last executing test programs: 1m28.521006952s ago: executing program 3 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048001}, 0x400c800) 1m12.920550265s ago: executing program 3 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048001}, 0x400c800) 58.711628223s ago: executing program 3 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048001}, 0x400c800) 42.729491688s ago: executing program 3 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048001}, 0x400c800) 22.704929791s ago: executing program 3 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048001}, 0x400c800) 10.819860553s ago: executing program 3 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048001}, 0x400c800) 3.680002657s ago: executing program 4 (id=1237): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0x91}, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xc}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100004d43a9a223f6ffd00000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c0002800500020000000000080003400000000008000140001000130800044000000000080005400000fd"], 0x94}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 3.561937602s ago: executing program 4 (id=1241): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x7, 0x8001, 0x40}) openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000180)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000600)={'filter\x00', 0x0, 0x3, 0xb2, [0xb77, 0xb1, 0x3, 0x7fffffffffffffff], 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000540)=""/178}, &(0x7f0000000200)=0x78) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000f8", @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000500"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c030000faf5ff5b9a5c57f683b5d829f69c250c2664aee14fc1953b21fef81a8d46262ff11e3692904ec94d6d2adc9cb834cb3dc8b19ebb1f16d8456a8662c639c491aa6290fb10eae4d90503c2053ceaed6518b1983d715b01df14a937e720436ab88d746cbb5ec60f540bc17fb300"/123, @ANYRES16=0x0, @ANYBLOB="000227bd7000fbdbdf251400000008000e000800000005000b000100000005000c00ff000000080011000900000005000c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 3.503724823s ago: executing program 0 (id=1242): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xba}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x3ff}, {0x7f, 0x5, 0x3, 0x2, 0x5, 0x2, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0x67}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0x410}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0041}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01010000000000000000000000090900010073797a31000000000c00034000000000000000050c010000180a0102000000000000000000000000090002"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x74}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@newnexthop={0x18, 0x68, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x3, 0x0, 0x2a}}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x5, 0x922, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x18, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b941e6653a13532f17b33515bdd7e1be14f53b9fc9b00"}}, 0x80}}, 0x1) close(0x3) 3.376682646s ago: executing program 2 (id=1244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x1e, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x17, 0x1, 0x3, 0x3, 0x3ff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2208ba0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @generic={0x7f, 0x4, 0x8, 0x1000, 0x1ff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xea, &(0x7f0000000680)=""/234, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0xa, 0x3, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000540)=[{0x5, 0x5, 0x9, 0x9}, {0x7, 0x5, 0xf, 0x4}, {0x4, 0x5, 0x4, 0xa}, {0x1, 0x2, 0x4, 0x5}, {0x5, 0x2, 0xc, 0xa}], 0x10, 0x7, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0xba01}, 0x20044884) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28"], 0xe0}], 0x1}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071106d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538ae4646320800450f001c0000000000029078e0000001ac1414aa12009078e0000001"], 0x0) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3.24541701s ago: executing program 0 (id=1245): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x16, &(0x7f0000001140)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe13) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000001380)=""/201, &(0x7f00000010c0)=0x68) r6 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0xeb, 0x8, 0x700000, 0x17, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @private1, 0x40, 0x7800, 0x5, 0x9}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000f80)=0x0) r9 = ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x7c, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x646e4, 0x64da0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0xfffffffffffffdd4}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x620c, 0xa80}}}}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}, @IFLA_MTU={0x8, 0x4, 0x10}, @IFLA_NET_NS_PID={0x8, 0x13, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_NET_NS_FD={0x8, 0x1c, r9}]}, 0x7c}, 0x1, 0xba01}, 0x50) 2.931765957s ago: executing program 4 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x21e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000300dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000004000000b7050000080000004608f0ff760000005e9200000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x36, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 2.878450039s ago: executing program 2 (id=1248): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000200)) (async) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000340)={0x3, 0x3, @start={0x0, 0x1, "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", "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"}, [0x40, 0x933, 0x7, 0x28b0, 0x1, 0x10000, 0x6, 0x6, 0x8, 0x4, 0xc28, 0x8, 0x4, 0x1, 0x3ff, 0x3ff, 0x8, 0x6, 0x5, 0xfffffffffffffffc, 0x0, 0x1, 0x2bbb, 0x2, 0x7000000000, 0x9, 0x106, 0x475, 0xbd, 0x2, 0x10, 0x6, 0x4, 0x1, 0x1, 0x800, 0x8000000000000000, 0x5, 0x2d6, 0x8, 0xc0000000000000, 0x6, 0x4, 0x80, 0xfff, 0x2, 0x7, 0x50, 0x5, 0xb, 0x2, 0xd, 0x3, 0x10001, 0x7e, 0x0, 0x4, 0xe, 0x100000001, 0xc, 0x6, 0x7ff, 0x3ff, 0x10]}) (async) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.68623338s ago: executing program 2 (id=1250): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000080)={0x0, 0x6, [0x6, 0x100, 0xe9, 0x18238255, 0x9, 0x10001]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001, 0x0) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000100)) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10, 0x800) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$tipc(r4, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000240)) read(r0, &(0x7f0000000280)=""/221, 0xdd) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0xd}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e20, 0x2, @private1, 0x8}}, 0x3, 0x1, 0xb, 0x10001, 0x6, 0x1, 0xc}, 0x9c) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x0, 0xd2, 0x40, &(0x7f0000000540)="d5bc1bc17486c1d438a2b85b0fb985d8b33dc2397b009984fc46bcf6284b287cadd7a145970c53e09d80b41a58a735724fdd5593350167ac0442e6501a1db72fe119c9b87cf7a1d9e48e57eea5260dca8e0dae326001cdd897d1ecc36d6203bdda957881bb7bfaaa9f7cc21e3257f6e04c5bba922738178fa077d01196ac62c3b58bc537b55a5537dd2df19336faab7eb5e2a89bfca6dc81a817d65fc688ebcdf34d61b193a8b723056e34e19fd1872f8d93f16d115040852a777eb8e9316e1a645873c1d31baeefecc73d79b95d433a6250", &(0x7f0000000640)=""/64, 0x1, 0x0, 0x17, 0xe0, &(0x7f0000000680)="f57b72fcdcbff511b491ec8375217ff19d4d08d5764fa4", &(0x7f00000006c0)="96a6e234fb951c4a907edf5f30d9b226c0d88041892a9df6e0122876a3a309e46988ce7ae117f9dae8ea22548a372f9315c92264d234af5b429a313522f3cac335ebd14a3e73ab01d54655b79d3dcc251677f04d52f7c69567963324733e6ca58c671750ac1fbca5d03ff2f6cfd71c3b3fda09bae1f6fd1bcbe875b0d2bd224f5b61c0ba3bb21fe42145578d737a3aa1d542a0aee474ff9dc16751323b6376312c5cd21617a6966c5325ddb2f891191384cfe76c7073fbdbeec109e481dd19885bd86547a123a192378c5ff5b9565d60e0f248c7b5b55f82914bda1325d47e07", 0x1, 0x0, 0xfffffff8}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000016c0)={@loopback, @broadcast, 0x0}, &(0x7f0000001700)=0xc) sendmmsg(r1, &(0x7f0000005580)=[{{&(0x7f0000000840)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000001080)=[{&(0x7f00000008c0)="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", 0xfb}, {&(0x7f00000009c0)="402426714d5d51d972264ad0edeee96109c84bb9d16c279170e52c760fad95d0d815e67e88e201ec9b1a0882b62a143262f3db4ba98d21b9f135bcffb67791810c38301a5af57bd7392e6cf4fc105ed8f0cb5771f2d8bbdf016f15f91b69fa2fba76f77a1c0c368c4413f7658f8fb3f6f2efcb2fb5483feae7a595c12ca1d706ec", 0x81}, {&(0x7f0000000a80)="80e29ff3f9606584c0c9aee20ac02dff61014320e880952f9bac29c0e9ecce92193e26d77ec693f94c00c7f459575ce87f22609748c0629ce329d803630194d2c2f4d583ca2df9a1e70e79293e888cb476f3b590d985b79ddcca115b94c28264b7902f4d8cd8e9232997791203c10d5b3011750cf95f99ae91929d700f364da8adbe7b5133c1f7aa418e62515f5aad8249b2a4f2fd13b9825d4ce3a3b766292cac1933dc46d068bec2e9c0baa4561d6845e917f74d5b503e188bab52b0634a421493f477ed86ee4781d60622fec76388fdff86025083eccd4b6cab15d369169a210590b7da09645e3677803cfa", 0xed}, {&(0x7f0000000b80)="b3cb2e9737838fbf2802ea66fcd0d62ebe9922802b745f3092b99c5ca51a355d48d82b3012e687fe93f48fef59e40c2386456e97ec511d1fca998dec91a3305a861b589dd80343fa369f4faddc1f84d7ae88f20c532102e1205fde074d3bb7540ee3b9868d0c53911aa7256f9309febdad59688a2433da0e0eff7631050f64cf3d3c172f4c1e8eb6c6aab264c95fd9196c1c3b7ac9c603d090c51e82c9a21e39c44f92ab2f09c090739910c88eb76fe07c9eda0ac678ab2c0545666b8345db18ad15310d28a892ae0599890b96d32a5cc7393ce024a8c705299008c88cd4412150f552ba93aa0673c65158474625", 0xee}, {&(0x7f0000000c80)="4ed8f8299b54d9bb35cdb4de1f22e7064896009d0680740bcb475952e10a97d1b5b8cab13f0646ea3c354d5ad81b80bce05214b5e77315a7233aa995d5349053c3af655e7fdb830ef1cc7fbab156fffc42256f06014a3888c5c94862891e4c67bda89db1d068d28aea96419ca74e3a1fed72dab1e8e22f82f866ca662b293837aed7b3e7f391145ac88a302fc10860bff17a500bb96275bb37c0601dd3a17d0d641396f5e017dbb68e9e0cbb2648593bcdb4843b2b63e7fa69c881835e75e02d99d25cd829aba89eedc24f501b6be5d4322eb38f7e1588f716a1fa2e05a993a9dd63bee511", 0xe5}, {&(0x7f0000000d80)="7eab8dcca42f5b6e3d463540bd575997c70117ffda7ceee0cc46857c8b55480229a3b8a1f3a781638a41d50ce21db1269ed8841b074bcf003a24ddd006c5425ecc86ecaf7049", 0x46}, {&(0x7f0000000e00)="ac0526027d1ed1968ee5b1a41b3013b057409ba42ff4ecae453970f85d328fd9c600e84a4c27efba07a0e8d14c77048df9ff796b5f81b00902c3d47277d1189654df21409091d57550931273d60dd3426e9d4e101975e81e540be49c89711062deea996ef22408eab7e4143ce58fa62d8866a228d82c0f492451044d2e28996601ec9a39db4e7b053b7b2b3ffdf6e12eda07a63e0c8446d87016bd3bb283c4e72060682cbac550c45d56584fd8193e3dbd52e6698d23876e48a60a92d5e7cfc10cb0dc74c79266f8e375eda6bd9c77a9b70ffc448ee81fb649caba1d13413d7277758f3d1bc8e112", 0xe8}, {&(0x7f0000000f00)="10d4241f3e95084db70f23f78d0a5cc9f620f9e432484c8563b4cadbe8d71cc0dacc1189bdc9d0aeee08a7aed95e1bb9f2c56c25666bebeaa117f54645f58c5ea8a9438167d1ef9b3c24075cbd6ee6bf0bb953bf9a8e9706f9e06b4cf86254a4de094887d060061f27867acd0bc2aa", 0x6f}, {&(0x7f0000000f80)="93ed26562385c126c19823c8eae1192cdc35c0c73c6975f20116d56972966b3be2d1cb9d8f67ed6161f2d89287da229a96e64103b2bd030b65381247d8227a7a1de454098bf0896d8f7cada3d741e773ea319b9b0753fa40158edbf48d1860af970ab88ec90b49df485a47ce657aac10e34be3570290f4507d2105049e9c35fff86a2b2ef23a5f2b8851e737cc2830fe41da10cf4f9e3ae5b9b6a461414cdbf6a9574df12586633f063a99883862738ac9d748f02d5e521efb498775a4c1f0353b4ecff3098e0648a06eaff15ef536e1a6386bece7763fea1a1fe9fd9780062a0dcdc23dddd2b9ee4aa635418aed0bdaba8de477", 0xf4}], 0x9}}, {{&(0x7f0000001140)=@phonet={0x23, 0x0, 0x8, 0x1}, 0x80, &(0x7f0000001600)=[{&(0x7f00000011c0)="875d07444566f1c8b4b6126fde5c38e23f4bbcb5fcc0b087b69ce2bb1d755244e2e23f6fcbcb16fbc76e116af49b66f952f3b22c3a2124f34d94e1da88a5594bf9874d5f52f2589c0afe56aed1b888", 0x4f}, {&(0x7f0000001240)="834c10863475461e49ff46bf09c9fdf056c5921e30f1e376ee927f99d2b3a9d5aa494cd0f23b6b42cb825c8030de992ce1274433d43047e37261c2fef508dbb4c328fb70387c5900357d13fab99025f435e614a0d88f1486c7", 0x59}, {&(0x7f00000012c0)="92cb385b5a8ae3f8cda225e485f32cfd634b7e8dade505deef4d1cee6756b77aac7c09771e19afe17c249108cb2c101b6ca8542b4a4b62cb8b95e1dce5d8b1", 0x3f}, {&(0x7f0000001300)="0e05bfecd631fdc2529517270ff0a5ec91ffb847fb0485751144f3326f77aa6615f3826eaf305193dfaafd57656bbbe18b82cc2387ec5cecabbdf99f2a03355dfd36a2d9fe62d110db32bb0acc494044029b7b828c41414c7ac862ec9d3312873f8d7474b5767719c2cb977976bb9aa1a0a68f44144cefaa6747341e69b95674", 0x80}, {&(0x7f0000001380)="216222861d534468c6240674f44e3fbbec4dff8df547d17addc934a3aa58b7113531d0235d9ed7601f05993fdd7bc5e65fc303c432bc6f8e1071a1131a40bdfeed75ddab226e5de10f43e8ba3fdc1ba63ee2e689c1f2a2068af8cb99994a77f7d913f8194f79a5404f8e84a3dc7a4a522fe8ff7fb6094abe6f8e5167479efe82983d8752eed5e8177f60e9f47f0bd8dc08dd038f4fe14ddf9f9db4b19622cd4d883a04938bbdb1b3a323cd6de147bb2cee5a96a6917dfacae654fcebc20b984f8f", 0xc1}, {&(0x7f0000001480)="15dbf6642ee0b4f14038b7c486515dff9d4c1a698eefde0e2f738ccdae59134bde91d2d9bedd118299e447d1b9daa73e2cd0d43b76d6af9ed9ed5c5c8c04c4d3a5464a035294bbfd3956444f8cec791d4d8b64af5c628affc7e8006bf60d72f2db8a29ac038323809c32a6166428896c2d5cf58532d88e0d0a37ff12f6e5f8780b51066fd4d07b6a100a9682910ca5cf8f985cef60a8169c64148665f30ed521f404bd25620b29a932c52c9e3b0de8286132eb07024d848c7f913e734ea021", 0xbf}, {&(0x7f0000001540)="3fc8d26a48e28d3bd3e59638161666759c5d99bff3b52cda6563bf00aaa5b43466400b9c00ff2f23cfb252672a52af7a25076b1dd049765966d5dbcfd6bb38994827da01c0a43fed55e4b25aebfaa0f2c1ce15c0eb35ff45f7a49ab84e1f51326442797e94cb9f2e2bd4c8b3de895c23850448358777978d67b681ea2c3a1ed7cd2ca0e192902a5cb980e37861b17f633fe92d55c919fb6ff91e4defbe89f980466e7ca5a3cf01626383f8384ebe6da3ec16493695aac0", 0xb7}], 0x7, &(0x7f0000001680)}}, {{&(0x7f0000001740)=@ll={0x11, 0x1c, r7, 0x1, 0x42, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000017c0)="ef97aed302ead761cf0b3146c739930a0c9c8d610845779d37516553384945503a737d62224a3ac15a74e33884c356aba0827933914881a346a58a6c98573af139d636994aa61aa9c64a8179cb55ba7496efc1adc4c1ab95bedb4f8dc58358b8b52c6908423e6fee2139acdacf8909402fffb56a40d821ff819d479e009e1204df2d2f2aed6d7bb30fcc4669470ed6282816a268be53b956101890", 0x9b}, {&(0x7f0000001880)="a1b4809ccc559cc2ac48e14837768c75c76ec9e1460951b333", 0x19}, {&(0x7f00000018c0)="ee5bd614ead55e5ab3d2428e3012dc0c832d503f7caaf35ab92e8f08fb60f5741acd7303346945ab8b4c1d0b0c5247ec167ae92a55d7b9948b6046b33f59a45ed0e04e87835d859e66e4f3ea0fc78026e677559172821e12184b06a8003b8a58785fa2bcbec5e39aa9979807576d8230ca70a43fb81a20b5de8e6db8cccbcdff4372d0e1b2b754b61ede4818ae74b21bc77e70557c9dfc6280695f764456b6ae73e2acb65cbdc11a7c40", 0xaa}, {&(0x7f0000001980)="fa35df572844044b2b23fd0ef644162306263750124f6be6a2ff23b4e245a63be1002b43fcd267df1da1e02c5f4dbd1fce1a391ff6", 0x35}, {&(0x7f00000019c0)="4146f86019c124289525e7d3c85700407cb641400c42", 0x16}], 0x5, &(0x7f0000001a80)=[{0x108, 0x19f, 0xfffffff8, "2653006d63f8c5ba95e050d644c5e07ad250bcf6be7c4a21ae39a4412fd44ad83cb5a9d68befcba99d95de2914832d82ae86cf3fd28d4863e8ca6195f6ff02296e6847576e08ffcfe5531b42a7bbb8b3bcd975adc3cd162afba758952cbbb356cb58475f4a7fb058d4aac32a6492a847a54d7e3a70b17e60c26646d104c61f71c10882188a61684ee62f44eff06b34ab36825336d81462e8f43b1b3fc1695a4e7b8485b5a06d4b9a3390728a54869ea16030407ed77d7a0970d5d6a61787247956462bc64981878a97db530d5918f4d77a76056867e5199bb2ea4b9ee0ac3107a624da6dbae6707575984bafb9f6a81f4983"}, {0x88, 0x107, 0x80, "dce520581f7149d96b7f5ccbdea03e3690831d13c07c2172c50c24dcef27fe6cdb82e390a3754dcf94dbdf665246f5b071172dd878551f6d37031f2a0ba598dd65748cff3902bf413836bebede4b6a5459b6fbb0f777694a1482fc359398ed9b1672e24be1710db84131f76faa8dff72673fa3e8"}], 0x190}}, {{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000004080)=[{&(0x7f0000001cc0)="021d2633a7eb01be93150f4f4110edc92e8a648556b5f391e0", 0x19}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="295038bf69ee786414e6344782e84f9fab2bad55c3d6ba0e37413f0bd9f413c0e03e272b9b8e6fb1e8bb5a00ed77e637200af7c56ea2b92f2f994b9b021e12dbbb44c8e4d1c769913da83ad68af9f823fd6d64d6aceb6f797abfcd98a81a0123eda1c7809b7569dd0fdc304da71f9996879c6508c73180b373977fe38cb6bcd1c916a52d6b13dd849f43bb8090", 0x8d}, {&(0x7f0000002dc0)="069e923dc9b008895d88dfe3359d4f0878024d65c25a4e69ee04ff30d447f0e5638b5576896de582c4294bc2a0a659d5a5fc69a84f7a0dd0b7b6992927ac6adf4d258cb9dfabd946ae7fe9535eca0bf896c2718959d83b816e592dab34b56c391ad919d73a3e5d205be2b99d884464af3366108a5042c278475a79967f8151190ae79becdce513460dad3eac33228a58038964a82c3fdd1cebc7f8ad6001f6a9585a99bda5cafb2d06df1efb1b00e51e91005e863a400182fea8899917a59e45bc48b858006dd30135e26e7816fe8234d2910adde77e1835c9f2e80270b80d0704430906ed9d18a0732c05bec88d", 0xee}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="e453069e5efd16e5d49b25abd9916c40c741022ed7fbcc0090dee2573c4176402dd8ff4654a6f64e6bae1479da01216a57ecbbf6c58f753566f8cb6a39480001d33cbffde11e7ee96bc3f0f0ea3f25adcb4b60cee7e8adc61aae718185b8e56023d6beab5b86065db560f5bdd99ede096de7069fe9c46a25ab34ecd865e0621e1c24e67f268a8a80f9e0", 0x8a}, {&(0x7f0000003f80)="57ab859ec83ccc0d923779b2fa893d2e8f2dfa83517329d6d829a9daf3a5f8510e99ab84a1d96904ce9b33084b654cf9f99390fcee5d6f4e6cbd29cb31d10066f737bd55574ae11702bc04feffe289e02d01df0c760d455562785a2d072d15b5335993bb8a0f17ad63ed999cea3ffb4859e9eabf5db3913aba4778eb7b7c5157fdabc96fa653d0584a57a1681403b62f33e7044b40ab0f2d4d001fa783a01a7c4f88cbbf8eccf00c8b77ab4f71f58592c60e898edd3b4aaec197da056ff6e9be5a8fb7d3b0a9cff68296b5ae69be7ced27400f4ee19567479cd312e3f72a7f7735dce4f5f9152efc6e9a9356491b8f7e73", 0xf1}], 0x7, &(0x7f0000004100)=[{0x1010, 0x117, 0x0, "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"}, {0x20, 0x113, 0x62, "bc003c140ea3664a3ee32dec1d83ff"}, {0x88, 0x104, 0x1, "e075e2054e5bb4191653322ff2b13670d957afff1ce678183f202273b12fef77ab164eda1458016a9385358827eb8df7c17c48f5e756501755107f9bb2b00320f28b67080c1da002732beae5991186e44745a85da529cbf51e517d175799a340cf84dc2ed4b1f0560d3033728ba4d95590f6a2d7c12a"}, {0x38, 0x10e, 0x65f300, "d7bc148294a6afc008b16671df69796fd6af6e72484113e81f8a902f9b73d3efb3506eaa"}], 0x10f0}}, {{&(0x7f0000005200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x3, 0x2, {0xa, 0x4e21, 0x200, @private1, 0x1}}}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005280)="fede2e61ab21251cc98931e1d27806505718852619e38ae171332f0dbefdd9505a9bd9a30877c2ea2948d3a891b33db74524326802cf7b31c9f8759047721a31596a338095fff4d921aca3fa4acfc6524eafef603c", 0x55}, {&(0x7f0000005300)="d434b441a8a7ee90fc5cfcf6a78abd17c7c3cc", 0x13}], 0x2, &(0x7f0000005380)=[{0x90, 0x88, 0x1, "d45baa52832b29299abc8b294795a2dff7d7f5d2d6a846dc1035ef77cdf97fe4c69877eb19858971073deebe43d6d43a0b501c02bb9cc33f3dffc3d006f00a1d2f5fefc2a1ff51e5d3a5cf9901ad3fd3c296b80759f881332241f50e1f4d3c8bc49a42533698154116c28e08fc5b927a8c23b40c1cc2abee06"}, {0xc0, 0x113, 0x6, "275797d0bb358ef5b693e0f6eec779f58782b83ba427c0d6f7d45df38627117e0c16bcb6d267c51e84d98d16b159958cc7dfe234f5b647fbd84f50e5c05e0e637fad7fbc986f83994794642631dc356232cb53f6dcd3803d306a3ab30be8deade00f58732d9c8d921c4d5ad6bb74bfc0a07b08b8316a733d71d9add819cce1d92073fc274691deeb12160b835ef1ed9aca75f6dc58191267a17722aafae0626a7b085ecf326a08f66cbf"}, {0x88, 0x10c, 0x80, "28307a264ce2f2da0dc448eca136d5c521470978649533e9257e4140b857eb89137453763082f1c419a3e93acb84260d77d1ecb1f70e6676999f22a1693e1f1a251c970b0467b651493737a0c3716bf6b79a65ea4a6c9821bc511d7098aab8dbbf1e245207b3e6a117e89f6b8ff3f15641878fc5"}], 0x1d8}}], 0x5, 0x4000000) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f00000056c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000005700)=0x1c, 