last executing test programs: 1m28.052813785s ago: executing program 1 (id=709): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001500000000000000", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5}, @info_request={0x3}}}}}, 0x0) close(0x3) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0), 0x31}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xfff, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x2009, 0x2}, 0x3a) bind$bt_sco(r4, &(0x7f0000000400), 0x8) listen(r4, 0x0) shutdown(r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r3, &(0x7f0000017480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/70, 0x46}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000027a90a6800004080000008007000100637400001c00028008000240000000070800014000000009050003000100000009000100730073797a3200000000140000001100010000000000000000000000000a00"/128], 0x80}}, 0x4008000) 1m14.016417718s ago: executing program 1 (id=709): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001500000000000000", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5}, @info_request={0x3}}}}}, 0x0) close(0x3) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0), 0x31}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xfff, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x2009, 0x2}, 0x3a) bind$bt_sco(r4, &(0x7f0000000400), 0x8) listen(r4, 0x0) shutdown(r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r3, &(0x7f0000017480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/70, 0x46}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000027a90a6800004080000008007000100637400001c00028008000240000000070800014000000009050003000100000009000100730073797a3200000000140000001100010000000000000000000000000a00"/128], 0x80}}, 0x4008000) 58.975266691s ago: executing program 1 (id=709): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001500000000000000", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5}, @info_request={0x3}}}}}, 0x0) close(0x3) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0), 0x31}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xfff, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x2009, 0x2}, 0x3a) bind$bt_sco(r4, &(0x7f0000000400), 0x8) listen(r4, 0x0) shutdown(r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r3, &(0x7f0000017480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/70, 0x46}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000027a90a6800004080000008007000100637400001c00028008000240000000070800014000000009050003000100000009000100730073797a3200000000140000001100010000000000000000000000000a00"/128], 0x80}}, 0x4008000) 41.429861793s ago: executing program 1 (id=709): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001500000000000000", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5}, @info_request={0x3}}}}}, 0x0) close(0x3) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0), 0x31}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xfff, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x2009, 0x2}, 0x3a) bind$bt_sco(r4, &(0x7f0000000400), 0x8) listen(r4, 0x0) shutdown(r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r3, &(0x7f0000017480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/70, 0x46}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000027a90a6800004080000008007000100637400001c00028008000240000000070800014000000009050003000100000009000100730073797a3200000000140000001100010000000000000000000000000a00"/128], 0x80}}, 0x4008000) 26.88837599s ago: executing program 1 (id=709): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001500000000000000", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5}, @info_request={0x3}}}}}, 0x0) close(0x3) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0), 0x31}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xfff, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x2009, 0x2}, 0x3a) bind$bt_sco(r4, &(0x7f0000000400), 0x8) listen(r4, 0x0) shutdown(r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r3, &(0x7f0000017480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/70, 0x46}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000027a90a6800004080000008007000100637400001c00028008000240000000070800014000000009050003000100000009000100730073797a3200000000140000001100010000000000000000000000000a00"/128], 0x80}}, 0x4008000) 20.557054486s ago: executing program 3 (id=1098): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="0e", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400), &(0x7f00000004c0)=0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x8, 0x0, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 20.481005508s ago: executing program 3 (id=1100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000000}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @dev}, &(0x7f0000000540)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="2865c2e64258597f6fc82a4c6b3ee499275b21409f260296a9760ebf8cb793cf96b2a3e3513c79bdb94bea690c9541721f5d43abc7041093958980863578", 0x3e}, {&(0x7f0000000240)="347f3c074099087db9a3880a4c26249a67af27f6f79ad1284b955b0147b7877e7d31978a72fba2e384ce648e1b16fff7b4a1ff53ee0a07b167ad480e1bff648b7bc0dab19b129fb5ce16fe6b4e05bf2ae47785e5ea12dd2e2e6c66", 0x5b}, {&(0x7f0000000640)="887760bb3bda0c39898eb7d3d9b431ab45766cbf4df2b1f972d0600d0d9ced1584d6ea4ca30859617b0fdbb32e91ee3314818d39a7182d13eaa38ba6479174dd9aaa1bca99c7b6e18f3c1f34e41e351e1f8cf83840531444d2e19ece2d6cd0edb31df726b81a6431a402d99e3f6c79376bf6564663d90d85ec8d9e78fbb5777ba241a5c53d0feb74cf5b594fa1d8a320c234a723e94907c8fb7c1beed2cc2c06d7a15db54365fe3cfc107236cba6fabd71cf5e4dd975c85b5d501ad8cf81fcbe0a879602c4c496b7472ae6efdee1b7a2582ba89fc4c18daf189a7e9d6648887578e016", 0xe3}, {&(0x7f0000000740)="5543fa6bb66a6fd6718a4d64d30cae6c3272be6fd5d221dca9d6af32612f6bf0513355cf37a1703846b660d7a254029e31bf07507c7ed75bf9697535282a06f2c8fac05722e9b58632634c297f964622b215ad9e8b97fa1acde72d0f661a14b7968b19b9ac0503afdb4285ed63b9caf8858be342549e458e743357055ab4471265f926b91a414ff2c1cd876816f767f55227d60cf0784a9de271f5cc0f53f3e80047070d8e5843d74f8f1e71bd4ffe251e93579aec9d758a58c0d6885f802b36ffdeddc8fc50c9ea23f6c2e551989bb0aa9c20c3e50e2be5de39e6d792449031ce48cb267b67430e6596e666a8d6a2eb", 0xf0}, {&(0x7f00000002c0)="bd39a67c967586380bce8cf1003b4a696384e7aafc8afa94d624c22b4401e8d984ec3da0e7c1e3e682e40f13ee063bf077135ddc6e02ce7116e28925638a225ca06492a2b8f0ce35de0939df749ad4a28b1ee00cf371f9612ad6277ef5fdd0ab28", 0x61}], 0x5, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xe, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}, @local, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100, @private=0xa010102]}, @noop, @ssrr={0x89, 0x13, 0xfb, [@rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @generic={0x44, 0x8, '0C?HRW'}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x2b, 0xf, [@private=0xa010100, @remote, @broadcast, @rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0xff, [@loopback, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010102]}, @noop, @generic={0x94, 0x5, "195e1e"}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xb8, [@private=0xa010100, @local]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x26, 0x2, [{0x1, 0x4, "f159"}, {0x5, 0xb, "a135ecff6f3c92e796"}, {0x5, 0xe, "5309620da6bea232509c2695"}, {0x2, 0x3, 'l'}]}, @cipso={0x86, 0x6, 0x1}, @noop, @ssrr={0x89, 0xf, 0x77, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x1c8}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000020000002c0004802800018007000100637400001c0002800800024000000007080001400000000205000300010000000900010073797a30000000000900cb914425e9801db6020073797a3200000000140000001100010000000000"], 0x80}}, 0x0) 20.253128677s ago: executing program 3 (id=1101): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xeb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x32}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x4, 0x6}, {0xfffffffffffff461, 0x0, 0x0, 0x10000}, {0x0, 0x2}, 0x70bd2d, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[], 0x34c}}, 0x0) listen(r0, 0x8) unshare(0x20000400) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="eead6730a0d049c9fe8b2c9769ba45cf14000000", @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x4) ioctl$TUNSETOFFLOAD(r3, 0x8008743f, 0xf0ff1f00000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0xfdef) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb012018000000000000000c0000000c00fc9e0300000001000000000000848cc947980605000000006110"], &(0x7f0000000f40)=""/4089, 0x27, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) 18.428545056s ago: executing program 3 (id=1107): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r3 = accept(r1, &(0x7f0000000340)=@ethernet={0x0, @link_local}, &(0x7f00000003c0)=0x80) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000400)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x66, 0x66, 0x3, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x1, 0x7}, @fwd={0xb}, @fwd={0x2}, @datasec={0xe, 0x1, 0x0, 0xf, 0x2, [{0x5, 0xee, 0x2}], "559e"}, @union={0x3, 0x1, 0x0, 0x5, 0x0, 0x10, [{0x9, 0x3, 0xdf}]}, @fwd={0x1}]}, {0x0, [0x61]}}, &(0x7f0000000040), 0x83, 0x0, 0x0, 0x4, 0x0, @void, @value}, 0x28) socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x40, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6164b5bd042871a5d9d24aca47f58f82112d4b7586edb64db427495726897a29c212314243ec4025ed5eaebf8059b584218a1cf32d144ccbd3febc4053514444cf6cca988cf15de35ec1b9f3fdf3ad1e68bb0c0f295d200e163daf1c10159de4bc198db8d8e355ea8c81e4c4b9d3d13d7eac325f8499a9eda4c7e44c17", @ANYRES16=r13, @ANYBLOB="030328bd7000ffffffff0a00000005000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000500)='signal_generate\x00', r11}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmmsg$inet6(r7, &(0x7f0000002340)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@dstopts={{0x28, 0x29, 0x3b, {0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x8, {0x2, 0x0, 0x8, 0x6}}]}}}], 0x28}}], 0x1, 0x800) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f47aa4bcb797e91c8947387ad482", 0x17}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r14, 0x201, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x8014) 18.241258118s ago: executing program 3 (id=1110): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x4000084) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x337e}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040091}, 0x2200c801) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={r8, r9, r10}, 0xc) r11 = socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b00)={0x0, 0x0}, &(0x7f0000001b40)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001b80)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000001c80)=0xe8) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r14, 0x8914, &(0x7f0000000000)={'veth0_macvtap\x00', 0x100}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r17 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000000", @ANYRES32=r17, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000340)={r17, 0x0, r18}, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002140)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="8b3f689216d998571c3270a334450f51664011d0e4fc1538f5546d139b49e1ef8efbb2066804b5b5496a26ea9d9d7a1a121982f981cc3fdc1ad78fc476c03db514291683df0a162a634240b3c36d91ca0f01abc27ecf13c3a85bfcf3bb06eab8b273e483d79748efe5aef5bd97f815c3be1a6b7d3050f1d82688a195e9f794f26df6524e82f0e56f10182dc58f9537bb36b569d20e23892243b7e9bd2a04936524c392b11e0e5b38a8c57a9d8003a697cdd6b8b8edb17bc59e83499bb766f91ccb7bb6dcac2b6093cb980ebb68fbd1d84bab", 0xd2}], 0x1, &(0x7f00000004c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r1, 0xffffffffffffffff]}}], 0x20, 0x20044800}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000580)="eb9e2c20f0ccf0", 0x7}], 0x1, 0x0, 0x0, 0x24040000}}, {{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000680)="a6e9e200793b583563121eef22308f94ddc1591e59598a5931f81a54961fa1b23192713cc40b8f19aed15519136df927c28446309969e16a1ddf46", 0x3b}, {&(0x7f0000001800)="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", 0x171}, {&(0x7f00000007c0)="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", 0x1000}], 0x3, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r3, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01, r10}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r11, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r12, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, r13, r18}}}], 0x120, 0x40}}, {{&(0x7f0000001e00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001e80), 0x0, 0x0, 0x0, 0x4004000}}, {{&(0x7f0000001ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001f40)="fd35678852a7442fc05085fe38e01534e2f150fa88e415a46398e84560880e1ac49a78ec416ad967d24728fe87641270e41ca375bdf5affac08f8344d811fa9e76232e608834048460fcb53f4615f81d033d10d421cfaebd9c6fb2b2a73122395f6ca65279d6f0f9cd04aa783eb94d2cdddac3038c00b3359b08b80931de1db1ba8f065e856a1232301d422500d88334c78a6e59924cf42c6575444fdf24d9516be668213e26fd1b166cf41de48c71dfbb5adab8f034ebd01805fdece82af0d0150fad3a424cd68ce614bd19ab7823895e4b", 0xd2}, {&(0x7f0000002040)="77629eb6f30eaf014bfec12fb7238a9d37709c36d25c5157be191ccae8d0c3ea5fd0f81bc062a9fd619518a8ceef74e058f8092aa3087edba8d80a1f0d219acb3a9671d4c03f70c77186d049d5edfd1850060a51b97f3766621f3a1edbf4710b48a0c0eb73dfa16cc30b766e5db6ffe09311865f9860f0cdb9cd6cb9908f9293c117547e6f5fd2cd95de6a006bf5b2ac4b0358", 0x93}], 0x2, 0x0, 0x0, 0x8001}}], 0x5, 0x801) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) 17.921270437s ago: executing program 1 (id=709): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001500000000000000", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5}, @info_request={0x3}}}}}, 0x0) close(0x3) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0), 0x31}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xfff, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x2009, 0x2}, 0x3a) bind$bt_sco(r4, &(0x7f0000000400), 0x8) listen(r4, 0x0) shutdown(r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r3, &(0x7f0000017480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/70, 0x46}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000027a90a6800004080000008007000100637400001c00028008000240000000070800014000000009050003000100000009000100730073797a3200000000140000001100010000000000000000000000000a00"/128], 0x80}}, 0x4008000) 17.37818028s ago: executing program 32 (id=709): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001500000000000000", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5}, @info_request={0x3}}}}}, 0x0) close(0x3) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0), 0x31}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xfff, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x2009, 0x2}, 0x3a) bind$bt_sco(r4, &(0x7f0000000400), 0x8) listen(r4, 0x0) shutdown(r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r3, &(0x7f0000017480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/70, 0x46}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000027a90a6800004080000008007000100637400001c00028008000240000000070800014000000009050003000100000009000100730073797a3200000000140000001100010000000000000000000000000a00"/128], 0x80}}, 0x4008000) 17.336122051s ago: executing program 3 (id=1117): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f00000001c0)) (fail_nth: 5) 17.287455122s ago: executing program 33 (id=1117): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f00000001c0)) (fail_nth: 5) 4.499904459s ago: executing program 4 (id=1189): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000400)={r0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x802, 0x1, 0x8, 'syz1\x00'}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0xb}}}, 0x24}}, 0x2000c001) 4.405612641s ago: executing program 4 (id=1190): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a34000000090a000000000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000140000001100010000000000000000000084000af4178f2d3c6eca49e175a366f1"], 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xb3, 0x7, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8, 0x7800, 0x9, 0x4}}) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0x1}}}, 0x24}}, 0x4014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6, 0x1, 0xff}, 0xfffffffffffffdf9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x210, 0x940c, 0x3002, 0x0, 0x2c0, 0x210, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xc58, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1a63e6ec18a68492c88e2bc7fdd1200000000007010400"/32], 0x20}, 0x1, 0x0, 0x0, 0x48d4}, 0x8d4) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="20000000f3ffffff00080b00"/26], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x240048c4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x524, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8c94, 0x43}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x4e9, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_b, @from_mac=@device_b, {0xa, 0x42b}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x880, 0x2, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xb1, "8e73942b5da788d1ed0f9461670a8c12d8eb46a2b4883790a2413cc63dad18b409df84adef5b4974f91abce184581ad9c7e5b45564836f802452fcd04f793f72b27b7e781975e50ff1dc1862693ce76144076aad05f27cdccc18eeaea0f580fd3f7668ca067d7bfca7f2fa1f63e51d3c32915548cae4cc705e99d7513ab9bf0de4f5d644f9274850e6354a2ac1184b5781bc9d2450aabaeab2935e05793428c227c9034bf9525bfeb9e93ec2f4ac02cb0c"}, {0xdd, 0xf1, "32909803fda5766347fbd8c9f312c44654b525147cfd0cfec45add335c04b15bd4521a6bff170b182fa946f21d526aa990e9c1c7efcaa2e0be9931652378a2db81449771564b601d163c3e4281d559bae4578bdb40da7c2f4b18643ec07b41ea76104cd7c077b7de6b737b3c77041c40b298725b298685bcd4a1443e1c32034efb7eceb3e34291c0b74605c3a1e1fff81d6403d11712e9a096332e9455321b91f4c18bfecdf78ee949e37679a4d01b93f6929cc44b4fe2215506ddb2d55d49a516de9618fbb969592aee07875719fb95c3ff34231bf84c0479531d1852bca75773ba6d8330082961baef54b922cb9d12c7"}, {0xdd, 0xfa, "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"}, {0xdd, 0x92, "58c95e5f486a929ea25099c18d78a20444946755fce9f9537f6e7474590f0ea6c982a67554a191e5cd1c1cdda62dbe0b6b0a1bbe0e4eae9ad05342f1e94d54982febc86c9a3ea94954f1a278caea3f3d09415881538aa5e72b61e5d34a277f6e710a8ae3e51e2409c6c855eaed61041b13044712b6359a910e23dcf873a8831eb3e2d550fc7eb7a3c5a6e259f58eb42ab8b3"}, {0xdd, 0xdb, "0147d79141d6e6a0c3b956fea074a53df1637507b547ca7ffbc7f38dd9f2f14af9d45ca28a515aea9489349e86ad09d29a083896d6833848d4d488845553f0c440c5696f126d53802c25688e8a4dc58b44eac113acd61996a806b7cf1336d2c3775134b70969b06b048dc41c05976a5fb75fcfac4d1b03af62298158579756ed32b476151bf569dc206f35a008dfb7371e3fff303143d1bdff26ed3ce17d5fdfadcb80ec547336d93bf1be3f8f25130a12c701b8e9a5fe9841c10f05b21bd095fcf9989e0d136d16ddb2f6d9455093d9b088161c29522adc737505"}, {0xdd, 0xa2, "0b12e5ce03f312193bde15009dd8373b44859646dfef0a36e554e48f1e00ea32ea392e8750c482d4a94889dd0bcfa6a89fc37804e5959b88b26dbbdac527f947d1d599b460be7a3cf39c0a76c73df918c443e0302e458839b38a5321568df1762dfb1a827cbfea1ab61820721ca2030f3b08f38b14220348877ced69fded68255e6a66193ae56688f65f449e6e5274fe1290e3db9a043d9a4255481737304a5b0228"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x524}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3}}, 0x14}}, 0xd4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001f0001000000000000000000050100800c000100"], 0x114}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000040), 0x100000000000026a, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) nanosleep(&(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)) 3.912254969s ago: executing program 4 (id=1194): unshare(0x400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe1a, 0x4, {{{0x0, 0x0, 0x9}, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r6, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x10, 0x7800, 0x231, 0xb9, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x65, 0x0, 0x3e, 0x2f, 0x0, @multicast2, @private=0xa010102, {[@generic={0x88, 0x3, '\a'}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r11, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x2, 0x4, 0x4, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xffff, 0x9}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x100, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000000}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffffc}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x40050) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd012000002"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffffac1414bb00000000000000000a", @ANYRES32=0x0], 0xb8}}, 0x0) r13 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r13, 0x8004b706, 0x0) 3.740349082s ago: executing program 4 (id=1198): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa080045000014000014000002907800000000e00000011100907800000000"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001b0001000000000000000000e00000010000000000000000000000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001500011b00000800000000000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x31) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20000804) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x30, r5, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0xb, 0x2a, [@random, @channel_switch={0x25, 0x3, {0x0, 0x28, 0x20}}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}]}, 