last executing test programs: 2m4.040412585s ago: executing program 1 (id=421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="31209a93"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x20000014) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x2, 0x1, 0x1000, 0xffffffffffffffff, 0x68, 0x9, 0xfffffffffffffff7}, &(0x7f0000000480)={0x100, 0x4, 0x8000000000000000, 0x6, 0x7fffffff, 0x5, 0xa3, 0x4}, &(0x7f0000000500)={0x6, 0x0, 0x6c975f17, 0x1, 0x8000000000000000, 0x1, 0x7797, 0x40}, &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x4d338ebe]}, 0x8}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000680), 0x0, &(0x7f0000000140)=ANY=[], 0x30}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x4, 0x0, 0x1c, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e349aea6af78336582d0590e25ec269b2d3680332426aafd97cbf9f2a7ba9e6b90669957d639f5cd9c2e3aa1588665236be66b018ebf74d1ea99a30dc58e38ec0fcf72759302a257550bd8f2c42bf4a9768bef2ca76144bd2900fc"}}}}}, 0xc2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m52.097788822s ago: executing program 1 (id=421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="31209a93"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x20000014) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x2, 0x1, 0x1000, 0xffffffffffffffff, 0x68, 0x9, 0xfffffffffffffff7}, &(0x7f0000000480)={0x100, 0x4, 0x8000000000000000, 0x6, 0x7fffffff, 0x5, 0xa3, 0x4}, &(0x7f0000000500)={0x6, 0x0, 0x6c975f17, 0x1, 0x8000000000000000, 0x1, 0x7797, 0x40}, &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x4d338ebe]}, 0x8}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000680), 0x0, &(0x7f0000000140)=ANY=[], 0x30}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x4, 0x0, 0x1c, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e349aea6af78336582d0590e25ec269b2d3680332426aafd97cbf9f2a7ba9e6b90669957d639f5cd9c2e3aa1588665236be66b018ebf74d1ea99a30dc58e38ec0fcf72759302a257550bd8f2c42bf4a9768bef2ca76144bd2900fc"}}}}}, 0xc2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m37.936356826s ago: executing program 1 (id=421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="31209a93"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x20000014) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x2, 0x1, 0x1000, 0xffffffffffffffff, 0x68, 0x9, 0xfffffffffffffff7}, &(0x7f0000000480)={0x100, 0x4, 0x8000000000000000, 0x6, 0x7fffffff, 0x5, 0xa3, 0x4}, &(0x7f0000000500)={0x6, 0x0, 0x6c975f17, 0x1, 0x8000000000000000, 0x1, 0x7797, 0x40}, &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x4d338ebe]}, 0x8}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000680), 0x0, &(0x7f0000000140)=ANY=[], 0x30}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x4, 0x0, 0x1c, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e349aea6af78336582d0590e25ec269b2d3680332426aafd97cbf9f2a7ba9e6b90669957d639f5cd9c2e3aa1588665236be66b018ebf74d1ea99a30dc58e38ec0fcf72759302a257550bd8f2c42bf4a9768bef2ca76144bd2900fc"}}}}}, 0xc2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m18.539935501s ago: executing program 1 (id=421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="31209a93"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x20000014) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x2, 0x1, 0x1000, 0xffffffffffffffff, 0x68, 0x9, 0xfffffffffffffff7}, &(0x7f0000000480)={0x100, 0x4, 0x8000000000000000, 0x6, 0x7fffffff, 0x5, 0xa3, 0x4}, &(0x7f0000000500)={0x6, 0x0, 0x6c975f17, 0x1, 0x8000000000000000, 0x1, 0x7797, 0x40}, &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x4d338ebe]}, 0x8}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000680), 0x0, &(0x7f0000000140)=ANY=[], 0x30}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x4, 0x0, 0x1c, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e349aea6af78336582d0590e25ec269b2d3680332426aafd97cbf9f2a7ba9e6b90669957d639f5cd9c2e3aa1588665236be66b018ebf74d1ea99a30dc58e38ec0fcf72759302a257550bd8f2c42bf4a9768bef2ca76144bd2900fc"}}}}}, 0xc2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.620713804s ago: executing program 4 (id=1066): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r1 = socket$inet6(0xa, 0x0, 0x5c8815) socket$packet(0x11, 0x3, 0x300) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x804, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c848) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x0, 0x8001, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@generic={0x44, 0x4, "65a8"}, @noop, @noop]}}}}}) socket$pppoe(0x18, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048050}, 0x4040000) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000440)) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r7, &(0x7f0000001b80)={&(0x7f0000000640)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="edfac63166550a3c5ae908f9f1f15d5a2b740b7f5346b4bfb7707758043f231d0cf780a3fea121e2ebb3a4e2b79badd41463ed8a90d9cddf452199476da89405a10825eadd443ce3dfa4902755541717db15c6b806c7341dcb4f6440e64bd47ea87c805f3e02a536596fbbae49d4001dd7e98916d49f7f4bc51f186adcc2f3f9e14eaf5f0d16852f0d1b5611384d148829423000c5629fed873911ff2456daf4dcbf2309619e517de048aa069bbcc0481b8928bd4839fdfcdb44b05bf80f56afece7d7fc3a06160eaefd02bbe4ae6f46ca53eefa76f93f5fe6a087", 0xdb}, {&(0x7f00000017c0)="742f3932df2a2d1d1926b1e26b015a360165f66d8544d77a510338e57961b235", 0x20}, {&(0x7f0000001800)="cc69f8bcb8ea5dd8e7d10c2d629a6c1f9bdf077841301531c4179afd9620197cb3dd4f0b87a77e32c35b549ea48cdec5d146c6aafd6d86eec2c1ded16b5a44ae85f54569d6be0b9ea27c4f70f0c18f36a9ad904174a70b0d3eb727bf1cfdf3c041903cd6f96edf0ca655d95c9f1f07d8a3471a663684fd58f586baaf834df8933ee9d6882c6239924cfa981b6d05a0767e89bdacc60c17be222f5d43e1758d286f88712998caca184561928939a0", 0xae}, {&(0x7f00000018c0)="dbd666ba1c45a26575d13bcc1018f73afa5964169f044e339ecb6f7bd42897203f0d636ed85d1c7b3234d4c0e19ac511cdaa0508412e", 0x36}, {&(0x7f0000001900)="0fac520593d01868677f105ddfe14caac639d0668cbb7a5d1bdf34adadf300ee1f6cbc6de7a3c95719041d22a5e8bbcf8f92c3b2cf45b8e4da9a3fe3d52d4efed80848ed710a892a96245da6cf1a19c168c18d760e1acdecbac1857187adc8a8e048d7c3b74d6c64ac76aca8699a962d41de08cbaf8afcdb14e54bb001f51538a9181d762867ccc0e3828bb8254f83fe5a187fbd2cfe584745bb881870b1fcd83e555c58625b81c97aaf550ba85b2b936841b072a7a99b686602e9aaecbb4f4a85b25bf951a2ef278f395eb5951a7c8647de5db749d5", 