0x800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000005800)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000005740)=""/2, 0x2, 0x0, &(0x7f0000005780)=""/124, 0x7c}, &(0x7f0000005840)=0x40) syz_genetlink_get_family_id$nl802154(&(0x7f0000005880), 0xffffffffffffffff) setsockopt(r0, 0x2, 0x81, &(0x7f00000058c0)="9f896ad3b0b46d6ac346eee1913d4c57677ee13d902835c34d92fda16cfbcca7845db54acfb01de15a6932be7bd6b60ae920972f59453495701fd804e363aab5a74e927d81fba4e77f885370f1dd6a8e9378026c6ae2f2a7143cbce918107ac8b9", 0x61) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000005980), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000005a80)={&(0x7f0000005940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005a40)={&(0x7f00000059c0)={0x4c, r9, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x805) recvmmsg(r1, &(0x7f0000005dc0)=[{{&(0x7f0000005ac0)=@ieee802154, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005b40)=""/3, 0x3}, {&(0x7f0000005b80)=""/82, 0x52}, {&(0x7f0000005c00)=""/25, 0x19}, {&(0x7f0000005c40)=""/153, 0x99}, {&(0x7f0000005d00)=""/51, 0x33}], 0x5}, 0x6fd}], 0x1, 0x10100, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005e00)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000005e40)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000005e80)={0x8, @rand_addr=0x64010101, 0x4e20, 0x0, 'fo\x00', 0x24, 0x800, 0x6d}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000005ec0), 0x46400, 0x0) ioctl$PPPIOCGUNIT(r12, 0x80047456, &(0x7f0000005f00)) 2.399840254s ago: executing program 0 (id=1252): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x278, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x244, 0xfc, 0x0, 0x1, [@nested={0x240, 0x8, 0x0, 0x1, [@generic="afca5ff5d515226501d9fac3908ff02f8d09509c26adb6b5d864484d04d69b4da5d7a52bfaaaad3a5c25aa473a0456cf81bd4d74603377984679d221e2a018985f995b9c1787285a3068593180b924ed8d0940610e751d4177f4fdaa3b647713ec058a87aa46f52171df898c7a05121abccd3e66c0d455d5497f9b88f86e97ac669b2ac8acdde2137a259ace56f95c5e39e7db5a34433901da46f369d9dd5ca3e90600b07d4664e1d96191edfaa947604e2f1f75db04", @generic="9bd8923e183ceaf32e67fb16888c806403ecd4458012965b4bf87d769bf5e030474a90f0f8b743003256111a88037a5489878dc68d48348280c55d31a3ea6fc747a0cf299e10637fbc9a618a6bcadf0f6caf923a1dfbd1f2ba8fa08ddffc28b9a387e3b2b35d8a4ac3ea722e6f6089", @generic="cc683eecda71ba25b3f72797dc417fca84d9d8f8baa94057192947b92000ba5770c7b084403a03adc1a2f42acd35c86093d2150d1d0a70f422e4f73eac96a9de66ddc93cb95cbfce68d52b80505ad2cb11893f86e6c26ea10f484762e841ee827d794612312cd37ad973b2ab2986bb65f84b670790bad3776ef66f76955009f71065c51850d6b375827b6e3666e469312a118278044cc8c60724f9c11c75aee12f40a3f53f995cc20d3fef674b2e46dfdf9d48685be6be74cf4374ae2c3627d82fb3523b86a6b5eecc7c852e62b45b72141293a9e3fb1096a448ff5bce3586b50be5d12cbf9a80bca166", @generic="f0e79ebd68b11bafb7f0fcc690fd1895afce6ae42d8ab38b9ebbfedf6d80c37c89ead9c8af0ec8b3f4a81f88d0"]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="97f0972655"]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x278}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r2}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x8, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r5}, &(0x7f0000000900), &(0x7f0000000940)=r4}, 0x20) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000200)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.229092608s ago: executing program 0 (id=1253): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @local, [0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x200007ff, 0x4) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x1, &(0x7f0000000000)=@raw=[@generic={0x2, 0x1, 0x9, 0x7, 0x4}], 0x0, 0xd, 0x0, 0x0, 0x0, 0xa1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2.150958106s ago: executing program 1 (id=1254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/n\x00\x00/\x00\x00t4\x10c+\x0fG\xf9aK\fX\a!$\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x1004c0c0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000240)=0x11) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400f946d2c8db031d000c06010200000000000002000006"], 0x14}}, 0x880) 2.051878342s ago: executing program 4 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000003380)={{}, "181a07710bd5689cff173f46dead2cbc4a361c5b9838decef8e81d2a81dd0bdd8685069c83a7342d07bcb20bb268f7634a9f40579b2861b34bf1f15e74da20cca854b98f3cc6420e78f2e8ca689b7f2ddb14c1ee8b0b834304b5fb0c3fa2744376fa435f72579ac1b6aa1419c5768ccc2decdc2451a73ac3826c2a6782bf5114e8fb16d299397ed2015abcd036de05c137e04d88b6b3d2f7610fd076a19ba82708b3d2a4fe54be0f634c4790d9bbf8a494dc5a8753e7e89e1f04fcfafe75b0d83076f72a8506a91ea45dcc9c7a8cf092845ba588ad8fec5c865a4a7ed3412cc6a898e4a41ba0c0cfcc655040721ac1be2906defb1214e2b1f2f44cf8611d69bbf26856865765589d7f7e80b03ca8ddcf71cd136ef3e2129e9b5da5fc5191bdeccabc3bd61b17f29c8ce262879cf799e5115f8213acf5f077a8592fb09c00e0f382dcde0759e299b128530210ce518ad85bedb4f8e00c4dd6683f5f49e1fafb54d3e4de435f88ff87582acae95153c5f64d01871a868c7b56f97b109368e769000e119e4a451677b8b13b903cc08b3a6c9f00eabb1d9b812b2dfb468d63171ffb1f9d5ad402af5fba9c1d3cb844efd2818bdc03fe54d0404e24d7e88aa7dcde904c24b39327532921c0a5293a880d39f41b8a807bea6f9866afe8ff6b4880e31b061776649f3744dfd827b9fd3c139d89b5f752598a6b84756fc449fd8dc15737a915d4d34089c0e183e65244a89391b4f053f8ee999fc143310291949785edb5572ed5ce50dbf51227f042f761bcd9a8c6d95a9081d7206b9096e34ea91cb902caf73ea94346ff190c0bfefbd3c03764ca1ac6a22c841eba65b569df16f04fa3f3635fbfcd48a84deda8863ef60db7468af03f777c3d56f87076554cc65c304b7b549d0bc2bab98313ab86c3fb604bb4a04f683a73a6cac3aaa39a0416e057e2c15890278260a9fa1e16c5ae28e345fb0fe08be6e085f2646f97297c5ab832497cce3b7556ef91f6f838f1ad0033a80b7d2948053b6116ab8eeb0cacfad92122f0315d1ab569429ac06cb936494d421bfb539f2c17712fa5eea99e5b98e53aa63d879c51ad497ae8c1b65522b88566eb14039c28ba2928dfe67fe151ba586bc12be77d7df442be65a0fe9e0b2088177211fdb7835d3c377c6c716f15388d838140ab7e763041a7edd1e0d756686adae209a9f250bd26f7f20e580460193c7c29cd21a11e0885219d39e566a687f4c0c17006d252a2e0e744aa93a4d7d0b4fa8103c6c75b8e6fdae2dad3fef143604242aafd674900b23262dd425b23c4db54cd907e56c21c0c58f216acb46956a1b9b3cf75507033cf3611397e5fa6a9243719dfee24eb6ee00d4b8f3a817bcf20ae804a04e9c102d2468b7109cc5a956a33b71d1c748e1bb21ac8e71e28cd373446c023dbed7ab53694709506f91c4e684961b85628a1dc772bccc32b61e24a6a66c5824186f021ed989ec0a941fcfe9616b210c896c47ce44ae98510ba6a5ef44d864cab6368ed8da86d4ea069e78c04a31e89876156bba21b10a4266fac28d6173879930408e1b5b716b11ade6418bfa284f8de7c33da7d087ad8619cadf3aaf16c7dc60f3bbdc9c9539fca79fd2b75aa18f046d5222e97f20f34ec8a0694a95cc15a5d564832afda6b78be21a70efd630c3ae9a6ab8f00cc3f6edc3d2fe3fb401ee8572083463ac7bda7808bca59a544ac162f351eb9dc1c24bac0bc56b4616ac2091f65a129c4d87ec1e48648d8006c2ad4e80fab7cbc555937f7ccc8bae01ed3068656e735e675c46c81233ead8e170718b3026fda5f31b2865bb5210093635942433c0927cfdb9b63eca7bc9a7db3e394beb7dce0b3e390d7b257422fa7a293dc59cdd1259390d9d491bcb4437f163db7a9c618d12f2769d907d7b235ce1f9f7129b479c7ea480ab943810791627c55bf15e4b1525b9e78cc073c96e97fabb7879506375c025deefabab256055f6b1c54fa43047e7b2f6a513ed69a8543e7bb15a7c9325e66145e80a402c393172a9c6cd8d3868ad99cac4b50158a12e9e06cb52c3964d287f2da97723c576c60250e408975290868d800a30e2613bf1966b5b3e881d7fea120c7b75f988c0aafe26d89d07af41004a7b251bfd6caa81a4317273c32105daf1e339b931b91a30faeae525d4873f48dd88c7020eb7ae06742e77d6924363f11716b30e6025e4638ac4347672fabe9351a6ad5e56776dd49fefee77d80b9af263f5499a40cecac635fbfb050e7e984405c77f8fc5ef4e98a403918a5237b4f66a0bd70d224251b7e30d7f69aca91f0f3b60b351b25cc72f828ff964606069feafa5e220d033b2dff31bc801e59831ba7ebe2ffb424104a53e5b8c8b762319126e97e0bba25629e2961714277fd84d57a76b984f0502b99aa4fa32f71e1b53c41ef4ec62ab42e4ab56dd84a326013e2da01ca3b332030015dcca2d450c432f2d2bb77cb1d0b5289693156fb880baf6ff0b055b442652c3566703dcbdf18aca4eb6f20717367e4c70b277d00cee8c2102aee8c0fd9c3fe8ce42e960673e08faebb4b800cfceb442025145816b387de135c362b2bec3cb6c0b1fbb662ad08586fc2b3dc4e5c2d3f774973d3e6f728fc75047f764c666cc7cdcb37664506381dcffa04c8f91c3b0c82009259ed1b14fedb8118261825f424b97fd7731b32a3f260cb8e1af8dcd8c04a26dbbdbd4d23e6ba827bd210795032e3cf930e154eef7e16ab80bf74bb69689061909d618ed03461b890c285e26d5a31bec9d39af7f0c56f1d842ffc06f7e28d16000fb914233410dab9bc5503c09dadf56cf46d5069bc1640c8fb85ee8a258f6d7a219c185442ae223c0db6a1b89196712447fec4bb6a15844f31f9b605f8436003dd169f66a2864097bb7086fd79cda777ddaa3933ba49020486ff4c302f5eb2f36e207b9ce9f786bcee8e330faa5e86dac841988a867f3423ed8ac3794666a21f8486dca2195c1775059c2426d55aba609a0f190786ac94371b0967f710d67c7a89c38d7a2caaa88675e9e4961c74c5e810c2125253104cec490c1a843b5d65c21fda4ade8d277b3564ff5f53b5094924c33a3d07d20cf9d715771d66fc95428e435efd3774be722378bcd2af53f3d09aa942850a209a01760095a90888d96296bf6e6488e0b82529ba4a21d36adbb6159656bf1ac21f0b39dcc9583fed9ddfb1ed12c6d484630123c8b0aafed578752542d9ff49e56998a047c8db0457bbf8e267befb4991e48c3dd4214ae19fa39204324ff854a2e4758e5ee524b4482f3a80c20f0a4d15944acd40b91f7c328d2b54c8bee5ae8fbbb3fe870c9a86991390ddd6514d48f9773089d730f0efaeadd7e0eb639f894604cb37e6790308eee181376069f8db17b09b2047f5cd6684f5051380fca31d28e8f5289372d529b641891dfec34af065af4678183649d144ec581b24cde3a34e4fdb5784c12c9fcbfe7c1c0bba633a7cd68c6f247be3e434c8cca8d44a961a076ec33b1c95f7df3254852a88c45784e5a1b2288e268acec107b1d5b2f21157e9ac4740219722e11e90b773d2e479a5d4459ade49551a8b22bc30edc73b0245ea30e4c197841a128f36091387d1a933ab9efa5a26293536351584cc7c5eaec0b8af69bb39db192d6fb5a3a2bd47722d657c9d32e461a5c2623d9b2eee1379c763555d46522e44450c9f074df1e012275db1f7c1b429c42b1d0a38d7db9a0db75e7dc661838e35e9330eb0b5f68ac94210879b87a76d767cd595585fe29a9cb2241ab5211f9326fcc536e87333fc988c14afa4e4b6c6827f873d1c515f964dd07099d33403dcaf8f37e70bdca20170fcff65c4e1f3a9e702fa855f172b24c1eae6100ea8798b73f4bbb042566b62c4c3c5aff43925012b1453f73c95ec9a16ab94328efc34a9aac52b27cad0b0fdd09f7e64e2ac3f81ead8eb67b57aae0feb4bb2ce1caf5567bc1621654b734bc47276045d535c7e6a346e0560d1b2560cdccaceac14faf0cf32bd0f97ac433ae1e78f79ded824065bae830826ca3af87d62354c71b67afc3ca1935f41ef8941b4e7fd2a657825f7fd2d19be82c44a26f02af891f5523f89902d1be615ec9f95d7e49e9ceabb9a82cd70d48cc612e304efdf6c268616f96ccb21bfab10161b6eece7b2476fe7f6db3e10588af18bb13219ab2748c8ae2cf0504d1b93171bf2a3acde4747a023ab64f3cc5e3c0fc7f740428bb601cb9caa5af7b2d5e37bbdbf812400d99b8231569e46f2f8e9c0c4c2520f7fedabbad888abfa2be255dc153a58378b7c5bdaaaa6327e7aefb18342ef9e93a01eee5abc676d6c21b5d76783c035124968223e3d402b394cf0deed0e1fbee2df7ae5c89970f2764967c28b8a5977ae90c26c81d4a3217a9ef3c5c16d5e354c39d03cc01efabb293dcc14bf9a9d1e7123377ae74f00cf16c8c4508f2eb7c444fad12d0e270faa120fbc50c7964b1bd024d6968b507868bec762316be169fe44989c4e06a5f4759cfae08a3068d02a771c45e9c4b8fa5b128d84fd473f042ee8b34b07a5b63a2520841df7913e7c91454008d93f896255b57c6a25cbeff78db0633cc50e01a63a99dcff6decc4be8109849b3d9c534318d173886b3cdb9f591dd724f351a450e9c443b72ed234f7bfeb9c939d4f9f8e4e2d7ab320722e75d1a607fb162e0ead82e10db2d6bd60e5f10e90a083b33baf10546f1b3b367fafe5f6fd307931e7b7cc9e2d07a12144798182a5a42ada01be721e8a9c5fff2076f48e5925f4fa7d094ccc40c91a8f911d5b05ebb7341e6c5e7ca6022834c93948ac0abdd5059797a5678b2ce9299b037a7c37bbfe2f816ba57ade80151c217aec58f89af282ab8641489b7cd7faddae1b4be5d3117b272aac50241f0306546b614d8cad68b69f3eb437fca6edc5ecd181b915e5deb180cbad375239429fbcdc646dbc3dd2fe2b7e12f382d16380126b84ce714f002680a98474aa6e69c580cfc9ad6175ab215396bf0f3a901f9881574a8c41d01e93db47808ff91dcda9b98366116a12e45c4b7c8fdf9c490eca3b64d121b0ed4f9c39da72a04e3f4ac29eb4a0277cc5916b1f5e95a6c32a5297f9f600d3e5d098b3aa8785febf9716c865e396890170515f0262adb99d00df79743979ae7f0ab4ff9fa1af87c7bbf14d5d7e30b0fc24d912f085d9ca9d5cd990b78a6e5bf672df1443d7c2deb37c0bd737bbc15d5bb1a1c7c8f15d1bc34543a1a67bf19be9ba0773574fa7bbe68e4198683ce46784b60fd19921e6d68df134c2a0f289d270c42750069f0ecaffc0f67cf3a395c5b3e613edd89075c0470f8a093507f8359192d45d4ea4e7d0bae502ce617b69c9660e9d06cc751e206e8bf89a2d50fa40c9a75e70d94ef2d29dbe8d67d7868532408dd7c449156ca01317145fe73615ab5173eb24e5aed1455c066fdaba33f28185ecb35e9ddf140c7d4ead37865c36aaac18022ebe6376661a4b968f72994f1eaa0ac3ea57fb704a4176c5e8fc5da38125950da1fe91b0db34502152a7e90b1fb67b20e30e4d2491957a92afae436f3e419ca78c4ea0962e39b8970f0f666f655826eb10fbfaa4610bba1d2c1bb13d440200dc7bc987637ca560a442c11d6f7ff40eae02f1619c73fbb0a9d12a8598ea533ceb2e3ef79d8cd8b525fdfce99e938f46c9bfe7ac069af7e8ea92806e20cc81b21594587d0a53405d2bab84225ff0d0841580e48fec824d92e0e07d7dc74f9c7789c43179c5434071914d058f9e87ed315efeaf8e85ee"}) syz_emit_ethernet(0x22, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @remote, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x1, 0xcc60, 0x5a, 0x7, 0x10}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x2, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0x5, 0x2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "c60d", 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0xc4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x338) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206fe"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x8840) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x4) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="5c0200001a0001000000000000000000fc000000000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000006c000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220102"], 0x25c}}, 0x0) 2.051490883s ago: executing program 1 (id=1256): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0x410}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0041}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01010000000000000000000000090900010073797a31000000000c00034000000000000000050c010000180a0102000000000000000000000000090002007379"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000044000480100001800c0001007061796c6f616405100001800b0001006c6f6f6b75700000100001800b0001006578746864720000100001800a0001006d617463680000000900010073797a30000000000900020073797a32000000000800094000000002140000001100010000000000000000000200000a"], 0xa0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010e00e1ff0600000000000000000c0000000000000000000000080031"], 0x28}], 0x1}, 0x4000800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="b4000000000000006111920000000000851000000200000085000000000000ab28d807bf8f63bc009500000000000000914661cd9a4153b1b4fa40d9f8d7ec75c7ba0db94ae1b5478d80361fc8cccacb9ebb3bdb57b66179ca97732e5fb5569ab822dab82bc63c36d1c76ce1bc2615616ab194538d82d7b91da581c90219a86b4c9ce7d539"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0xc, 0x2) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.976438379s ago: executing program 0 (id=1257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000180)={r1}, 0x5) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x236, 0xffffffffffffff80, "904772f5"}}}}}}, 0x0) r7 = accept$ax25(r2, &(0x7f00000005c0)={{0x3, @default}, [@remote, @remote, @null, @netrom, @rose, @remote, @rose, @netrom]}, &(0x7f0000000040)=0x48) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r9, 0x0, 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="02"], 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) 1.896958515s ago: executing program 1 (id=1258): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00"/96], 0xb8}}, 0x0) 1.796737078s ago: executing program 0 (id=1259): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x458, 0x0, 0x230, 0x2c8, 0x130, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@ip={@remote, @local, 0x0, 0x0, 'dummy0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0xff000000, 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x2e}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x2, 0x6, 0x6, 0x1, 0x1], 0x4, 0x2}, {0x2, [0x2, 0x2, 0x4, 0x1, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) tee(0xffffffffffffffff, r0, 0x2341, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000000000000100000008000100030000002c0004800500030080000022050003000100000005000300010000000500430001000000050003"], 0x50}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000008040000000800c6da4ea63f6d3f000001", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r8, @ANYBLOB='\v\x00\x00\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.730887286s ago: executing program 1 (id=1260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001900010000000000000000008020900000040005"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x100000001, 0x12) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) 1.668065591s ago: executing program 2 (id=1261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x0, 0x100000, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0x4008000) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000), 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000040000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02c286d6bd881366", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x50, 0x0, 0x40, 0x3}, {0x6}]}) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000000080)=0x7) write$ppp(r7, &(0x7f0000000300)="0113", 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000005000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) 1.430180127s ago: executing program 1 (id=1262): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000001000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d000000040105"], 0x254}}, 0x80) 1.335962328s ago: executing program 2 (id=1263): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async) 1.24005326s ago: executing program 1 (id=1264): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004020000080000000100000080000000cc97277427f5d37cf61b338a6a6b1d68abbd5a8526f16b378594057392e6e2340e9132ee2a0683d4eb4b8e0e39df2658a369e1cb599226f2292ffed2927b06e04f37b8c60b97f55083c55d7af6516669bfa6c1b2fb9e4e2d268c63a5a1d7c29efbfcff55719ea19d7b5f3a3666916bfd9f828c88f46e2ccafdc5784293a677251bff1362d432a0ef0e7e47ed9ee7285b4ee214d68230569d3bf818ee20114e62c3c7de51", @ANYRES32=0x1, @ANYBLOB='y\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000500"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pi6 \x00'}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x3, 0xff) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3]) 1.067220043s ago: executing program 4 (id=1265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x21e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003010300dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000004000000b7050000080000004608f0ff760000005e9200000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x36, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 597.404338ms ago: executing program 2 (id=1266): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 4 (id=1267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000180001002bbd7000000000001d010300150004000900000000000000a67494fcd3a42289070000001e010600fffffff800000000721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe16c93e15e556c2baed7f897fe841c155aab2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe74cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c035c8d586b2a88d81866930fca15c8a95d29e5b2ea0000080005006fad"], 0x154}, 0x1, 0x0, 0x0, 0xc001}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d03000000000000000013007c9ac7a1df834968020000030000"], 0x20}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x10}}, 0x110}}, 0x800) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x0) sendmsg$sock(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001a80)="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", 0x581}], 0x1}, 0x440c4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) write(r8, &(0x7f0000000040)="1c0000001a00df0214f9f407000904001f000000ff02000200020000", 0x1c) kernel console output (not intermixed with test programs): bridge0: port 3(netdevsim0) entered disabled state [ 90.414059][ T6169] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 