmulticast mode [ 138.939538][ T8154] bridge4: left promiscuous mode [ 138.944667][ T8154] bridge4: left allmulticast mode [ 138.950493][ T8154] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 139.143214][ T8172] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 139.157740][ T6502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.175895][ T6502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.236787][ T6502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.263754][ T6502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.617298][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 139.633697][ T8184] dvmrp0: entered allmulticast mode [ 139.871350][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.881323][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.892294][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.908401][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.918524][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.927858][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.244096][ T8207] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 140.317708][ T8211] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 140.335866][ T8211] netlink: 140 bytes leftover after parsing attributes in process `syz.3.583'. [ 140.353128][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.397814][ T8207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.466071][ T8212] bond3: (slave gretap1): making interface the new active one [ 140.483600][ T8218] netlink: 44 bytes leftover after parsing attributes in process `syz.3.583'. [ 140.489708][ T8212] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 140.545596][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.576383][ T8194] chnl_net:caif_netlink_parms(): no params data found [ 140.651404][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.819471][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.827376][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.838627][ T8194] bridge_slave_0: entered allmulticast mode [ 140.847298][ T8194] bridge_slave_0: entered promiscuous mode [ 140.858766][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.866071][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.876997][ T8194] bridge_slave_1: entered allmulticast mode [ 140.885006][ T8194] bridge_slave_1: entered promiscuous mode [ 140.936011][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.982131][ T8226] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 140.992406][ T8226] netlink: 'syz.1.585': attribute type 2 has an invalid length. [ 141.071754][ T8194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.098107][ T8194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.165107][ T8231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.586'. [ 141.300162][ T8194] team0: Port device team_slave_0 added [ 141.316615][ T8194] team0: Port device team_slave_1 added [ 141.408135][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.423757][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.433519][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.442763][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.450573][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.458196][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.481621][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.525170][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.564202][ T8194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.574872][ T8252] netlink: 'syz.1.592': attribute type 30 has an invalid length. [ 141.578145][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.589920][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.616582][ T8194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.634877][ T11] bridge_slave_1: left allmulticast mode [ 141.646473][ T11] bridge_slave_1: left promiscuous mode [ 141.652280][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.675520][ T11] bridge_slave_0: left allmulticast mode [ 141.681179][ T11] bridge_slave_0: left promiscuous mode [ 141.697246][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.976560][ T5839] Bluetooth: hci1: command tx timeout [ 141.992537][ T8260] Bluetooth: MGMT ver 1.23 [ 142.001623][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 142.151193][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.162493][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.172911][ T11] bond0 (unregistering): Released all slaves [ 142.292058][ T8194] hsr_slave_0: entered promiscuous mode [ 142.306738][ T8194] hsr_slave_1: entered promiscuous mode [ 142.317293][ T8194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.329671][ T8194] Cannot create hsr debugfs directory [ 142.487348][ T8270] dvmrp5: entered allmulticast mode [ 142.572836][ T8272] netlink: 'syz.0.599': attribute type 29 has an invalid length. [ 142.642371][ T8272] dvmrp5: left allmulticast mode [ 142.695424][ T11] hsr_slave_0: left promiscuous mode [ 142.701506][ T11] hsr_slave_1: left promiscuous mode [ 142.709683][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.717885][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.728124][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.736721][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.764605][ T11] veth1_macvtap: left promiscuous mode [ 142.770150][ T11] veth0_macvtap: left promiscuous mode [ 142.776148][ T11] veth1_vlan: left promiscuous mode [ 142.781463][ T11] veth0_vlan: left promiscuous mode [ 143.077706][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 143.290540][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 143.486856][ T5839] Bluetooth: hci4: command tx timeout [ 143.598298][ T11] team0 (unregistering): Port device team_slave_1 removed [ 143.640094][ T11] team0 (unregistering): Port device team_slave_0 removed [ 143.761968][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 144.042582][ T5839] Bluetooth: hci1: command tx timeout [ 144.090953][ T8194] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.101731][ T8194] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50268 - 0 [ 144.112548][ T8194] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 56949 - 0 [ 144.136445][ T8290] wlan0 speed is unknown, defaulting to 1000 [ 144.161645][ T8290] wlan0 speed is unknown, defaulting to 1000 [ 144.175895][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.603'. [ 144.218192][ T8194] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.228939][ T8194] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50268 - 0 [ 144.239671][ T8194] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 56949 - 0 [ 144.278108][ T8290] wlan0 speed is unknown, defaulting to 1000 [ 144.298633][ T8290] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 144.386069][ T8194] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.402075][ T8194] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50268 - 0 [ 144.413633][ T8194] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 56949 - 0 [ 144.427609][ T8290] wlan0 speed is unknown, defaulting to 1000 [ 144.477826][ T8290] wlan0 speed is unknown, defaulting to 1000 [ 144.551670][ T8194] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.580540][ T8194] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 50268 - 0 [ 144.609821][ T8194] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 56949 - 0 [ 144.638499][ T8244] chnl_net:caif_netlink_parms(): no params data found [ 144.647581][ T8290] wlan0 speed is unknown, defaulting to 1000 [ 144.668240][ T8290] wlan0 speed is unknown, defaulting to 1000 [ 144.752413][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 144.775886][ T8290] wlan0 speed is unknown, defaulting to 1000 [ 144.778954][ T8336] batman_adv: batadv0: Removing interface: dummy0 [ 144.800077][ T8336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.818749][ T8336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.826784][ T8336] batman_adv: batadv0: Removing interface: ip6gretap1 [ 144.860515][ T8290] wlan0 speed is unknown, defaulting to 1000 [ 144.889800][ T8344] netlink: 64 bytes leftover after parsing attributes in process `syz.1.611'. [ 144.900066][ T8344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.611'. [ 145.061193][ T8244] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.071225][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.087016][ T8244] bridge_slave_0: entered allmulticast mode [ 145.096691][ T8244] bridge_slave_0: entered promiscuous mode [ 145.146427][ T8244] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.159377][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.170382][ T8244] bridge_slave_1: entered allmulticast mode [ 145.185777][ T8244] bridge_slave_1: entered promiscuous mode [ 145.253728][ T8244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.281902][ T8244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.397141][ T8244] team0: Port device team_slave_0 added [ 145.403842][ T8194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.415104][ T8194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.441102][ T8244] team0: Port device team_slave_1 added [ 145.506698][ T8194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.562468][ T5839] Bluetooth: hci4: command tx timeout [ 145.593149][ T8194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.614539][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.633478][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.677516][ T8244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.705289][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.715237][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.747478][ T8244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.816904][ T8244] hsr_slave_0: entered promiscuous mode [ 145.830140][ T8244] hsr_slave_1: entered promiscuous mode [ 145.836676][ T8244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.848133][ T8244] Cannot create hsr debugfs directory [ 145.969655][ T8194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.031089][ T8194] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.056695][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.063926][ T6499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.105217][ T6502] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.112407][ T6502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.126627][ T5839] Bluetooth: hci1: command tx timeout [ 146.329914][ T8402] netlink: 'syz.1.627': attribute type 1 has an invalid length. [ 146.530365][ T8194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.544759][ T8244] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.565816][ T8244] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.603292][ T8244] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.620124][ T8415] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 146.651619][ T8418] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 146.659672][ T8244] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.703187][ T8418] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 146.792759][ C1] net_ratelimit: 30 callbacks suppressed [ 146.792780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.884988][ T8244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.894035][ T8428] lo: entered allmulticast mode [ 146.899848][ T8428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.950576][ T8244] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.962509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.973646][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.980777][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.000818][ T8433] netlink: 80 bytes leftover after parsing attributes in process `syz.3.636'. [ 147.028752][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.035949][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.134024][ T8194] veth0_vlan: entered promiscuous mode [ 147.144118][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.153704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.171661][ T8244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.184565][ T8244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.204335][ T8194] veth1_vlan: entered promiscuous mode [ 147.265457][ T8194] veth0_macvtap: entered promiscuous mode [ 147.284306][ T8194] veth1_macvtap: entered promiscuous mode [ 147.334906][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.363808][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.385889][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.399744][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.419168][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.463356][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.498115][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.539436][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.565272][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.581129][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 147.589757][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.629439][ T8194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.643531][ T5839] Bluetooth: hci4: command tx timeout [ 147.662317][ T8194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.671226][ T8194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.680713][ T8194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.706703][ T8244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.782791][ T8460] netlink: 830 bytes leftover after parsing attributes in process `syz.3.644'. [ 147.795750][ T8460] netlink: 72 bytes leftover after parsing attributes in process `syz.3.644'. [ 147.828458][ T8460] netlink: 72 bytes leftover after parsing attributes in process `syz.3.644'. [ 147.889201][ T6505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.892143][ T8244] veth0_vlan: entered promiscuous mode [ 147.902941][ T6505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.920407][ T8460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.969846][ T8244] veth1_vlan: entered promiscuous mode [ 147.976584][ T8464] netlink: 712 bytes leftover after parsing attributes in process `syz.1.645'. [ 147.988358][ T6497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.003789][ T6497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.078237][ T8244] veth0_macvtap: entered promiscuous mode [ 148.107201][ T8244] veth1_macvtap: entered promiscuous mode [ 148.127474][ T8467] netlink: 'syz.3.646': attribute type 4 has an invalid length. [ 148.140820][ T8467] netlink: 'syz.3.646': attribute type 4 has an invalid length. [ 148.143632][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.172563][ T8470] netlink: 'syz.1.648': attribute type 30 has an invalid length. [ 148.194658][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.212591][ T5839] Bluetooth: hci1: command tx timeout [ 148.212718][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.232266][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.242124][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.272277][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.284257][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.284951][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.292699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.344617][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.362734][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.381476][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.392368][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.402464][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.413459][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.451334][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.526670][ T8244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.546267][ T8244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.563685][ T8244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.582626][ T8244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.779974][ T6502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.809945][ T6502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.830004][ T8484] wlan0 speed is unknown, defaulting to 1000 [ 148.882573][ T6505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.890450][ T6505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.137460][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.384301][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.455048][ T6502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.463485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.603824][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.843704][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.853466][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.862873][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.880393][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.900143][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.907926][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.941572][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.075237][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.088855][ T8508] wlan0 speed is unknown, defaulting to 1000 [ 150.219594][ T35] bridge_slave_1: left allmulticast mode [ 150.226905][ T35] bridge_slave_1: left promiscuous mode [ 150.232814][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.244545][ T35] bridge_slave_0: left allmulticast mode [ 150.250216][ T35] bridge_slave_0: left promiscuous mode [ 150.256432][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.553910][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.568657][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.578977][ T35] bond0 (unregistering): Released all slaves [ 150.653538][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 150.739687][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.749678][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.757362][ T8508] bridge_slave_0: entered allmulticast mode [ 150.773356][ T8508] bridge_slave_0: entered promiscuous mode [ 150.834237][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.841364][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.884736][ T8508] bridge_slave_1: entered allmulticast mode [ 150.901994][ T8508] bridge_slave_1: entered promiscuous mode [ 151.049088][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.090744][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.203784][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 151.235400][ T8508] team0: Port device team_slave_0 added [ 151.264171][ T8508] team0: Port device team_slave_1 added [ 151.342993][ T35] hsr_slave_0: left promiscuous mode [ 151.363077][ T35] hsr_slave_1: left promiscuous mode [ 151.370480][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.398439][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.414219][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.421648][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.421663][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.453615][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.461999][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.469932][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.490567][ T35] veth1_macvtap: left promiscuous mode [ 151.496294][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.503373][ T35] veth0_macvtap: left promiscuous mode [ 151.503506][ T35] veth1_vlan: left promiscuous mode [ 151.522072][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.526935][ T35] veth0_vlan: left promiscuous mode [ 151.966430][ T5836] Bluetooth: hci1: command tx timeout [ 152.058266][ T35] team0 (unregistering): Port device team_slave_1 removed [ 152.099705][ T35] team0 (unregistering): Port device team_slave_0 removed [ 152.458987][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.466377][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.493387][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.542438][ T8564] bridge0: port 1(veth0_to_bridge) entered blocking state [ 152.549634][ T8564] bridge0: port 1(veth0_to_bridge) entered disabled state [ 152.566598][ T8564] veth0_to_bridge: entered allmulticast mode [ 152.574143][ T8564] veth0_to_bridge: entered promiscuous mode [ 152.588813][ T8565] syzkaller1: entered promiscuous mode [ 152.599003][ T8565] syzkaller1: entered allmulticast mode [ 152.614100][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.634626][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.700242][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.785453][ T8580] net_ratelimit: 4 callbacks suppressed [ 152.785471][ T8580] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.815096][ T8551] wlan0 speed is unknown, defaulting to 1000 [ 152.876603][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.885073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.918881][ T8508] hsr_slave_0: entered promiscuous mode [ 152.943224][ T8508] hsr_slave_1: entered promiscuous mode [ 152.951365][ T8508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.992384][ T8508] Cannot create hsr debugfs directory [ 153.135615][ T8594] tipc: Enabled bearer , priority 0 [ 153.151682][ T8595] netlink: 60 bytes leftover after parsing attributes in process `syz.0.678'. [ 153.174847][ T8595] netlink: 'syz.0.678': attribute type 1 has an invalid length. [ 153.189905][ T8595] netlink: 128 bytes leftover after parsing attributes in process `syz.0.678'. [ 153.334545][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 153.469414][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.510348][ T8587] tipc: Disabling bearer [ 153.556514][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.566963][ T5836] Bluetooth: hci4: command tx timeout [ 153.573532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.582637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.740128][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.827740][ T8606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.837890][ T8606] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.858022][ T8606] tipc: Resetting bearer [ 153.867053][ T8606] tipc: Resetting bearer [ 153.883186][ T8606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.972465][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.994306][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.002709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.023321][ T8551] chnl_net:caif_netlink_parms(): no params data found [ 154.044448][ T5839] Bluetooth: hci1: command tx timeout [ 154.179613][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 154.252728][ T35] bridge_slave_1: left allmulticast mode [ 154.263296][ T35] bridge_slave_1: left promiscuous mode [ 154.272649][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.294491][ T35] bridge_slave_0: left allmulticast mode [ 154.312878][ T8631] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 154.314820][ T35] bridge_slave_0: left promiscuous mode [ 154.320062][ T5913] IPVS: starting estimator thread 0... [ 154.327146][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.422462][ T8637] IPVS: using max 23 ests per chain, 55200 per kthread [ 154.753722][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.767979][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.778837][ T35] bond0 (unregistering): Released all slaves [ 154.788838][ T8551] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.796440][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.803910][ T8551] bridge_slave_0: entered allmulticast mode [ 154.813544][ T8551] bridge_slave_0: entered promiscuous mode [ 154.831729][ T8551] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.841503][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.858821][ T8551] bridge_slave_1: entered allmulticast mode [ 154.866644][ T8551] bridge_slave_1: entered promiscuous mode [ 154.953136][ T8645] netem: change failed [ 155.142619][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.165510][ T8551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.184753][ T8551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.201635][ T8508] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.218061][ T8508] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.298010][ T8508] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.339529][ T8551] team0: Port device team_slave_0 added [ 155.346916][ T8508] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.374305][ T8551] team0: Port device team_slave_1 added [ 155.407778][ T35] hsr_slave_0: left promiscuous mode [ 155.413786][ T35] hsr_slave_1: left promiscuous mode [ 155.419897][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.429481][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.438988][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.447113][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.469257][ T35] veth1_macvtap: left promiscuous mode [ 155.474953][ T35] veth0_macvtap: left promiscuous mode [ 155.481318][ T35] veth1_vlan: left promiscuous mode [ 155.487542][ T35] veth0_vlan: left promiscuous mode [ 155.658843][ T5839] Bluetooth: hci4: command tx timeout [ 155.951218][ T35] team0 (unregistering): Port device team_slave_1 removed [ 156.042036][ T35] team0 (unregistering): Port device team_slave_0 removed [ 156.122778][ T5839] Bluetooth: hci1: command tx timeout [ 156.521109][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.548516][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.594558][ T8678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 156.631047][ T8551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.645212][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.653412][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.679632][ T8551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.761268][ T8551] hsr_slave_0: entered promiscuous mode [ 156.770521][ T8684] netlink: 'syz.1.700': attribute type 11 has an invalid length. [ 156.787233][ T8551] hsr_slave_1: entered promiscuous mode [ 156.796985][ T8551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.809821][ T8551] Cannot create hsr debugfs directory [ 156.818308][ T8686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.702'. [ 157.275203][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.341794][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.350450][ T8707] tipc: Enabling of bearer rejected, failed to enable media [ 157.367204][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.374382][ T6505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.409252][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.416413][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.460686][ T8707] wlan0 speed is unknown, defaulting to 1000 [ 157.486206][ T8508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.496855][ T8508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.527409][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'. [ 157.723028][ T5839] Bluetooth: hci4: command 0x040f tx timeout [ 157.789305][ T8551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.856392][ T8721] netlink: 40 bytes leftover after parsing attributes in process `syz.3.710'. [ 157.943863][ T8551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.999271][ T8551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.045238][ T8551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.111293][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.202650][ T5836] Bluetooth: hci1: command tx timeout [ 158.326979][ T8734] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 158.355223][ T8734] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.713'. [ 158.439020][ T8551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.489706][ T8551] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.503807][ T6504] net_ratelimit: 7 callbacks suppressed [ 158.503826][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.517775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.554018][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.561145][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.578236][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.585442][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.627430][ T8551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.672414][ T8551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.785616][ T8508] veth0_vlan: entered promiscuous mode [ 158.804179][ T8508] veth1_vlan: entered promiscuous mode [ 158.873492][ T8508] veth0_macvtap: entered promiscuous mode [ 158.907160][ T8508] veth1_macvtap: entered promiscuous mode [ 158.931271][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.952282][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.969756][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.992246][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.004728][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.051260][ T8774] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 159.062833][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.093580][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.109525][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.142055][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.170139][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.197281][ T8778] netlink: 'syz.0.721': attribute type 30 has an invalid length. [ 159.216023][ T8508] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.226333][ T8508] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.236335][ T8508] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.288104][ T8508] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.310106][ T8778] FAULT_INJECTION: forcing a failure. [ 159.310106][ T8778] name failslab, interval 1, probability 0, space 0, times 0 [ 159.333580][ T8778] CPU: 0 UID: 0 PID: 8778 Comm: syz.0.721 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 159.333607][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 159.333617][ T8778] Call Trace: [ 159.333623][ T8778] [ 159.333631][ T8778] dump_stack_lvl+0x241/0x360 [ 159.333658][ T8778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.333676][ T8778] ? __pfx__printk+0x10/0x10 [ 159.333702][ T8778] ? __kmalloc_cache_noprof+0x48/0x390 [ 159.333721][ T8778] ? __pfx___might_resched+0x10/0x10 [ 159.333746][ T8778] should_fail_ex+0x40a/0x550 [ 159.333778][ T8778] should_failslab+0xac/0x100 [ 159.333798][ T8778] __kmalloc_cache_noprof+0x70/0x390 [ 159.333814][ T8778] ? vxlan_vnigroup_init+0x52/0x110 [ 159.333839][ T8778] vxlan_vnigroup_init+0x52/0x110 [ 159.333862][ T8778] vxlan_init+0x82/0x430 [ 159.333884][ T8778] register_netdevice+0x6d7/0x1b10 [ 159.333916][ T8778] ? net_generic+0x1f/0x240 [ 159.333945][ T8778] ? __pfx_register_netdevice+0x10/0x10 [ 159.333970][ T8778] ? vxlan_config_apply+0x54b/0x830 [ 159.333988][ T8778] ? __asan_memcpy+0x40/0x70 [ 159.334008][ T8778] ? vxlan_config_apply+0x54b/0x830 [ 159.334029][ T8778] __vxlan_dev_create+0x3a7/0xa30 [ 159.334057][ T8778] ? __pfx___vxlan_dev_create+0x10/0x10 [ 159.334093][ T8778] vxlan_newlink+0xee/0x140 [ 159.334113][ T8778] ? __pfx_vxlan_newlink+0x10/0x10 [ 159.334144][ T8778] ? rtnl_create_link+0x91c/0xc20 [ 159.334168][ T8778] ? __pfx_vxlan_newlink+0x10/0x10 [ 159.334186][ T8778] rtnl_newlink_create+0x2ee/0xa40 [ 159.334218][ T8778] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 159.334245][ T8778] ? ns_capable+0x8a/0xf0 [ 159.334267][ T8778] rtnl_newlink+0x1c7e/0x2210 [ 159.334302][ T8778] ? __pfx_rtnl_newlink+0x10/0x10 [ 159.334319][ T8778] ? __netlink_deliver_tap+0x56b/0x7f0 [ 159.334336][ T8778] ? __pfx_validate_chain+0x10/0x10 [ 159.334350][ T8778] ? __sock_sendmsg+0x221/0x270 [ 159.334369][ T8778] ? ____sys_sendmsg+0x52a/0x7e0 [ 159.334382][ T8778] ? __sys_sendmsg+0x269/0x350 [ 159.334395][ T8778] ? do_syscall_64+0xf3/0x230 [ 159.334415][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.334458][ T8778] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.334483][ T8778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.334510][ T8778] ? mark_lock+0x9a/0x360 [ 159.334536][ T8778] ? __lock_acquire+0x1397/0x2100 [ 159.334593][ T8778] ? __pfx_lock_release+0x10/0x10 [ 159.334629][ T8778] ? __pfx_rtnl_newlink+0x10/0x10 [ 159.334650][ T8778] rtnetlink_rcv_msg+0x791/0xcf0 [ 159.334667][ T8778] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 159.334691][ T8778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.334717][ T8778] ? ref_tracker_free+0x643/0x7e0 [ 159.334745][ T8778] netlink_rcv_skb+0x1e3/0x430 [ 159.334768][ T8778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.334789][ T8778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.334829][ T8778] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.334849][ T8778] netlink_unicast+0x7f6/0x990 [ 159.334881][ T8778] ? __pfx_netlink_unicast+0x10/0x10 [ 159.334901][ T8778] ? __virt_addr_valid+0x45f/0x530 [ 159.334924][ T8778] ? __phys_addr_symbol+0x2f/0x70 [ 159.334946][ T8778] ? __check_object_size+0x47a/0x730 [ 159.334967][ T8778] netlink_sendmsg+0x8e4/0xcb0 [ 159.334996][ T8778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.335018][ T8778] ? aa_sock_msg_perm+0x91/0x160 [ 159.335044][ T8778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.335058][ T8778] __sock_sendmsg+0x221/0x270 [ 159.335078][ T8778] ____sys_sendmsg+0x52a/0x7e0 [ 159.335102][ T8778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.335115][ T8778] ? __fget_files+0x2a/0x410 [ 159.335135][ T8778] ? __fget_files+0x2a/0x410 [ 159.335160][ T8778] __sys_sendmsg+0x269/0x350 [ 159.335182][ T8778] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.335211][ T8778] ? do_sys_openat2+0x17a/0x1d0 [ 159.335256][ T8778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.335280][ T8778] ? do_syscall_64+0x100/0x230 [ 159.335305][ T8778] ? do_syscall_64+0xb6/0x230 [ 159.335328][ T8778] do_syscall_64+0xf3/0x230 [ 159.335350][ T8778] ? clear_bhb_loop+0x35/0x90 [ 159.335374][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.335394][ T8778] RIP: 0033:0x7ff89798cde9 [ 159.335410][ T8778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.335424][ T8778] RSP: 002b:00007ff8957f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.335442][ T8778] RAX: ffffffffffffffda RBX: 00007ff897ba5fa0 RCX: 00007ff89798cde9 [ 159.335455][ T8778] RDX: 0000000004008840 RSI: 0000400000000000 RDI: 0000000000000003 [ 159.335465][ T8778] RBP: 00007ff8957f6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.335476][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.335486][ T8778] R13: 0000000000000000 R14: 00007ff897ba5fa0 R15: 00007ffe3d454f68 [ 159.335513][ T8778] [ 159.814611][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 159.846151][ T8778] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002c: 0000 [#1] PREEMPT SMP KASAN PTI [ 159.858775][ T8778] KASAN: null-ptr-deref in range [0x0000000000000160-0x0000000000000167] [ 159.867213][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.0.721 Not tainted 6.14.0-rc1-syzkaller-00206-g34c84b394890 #0 [ 159.877793][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 159.887843][ T8778] RIP: 0010:vxlan_vnigroup_uninit+0xe0/0x4b0 [ 159.893822][ T8778] Code: 00 74 08 48 89 df e8 bf 7d 70 fb 48 8b 03 48 89 04 24 48 8d 98 60 01 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 92 7d 70 fb 4c 8b 23 49 39 dc 0f 84 [ 159.913415][ T8778] RSP: 0018:ffffc90003316cc8 EFLAGS: 00010202 [ 159.919469][ T8778] RAX: 000000000000002c RBX: 0000000000000160 RCX: dffffc0000000000 [ 159.927430][ T8778] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 159.935390][ T8778] RBP: 00000000000a2001 R08: ffffffff89c3a716 R09: 1ffff92000662d78 [ 159.943351][ T8778] R10: dffffc0000000000 R11: fffff52000662d79 R12: ffff888027d2cef4 [ 159.951309][ T8778] R13: ffff888027d28000 R14: 1ffff11004fa59de R15: dffffc0000000000 [ 159.959268][ T8778] FS: 00007ff8957f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 159.968184][ T8778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.974753][ T8778] CR2: 00007f18b0f05440 CR3: 0000000064774000 CR4: 00000000003526f0 [ 159.982717][ T8778] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.990673][ T8778] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.998631][ T8778] Call Trace: [ 160.001895][ T8778] [ 160.004812][ T8778] ? __die_body+0x5f/0xb0 [ 160.009134][ T8778] ? die_addr+0xb0/0xe0 [ 160.013282][ T8778] ? exc_general_protection+0x3dd/0x5d0 [ 160.018828][ T8778] ? asm_exc_general_protection+0x26/0x30 [ 160.024545][ T8778] ? lockdep_rtnl_is_held+0x26/0x40 [ 160.029737][ T8778] ? vxlan_vnigroup_uninit+0xe0/0x4b0 [ 160.035099][ T8778] ? vxlan_vnigroup_uninit+0x3e/0x4b0 [ 160.040460][ T8778] ? notifier_call_chain+0x15a/0x3f0 [ 160.045734][ T8778] vxlan_uninit+0x7f/0x3f0 [ 160.050138][ T8778] ? __pfx_vxlan_uninit+0x10/0x10 [ 