0xd6}, {&(0x7f0000001a00)="d80bf175b55d14bfa53ce9e8028150cff8e4626423679d7b8e", 0x19}, {&(0x7f0000001a40)="7747804d23e99de678738c6a81e9490addf612930ca4f5c8672b52fb668747e253f421c906d18e3e288c534582fa188215e338a655dd3089f1a35be62ec36c5acf7bc691201a2cd1a2eb76b43d02097c2333b35ad3d99fca76b4cb85f87c7826a4e9b458b43e8357b2851b1b9ec2f26d7ba012c3341389a96d26295a15f6097284b7652165610a80516ca35ba37974ea4a690453551661e1c60caf36403937f2db451bcb6b2a09ebe8aad89dfea55d82fd451ff142", 0xb5}], 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001bc0)='syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000001c00)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x18, 0x3, 0x2c5, 0x5, 0x100c, 0xffffffffffffffff, 0x8, '\x00', r5, r12, 0x0, 0x3, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001cc0)={'wg1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r10) socket$inet6(0xa, 0x2, 0x1) close(r7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001e40)='ip6erspan0\x00', 0x10) 1m7.266058688s ago: executing program 1 (id=421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="31209a93"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x20000014) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x2, 0x1, 0x1000, 0xffffffffffffffff, 0x68, 0x9, 0xfffffffffffffff7}, &(0x7f0000000480)={0x100, 0x4, 0x8000000000000000, 0x6, 0x7fffffff, 0x5, 0xa3, 0x4}, &(0x7f0000000500)={0x6, 0x0, 0x6c975f17, 0x1, 0x8000000000000000, 0x1, 0x7797, 0x40}, &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x4d338ebe]}, 0x8}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000680), 0x0, &(0x7f0000000140)=ANY=[], 0x30}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x4, 0x0, 0x1c, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e349aea6af78336582d0590e25ec269b2d3680332426aafd97cbf9f2a7ba9e6b90669957d639f5cd9c2e3aa1588665236be66b018ebf74d1ea99a30dc58e38ec0fcf72759302a257550bd8f2c42bf4a9768bef2ca76144bd2900fc"}}}}}, 0xc2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 56.371164702s ago: executing program 4 (id=1066): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r1 = socket$inet6(0xa, 0x0, 0x5c8815) socket$packet(0x11, 0x3, 0x300) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x804, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c848) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x0, 0x8001, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@generic={0x44, 0x4, "65a8"}, @noop, @noop]}}}}}) socket$pppoe(0x18, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048050}, 