90.423794][ T6169] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 90.432362][ T6169] bridge0: port 3(netdevsim0) entered blocking state [ 90.439407][ T6169] bridge0: port 3(netdevsim0) entered forwarding state [ 90.652278][ T6179] tipc: Can't bind to reserved service type 0 [ 90.710164][ T6179] bond0: entered promiscuous mode [ 90.722807][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 90.725492][ T6179] bond_slave_0: entered promiscuous mode [ 90.742373][ T6186] Illegal XDP return value 4294967274 on prog (id 35) dev N/A, expect packet loss! [ 90.772522][ T6185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 90.772703][ T6179] bond_slave_1: entered promiscuous mode [ 90.796918][ T6179] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.805350][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 90.862181][ T6179] bond0: left promiscuous mode [ 90.874878][ T6179] bond_slave_0: left promiscuous mode [ 90.881666][ T6179] bond_slave_1: left promiscuous mode [ 90.991120][ T6185] ip6gretap1: entered allmulticast mode [ 91.152207][ T6195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.73'. [ 91.531607][ T6214] netlink: 48 bytes leftover after parsing attributes in process `syz.3.77'. [ 92.245711][ T6222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.79'. [ 92.346257][ T6229] netlink: 32 bytes leftover after parsing attributes in process `syz.1.79'. [ 92.498946][ T6232] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.635509][ T6234] sctp: [Deprecated]: syz.4.83 (pid 6234) Use of int in max_burst socket option. [ 92.635509][ T6234] Use struct sctp_assoc_value instead [ 92.748192][ T6242] net_ratelimit: 46 callbacks suppressed [ 92.748210][ T6242] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 94.677418][ T6268] syz_tun: entered allmulticast mode [ 94.897237][ T6283] __nla_validate_parse: 4 callbacks suppressed [ 94.897254][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 94.913101][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 94.948693][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 95.194612][ T6299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.107'. [ 95.204291][ T6292] openvswitch: netlink: IP tunnel dst address not specified [ 95.301103][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.108'. [ 95.652445][ T6315] trusted_key: syz.4.112 sent an empty control message without MSG_MORE. [ 95.929753][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 95.974835][ T6330] hsr_slave_0: left promiscuous mode [ 95.976222][ T6334] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 95.989877][ T6333] netlink: 'syz.2.118': attribute type 5 has an invalid length. [ 96.017087][ T6330] hsr_slave_1: left promiscuous mode [ 96.186569][ T6336] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 96.227712][ T6336] macvtap1: entered allmulticast mode [ 96.235416][ T6336] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 96.318231][ T6336] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 96.331727][ T6336] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 97.085014][ T6385] xt_limit: Overflow, try lower: 0/0 [ 97.152191][ T6388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.131'. [ 97.278641][ T6385] netlink: 'syz.0.130': attribute type 30 has an invalid length. [ 97.314592][ T6392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.132'. [ 97.429274][ T6395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.133'. [ 97.751599][ T6409] netlink: 32 bytes leftover after parsing attributes in process `syz.4.137'. [ 97.900794][ T6413] 8021q: VLANs not supported on ip6tnl0 [ 98.187289][ T6431] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 98.237053][ T6431] netlink: 'syz.1.146': attribute type 3 has an invalid length. [ 98.273826][ T6431] NCSI netlink: No device for ifindex 246 [ 98.293539][ T6440] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 98.317169][ T43] IPVS: starting estimator thread 0... [ 98.338633][ T6440] openvswitch: netlink: Duplicate key (type 0). [ 98.352427][ T6437] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 98.407801][ T6442] IPVS: using max 35 ests per chain, 84000 per kthread [ 98.442392][ T6433] netlink: 'syz.2.145': attribute type 10 has an invalid length. [ 99.764046][ T6490] IPVS: set_ctl: invalid protocol: 1 172.20.20.68:20004 [ 99.838649][ T6492] netlink: 'syz.4.158': attribute type 4 has an invalid length. [ 99.860391][ T6452] infiniband syz1: set active [ 99.889241][ T6452] infiniband syz1: added macvlan1 [ 99.908975][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.060256][ T6452] RDS/IB: syz1: added [ 100.073250][ T6452] smc: adding ib device syz1 with port count 1 [ 100.111909][ T6452] smc: ib device syz1 port 1 has pnetid [ 100.235033][ T6506] __nla_validate_parse: 7 callbacks suppressed [ 100.235053][ T6506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.161'. [ 100.268695][ T6505] netlink: 32 bytes leftover after parsing attributes in process `syz.3.160'. [ 100.489366][ T6508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.160'. [ 100.730932][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.163'. [ 100.738877][ T6522] xt_TCPMSS: Only works on TCP SYN packets [ 100.912966][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.165'. [ 100.984659][ T6529] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 101.175808][ T6532] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 101.230480][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 101.753267][ T6551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.170'. [ 101.946849][ T6530] vlan2: entered allmulticast mode [ 101.952132][ T6530] bond1: entered allmulticast mode [ 101.957415][ T6530] gretap1: entered allmulticast mode [ 102.062281][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 102.129588][ T6550] netlink: 5 bytes leftover after parsing attributes in process `syz.3.171'. [ 102.534816][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.175'. [ 103.274782][ T6583] openvswitch: netlink: EtherType 0 is less than min 600 [ 103.312167][ T6581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.321321][ T6582] netlink: 'syz.1.179': attribute type 3 has an invalid length. [ 103.404080][ T6581] netlink: 'syz.1.179': attribute type 3 has an invalid length. [ 106.362061][ T6597] __nla_validate_parse: 4 callbacks suppressed [ 106.362080][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'. [ 106.421632][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 106.556362][ T6608] netlink: 48 bytes leftover after parsing attributes in process `syz.1.188'. [ 106.602801][ T6608] netlink: 56 bytes leftover after parsing attributes in process `syz.1.188'. [ 106.934381][ T6612] syzkaller1: entered promiscuous mode [ 106.940973][ T6612] syzkaller1: entered allmulticast mode [ 107.111922][ T6633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.193'. [ 107.334157][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.197'. [ 107.437053][ T6653] raw_sendmsg: syz.0.198 forgot to set AF_INET. Fix it! [ 107.569315][ T6658] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 107.824680][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 108.146739][ T6679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.205'. [ 108.409630][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.437624][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.481430][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.513048][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.591850][ T6698] Bluetooth: MGMT ver 1.23 [ 108.634210][ T6695] bond0: entered promiscuous mode [ 108.675278][ T6695] bond_slave_0: entered promiscuous mode [ 108.686183][ T6695] bond_slave_1: entered promiscuous mode [ 108.719191][ T6695] batadv_slave_0: entered promiscuous mode [ 108.725881][ T6695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.734539][ T6695] Cannot create hsr debugfs directory [ 108.741097][ T6695] hsr0: entered promiscuous mode [ 108.997741][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 109.539628][ T6733] netlink: 40 bytes leftover after parsing attributes in process `syz.2.221'. [ 110.169354][ T6740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.209418][ T6740] team0: Port device bond1 added [ 110.472094][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.480879][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.615066][ T5838] Bluetooth: hci0: command tx timeout [ 110.821182][ T6746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.835567][ T6746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.063491][ T9] syz1: Port: 1 Link DOWN [ 111.068848][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.081269][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.144919][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.189258][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.866336][ T6793] __nla_validate_parse: 7 callbacks suppressed [ 111.866355][ T6793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.235'. [ 112.332040][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 113.443385][ T6832] netlink: 172 bytes leftover after parsing attributes in process `syz.2.248'. [ 113.647576][ T6833] netlink: 224 bytes leftover after parsing attributes in process `syz.2.248'. [ 113.656564][ T6833] netlink: 68 bytes leftover after parsing attributes in process `syz.2.248'. [ 113.930486][ T6837] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 114.174069][ T6838] bond1: (slave gretap1): making interface the new active one [ 114.247982][ T6838] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 114.414066][ T6843] netlink: 56 bytes leftover after parsing attributes in process `syz.4.251'. [ 114.650852][ T6848] netlink: 72 bytes leftover after parsing attributes in process `syz.2.252'. [ 114.698012][ T6848] netlink: 72 bytes leftover after parsing attributes in process `syz.2.252'. [ 114.719094][ T6850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.011837][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 115.219719][ T6861] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 115.257793][ T6861] bond2: (slave vcan1): Error -95 calling set_mac_address [ 115.586814][ T6874] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 115.671061][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 115.701380][ T6876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.029799][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.062572][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.099878][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.145717][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.445196][ T6909] sctp: [Deprecated]: syz.0.274 (pid 6909) Use of int in max_burst socket option deprecated. [ 116.445196][ T6909] Use struct sctp_assoc_value instead [ 116.520111][ T6912] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 116.583838][ T6912] bridge0: port 3(team0) entered blocking state [ 116.615037][ T6912] bridge0: port 3(team0) entered disabled state [ 116.639858][ T6912] team0: entered allmulticast mode [ 116.651787][ T6912] team_slave_0: entered allmulticast mode [ 116.666166][ T6912] team_slave_1: entered allmulticast mode [ 116.690235][ T6912] team0: entered promiscuous mode [ 116.712222][ T6912] team_slave_0: entered promiscuous mode [ 116.728020][ T6912] team_slave_1: entered promiscuous mode [ 116.755334][ T6912] bridge0: port 3(team0) entered blocking state [ 116.761906][ T6912] bridge0: port 3(team0) entered forwarding state [ 117.704726][ T6963] __nla_validate_parse: 6 callbacks suppressed [ 117.704746][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'. [ 118.073575][ T6985] xt_HMARK: spi-set and port-set can't be combined [ 118.294351][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 118.320161][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 118.348524][ T6997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.296'. [ 118.353450][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 118.378730][ T6994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.296'. [ 118.409792][ T6998] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 118.611819][ T7000] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 118.637238][ T7000] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 118.651162][ T7000] bond2: (slave vti0): making interface the new active one [ 118.660659][ T7000] bond2: (slave vti0): Enslaving as an active interface with an up link [ 118.708835][ T6996] syz.0.297 (6996) used greatest stack depth: 17992 bytes left [ 118.986011][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 119.235688][ T5205] udevd[5205]: worker [5833] terminated by signal 33 (Unknown signal 33) [ 119.312492][ T7014] netlink: 'syz.1.303': attribute type 13 has an invalid length. [ 119.351754][ T7014] netlink: 'syz.1.303': attribute type 17 has an invalid length. [ 119.631765][ T7014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.715359][ T7041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.815828][ T7014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.815839][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 119.931551][ T7014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.189430][ T30] audit: type=1800 audit(1750548480.514:2): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.305" name="memory.events" dev="tmpfs" ino=285 res=0 errno=0 [ 120.252211][ T7046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.310'. [ 120.489813][ T7049] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 120.658801][ T7059] netlink: 56 bytes leftover after parsing attributes in process `syz.0.314'. [ 121.228322][ T7089] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.417683][ T7098] vlan0: entered promiscuous mode [ 122.546281][ T7122] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 122.842250][ T7130] xt_CT: No such helper "netbios-ns" [ 123.733922][ T7128] __nla_validate_parse: 10 callbacks suppressed [ 123.733939][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 123.769005][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 123.779329][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 123.788254][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 123.797697][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 123.809658][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 123.831317][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.337'. [ 123.852089][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 123.871583][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 123.881730][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 124.307303][ T7155] netlink: 'syz.1.343': attribute type 13 has an invalid length. [ 124.997990][ T30] audit: type=1800 audit(1750548485.324:3): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.350" name="memory.events" dev="tmpfs" ino=394 res=0 errno=0 [ 125.080073][ T30] audit: type=1804 audit(1750548485.324:4): pid=7184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.350" name="/newroot/73/memory.events" dev="tmpfs" ino=394 res=1 errno=0 [ 127.897699][ T7238] netlink: 'syz.0.364': attribute type 32 has an invalid length. [ 127.940848][ T7238] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 127.998189][ T7244] xt_TCPMSS: Only works on TCP SYN packets [ 128.135703][ T7246] netlink: 'syz.0.366': attribute type 13 has an invalid length. [ 128.802544][ T7264] __nla_validate_parse: 51 callbacks suppressed [ 128.802569][ T7264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.371'. [ 129.576571][ T7297] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.383'. [ 129.601950][ T7297] netlink: zone id is out of range [ 129.630042][ T7297] netlink: zone id is out of range [ 129.635206][ T7297] netlink: get zone limit has 8 unknown bytes [ 129.859916][ T7313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.389'. [ 130.263335][ T7341] netlink: 'syz.1.398': attribute type 5 has an invalid length. [ 130.385209][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 130.417810][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 130.446763][ T7356] netlink: 47 bytes leftover after parsing attributes in process `syz.1.404'. [ 130.579239][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 130.750200][ T7369] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 130.866605][ T7369] bond3: (slave veth3): Enslaving as an active interface with a down link [ 130.875912][ T7370] netlink: 'syz.3.408': attribute type 5 has an invalid length. [ 130.920287][ T7376] bond3: (slave veth5): Enslaving as an active interface with a down link [ 131.381185][ T7391] netlink: 48 bytes leftover after parsing attributes in process `syz.4.416'. [ 131.873633][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 131.894018][ T7405] netlink: 104 bytes leftover after parsing attributes in process `syz.4.420'. [ 131.913817][ T7403] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 131.927344][ T7403] netlink: 'syz.3.417': attribute type 2 has an invalid length. [ 132.345323][ T7420] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 132.362671][ T7420] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 132.931924][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947146][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.319693][ T7455] netlink: 'syz.1.433': attribute type 2 has an invalid length. [ 133.384930][ T7455] vxlan: entered promiscuous mode [ 133.478887][ T7467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 133.575208][ T7470] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 133.619094][ T7470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.647907][ T7471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.929837][ T7449] __nla_validate_parse: 8 callbacks suppressed [ 133.929854][ T7449] netlink: 76 bytes leftover after parsing attributes in process `syz.4.430'. [ 133.963938][ T7481] netlink: 224 bytes leftover after parsing attributes in process `syz.0.440'. [ 133.992320][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 134.659086][ T7504] netlink: 132 bytes leftover after parsing attributes in process `syz.1.447'. [ 135.341231][ T7520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.349854][ T7520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.361312][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.454'. [ 135.376247][ T7520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.377542][ T7515] can: request_module (can-proto-0) failed. [ 136.073376][ T7555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 136.097237][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 136.408674][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 136.446176][ T7564] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 136.477531][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.463'. [ 136.554963][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.464'. [ 136.609038][ T7568] netlink: 'syz.4.465': attribute type 11 has an invalid length. [ 136.733278][ T10] IPVS: starting estimator thread 0... [ 136.739551][ T7574] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 136.775625][ T7569] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 136.847232][ T7577] IPVS: using max 32 ests per chain, 76800 per kthread [ 137.160078][ T7590] Cannot find del_set index 1 as target [ 137.974635][ T7632] netlink: 'syz.1.482': attribute type 29 has an invalid length. [ 137.996126][ T7632] netlink: 'syz.1.482': attribute type 29 has an invalid length. [ 138.038179][ T7632] unsupported nla_type 58 [ 138.323501][ T7659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.356593][ T7659] tipc: Started in network mode [ 138.384202][ T7659] tipc: Node identity 