0x30}}, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x7c, r5, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xdd}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x1040) sendmmsg(r3, &(0x7f0000001800)=[{{&(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000c00)="dc007651d3b65c2968c42636a9858b5f78b2b090bf4ee66c9380e419aa842d7d9ba7c13e12fe3170c4712fbe68b475a280f12151191726e04eb0fb8db20194b38d3b71d8d1b3d2a274e27fb0679e8bed8fde19c547c7688653c6e8282a4706787ff6ad54942dd8673d4d572a59e33ccb75d6bd501d87b2cdbf60bcd00d024772af64c388f6ae558273b21b0636813f2c643b9cd160dccd13d3cbc87c", 0x9c}, {&(0x7f0000000dc0)="046a8ab402b492293138b7ccc26fcbf8e31f7a92d0463fac80de35c15dc2a0bcf2dbec565a427b1617bdb010e3997e338cf17dda93f4069f20a7e03b3fd91b84f8db5e192528ab1fb6dd8ae124e34b7c0b13087e8b2f26e3797e50f82860c7663517a959f43111f020544e5a05605a1e2b834693ac6e0736ff924c37855be5aed1d298b4a002c06057fb34e09e0d1d6ff02d0e43a9aec0f62229d5dc316adf023abc6a23f3082686bcb30f4034d589ddb79314e674b550b5fb9787850d3bf4ce8ccb5b84e120f138a1ce0e12257e37ea27d757ddccab88e3911a47b47e0b7df1b48b5be3cd", 0xe5}], 0x2, &(0x7f0000003c40)=[{0xd8, 0x0, 0x5, "eb7857e538e7ed28caaf95855bc923980b9c5acc6096db751c40b7f2cc4573b00c9a913252682c16d569603adc084d2151d630111fc202c0d2a0aa7194ef5d12ddd321f6ad83a95bf5462aa53d2ba0a4be34e31e1a261b4da21a380c55d43bfb120e078622b6e723d4c84dc2bfca80eee5435248ff53e64b4c35556d78caf57ae27f4f388b91fae352076f9b999e25a1db2f8de9247a060656a7951a64bdd0358d28cd4e606912db1442d0d222b26cda09715567252ae5aa6e999484633365fcdabe893066"}, {0x1010, 0x101, 0x93a, "c0bebd2f92c653463e7beb442f075dcc22b227bdaaabb585cf9996efcadcf9a80349061d32801f72a6acacfde4ca8af453251f4ef56552e32033d7408af168605bd795a08578155a8eaf4ba3918b1f5f6242f58bdee1ee9b37644760724c1849e8e95cac4b68e24a3f1d8af990ffef1036ece12dc4493281046efa8b9eb39551853dfce404e9885982c6769e076db791ffab9b0b3508520ca5ed0f0967642d4bc5d4499281e007f343e09305092d6ec37813a6c1f3a33d2722acc8ba450b91a02f5f1c240f2d7044854a2e8da4c4c28310c929fd958bfe3106ae408d68efec6ab3af7244b58ee6284b4f5e51d8505487c14e8f85f24bdf8643ee799444561d2e0ce436c6fe403aa9004ab6d4c160110d6af8431814419826dff21bee048f5e5800025135db199ce294134344b0c0ff237ee07b71fc35bbdcdcc9a0b5246a873d039459f5d8d21ce5f806a88c9140ed00e7e1e5d1945404e1b513906b95c92ced6d756873c3c808c5f31531f2e956de32919d6768293d1c6da623ea2ea435a219a2d3e0b3cc1b2ef581744519518a2bed36be25ea0ccf981ddfde9099371209115e60427680524809ff723283ba74ffbf7d183c75a8564a672d20e8e0275a039ed497d5a881c543e899b79c25cd22deb396dde2c68005749ae9c275cf3263f8a5a12af0444b38a6373e5b837b887bfef3f1d6655a67895734eb0a19de3fbd93a6cfc0a176d13e8135f4bbb86f0f27d56c67977530aa5147aa449ae9dc769c909ff78f724a1f6ae92d4043b0ec2391b82ca6616c6310f05c6db4b6c5b01eb932558aa30a601b6ace4f613ffd06b1fe29106e69387b04ff8dd4f05ec0d39e0c5fadbfa5107898e89b435da157c072f2964fa09532131f784ed85f8904fbcfe3fee17b98ba9ae849afc21a5320cff92f29f63fc221d6191efe4e2958b4d00bb9ea87c5cc5eaa62222927cd2a81212556726c5454eb20576fee806e46d2a5cfd2bde7a8dac488dd8ba18985b71a79e0166b3a8bb6c49af2b447485693433ad8637364f193c2e7af085ef66160617c3de9f5f7503c35254c9d454c244d65eae0b6c6c4c73a68e63b6e7c9b147e10230bae810cba758295190e66a4e2bc76fd7aa0c705cb83bc855d1a95ccf473278da0381fa068208c07d61d9cefdc80d018dc0ffc6cdb19a522f1f719a7bd12089e007240f4a31929fdacfbf1123ddbd4415cce2c35f4a53037bb3fa88e1ea6338134b019caa503bd24b9300e7a36798f5c50d14b9751f1ca0d2cbc5ae2eca2ceb4bcce067dc1f709b6cfa3268c8cba08443a806d2d8b99b7faa93604f755d1e54610f8b9d268aa9df3ff6704df3a5e9516eb5243dfe1bdc8aee86035e1959f38bcfbad044f851042eec6faf847ac70e6beaf82300e0d6c6991b620a9c8bc9bad94c50450aa22167dcfb648263dd4f2fa988f47fb535793b2b67795a744be56d11f5edf7544dc04af113d85d6a9bbfc5f387e0f4d55a38f1d035a5df7ff5c7ee2442059545de3ae493d8ad1b57e8f6a4259f199ddc1cb5865d7407c55db4a60fc5994db03ed4241740dab492b04b2d7f1475c941910b54590fa3c2d31e5cef64ae368323a94cd6ad5db8803e9ed280882aa1ec44f1059184ddd8fa25e4fbee666b3ee09fef1f8be54dbfe892a0f98b152ed6def239020cc5725219ef387cb89c1b9436391dc97c314bbf9360af45515a4845270a67977792235db9aab6180911e080982a1e47514d0e7273738946b9a9b079ffa8f80e73faa2a3875bd139acd3fdfeed8796fd02f4283b0b56fd221716cb94eaf8c157681c1e0f2e06ff367561420ee01b34fa743b30a266516158a91fba0f11cc71d1ea18d8c9cde0f5b61d5763f4fe949d80b682a0fb7a2a54d939fb9baa794bd45f1a595f945e9c716dff0e77f43e6912efd017eb17585c87929af4adc105a9fcb27aa28af7c28e43f82c2fafcf6dda0d38637daaa08a2d213a145f3c4842f3706188aef33f61dd0de60509623e23e65b730e62024fb2c913ad08fff42c3ea75d90b9ee046d31730e721a0505360aee3c7aa49ca032012b03162a0cb1e886f998681c7fad0faa2c4299b8997d9346c3a4c7c359ddc65e914e1db10ee6fd95419f3d54022fda4811924363a4e57d6a6775177f0f67ace5e0149cea3127a5f5b0604098729ebbab4acc4a406b77db10782f4c01374c047f6c0a951fd6cff7232e1950c6ff29c6a5b47abb5c34ef74ef56b4c2d609053879526bccb479425c17ff7574575f9e030616b61e941337ebff83ee05c6e754c416b269c08d98876c63e39e8c1b0b8f5471cca87cffacfa9bc859e7ccfd6bc653452d2a03ce1fa780c43334463a33a3507ffa22e918389131dd98d1bb462c77a04ab9c5f48a3a987bcc0ff311096be60a05007dc9acce9931ec6d8b81a7fab8c90ff1be2be13e8ace779be980c3b43063151f87f27ac833350c30467f056a283d4e490ed311e33b59e847c9464ca122d7ec338d3c841c3dc78d74612b12a1b2086ce91b2d68927bc47f937971ece151818c2e6cdd38f5d55def0389dc81d432322c4a902da498a0aed5881f96de2494f5af258413b70057681131656aadd5719d3a3efb34550cbeef1dd76528cd88bc9c944a8c1890b2682fe3aefc88787f9a9969f338cd355fa812e4b0db4611d4e672db05e8ef21cf977787a8ee12c75bade5b5d325518cb9bc0c583a3bd1d5d63584444ad3475b2214a62551c3fad8eb3f2d8ac4d36cd4a3e31a8db1e7fc04a5b0d63ccc17b502f22ed6d4deffd328e4833e669c9318ce5a9f9eebd910063432f27b5743e9da5b90fdf8a884c44cfe7e54ca9036499c41b71086388c91cf2e08998a0a4c2f13dc74115f3033cad7a84ee0d5910fe0962c88487c7eeb151b09271ef37b6b5b35327dc876b2ac1e2e0e8d2362bc9f3496d9eade5c57877b965c3ee3ec6e7ee448b7122bf7628a5fd2e0bbeaf396fd433512adfdeca9b07ec96ccdafb9becc726ed94a8a194682eed4383525928ca8e77649c8686de043ff850b173b35e4264d8938ad2ac89b040cdc8d6dd965eed5ab08c5f1c6ca959109b511e112439a309e81867c2e9b631d0d11daeb0ebee6b00787b0ad7e2c95aad61b4a76fe453430e377701c8fe29e6bb7bed36969d788a69ca55d8a6e92ba736b1aeea848f50b0f1992b5b8f657e8d3961d61fa9647988147b7fa0321c22bdcdafe80a1dec4c4b32f51d4d2f8fe1f1a37e7eb95a8e443c040b94e74efed6f2344c4338e58f5d61ed99d54c5ba24ea0a6ccd15b1e01ee529974c63bd4c4002ac2ce1d24ee038723481bf5f1d2fea9cae067100846c22256d41f62be26c044f3bc09c741393d7272439d75150758b611adb816b2ed60c92c9f9eaf1551ef9bcb004cbc589b6b1b0e986206c1f2647616a2071693d4967807443e211e94c0050aa9aeb011263889b62e962091d59e80bfb0ba78a838e4c729574f38e355b3c62c845ca9a878792f972c8984a28dd51db92234e9ae51058387d0e18d7283f74a379a1d983c9dc44ed7185be64f501e63ba88622668c9dfed82060a64c61c55e8214a57be3a78eda827bc8a2ea0ea94713ffc7a3d9cfcf599998200405c7ed76a007064c8dac6be5b05b8543ab7d4bc4bc6f067da8b6ccbf82792797f7e454a5fe0a0090f0083d4762df03f2ed51b5e4c4d6e92b502709807ecbd0c3767fa368672e6d2489aa1e667e44711e7a4d419c480a1368eb54e924d717ba665f99cce4767635e4b87a124167fdff2c58c9cbc1a5caee1348e8ec7350f570501b4a7b7ddeed007ca05d19a7d664ccfaf43de0be8aa08d8ba6fc05fa85eea80c00070a03987ab468752a4d3d18f5045e3e185e91cf51ac7e0fc02a044be0e91260a286cda5cb272e55d61af47e75f636c5f1f0da78a0562f376d3fbb2a888a4ba02bcf9787355da81378d0283f76b1e7126afd286b9f267066e256659a8a038950683b4ee1fa1b122ac815038a8d1fa01095ba8bd267b5e9a5e773f48c4cf0e2de1a0006382779e525e1bbc7ceac0bdd50ee4c3d799417728b865fc5c8aa870df60f13e1c19fd579cd2efbce339e2db5a66f7dc2729f0658ca328e5236bf0dbf936a2aa0cf8cce46f7444acf43a0b50f2c19ceb6fed3335ba6a889077b0f4a52e99509de6dc2acb05239216ea7d2b4df7d3b25081bd55e00f10c8f4f05186ae8dd50322fea4b3cf19f3ac33d2ebfb5f95c75826b1e740c1f974b26e00702e005a35d120b51d41d61f7b681eafdc201453186f9f827c64c906baf3dab78c258181012024175139b5741aaf5db2e03ea8368fa13cb8282dcd83b91c552cda46a302c6da76ff0a159c107ee855fe863224da22dca16d11548a6073b204d8098a5e6c8400a5df5844149b3723c517611fb65e7d0003baece49e071b3e093f83f42484f163cce522f000b1a1a60d241815d711c9f4637d19943bf499c78956663a2238d93e61dd978eb93f536184ebdcc02b92cdf3ed71fc60a770db403dd386b48acf370bfccb0ff742363d3efebd68ef227b49f89cea556fe0ce76bb9a03a78a62b5f10938c3688f9e7ab1f730d938636d5261efc8a29fdb42846885faa54d92605932959f8e15468b499a99c9eddf62f48cf7f1eb7d63fe7665ae429d2e07e221c9fbd04c8d52842eced7557040035bd5c4600c08ce1f29f325347957bb9c61fea8a630dac4646fb520278cede57c202a8588b0f76b19d2f599121e2c130c17582e028eb6fe208339e8c223f9ec386cf6be8c92a830e4ba378a6f33d56e9f06dab91a7678770fc766d6941dc100aaa1654b34c4ea85d88af66fd708ffb5c450aadd947ee3831ecab6e875ea003228603b2b9381fb8859f62817b792aa49baebee0c33cd566fe99bb2058c97bd2794448998b3fbe3950c861ffb9b3a9b8966d8ce836d8714b6e8ad0bb2be339fd4e583e5c9acce3162b4ce1c41a3961a9cc9135da4f50cfcc06f844ab7c9147a34b09e8422f51d058dc14a00f5d22a117ae285908ddc95d8c8a82f049af8c52d1a5954daf57b4b5109e333943f97cb45c2c6b2e9aac8820bad82ef43e6d1684b43b7fcf6c501cde2c205266829d3958c5d137c7b5f56a96514adf0f1710131ce0933216a709ea2113362e989f4db9cda8512b9eef8deb0aaf9699a2e523acce5b5ac483c6a5a572fa0a5dd4a1ff2ea499c464ea42c26abc3f59b759a75572d0685e7e82bcdba36ebf4d7a92a299a7ac209bc86cdc02c396153cc6d91603a7caa0b6971496b0c3787435487a2cd4495d6401bb9c97afc80e106860c38c1a1a85eb39f3dea9878d1052d4a23a2a47a478a050e07bbbe070eabc9f16d0e6fa32782f75cf4a62a97e27ef82116f526f706e800e93a6ebc2df1e8148404803d33d1e879690500da8679802e3788fd7a5592c8d5a5bc0accfeb40fba9981ad4536c7a57e2634054b9a9024ab88c474ab6ccc0d99d51855295ba15bf708906f03c39d836cbf070872514226c9122356a0b49e5fd5ec55ea6540ea2f64b790b861494cdcdee1e77e4e04e67eca235dbf63cb91888217abf1e39a351c930f5afe71acdfd0c6bd70d32ddc1d16ddc7910ead938440129d40172e5c71340b781191ed4c9367fb76b3445952d469450e04f800930fea4912432a64e285ae970aba5e37eb069581e18104fd3fe606ba907c7c10c9a15e22044a1b7f165b5424f8000b178e7a79b26649334e40029604bf1985c5024d703de24a00d9f8ee526794d31c81bdb42e7c4572d321b71186f59aa4001c77ce5b4e5238886e629a3068dc423a"}, {0xc8, 0x112, 0xe48, "c250dc50636e9283d9fa589651942fd37b3dc0e700be375a3a4a46602f1d420886422ed41766f15095e5072a0acef817bd4e66e2b9b92ac64a66b192f412974bcf4f2d8f0ea391cb9247d0109300b9664491cb17d53f7e0d71f2b07cf721b97884d107393de34238d02ad64132c4ceb9030fdf628e743408b0b5d06da496f502056d89271979b465ab2209fccdd3e03c5632cd79c597914ead85bc1125537555da512135a2dccf86ad2ba802dba22f2bf2d33dcf"}, {0xb8, 0x107, 0x40, "9251843638330a6087a15662715179c041ac59d9ae2bb60d118032a7ef36a1601694f44a350eedcfa299170d02d365a1c5d582fa8c3dd1003f67c87a8b7ee7b50338fb74b613498cc445f90831972566785e48c06238ae70ddd68f73aa25f97344a9e7e9f8a516673c2f75b422c346ba13164e816bf22b1b5f87594156f69113e02fb75e753492491bc14d8e9445910516d20d35d896162cd8f5bb1cc52d12b15dd9b1ab57"}, {0x80, 0x103, 0xc, "8aa5fdeb4baa226cfd0b45e82459b8ad3e377ac91e6ef1a0ffd25c27ad644eb96606fb6133b3b00988c6f031a0a022c455fcdc43823247bad8a535ae73c68630f1fb604da2b38949bfe0a2333dd986587ee2c486225e7447e90ec93d5f107639f94cfae97d8c5c34f1e764676a510d"}, {0xd0, 0x10b, 0x6, "183c614d6d8d66ac15d6cb3a0b2cb5a853a88a7ee32f4223f88745a7bce85c948bc07b969676307dea61bee962898f5b4ab822b65c27b3e99b2a0a6312a65f303d2347c7a6b72772262c5ccbc7ce79c325105822dfbd896e64a1baf3608db68ff0358491b23f0847dd10e9faeb2c793285d64457956d567a419fb9b1916fc32a8aebf0416bd2985e97e805911f7e2ec429b708376ba91c87f0974e8130b24c76cb035ca673c09a66f7614014852083941269a8f6fc91ddc80997c6f47b84c1"}], 0x13b8}}, {{&(0x7f0000000cc0)=@x25, 0x80, &(0x7f0000000780)=[{&(0x7f0000000ec0)="eab475e2c4b1f95ead3244cebf6ed53e981dcd8acb7b83ae5b374cb8e8e6f216cc37d82ee2eb7f03cc42cc999e53730160959f965902c5c7a1bd9c1e8695c487baca5e4caab8138d913c9e8fc20988e55d7865b42e904a82d37c5221fe696a03b85d7d71eaadc059e4a53c28c8b4b32394c84aea2ae6bebc099b77", 0x7b}], 0x1, &(0x7f0000000f40)}}, {{&(0x7f00000013c0)=@ethernet={0x1, @link_local}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001440)="0145ae11dfbb272df402b924fbd1d66571a3920820c33418c4984bb4a7918a4353ba3017a8008e28d5ebb766d4e5c6eed235d1630ad008c1832a4556396435ea41402645ec7c48ce9938699227092832474b20984669a9fabb6712c3921f96b25637d80849369e7f8e2611a77d830306a8aa636f45", 0x75}, {&(0x7f0000005000)="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", 0x1000}, {&(0x7f00000014c0)="d5bd5136b3c37e06759e7e8503ccbe2483699ec6a1550ae2e42b197790aef4f65c3e23eaa4c56a7390a1208031e366b90ab02cd052a0f7e054a3d4581cb0c18c27b532739a874c84c79bf4a74d1f2256dde1e9462fc4f8515af4f615656605c7d275e979f40575808b27df17d6151f9967f5d596c0ffef2177d4114788d734fda109c76bbb440ed570a8eebb715c5406a4bdaab1c086e4c0082dd8b926243e9f15e00a65d5ad00c4fec04f4452cce9fa3d1613b58c8a6fc5ea123907c61d41a37ad2b58d00ca4d896e96f280b8", 0xcd}, {&(0x7f0000000f40)="c872f247efceada887563dbafcd31960af9c565166bef115349ce0221f0b", 0x1e}, {&(0x7f00000015c0)="26d1d40121c084e738626238342eda9502c0035c9b93f1f7110f00333be9d235dec4f32e20e8f31b94f0a2eaf4c104fa4a47eee9d228d4ed0616bb116e549bd54237b2856bdfda0be94f237d9b96cd3f4be35b5f744ced9c4ad33aa693f86580be12400603ade0b8483c4cdb6e59bddcb722ed7c8c167c95566e52a039f5aeb00cdf358bad1f71cbb151215fb7d10c39b7d15b07b74bfbac2fe88eb76af4c0b605e28b0af2faee9046ca6b3ed0b33b1e3e4f09ad0696a945e1b00abda3e4626f07a2e7ef9d7f723e61b2a203d49fa8226bddaca3b8eaa6b77c3c00adc5086753497beae18be23acea88ecfee54e83bd7afc9ea", 0xf3}], 0x5}}, {{&(0x7f0000001740)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000006000)="09132aa849863167221795c9533ec837148e6ca7821935b92a92d33367728d6458b2b8c708043d37bf4d064594e5edcb4494126857396ddc8eafa595f737a3af3b48969379ef9a3a858f8872a0eb890965fafdfc65f0bd1161444832d69b9791d9a9c1720725705957776cf55d90c50acf6b053bb1da137dc463a0c0e33b640d3a0a73f194913d45fe5f2241ae00b6bd91852bd6617df1b158c8ed8d5ba6b323680c87d3e41b0251f141447da1d73357111c446d28b3b16d95ac8c7833461e136d9c7117569984b1a959e2fa2f82fec6b39f0ba6568838c3d48ec9993feef32b8f1ea35985046b680a173dc4f16aa653e7364072653881aedacdfbdfdda1a3c713c3353456afba1bdbeaf17a5fe5345e26f30e68be5c3cbef191dc7fdb8d468f545532e77a37a73683771b42c959f3455ef2e4d5ead41c8e5687c0f88d83b49a73cbeb5023530c873d3d4cfbe75ef594c46fe477b698fb9b7379b65947a20c498e4d335f5f9e24ebebf646093633362a82d1bad0723a615a2c8c5631e88cb1adfeeb00f5dd9ccfd582bfade7afcc0e8de2271189ada50091e1d4a159f4346c95979c6f7afade19877f9713d0e9bb1bff1104565b0e8aaffbb7710057bda7dae038ca6480ba03220a2b7164af65b0d2359002f2df6af6d279605966c230bb2f1d377e505cc7b63f09d00d469bf546a63f263c4d8be73c6e6028c01c1f4ffc5ca042777d0bdea30935eaf80b4be88ba73a7158a4e63e14529e7d4af294624f83b4d06554c10ac130db6714fdba2c7e4530360cd26ee727fcb09ed7c1972cabe4d57f2d9a72a5d82805c92d3789e22e72383092418fa46881f6b4b9dce2ecf3b8ffa8ef172dfee8001eb209420a9810d921d7fbf4b57995574e7ebf2aad7bc3978edd3b98c2d5af7220a832d2ea17d557f5411153582e4a785d842754a51e527c4ad579bb8b7948e08521694741447d3dd1909599d46ab7ef7bccc7cae96b804cf4a8d2765e817ee4067324675de883b2a94c3e05165bcd81e76ecb3247eac9bd0d4003f48771a73cd1d9829a14c3e678c1a36255b2dab96897d2bd9ba241a86a0e4bae1031a7ea8e5fa26d3ebdf782546ebc86e5a5bf8f109ee177703f91079e14d6e270fa7fc2c5fbf86045211661153653db0cab494385046a30ad3da81faad44ed9655872538f07c7db9bb301d2ffcc0cc09f00ab268703d2c40d142a86f685fc66c6983e5f835ce1a6343bc82151dff2b757d68a3aa7f2af8f891e98de9f2e760ae26fed21cbdbc69901f4076f09f681c1118297f13dc8a7692a606ecb70cbc02d6176ac3bd2b69bd1233b0313e741b9b9f0712475e353fed8c38ee451c6cc1ec3f5f8728fa3db7212d0001ca2abcfc563a2e999e2d91093c9554fe99930b0944d33e3b22aa303a61bb2e214f956a034528da12c71391da57adb8f482f7c105d12dd4f90f341e72fe58e845d5da87b13a20a1ebb56e646d0a2c4fc65d1638d382107a0a9e29a3b104626d5ef643c2e16c9c2dbf1523c26545e2275dd467f4db5a338d362884d5512b1cba2844f5fd1119b654d95e0b4b8c7e4fbebaf5e73414489cc7ea3b55b71fbde0ff6a0d2c067dea04c05ad91fe01a6d33a968a4bd5224547786298ba160e06ad49b59ddd0ed63a4978c996e9d169b288312e9feb4489231c33b65bbff707f5dff20d8ee003a15e02bd06df2d32876f78b3102fbc139030d1e7ef5a2493965c41e25c9ebd729ec713796e8ecade219a9cc04cc3b431880b5e2577990b03824265b46d25418e72c1e8a5622e2b88282bfbc1d13590432c19efdd07ea0cf75a87ecbc200c86000da5f6e74706806e0daff9cffa05aa51514d8a008c9d9f5d596a3700ac7f177bb0cb3e37636e2ac90907428e109fad717d310a5134822e2315a9ef72e55c550722af0a56128dca201f13ad530d4bee5daa7f21cd0d372340562506a2f26e04cd2fc82a2f8b0eb4543ce86c1da1fe3ee6974a4e9bccc8738cf661ecf550f8a08229fe51f3c1a61dbf813eb4eaf2d547b25db09fa1eb1c26f199454e3b32019eb8514ac31cdfdce2c2c9cb03f31d9484660007249bfb656389132da4b47c31809b054788a8712a01164325e55f7a3b3eece9a8a98266905aa6a5bb9c90c7bbcdaab2491ce0bd69d6d3abeb6dc52238960c4f9f225f529e00e123f94e37c4e41dd1fce50a61017cce60f6324b7aa071d2521fd19aef59d7aa5ce12080f9ec9cb07917b5ef749a6f76aff022c087e945b0c710feff21ea8e112d7024b924a209f64da5cfbfac7da5bc4cc890857ebb14d96664348d59e706cfb14f05a132b06af46a714d8a3f89631d6a10f8e90207c4d1910651d0cad86da8f064830e420c053a6dfd610c298c1e0499e1548461d29777ed37cd36255549f473d2320a576f413418c3f916ec37cbd1deb97d4039eb9174dffcdb1641c0943753bea8dbf994ef54ec44a0542a488c636430e7683b3ec707a2e04dc0eb402c410f1cf06f9afd584a1426322173195061c4592decca30b30056cecf7dd33b7c60dec98add7a54033c376a515c283e7fd187519cac5e6681f7ad02cecdf9bb251064bd3715a7195ee3711a334a097d24b6ccf67de0ccbda0cd388475db670da572f8f255d62dad2bd32289f9a4614f151639596be58a5a334c226695acc6978a9d16d3b54ca58a4215e60b5b1cd5606775dd6148d49c375abc46b7fc4e16dc28c077d448f896821f40825c448833390337b1f7a7111fe1ba76b79f07b241acbb421a42d0c769be289e999d422349b31f6a1486808517a25e9fdf98e4c623245a0b2704bf1f32a7ef5fa4a8270aa24f75e8743b2ac67cf7d2d6ec36923c20f2bb195ac61cdcb933df4a30a0324081925eebc24ed0db616f440aa7c4c6d40c903f41fa09a7691fcbcf6b51a091ec5daf1d3f2aa9cd7efb0fd9693c3f8fed588ea209e5b5f5502890e61dfdf58b763e23bd3c538aa2978fe2574acd19c4b6b099d7ca5b87930ea7878b4b8082a15698d0e4791de45f1bf966433722c2ab58f60050f63a32a8a2aa6f7705490870f6ad4265eb93491f30ec165d9534b7a64a76ac0bc456fde142c138e8d3d4fba770e88553d8b09a95d0e2dc32e750805b6672c24b31a8d6b1ccb329d8071c875eb430e668070baac84f837e978e03ce2a9c0a4f82d1b91928b2368297c8102c23244f8642c41c20edc227f6798065f578f2e310f8654df74a6dd3823240d34d43bcc93ff755faae4a7eaf50aacc81fdd75795cb86d1bef558274aa3a45dcea1dab30bd7611efa7849e154b040af682cb7d3acf2e770fed285c612ea64c5addd93b936e5f2063acc1d308ff09789fd4ab576b76a64cc5843f93d94e82d6c71ff3a37cf00fb9b2489735d3f5a88e1194f0074911530c243a7c1da6ffca27ba2741ed49775d1d748d6df07082c67250718d569b2d352c9a8ca5ec6494bfaceaf6701b0c79a63d7bbd4ddad00610621584ad60e7d8df84bcb0670c37d0daf55704a24bdb588d8848a14bc3b26e775fb6db233244bbb847fdac0f66ddac5937e9a5eeafffc72c45f3202eec4ea903edd7f0c7a39007847b999651984444636fbdda97dac2be647aa5cf409694e8df9eadfdb00846884811198ca76b43dd7ee446ac321200ab5359a573e7a70caa84283f6b367fed766e38922b9977b89440fe4578f37592221da5cac299902bee5c050fc4019b4acf1fe4ccd57a9d6636e3ac82a308b37091556271a291f5badd9f2d43037d446c80f41f6a4cbf393290ec6d982ab3b5d23af545a6c1025bde94966dfba32627763397fb78c3d270897ef49641a938f148d6f0fa6544b61eea9a095c7e8731db1499f65be5f4ee385358bad87a4f9a06ede610715302a226a2ac145d2171ca21abd057f13b732b667ab9decbf03dea9e167b0a617c8faf0e384375bc73640a860ac08361a5c1445affdd36413d8277d63bf5451f8532f35fc60772d877b380ff06e7617ef800dc0bd92279415713e8f306bd18b8dbb601af932d465f113955f2b6f8c87efb47ff1b1f2617153af19d7b784192b00a9107cbe7202c475d9cf821b691a872753f6966c84f125949e3ffde2f3a347f8fb18d558260e3bbcc6028721038fe6141c73516afe5136c1750bebe01e292d3b6eedad474469bd2e06397ee84f0b20532df1d737a74d0e14bc4eeb985d5540b983a96db6f92f7947afd00a467ef23c68ea4e88f6d6d60d07c723abedb1453a8948d3ab22dfbd6dc7d7a46d32830f244abdf1059266cc3de74736f039908fddc7ea9639bf9312c2f4d8d9475bb4ba7a4ee226c1392e7f060b2f37f070fb0fdff1ee3ac1451103f4bd5daf36faf1b7a01cffc4f3b30910cc9dd1a0f6c57946fba2033d49e6a4082202c8a563dbebef50664db2cdf4bfc6530050fe955c9d33ecbaf2a344dc41313ff1602a53d830ccd3c565c294c005a9fea11f577bad01b1c5e41c5d5fe5f97ddc056f9ec3666675b4dfc371cc12301552a580e72291d6382a3e5397e31b1341d42d74dd09c24702b250f50569368b544d15be3e93a1092a67cc7cc7f4961d689e0a55d502988a5ba10d102d80d12433f7a4773a08135cd519579109a936cfc8ab3d3f9c6973fcf33bdf553b66d531a597ef72120291e2d86a905be2afeedbcdacf819a9ad53730f466904119fd1afdc77dd8767edd5cbc460ce9944146adac446ef7e4de93a1061ce3e3fd1bff7d1be8b98b6fe1d145cf8cdd047212e1d754fe2e3b974bab4cbf85ab3d4baa5f48391c826e07186ca8c910718603e95522c1a8d8940f95f4164d34e49ce375241afa6441818dd8e122c82c526f59abef43832317ada2e47ea2419a146f2dc1af20c8e934d43ffce2f37f202703fde6afee79507663ae012921e5d28dfbe4448d57d849484474c958edc73025c6071c4dc3950c927e44059fdbc9152bbc31233788742fc3c4a52b8f63bd1549c25e685a7e05ff0bea6fe5b0ba242ea36cae373a887058a21492a7c889d2a2ea9cd0283aa3eeed49e29f1fb529d022b9882321a573ceae1684705410ba9b3c9ca1372c79800282326ae91ae6cc7082c4a1c223aea41e7cb0e122a3a9b7f4beb1712ebf49fb53e86623d2430a12480438ac24cb395eab2372a1aaaae4a43a8c0444a0e7a38064585a0ff28cc3b8406e0e93f2178c3d13325bdc131695a5144c53c838f7d6444a463a2c74ed87fcacc9fc4ebe84ec80404d0031ad1f4c13120bca5833bc2bffa2e905bf3a6daba1f885850220dd229c43a955764cf3cb0c60b171a8202218a07bd75f5af9a25c65bb038671ef532ca8537f2e87e60ee5bae81756f1823f72df663476cda0eb81f6cf0b0180df1f8b5bc320570a5c9903244cd813dcdadff86e95c33ffff53edc48b4f7a23af36390fff8c0393ddbd93057d04cfa85f76c838bfdaf5363e499ecc664ac0d9f79444ecccf8cd9a61b6a50a41e05fbe53c65809b3ed250aaa7b9d368ebb2a405278c025454d2ef87440b613798e119e6d713b8f6296ab51d4c8fe215a8a12c456e9df2a157d230d08ecfd9800e5d57a2e538c53881822a40aaa6c7abc2083040e42874e22cf3d1aa0e5633477979de6e61905c317e7e88a77d585c0b98bd3905f28304650c25571cc7971664b26a0b88fb860ff4452c4d650c311a1841454e652d443d0304bd58ed23dad514820d72d02dde96afdb7b2cd17c64a137450c7674b331504bc8ab18b6ba93df0116f60f0f678f0e04bc3994050b85baf906cac408216837c0b7ee17a4b94e2ca378dabdb9574127260c8", 0xffc}], 0x1}}], 0x4, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1000000}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x6000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f00000009c0), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x5, [@volatile={0x10, 0x0, 0x0, 0x9, 0x2}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}]}, {0x0, [0x61, 0x61, 0x30]}}, &(0x7f0000000d40)=""/46, 0x59, 0x2e, 0x0, 0x8, 0x0, @void, @value}, 