0x4040000) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000440)) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r7, &(0x7f0000001b80)={&(0x7f0000000640)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000006c0)="7b155933a008bfe98483c594857866b6b83c777e6bb393ac5ccabc175d014e4914533ab814783d04abe170acecf3d8e46ab7dad0b029b306cfae8ab6c679d2f3eefac8368fcacbf26fb4d01fd369236dc5cb3ac44bdcec077d3ed6b5efeabbaf4994e43efbcab4cc4694d368868004224da7b88845fcc9ef1226260558a4bf511db12dc1a9126ddb6416fa11e191eae78a737d45a01794df8b8782a7d801fea36f5841f904cae921fbd4788411e9197fac07087e021604ef8c17a8ff1699e005a19c6feb613adfadc783f9b7860ab91e360ec30f174bfbea615e2628fe4793a7344a00964f6db32ed7a36f08794b7d4c586dc3c52fec669ed1c0c6dd3b5c214b71bbd6332e7a4f24aaa6ae9867bf881bf34ba483a39aacede4e92c48a27ede1ad44f19560e0a56af4121074f56ef640000da9d796e1819f177adeccc080840f79aa2507b53d0e4615efd3e7cf6e949c27165594f714d45f76fe67fbd41cc784ec6b7213e8dc9976a622a0ad043fcf8358d8da9a200070fbffae422816508566699077d33d9931106cf5e097aab8fa51063c4951ef7dbaec6e925a147e3570ae6f63a71868981dfc3203de98b338912147520c16ec9112876df142459539351743aad8bf97953192b7597c87e38b8197aaf4c444f973e9706185771bd58d962fa14914b4be70009014d853f9ed043343a1128f2f8917bc1b0250b37e79188b31e3e5f6a363295329a6f9be26b7cb09d6a4f87d0daffb7b1d88a1a2cf86bc7b267a9dc5fcb274a682b3a7e203e0ea6e19494cc86ba0f0db13ccd3cdf2c2234f2a7dee35f6b1bd954d80fafaebc91f339b754cc9ad5140384c8481279170e65aec5d8ca99f9583136c97b357b0535a882318a3e368cf22175f4351f4267d191450d88c846bd1a3e0bbba06a900f743dedc01d74d82e5d8c9ae0b45915cff37d83930a2cfb24e9c3cd1e7bba4574b107c4cfb130febc6276895c02f7f2d976ee395ca9595fbc397edd6f0bb27cabd958b59e1cf335d1f642422c529c9c2123f70a372cdd0dee620519fc1d1368534f43c1ec6e92d6eb637ce09489d02d189fcee7a3935322f6c27b9cbd849e8f48d0aa075f2647de6d4c3784bfb2179bf9055cb63f06bf733215de64785c83d1b20225e6e9756ceb77172234c98961a71e86a24e15de9462d627c23b89df3c4459789f814a14a2a88e5881782599d68de918b33eaa722bffc85063272e6ef6aae0d69681a2107c4e3c93051e1ab2a77d1e8414c35680a495449749d0b6153c6e9957369146e82641b5d6342f82698d369917b43587626ef02bff42eef8ddf3d50bb93d40f4f9637c6c712eba3d05fb7787402a558b87d26f8c85fae0ec870cc736d66f24c6e953fc60c3493dd8542e33e2b330be4fa599270f650749118b5b1647b1c8076dfbc1fc05ca11cb0322be5a4caa5929b727df185f6d423f00d1725c60a1b1e35cc454c2ec08ebf17bd1a9f8e3db211f410db24057c06662fa567b96d3b11fd7668b4b0f0a70ace57dd0ce412a8c651ffb7ac0b8d3772024824fc9ff7762bbdd603ed18cf451e97261941624d5e12bbebfaa7fd8db248b1ce7c17c42099ab61d8e324205fe80013bb1489aef15a889fe2a7e70487586fc305998d3e68cc465a85722075ea45149859ef3f56891ce49dd702a47915d8e2b0d3f321749c88c506c8a53fc44042e830a360a570ae371680319bf925dd49ea7f736728000ac30c25be0c9be5f62aefbee150bc97399c71b7cad8f3011179ecf04de42e53da820a0f0dcc37dc8849bffe7fe6ba02a0ac5345c1199f6e6e5c8972f46bd67320c536f29dbe8269c7ad5f79f42f8c44cd24fdb0d8cb62411fc6ae65bfc2e4e54d23b91c03b344283369a0392b496f29cbacabb560343983971108aa902903821906d4d528d8d50ac1c4f57b5ad527ce19f454a5f70b360c84f6feda6f7ff245ef580e98ae40688ec2512a94acfff5c75486650f5234ea5751adde47a98351a4df23a8e7273976ae85f98bac6babb40f26c2f127a87eb85dd86678dd264db384ee0314f93f112d2d6e9de0650a616bf00617bcbfbdeb552c4946756b2792db537e17af20a14950dcef1d9bdc2aadeef9e84c1f319dc845e03f6ab7fb204527a62cad0596264d3d0e5e74bce526e6c797e555c5527524ab4a9c7c68af8c5f140abe448052956751563571383d5354135ef7236a9fbb1ad58b22274b6e3274ec0fa224173a1f7e0b384d545a8beaf2a62300702fae065d45c51e93de3151e10ad3a4d83d22952c43f9d0382db8dccc1eb84ccea9605796da5b0195f8f588620afdc835