76ec112b6dd8, cluster identity 4711 [ 138.397390][ T7659] tipc: Enabled bearer , priority 10 [ 138.480045][ T7666] unsupported nlmsg_type 40 [ 138.663925][ T7659] tipc: Resetting bearer [ 138.770966][ T7658] tipc: Resetting bearer [ 139.491820][ T9] tipc: Node number set to 456397099 [ 139.970462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.539098][ T7658] tipc: Disabling bearer [ 140.557261][ T7689] __nla_validate_parse: 6 callbacks suppressed [ 140.557278][ T7689] netlink: 546 bytes leftover after parsing attributes in process `syz.2.498'. [ 140.748914][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 140.801388][ T7706] netlink: 'syz.0.502': attribute type 11 has an invalid length. [ 140.841989][ T7706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.502'. [ 140.921089][ T7704] bridge2: entered allmulticast mode [ 141.242095][ T7724] Bluetooth: MGMT ver 1.23 [ 141.423907][ T7726] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 141.457576][ T7726] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 141.747201][ T7752] netlink: 666 bytes leftover after parsing attributes in process `syz.3.516'. [ 141.952091][ T7705] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 141.964106][ T7758] IPVS: set_ctl: invalid protocol: 51 172.20.20.29:20004 [ 141.973563][ T7758] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 141.998531][ T7760] netlink: 248 bytes leftover after parsing attributes in process `syz.2.520'. [ 142.421564][ T7766] netlink: 356 bytes leftover after parsing attributes in process `syz.1.522'. [ 142.440899][ T7766] netlink: 356 bytes leftover after parsing attributes in process `syz.1.522'. [ 143.503114][ T7804] tipc: Started in network mode [ 143.552943][ T7804] tipc: Node identity ab0, cluster identity 4711 [ 143.569702][ T7804] tipc: Node number set to 2736 [ 143.920828][ T7821] netlink: 144 bytes leftover after parsing attributes in process `syz.4.536'. [ 143.968178][ T7821] netlink: 72 bytes leftover after parsing attributes in process `syz.4.536'. [ 144.012267][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 144.035089][ T7827] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 144.106133][ T7827] syzkaller1: entered promiscuous mode [ 144.141754][ T7827] syzkaller1: entered allmulticast mode [ 144.173504][ T7831] openvswitch: netlink: IP tunnel TTL not specified. [ 145.067947][ T7883] netlink: 'syz.2.553': attribute type 30 has an invalid length. [ 145.088249][ T3537] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.097726][ T7883] netlink: 'syz.2.553': attribute type 30 has an invalid length. [ 145.105834][ T3537] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.121010][ T7885] sctp: [Deprecated]: syz.2.553 (pid 7885) Use of int in max_burst socket option. [ 145.121010][ T7885] Use struct sctp_assoc_value instead [ 145.138563][ T3537] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.159472][ T3537] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.436766][ T7901] gretap0: entered promiscuous mode [ 145.461033][ T7901] vlan3: entered promiscuous mode [ 146.284932][ T7935] syzkaller0: entered promiscuous mode [ 146.290637][ T7935] syzkaller0: entered allmulticast mode [ 146.409795][ T7951] x_tables: ip6_tables: cgroup.0 match: invalid size 8 (kernel) != (user) 4112 [ 146.848064][ T7965] __nla_validate_parse: 2 callbacks suppressed [ 146.848083][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'. [ 147.126348][ T7968] xt_CT: No such helper "snmp" [ 148.453743][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'. [ 148.455695][ T7977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.582'. [ 148.463460][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'. [ 148.463494][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 148.465072][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 149.140309][ T8003] netlink: 'syz.4.591': attribute type 13 has an invalid length. [ 149.384757][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.392521][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.593592][ T8003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.614728][ T8003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.897311][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.946327][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.013871][ T4173] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.027882][ T4173] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.388302][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 150.539413][ T8038] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.600'. [ 150.617653][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 150.820385][ T8054] netlink: 56 bytes leftover after parsing attributes in process `syz.0.606'. [ 151.130949][ T8060] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 151.154289][ T8061] netlink: 'syz.4.609': attribute type 7 has an invalid length. [ 151.180404][ T8064] netlink: 'syz.4.609': attribute type 13 has an invalid length. [ 151.523886][ T8074] netdevsim netdevsim4: Direct firmware load for .* failed with error -2 [ 151.550718][ T8074] netdevsim netdevsim4: Falling back to sysfs fallback for: .* [ 152.023422][ T8081] xt_CT: No such helper "snmp" [ 152.028291][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.039401][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.049190][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.058948][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.069594][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.212275][ T8092] __nla_validate_parse: 3 callbacks suppressed [ 152.212292][ T8092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.616'. [ 152.229639][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.616'. [ 152.590351][ T8106] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 152.969744][ T8117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.620'. [ 152.975380][ T8084] chnl_net:caif_netlink_parms(): no params data found [ 153.007113][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 153.135080][ T8122] netlink: 788 bytes leftover after parsing attributes in process `syz.1.621'. [ 153.175573][ T8119] bridge0: port 3(netdevsim0) entered disabled state [ 153.182467][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.190017][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.360105][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.394245][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.497421][ T8119] tipc: Resetting bearer [ 153.780622][ T3537] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.796584][ T3537] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.805812][ T3537] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.816497][ T3537] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.871654][ T49] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.889564][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.905944][ T49] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.916303][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.998382][ T8137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.625'. [ 154.095335][ T8143] netlink: 176 bytes leftover after parsing attributes in process `syz.2.626'. [ 154.125141][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.132449][ T5840] Bluetooth: hci2: command tx timeout [ 154.173520][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.194658][ T8084] bridge_slave_0: entered allmulticast mode [ 154.209139][ T8084] bridge_slave_0: entered promiscuous mode [ 154.228096][ T8144] netlink: 452 bytes leftover after parsing attributes in process `syz.0.627'. [ 154.287595][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.305069][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.330965][ T8084] bridge_slave_1: entered allmulticast mode [ 154.358624][ T8084] bridge_slave_1: entered promiscuous mode [ 154.615522][ T8084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.655489][ T8084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.756668][ T8163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.632'. [ 154.787448][ T8163] netlink: 88 bytes leftover after parsing attributes in process `syz.2.632'. [ 154.960122][ T8084] team0: Port device team_slave_0 added [ 155.013667][ T8084] team0: Port device team_slave_1 added [ 155.216440][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.237096][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.267800][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 155.297759][ T8084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.348397][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.355387][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.404582][ T8084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.560192][ T30] audit: type=1800 audit(1750548515.894:5): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.634" name="cgroup.controllers" dev="tmpfs" ino=685 res=0 errno=0 [ 156.048351][ T8084] hsr_slave_0: entered promiscuous mode [ 156.071093][ T8084] hsr_slave_1: entered promiscuous mode [ 156.090403][ T8084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.119118][ T8084] Cannot create hsr debugfs directory [ 156.138915][ T8196] netlink: 'syz.4.640': attribute type 3 has an invalid length. [ 156.162004][ T8196] netlink: 'syz.4.640': attribute type 3 has an invalid length. [ 156.207124][ T5840] Bluetooth: hci2: command 0x041b tx timeout [ 156.703470][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.755010][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.224281][ T8084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.306594][ T8258] netlink: 'syz.2.653': attribute type 9 has an invalid length. [ 157.328546][ T8258] netlink: 'syz.2.653': attribute type 6 has an invalid length. [ 157.354143][ T8258] netlink: 'syz.2.653': attribute type 7 has an invalid length. [ 157.445779][ T8258] netlink: 'syz.2.653': attribute type 8 has an invalid length. [ 157.476380][ T8261] __nla_validate_parse: 5 callbacks suppressed [ 157.476400][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 157.505356][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 157.516403][ T8084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.659408][ T8261] netlink: 'syz.0.657': attribute type 4 has an invalid length. [ 157.723692][ T8265] netlink: 'syz.0.657': attribute type 4 has an invalid length. [ 157.747204][ T8084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.850514][ T8270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.866564][ T8270] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 158.090118][ T8084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.098117][ T8281] netlink: 212 bytes leftover after parsing attributes in process `syz.2.662'. [ 158.287096][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 158.437852][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.550977][ T8084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.568375][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.669'. [ 158.601074][ T8084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.640561][ T8084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.663732][ T8084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.767746][ T8308] tipc: Started in network mode [ 158.790534][ T8308] tipc: Node identity ac14140f, cluster identity 4711 [ 158.800902][ T8308] tipc: New replicast peer: 255.255.255.255 [ 158.816245][ T8308] tipc: Enabled bearer , priority 10 [ 158.861782][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.901288][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 158.913674][ T8319] tipc: Disabling bearer [ 158.937772][ T1342] wlan1: Trigger new scan to find an IBSS to join [ 159.056831][ T8323] xt_ecn: cannot match TCP bits for non-tcp packets [ 159.082902][ T8323] netlink: 48 bytes leftover after parsing attributes in process `syz.1.675'. [ 159.090553][ T8084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.110801][ T8323] netlink: 'syz.1.675': attribute type 2 has an invalid length. [ 159.116124][ T8326] dvmrp2: entered allmulticast mode [ 159.120120][ T8323] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 159.158313][ T8084] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.184949][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.192153][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.261226][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.268438][ T4173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.459990][ T8338] netlink: 96 bytes leftover after parsing attributes in process `syz.4.680'. [ 159.512597][ T8340] openvswitch: netlink: Key type 30 is not supported [ 159.849057][ T1149] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 160.037629][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.225151][ T8084] veth0_vlan: entered promiscuous mode [ 160.259532][ T8084] veth1_vlan: entered promiscuous mode [ 160.357713][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'. [ 160.377675][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 160.391656][ T8084] veth0_macvtap: entered promiscuous mode [ 160.410957][ T8084] veth1_macvtap: entered promiscuous mode [ 160.433026][ T8381] bridge0: port 3(erspan0) entered blocking state [ 160.464182][ T8381] bridge0: port 3(erspan0) entered disabled state [ 160.488378][ T8381] erspan0: entered allmulticast mode [ 160.511106][ T8381] erspan0: entered promiscuous mode [ 160.549096][ T8386] erspan0: left allmulticast mode [ 160.554179][ T8386] erspan0: left promiscuous mode [ 160.585190][ T8386] bridge0: port 3(erspan0) entered disabled state [ 160.653987][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.675678][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.723851][ T78] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.754172][ T78] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.806455][ T78] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.839928][ T78] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.078533][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.096769][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.172752][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 161.229496][ T8410] x_tables: duplicate underflow at hook 2 [ 161.283630][ T8403] bridge_slave_1: left allmulticast mode [ 161.289776][ T8403] bridge_slave_1: left promiscuous mode [ 161.295572][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.310830][ T8403] bridge_slave_0: left allmulticast mode [ 161.316679][ T8403] bridge_slave_0: left promiscuous mode [ 161.322974][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.451179][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.487394][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.925061][ T8436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.161016][ T8441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.708'. [ 162.451290][ T78] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.810872][ T8420] validate_nla: 8 callbacks suppressed [ 162.810890][ T8420] netlink: 'syz.4.702': attribute type 2 has an invalid length. [ 162.840881][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 163.001056][ T78] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.439061][ T78] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.608889][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.618127][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.628323][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.641929][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.660249][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.660853][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 163.725374][ T78] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.153432][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 164.227615][ T78] bridge_slave_1: left allmulticast mode [ 164.233563][ T78] bridge_slave_1: left promiscuous mode [ 164.279202][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.409023][ T78] bridge_slave_0: left allmulticast mode [ 164.414719][ T78] bridge_slave_0: left promiscuous mode [ 164.459066][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.738227][ T8493] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.753402][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.718'. [ 164.900061][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 165.191124][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.207002][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.218581][ T78] bond0 (unregistering): Released all slaves [ 165.344274][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 165.585580][ T8509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.616452][ T8512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 165.626687][ T8512] netlink: 'syz.0.725': attribute type 6 has an invalid length. [ 165.636850][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.725'. [ 165.729686][ T51] Bluetooth: hci2: command tx timeout [ 166.009133][ T5915] IPVS: starting estimator thread 0... [ 166.097280][ T8534] IPVS: using max 27 ests per chain, 64800 per kthread [ 166.098447][ T8538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.296367][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 166.327837][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 166.327982][ T8464] chnl_net:caif_netlink_parms(): no params data found [ 166.810482][ T78] hsr_slave_0: left promiscuous mode [ 166.841528][ T78] hsr_slave_1: left promiscuous mode [ 166.870634][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.898751][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.931976][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.940026][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.988943][ T78] veth1_macvtap: left promiscuous mode [ 166.994845][ T78] veth0_macvtap: left promiscuous mode [ 167.018732][ T78] veth1_vlan: left promiscuous mode [ 167.024332][ T78] veth0_vlan: left promiscuous mode [ 167.809308][ T51] Bluetooth: hci2: command tx timeout [ 168.162492][ T78] team0 (unregistering): Port device team_slave_1 removed [ 168.249600][ T78] team0 (unregistering): Port device team_slave_0 removed [ 168.779762][ T8595] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-ç/": -EINTR [ 168.980106][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.057205][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.064483][ T8464] bridge_slave_0: entered allmulticast mode [ 169.090945][ T8464] bridge_slave_0: entered promiscuous mode [ 169.113395][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.147110][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.154406][ T8464] bridge_slave_1: entered allmulticast mode [ 169.193270][ T8464] bridge_slave_1: entered promiscuous mode [ 169.201409][ T8614] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.237277][ T8619] netlink: 'syz.2.750': attribute type 1 has an invalid length. [ 169.253389][ T8619] netlink: 232 bytes leftover after parsing attributes in process `syz.2.750'. [ 169.392664][ T8627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.405581][ T8464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.425660][ T8628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.445318][ T8630] netlink: 'syz.0.753': attribute type 10 has an invalid length. [ 169.471626][ T8464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.601186][ T8630] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.736274][ T8464] team0: Port device team_slave_0 added [ 169.760055][ T8464] team0: Port device team_slave_1 added [ 169.887355][ T51] Bluetooth: hci2: command tx timeout [ 169.920049][ T8650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.756'. [ 