0x28) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="220000005304040026bd"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4048800) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0xe918, r10}, 0x38) socket$inet_tcp(0x2, 0x1, 0x0) 3.537083506s ago: executing program 0 (id=1200): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000182}, 0x4040) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000005", @ANYBLOB="fa0fe66512"], 0x1c}}, 0x0) 3.02104514s ago: executing program 0 (id=1201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)="5cf1", 0x2}], 0x1, 0x0, 0x0, 0x10}, 0x4811) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r6, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r6) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x4000000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r7, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2.793372191s ago: executing program 0 (id=1203): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b402000000000400610148000000000085000000a400000095000000fffd00001a3aca447867c88cfeb5e526"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 2.668080449s ago: executing program 0 (id=1205): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@mcast1, 0x0, 0xe, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x4, 0x0, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (fail_nth: 4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xbb8) 2.340296438s ago: executing program 0 (id=1207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0x6, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) (fail_nth: 10) 2.158456312s ago: executing program 0 (id=1209): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x11, 0x0, &(0x7f0000000100)="219aa38aa8000000000000040000000000", 0x0, 0x40d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff68) socket$isdn(0x22, 0x3, 0x23) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x0, &(0x7f0000000380)="b8000005000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000002d85fcff08000000950000000000000017150800fcffffff18120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000f392c0973d1a730d000000b7000000000000001800000060030000000000004d000000185800000700000000000080589ff57883c33337e683207d00000000009b908000fcffffffbf91000000000000b750eb47af688d8ab50000008c010000b7000062f2a30faac49c6d1e00000000009500000000000000d39eade2ffce680a0e044b4a16703de66662a9958127db95f711343ec18b9aaedaa57ccd8ea7039f22a02b966df028c5207ab8dc8ea316b4c9bf37bef9a6cf3499"], &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f0000001b40)=""/4096, 0x41000, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xa, 0x4, 0xfffffffc}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x1, 0x7, 0xc}, {0x0, 0x1, 0x0, 0xd}, {0x1, 0x1, 0x7, 0x3}, {0x2, 0x4, 0x10, 0xb}, {0x2, 0x2, 0xa, 0x8}, {0x1, 0x1, 0x10, 0x4}, {0x3, 0x2, 0xa, 0x2}, {0x0, 0x3, 0xe, 0x8}, {0x1, 0x4, 0x3}, {0x2, 0x5, 0xf, 0x9}], 0x10, 0x7, @void, @value}, 0x94) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0x3f}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x13, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000040007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x56, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.108952409s ago: executing program 4 (id=1210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x14, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 1.895207944s ago: executing program 4 (id=1212): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000013c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000600)=""/120, 0x78}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1, 0x41}}], 0x48, 0x8041}, 0x0) unshare(0x2c060000) unshare(0x24020400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f00000002c0)={&(0x7f0000000240)=@in, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000100)=""/8, 0x8}], 0x3, &(0x7f0000000500)=""/204, 0xcc}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000040)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100400008ffffff7f000000000000069078640114aafffc4e22a9960f98f38602586774ee7c4e661e6ce41f30fb2c40e1ee99f403a133567be16d1d12427ed2e249baaf09ba852fdde2df93fbdbf0c0d9dcb756a02613998ae4ef43598f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c020000907800001e049940"], 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) connect$unix(r7, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.728999522s ago: executing program 2 (id=1214): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0xff2020d8084f7b76, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xf4, 0x5a, &(0x7f0000000380)="b3c5cf30273419cbd9b94c38628a4a490f1bbc9883eaf0bd011759274444446ea99c680a51c8a45eb3398da1bfd595a3fb261a830bf1b9be865a5fd27d8cf49a1ced48b12d864ec77739cfb1ef7c9afc44d048d2141bd696b43f8db031e1b4cb0bb7bf2f5911b7ac1d8cebae7a67486bfdc447e9e14b33b6f33678563386838f4e82f2f38f31979085f1216b5a6b05276fd35294c85a962a5838007b6f475392e1bd7f394261462062c3735afb5e0e4fc925fddcf22ba3fa303f071a999a914b6aaa054d899a92bf5ea597ee8a68e4e1b63beb7adf200934898be9c138d9a12313a97b49247f91c5058c1fb708baa41d42e8cbef", &(0x7f0000000480)=""/90, 0x0, 0x0, 0xe1, 0x77, &(0x7f0000000500)="3f95f73d3ce0f3fc56369b296b6e2ac811db624368e185f8dc3ff65e74b2c2cb52fbeb2c202ab9381b8e0f1a906e9aa26c9a3e3aae2863c08dbeec424005364fbc33907b05a96de61c4d46003db433c90786aa0561c9abc32f8cf62bf1ced374ea497afc26a9be51b723457ec08d141215cb48669d91c5c2f08952c8b1488a4bee089731f3e89245d08ddefda8b070703fbe8ac145a4e470c3cc2fcb1353b7e5f1d1a14cb6491f03193c393595649833cd2795fd3f6088674511b7941b9ff425ab3cd096dc41d833ed96fe590e5921b24205156b9ee8bf8351332fe0ec15b00137", &(0x7f0000000600)="c040d6b926fb1a11ebb7c02b29b454fc5b6c3d67346da3d6275eaf2c5ebb8b326667d08a3ad556e0b82fb686f4870444e160daa184c638ddf943b10022415b3df0b4eab4fd7268da1186f51cbfc7db4671dbc2431e91b11aa190857db617c7ef483f5167da36947e14dd47d04f060d6204f78d9b50fb1b", 0x5, 0x0, 0xc157}, 0x50) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1, &(0x7f0000000280)=""/228, 0xe4}, 0x1}], 0x1, 0x10100, &(0x7f0000000140)={0x0, 0x989680}) 1.587909931s ago: executing program 2 (id=1215): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000200000000000000000000000000000ff0100000000000000000000000000010000000e000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b00000002000000ac14141a00000000000000000000000000000000040000000500"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300), 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111840000000000180000000000000000000000000000009501000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xbb8) 1.277586342s ago: executing program 2 (id=1216): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, 0x0, 0x4008000) (async) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000000000001e1e95ea9183f56f"], 0x50) (rerun: 32) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="a905000000007464000100000004000000f3053f0b21830cc06434a8b726a5533f209cb2", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x3}}], 0x2, 0x2800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r4, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c00028006000100000000", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0xba01}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) (async) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r8, &(0x7f0000000240), &(0x7f0000000300)=""/249}, 0x20) (async) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r9, 0x0, 0x81, 0x0, &(0x7f0000000500)) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feffe0ff64000200475400f6a13bb10000000800894f4820", 0x1a, 0x0, 0x0, 0x0) 984.943721ms ago: executing program 2 (id=1217): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c010000150001002bbd7000fddbdf25640100fc00000a000000000000000000ac1e01010000000000000000000000004e2200004e2004170000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ca000800c600080000f9be"], 0x11c}}, 0x44080) 909.788547ms ago: executing program 2 (id=1218): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) shutdown(r0, 0x0) 0s ago: executing program 2 (id=1219): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @broadcast}) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r4, 0x801, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x42}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x10, 0xa9, @random="c39fa4fa395da9aad64a63b4"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121404, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x1407, 0x400, 0x70bd27, 0x6, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) close(0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x35, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffc, 0x3, 0xfffffffd, 0x0, 0x4000000, {}, {0x0, 0x0, 0xfffc, 0x0, 0x0, 0x8}, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): 07155][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.724524][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.762498][ T8463] __nla_validate_parse: 4 callbacks suppressed [ 177.762518][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 177.771829][ T8395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.871481][ T8466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.735'. [ 177.891464][ T8395] hsr_slave_0: entered promiscuous mode [ 177.905974][ T8395] hsr_slave_1: entered promiscuous mode [ 177.922576][ T8395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.942017][ T8395] Cannot create hsr debugfs directory [ 178.271907][ T8472] FAULT_INJECTION: forcing a failure. [ 178.271907][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 178.288546][ T8472] CPU: 0 UID: 0 PID: 8472 Comm: syz.2.738 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 178.288575][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 178.288588][ T8472] Call Trace: [ 178.288596][ T8472] [ 178.288605][ T8472] dump_stack_lvl+0x189/0x250 [ 178.288642][ T8472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.288672][ T8472] ? __pfx__printk+0x10/0x10 [ 178.288709][ T8472] should_fail_ex+0x414/0x560 [ 178.288753][ T8472] should_failslab+0xa8/0x100 [ 178.288782][ T8472] __kmalloc_cache_noprof+0x70/0x3d0 [ 178.288808][ T8472] ? sctp_add_bind_addr+0x8c/0x370 [ 178.288840][ T8472] sctp_add_bind_addr+0x8c/0x370 [ 178.288873][ T8472] sctp_copy_local_addr_list+0x30b/0x4e0 [ 178.288904][ T8472] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 178.288931][ T8472] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 178.288961][ T8472] ? sctp_v6_is_any+0x64/0x80 [ 178.288992][ T8472] ? sctp_copy_one_addr+0x93/0x360 [ 178.289024][ T8472] sctp_bind_addr_copy+0xb3/0x3c0 [ 178.289052][ T8472] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 178.289081][ T8472] sctp_connect_new_asoc+0x2e0/0x690 [ 178.289105][ T8472] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 178.289134][ T8472] ? sctp_inet6_send_verify+0x23a/0x300 [ 178.289161][ T8472] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 178.289185][ T8472] __sctp_connect+0x5ba/0xd50 [ 178.289219][ T8472] ? __pfx___sctp_connect+0x10/0x10 [ 178.289243][ T8472] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 178.289268][ T8472] ? security_sctp_bind_connect+0x7e/0x2e0 [ 178.289301][ T8472] sctp_getsockopt_connectx3+0x2c4/0x440 [ 178.289333][ T8472] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 178.289362][ T8472] ? __local_bh_enable_ip+0x12d/0x1c0 [ 178.289393][ T8472] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 178.289437][ T8472] sctp_getsockopt+0x98a/0xb60 [ 178.289460][ T8472] do_sock_getsockopt+0x35d/0x650 [ 178.289486][ T8472] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 178.289507][ T8472] ? do_syscall_64+0x40/0x210 [ 178.289533][ T8472] ? __fget_files+0x2a/0x420 [ 178.289557][ T8472] ? __fget_files+0x3a0/0x420 [ 178.289581][ T8472] ? __fget_files+0x2a/0x420 [ 178.289614][ T8472] __x64_sys_getsockopt+0x1a5/0x250 [ 178.289635][ T8472] ? do_syscall_64+0x40/0x210 [ 178.289663][ T8472] ? do_syscall_64+0x40/0x210 [ 178.289693][ T8472] do_syscall_64+0xf6/0x210 [ 178.289720][ T8472] ? clear_bhb_loop+0x45/0xa0 [ 178.289751][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.289771][ T8472] RIP: 0033:0x7f7b0d98e969 [ 178.289789][ T8472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.289807][ T8472] RSP: 002b:00007f7b0e8e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 178.289828][ T8472] RAX: ffffffffffffffda RBX: 00007f7b0dbb5fa0 RCX: 00007f7b0d98e969 [ 178.289843][ T8472] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 178.289855][ T8472] RBP: 00007f7b0e8e2090 R08: 0000200000000040 R09: 0000000000000000 [ 178.289868][ T8472] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 178.289881][ T8472] R13: 0000000000000000 R14: 00007f7b0dbb5fa0 R15: 00007ffcc3822718 [ 178.289914][ T8472] [ 178.640581][ T8395] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.775932][ T5841] Bluetooth: hci0: command tx timeout [ 178.815688][ T8395] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.900194][ T8478] netlink: 64 bytes leftover after parsing attributes in process `syz.2.741'. [ 179.031731][ T8395] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.177420][ T8395] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.195557][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.743'. [ 179.425424][ T8489] netlink: 32 bytes leftover after parsing attributes in process `syz.4.745'. [ 180.173962][ T8489] team0 (unregistering): Port device team_slave_0 removed [ 180.846043][ T5841] Bluetooth: hci0: command tx timeout [ 182.934802][ T5841] Bluetooth: hci0: command tx timeout [ 183.167613][ T8489] team0 (unregistering): Port device team_slave_1 removed [ 183.219087][ T8395] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.230335][ T8395] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.251391][ T8499] netlink: 508 bytes leftover after parsing attributes in process `syz.2.747'. [ 183.273841][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 183.274560][ T8395] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.283455][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 183.340614][ T8395] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 183.531602][ T8504] vlan2: entered promiscuous mode [ 183.537696][ T8504] bond0: entered promiscuous mode [ 183.542874][ T8504] bond_slave_0: entered promiscuous mode [ 183.553151][ T8504] bond_slave_1: entered promiscuous mode [ 183.560112][ T8504] dummy0: entered promiscuous mode [ 183.576563][ T8504] vlan2: entered allmulticast mode [ 183.592810][ T8504] bond0: entered allmulticast mode [ 183.599226][ T8504] bond_slave_0: entered allmulticast mode [ 183.609042][ T8504] bond_slave_1: entered allmulticast mode [ 183.616039][ T8504] dummy0: entered allmulticast mode [ 183.687627][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.737947][ T8395] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.770148][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.777388][ T6369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.829815][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.837080][ T6369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.852274][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 184.258505][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 184.353846][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 184.443573][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 184.593366][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.682139][ T8535] netlink: 'syz.2.757': attribute type 3 has an invalid length. [ 184.753393][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 184.781260][ T8395] veth0_vlan: entered promiscuous mode [ 184.830900][ T8395] veth1_vlan: entered promiscuous mode [ 184.915901][ T8395] veth0_macvtap: entered promiscuous mode [ 184.954288][ T8395] veth1_macvtap: entered promiscuous mode [ 184.978144][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 185.009763][ T8546] ipt_REJECT: TCP_RESET invalid for non-tcp [ 185.021214][ T8395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.051714][ T8395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.071957][ T8395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.084079][ T8395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.145760][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.182007][ T8395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.230245][ T8395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.261484][ T8395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.273166][ T8395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.292082][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.337819][ T8395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.363864][ T8395] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.386523][ T8395] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.414587][ T8395] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.716790][ T8570] FAULT_INJECTION: forcing a failure. [ 185.716790][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 185.733469][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.0.770 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 185.733500][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 185.733513][ T8570] Call Trace: [ 185.733522][ T8570] [ 185.733530][ T8570] dump_stack_lvl+0x189/0x250 [ 185.733568][ T8570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.733599][ T8570] ? __pfx__printk+0x10/0x10 [ 185.733621][ T8570] ? __pfx___might_resched+0x10/0x10 [ 185.733641][ T8570] ? fs_reclaim_acquire+0x7d/0x100 [ 185.733675][ T8570] should_fail_ex+0x414/0x560 [ 185.733712][ T8570] should_failslab+0xa8/0x100 [ 185.733741][ T8570] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 185.733768][ T8570] ? __request_module+0x2d1/0x5e0 [ 185.733801][ T8570] kstrdup+0x42/0x100 [ 185.733822][ T8570] __request_module+0x2d1/0x5e0 [ 185.733850][ T8570] ? aa_get_newest_label+0xf7/0x5d0 [ 185.733874][ T8570] ? __pfx___request_module+0x10/0x10 [ 185.733906][ T8570] ? rcu_is_watching+0x15/0xb0 [ 185.733946][ T8570] ? security_capable+0x7e/0x2e0 [ 185.733970][ T8570] ? dev_load+0x21/0x1f0 [ 185.734006][ T8570] dev_load+0x190/0x1f0 [ 185.734035][ T8570] dev_ioctl+0x680/0x1150 [ 185.734068][ T8570] sock_do_ioctl+0x22c/0x300 [ 185.734099][ T8570] ? __pfx_sock_do_ioctl+0x10/0x10 [ 185.734129][ T8570] ? __pfx_sock_ioctl+0x10/0x10 [ 185.734165][ T8570] sock_ioctl+0x576/0x790 [ 185.734193][ T8570] ? __pfx_sock_ioctl+0x10/0x10 [ 185.734223][ T8570] ? __fget_files+0x3a0/0x420 [ 185.734248][ T8570] ? __fget_files+0x2a/0x420 [ 185.734277][ T8570] ? bpf_lsm_file_ioctl+0x9/0x20 [ 185.734303][ T8570] ? __pfx_sock_ioctl+0x10/0x10 [ 185.734329][ T8570] __se_sys_ioctl+0xf9/0x170 [ 185.734352][ T8570] do_syscall_64+0xf6/0x210 [ 185.734381][ T8570] ? clear_bhb_loop+0x45/0xa0 [ 185.734409][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.734428][ T8570] RIP: 0033:0x7f103f78e969 [ 185.734446][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.734464][ T8570] RSP: 002b:00007f104060c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.734485][ T8570] RAX: ffffffffffffffda RBX: 00007f103f9b5fa0 RCX: 00007f103f78e969 [ 185.734501][ T8570] RDX: 0000200000000140 RSI: 0000000000008942 RDI: 0000000000000003 [ 185.734514][ T8570] RBP: 00007f104060c090 R08: 0000000000000000 R09: 0000000000000000 [ 185.734526][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.734537][ T8570] R13: 0000000000000000 R14: 00007f103f9b5fa0 R15: 00007ffcfc159db8 [ 185.734569][ T8570] [ 186.190293][ T8585] FAULT_INJECTION: forcing a failure. [ 186.190293][ T8585] name failslab, interval 1, probability 0, space 0, times 0 [ 186.205056][ T8585] CPU: 0 UID: 0 PID: 8585 Comm: syz.0.774 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 186.205086][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 186.205099][ T8585] Call Trace: [ 186.205108][ T8585] [ 186.205117][ T8585] dump_stack_lvl+0x189/0x250 [ 186.205154][ T8585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.205183][ T8585] ? __pfx__printk+0x10/0x10 [ 186.205205][ T8585] ? __pfx___might_resched+0x10/0x10 [ 186.205224][ T8585] ? fs_reclaim_acquire+0x7d/0x100 [ 186.205260][ T8585] should_fail_ex+0x414/0x560 [ 186.205298][ T8585] should_failslab+0xa8/0x100 [ 186.205327][ T8585] __kmalloc_noprof+0xcb/0x4f0 [ 186.205351][ T8585] ? tomoyo_encode+0x28b/0x550 [ 186.205379][ T8585] tomoyo_encode+0x28b/0x550 [ 186.205409][ T8585] tomoyo_realpath_from_path+0x58d/0x5d0 [ 186.205436][ T8585] ? tomoyo_domain+0xda/0x130 [ 186.205466][ T8585] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 186.205497][ T8585] tomoyo_path_number_perm+0x1e8/0x5a0 [ 186.205530][ T8585] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.205577][ T8585] ? __lock_acquire+0xaac/0xd20 [ 186.205626][ T8585] ? __fget_files+0x2a/0x420 [ 186.205657][ T8585] ? __fget_files+0x3a0/0x420 [ 186.205681][ T8585] ? __fget_files+0x2a/0x420 [ 186.205711][ T8585] security_file_ioctl+0xcb/0x2d0 [ 186.205744][ T8585] __se_sys_ioctl+0x47/0x170 [ 186.205767][ T8585] do_syscall_64+0xf6/0x210 [ 186.205796][ T8585] ? clear_bhb_loop+0x45/0xa0 [ 186.205822][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.205842][ T8585] RIP: 0033:0x7f103f78e969 [ 186.205860][ T8585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.205878][ T8585] RSP: 002b:00007f104060c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.205899][ T8585] RAX: ffffffffffffffda RBX: 00007f103f9b5fa0 RCX: 00007f103f78e969 [ 186.205913][ T8585] RDX: 0000200000000100 RSI: 0000000000008922 RDI: 0000000000000003 [ 186.205934][ T8585] RBP: 00007f104060c090 R08: 