129a724c5764dd03b616977a0f7073a17a02b989647dfad8b75a3a14a953026673db7806f5db0e5c7c3624a677644d9575a89ed344f3e5f80bd3d1584bbb755270c72b95878792e6fd9ee677a000e300bef0e3e70ebaefa74fbed112259c99b1798592d21bb514596a307fb131ccbdf6b781c8984de8354ed0a175b7dc47c62ea694a3be4e303553f301da5f9ba0c3013adc98cac652d7412580e8485b5410ba6c8e07b4f8fb8d74ad0c1031cfc241c4c4b1ee8e8d3ea02ff0ab947b542e21f35928ac46f0dbb601e63cbeff1c159c13ebd213028f1ca23a44a870094680a51a8f2d7a4e39de0ede825e180bf3ab7ff82dfe4c349aa24659bb2214b34f3f7d83c1471ed9f0a208510ffd1504a6c812c5f5fb55d48d672b7b6965d97c6f4c943cbd7db60da1a7d7ab01e2a3a94e750fae2be40fa19a9cfc06f71c6f2838807b127a9e8163de06b8eb6356a9092665afd9f867c261a21c8e81c15d1ee8bd9f58f1996d415c65d11c1a3bfcaed6e97a12fec0dbca8d296d62e29103c3d15610f066dddecb4f46c3e1c0fb4c4d29b6f30ab7565f135c0c1696ae31295f9dd489b3d7fa79fdc5f824f0c7b63ff24448617bcd6a1a795cd1423202dfd49eeb854de9e0f565fb4f6b6c4c3bfc2b5973754c6a3124e6f0e23730466e0d0681d6a538c291ba022f5010ed915f1f6b8f37913bd66a7d04522598c64a678e1ebd3c06b1eff05ab3659d9ac0238e871e7638123662e8237c51f46522c953bf4262010458fc2a000579610cdabb860744588f9f7fccb3dac3db0bc2c03bb5dc53d3ae8ce34d3cc0c10053ab6ad529bfd3d87de0855f2482c2355bcedfacb1e0ebc8b3f6eeaac2646aa429c67f10349858d71e593130c2f442e6b5ca60a9c36476015829ebe096ca38e2b05837c9ef18c5ba3b3593a6660f7ca200332ccbed94cc9488d53c458b7e71e4aae3af0d844d27910f9eb78a72d8ee50fc80d7dc3086875217d0d212f5530cfc9511f59bac335f85d0b833449172ce0e492790bb1ced61d325bb3b7b10c5c8a53f126c84397fd7561d876849fd7e42ccf5a2f82eb6eff7a3da9bb1f632f874b94b11164af7739e407cfe5886b4b23931e2cc3af0243a2b89da563429bc10cfb352d01b34af907e417e16a07cd80c1317f87daf05002e774daf00348a4be1451214d9c19ece03e45fc759fceb6b3b0cf5ab05f1c4904bd49717ad5e09106ba1ac25fdd730bcaef5f07f7c09b490cdca4f3180f1ea89aa71d5466afd6dfe40aa40985da20bbbb6182f4fcd399a1c7ad9ea7d4d543eb0fb77edf2cbb0b6110480e08016fc183f443dc5bafe85064df340e386b76230cee15c005e9ee7b923e01a4ac6cd9ce2183d355e3b91f3c0d3c11d8a160274d83cb00720dbf1a8aa22704e0d451d0951a6692a9b9a28c5f2c16fe924b155b90ab562df653aa73b4044776c18c51a93cfd4e6d24bfc4c078f604d71c19a8d53292acc1289d5cae8397c1aad889d5f0876ec5f839eff16b0654ea311a1fa83168931b61254e6b6d93226ea2b7338e60f0e246badbeeeead6aef740336aaaeb14391cdcb110667949fd361e90aa906b39705baeb20ca95e00463c8ccd960158c73affff0106f4c87823b4a6372b4c0c4c77f1ce030164b627b148b21ba603588967e80f89c6ac331a665add8b3d85e8227dfe84d3e5ce781ad538e339ecbf6fb3bdf91b0cf1bca999577aa8976aa9f5d7a6d927c87a698fdfbaad66c6c015377760568e3e8d8827828a9b1ca3cde25dcc53f0f27a32667f981ea99f224e4071d8f6e672fdb370c66e51714354840850534d57dd03df03f221ae1932d868999ce6d4466c48fa2cce6f0cd26d3a06d38018ff6c8a51f332190f79bc3a28f6a03e0a25545e22a95a3a81d13b174850c457175009190c3fec5ef0d6b079b711162104c5fe2c1f885aa0d119a77c097e8bc1261bbcbb2d3e1ebefffeaf7f507376db5b6dba77289c52dd77cc56fc4010761c8d76cb7e408f2d9535402fd7be3fa8fb115ca6791ba211a94063929dc4208fd4f7577bdc6f4110a91e759167d3264377bcb2b9c32bfb932c813b40da8f6fea86a0705cff0b7c6dc65e2a1534e7d8fbabe051415afd0ed556fdcdfb57b76f2db74323167ebd8e4ab1b19f0574f7211b368c7d4f68e06cfe2725b9133a7fb2654c8a