160.055150][ T8778] unregister_netdevice_many_notify+0x19c4/0x2070 [ 160.061556][ T8778] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 160.068307][ T8778] ? vxlan_dellink+0x21e/0x290 [ 160.073067][ T8778] ? __pfx_vxlan_dellink+0x10/0x10 [ 160.078168][ T8778] ? __dev_change_flags+0x515/0x6f0 [ 160.083358][ T8778] ? mutex_is_locked+0x17/0x50 [ 160.088115][ T8778] rtnl_newlink_create+0x850/0xa40 [ 160.093220][ T8778] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 160.098844][ T8778] ? ns_capable+0x8a/0xf0 [ 160.103163][ T8778] rtnl_newlink+0x1c7e/0x2210 [ 160.107835][ T8778] ? __pfx_rtnl_newlink+0x10/0x10 [ 160.112843][ T8778] ? __netlink_deliver_tap+0x56b/0x7f0 [ 160.118287][ T8778] ? __pfx_validate_chain+0x10/0x10 [ 160.123468][ T8778] ? __sock_sendmsg+0x221/0x270 [ 160.128310][ T8778] ? ____sys_sendmsg+0x52a/0x7e0 [ 160.133232][ T8778] ? __sys_sendmsg+0x269/0x350 [ 160.137980][ T8778] ? do_syscall_64+0xf3/0x230 [ 160.142645][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.148712][ T8778] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 160.154685][ T8778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.161004][ T8778] ? mark_lock+0x9a/0x360 [ 160.165326][ T8778] ? __lock_acquire+0x1397/0x2100 [ 160.170351][ T8778] ? __pfx_lock_release+0x10/0x10 [ 160.175372][ T8778] ? __pfx_rtnl_newlink+0x10/0x10 [ 160.180383][ T8778] rtnetlink_rcv_msg+0x791/0xcf0 [ 160.185308][ T8778] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 160.190405][ T8778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.195855][ T8778] ? ref_tracker_free+0x643/0x7e0 [ 160.200871][ T8778] netlink_rcv_skb+0x1e3/0x430 [ 160.205620][ T8778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.211066][ T8778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.216343][ T8778] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.221624][ T8778] netlink_unicast+0x7f6/0x990 [ 160.226408][ T8778] ? __pfx_netlink_unicast+0x10/0x10 [ 160.231694][ T8778] ? __virt_addr_valid+0x45f/0x530 [ 160.236810][ T8778] ? __phys_addr_symbol+0x2f/0x70 [ 160.241823][ T8778] ? __check_object_size+0x47a/0x730 [ 160.247097][ T8778] netlink_sendmsg+0x8e4/0xcb0 [ 160.251850][ T8778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.257121][ T8778] ? aa_sock_msg_perm+0x91/0x160 [ 160.262049][ T8778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.267317][ T8778] __sock_sendmsg+0x221/0x270 [ 160.271982][ T8778] ____sys_sendmsg+0x52a/0x7e0 [ 160.276734][ T8778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.282002][ T8778] ? __fget_files+0x2a/0x410 [ 160.286581][ T8778] ? __fget_files+0x2a/0x410 [ 160.291160][ T8778] __sys_sendmsg+0x269/0x350 [ 160.295739][ T8778] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.300840][ T8778] ? do_sys_openat2+0x17a/0x1d0 [ 160.305687][ T8778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.312006][ T8778] ? do_syscall_64+0x100/0x230 [ 160.316764][ T8778] ? do_syscall_64+0xb6/0x230 [ 160.321430][ T8778] do_syscall_64+0xf3/0x230 [ 160.325922][ T8778] ? clear_bhb_loop+0x35/0x90 [ 160.330591][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.336474][ T8778] RIP: 0033:0x7ff89798cde9 [ 160.340875][ T8778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.360480][ T8778] RSP: 002b:00007ff8957f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.368902][ T8778] RAX: ffffffffffffffda RBX: 00007ff897ba5fa0 RCX: 00007ff89798cde9 [ 160.376867][ T8778] RDX: 0000000004008840 RSI: 0000400000000000 RDI: 0000000000000003 [ 160.384827][ T8778] RBP: 00007ff8957f6090 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 160.392787][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.400743][ T8778] R13: 0000000000000000 R14: 00007ff897ba5fa0 R15: 00007ffe3d454f68 [ 160.408708][ T8778] [ 160.411711][ T8778] Modules linked in: [ 160.417504][ T8778] ---[ end trace 0000000000000000 ]--- [ 160.448866][ T8778] RIP: 0010:vxlan_vnigroup_uninit+0xe0/0x4b0 [ 160.457009][ T8778] Code: 00 74 08 48 89 df e8 bf 7d 70 fb 48 8b 03 48 89 04 24 48 8d 98 60 01 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 92 7d 70 fb 4c 8b 23 49 39 dc 0f 84 [ 160.499487][ T8778] RSP: 0018:ffffc90003316cc8 EFLAGS: 00010202 [ 160.505970][ T8778] RAX: 000000000000002c RBX: 0000000000000160 RCX: dffffc0000000000 [ 160.517169][ T8778] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 160.526859][ T8778] RBP: 00000000000a2001 R08: ffffffff89c3a716 R09: 1ffff92000662d78 [ 160.536808][ T8778] R10: dffffc0000000000 R11: fffff52000662d79 R12: ffff888027d2cef4 [ 160.546226][ T8778] R13: ffff888027d28000 R14: 1ffff11004fa59de R15: dffffc0000000000 [ 160.606420][ T8778] FS: 00007ff8957f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 160.624340][ T8778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.630973][ T8778] CR2: 00007fe765cd7d60 CR3: 0000000064774000 CR4: 00000000003526f0 [ 160.639403][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.647785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.657513][ T8778] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.666774][ T8778] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.676618][ T8778] Kernel panic - not syncing: Fatal exception [ 160.682941][ T8778] Kernel Offset: disabled [ 160.687248][ T8778] Rebooting in 86400 seconds..