169.961164][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.970941][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.998295][ T8464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.999322][ T8641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.011703][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.026841][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.058189][ T8464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.294936][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 170.472534][ T8663] netlink: 'syz.0.763': attribute type 11 has an invalid length. [ 170.495883][ T8652] tipc: Enabled bearer , priority 10 [ 170.619619][ T8662] tipc: Resetting bearer [ 170.825974][ T8464] hsr_slave_0: entered promiscuous mode [ 170.858532][ T8464] hsr_slave_1: entered promiscuous mode [ 170.875289][ T8464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.894721][ T8464] Cannot create hsr debugfs directory [ 170.905988][ T8651] tipc: Resetting bearer [ 170.996149][ T8671] netlink: 'syz.2.764': attribute type 6 has an invalid length. [ 171.607422][ T977] tipc: Node number set to 2886997007 [ 171.969436][ T51] Bluetooth: hci2: command tx timeout [ 172.490589][ T8651] tipc: Disabling bearer [ 172.513578][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 172.669375][ T8676] netlink: 'syz.0.767': attribute type 2 has an invalid length. [ 172.679951][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 172.880552][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 172.951054][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 173.230397][ T8684] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.886350][ T8700] netlink: 'syz.4.773': attribute type 4 has an invalid length. [ 173.924685][ T8700] netlink: 'syz.4.773': attribute type 4 has an invalid length. [ 173.936002][ T8464] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.002373][ T8464] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.056152][ T8464] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.085618][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'. [ 174.085640][ T8464] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.228991][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.778'. [ 174.257199][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 174.330240][ T8721] ip6gretap1: entered allmulticast mode [ 174.353684][ T8726] syzkaller1: entered promiscuous mode [ 174.380219][ T8728] xt_hashlimit: size too large, truncated to 1048576 [ 174.388960][ T8726] syzkaller1: entered allmulticast mode [ 174.583649][ T8464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.706785][ T8464] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.714045][ T8744] netlink: 'syz.1.784': attribute type 6 has an invalid length. [ 174.753072][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.760379][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.771884][ T8746] bridge0: entered allmulticast mode [ 174.796508][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 174.822198][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.830208][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.840594][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 174.855601][ T8746] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 174.894336][ T8746] bridge0: port 3(netdevsim0) entered disabled state [ 174.951470][ T8746] bridge_slave_1: left allmulticast mode [ 174.968354][ T8746] bridge_slave_1: left promiscuous mode [ 174.977415][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.050039][ T8746] bridge_slave_0: left allmulticast mode [ 175.065716][ T8746] bridge_slave_0: left promiscuous mode [ 175.066062][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 175.075962][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.088250][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 175.139609][ T8746] bridge0 (unregistering): left allmulticast mode [ 175.194981][ T8766] netlink: 168 bytes leftover after parsing attributes in process `syz.4.791'. [ 175.306511][ T8464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.318712][ T8464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.374432][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.793'. [ 175.428924][ T8768] pim6reg1: entered promiscuous mode [ 175.457095][ T8768] pim6reg1: entered allmulticast mode [ 175.521805][ T8768] netlink: 96 bytes leftover after parsing attributes in process `syz.0.792'. [ 175.609649][ T8785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.796'. [ 175.646096][ T8787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.795'. [ 176.034579][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.226627][ T8464] veth0_vlan: entered promiscuous mode [ 176.373145][ T8464] veth1_vlan: entered promiscuous mode [ 176.792645][ T8464] veth0_macvtap: entered promiscuous mode [ 176.819827][ T8464] veth1_macvtap: entered promiscuous mode [ 176.891537][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.923854][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.991895][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.086114][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.241917][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.251669][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.343933][ T8834] team0: Port device team_slave_0 removed [ 177.469369][ T4173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.484753][ T4173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.540523][ T4173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.555607][ T4173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.939164][ T1342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.080516][ T1342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.190535][ T1342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.306648][ T8858] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 178.321828][ T1342] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.725511][ T1342] bridge_slave_1: left allmulticast mode [ 178.757408][ T1342] bridge_slave_1: left promiscuous mode [ 178.763289][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.845492][ T1342] bridge_slave_0: left allmulticast mode [ 178.867151][ T1342] bridge_slave_0: left promiscuous mode [ 178.877277][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.026103][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.035621][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.044614][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.058928][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.069182][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.223362][ T30] audit: type=1800 audit(1750548539.554:6): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.820" name=14 dev="tmpfs" ino=972 res=0 errno=0 [ 179.370717][ T8890] __nla_validate_parse: 14 callbacks suppressed [ 179.370736][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.823'. [ 179.748031][ T8895] netlink: 'syz.2.824': attribute type 10 has an invalid length. [ 179.755912][ T8895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.824'. [ 179.872015][ T1342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.884000][ T1342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.894762][ T1342] bond0 (unregistering): Released all slaves [ 179.913946][ T8875] netlink: 'syz.4.820': attribute type 12 has an invalid length. [ 179.922897][ T8875] netlink: 132 bytes leftover after parsing attributes in process `syz.4.820'. [ 180.005825][ T8895] batman_adv: batadv0: Adding interface: virt_wifi0 [ 180.017343][ T8895] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.058393][ T8895] batman_adv: batadv0: Interface activated: virt_wifi0 [ 180.156347][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 180.382491][ T8907] netlink: 168 bytes leftover after parsing attributes in process `syz.2.828'. [ 180.423435][ T8907] netlink: 168 bytes leftover after parsing attributes in process `syz.2.828'. [ 180.846402][ T8922] xt_CT: No such helper "syz1" [ 180.953208][ T8927] netlink: 300 bytes leftover after parsing attributes in process `syz.1.834'. [ 181.204353][ T8930] netlink: 'syz.1.835': attribute type 4 has an invalid length. [ 181.369008][ T1342] hsr_slave_0: left promiscuous mode [ 181.384575][ T1342] hsr_slave_1: left promiscuous mode [ 181.398112][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.407397][ T5840] Bluetooth: hci2: command tx timeout [ 181.415796][ T8935] netlink: 'syz.1.835': attribute type 39 has an invalid length. [ 181.486284][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.498312][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.514570][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.543952][ T1342] veth1_macvtap: left promiscuous mode [ 181.550056][ T1342] veth0_macvtap: left promiscuous mode [ 181.556573][ T1342] veth1_vlan: left promiscuous mode [ 181.562014][ T1342] veth0_vlan: left promiscuous mode [ 181.896372][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 182.305522][ T1342] team0 (unregistering): Port device team_slave_1 removed [ 182.377162][ T1342] team0 (unregistering): Port device team_slave_0 removed [ 182.383747][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 182.861920][ T8935] syz_tun (unregistering): left allmulticast mode [ 182.992284][ T8950] netlink: 168 bytes leftover after parsing attributes in process `syz.4.841'. [ 183.085230][ T8953] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 183.147084][ T8882] chnl_net:caif_netlink_parms(): no params data found [ 183.289990][ T8969] netlink: 'syz.0.845': attribute type 1 has an invalid length. [ 183.342819][ T8970] netlink: 'syz.1.846': attribute type 39 has an invalid length. [ 183.411030][ T8963] syzkaller0: entered promiscuous mode [ 183.416561][ T8963] syzkaller0: entered allmulticast mode [ 183.497647][ T5840] Bluetooth: hci2: command tx timeout [ 183.603952][ T8966] team0 (unregistering): Port device team_slave_0 removed [ 183.612702][ T8966] team0 (unregistering): Port device team_slave_1 removed [ 183.691399][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.707182][ T8882] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.723389][ T8882] bridge_slave_0: entered allmulticast mode [ 183.743825][ T8882] bridge_slave_0: entered promiscuous mode [ 184.234315][ T8993] netlink: 'syz.1.850': attribute type 16 has an invalid length. [ 185.568956][ T5840] Bluetooth: hci2: command tx timeout [ 185.614723][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.622043][ T8882] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.629601][ T8882] bridge_slave_1: entered allmulticast mode [ 185.636796][ T8882] bridge_slave_1: entered promiscuous mode [ 185.663693][ T8995] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 185.772126][ T8999] __nla_validate_parse: 4 callbacks suppressed [ 185.772145][ T8999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.852'. [ 185.812398][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.853'. [ 185.838064][ T8882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.865129][ T8882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.030974][ T8882] team0: Port device team_slave_0 added [ 186.062526][ T8882] team0: Port device team_slave_1 added [ 186.084229][ T9007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.134493][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.855'. [ 186.201930][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 186.256035][ T9015] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.857'. [ 186.384079][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.392117][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.418881][ T8882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.485316][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.514269][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.563482][ T8882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.748315][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.858'. [ 186.834231][ T9020] netlink: 48 bytes leftover after parsing attributes in process `syz.0.858'. [ 186.905712][ T8882] hsr_slave_0: entered promiscuous mode [ 186.919721][ T8882] hsr_slave_1: entered promiscuous mode [ 186.956797][ T8882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.980492][ T8882] Cannot create hsr debugfs directory [ 187.269615][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.861'. [ 187.281289][ T9039] netlink: 'syz.0.863': attribute type 11 has an invalid length. [ 187.283780][ T9040] netlink: 112 bytes leftover after parsing attributes in process `syz.0.863'. [ 187.647667][ T9057] netlink: 168 bytes leftover after parsing attributes in process `syz.0.866'. [ 187.649260][ T5840] Bluetooth: hci2: command tx timeout [ 187.663174][ T9056] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.973613][ T9067] sctp: [Deprecated]: syz.0.870 (pid 9067) Use of int in max_burst socket option. [ 187.973613][ T9067] Use struct sctp_assoc_value instead [ 188.127632][ T9070] netlink: 'syz.0.870': attribute type 10 has an invalid length. [ 188.157485][ T9070] dummy0: entered promiscuous mode [ 188.204517][ T9070] bond0: (slave dummy0): Releasing backup interface [ 188.291229][ T9070] bridge0: port 3(dummy0) entered blocking state [ 188.316556][ T9070] bridge0: port 3(dummy0) entered disabled state [ 188.333480][ T9070] dummy0: entered allmulticast mode [ 188.528675][ T8882] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.553867][ T8882] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.591606][ T8882] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.617994][ T8882] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.501683][ T8882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.554772][ T8882] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.585371][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.592555][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.652461][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.659673][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.323443][ T8882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.494542][ T8882] veth0_vlan: entered promiscuous mode [ 190.534782][ T8882] veth1_vlan: entered promiscuous mode [ 190.617846][ T8882] veth0_macvtap: entered promiscuous mode [ 190.633123][ T9108] xt_hashlimit: size too large, truncated to 1048576 [ 190.644966][ T8882] veth1_macvtap: entered promiscuous mode [ 190.698599][ T8882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.714154][ T8882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.754049][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.787367][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.834009][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.855662][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.912139][ T9138] netlink: 'syz.2.885': attribute type 10 has an invalid length. [ 190.920601][ T9138] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 190.932552][ T9138] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 190.945177][ T9138] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 191.137825][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.167472][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.170357][ T9148] netlink: 'syz.0.887': attribute type 4 has an invalid length. [ 191.311559][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.331504][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.333302][ T9151] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 191.342152][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.613600][ T9169] __nla_validate_parse: 8 callbacks suppressed [ 191.613620][ T9169] netlink: 68 bytes leftover after parsing attributes in process `syz.2.893'. [ 191.732544][ T9175] netlink: 'syz.1.896': attribute type 2 has an invalid length. [ 191.734280][ T9173] netlink: 33 bytes leftover after parsing attributes in process `syz.0.895'. [ 191.765324][ T9175] netlink: 119 bytes leftover after parsing attributes in process `syz.1.896'. [ 191.879789][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 192.106756][ T9189] netlink: 'syz.1.900': attribute type 3 has an invalid length. [ 192.201552][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.222264][ T9192] netlink: 788 bytes leftover after parsing attributes in process `syz.2.899'. [ 192.326327][ T9186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.364723][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.378270][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.710148][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.800565][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.965086][ T49] bridge_slave_1: left allmulticast mode [ 192.971200][ T49] bridge_slave_1: left promiscuous mode [ 193.027359][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.062316][ T49] bridge_slave_0: left allmulticast mode [ 193.068643][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 193.087393][ T49] bridge_slave_0: left promiscuous mode [ 193.093213][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.415530][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.655173][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.665686][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.674374][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.683418][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.691558][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.951213][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.962651][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.980366][ T49] bond0 (unregistering): Released all slaves [ 194.010537][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 194.207561][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.373324][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379799][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.457386][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.904237][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.913'. [ 195.490629][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.696404][ T49] hsr_slave_0: left promiscuous mode [ 195.713515][ T49] hsr_slave_1: left promiscuous mode [ 195.727417][ T51] Bluetooth: hci2: command tx timeout [ 195.739003][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.757016][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.773144][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.791058][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.866378][ T49] veth1_macvtap: left promiscuous mode [ 195.877094][ T49] veth0_macvtap: left promiscuous mode [ 195.887501][ T49] veth1_vlan: left promiscuous mode [ 195.897117][ T49] veth0_vlan: left promiscuous mode [ 195.964327][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 196.014327][ T9273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.921'. [ 196.538131][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.605178][ T9294] netlink: 'syz.1.927': attribute type 1 has an invalid length. [ 196.898985][ T49] team0 (unregistering): Port device team_slave_1 removed [ 196.955164][ T49] team0 (unregistering): Port device team_slave_0 removed [ 197.247647][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.509624][ T9273] gretap2: entered promiscuous mode [ 197.567583][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.757226][ T9311] netlink: 'syz.2.930': attribute type 13 has an invalid length. [ 197.785504][ T9311] netlink: 'syz.2.930': attribute type 17 has an invalid length. [ 197.814426][ T51] Bluetooth: hci2: command tx timeout [ 197.842268][ T9219] chnl_net:caif_netlink_parms(): no params data found [ 198.215604][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.265982][ T9311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.294145][ T9311] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.309219][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.342311][ T9311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.373484][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.608827][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.675709][ T9338] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.846351][ T9339] can: request_module (can-proto-3) failed. [ 199.188050][ T9219] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.221022][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.258585][ T9219] bridge_slave_0: entered allmulticast mode [ 199.309479][ T9219] bridge_slave_0: entered promiscuous mode [ 199.358758][ T9219] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.395095][ T9219] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.422939][ T9219] bridge_slave_1: entered allmulticast mode [ 199.451310][ T9219] bridge_slave_1: entered promiscuous mode [ 199.495949][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.649756][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.897088][ T5838] Bluetooth: hci2: command tx timeout [ 200.033371][ T9219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.134943][ T9219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.488093][ T9219] team0: Port device team_slave_0 added [ 200.651887][ T9219] team0: Port device team_slave_1 added [ 200.688795][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.699604][ T9375] __nla_validate_parse: 2 callbacks suppressed [ 200.699620][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 200.732030][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 200.756401][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.1.945'. [ 200.821185][ T5838] block nbd0: Receive control failed (result -107) [ 200.849210][ T9219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.856318][ T9219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.907089][ T9375] nbd0: detected capacity change from 0 to 256 [ 200.923432][ T9219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.958522][ T9219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.982896][ T9219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.064408][ T9219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.212751][ T9219] hsr_slave_0: entered promiscuous mode [ 201.221643][ T9219] hsr_slave_1: entered promiscuous mode [ 201.229443][ T9219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.283895][ T9380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.327322][ T9219] Cannot create hsr debugfs directory [ 201.446290][ T9387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.948'. [ 201.505131][ T9388] openvswitch: netlink: IP tunnel dst address not specified [ 201.568869][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 201.574961][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 201.728150][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.731591][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 201.828914][ T9405] netem: incorrect ge model size [ 201.834180][ T9405] netem: change failed [ 201.868986][ T9411] netem: incorrect ge model size [ 201.874210][ T9411] netem: change failed [ 201.968928][ T51] Bluetooth: hci2: command tx timeout [ 201.977244][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.955'. [ 202.077277][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.954'. [ 202.133969][ T9420] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 202.386169][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.959'. [ 202.529711][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.787721][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.916503][ T9446] warn_alloc: 1 callbacks suppressed [ 202.916521][ T9446] syz.2.960: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 202.997981][ T9446] CPU: 1 UID: 0 PID: 9446 Comm: syz.2.960 Not tainted 6.16.0-rc2-syzkaller-00592-g0289c51f889e #0 PREEMPT(full) [ 202.998007][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.998018][ T9446] Call Trace: [ 202.998026][ T9446] [ 202.998035][ T9446] dump_stack_lvl+0x189/0x250 [ 202.998077][ T9446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.998100][ T9446] ? __pfx__printk+0x10/0x10 [ 202.998117][ T9446] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 202.998134][ T9446] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 202.998152][ T9446] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 202.998171][ T9446] warn_alloc+0x214/0x310 [ 202.998198][ T9446] ? __pfx_warn_alloc+0x10/0x10 [ 202.998224][ T9446] ? __get_vm_area_node+0x28f/0x300 [ 202.998243][ T9446] ? xp_create_and_assign_umem+0x184/0xce0 [ 202.998264][ T9446] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 202.998320][ T9446] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.998343][ T9446] ? rcu_is_watching+0x15/0xb0 [ 202.998368][ T9446] ? xp_create_and_assign_umem+0x184/0xce0 [ 202.998383][ T9446] ? xp_create_and_assign_umem+0x184/0xce0 [ 202.998398][ T9446] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 202.998416][ T9446] ? xp_create_and_assign_umem+0x184/0xce0 [ 202.998433][ T9446] ? xp_create_and_assign_umem+0xa4/0xce0 [ 202.998456][ T9446] xp_create_and_assign_umem+0x184/0xce0 [ 202.998480][ T9446] ? __pfx_xsk_lookup_xsk_from_fd+0x10/0x10 [ 202.998503][ T9446] ? dev_get_by_index+0x22/0x2e0 [ 202.998518][ T9446] ? dev_get_by_index+0x22/0x2e0 [ 202.998541][ T9446] xsk_bind+0x95a/0xf90 [ 202.998572][ T9446] __sys_bind+0x2c3/0x3e0 [ 202.998589][ T9446] ? count_memcg_event_mm+0x21/0x260 [ 202.998613][ T9446] ? __pfx___sys_bind+0x10/0x10 [ 202.998656][ T9446] __x64_sys_bind+0x7a/0x90 [ 202.998676][ T9446] do_syscall_64+0xfa/0x3b0 [ 202.998692][ T9446] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.998707][ T9446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.998722][ T9446] ? clear_bhb_loop+0x60/0xb0 [ 202.998742][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.998757][ T9446] RIP: 0033:0x7f9bd878e929 [ 202.998777][ T9446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.998789][ T9446] RSP: 002b:00007f9bd9578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 202.998806][ T9446] RAX: ffffffffffffffda RBX: 00007f9bd89b6160 RCX: 00007f9bd878e929 [ 202.998817][ T9446] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000004 [ 202.998826][ T9446] RBP: 00007f9bd8810b39 R08: 0000000000000000 R09: 0000000000000000 [ 202.998836][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.998845][ T9446] R13: 0000000000000001 R14: 00007f9bd89b6160 R15: 00007fff92f0c258 [ 202.998874][ T9446] [ 202.998881][ T9446] Mem-Info: [ 203.288542][ T9446] active_anon:11830 inactive_anon:0 isolated_anon:0 [ 203.288542][ T9446] active_file:1496 inactive_file:39886 isolated_file:0 [ 203.288542][ T9446] unevictable:768 dirty:190 writeback:0 [ 203.288542][ T9446] slab_reclaimable:11566 slab_unreclaimable:193429 [ 203.288542][ T9446] mapped:35973 shmem:7101 pagetables:1127 [ 203.288542][ T9446] sec_pagetables:0 bounce:0 [ 203.288542][ T9446] kernel_misc_reclaimable:0 [ 203.288542][ T9446] free:1212691 free_pcp:27595 free_cma:0 [ 203.336063][ T9446] Node 0 active_anon:47820kB inactive_anon:0kB active_file:5984kB inactive_file:159340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143892kB dirty:756kB writeback:0kB shmem:26868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12436kB pagetables:4368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.392406][ T9446] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.425682][ T9446] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.456001][ T9446] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 203.461885][ T9446] Node 0 DMA32 free:936948kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47776kB inactive_anon:0kB active_file:5984kB inactive_file:157496kB unevictable:1536kB writepending:752kB present:3129332kB managed:2561012kB mlocked:0kB bounce:0kB free_pcp:91260kB local_pcp:39280kB free_cma:0kB [ 203.494865][ T9446] lowmem_reserve[]: 0 0 1 1 1 [ 203.499708][ T9446] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 203.536609][ T9446] lowmem_reserve[]: 0 0 0 0 0 [ 203.541742][ T9446] Node 1 Normal free:3899476kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18624kB local_pcp:8352kB free_cma:0kB [ 203.573821][ T9446] lowmem_reserve[]: 0 0 0 0 0 [ 203.578689][ T9446] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.597801][ T9446] Node 0 DMA32: 3*4kB (UME) 13*8kB (E) 16*16kB (E) 200*32kB (UE) 51*64kB (UME) 64*128kB (UE) 28*256kB (UME) 16*512kB (UM) 46*1024kB (UM) 22*2048kB (UM) 197*4096kB (UM) = 932660kB [ 203.616410][ T9446] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 203.629917][ T9446] Node 1 Normal: 165*4kB (UM) 42*8kB (UME) 39*16kB (UME) 132*32kB (UME) 36*64kB (UME) 9*128kB (UME) 6*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3899476kB [ 203.656820][ T9446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.666756][ T9446] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.676321][ T9446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.686635][ T9446] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.710670][ T9446] 50282 total pagecache pages [ 203.715530][ T9446] 0 pages in swap cache [ 203.733413][ T9446] Free swap = 124996kB [ 203.738441][ T9446] Total swap = 124996kB [ 203.742800][ T9446] 2097051 pages RAM [ 203.746608][ T9446] 0 pages HighMem/MovableOnly [ 203.751605][ T9446] 424692 pages reserved [ 203.755928][ T9446] 0 pages cma reserved [ 203.817986][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.879413][ T9219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.910796][ T9219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.031935][ T9219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.156349][ T9219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.179027][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.965'. [ 204.191674][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.965'. [ 204.406042][ T9476] netlink: 'syz.2.967': attribute type 1 has an invalid length. [ 204.445479][ T9219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.607531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.643120][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.680284][ T9478] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 204.721903][ T9480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.731083][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 204.814145][ T9219] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.855456][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.869854][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 204.912822][ T9487] 8021q: VLANs not supported on vcan0 [ 204.957342][ T9491] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 204.962586][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.972179][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.035468][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.042761][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.356713][ T9503] netem: unknown loss type 13 [ 205.397673][ T9503] netem: change failed [ 205.765796][ T9219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.040366][ T9219] veth0_vlan: entered promiscuous mode [ 206.065225][ T9219] veth1_vlan: entered promiscuous mode [ 206.234463][ T9219] veth0_macvtap: entered promiscuous mode [ 206.256451][ T9219] veth1_macvtap: entered promiscuous mode [ 206.383787][ T9219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.398731][ T9550] netlink: 'syz.2.986': attribute type 1 has an invalid length. [ 206.428425][ T9219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.626701][ T9554] __nla_validate_parse: 7 callbacks suppressed [ 206.626717][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 206.698494][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.709184][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.894932][ T9550] bond2: entered promiscuous mode [ 206.907545][ T9550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.916091][ T1149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.938490][ T5915] net_ratelimit: 2 callbacks suppressed [ 206.938506][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.957151][ T1149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.090194][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.101274][ T1149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.131118][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.147028][ T1149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.171399][ T9562] ip6tnl2: entered promiscuous mode [ 207.351833][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.993'. [ 207.467862][ T9578] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.926696][ T9593] netlink: 48 bytes leftover after parsing attributes in process `syz.0.997'. [ 207.969634][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.244390][ T78] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.494206][ T78] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.612102][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.945830][ T78] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.009083][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.051006][ T9608] netlink: 'syz.1.1000': attribute type 21 has an invalid length. [ 209.088214][ T9608] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.110262][ T78] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.233086][ T9617] wg2: entered promiscuous mode [ 209.391873][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1005'. [ 209.575311][ T9611] syzkaller0: entered promiscuous mode [ 209.617212][ T9611] syzkaller0: entered allmulticast mode [ 209.648998][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 209.658230][ T9633] netlink: 'syz.0.1008': attribute type 2 has an invalid length. [ 209.665984][ T9633] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 209.675245][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 209.819278][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.821702][ T9640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'. [ 209.837359][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.847303][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.859685][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.869111][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.947095][ T9644] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.048331][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.090758][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.651559][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.970316][ T5840] Bluetooth: hci2: command tx timeout [ 212.012750][ T78] bridge_slave_1: left allmulticast mode [ 212.018916][ T78] bridge_slave_1: left promiscuous mode [ 212.025714][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.038579][ T78] bridge_slave_0: left allmulticast mode [ 212.044301][ T78] bridge_slave_0: left promiscuous mode [ 212.050671][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.128780][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.458305][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.470275][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.481758][ T78] bond0 (unregistering): Released all slaves [ 212.659122][ T9655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1013'. [ 212.978402][ T9671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1018'. [ 212.978740][ T9663] netlink: 'syz.0.1015': attribute type 10 has an invalid length. [ 213.008432][ T30] audit: type=1804 audit(1750548573.324:7): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1017" name="/newroot/227/cgroup.controllers" dev="tmpfs" ino=1179 res=1 errno=0 [ 213.017488][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 213.099134][ T30] audit: type=1800 audit(1750548573.324:8): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1017" name="cgroup.controllers" dev="tmpfs" ino=1179 res=0 errno=0 [ 213.168053][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.205139][ T9663] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 213.277527][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1019'. [ 213.320492][ T9685] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.608890][ T9696] netlink: 'syz.0.1024': attribute type 39 has an invalid length. [ 213.785790][ T78] hsr_slave_0: left promiscuous mode [ 213.792168][ T78] hsr_slave_1: left promiscuous mode [ 213.798882][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.806317][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.818621][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.826070][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.870262][ T78] veth1_macvtap: left promiscuous mode [ 213.876097][ T78] veth0_macvtap: left promiscuous mode [ 213.882530][ T78] veth1_vlan: left promiscuous mode [ 213.888454][ T78] veth0_vlan: left promiscuous mode [ 213.908278][ T9705] ksmbd: Unknown IPC event: 3, ignore. [ 214.049215][ T5840] Bluetooth: hci2: command tx timeout [ 214.207958][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.687824][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.738282][ T78] team0 (unregistering): Port device team_slave_1 removed [ 214.821554][ T78] team0 (unregistering): Port device team_slave_0 removed [ 214.860667][ T1149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.251361][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.502549][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1028'. [ 215.562057][ T9725] Set syz1 is full, maxelem 1038 reached [ 215.727080][ T9637] chnl_net:caif_netlink_parms(): no params data found [ 216.127518][ T5840] Bluetooth: hci2: command tx timeout [ 216.287765][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.386438][ T9747] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1038'. [ 216.415385][ T9748] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.649065][ T9637] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.682332][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.690178][ T9637] bridge_slave_0: entered allmulticast mode [ 216.732990][ T9637] bridge_slave_0: entered promiscuous mode [ 216.963612][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1042'. [ 217.181808][ T9637] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.208973][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.230506][ T9637] bridge_slave_1: entered allmulticast mode [ 217.246365][ T9637] bridge_slave_1: entered promiscuous mode [ 217.329374][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.474618][ T9637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.554011][ T9637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.746012][ T9789] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.893123][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.007875][ T9637] team0: Port device team_slave_0 added [ 218.030838][ T9637] team0: Port device team_slave_1 added [ 218.064979][ T9802] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1050'. [ 218.208045][ T5840] Bluetooth: hci2: command tx timeout [ 218.422330][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.443958][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.474258][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.527796][ T9637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.582898][ T9808] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1051'. [ 218.592640][ T9808] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1051'. [ 218.602821][ T9811] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 