083b2448b8a1f5dcbc44b226eb3b6a91222ea3ed527debab558e337daf36368eff017bca849c109f42cdeff75019586845bf63bb2de4eab321e9fa476e03b99fb08e8ef9ccc2202d5331143c09a68d61dcb2d88e46d7179f455e1c827c3ba9f0e9bcc0680bc452203157193d940bdeea50d7cf3502f8f6f86c195cf7fdd28f4247bd3e1617a31332c67f689e4aa38ca5cf2cedd3273606d76c3a5b4af715a80935b844280a8cf85847b3c6087f0b940e14342cfcd5ba6aa64494321263918cf808517bcfc5499372bdc80e7080b8a1c1a07f6df60044d5ea12c05c6033d54823d22f445c61b50d183680070dbac7b71f3b32903559b165281c7c90b28d093db47b02235ebee5090c6eac5d172f1228fa7323381605624b5d4754ec2cd0e113016a59e72e46e24da658bc550382e6ad96d58d4ff952ac1eab3a5f71bde9add5ac59382996219d8d096cc11c4887dfeca076338c426a9330719e9695a8346a09cac9b9b6b7823908c5b87826752c19228e3745f5ca84da236ef2ae9120112414de46eb29c2772c0870b4a63243982becb4a6a5efe7605234e47dddb7c962a1cadcaed8292dbf8636dd87d5f17c51282a7df761c7dc82ab5e01ffb3bd44844031bfbacf516b0b94ba6955b3f4a5894efceaa28f8a082292c16fc9aa082ee6ad46189d1ebfed13958a2619ea8e8c093ef694ca5b3ae66e1af560aad454378d8fbf0e8b07a1e15602dfeab9844fb70604b5f07e4e2e1ee1db66344d392bbcf1b5c29947723eb483cbc065628c4cb5188cc16442b556e603add01b91a063c4214a29c0bd543ade44146dadb0bf4692d9203a52fbb218868448c3461c9730cebdd469f4dbaa7c44f4606fecc650cd70e39efb3be97d9719257de45e53ebf5c5ab6298218fa3107a56a569662ce295f139698c6a8dba9657b751ef2a6abeeda05741bb9d43359faca9907f88258219c16fe003979f87567ff4c7157c3ba4686db80b19042ac7c9d3a0e4db9f6918f15140632a928789f46464028d2672a2abe27808914497e095a1bb35d587df324842d2735305457ae1e7131a7ce660752575a1b1483c4d1e73457356633d2470dcc343219dc332b7f477abb0a9148eeb96b35882fcce41ea1df358854e240c5bb9bc75a3776308a5684f0969b5d335befc709a60a0a3838711b8ab00b6169ba8ae2e8bd86955034d89949fa93c7a2a4171c3ac16d4b5651f00d76b9d4521e279be6fd0d6ceed2813c081a73fbdb741a27d9e51f6a06585d09bedfb73143d1ab8ef88ac5", 0x1000}, {&(0x7f00000016c0)="edfac63166550a3c5ae908f9f1f15d5a2b740b7f5346b4bfb7707758043f231d0cf780a3fea121e2ebb3a4e2b79badd41463ed8a90d9cddf452199476da89405a10825eadd443ce3dfa4902755541717db15c6b806c7341dcb4f6440e64bd47ea87c805f3e02a536596fbbae49d4001dd7e98916d49f7f4bc51f186adcc2f3f9e14eaf5f0d16852f0d1b5611384d148829423000c5629fed873911ff2456daf4dcbf2309619e517de048aa069bbcc0481b8928bd4839fdfcdb44b05bf80f56afece7d7fc3a06160eaefd02bbe4ae6f46ca53eefa76f93f5fe6a087", 0xdb}, {&(0x7f00000017c0)="742f3932df2a2d1d1926b1e26b015a360165f66d8544d77a510338e57961b235", 0x20}, {&(0x7f0000001800)="cc69f8bcb8ea5dd8e7d10c2d629a6c1f9bdf077841301531c4179afd9620197cb3dd4f0b87a77e32c35b549ea48cdec5d146c6aafd6d86eec2c1ded16b5a44ae85f54569d6be0b9ea27c4f70f0c18f36a9ad904174a70b0d3eb727bf1cfdf3c041903cd6f96edf0ca655d95c9f1f07d8a3471a663684fd58f586baaf834df8933ee9d6882c6239924cfa981b6d05a0767e89bdacc60c17be222f5d43e1758d286f88712998caca184561928939a0", 0xae}, {&(0x7f00000018c0)="dbd666ba1c45a26575d13bcc1018f73afa5964169f044e339ecb6f7bd42897203f0d636ed85d1c7b3234d4c0e19ac511cdaa0508412e", 