0000000000000000 R09: 0000000000000000 [ 186.205946][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.205958][ T8585] R13: 0000000000000000 R14: 00007f103f9b5fa0 R15: 00007ffcfc159db8 [ 186.205991][ T8585] [ 186.206012][ T8585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.485150][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.511073][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.670546][ T6369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.689116][ T6369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.253339][ T8619] vxcan1 speed is unknown, defaulting to 1000 [ 187.318578][ T8624] netlink: 'syz.4.784': attribute type 2 has an invalid length. [ 187.320493][ T8623] netlink: 36 bytes leftover after parsing attributes in process `syz.3.785'. [ 187.362950][ T8623] netlink: 'syz.3.785': attribute type 4 has an invalid length. [ 187.363525][ T8624] €: entered promiscuous mode [ 187.623579][ T1333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.926030][ T1333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.046347][ T1333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.436004][ T1333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.476752][ T8640] IPv6: sit1: Disabled Multicast RS [ 188.715878][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.736797][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.754768][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.763252][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.772417][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.928124][ T8650] FAULT_INJECTION: forcing a failure. [ 188.928124][ T8650] name failslab, interval 1, probability 0, space 0, times 0 [ 188.949313][ T8647] vxcan1 speed is unknown, defaulting to 1000 [ 188.988470][ T8650] CPU: 0 UID: 0 PID: 8650 Comm: syz.2.791 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 188.988500][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 188.988513][ T8650] Call Trace: [ 188.988520][ T8650] [ 188.988530][ T8650] dump_stack_lvl+0x189/0x250 [ 188.988567][ T8650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.988596][ T8650] ? __pfx__printk+0x10/0x10 [ 188.988622][ T8650] ? __pfx___might_resched+0x10/0x10 [ 188.988645][ T8650] should_fail_ex+0x414/0x560 [ 188.988682][ T8650] should_failslab+0xa8/0x100 [ 188.988708][ T8650] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 188.988733][ T8650] ? __alloc_skb+0x112/0x2d0 [ 188.988756][ T8650] __alloc_skb+0x112/0x2d0 [ 188.988778][ T8650] netlink_sendmsg+0x5c6/0xb30 [ 188.988815][ T8650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.988837][ T8650] ? aa_sock_msg_perm+0x94/0x160 [ 188.988859][ T8650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.988881][ T8650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.988901][ T8650] __sock_sendmsg+0x219/0x270 [ 188.988931][ T8650] ____sys_sendmsg+0x505/0x830 [ 188.988959][ T8650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.988991][ T8650] ? import_iovec+0x74/0xa0 [ 188.989019][ T8650] ___sys_sendmsg+0x21f/0x2a0 [ 188.989043][ T8650] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.989103][ T8650] ? __fget_files+0x2a/0x420 [ 188.989127][ T8650] ? __fget_files+0x3a0/0x420 [ 188.989162][ T8650] __x64_sys_sendmsg+0x19b/0x260 [ 188.989187][ T8650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.989226][ T8650] ? do_syscall_64+0xba/0x210 [ 188.989256][ T8650] do_syscall_64+0xf6/0x210 [ 188.989283][ T8650] ? clear_bhb_loop+0x45/0xa0 [ 188.989307][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.989325][ T8650] RIP: 0033:0x7f7b0d98e969 [ 188.989343][ T8650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.989361][ T8650] RSP: 002b:00007f7b0e8e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.989382][ T8650] RAX: ffffffffffffffda RBX: 00007f7b0dbb5fa0 RCX: 00007f7b0d98e969 [ 188.989396][ T8650] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 188.989409][ T8650] RBP: 00007f7b0e8e2090 R08: 0000000000000000 R09: 0000000000000000 [ 188.989421][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.989433][ T8650] R13: 0000000000000000 R14: 00007f7b0dbb5fa0 R15: 00007ffcc3822718 [ 188.989464][ T8650] [ 189.434705][ T1333] bridge_slave_1: left allmulticast mode [ 189.440634][ T1333] bridge_slave_1: left promiscuous mode [ 189.453977][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.488156][ T1333] bridge_slave_0: left allmulticast mode [ 189.515836][ T1333] bridge_slave_0: left promiscuous mode [ 189.524707][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.534176][ T8653] __nla_validate_parse: 5 callbacks suppressed [ 189.534194][ T8653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.794'. [ 189.801091][ T8665] netlink: 56 bytes leftover after parsing attributes in process `syz.3.792'. [ 190.008471][ T8669] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 190.104622][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.126307][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.154819][ T1333] bond0 (unregistering): Released all slaves [ 190.159135][ T8673] Bluetooth: MGMT ver 1.23 [ 190.625425][ T8686] FAULT_INJECTION: forcing a failure. [ 190.625425][ T8686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.647958][ T8686] CPU: 0 UID: 0 PID: 8686 Comm: syz.0.800 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 190.647989][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 190.648001][ T8686] Call Trace: [ 190.648009][ T8686] [ 190.648018][ T8686] dump_stack_lvl+0x189/0x250 [ 190.648050][ T8686] ? __lock_acquire+0xaac/0xd20 [ 190.648081][ T8686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.648111][ T8686] ? __pfx__printk+0x10/0x10 [ 190.648131][ T8686] ? __might_fault+0xb0/0x130 [ 190.648169][ T8686] should_fail_ex+0x414/0x560 [ 190.648206][ T8686] _copy_to_iter+0x3f5/0x15a0 [ 190.648233][ T8686] ? look_up_lock_class+0x74/0x170 [ 190.648261][ T8686] ? register_lock_class+0x51/0x320 [ 190.648291][ T8686] ? __pfx__copy_to_iter+0x10/0x10 [ 190.648332][ T8686] __skb_datagram_iter+0x100/0x960 [ 190.648357][ T8686] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.648381][ T8686] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 190.648408][ T8686] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 190.648444][ T8686] skb_copy_datagram_iter+0xc5/0x230 [ 190.648475][ T8686] virtio_transport_stream_dequeue+0x211/0x9b0 [ 190.648512][ T8686] ? __pfx_virtio_transport_stream_dequeue+0x10/0x10 [ 190.648531][ T8686] ? vsock_connectible_wait_data+0x4e4/0x520 [ 190.648575][ T8686] __vsock_connectible_recvmsg+0x78e/0xb70 [ 190.648614][ T8686] ? __pfx___vsock_connectible_recvmsg+0x10/0x10 [ 190.648646][ T8686] ? aa_sk_perm+0x81e/0x950 [ 190.648681][ T8686] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.648712][ T8686] ? __pfx_autoremove_wake_function+0x10/0x10 [ 190.648736][ T8686] ? aa_sock_msg_perm+0x94/0x160 [ 190.648758][ T8686] ? vsock_connectible_recvmsg+0xba/0xe0 [ 190.648781][ T8686] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 190.648806][ T8686] sock_recvmsg+0x229/0x270 [ 190.648838][ T8686] ____sys_recvmsg+0x1c9/0x460 [ 190.648870][ T8686] ? __pfx_____sys_recvmsg+0x10/0x10 [ 190.648912][ T8686] ? import_iovec+0x74/0xa0 [ 190.648941][ T8686] ___sys_recvmsg+0x1b5/0x510 [ 190.648971][ T8686] ? __pfx____sys_recvmsg+0x10/0x10 [ 190.649023][ T8686] ? __fget_files+0x3a0/0x420 [ 190.649062][ T8686] __x64_sys_recvmsg+0x198/0x260 [ 190.649088][ T8686] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 190.649135][ T8686] ? do_syscall_64+0xba/0x210 [ 190.649165][ T8686] do_syscall_64+0xf6/0x210 [ 190.649193][ T8686] ? clear_bhb_loop+0x45/0xa0 [ 190.649218][ T8686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.649237][ T8686] RIP: 0033:0x7f103f78e969 [ 190.649255][ T8686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.649272][ T8686] RSP: 002b:00007f104060c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 190.649294][ T8686] RAX: ffffffffffffffda RBX: 00007f103f9b5fa0 RCX: 00007f103f78e969 [ 190.649309][ T8686] RDX: 0000000000000300 RSI: 0000200000000200 RDI: 0000000000000005 [ 190.649322][ T8686] RBP: 00007f104060c090 R08: 0000000000000000 R09: 0000000000000000 [ 190.649335][ T8686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.649347][ T8686] R13: 0000000000000000 R14: 00007f103f9b5fa0 R15: 00007ffcfc159db8 [ 190.649379][ T8686] [ 190.992255][ T5841] Bluetooth: hci0: command tx timeout [ 191.500236][ T8702] FAULT_INJECTION: forcing a failure. [ 191.500236][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 191.551570][ T8702] CPU: 1 UID: 0 PID: 8702 Comm: syz.4.805 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 191.551607][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 191.551620][ T8702] Call Trace: [ 191.551629][ T8702] [ 191.551638][ T8702] dump_stack_lvl+0x189/0x250 [ 191.551676][ T8702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.551706][ T8702] ? __pfx__printk+0x10/0x10 [ 191.551732][ T8702] ? __pfx___might_resched+0x10/0x10 [ 191.551756][ T8702] should_fail_ex+0x414/0x560 [ 191.551792][ T8702] should_failslab+0xa8/0x100 [ 191.551820][ T8702] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 191.551846][ T8702] ? __alloc_skb+0x112/0x2d0 [ 191.551870][ T8702] __alloc_skb+0x112/0x2d0 [ 191.551893][ T8702] netlink_sendmsg+0x5c6/0xb30 [ 191.551924][ T8702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.551947][ T8702] ? aa_sock_msg_perm+0x94/0x160 [ 191.551969][ T8702] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.551991][ T8702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.552011][ T8702] __sock_sendmsg+0x219/0x270 [ 191.552042][ T8702] ____sys_sendmsg+0x505/0x830 [ 191.552070][ T8702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.552102][ T8702] ? import_iovec+0x74/0xa0 [ 191.552131][ T8702] ___sys_sendmsg+0x21f/0x2a0 [ 191.552156][ T8702] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.552217][ T8702] ? __fget_files+0x2a/0x420 [ 191.552241][ T8702] ? __fget_files+0x3a0/0x420 [ 191.552277][ T8702] __x64_sys_sendmsg+0x19b/0x260 [ 191.552303][ T8702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.552343][ T8702] ? do_syscall_64+0xba/0x210 [ 191.552373][ T8702] do_syscall_64+0xf6/0x210 [ 191.552400][ T8702] ? clear_bhb_loop+0x45/0xa0 [ 191.552424][ T8702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.552443][ T8702] RIP: 0033:0x7f47a0d8e969 [ 191.552460][ T8702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.552482][ T8702] RSP: 002b:00007f47a1c74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.552502][ T8702] RAX: ffffffffffffffda RBX: 00007f47a0fb5fa0 RCX: 00007f47a0d8e969 [ 191.552516][ T8702] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 191.552527][ T8702] RBP: 00007f47a1c74090 R08: 0000000000000000 R09: 0000000000000000 [ 191.552556][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.552567][ T8702] R13: 0000000000000000 R14: 00007f47a0fb5fa0 R15: 00007ffcf2999808 [ 191.552598][ T8702] [ 192.323505][ T8699] netlink: 60 bytes leftover after parsing attributes in process `syz.3.803'. [ 192.349205][ T8699] netlink: 56 bytes leftover after parsing attributes in process `syz.3.803'. [ 192.391075][ T1333] hsr_slave_0: left promiscuous mode [ 192.399560][ T1333] hsr_slave_1: left promiscuous mode [ 192.411948][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.421424][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.487004][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.511565][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.587164][ T1333] veth1_macvtap: left promiscuous mode [ 192.594162][ T1333] veth0_macvtap: left promiscuous mode [ 192.606227][ T1333] veth1_vlan: left promiscuous mode [ 192.613135][ T1333] veth0_vlan: left promiscuous mode [ 193.004986][ T5841] Bluetooth: hci0: command tx timeout [ 193.119658][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 193.157059][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 193.549404][ T8699] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 193.563406][ T8699] gretap1: entered promiscuous mode [ 193.584555][ T8699] gretap1: entered allmulticast mode [ 193.621022][ T8738] tun0: tun_chr_ioctl cmd 1074025677 [ 193.643309][ T8738] tun0: linktype set to 768 [ 193.666500][ T8742] FAULT_INJECTION: forcing a failure. [ 193.666500][ T8742] name failslab, interval 1, probability 0, space 0, times 0 [ 193.686923][ T8742] CPU: 0 UID: 0 PID: 8742 Comm: syz.2.813 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 193.686953][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 193.686965][ T8742] Call Trace: [ 193.686973][ T8742] [ 193.686981][ T8742] dump_stack_lvl+0x189/0x250 [ 193.687017][ T8742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.687045][ T8742] ? __pfx__printk+0x10/0x10 [ 193.687070][ T8742] ? __pfx___might_resched+0x10/0x10 [ 193.687087][ T8742] ? fs_reclaim_acquire+0x7d/0x100 [ 193.687119][ T8742] should_fail_ex+0x414/0x560 [ 193.687154][ T8742] should_failslab+0xa8/0x100 [ 193.687181][ T8742] __kmalloc_noprof+0xcb/0x4f0 [ 193.687204][ T8742] ? group_cpus_evenly+0x271/0x520 [ 193.687232][ T8742] group_cpus_evenly+0x271/0x520 [ 193.687259][ T8742] ? __pfx_group_cpus_evenly+0x10/0x10 [ 193.687298][ T8742] blk_mq_map_queues+0x4c/0x400 [ 193.687317][ T8742] ? blk_mq_update_queue_map+0x37a/0x440 [ 193.687348][ T8742] blk_mq_alloc_tag_set+0x825/0xfb0 [ 193.687385][ T8742] nbd_dev_add+0x2e5/0xb10 [ 193.687432][ T8742] ? __pfx_nbd_dev_add+0x10/0x10 [ 193.687481][ T8742] ? bpf_lsm_capable+0x9/0x20 [ 193.687507][ T8742] ? security_capable+0x7e/0x2e0 [ 193.687527][ T8742] ? radix_tree_lookup+0x240/0x290 [ 193.687552][ T8742] nbd_genl_connect+0x92a/0x1930 [ 193.687588][ T8742] ? __pfx_nbd_genl_connect+0x10/0x10 [ 193.687617][ T8742] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 193.687651][ T8742] ? __nla_parse+0x40/0x60 [ 193.687676][ T8742] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 193.687709][ T8742] genl_family_rcv_msg_doit+0x212/0x300 [ 193.687740][ T8742] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 193.687780][ T8742] ? stack_depot_save_flags+0x40/0x910 [ 193.687816][ T8742] genl_rcv_msg+0x60e/0x790 [ 193.687846][ T8742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.687868][ T8742] ? __pfx_nbd_genl_connect+0x10/0x10 [ 193.687910][ T8742] netlink_rcv_skb+0x219/0x490 [ 193.687940][ T8742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.687965][ T8742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.688019][ T8742] ? down_read+0x1ad/0x2e0 [ 193.688048][ T8742] genl_rcv+0x28/0x40 [ 193.688068][ T8742] netlink_unicast+0x758/0x8d0 [ 193.688107][ T8742] netlink_sendmsg+0x805/0xb30 [ 193.688136][ T8742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.688158][ T8742] ? aa_sock_msg_perm+0x94/0x160 [ 193.688179][ T8742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.688200][ T8742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.688219][ T8742] __sock_sendmsg+0x219/0x270 [ 193.688249][ T8742] ____sys_sendmsg+0x505/0x830 [ 193.688277][ T8742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.688308][ T8742] ? import_iovec+0x74/0xa0 [ 193.688337][ T8742] ___sys_sendmsg+0x21f/0x2a0 [ 193.688360][ T8742] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.688429][ T8742] ? __fget_files+0x2a/0x420 [ 193.688454][ T8742] ? __fget_files+0x3a0/0x420 [ 193.688489][ T8742] __x64_sys_sendmsg+0x19b/0x260 [ 193.688514][ T8742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.688553][ T8742] ? do_syscall_64+0xba/0x210 [ 193.688583][ T8742] do_syscall_64+0xf6/0x210 [ 193.688609][ T8742] ? clear_bhb_loop+0x45/0xa0 [ 193.688633][ T8742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.688652][ T8742] RIP: 0033:0x7f7b0d98e969 [ 193.688670][ T8742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.688688][ T8742] RSP: 002b:00007f7b0e8e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.688708][ T8742] RAX: ffffffffffffffda RBX: 00007f7b0dbb5fa0 RCX: 00007f7b0d98e969 [ 193.688722][ T8742] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 193.688734][ T8742] RBP: 00007f7b0e8e2090 R08: 0000000000000000 R09: 0000000000000000 [ 193.688745][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.688756][ T8742] R13: 0000000000000000 R14: 00007f7b0dbb5fa0 R15: 00007ffcc3822718 [ 193.688788][ T8742] [ 194.126887][ T8647] chnl_net:caif_netlink_parms(): no params data found [ 194.210171][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.223651][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.512441][ T8763] FAULT_INJECTION: forcing a failure. [ 194.512441][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 194.535067][ T8763] CPU: 0 UID: 0 PID: 8763 Comm: syz.3.819 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 194.535098][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 194.535110][ T8763] Call Trace: [ 194.535119][ T8763] [ 194.535127][ T8763] dump_stack_lvl+0x189/0x250 [ 194.535165][ T8763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.535194][ T8763] ? __pfx__printk+0x10/0x10 [ 194.535216][ T8763] ? is_bpf_text_address+0x292/0x2b0 [ 194.535244][ T8763] ? is_bpf_text_address+0x26/0x2b0 [ 194.535280][ T8763] should_fail_ex+0x414/0x560 [ 194.535317][ T8763] should_failslab+0xa8/0x100 [ 194.535354][ T8763] kmem_cache_alloc_noprof+0x73/0x3c0 [ 194.535378][ T8763] ? dst_alloc+0x105/0x170 [ 194.535406][ T8763] dst_alloc+0x105/0x170 [ 194.535435][ T8763] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 194.535471][ T8763] ? ip_route_output_key_hash+0xde/0x2e0 [ 194.535497][ T8763] ip_route_output_key_hash+0x1b9/0x2e0 [ 194.535518][ T8763] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 194.535538][ T8763] ? do_syscall_64+0xf6/0x210 [ 194.535562][ T8763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.535584][ T8763] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 194.535614][ T8763] ? make_kuid+0x1d9/0x680 [ 194.535640][ T8763] ? __pfx_make_kuid+0x10/0x10 [ 194.535668][ T8763] ip_route_output_flow+0x2a/0x150 [ 194.535694][ T8763] rxrpc_init_peer+0x50a/0xc60 [ 194.535727][ T8763] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 194.535760][ T8763] ? rcu_is_watching+0x15/0xb0 [ 194.535791][ T8763] ? trace_rxrpc_peer+0x80/0x200 [ 194.535814][ T8763] ? rxrpc_lookup_peer+0x423/0x860 [ 194.535845][ T8763] rxrpc_lookup_peer+0x431/0x860 [ 194.535877][ T8763] rxrpc_do_sendmsg+0xb0a/0x1220 [ 194.535919][ T8763] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 194.535945][ T8763] ? __local_bh_enable_ip+0x12d/0x1c0 [ 194.535975][ T8763] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 194.536008][ T8763] ? do_raw_spin_unlock+0x122/0x240 [ 194.536037][ T8763] ? rxrpc_sendmsg+0x4cc/0x710 [ 194.536071][ T8763] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 194.536101][ T8763] __sock_sendmsg+0x219/0x270 [ 194.536132][ T8763] ____sys_sendmsg+0x52d/0x830 [ 194.536161][ T8763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.536192][ T8763] ? import_iovec+0x74/0xa0 [ 194.536222][ T8763] ___sys_sendmsg+0x21f/0x2a0 [ 194.536247][ T8763] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.536312][ T8763] ? __fget_files+0x2a/0x420 [ 194.536337][ T8763] ? __fget_files+0x3a0/0x420 [ 194.536380][ T8763] __sys_sendmmsg+0x227/0x430 [ 194.536410][ T8763] ? __pfx___sys_sendmmsg+0x10/0x10 [ 194.536442][ T8763] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.536490][ T8763] ? ksys_write+0x1f0/0x250 [ 194.536510][ T8763] ? rcu_is_watching+0x15/0xb0 [ 194.536551][ T8763] __x64_sys_sendmmsg+0xa0/0xc0 [ 194.536576][ T8763] do_syscall_64+0xf6/0x210 [ 194.536603][ T8763] ? clear_bhb_loop+0x45/0xa0 [ 194.536629][ T8763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.536649][ T8763] RIP: 0033:0x7f08cc78e969 [ 194.536667][ T8763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.536683][ T8763] RSP: 002b:00007f08cd50e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 194.536704][ T8763] RAX: ffffffffffffffda RBX: 00007f08cc9b5fa0 RCX: 00007f08cc78e969 [ 194.536719][ T8763] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 194.536732][ T8763] RBP: 00007f08cd50e090 R08: 0000000000000000 R09: 0000000000000000 [ 194.536744][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.536756][ T8763] R13: 0000000000000000 R14: 00007f08cc9b5fa0 R15: 00007ffeb5c634b8 [ 194.536788][ T8763] [ 195.029534][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.046213][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.094736][ T8647] bridge_slave_0: entered allmulticast mode [ 195.094977][ T5841] Bluetooth: hci0: command tx timeout [ 195.102736][ T8647] bridge_slave_0: entered promiscuous mode [ 195.174656][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.181941][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.189988][ T8647] bridge_slave_1: entered allmulticast mode [ 195.198215][ T8647] bridge_slave_1: entered promiscuous mode [ 195.283063][ T8647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.330863][ T8647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.394227][ T8770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.403278][ T8770] bond0: (slave bond3): Enslaving as an active interface with an up link [ 195.500365][ T8779] delete_channel: no stack [ 195.606287][ T8647] team0: Port device team_slave_0 added [ 195.627141][ T8647] team0: Port device team_slave_1 added [ 195.744204][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.758881][ T8786] netlink: 'syz.3.827': attribute type 3 has an invalid length. [ 195.767341][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.795022][ T8647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.811872][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.819839][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.847988][ T8790] x_tables: duplicate underflow at hook 2 [ 195.850974][ T8647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.887914][ T8776] vxcan1 speed is unknown, defaulting to 1000 [ 196.026461][ T8790] block nbd6: shutting down sockets [ 196.033486][ T8794] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 196.089257][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 196.157263][ T8647] hsr_slave_0: entered promiscuous mode [ 196.174234][ T8647] hsr_slave_1: entered promiscuous mode [ 196.195022][ T8647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.234534][ T8647] Cannot create hsr debugfs directory [ 196.239378][ T8799] ipt_rpfilter: unknown options [ 196.283741][ T8803] netlink: 88 bytes leftover after parsing attributes in process `syz.0.831'. [ 196.620221][ T8782] vxcan1 speed is unknown, defaulting to 1000 [ 197.183243][ T5841] Bluetooth: hci0: command tx timeout [ 197.770638][ T8647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.852639][ T8647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.886603][ T8647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.949342][ T8647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.658036][ T8647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.748517][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.848898][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.856138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.897050][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.904328][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.728668][ T8647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.731747][ T975] IPVS: starting estimator thread 0... [ 199.791845][ T8647] veth0_vlan: entered promiscuous mode [ 199.894707][ T8828] IPVS: using max 27 ests per chain, 64800 per kthread [ 199.927527][ T8832] netlink: 80 bytes leftover after parsing attributes in process `syz.0.838'. [ 200.021568][ T8647] veth1_vlan: entered promiscuous mode [ 200.182081][ T8647] veth0_macvtap: entered promiscuous mode [ 200.200715][ T8837] netlink: 'syz.3.839': attribute type 3 has an invalid length. [ 200.211617][ T8647] veth1_macvtap: entered promiscuous mode [ 200.346444][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.374845][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.393832][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.417437][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.431113][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.526414][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.573199][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.593000][ T8647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.615631][ T8647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.636424][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.666226][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 200.771858][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'. [ 201.018269][ T8647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.064528][ T8647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.073288][ T8647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.114490][ T8647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.467348][ T6369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.480009][ T6369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.567920][ T6361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.608976][ T6361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.665749][ T8872] netlink: 'syz.2.852': attribute type 3 has an invalid length. [ 202.101481][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 202.125971][ T8885] FAULT_INJECTION: forcing a failure. [ 202.125971][ T8885] name failslab, interval 1, probability 0, space 0, times 0 [ 202.175175][ T8885] CPU: 0 UID: 0 PID: 8885 Comm: syz.4.855 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 202.175222][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 202.175242][ T8885] Call Trace: [ 202.175250][ T8885] [ 202.175259][ T8885] dump_stack_lvl+0x189/0x250 [ 202.175298][ T8885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.175328][ T8885] ? __pfx__printk+0x10/0x10 [ 202.175362][ T8885] should_fail_ex+0x414/0x560 [ 202.175399][ T8885] should_failslab+0xa8/0x100 [ 202.175428][ T8885] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 202.175455][ T8885] ? __alloc_skb+0x112/0x2d0 [ 202.175480][ T8885] __alloc_skb+0x112/0x2d0 [ 202.175504][ T8885] create_monitor_ctrl_event+0x38/0x480 [ 202.175523][ T8885] ? skb_put+0x11b/0x210 [ 202.175547][ T8885] mgmt_cmd_status+0x1cb/0x4c0 [ 202.175574][ T8885] hci_sock_sendmsg+0x6ca/0xee0 [ 202.175602][ T8885] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 202.175623][ T8885] ? aa_sock_msg_perm+0x94/0x160 [ 202.175646][ T8885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.175669][ T8885] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 202.175691][ T8885] __sock_sendmsg+0x219/0x270 [ 202.175723][ T8885] sock_write_iter+0x258/0x330 [ 202.175751][ T8885] ? __pfx_sock_write_iter+0x10/0x10 [ 202.175790][ T8885] ? bpf_lsm_file_permission+0x9/0x20 [ 202.175814][ T8885] ? security_file_permission+0x75/0x290 [ 202.175854][ T8885] vfs_write+0x548/0xa90 [ 202.175883][ T8885] ? __pfx_sock_write_iter+0x10/0x10 [ 202.175909][ T8885] ? __pfx_vfs_write+0x10/0x10 [ 202.175944][ T8885] ? __fget_files+0x2a/0x420 [ 202.175980][ T8885] ksys_write+0x145/0x250 [ 202.176002][ T8885] ? rcu_is_watching+0x15/0xb0 [ 202.176034][ T8885] ? __pfx_ksys_write+0x10/0x10 [ 202.176061][ T8885] ? do_syscall_64+0xba/0x210 [ 202.176097][ T8885] do_syscall_64+0xf6/0x210 [ 202.176125][ T8885] ? clear_bhb_loop+0x45/0xa0 [ 202.176151][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.176171][ T8885] RIP: 0033:0x7f47a0d8e969 [ 202.176189][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.176206][ T8885] RSP: 002b:00007f47a1c74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.176227][ T8885] RAX: ffffffffffffffda RBX: 00007f47a0fb5fa0 RCX: 00007f47a0d8e969 [ 202.176241][ T8885] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000004 [ 202.176253][ T8885] RBP: 00007f47a1c74090 R08: 0000000000000000 R09: 0000000000000000 [ 202.176265][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.176277][ T8885] R13: 0000000000000000 R14: 00007f47a0fb5fa0 R15: 00007ffcf2999808 [ 202.176309][ T8885] [ 202.829515][ T6369] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.022441][ T6369] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.194065][ T6369] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.376763][ T6369] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.542858][ T8928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.868'. [ 203.608069][ T8928] vxcan3: entered allmulticast mode [ 203.684027][ T8929] netlink: 'syz.0.867': attribute type 3 has an invalid length. [ 203.978551][ T8939] netlink: 248 bytes leftover after parsing attributes in process `syz.4.872'. [ 204.064091][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.087668][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.099677][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.109067][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.114125][ T6369] bridge_slave_1: left allmulticast mode [ 204.125210][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.135679][ T6369] bridge_slave_1: left promiscuous mode [ 204.141943][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.246576][ T6369] bridge_slave_0: left allmulticast mode [ 204.255882][ T6369] bridge_slave_0: left promiscuous mode [ 204.280710][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.879794][ T8967] netlink: 80 bytes leftover after parsing attributes in process `syz.0.878'. [ 205.165521][ T6369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.178257][ T6369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.190138][ T6369] bond0 (unregistering): Released all slaves [ 205.275940][ T8942] vxcan1 speed is unknown, defaulting to 1000 [ 205.953471][ T8973] netlink: 60 bytes leftover after parsing attributes in process `syz.0.879'. [ 206.005066][ T8983] netlink: 60 bytes leftover after parsing attributes in process `syz.0.879'. [ 206.208658][ T55] Bluetooth: hci0: command tx timeout [ 206.240996][ T8991] netlink: 72 bytes leftover after parsing attributes in process `syz.3.884'. [ 206.290990][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.884'. [ 206.346756][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 207.200713][ T6369] hsr_slave_0: left promiscuous mode [ 207.215568][ T6369] hsr_slave_1: left promiscuous mode [ 207.228416][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.256137][ T6369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.264337][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.276737][ T6369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.306217][ T6369] veth1_macvtap: left promiscuous mode [ 207.311827][ T6369] veth0_macvtap: left promiscuous mode [ 207.317776][ T6369] veth1_vlan: left promiscuous mode [ 207.323203][ T6369] veth0_vlan: left promiscuous mode [ 207.878351][ T9030] xt_CT: No such helper "pptp" [ 208.109610][ T6369] team0 (unregistering): Port device team_slave_1 removed [ 208.148480][ T6369] team0 (unregistering): Port device team_slave_0 removed [ 208.285057][ T55] Bluetooth: hci0: command tx timeout [ 208.531470][ T8942] chnl_net:caif_netlink_parms(): no params data found [ 209.038872][ T9050] syzkaller0: entered promiscuous mode [ 209.068029][ T9050] syzkaller0: entered allmulticast mode [ 209.106968][ T9059] netlink: 'syz.4.901': attribute type 21 has an invalid length. [ 210.024310][ T9067] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 210.368804][ T5830] Bluetooth: hci0: command tx timeout [ 211.368786][ T8942] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.382657][ T8942] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.390133][ T8942] bridge_slave_0: entered allmulticast mode [ 211.407007][ T8942] bridge_slave_0: entered promiscuous mode [ 211.426038][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.443404][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.451261][ T8942] bridge_slave_1: entered allmulticast mode [ 211.469311][ T8942] bridge_slave_1: entered promiscuous mode [ 211.550767][ T9082] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 211.649240][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 211.649328][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 211.658478][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 211.672201][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 211.684140][ T9091] vlan2: entered promiscuous mode [ 211.692828][ T9091] vlan2: entered allmulticast mode [ 211.699215][ T9091] hsr_slave_1: entered allmulticast mode [ 211.769780][ T8942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.783601][ T8942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.891097][ T9102] netlink: 'syz.2.911': attribute type 21 has an invalid length. [ 211.914512][ T9102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.911'. [ 211.938139][ T8942] team0: Port device team_slave_0 added [ 211.958506][ T8942] team0: Port device team_slave_1 added [ 212.080535][ T8942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.101915][ T8942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.144757][ T8942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.174909][ T8942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.182029][ T8942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.208862][ T8942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.326832][ T8942] hsr_slave_0: entered promiscuous mode [ 212.333695][ T8942] hsr_slave_1: entered promiscuous mode [ 212.346429][ T8942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.463683][ T5845] Bluetooth: hci0: command tx timeout [ 212.500410][ T8942] Cannot create hsr debugfs directory [ 213.287863][ T9121] sctp: [Deprecated]: syz.4.918 (pid 9121) Use of int in max_burst socket option. [ 213.287863][ T9121] Use struct sctp_assoc_value instead [ 215.608113][ T9130] sctp: [Deprecated]: syz.4.923 (pid 9130) Use of int in max_burst socket option. [ 215.608113][ T9130] Use struct sctp_assoc_value instead [ 215.777723][ T9134] xt_hashlimit: size too large, truncated to 1048576 [ 215.792199][ T9139] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.803584][ T9139] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.814050][ T9139] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.822719][ T9139] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.832873][ T9139] geneve2: entered promiscuous mode [ 215.841947][ T9139] geneve2: entered allmulticast mode [ 216.253194][ T9151] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 216.501143][ T8942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.537511][ T8942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.621197][ T8942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.675143][ T8942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.696275][ T9167] hsr0: entered promiscuous mode [ 216.717014][ T9167] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 217.023327][ T8942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.055275][ T8942] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.091457][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.098675][ T6356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.119285][ T9189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.942'. [ 217.131943][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.139207][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.164646][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 217.466183][ T9199] vxcan1 speed is unknown, defaulting to 1000 [ 217.753241][ T9207] geneve2: entered promiscuous mode [ 217.886769][ T8942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.022922][ T8942] veth0_vlan: entered promiscuous mode [ 218.065064][ T8942] veth1_vlan: entered promiscuous mode [ 218.160840][ T8942] veth0_macvtap: entered promiscuous mode [ 218.193379][ T8942] veth1_macvtap: entered promiscuous mode [ 218.272831][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.314531][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.357791][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.384563][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.414309][ T8942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.475788][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.494603][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.526038][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.555990][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.590165][ T8942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.612785][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.951'. [ 218.649144][ T8942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.673851][ T8942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.714376][ T8942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.729001][ T8942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.812049][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 218.928544][ T6369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.942230][ T6369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.017251][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.037923][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.114032][ T9238] netlink: 'syz.0.956': attribute type 8 has an invalid length. [ 219.174658][ T9236] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 219.350178][ T9241] FAULT_INJECTION: forcing a failure. [ 219.350178][ T9241] name failslab, interval 1, probability 0, space 0, times 0 [ 219.378935][ T9241] CPU: 0 UID: 0 PID: 9241 Comm: syz.2.957 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 219.378963][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 219.378976][ T9241] Call Trace: [ 219.378983][ T9241] [ 219.378992][ T9241] dump_stack_lvl+0x189/0x250 [ 219.379028][ T9241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.379057][ T9241] ? __pfx__printk+0x10/0x10 [ 219.379082][ T9241] ? __pfx___might_resched+0x10/0x10 [ 219.379098][ T9241] ? fs_reclaim_acquire+0x7d/0x100 [ 219.379127][ T9241] should_fail_ex+0x414/0x560 [ 219.379156][ T9241] should_failslab+0xa8/0x100 [ 219.379179][ T9241] __kmalloc_cache_noprof+0x70/0x3d0 [ 219.379199][ T9241] ? resv_map_alloc+0x51/0x2c0 [ 219.379213][ T9241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.379239][ T9241] resv_map_alloc+0x51/0x2c0 [ 219.379258][ T9241] hugetlbfs_get_inode+0x68/0x660 [ 219.379284][ T9241] ? fput+0xa0/0xd0 [ 219.379310][ T9241] hugetlb_file_setup+0x21d/0x630 [ 219.379337][ T9241] ksys_mmap_pgoff+0x22f/0x760 [ 219.379363][ T9241] do_syscall_64+0xf6/0x210 [ 219.379385][ T9241] ? clear_bhb_loop+0x45/0xa0 [ 219.379405][ T9241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.379421][ T9241] RIP: 0033:0x7f7b0d98e969 [ 219.379436][ T9241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.379450][ T9241] RSP: 002b:00007f7b0e8c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 219.379468][ T9241] RAX: ffffffffffffffda RBX: 00007f7b0dbb6080 RCX: 00007f7b0d98e969 [ 219.379479][ T9241] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000200000 [ 219.379490][ T9241] RBP: 00007f7b0e8c1090 R08: ffffffffffffffff R09: 0000000000000000 [ 219.379500][ T9241] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000001 [ 219.379510][ T9241] R13: 0000000000000001 R14: 00007f7b0dbb6080 R15: 00007ffcc3822718 [ 219.379535][ T9241] [ 219.667625][ T9245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.033159][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 220.053744][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 220.064349][ T9248] netlink: 'syz.0.961': attribute type 18 has an invalid length. [ 220.667908][ T9255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.962'. [ 221.259065][ T9250] vxcan1 speed is unknown, defaulting to 1000 [ 221.481777][ T1333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.737619][ T1333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.899921][ T1333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.062149][ T1333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.318135][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.328365][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.339037][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.347191][ T1333] bridge_slave_1: left allmulticast mode [ 222.354471][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.363254][ T1333] bridge_slave_1: left promiscuous mode [ 222.374787][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.409359][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.489838][ T1333] bridge_slave_0: left allmulticast mode [ 222.514960][ T1333] bridge_slave_0: left promiscuous mode [ 222.520829][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.588317][ T9268] netlink: 'syz.4.965': attribute type 3 has an invalid length. [ 222.796144][ T9275] netlink: 60 bytes leftover after parsing attributes in process `syz.0.967'. [ 223.273547][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.295496][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.313240][ T1333] bond0 (unregistering): Released all slaves [ 223.598666][ T9264] vxcan1 speed is unknown, defaulting to 1000 [ 223.789712][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 223.816488][ T9292] netlink: 60 bytes leftover after parsing attributes in process `syz.2.971'. [ 224.358060][ T9299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.400190][ T9299] team0: Port device bond1 added [ 224.455933][ T5845] Bluetooth: hci0: command tx timeout [ 225.186332][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 225.853765][ T1333] hsr_slave_0: left promiscuous mode [ 225.861669][ T1333] hsr_slave_1: left promiscuous mode [ 225.873013][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.883824][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.893931][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.895957][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 225.901956][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.931478][ T1333] veth1_macvtap: left promiscuous mode [ 225.938480][ T1333] veth0_macvtap: left promiscuous mode [ 225.944106][ T1333] veth1_vlan: left promiscuous mode [ 225.949844][ T1333] veth0_vlan: left promiscuous mode [ 226.109047][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'. [ 226.441707][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 226.501594][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 226.528330][ T5845] Bluetooth: hci0: command tx timeout [ 227.284943][ T9264] chnl_net:caif_netlink_parms(): no params data found [ 227.400664][ T9353] Bluetooth: MGMT ver 1.23 [ 227.495718][ T9358] netlink: 92 bytes leftover after parsing attributes in process `syz.0.987'. [ 227.570607][ T9358] xt_connbytes: Forcing CT accounting to be enabled [ 227.594688][ T9358] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 227.634055][ T9364] netlink: 'syz.0.987': attribute type 37 has an invalid length. [ 227.677440][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.687402][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.725391][ T9264] bridge_slave_0: entered allmulticast mode [ 227.743534][ T9264] bridge_slave_0: entered promiscuous mode [ 