218.618509][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.632724][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.675375][ T9637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.696490][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.840832][ T9823] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.987674][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'. [ 219.194631][ T9839] nbd: socks must be embedded in a SOCK_ITEM attr [ 219.342671][ T9842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1061'. [ 219.450870][ T9843] netlink: 'syz.4.1061': attribute type 39 has an invalid length. [ 219.462207][ T9845] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1062'. [ 219.488346][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.519203][ T9847] netlink: 'syz.0.1063': attribute type 21 has an invalid length. [ 219.548570][ T9637] hsr_slave_0: entered promiscuous mode [ 219.555061][ T9847] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1063'. [ 219.567161][ T9637] hsr_slave_1: entered promiscuous mode [ 219.588608][ T9637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.598187][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 219.608300][ T9637] Cannot create hsr debugfs directory [ 219.614202][ T9847] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1063'. [ 219.967275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.024503][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'. [ 220.145785][ T9876] dummy0: left allmulticast mode [ 220.164572][ T9876] bridge0: port 3(dummy0) entered disabled state [ 220.195942][ T9883] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.257697][ T9876] bridge_slave_0: left allmulticast mode [ 220.274320][ T9876] bridge_slave_0: left promiscuous mode [ 220.287817][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.352028][ T9876] bridge_slave_1: left allmulticast mode [ 220.404999][ T9876] bridge_slave_1: left promiscuous mode [ 220.412530][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.444681][ T9876] bond0: (slave bond_slave_0): Releasing backup interface [ 220.483397][ T9876] bond0: (slave bond_slave_1): Releasing backup interface [ 220.509916][ T9876] team0: Port device team_slave_0 removed [ 220.523953][ T9876] team0: Port device team_slave_1 removed [ 220.531061][ T9876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.538740][ T9876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.548855][ T9876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.556825][ T9876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.575890][ T9876] bond0: (slave wlan1): Releasing backup interface [ 220.595287][ T9876] team0: Port device bond1 removed [ 220.603248][ T9876] bond2: (slave vti0): Releasing backup interface [ 220.643584][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.725097][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.735108][ T9880] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 220.755174][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.772439][ T9887] ip6tnl0: entered allmulticast mode [ 221.041071][ T9909] delete_channel: no stack [ 221.487781][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.650411][ T9637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.733144][ T9935] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 221.775924][ T9637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.797324][ T9637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.804430][ T9935] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 221.829712][ T9935] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 221.851507][ T9935] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 221.876691][ T9935] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 221.901883][ T9935] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 221.921501][ T9637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.938620][ T9935] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 221.948943][ T9935] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 222.320420][ T9956] bond3: entered promiscuous mode [ 222.325503][ T9956] bond3: entered allmulticast mode [ 222.388376][ T9956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.510125][ T9637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.582343][ T9637] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.625878][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.633108][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.686715][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.693934][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.820165][ T9985] netlink: 'syz.4.1105': attribute type 11 has an invalid length. [ 222.847754][ T43] net_ratelimit: 1 callbacks suppressed [ 222.847771][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.878948][ T9980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.021874][ T9637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.643420][T10017] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 223.654717][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.767438][T10023] __nla_validate_parse: 76 callbacks suppressed [ 223.767457][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1109'. [ 223.785727][T10018] syzkaller0: entered promiscuous mode [ 223.804519][T10018] syzkaller0: entered allmulticast mode [ 223.887675][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.898893][T10017] bridge_slave_0: entered promiscuous mode [ 223.932152][T10017] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 224.313887][T10023] team0 (unregistering): Port device team_slave_1 removed [ 224.395446][ T9637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.667631][T10033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1111'. [ 224.928448][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.972973][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.348790][ T9637] veth0_vlan: entered promiscuous mode [ 226.367720][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.399865][ T9637] veth1_vlan: entered promiscuous mode [ 226.504368][ T9637] veth0_macvtap: entered promiscuous mode [ 226.536182][ T9637] veth1_macvtap: entered promiscuous mode [ 226.681598][ T9637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.682963][T10054] validate_nla: 60 callbacks suppressed [ 226.682978][T10054] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 226.783206][ T9637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.827305][ T4173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.851671][ T4173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.900507][ T4173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.939513][ T4173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.007864][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.058562][T10063] netlink: 'syz.1.1118': attribute type 1 has an invalid length. [ 227.071586][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.097135][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.209103][T10063] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.303442][T10066] bond4: (slave veth7): Enslaving as an active interface with a down link [ 227.396396][T10070] netlink: 'syz.1.1118': attribute type 6 has an invalid length. [ 227.422350][T10063] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 227.444080][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1121'. [ 227.469528][T10079] : entered promiscuous mode [ 227.475884][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.496236][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.764327][T10087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1125'. [ 227.813974][T10087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1125'. [ 227.872542][T10086] ip6tnl2: entered promiscuous mode [ 227.882710][T10086] ip6tnl2: entered allmulticast mode [ 227.990673][T10098] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 228.050571][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.483924][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.659872][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.783375][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.969505][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.087799][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.407332][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.452694][T10117] delete_channel: no stack [ 229.619697][ T12] bridge_slave_1: left allmulticast mode [ 229.625399][ T12] bridge_slave_1: left promiscuous mode [ 229.647207][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.713487][ T12] bridge_slave_0: left allmulticast mode [ 229.727275][ T12] bridge_slave_0: left promiscuous mode [ 229.741913][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.954224][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.965050][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.974086][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.989991][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.000475][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.129681][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.139734][T10154] netlink: 'syz.1.1138': attribute type 8 has an invalid length. [ 230.416145][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.431744][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.443667][ T12] bond0 (unregistering): Released all slaves [ 230.476326][T10133] ipvlan2: entered promiscuous mode [ 230.956610][T10172] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1142'. [ 230.989272][T10166] netlink: 'syz.0.1142': attribute type 29 has an invalid length. [ 231.000971][T10169] netlink: 'syz.0.1142': attribute type 29 has an invalid length. [ 231.046249][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 231.172016][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.489430][ T7858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.962346][T10191] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1147'. [ 232.047200][ T5840] Bluetooth: hci2: command tx timeout [ 232.207957][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.276060][T10197] netlink: 'syz.2.1149': attribute type 12 has an invalid length. [ 232.286657][T10197] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1149'. [ 232.342088][ T12] hsr_slave_0: left promiscuous mode [ 232.354249][ T12] hsr_slave_1: left promiscuous mode [ 232.377177][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.387000][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.400444][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.417018][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.443848][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 232.465004][ T12] veth1_macvtap: left promiscuous mode [ 232.483729][ T12] veth0_macvtap: left promiscuous mode [ 232.491994][ T12] veth1_vlan: left promiscuous mode [ 232.502296][ T12] veth0_vlan: left promiscuous mode [ 232.768928][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.121332][ T12] team0 (unregistering): Port device team_slave_1 removed [ 233.178551][ T12] team0 (unregistering): Port device team_slave_0 removed [ 233.254196][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.749337][T10147] chnl_net:caif_netlink_parms(): no params data found [ 234.113854][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'. [ 234.127340][ T5840] Bluetooth: hci2: command tx timeout [ 234.275506][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.282985][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.287232][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.290667][T10147] bridge_slave_0: entered allmulticast mode [ 234.306033][T10147] bridge_slave_0: entered promiscuous mode [ 234.321466][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.328938][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.336277][T10147] bridge_slave_1: entered allmulticast mode [ 234.377298][T10147] bridge_slave_1: entered promiscuous mode [ 234.528112][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.536215][T10227] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1157'. [ 234.600264][T10147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.657904][T10147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.725891][T10147] team0: Port device team_slave_0 added [ 234.741493][T10147] team0: Port device team_slave_1 added [ 234.818980][T10147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.846062][T10147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.891184][T10147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.910033][T10147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.917893][T10147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.945435][T10147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.152745][T10147] hsr_slave_0: entered promiscuous mode [ 235.167488][T10147] hsr_slave_1: entered promiscuous mode [ 235.182093][T10147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.197331][T10147] Cannot create hsr debugfs directory [ 235.240503][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 235.275120][T10250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.338634][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.350620][T10252] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 236.207147][ T5840] Bluetooth: hci2: command tx timeout [ 236.367443][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.533728][T10147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.554692][T10147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.588486][T10147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.595065][T10280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.623092][T10147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.805463][T10147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.882833][T10147] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.918090][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.925239][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.964778][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.972071][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.247658][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.427435][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.503641][T10147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.675204][T10295] netlink: 'syz.0.1172': attribute type 8 has an invalid length. [ 237.693876][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 237.840974][T10147] veth0_vlan: entered promiscuous mode [ 237.914466][T10147] veth1_vlan: entered promiscuous mode [ 238.287911][ T5840] Bluetooth: hci2: command tx timeout [ 238.397408][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 238.429119][T10147] veth0_macvtap: entered promiscuous mode [ 238.601589][T10313] netlink: 'syz.1.1175': attribute type 11 has an invalid length. [ 238.610214][T10313] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1175'. [ 238.678400][T10147] veth1_macvtap: entered promiscuous mode [ 238.704524][T10315] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 238.876279][T10147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.912347][T10147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.953808][ T7858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.005790][ T7858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.035646][ T7858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.087863][ T7858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.308963][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.338285][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.442983][ T4173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.459600][ T4173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.545835][T10335] netlink: 'syz.0.1182': attribute type 3 has an invalid length. [ 239.626194][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1184'. [ 239.692638][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 240.111857][ T7858] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.144946][T10350] netlink: 'syz.1.1187': attribute type 12 has an invalid length. [ 240.230520][ T7858] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.405319][ T7858] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.486434][ T7858] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.574066][ T7858] bridge_slave_1: left allmulticast mode [ 240.581019][ T7858] bridge_slave_1: left promiscuous mode [ 240.586704][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.596298][ T7858] bridge_slave_0: left allmulticast mode [ 240.603659][ T7858] bridge_slave_0: left promiscuous mode [ 240.612782][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.981471][ T7858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.994380][ T7858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.055552][ T7858] bond0 (unregistering): Released all slaves [ 241.093139][T10361] sctp: [Deprecated]: syz.2.1190 (pid 10361) Use of int in max_burst socket option deprecated. [ 241.093139][T10361] Use struct sctp_assoc_value instead [ 241.156696][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1189'. [ 241.329550][T10369] syz1: rxe_newlink: already configured on macvlan1 [ 241.388209][T10371] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1194'. [ 241.549293][T10378] erspan0: entered promiscuous mode [ 241.577930][T10378] batman_adv: batadv0: Adding interface: macvlan2 [ 241.584400][T10378] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.618717][T10378] batman_adv: batadv0: Interface activated: macvlan2 [ 241.782160][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 241.824458][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.842962][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.851715][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.863387][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.881209][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.307488][T10418] netlink: 'syz.4.1205': attribute type 10 has an invalid length. [ 242.333492][ T7858] hsr_slave_0: left promiscuous mode [ 242.342328][T10418] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1205'. [ 242.365065][ T7858] hsr_slave_1: left promiscuous mode [ 242.372638][ T7858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.409077][ T7858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.439867][ T7858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.457256][ T7858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.505136][ T7858] veth1_macvtap: left promiscuous mode [ 242.527577][ T7858] veth0_macvtap: left promiscuous mode [ 242.538845][ T7858] veth1_vlan: left promiscuous mode [ 242.550082][ T7858] veth0_vlan: left promiscuous mode [ 243.449101][ T7858] team0 (unregistering): Port device team_slave_1 removed [ 243.503545][ T7858] team0 (unregistering): Port device team_slave_0 removed [ 243.970477][ T5840] Bluetooth: hci2: command tx timeout [ 244.003855][T10418] batman_adv: batadv0: Adding interface: virt_wifi0 [ 244.017116][T10418] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.063008][T10418] batman_adv: batadv0: Interface activated: virt_wifi0 [ 244.391818][T10449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 244.393758][T10445] Bluetooth: MGMT ver 1.23 [ 244.476111][T10452] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1213'. [ 244.515923][T10447] netlink: 'syz.2.1215': attribute type 16 has an invalid length. [ 244.637477][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 244.646518][T10460] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1216'. [ 244.692947][T10399] chnl_net:caif_netlink_parms(): no params data found [ 244.699921][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 244.714694][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 