227.775574][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.793119][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.814679][ T9264] bridge_slave_1: entered allmulticast mode [ 227.832941][ T9264] bridge_slave_1: entered promiscuous mode [ 227.885923][ T9373] netlink: 'syz.2.993': attribute type 3 has an invalid length. [ 227.947400][ T9264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.953825][ T9377] netlink: 56 bytes leftover after parsing attributes in process `syz.0.994'. [ 227.979676][ T9264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.103225][ T9384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.996'. [ 228.179140][ T9384] FAULT_INJECTION: forcing a failure. [ 228.179140][ T9384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.216002][ T9264] team0: Port device team_slave_0 added [ 228.242311][ T9264] team0: Port device team_slave_1 added [ 228.255980][ T9384] CPU: 1 UID: 0 PID: 9384 Comm: syz.2.996 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 228.256011][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 228.256032][ T9384] Call Trace: [ 228.256039][ T9384] [ 228.256049][ T9384] dump_stack_lvl+0x189/0x250 [ 228.256082][ T9384] ? __lock_acquire+0xaac/0xd20 [ 228.256113][ T9384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.256141][ T9384] ? __pfx__printk+0x10/0x10 [ 228.256162][ T9384] ? __might_fault+0xb0/0x130 [ 228.256201][ T9384] should_fail_ex+0x414/0x560 [ 228.256238][ T9384] _copy_from_user+0x2d/0xb0 [ 228.256265][ T9384] kstrtouint_from_user+0xc4/0x170 [ 228.256290][ T9384] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 228.256329][ T9384] proc_fail_nth_write+0x88/0x240 [ 228.256357][ T9384] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 228.256392][ T9384] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 228.256422][ T9384] vfs_write+0x27b/0xa90 [ 228.256456][ T9384] ? __pfx_vfs_write+0x10/0x10 [ 228.256480][ T9384] ? __fget_files+0x2a/0x420 [ 228.256511][ T9384] ? __fget_files+0x3a0/0x420 [ 228.256535][ T9384] ? __fget_files+0x2a/0x420 [ 228.256571][ T9384] ksys_write+0x145/0x250 [ 228.256593][ T9384] ? rcu_is_watching+0x15/0xb0 [ 228.256625][ T9384] ? __pfx_ksys_write+0x10/0x10 [ 228.256652][ T9384] ? do_syscall_64+0xba/0x210 [ 228.256683][ T9384] do_syscall_64+0xf6/0x210 [ 228.256711][ T9384] ? clear_bhb_loop+0x45/0xa0 [ 228.256737][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.256756][ T9384] RIP: 0033:0x7f7b0d98d41f [ 228.256774][ T9384] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 228.256791][ T9384] RSP: 002b:00007f7b0e8e2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 228.256813][ T9384] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7b0d98d41f [ 228.256826][ T9384] RDX: 0000000000000001 RSI: 00007f7b0e8e20a0 RDI: 0000000000000006 [ 228.256838][ T9384] RBP: 00007f7b0e8e2090 R08: 0000000000000000 R09: 0000000000000000 [ 228.256851][ T9384] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 228.256863][ T9384] R13: 0000000000000000 R14: 00007f7b0dbb5fa0 R15: 00007ffcc3822718 [ 228.256896][ T9384] [ 228.586705][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.593734][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.625163][ T9264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.632334][ T5845] Bluetooth: hci0: command tx timeout [ 228.638516][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.649292][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.675968][ T9264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.863234][ T9405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1004'. [ 228.892040][ T9264] hsr_slave_0: entered promiscuous mode [ 228.899520][ T9264] hsr_slave_1: entered promiscuous mode [ 228.906398][ T9264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.914141][ T9264] Cannot create hsr debugfs directory [ 229.074286][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 229.114310][ T9410] xt_socket: unknown flags 0x8 [ 229.126160][ T9412] FAULT_INJECTION: forcing a failure. [ 229.126160][ T9412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.172373][ T9412] CPU: 1 UID: 0 PID: 9412 Comm: syz.4.1007 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 229.172403][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 229.172416][ T9412] Call Trace: [ 229.172423][ T9412] [ 229.172431][ T9412] dump_stack_lvl+0x189/0x250 [ 229.172466][ T9412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.172493][ T9412] ? __pfx__printk+0x10/0x10 [ 229.172526][ T9412] should_fail_ex+0x414/0x560 [ 229.172562][ T9412] _copy_to_user+0x31/0xb0 [ 229.172592][ T9412] simple_read_from_buffer+0xe1/0x170 [ 229.172621][ T9412] proc_fail_nth_read+0x1df/0x250 [ 229.172651][ T9412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.172683][ T9412] ? rw_verify_area+0x258/0x650 [ 229.172703][ T9412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.172732][ T9412] vfs_read+0x1fd/0x980 [ 229.172760][ T9412] ? __pfx___mutex_lock+0x10/0x10 [ 229.172787][ T9412] ? __pfx_vfs_read+0x10/0x10 [ 229.172811][ T9412] ? __fget_files+0x2a/0x420 [ 229.172841][ T9412] ? __fget_files+0x3a0/0x420 [ 229.172865][ T9412] ? __fget_files+0x2a/0x420 [ 229.172899][ T9412] ksys_read+0x145/0x250 [ 229.172931][ T9412] ? __pfx_ksys_read+0x10/0x10 [ 229.172958][ T9412] ? do_syscall_64+0xba/0x210 [ 229.172990][ T9412] do_syscall_64+0xf6/0x210 [ 229.173017][ T9412] ? clear_bhb_loop+0x45/0xa0 [ 229.173041][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.173060][ T9412] RIP: 0033:0x7f47a0d8d37c [ 229.173078][ T9412] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 229.173095][ T9412] RSP: 002b:00007f47a1c53030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.173115][ T9412] RAX: ffffffffffffffda RBX: 00007f47a0fb6080 RCX: 00007f47a0d8d37c [ 229.173129][ T9412] RDX: 000000000000000f RSI: 00007f47a1c530a0 RDI: 0000000000000004 [ 229.173140][ T9412] RBP: 00007f47a1c53090 R08: 0000000000000000 R09: 0000000000000000 [ 229.173153][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.173164][ T9412] R13: 0000000000000001 R14: 00007f47a0fb6080 R15: 00007ffcf2999808 [ 229.173195][ T9412] [ 229.470326][ T9416] geneve3: entered promiscuous mode [ 229.579636][ T9425] openvswitch: netlink: Message has 8 unknown bytes. [ 229.594068][ T9426] Bluetooth: MGMT ver 1.23 [ 229.841673][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 229.868428][ T9439] openvswitch: netlink: Message has 4 unknown bytes. [ 229.876671][ T9439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.167809][ T9264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.209539][ T9264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.223828][ T9264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.256118][ T9264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.371468][ T9454] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1023'. [ 230.467948][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.532672][ T9264] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.569114][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.576449][ T6356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.631279][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.638595][ T6369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.655577][ T9463] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1028'. [ 230.677981][ T9463] gretap0: entered promiscuous mode [ 230.685012][ T5845] Bluetooth: hci0: command tx timeout [ 230.789037][ T9264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.900295][ T9474] ipt_ECN: cannot use operation on non-tcp rule [ 230.909970][ T9473] ipt_ECN: cannot use operation on non-tcp rule [ 231.308326][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.422351][ T9264] veth0_vlan: entered promiscuous mode [ 231.435388][ T9264] veth1_vlan: entered promiscuous mode [ 231.578145][ T9264] veth0_macvtap: entered promiscuous mode [ 231.602545][ T9264] veth1_macvtap: entered promiscuous mode [ 231.646226][ T9503] netlink: 'syz.4.1041': attribute type 3 has an invalid length. [ 231.668964][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.705670][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.724509][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.743472][ T9505] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 231.759180][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.782069][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.845391][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.861493][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.874227][ T9264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.893241][ T9264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.910569][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.969415][ T9264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.999513][ T9264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.025610][ T9264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.063926][ T9264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.254217][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.281370][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.303748][ T9524] FAULT_INJECTION: forcing a failure. [ 232.303748][ T9524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.344765][ T9524] CPU: 0 UID: 0 PID: 9524 Comm: syz.0.1048 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 232.344796][ T9524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 232.344809][ T9524] Call Trace: [ 232.344816][ T9524] [ 232.344825][ T9524] dump_stack_lvl+0x189/0x250 [ 232.344858][ T9524] ? __lock_acquire+0xaac/0xd20 [ 232.344890][ T9524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.344918][ T9524] ? __pfx__printk+0x10/0x10 [ 232.344939][ T9524] ? __might_fault+0xb0/0x130 [ 232.344983][ T9524] should_fail_ex+0x414/0x560 [ 232.345019][ T9524] _copy_from_iter+0x1db/0x15a0 [ 232.345054][ T9524] ? policy_nodemask+0x27c/0x720 [ 232.345078][ T9524] ? __pfx__copy_from_iter+0x10/0x10 [ 232.345108][ T9524] ? set_page_refcounted+0xa0/0x1e0 [ 232.345135][ T9524] ? page_copy_sane+0x4e/0x280 [ 232.345160][ T9524] copy_page_from_iter+0x7b/0x100 [ 232.345186][ T9524] tun_get_user+0x1b13/0x3c20 [ 232.345218][ T9524] ? tun_get_user+0x687/0x3c20 [ 232.345260][ T9524] ? __pfx_tun_get_user+0x10/0x10 [ 232.345285][ T9524] ? aa_file_perm+0x11f/0xed0 [ 232.345306][ T9524] ? aa_file_perm+0x3e7/0xed0 [ 232.345343][ T9524] ? ref_tracker_alloc+0x318/0x460 [ 232.345366][ T9524] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 232.345392][ T9524] ? tun_get+0x1c/0x2f0 [ 232.345423][ T9524] ? tun_get+0x1c/0x2f0 [ 232.345448][ T9524] ? tun_get+0x1c/0x2f0 [ 232.345479][ T9524] tun_chr_write_iter+0x113/0x200 [ 232.345508][ T9524] vfs_write+0x548/0xa90 [ 232.345536][ T9524] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 232.345564][ T9524] ? __pfx_vfs_write+0x10/0x10 [ 232.345597][ T9524] ? __fget_files+0x2a/0x420 [ 232.345633][ T9524] ksys_write+0x145/0x250 [ 232.345655][ T9524] ? rcu_is_watching+0x15/0xb0 [ 232.345687][ T9524] ? __pfx_ksys_write+0x10/0x10 [ 232.345713][ T9524] ? do_syscall_64+0xba/0x210 [ 232.345746][ T9524] do_syscall_64+0xf6/0x210 [ 232.345773][ T9524] ? clear_bhb_loop+0x45/0xa0 [ 232.345803][ T9524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.345823][ T9524] RIP: 0033:0x7f103f78d41f [ 232.345841][ T9524] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 232.345859][ T9524] RSP: 002b:00007f104060c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 232.345879][ T9524] RAX: ffffffffffffffda RBX: 00007f103f9b5fa0 RCX: 00007f103f78d41f [ 232.345894][ T9524] RDX: 000000000000007d RSI: 0000200000000400 RDI: 00000000000000c8 [ 232.345907][ T9524] RBP: 00007f104060c090 R08: 0000000000000000 R09: 0000000000000000 [ 232.345919][ T9524] R10: 000000000000007d R11: 0000000000000293 R12: 0000000000000001 [ 232.345931][ T9524] R13: 0000000000000000 R14: 00007f103f9b5fa0 R15: 00007ffcfc159db8 [ 232.345969][ T9524] [ 232.346060][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.631297][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.699266][ T9535] FAULT_INJECTION: forcing a failure. [ 232.699266][ T9535] name failslab, interval 1, probability 0, space 0, times 0 [ 232.715397][ T9535] CPU: 1 UID: 0 PID: 9535 Comm: syz.4.1051 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 232.715425][ T9535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 232.715436][ T9535] Call Trace: [ 232.715443][ T9535] [ 232.715451][ T9535] dump_stack_lvl+0x189/0x250 [ 232.715485][ T9535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.715511][ T9535] ? __pfx__printk+0x10/0x10 [ 232.715535][ T9535] ? __pfx___might_resched+0x10/0x10 [ 232.715557][ T9535] should_fail_ex+0x414/0x560 [ 232.715590][ T9535] should_failslab+0xa8/0x100 [ 232.715616][ T9535] __kmalloc_cache_noprof+0x70/0x3d0 [ 232.715638][ T9535] ? call_usermodehelper_setup+0x8e/0x270 [ 232.715664][ T9535] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 232.715692][ T9535] call_usermodehelper_setup+0x8e/0x270 [ 232.715718][ T9535] ? __pfx_free_modprobe_argv+0x10/0x10 [ 232.715747][ T9535] __request_module+0x39f/0x5e0 [ 232.715773][ T9535] ? aa_get_newest_label+0xf7/0x5d0 [ 232.715794][ T9535] ? __pfx___request_module+0x10/0x10 [ 232.715822][ T9535] ? rcu_is_watching+0x15/0xb0 [ 232.715857][ T9535] ? security_capable+0x7e/0x2e0 [ 232.715878][ T9535] ? dev_load+0x21/0x1f0 [ 232.715904][ T9535] dev_load+0x190/0x1f0 [ 232.715929][ T9535] dev_ioctl+0x680/0x1150 [ 232.715970][ T9535] sock_do_ioctl+0x22c/0x300 [ 232.715998][ T9535] ? __pfx_sock_do_ioctl+0x10/0x10 [ 232.716039][ T9535] sock_ioctl+0x576/0x790 [ 232.716064][ T9535] ? __pfx_sock_ioctl+0x10/0x10 [ 232.716090][ T9535] ? __fget_files+0x3a0/0x420 [ 232.716113][ T9535] ? __fget_files+0x2a/0x420 [ 232.716139][ T9535] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.716163][ T9535] ? __pfx_sock_ioctl+0x10/0x10 [ 232.716186][ T9535] __se_sys_ioctl+0xf9/0x170 [ 232.716207][ T9535] do_syscall_64+0xf6/0x210 [ 232.716233][ T9535] ? clear_bhb_loop+0x45/0xa0 [ 232.716256][ T9535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.716274][ T9535] RIP: 0033:0x7f47a0d8e969 [ 232.716291][ T9535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.716307][ T9535] RSP: 002b:00007f47a1c74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.716327][ T9535] RAX: ffffffffffffffda RBX: 00007f47a0fb5fa0 RCX: 00007f47a0d8e969 [ 232.716340][ T9535] RDX: 0000200000000140 RSI: 0000000000008942 RDI: 0000000000000003 [ 232.716351][ T9535] RBP: 00007f47a1c74090 R08: 0000000000000000 R09: 0000000000000000 [ 232.716362][ T9535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.716373][ T9535] R13: 0000000000000000 R14: 00007f47a0fb5fa0 R15: 00007ffcf2999808 [ 232.716402][ T9535] [ 233.085275][ T9540] syz_tun: refused to change device tx_queue_len [ 233.091879][ T9540] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 233.273435][ T9551] FAULT_INJECTION: forcing a failure. [ 233.273435][ T9551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.287876][ T9551] CPU: 0 UID: 0 PID: 9551 Comm: syz.0.1057 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 233.287915][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 233.287927][ T9551] Call Trace: [ 233.287935][ T9551] [ 233.287943][ T9551] dump_stack_lvl+0x189/0x250 [ 233.287976][ T9551] ? __lock_acquire+0xaac/0xd20 [ 233.288006][ T9551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.288035][ T9551] ? __pfx__printk+0x10/0x10 [ 233.288055][ T9551] ? __might_fault+0xb0/0x130 [ 233.288093][ T9551] should_fail_ex+0x414/0x560 [ 233.288130][ T9551] _copy_from_user+0x2d/0xb0 [ 233.288156][ T9551] sock_do_ioctl+0x182/0x300 [ 233.288185][ T9551] ? __pfx_sock_do_ioctl+0x10/0x10 [ 233.288228][ T9551] sock_ioctl+0x576/0x790 [ 233.288255][ T9551] ? __pfx_sock_ioctl+0x10/0x10 [ 233.288285][ T9551] ? __fget_files+0x3a0/0x420 [ 233.288310][ T9551] ? __fget_files+0x2a/0x420 [ 233.288339][ T9551] ? bpf_lsm_file_ioctl+0x9/0x20 [ 233.288366][ T9551] ? __pfx_sock_ioctl+0x10/0x10 [ 233.288391][ T9551] __se_sys_ioctl+0xf9/0x170 [ 233.288414][ T9551] do_syscall_64+0xf6/0x210 [ 233.288442][ T9551] ? clear_bhb_loop+0x45/0xa0 [ 233.288468][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.288487][ T9551] RIP: 0033:0x7f103f78e969 [ 233.288505][ T9551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.288523][ T9551] RSP: 002b:00007f104060c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.288543][ T9551] RAX: ffffffffffffffda RBX: 00007f103f9b5fa0 RCX: 00007f103f78e969 [ 233.288558][ T9551] RDX: 0000200000000100 RSI: 0000000000008922 RDI: 0000000000000003 [ 233.288572][ T9551] RBP: 00007f104060c090 R08: 0000000000000000 R09: 0000000000000000 [ 233.288584][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.288596][ T9551] R13: 0000000000000000 R14: 00007f103f9b5fa0 R15: 00007ffcfc159db8 [ 233.288628][ T9551] [ 233.518290][ T9556] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1059'. [ 233.618441][ T9557] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 233.631023][ T9560] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1061'. [ 233.656719][ T9557] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1060'. [ 234.016128][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 234.301674][ T9589] openvswitch: netlink: Message has 170 unknown bytes. [ 234.309467][ T9585] block nbd7: server does not support multiple connections per device. [ 234.318343][ T9585] block nbd7: shutting down sockets [ 234.491808][ T9595] vxcan1 speed is unknown, defaulting to 1000 [ 234.879196][ T6356] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.019118][ T6356] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.159210][ T6356] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.296418][ T6356] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.471983][ T6356] bridge_slave_1: left allmulticast mode [ 235.482122][ T6356] bridge_slave_1: left promiscuous mode [ 235.489528][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.502055][ T6356] bridge_slave_0: left allmulticast mode [ 235.508676][ T6356] bridge_slave_0: left promiscuous mode [ 235.514503][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.851185][ T9613] FAULT_INJECTION: forcing a failure. [ 235.851185][ T9613] name failslab, interval 1, probability 0, space 0, times 0 [ 235.864608][ T9613] CPU: 1 UID: 0 PID: 9613 Comm: syz.4.1078 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 235.864637][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 235.864650][ T9613] Call Trace: [ 235.864658][ T9613] [ 235.864666][ T9613] dump_stack_lvl+0x189/0x250 [ 235.864709][ T9613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.864738][ T9613] ? __pfx__printk+0x10/0x10 [ 235.864763][ T9613] ? __pfx___might_resched+0x10/0x10 [ 235.864787][ T9613] should_fail_ex+0x414/0x560 [ 235.864822][ T9613] should_failslab+0xa8/0x100 [ 235.864850][ T9613] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 235.864876][ T9613] ? __alloc_skb+0x112/0x2d0 [ 235.864900][ T9613] __alloc_skb+0x112/0x2d0 [ 235.864922][ T9613] virtio_transport_alloc_skb+0x4c/0xe60 [ 235.864982][ T9613] virtio_transport_send_pkt_info+0x617/0xf00 [ 235.865030][ T9613] virtio_transport_stream_dequeue+0x85d/0x9b0 [ 235.865066][ T9613] ? __pfx_virtio_transport_stream_dequeue+0x10/0x10 [ 235.865086][ T9613] ? vsock_connectible_wait_data+0x4e4/0x520 [ 235.865130][ T9613] __vsock_connectible_recvmsg+0x78e/0xb70 [ 235.865169][ T9613] ? __pfx___vsock_connectible_recvmsg+0x10/0x10 [ 235.865196][ T9613] ? aa_sk_perm+0x81e/0x950 [ 235.865232][ T9613] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.865264][ T9613] ? __pfx_autoremove_wake_function+0x10/0x10 [ 235.865290][ T9613] ? aa_sock_msg_perm+0x94/0x160 [ 235.865312][ T9613] ? vsock_connectible_recvmsg+0xba/0xe0 [ 235.865337][ T9613] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 235.865362][ T9613] sock_recvmsg+0x229/0x270 [ 235.865394][ T9613] ____sys_recvmsg+0x1c9/0x460 [ 235.865428][ T9613] ? __pfx_____sys_recvmsg+0x10/0x10 [ 235.865469][ T9613] ? import_iovec+0x74/0xa0 [ 235.865500][ T9613] ___sys_recvmsg+0x1b5/0x510 [ 235.865529][ T9613] ? __pfx____sys_recvmsg+0x10/0x10 [ 235.865581][ T9613] ? __fget_files+0x3a0/0x420 [ 235.865620][ T9613] __x64_sys_recvmsg+0x198/0x260 [ 235.865646][ T9613] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 235.865694][ T9613] ? do_syscall_64+0xba/0x210 [ 235.865726][ T9613] do_syscall_64+0xf6/0x210 [ 235.865753][ T9613] ? clear_bhb_loop+0x45/0xa0 [ 235.865779][ T9613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.865798][ T9613] RIP: 0033:0x7f47a0d8e969 [ 235.865816][ T9613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.865833][ T9613] RSP: 002b:00007f47a1c74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 235.865855][ T9613] RAX: ffffffffffffffda RBX: 00007f47a0fb5fa0 RCX: 00007f47a0d8e969 [ 235.865869][ T9613] RDX: 0000000000000300 RSI: 0000200000000200 RDI: 0000000000000005 [ 235.865882][ T9613] RBP: 00007f47a1c74090 R08: 0000000000000000 R09: 0000000000000000 [ 235.865894][ T9613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.865906][ T9613] R13: 0000000000000000 R14: 00007f47a0fb5fa0 R15: 00007ffcf2999808 [ 235.865938][ T9613] [ 236.329927][ T6356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.330931][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.348404][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.357392][ T6356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.366819][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.369025][ T6356] bond0 (unregistering): Released all slaves [ 