244.726578][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 244.926038][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 245.137106][T10482] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1220'. [ 245.170329][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.178168][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.197295][T10399] bridge_slave_0: entered allmulticast mode [ 245.271158][T10399] bridge_slave_0: entered promiscuous mode [ 245.344587][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.360587][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.375801][T10399] bridge_slave_1: entered allmulticast mode [ 245.396850][T10399] bridge_slave_1: entered promiscuous mode [ 245.539564][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.566853][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.701348][T10399] team0: Port device team_slave_0 added [ 245.726004][T10399] team0: Port device team_slave_1 added [ 245.841324][T10504] netlink: 'syz.1.1224': attribute type 15 has an invalid length. [ 245.858776][T10509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1227'. [ 245.861349][T10504] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1224'. [ 245.868006][T10509] netlink: 'syz.0.1227': attribute type 6 has an invalid length. [ 245.868045][T10509] netlink: 'syz.0.1227': attribute type 5 has an invalid length. [ 246.014593][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.036324][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.077411][ T5840] Bluetooth: hci2: command tx timeout [ 246.117104][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.153947][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.161353][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.187885][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.286279][T10517] ipvlan2: entered promiscuous mode [ 246.480657][T10399] hsr_slave_0: entered promiscuous mode [ 246.498752][T10399] hsr_slave_1: entered promiscuous mode [ 246.504833][T10399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.527669][T10399] Cannot create hsr debugfs directory [ 247.368345][T10558] lo: entered allmulticast mode [ 247.382449][T10557] lo: left allmulticast mode [ 247.476076][T10566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.493426][T10566] syzkaller0: entered allmulticast mode [ 247.596310][T10568] ipvlan2: entered promiscuous mode [ 247.653167][T10571] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.992441][T10399] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.038582][T10399] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 248.077799][T10399] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.111193][T10399] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 248.128442][ T5840] Bluetooth: hci2: command tx timeout [ 248.275133][T10603] batman_adv: batadv0: Adding interface: ip6gretap2 [ 248.289746][T10603] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.362954][T10603] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 248.423774][T10607] netlink: 'syz.0.1252': attribute type 2 has an invalid length. [ 248.551090][T10399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.618260][T10399] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.640818][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.648179][ T7858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.651927][T10609] xt_TCPMSS: Only works on TCP SYN packets [ 248.698964][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.706146][ T7858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.835338][T10613] netlink: 'syz.4.1255': attribute type 2 has an invalid length. [ 248.883183][T10613] þ`Ì: entered promiscuous mode [ 248.966853][T10619] netlink: zone id is out of range [ 248.977391][T10619] netlink: zone id is out of range [ 248.982737][T10619] netlink: zone id is out of range [ 249.013081][T10619] netlink: zone id is out of range [ 249.037535][T10619] netlink: zone id is out of range [ 249.073416][T10619] netlink: zone id is out of range [ 249.079233][T10626] xt_TPROXY: Can be used only with -p tcp or -p udp [ 249.090037][T10619] netlink: zone id is out of range [ 249.133677][T10626] batadv_slave_0: entered promiscuous mode [ 249.205731][T10628] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 249.284267][T10619] netlink: set zone limit has 4 unknown bytes [ 249.344594][T10399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.444180][T10399] veth0_vlan: entered promiscuous mode [ 249.521064][T10399] veth1_vlan: entered promiscuous mode [ 249.594864][T10399] veth0_macvtap: entered promiscuous mode [ 249.621203][T10399] veth1_macvtap: entered promiscuous mode [ 249.672854][T10399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.736330][T10399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.832392][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.872236][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.935767][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.970322][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.217226][ T5840] Bluetooth: hci2: command tx timeout [ 250.309312][ T7858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.331465][ T7858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.488229][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.516306][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.565693][T10645] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.587971][T10647] netlink: 'syz.1.1264': attribute type 4 has an invalid length. [ 250.772914][T10645] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.854821][T10638] ================================================================== [ 250.862932][T10638] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x150/0x6a0 [ 250.871104][T10638] Read of size 8 at addr ffff88804152cc50 by task syz.1.1264/10638 [ 250.879007][T10638] [ 250.881338][T10638] CPU: 1 UID: 0 PID: 10638 Comm: syz.1.1264 Not tainted 6.16.0-rc2-syzkaller-00592-g0289c51f889e #0 PREEMPT(full) [ 250.881365][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.881377][T10638] Call Trace: [ 250.881384][T10638] [ 250.881392][T10638] dump_stack_lvl+0x189/0x250 [ 250.881422][T10638] ? __virt_addr_valid+0x1c8/0x5c0 [ 250.881438][T10638] ? rcu_is_watching+0x15/0xb0 [ 250.881462][T10638] ? __kasan_check_byte+0x12/0x40 [ 250.881480][T10638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.881503][T10638] ? rcu_is_watching+0x15/0xb0 [ 250.881526][T10638] ? lock_release+0x4b/0x3e0 [ 250.881550][T10638] ? __virt_addr_valid+0x1c8/0x5c0 [ 250.881568][T10638] ? __virt_addr_valid+0x4a5/0x5c0 [ 250.881586][T10638] print_report+0xd2/0x2b0 [ 250.881608][T10638] ? cfusbl_device_notify+0x150/0x6a0 [ 250.881628][T10638] kasan_report+0x118/0x150 [ 250.881646][T10638] ? cfusbl_device_notify+0x150/0x6a0 [ 250.881670][T10638] cfusbl_device_notify+0x150/0x6a0 [ 250.881691][T10638] ? net_generic+0x1e/0x240 [ 250.881711][T10638] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 250.881732][T10638] ? caif_device_notify+0x250/0xfc0 [ 250.881753][T10638] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 250.881777][T10638] notifier_call_chain+0x1b3/0x3e0 [ 250.881804][T10638] register_netdevice+0x12ee/0x1ae0 [ 250.881828][T10638] ? __mutex_lock+0x51b/0xe80 [ 250.881852][T10638] ? __pfx_register_netdevice+0x10/0x10 [ 250.881879][T10638] ? __asan_memset+0x22/0x50 [ 250.881900][T10638] ? dev_addr_mod+0x2ce/0x3d0 [ 250.881923][T10638] register_netdev+0x40/0x60 [ 250.881938][T10638] bnep_add_connection+0x6bf/0xbf0 [ 250.881966][T10638] ? __pfx_bnep_add_connection+0x10/0x10 [ 250.881989][T10638] ? __fget_files+0x3a0/0x420 [ 250.882012][T10638] do_bnep_sock_ioctl+0x40e/0x640 [ 250.882030][T10638] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 250.882049][T10638] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 250.882070][T10638] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 250.882090][T10638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.882108][T10638] ? call_rcu+0x6dd/0x990 [ 250.882128][T10638] sock_do_ioctl+0xdc/0x300 [ 250.882146][T10638] ? __pfx_sock_do_ioctl+0x10/0x10 [ 250.882162][T10638] ? __lock_acquire+0xab9/0xd20 [ 250.882191][T10638] sock_ioctl+0x576/0x790 [ 250.882215][T10638] ? __pfx_sock_ioctl+0x10/0x10 [ 250.882233][T10638] ? __fget_files+0x2a/0x420 [ 250.882250][T10638] ? __fget_files+0x3a0/0x420 [ 250.882267][T10638] ? __fget_files+0x2a/0x420 [ 250.882287][T10638] ? bpf_lsm_file_ioctl+0x9/0x20 [ 250.882309][T10638] ? __pfx_sock_ioctl+0x10/0x10 [ 250.882325][T10638] __se_sys_ioctl+0xfc/0x170 [ 250.882349][T10638] do_syscall_64+0xfa/0x3b0 [ 250.882367][T10638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.882383][T10638] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 250.882399][T10638] ? clear_bhb_loop+0x60/0xb0 [ 250.882416][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.882433][T10638] RIP: 0033:0x7f7903d8e929 [ 250.882448][T10638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.882463][T10638] RSP: 002b:00007f7904bce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.882482][T10638] RAX: ffffffffffffffda RBX: 00007f7903fb6080 RCX: 00007f7903d8e929 [ 250.882495][T10638] RDX: 00002000000000c0 RSI: 00000000400442c8 RDI: 000000000000000a [ 250.882506][T10638] RBP: 00007f7903e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 250.882518][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.882528][T10638] R13: 0000000000000000 R14: 00007f7903fb6080 R15: 00007fff25536b28 [ 250.882547][T10638] [ 250.882554][T10638] [ 250.914969][T10651] __nla_validate_parse: 12 callbacks suppressed [ 250.914989][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1267'. [ 250.915523][T10638] Allocated by task 5840: [ 250.915533][T10638] kasan_save_track+0x3e/0x80 [ 250.923364][T10651] netlink: 'syz.4.1267': attribute type 1 has an invalid length. [ 250.925382][T10638] __kasan_kmalloc+0x93/0xb0 [ 250.925405][T10638] __kmalloc_cache_noprof+0x230/0x3d0 [ 250.925421][T10638] __hci_conn_add+0x233/0x1b30 [ 250.930716][T10651] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1267'. [ 250.935620][T10638] hci_conn_request_evt+0x53e/0xb60 [ 250.935645][T10638] hci_event_packet+0x7e3/0x1200 [ 250.935659][T10638] hci_rx_work+0x46a/0xe80 [ 250.935674][T10638] process_scheduled_works+0xae1/0x17b0 [ 250.935695][T10638] worker_thread+0x8a0/0xda0 [ 250.935707][T10638] kthread+0x70e/0x8a0 [ 250.935722][T10638] ret_from_fork+0x3f9/0x770 [ 250.935744][T10638] ret_from_fork_asm+0x1a/0x30 [ 250.935758][T10638] [ 250.935762][T10638] Freed by task 10638: [ 250.935770][T10638] kasan_save_track+0x3e/0x80 [ 250.935792][T10638] kasan_save_free_info+0x46/0x50 [ 250.935810][T10638] __kasan_slab_free+0x62/0x70 [ 250.935825][T10638] kfree+0x18e/0x440 [ 250.935846][T10638] device_release+0x99/0x1c0 [ 250.935865][T10638] kobject_put+0x22b/0x480 [ 250.935883][T10638] device_add+0x6bb/0xb50 [ 250.935900][T10638] netdev_register_kobject+0x178/0x310 [ 250.935923][T10638] register_netdevice+0x126c/0x1ae0 [ 250.935946][T10638] register_netdev+0x40/0x60 [ 250.935959][T10638] bnep_add_connection+0x6bf/0xbf0 [ 250.935980][T10638] do_bnep_sock_ioctl+0x40e/0x640 [ 250.935995][T10638] sock_do_ioctl+0xdc/0x300 [ 250.936011][T10638] sock_ioctl+0x576/0x790 [ 250.936026][T10638] __se_sys_ioctl+0xfc/0x170 [ 250.936045][T10638] do_syscall_64+0xfa/0x3b0 [ 250.936062][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.936079][T10638] [ 250.936085][T10638] Last potentially related work creation: [ 250.936092][T10638] kasan_save_stack+0x3e/0x60 [ 250.936113][T10638] kasan_record_aux_stack+0xbd/0xd0 [ 250.936132][T10638] insert_work+0x3d/0x330 [ 250.936151][T10638] __queue_work+0xcfc/0xfe0 [ 250.936166][T10638] queue_delayed_work_on+0x18b/0x280 [ 250.936181][T10638] l2cap_chan_del+0x285/0x5e0 [ 250.936195][T10638] l2cap_conn_del+0x388/0x680 [ 250.936221][T10638] hci_conn_hash_flush+0x10a/0x230 [ 250.936243][T10638] hci_dev_close_sync+0xaef/0x1330 [ 250.936261][T10638] hci_unregister_dev+0x206/0x500 [ 250.936278][T10638] vhci_release+0x80/0xd0 [ 250.936294][T10638] __fput+0x44c/0xa70 [ 250.936312][T10638] task_work_run+0x1d1/0x260 [ 250.936331][T10638] do_exit+0x6ad/0x22e0 [ 250.936347][T10638] do_group_exit+0x21c/0x2d0 [ 250.936363][T10638] __x64_sys_exit_group+0x3f/0x40 [ 250.936380][T10638] x64_sys_call+0x21ba/0x21c0 [ 251.507971][T10638] do_syscall_64+0xfa/0x3b0 [ 251.512461][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.518334][T10638] [ 251.520644][T10638] The buggy address belongs to the object at ffff88804152c000 [ 251.520644][T10638] which belongs to the cache kmalloc-8k of size 8192 [ 251.534673][T10638] The buggy address is located 3152 bytes inside of [ 251.534673][T10638] freed 8192-byte region [ffff88804152c000, ffff88804152e000) [ 251.548625][T10638] [ 251.550935][T10638] The buggy address belongs to the physical page: [ 251.557339][T10638] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x41528 [ 251.566096][T10638] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 251.574573][T10638] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 251.582613][T10638] page_type: f5(slab) [ 251.586574][T10638] raw: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 251.595135][T10638] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 251.603699][T10638] head: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 251.612346][T10638] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 251.621000][T10638] head: 00fff00000000003 ffffea0001054a01 00000000ffffffff 00000000ffffffff [ 251.630271][T10638] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 251.638932][T10638] page dumped because: kasan: bad access detected [ 251.645342][T10638] page_owner tracks the page as allocated [ 251.651036][T10638] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9250, tgid 9249 (syz.1.914), ts 195579866395, free_ts 152584868809 [ 251.672304][T10638] post_alloc_hook+0x240/0x2a0 [ 251.677069][T10638] get_page_from_freelist+0x21e4/0x22c0 [ 251.682597][T10638] __alloc_frozen_pages_noprof+0x181/0x370 [ 251.688386][T10638] alloc_pages_mpol+0x232/0x4a0 [ 251.693215][T10638] allocate_slab+0x8a/0x3b0 [ 251.697700][T10638] ___slab_alloc+0xbfc/0x1480 [ 251.702357][T10638] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 251.708746][T10638] krealloc_noprof+0x124/0x340 [ 251.713492][T10638] copy_array+0x63/0xf0 [ 251.717628][T10638] copy_verifier_state+0x848/0xed0 [ 251.722720][T10638] push_stack+0x197/0x3c0 [ 251.727024][T10638] check_cond_jmp_op+0x1069/0x2340 [ 251.732114][T10638] do_check+0x6d3a/0xd450 [ 251.736422][T10638] do_check_common+0x168d/0x20b0 [ 251.741338][T10638] bpf_check+0x13664/0x19c60 [ 251.745905][T10638] bpf_prog_load+0x1318/0x1930 [ 251.750650][T10638] page last free pid 8093 tgid 8087 stack trace: [ 251.756954][T10638] __free_frozen_pages+0xc71/0xe70 [ 251.762061][T10638] vfree+0x25a/0x400 [ 251.766033][T10638] xp_destroy+0x49/0x90 [ 251.770169][T10638] xsk_bind+0x9ec/0xf90 [ 251.774309][T10638] __sys_bind+0x2c3/0x3e0 [ 251.778634][T10638] __x64_sys_bind+0x7a/0x90 [ 251.783115][T10638] do_syscall_64+0xfa/0x3b0 [ 251.787606][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.793481][T10638] [ 251.795784][T10638] Memory state around the buggy address: [ 251.801480][T10638] ffff88804152cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.809519][T10638] ffff88804152cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.817556][T10638] >ffff88804152cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.825590][T10638] ^ [ 251.832322][T10638] ffff88804152cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.840360][T10638] ffff88804152cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.848396][T10638] ================================================================== [ 251.892832][T10638] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 251.900083][T10638] CPU: 0 UID: 0 PID: 10638 Comm: syz.1.1264 Not tainted 6.16.0-rc2-syzkaller-00592-g0289c51f889e #0 PREEMPT(full) [ 251.912184][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.922321][T10638] Call Trace: [ 251.925588][T10638] [ 251.928499][T10638] dump_stack_lvl+0x99/0x250 [ 251.933081][T10638] ? __asan_memcpy+0x40/0x70 [ 251.937654][T10638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.942836][T10638] ? __pfx__printk+0x10/0x10 [ 251.947412][T10638] panic+0x2db/0x790 [ 251.951300][T10638] ? __pfx_panic+0x10/0x10 [ 251.955702][T10638] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 251.961580][T10638] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 251.967895][T10638] ? print_memory_metadata+0x314/0x400 [ 251.973342][T10638] ? cfusbl_device_notify+0x150/0x6a0 [ 251.978700][T10638] check_panic_on_warn+0x89/0xb0 [ 251.983633][T10638] ? cfusbl_device_notify+0x150/0x6a0 [ 251.988987][T10638] end_report+0x78/0x160 [ 251.993212][T10638] kasan_report+0x129/0x150 [ 251.997694][T10638] ? cfusbl_device_notify+0x150/0x6a0 [ 252.003051][T10638] cfusbl_device_notify+0x150/0x6a0 [ 252.008232][T10638] ? net_generic+0x1e/0x240 [ 252.012720][T10638] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 252.018432][T10638] ? caif_device_notify+0x250/0xfc0 [ 252.023613][T10638] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 252.029076][T10638] notifier_call_chain+0x1b3/0x3e0 [ 252.034199][T10638] register_netdevice+0x12ee/0x1ae0 [ 252.039403][T10638] ? __mutex_lock+0x51b/0xe80 [ 252.044090][T10638] ? __pfx_register_netdevice+0x10/0x10 [ 252.049645][T10638] ? __asan_memset+0x22/0x50 [ 252.054233][T10638] ? dev_addr_mod+0x2ce/0x3d0 [ 252.058901][T10638] register_netdev+0x40/0x60 [ 252.063502][T10638] bnep_add_connection+0x6bf/0xbf0 [ 252.068724][T10638] ? __pfx_bnep_add_connection+0x10/0x10 [ 252.074361][T10638] ? __fget_files+0x3a0/0x420 [ 252.079030][T10638] do_bnep_sock_ioctl+0x40e/0x640 [ 252.084042][T10638] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 252.089569][T10638] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 252.095203][T10638] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 252.100847][T10638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 252.106831][T10638] ? call_rcu+0x6dd/0x990 [ 252.111149][T10638] sock_do_ioctl+0xdc/0x300 [ 252.115637][T10638] ? __pfx_sock_do_ioctl+0x10/0x10 [ 252.120738][T10638] ? __lock_acquire+0xab9/0xd20 [ 252.125584][T10638] sock_ioctl+0x576/0x790 [ 252.129897][T10638] ? __pfx_sock_ioctl+0x10/0x10 [ 252.134729][T10638] ? __fget_files+0x2a/0x420 [ 252.139301][T10638] ? __fget_files+0x3a0/0x420 [ 252.143961][T10638] ? __fget_files+0x2a/0x420 [ 252.148535][T10638] ? bpf_lsm_file_ioctl+0x9/0x20 [ 252.153460][T10638] ? __pfx_sock_ioctl+0x10/0x10 [ 252.158390][T10638] __se_sys_ioctl+0xfc/0x170 [ 252.162992][T10638] do_syscall_64+0xfa/0x3b0 [ 252.167492][T10638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.173547][T10638] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 252.179162][T10638] ? clear_bhb_loop+0x60/0xb0 [ 252.183839][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.189728][T10638] RIP: 0033:0x7f7903d8e929 [ 252.194129][T10638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.213722][T10638] RSP: 002b:00007f7904bce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.222122][T10638] RAX: ffffffffffffffda RBX: 00007f7903fb6080 RCX: 00007f7903d8e929 [ 252.230164][T10638] RDX: 00002000000000c0 RSI: 00000000400442c8 RDI: 000000000000000a [ 252.238203][T10638] RBP: 00007f7903e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 252.246154][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.254388][T10638] R13: 0000000000000000 R14: 00007f7903fb6080 R15: 00007fff25536b28 [ 252.262362][T10638] [ 252.265638][T10638] Kernel Offset: disabled [ 252.269975][T10638] Rebooting in 86400 seconds..