236.382091][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.393896][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.887391][ T9617] vxcan1 speed is unknown, defaulting to 1000 [ 238.524573][ T55] Bluetooth: hci0: command tx timeout [ 240.319703][ T9646] netem: incorrect gi model size [ 240.332196][ T9646] netem: change failed [ 240.450500][ T9663] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1092'. [ 240.611877][ T55] Bluetooth: hci0: command tx timeout [ 240.613307][ T9666] pim6reg1: entered promiscuous mode [ 240.654566][ T9666] pim6reg1: entered allmulticast mode [ 240.862962][ T9676] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1096'. [ 241.078732][ T9682] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1099'. [ 241.145279][ T9664] vxcan1 speed is unknown, defaulting to 1000 [ 241.308212][ T9677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.451821][ T9690] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 241.469355][ T9690] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1101'. [ 241.616926][ T9692] macvtap1: entered promiscuous mode [ 241.630267][ T9692] vlan0: entered promiscuous mode [ 241.639701][ T9692] macvtap1: entered allmulticast mode [ 241.656149][ T9692] vlan0: entered allmulticast mode [ 241.661397][ T9692] veth0_vlan: entered allmulticast mode [ 241.677655][ T9692] vlan0: left allmulticast mode [ 241.695538][ T9692] veth0_vlan: left allmulticast mode [ 241.704298][ T9692] vlan0: left promiscuous mode [ 241.850223][ T6356] hsr_slave_0: left promiscuous mode [ 241.870182][ T6356] hsr_slave_1: left promiscuous mode [ 241.893301][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.927000][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.938551][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.948423][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.004702][ T6356] veth1_macvtap: left promiscuous mode [ 242.010368][ T6356] veth0_macvtap: left promiscuous mode [ 242.017247][ T6356] veth1_vlan: left promiscuous mode [ 242.022716][ T6356] veth0_vlan: left promiscuous mode [ 242.477948][ T6356] team0 (unregistering): Port device team_slave_1 removed [ 242.512911][ T6356] team0 (unregistering): Port device team_slave_0 removed [ 242.698171][ T55] Bluetooth: hci0: command tx timeout [ 242.911343][ T9709] vlan3: entered promiscuous mode [ 242.944458][ T9709] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 242.951797][ T9709] vlan3: entered allmulticast mode [ 242.964546][ T9709] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 243.060607][ T9617] chnl_net:caif_netlink_parms(): no params data found [ 243.131522][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 243.316343][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1108'. [ 243.398674][ T55] block nbd8: Receive control failed (result -32) [ 243.520625][ T9728] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1112'. [ 243.625247][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1111'. [ 243.663009][ T9733] openvswitch: netlink: Flow key attr not present in new flow. [ 244.338200][ T6356] bond0 (unregistering): Released all slaves [ 244.545263][ T9747] FAULT_INJECTION: forcing a failure. [ 244.545263][ T9747] name failslab, interval 1, probability 0, space 0, times 0 [ 244.558079][ T9747] CPU: 1 UID: 0 PID: 9747 Comm: syz.2.1119 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 244.558107][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 244.558131][ T9747] Call Trace: [ 244.558140][ T9747] [ 244.558149][ T9747] dump_stack_lvl+0x189/0x250 [ 244.558186][ T9747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.558216][ T9747] ? __pfx__printk+0x10/0x10 [ 244.558243][ T9747] ? __pfx___might_resched+0x10/0x10 [ 244.558267][ T9747] should_fail_ex+0x414/0x560 [ 244.558304][ T9747] should_failslab+0xa8/0x100 [ 244.558332][ T9747] __kmalloc_noprof+0xcb/0x4f0 [ 244.558356][ T9747] ? __kasan_kmalloc+0x93/0xb0 [ 244.558377][ T9747] ? nla_strdup+0x9d/0x140 [ 244.558404][ T9747] nla_strdup+0x9d/0x140 [ 244.558428][ T9747] nf_tables_newtable+0x491/0x1890 [ 244.558448][ T9747] ? nfnetlink_subsys_unregister+0x152/0x1b0 [ 244.558495][ T9747] nfnetlink_rcv+0x113f/0x2530 [ 244.558554][ T9747] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 244.558576][ T9747] ? stack_depot_save_flags+0x40/0x910 [ 244.558683][ T9747] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.558713][ T9747] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.558751][ T9747] netlink_unicast+0x758/0x8d0 [ 244.558791][ T9747] netlink_sendmsg+0x805/0xb30 [ 244.558821][ T9747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.558844][ T9747] ? aa_sock_msg_perm+0x94/0x160 [ 244.558873][ T9747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.558895][ T9747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.558916][ T9747] __sock_sendmsg+0x219/0x270 [ 244.558948][ T9747] ____sys_sendmsg+0x505/0x830 [ 244.558976][ T9747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.559009][ T9747] ? import_iovec+0x74/0xa0 [ 244.559039][ T9747] ___sys_sendmsg+0x21f/0x2a0 [ 244.559064][ T9747] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.559127][ T9747] ? __fget_files+0x2a/0x420 [ 244.559152][ T9747] ? __fget_files+0x3a0/0x420 [ 244.559189][ T9747] __x64_sys_sendmsg+0x19b/0x260 [ 244.559215][ T9747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.559257][ T9747] ? do_syscall_64+0xba/0x210 [ 244.559288][ T9747] do_syscall_64+0xf6/0x210 [ 244.559315][ T9747] ? clear_bhb_loop+0x45/0xa0 [ 244.559340][ T9747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.559359][ T9747] RIP: 0033:0x7f7b0d98e969 [ 244.559378][ T9747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.559395][ T9747] RSP: 002b:00007f7b0e8e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.559416][ T9747] RAX: ffffffffffffffda RBX: 00007f7b0dbb5fa0 RCX: 00007f7b0d98e969 [ 244.559431][ T9747] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 244.559444][ T9747] RBP: 00007f7b0e8e2090 R08: 0000000000000000 R09: 0000000000000000 [ 244.559456][ T9747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.559468][ T9747] R13: 0000000000000000 R14: 00007f7b0dbb5fa0 R15: 00007ffcc3822718 [ 244.559500][ T9747] [ 245.131765][ T9753] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1123'. [ 245.507249][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.516374][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.524334][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.536519][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.549701][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.561074][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.569183][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.576985][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.621380][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.644812][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.732258][ T9763] vxcan1 speed is unknown, defaulting to 1000 [ 246.117474][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 246.164853][ T9782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1131'. [ 246.341948][ T9764] vxcan1 speed is unknown, defaulting to 1000 [ 246.502620][ T9794] netlink: 'syz.4.1136': attribute type 4 has an invalid length. [ 246.715954][ T6356] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.735128][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1136'. [ 246.770834][ T9794] netlink: 'syz.4.1136': attribute type 7 has an invalid length. [ 246.779492][ T9794] netlink: 'syz.4.1136': attribute type 8 has an invalid length. [ 246.791452][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 246.800481][ T9789] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1134'. [ 246.864645][ T9806] nbd: socks must be embedded in a SOCK_ITEM attr [ 246.883206][ T9794] bridge0: entered promiscuous mode [ 246.900624][ T9794] ip6gretap0: entered promiscuous mode [ 246.917800][ T9794] bridge0: left promiscuous mode [ 246.940774][ T9794] ip6gretap0: left promiscuous mode [ 246.980168][ T6356] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.170620][ T9792] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1134'. [ 247.182145][ T9815] FAULT_INJECTION: forcing a failure. [ 247.182145][ T9815] name failslab, interval 1, probability 0, space 0, times 0 [ 247.197222][ T9815] CPU: 1 UID: 0 PID: 9815 Comm: syz.4.1140 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 247.197251][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 247.197264][ T9815] Call Trace: [ 247.197272][ T9815] [ 247.197280][ T9815] dump_stack_lvl+0x189/0x250 [ 247.197317][ T9815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.197346][ T9815] ? __pfx__printk+0x10/0x10 [ 247.197372][ T9815] ? __pfx___might_resched+0x10/0x10 [ 247.197391][ T9815] ? fs_reclaim_acquire+0x7d/0x100 [ 247.197425][ T9815] should_fail_ex+0x414/0x560 [ 247.197460][ T9815] should_failslab+0xa8/0x100 [ 247.197487][ T9815] __kmalloc_cache_noprof+0x70/0x3d0 [ 247.197511][ T9815] ? __request_module+0x2b5/0x5e0 [ 247.197541][ T9815] __request_module+0x2b5/0x5e0 [ 247.197573][ T9815] ? __pfx___request_module+0x10/0x10 [ 247.197611][ T9815] ? rtnl_link_ops_get+0x23/0x250 [ 247.197628][ T9815] ? rtnl_link_ops_get+0x23/0x250 [ 247.197648][ T9815] ? rtnl_link_ops_get+0x215/0x250 [ 247.197669][ T9815] rtnl_newlink+0x64f/0x1c70 [ 247.197717][ T9815] ? __pfx_rtnl_newlink+0x10/0x10 [ 247.197746][ T9815] ? is_bpf_text_address+0x26/0x2b0 [ 247.197777][ T9815] ? is_bpf_text_address+0x292/0x2b0 [ 247.197807][ T9815] ? __lock_acquire+0xaac/0xd20 [ 247.197846][ T9815] ? __lock_acquire+0xaac/0xd20 [ 247.197892][ T9815] ? is_bpf_text_address+0x26/0x2b0 [ 247.197922][ T9815] ? is_bpf_text_address+0x292/0x2b0 [ 247.197947][ T9815] ? is_bpf_text_address+0x26/0x2b0 [ 247.197980][ T9815] ? aa_get_newest_label+0xf7/0x5d0 [ 247.198003][ T9815] ? __lock_acquire+0xaac/0xd20 [ 247.198053][ T9815] ? __pfx_rtnl_newlink+0x10/0x10 [ 247.198081][ T9815] rtnetlink_rcv_msg+0x7cc/0xb70 [ 247.198107][ T9815] ? kasan_save_track+0x4f/0x80 [ 247.198130][ T9815] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 247.198157][ T9815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 247.198186][ T9815] ? __lock_acquire+0xaac/0xd20 [ 247.198224][ T9815] netlink_rcv_skb+0x219/0x490 [ 247.198255][ T9815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 247.198284][ T9815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.198332][ T9815] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.198361][ T9815] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.198395][ T9815] netlink_unicast+0x758/0x8d0 [ 247.198434][ T9815] netlink_sendmsg+0x805/0xb30 [ 247.198463][ T9815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.198487][ T9815] ? aa_sock_msg_perm+0x94/0x160 [ 247.198509][ T9815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.198531][ T9815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.198551][ T9815] __sock_sendmsg+0x219/0x270 [ 247.198582][ T9815] ____sys_sendmsg+0x505/0x830 [ 247.198608][ T9815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.198639][ T9815] ? import_iovec+0x74/0xa0 [ 247.198668][ T9815] ___sys_sendmsg+0x21f/0x2a0 [ 247.198691][ T9815] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.198758][ T9815] ? __fget_files+0x2a/0x420 [ 247.198780][ T9815] ? __fget_files+0x3a0/0x420 [ 247.198816][ T9815] __x64_sys_sendmsg+0x19b/0x260 [ 247.198840][ T9815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.198879][ T9815] ? do_syscall_64+0xba/0x210 [ 247.198908][ T9815] do_syscall_64+0xf6/0x210 [ 247.198933][ T9815] ? clear_bhb_loop+0x45/0xa0 [ 247.198957][ T9815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.198975][ T9815] RIP: 0033:0x7f47a0d8e969 [ 247.198993][ T9815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.199009][ T9815] RSP: 002b:00007f47a1c74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.199030][ T9815] RAX: ffffffffffffffda RBX: 00007f47a0fb5fa0 RCX: 00007f47a0d8e969 [ 247.199043][ T9815] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 247.199055][ T9815] RBP: 00007f47a1c74090 R08: 0000000000000000 R09: 0000000000000000 [ 247.199067][ T9815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.199078][ T9815] R13: 0000000000000000 R14: 00007f47a0fb5fa0 R15: 00007ffcf2999808 [ 247.199110][ T9815] [ 247.724916][ T5845] Bluetooth: hci3: command tx timeout [ 247.772472][ T6356] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.844722][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 247.981078][ T6356] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.245329][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 248.254261][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 248.528574][ T9763] chnl_net:caif_netlink_parms(): no params data found [ 248.608056][ T9844] Bluetooth: MGMT ver 1.23 [ 248.646092][ T9848] tipc: Started in network mode [ 248.651034][ T9848] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 248.660689][ T9848] tipc: Enabling of bearer rejected, failed to enable media [ 248.730526][ T6356] bridge_slave_1: left allmulticast mode [ 248.770808][ T6356] bridge_slave_1: left promiscuous mode [ 248.780370][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.797438][ T6356] bridge_slave_0: left allmulticast mode [ 248.803222][ T6356] bridge_slave_0: left promiscuous mode [ 248.809713][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.834250][ T9856] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1154'. [ 249.588767][ T6356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.599674][ T6356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.611204][ T6356] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 249.625159][ T6356] bond0 (unregistering): (slave bond3): Releasing backup interface [ 249.633929][ T6356] bond0 (unregistering): Released all slaves [ 249.665888][ T6356] bond1 (unregistering): Released all slaves [ 249.680080][ T6356] bond2 (unregistering): Released all slaves [ 249.790069][ T6356] bond3 (unregistering): Released all slaves [ 249.804767][ T5845] Bluetooth: hci3: command tx timeout [ 249.836106][ T9856] vti0: entered promiscuous mode [ 249.965940][ T6356] IPVS: stopping backup sync thread 8358 ... [ 250.039785][ T9874] netlink: 'syz.0.1156': attribute type 2 has an invalid length. [ 250.053815][ T9874] netlink: 'syz.0.1156': attribute type 1 has an invalid length. [ 250.189402][ T9867] syzkaller0: entered promiscuous mode [ 250.199287][ T9867] syzkaller0: entered allmulticast mode [ 250.206386][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.213578][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.235285][ T9763] bridge_slave_0: entered allmulticast mode [ 250.243111][ T9763] bridge_slave_0: entered promiscuous mode [ 251.707848][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.716572][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.723767][ T9763] bridge_slave_1: entered allmulticast mode [ 251.732545][ T9763] bridge_slave_1: entered promiscuous mode [ 251.884921][ T5845] Bluetooth: hci3: command tx timeout [ 251.915377][ T6356] mac80211_hwsim hwsim7 wlan0 (unregistering): left allmulticast mode [ 251.960013][ T9899] netlink: 'syz.4.1163': attribute type 4 has an invalid length. [ 252.011747][ T9763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.032072][ T9763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.061709][ T9904] netlink: 'syz.4.1165': attribute type 4 has an invalid length. [ 252.152833][ T9904] FAULT_INJECTION: forcing a failure. [ 252.152833][ T9904] name failslab, interval 1, probability 0, space 0, times 0 [ 252.171431][ T9904] CPU: 0 UID: 0 PID: 9904 Comm: syz.4.1165 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 252.171462][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 252.171475][ T9904] Call Trace: [ 252.171483][ T9904] [ 252.171492][ T9904] dump_stack_lvl+0x189/0x250 [ 252.171530][ T9904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.171558][ T9904] ? __pfx__printk+0x10/0x10 [ 252.171581][ T9904] ? __lock_acquire+0xaac/0xd20 [ 252.171621][ T9904] should_fail_ex+0x414/0x560 [ 252.171658][ T9904] should_failslab+0xa8/0x100 [ 252.171686][ T9904] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 252.171710][ T9904] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 252.171735][ T9904] ? __alloc_skb+0x112/0x2d0 [ 252.171758][ T9904] __alloc_skb+0x112/0x2d0 [ 252.171780][ T9904] rtmsg_ifinfo_build_skb+0x84/0x260 [ 252.171814][ T9904] rtmsg_ifinfo+0x8c/0x1a0 [ 252.171846][ T9904] __dev_notify_flags+0xf4/0x2e0 [ 252.171869][ T9904] ? __pfx___dev_notify_flags+0x10/0x10 [ 252.171887][ T9904] ? __dev_change_flags+0x4cc/0x6d0 [ 252.171913][ T9904] ? __pfx___dev_change_flags+0x10/0x10 [ 252.171932][ T9904] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.171967][ T9904] netif_change_flags+0xe8/0x1a0 [ 252.171992][ T9904] do_setlink+0xcb9/0x40d0 [ 252.172028][ T9904] ? __pfx_do_setlink+0x10/0x10 [ 252.172044][ T9904] ? do_raw_spin_lock+0x121/0x290 [ 252.172080][ T9904] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.172104][ T9904] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 252.172127][ T9904] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 252.172155][ T9904] ? rcu_is_watching+0x15/0xb0 [ 252.172188][ T9904] ? __mutex_lock+0xa6d/0xe80 [ 252.172214][ T9904] ? __mutex_lock+0x51b/0xe80 [ 252.172245][ T9904] ? rtnl_setlink+0x4ea/0x900 [ 252.172277][ T9904] ? __pfx___mutex_lock+0x10/0x10 [ 252.172313][ T9904] ? ns_capable+0x8a/0xf0 [ 252.172339][ T9904] rtnl_setlink+0x604/0x900 [ 252.172375][ T9904] ? __pfx_rtnl_setlink+0x10/0x10 [ 252.172402][ T9904] ? is_bpf_text_address+0x26/0x2b0 [ 252.172435][ T9904] ? __lock_acquire+0xaac/0xd20 [ 252.172558][ T9904] ? __pfx_rtnl_setlink+0x10/0x10 [ 252.172590][ T9904] rtnetlink_rcv_msg+0x7cc/0xb70 [ 252.172618][ T9904] ? kasan_save_track+0x4f/0x80 [ 252.172642][ T9904] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 252.172669][ T9904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.172699][ T9904] ? __lock_acquire+0xaac/0xd20 [ 252.172740][ T9904] netlink_rcv_skb+0x219/0x490 [ 252.172771][ T9904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.172802][ T9904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.172853][ T9904] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.172882][ T9904] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.172923][ T9904] netlink_unicast+0x758/0x8d0 [ 252.172960][ T9904] netlink_sendmsg+0x805/0xb30 [ 252.173007][ T9904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.173030][ T9904] ? aa_sock_msg_perm+0x94/0x160 [ 252.173051][ T9904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.173072][ T9904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.173092][ T9904] __sock_sendmsg+0x219/0x270 [ 252.173123][ T9904] sock_write_iter+0x258/0x330 [ 252.173152][ T9904] ? __pfx_sock_write_iter+0x10/0x10 [ 252.173192][ T9904] ? __pfx_aa_file_perm+0x10/0x10 [ 252.173222][ T9904] do_iter_readv_writev+0x56b/0x7f0 [ 252.173251][ T9904] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 252.173281][ T9904] ? bpf_lsm_file_permission+0x9/0x20 [ 252.173306][ T9904] ? security_file_permission+0x75/0x290 [ 252.173335][ T9904] ? rw_verify_area+0x258/0x650 [ 252.173361][ T9904] vfs_writev+0x306/0x9a0 [ 252.173388][ T9904] ? vfs_write+0x8d8/0xa90 [ 252.173417][ T9904] ? __pfx_vfs_writev+0x10/0x10 [ 252.173462][ T9904] ? __fget_files+0x2a/0x420 [ 252.173493][ T9904] ? __fget_files+0x3a0/0x420 [ 252.173517][ T9904] ? __fget_files+0x2a/0x420 [ 252.173552][ T9904] do_writev+0x14d/0x2d0 [ 252.173593][ T9904] ? __pfx_do_writev+0x10/0x10 [ 252.173625][ T9904] ? do_syscall_64+0xba/0x210 [ 252.173656][ T9904] do_syscall_64+0xf6/0x210 [ 252.173683][ T9904] ? clear_bhb_loop+0x45/0xa0 [ 252.173708][ T9904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.173728][ T9904] RIP: 0033:0x7f47a0d8e969 [ 252.173746][ T9904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.173764][ T9904] RSP: 002b:00007f47a1c74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 252.173785][ T9904] RAX: ffffffffffffffda RBX: 00007f47a0fb5fa0 RCX: 00007f47a0d8e969 [ 252.173800][ T9904] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000008 [ 252.173813][ T9904] RBP: 00007f47a1c74090 R08: 0000000000000000 R09: 0000000000000000 [ 252.173825][ T9904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.173837][ T9904] R13: 0000000000000000 R14: 00007f47a0fb5fa0 R15: 00007ffcf2999808 [ 252.173870][ T9904] [ 252.664318][ T9764] chnl_net:caif_netlink_parms(): no params data found [ 253.009885][ T9763] team0: Port device team_slave_0 added [ 253.114344][ T6356] hsr_slave_0: left promiscuous mode [ 253.133934][ T6356] hsr_slave_1: left promiscuous mode [ 253.134649][ T9920] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 253.145403][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.174665][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.188139][ T9923] __nla_validate_parse: 6 callbacks suppressed [ 253.188159][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 253.203856][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.224139][ T9923] openvswitch: netlink: Unknown nsh attribute 0 [ 253.226928][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.237886][ T9923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.263901][ T6356] veth1_macvtap: left promiscuous mode [ 253.269679][ T6356] veth0_macvtap: left promiscuous mode [ 253.281522][ T6356] veth1_vlan: left promiscuous mode [ 253.287158][ T6356] veth0_vlan: left promiscuous mode [ 253.400784][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 253.417953][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 253.573133][ T6365] smc: removing ib device syz1 [ 253.893763][ T6356] team0 (unregistering): Port device team_slave_1 removed [ 253.947455][ T6356] team0 (unregistering): Port device team_slave_0 removed [ 253.975022][ T5845] Bluetooth: hci3: command tx timeout [ 254.397004][ T9763] team0: Port device team_slave_1 added [ 254.420999][ T47] syz1: Port: 1 Link DOWN [ 254.760247][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.789461][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.823018][ T9956] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1178'. [ 254.866768][ T9763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.901343][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.908765][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.954579][ T9763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.975205][ T9764] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.986966][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.007771][ T9764] bridge_slave_0: entered allmulticast mode [ 255.026773][ T9764] bridge_slave_0: entered promiscuous mode [ 255.066915][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.074101][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.108736][ T9764] bridge_slave_1: entered allmulticast mode [ 255.191735][ T9764] bridge_slave_1: entered promiscuous mode [ 255.463779][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 255.493480][ T9965] netlink: 'syz.2.1179': attribute type 29 has an invalid length. [ 255.543576][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 255.651505][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.400532][ T9976] netlink: 'syz.4.1183': attribute type 21 has an invalid length. [ 256.442598][ T9976] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1183'. [ 256.593684][ T9764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.634728][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 256.671891][ T9763] hsr_slave_0: entered promiscuous mode [ 256.679163][ T9763] hsr_slave_1: entered promiscuous mode [ 256.692118][ T9763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.700768][ T9763] Cannot create hsr debugfs directory [ 256.707323][ T9976] netlink: 'syz.4.1183': attribute type 4 has an invalid length. [ 256.715741][ T9976] netlink: 'syz.4.1183': attribute type 3 has an invalid length. [ 256.724263][ T9976] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1183'. [ 256.762705][ T9764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.887123][ T9985] FAULT_INJECTION: forcing a failure. [ 256.887123][ T9985] name failslab, interval 1, probability 0, space 0, times 0 [ 256.925918][ T9987] FAULT_INJECTION: forcing a failure. [ 256.925918][ T9987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.932294][ T9982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.945279][ T9987] CPU: 0 UID: 0 PID: 9987 Comm: syz.4.1188 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 256.945314][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 256.945327][ T9987] Call Trace: [ 256.945337][ T9987] [ 256.945347][ T9987] dump_stack_lvl+0x189/0x250 [ 256.945388][ T9987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.945419][ T9987] ? __pfx__printk+0x10/0x10 [ 256.945456][ T9987] should_fail_ex+0x414/0x560 [ 256.945496][ T9987] _copy_to_user+0x31/0xb0 [ 256.945527][ T9987] simple_read_from_buffer+0xe1/0x170 [ 256.945559][ T9987] proc_fail_nth_read+0x1df/0x250 [ 256.945593][ T9987] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.945627][ T9987] ? rw_verify_area+0x258/0x650 [ 256.945650][ T9987] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.945680][ T9987] vfs_read+0x1fd/0x980 [ 256.945710][ T9987] ? __pfx___mutex_lock+0x10/0x10 [ 256.945739][ T9987] ? __pfx_vfs_read+0x10/0x10 [ 256.945765][ T9987] ? __fget_files+0x2a/0x420 [ 256.945797][ T9987] ? __fget_files+0x3a0/0x420 [ 256.945823][ T9987] ? __fget_files+0x2a/0x420 [ 256.945860][ T9987] ksys_read+0x145/0x250 [ 256.945883][ T9987] ? rcu_is_watching+0x15/0xb0 [ 256.945918][ T9987] ? __pfx_ksys_read+0x10/0x10 [ 256.945947][ T9987] ? do_syscall_64+0xba/0x210 [ 256.945980][ T9987] do_syscall_64+0xf6/0x210 [ 256.946009][ T9987] ? clear_bhb_loop+0x45/0xa0 [ 256.946042][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.946063][ T9987] RIP: 0033:0x7f47a0d8d37c [ 256.946083][ T9987] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 256.946102][ T9987] RSP: 002b:00007f47a1c74030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.946124][ T9987] RAX: ffffffffffffffda RBX: 00007f47a0fb5fa0 RCX: 00007f47a0d8d37c [ 256.946140][ T9987] RDX: 000000000000000f RSI: 00007f47a1c740a0 RDI: 0000000000000003 [ 256.946153][ T9987] RBP: 00007f47a1c74090 R08: 0000000000000000 R09: 0000000000000000 [ 256.946167][ T9987] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.946180][ T9987] R13: 0000000000000000 R14: 00007f47a0fb5fa0 R15: 00007ffcf2999808 [ 256.946215][ T9987] [ 256.982368][ T9985] CPU: 0 UID: 0 PID: 9985 Comm: syz.0.1187 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 256.982402][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 256.982416][ T9985] Call Trace: [ 256.982425][ T9985] [ 256.982434][ T9985] dump_stack_lvl+0x189/0x250 [ 256.982477][ T9985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.982509][ T9985] ? __pfx__printk+0x10/0x10 [ 256.982548][ T9985] should_fail_ex+0x414/0x560 [ 256.982588][ T9985] should_failslab+0xa8/0x100 [ 256.982619][ T9985] __kmalloc_cache_noprof+0x70/0x3d0 [ 256.982646][ T9985] ? sctp_add_bind_addr+0x8c/0x370 [ 256.982681][ T9985] sctp_add_bind_addr+0x8c/0x370 [ 256.982715][ T9985] sctp_copy_local_addr_list+0x30b/0x4e0 [ 256.982749][ T9985] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 256.982778][ T9985] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 256.982809][ T9985] ? sctp_v6_is_any+0x64/0x80 [ 256.982843][ T9985] ? sctp_copy_one_addr+0x93/0x360 [ 256.982877][ T9985] sctp_bind_addr_copy+0xb3/0x3c0 [ 256.982906][ T9985] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 256.982936][ T9985] sctp_connect_new_asoc+0x2e0/0x690 [ 256.982962][ T9985] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 256.982982][ T9985] ? __local_bh_enable_ip+0x12d/0x1c0 [ 256.983031][ T9985] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 256.983057][ T9985] ? security_sctp_bind_connect+0x7e/0x2e0 [ 256.983092][ T9985] sctp_sendmsg+0x155c/0x2810 [ 256.983127][ T9985] ? __pfx_sctp_sendmsg+0x10/0x10 [ 256.983151][ T9985] ? aa_sk_perm+0x81e/0x950 [ 256.983191][ T9985] ? __pfx_aa_sk_perm+0x10/0x10 [ 256.983228][ T9985] ? sock_rps_record_flow+0x19/0x410 [ 256.983259][ T9985] ? inet_sendmsg+0x2f4/0x370 [ 256.983290][ T9985] __sock_sendmsg+0x19c/0x270 [ 256.983325][ T9985] __sys_sendto+0x3bd/0x520 [ 256.983354][ T9985] ? __pfx___sys_sendto+0x10/0x10 [ 256.983371][ T9985] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 256.983416][ T9985] ? __fget_files+0x3a0/0x420 [ 256.983457][ T9985] ? ksys_write+0x1f0/0x250 [ 256.983479][ T9985] ? rcu_is_watching+0x15/0xb0 [ 256.983521][ T9985] __x64_sys_sendto+0xde/0x100 [ 256.983548][ T9985] do_syscall_64+0xf6/0x210 [ 256.983578][ T9985] ? clear_bhb_loop+0x45/0xa0 [ 256.983604][ T9985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.983627][ T9985] RIP: 0033:0x7f103f78e969 [ 256.983646][ T9985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.983664][ T9985] RSP: 002b:00007f104060c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 256.983688][ T9985] RAX: ffffffffffffffda RBX: 00007f103f9b5fa0 RCX: 00007f103f78e969 [ 256.983704][ T9985] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000003 [ 256.983718][ T9985] RBP: 00007f104060c090 R08: 000020000005ffe4 R09: 000000000000001c [ 256.983731][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.983744][ T9985] R13: 0000000000000000 R14: 00007f103f9b5fa0 R15: 00007ffcfc159db8 [ 256.983779][ T9985] [ 257.305805][ T9993] netlink: 'syz.4.1190': attribute type 1 has an invalid length. [ 257.317024][ T9982] team0: Port device bond1 added [ 257.357955][ T9993] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1190'. [ 257.607778][ T9764] team0: Port device team_slave_0 added [ 257.682651][ T9764] team0: Port device team_slave_1 added [ 257.822515][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.843743][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.872849][ T9764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.903223][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.916886][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.947727][ T9764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.103762][ T9764] hsr_slave_0: entered promiscuous mode [ 258.110979][ T9764] hsr_slave_1: entered promiscuous mode [ 258.117524][ T9764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.125177][ T9764] Cannot create hsr debugfs directory [ 258.300133][T10029] __nla_validate_parse: 4 callbacks suppressed [ 258.300161][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 258.634036][ T9763] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.644306][T10033] netlink: 'syz.0.1201': attribute type 1 has an invalid length. [ 258.711627][ T9763] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.733169][ T9763] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.771589][ T9763] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.953017][ T9764] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 258.966734][T10045] FAULT_INJECTION: forcing a failure. [ 258.966734][T10045] name failslab, interval 1, probability 0, space 0, times 0 [ 258.979702][T10045] CPU: 1 UID: 0 PID: 10045 Comm: syz.0.1205 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 258.979722][T10045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 258.979732][T10045] Call Trace: [ 258.979738][T10045] [ 258.979744][T10045] dump_stack_lvl+0x189/0x250 [ 258.979771][T10045] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 258.979788][T10045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.979809][T10045] ? __pfx__printk+0x10/0x10 [ 258.979821][T10045] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 258.979847][T10045] should_fail_ex+0x414/0x560 [ 258.979873][T10045] should_failslab+0xa8/0x100 [ 258.979900][T10045] kmem_cache_alloc_noprof+0x73/0x3c0 [ 258.979918][T10045] ? dst_alloc+0x105/0x170 [ 258.979938][T10045] dst_alloc+0x105/0x170 [ 258.979958][T10045] xfrm_alloc_dst+0x76/0x160 [ 258.979975][T10045] xfrm_lookup_with_ifid+0x77e/0x1a70 [ 258.980009][T10045] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 258.980036][T10045] ? __lock_acquire+0xaac/0xd20 [ 258.980067][T10045] xfrm_lookup_route+0x3c/0x1c0 [ 258.980092][T10045] __ip4_datagram_connect+0x965/0x1230 [ 258.980124][T10045] udp_connect+0x33/0x1f0 [ 258.980140][T10045] __sys_connect+0x313/0x440 [ 258.980163][T10045] ? __fget_files+0x3a0/0x420 [ 258.980182][T10045] ? __pfx___sys_connect+0x10/0x10 [ 258.980222][T10045] __x64_sys_connect+0x7a/0x90 [ 258.980245][T10045] do_syscall_64+0xf6/0x210 [ 258.980266][T10045] ? clear_bhb_loop+0x45/0xa0 [ 258.980284][T10045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.980298][T10045] RIP: 0033:0x7f103f78e969 [ 258.980312][T10045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.980324][T10045] RSP: 002b:00007f104060c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 258.980339][T10045] RAX: ffffffffffffffda RBX: 00007f103f9b5fa0 RCX: 00007f103f78e969 [ 258.980350][T10045] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000005 [ 258.980359][T10045] RBP: 00007f104060c090 R08: 0000000000000000 R09: 0000000000000000 [ 258.980367][T10045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.980376][T10045] R13: 0000000000000000 R14: 00007f103f9b5fa0 R15: 00007ffcfc159db8 [ 258.980399][T10045] [ 259.006378][ T9764] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 259.225796][ T9764] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 259.259927][ T9764] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 259.511950][ T9763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.627043][ T9763] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.676523][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.683719][ T6361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.724255][T10063] rdma_op ffff8880650169f0 conn xmit_rdma 0000000000000000 [ 259.733146][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.740470][ T6361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.804019][ T9764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.873554][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1212'. [ 259.890912][ T9764] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.933738][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.940988][ T6361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.989855][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.997095][ T6361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.465526][ T9763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.578497][ T9764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.566697][ C1] ------------[ cut here ]------------ [ 262.572518][ C1] WARNING: CPU: 1 PID: 5884 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 262.582112][ C1] Modules linked in: [ 262.586229][ C1] CPU: 1 UID: 0 PID: 5884 Comm: kworker/1:7 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 262.598395][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 262.608530][ C1] Workqueue: events_long defense_work_handler [ 262.614691][ C1] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 262.620558][ C1] Code: 0f 0b 90 e9 62 fe ff ff e8 3a 53 e0 f7 90 0f 0b 90 e9 95 fe ff ff e8 2c 53 e0 f7 90 0f 0b 90 e9 bb fe ff ff e8 1e 53 e0 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 262.640301][ C1] RSP: 0018:ffffc90000a08be8 EFLAGS: 00010246 [ 262.646456][ C1] RAX: ffffffff89df6a62 RBX: dffffc0000000000 RCX: ffff888068a55a00 [ 262.654526][ C1] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 262.662538][ C1] RBP: 0000000000000fff R08: ffff88803190389f R09: 1ffff11006320713 [ 262.670605][ C1] R10: dffffc0000000000 R11: ffffed1006320714 R12: ffff888031903600 [ 262.678644][ C1] R13: dffffc0000000000 R14: ffff888031903884 R15: 1ffff110063206c2 [ 262.686697][ C1] FS: 0000000000000000(0000) GS:ffff8881261c4000(0000) knlGS:0000000000000000 [ 262.695731][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.702354][ C1] CR2: 0000001b3020dff8 CR3: 0000000054d86000 CR4: 00000000003526f0 [ 262.710434][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.718499][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.726579][ C1] Call Trace: [ 262.729891][ C1] [ 262.732772][ C1] ? inet6_cleanup_sock+0x197/0x230 [ 262.738094][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 262.743781][ C1] __sk_destruct+0x86/0x660 [ 262.748421][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 262.753580][ C1] ? rcu_core+0xc34/0x1710 [ 262.758108][ C1] rcu_core+0xca5/0x1710 [ 262.762402][ C1] ? __pfx_rcu_core+0x10/0x10 [ 262.767171][ C1] ? sched_balance_domains+0x121/0x9e0 [ 262.772678][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 262.778256][ C1] handle_softirqs+0x283/0x870 [ 262.783076][ C1] ? do_softirq+0xec/0x180 [ 262.787585][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 262.793023][ C1] ? update_defense_level+0xec/0xd80 [ 262.798396][ C1] do_softirq+0xec/0x180 [ 262.802701][ C1] [ 262.805703][ C1] [ 262.808670][ C1] ? __pfx_do_softirq+0x10/0x10 [ 262.813570][ C1] ? __lock_acquire+0xaac/0xd20 [ 262.818522][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 262.823846][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 262.829140][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 262.834947][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 262.840184][ C1] ? update_defense_level+0xec/0xd80 [ 262.845553][ C1] update_defense_level+0x8d2/0xd80 [ 262.850822][ C1] ? register_lock_class+0x51/0x320 [ 262.856099][ C1] ? update_defense_level+0xec/0xd80 [ 262.861443][ C1] ? __pfx_update_defense_level+0x10/0x10 [ 262.867262][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 262.873047][ C1] defense_work_handler+0x2d/0xd0 [ 262.878156][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 262.883917][ C1] process_scheduled_works+0xadb/0x17a0 [ 262.889568][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.895659][ C1] worker_thread+0x8a0/0xda0 [ 262.900282][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.906705][ C1] ? __kthread_parkme+0x7b/0x200 [ 262.911680][ C1] kthread+0x70e/0x8a0 [ 262.915822][ C1] ? __pfx_worker_thread+0x10/0x10 [ 262.920964][ C1] ? __pfx_kthread+0x10/0x10 [ 262.925630][ C1] ? __pfx_kthread+0x10/0x10 [ 262.930277][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.935570][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.940825][ C1] ? __pfx_kthread+0x10/0x10 [ 262.945508][ C1] ret_from_fork+0x4b/0x80 [ 262.949965][ C1] ? __pfx_kthread+0x10/0x10 [ 262.954645][ C1] ret_from_fork_asm+0x1a/0x30 [ 262.959477][ C1] [ 262.962541][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.969838][ C1] CPU: 1 UID: 0 PID: 5884 Comm: kworker/1:7 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 262.981919][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 262.992020][ C1] Workqueue: events_long defense_work_handler [ 262.998117][ C1] Call Trace: [ 263.001427][ C1] [ 263.004292][ C1] dump_stack_lvl+0x99/0x250 [ 263.008932][ C1] ? __asan_memcpy+0x40/0x70 [ 263.013555][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.018786][ C1] ? __pfx__printk+0x10/0x10 [ 263.023421][ C1] panic+0x2db/0x790 [ 263.027347][ C1] ? __pfx_panic+0x10/0x10 [ 263.031810][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 263.037033][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 263.041984][ C1] __warn+0x31b/0x4b0 [ 263.045994][ C1] ? inet_sock_destruct+0x623/0x730 [ 263.051207][ C1] ? inet_sock_destruct+0x623/0x730 [ 263.056419][ C1] report_bug+0x2be/0x4f0 [ 263.060834][ C1] ? inet_sock_destruct+0x623/0x730 [ 263.066066][ C1] ? inet_sock_destruct+0x623/0x730 [ 263.071289][ C1] ? inet_sock_destruct+0x625/0x730 [ 263.076501][ C1] handle_bug+0x84/0x160 [ 263.080759][ C1] exc_invalid_op+0x1a/0x50 [ 263.085288][ C1] asm_exc_invalid_op+0x1a/0x20 [ 263.090146][ C1] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 263.095967][ C1] Code: 0f 0b 90 e9 62 fe ff ff e8 3a 53 e0 f7 90 0f 0b 90 e9 95 fe ff ff e8 2c 53 e0 f7 90 0f 0b 90 e9 bb fe ff ff e8 1e 53 e0 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 263.115668][ C1] RSP: 0018:ffffc90000a08be8 EFLAGS: 00010246 [ 263.121749][ C1] RAX: ffffffff89df6a62 RBX: dffffc0000000000 RCX: ffff888068a55a00 [ 263.129760][ C1] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 263.137741][ C1] RBP: 0000000000000fff R08: ffff88803190389f R09: 1ffff11006320713 [ 263.145718][ C1] R10: dffffc0000000000 R11: ffffed1006320714 R12: ffff888031903600 [ 263.153697][ C1] R13: dffffc0000000000 R14: ffff888031903884 R15: 1ffff110063206c2 [ 263.161696][ C1] ? inet_sock_destruct+0x622/0x730 [ 263.166922][ C1] ? inet_sock_destruct+0x622/0x730 [ 263.172134][ C1] ? inet6_cleanup_sock+0x197/0x230 [ 263.177344][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 263.182997][ C1] __sk_destruct+0x86/0x660 [ 263.187524][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 263.192643][ C1] ? rcu_core+0xc34/0x1710 [ 263.197071][ C1] rcu_core+0xca5/0x1710 [ 263.201340][ C1] ? __pfx_rcu_core+0x10/0x10 [ 263.206039][ C1] ? sched_balance_domains+0x121/0x9e0 [ 263.211516][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 263.217000][ C1] handle_softirqs+0x283/0x870 [ 263.221788][ C1] ? do_softirq+0xec/0x180 [ 263.226224][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 263.231534][ C1] ? update_defense_level+0xec/0xd80 [ 263.236834][ C1] do_softirq+0xec/0x180 [ 263.241094][ C1] [ 263.244028][ C1] [ 263.246971][ C1] ? __pfx_do_softirq+0x10/0x10 [ 263.251833][ C1] ? __lock_acquire+0xaac/0xd20 [ 263.256705][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 263.262007][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 263.267223][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 263.272964][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 263.278173][ C1] ? update_defense_level+0xec/0xd80 [ 263.283467][ C1] update_defense_level+0x8d2/0xd80 [ 263.288688][ C1] ? register_lock_class+0x51/0x320 [ 263.293899][ C1] ? update_defense_level+0xec/0xd80 [ 263.299196][ C1] ? __pfx_update_defense_level+0x10/0x10 [ 263.304942][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 263.310687][ C1] defense_work_handler+0x2d/0xd0 [ 263.315722][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 263.321455][ C1] process_scheduled_works+0xadb/0x17a0 [ 263.327040][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.333047][ C1] worker_thread+0x8a0/0xda0 [ 263.337645][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 263.344003][ C1] ? __kthread_parkme+0x7b/0x200 [ 263.348955][ C1] kthread+0x70e/0x8a0 [ 263.353038][ C1] ? __pfx_worker_thread+0x10/0x10 [ 263.358190][ C1] ? __pfx_kthread+0x10/0x10 [ 263.362792][ C1] ? __pfx_kthread+0x10/0x10 [ 263.367393][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.372603][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.377813][ C1] ? __pfx_kthread+0x10/0x10 [ 263.382411][ C1] ret_from_fork+0x4b/0x80 [ 263.386835][ C1] ? __pfx_kthread+0x10/0x10 [ 263.391460][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.396242][ C1] [ 263.399613][ C1] Kernel Offset: disabled [ 263.403944][ C1] Rebooting in 86400 seconds..