0x36}, {&(0x7f0000001900)="0fac520593d01868677f105ddfe14caac639d0668cbb7a5d1bdf34adadf300ee1f6cbc6de7a3c95719041d22a5e8bbcf8f92c3b2cf45b8e4da9a3fe3d52d4efed80848ed710a892a96245da6cf1a19c168c18d760e1acdecbac1857187adc8a8e048d7c3b74d6c64ac76aca8699a962d41de08cbaf8afcdb14e54bb001f51538a9181d762867ccc0e3828bb8254f83fe5a187fbd2cfe584745bb881870b1fcd83e555c58625b81c97aaf550ba85b2b936841b072a7a99b686602e9aaecbb4f4a85b25bf951a2ef278f395eb5951a7c8647de5db749d5", 0xd6}, {&(0x7f0000001a00)="d80bf175b55d14bfa53ce9e8028150cff8e4626423679d7b8e", 0x19}, {&(0x7f0000001a40)="7747804d23e99de678738c6a81e9490addf612930ca4f5c8672b52fb668747e253f421c906d18e3e288c534582fa188215e338a655dd3089f1a35be62ec36c5acf7bc691201a2cd1a2eb76b43d02097c2333b35ad3d99fca76b4cb85f87c7826a4e9b458b43e8357b2851b1b9ec2f26d7ba012c3341389a96d26295a15f6097284b7652165610a80516ca35ba37974ea4a690453551661e1c60caf36403937f2db451bcb6b2a09ebe8aad89dfea55d82fd451ff142", 0xb5}], 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001bc0)='syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000001c00)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x18, 0x3, 0x2c5, 0x5, 0x100c, 0xffffffffffffffff, 0x8, '\x00', r5, r12, 0x0, 0x3, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001cc0)={'wg1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r10) socket$inet6(0xa, 0x2, 0x1) close(r7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001e40)='ip6erspan0\x00', 0x10) 50.916425076s ago: executing program 1 (id=421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="31209a93"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x20000014) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x2, 0x1, 0x1000, 0xffffffffffffffff, 0x68, 0x9, 0xfffffffffffffff7}, &(0x7f0000000480)={0x100, 0x4, 0x8000000000000000, 0x6, 0x7fffffff, 0x5, 0xa3, 0x4}, &(0x7f0000000500)={0x6, 0x0, 0x6c975f17, 0x1, 0x8000000000000000, 0x1, 0x7797, 0x40}, &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x4d338ebe]}, 0x8}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000680), 0x0, &(0x7f0000000140)=ANY=[], 0x30}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x4, 0x0, 0x1c, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e349aea6af78336582d0590e25ec269b2d3680332426aafd97cbf9f2a7ba9e6b90669957d639f5cd9c2e3aa1588665236be66b018ebf74d1ea99a30dc58e38ec0fcf72759302a257550bd8f2c42bf4a9768bef2ca76144bd2900fc"}}}}}, 0xc2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.872974024s ago: executing program 4 (id=1066): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r1 = socket$inet6(0xa, 0x0, 0x5c8815) socket$packet(0x11, 0x3, 0x300) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x804, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c848) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x0, 0x8001, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@generic={0x44, 0x4, "65a8"}, @noop, @noop]}}}}}) socket$pppoe(0x18, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048050}, 0x4040000) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000440)) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r7, &(0x7f0000001b80)={&(0x7f0000000640)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="edfac63166550a3c5ae908f9f1f15d5a2b740b7f5346b4bfb7707758043f231d0cf780a3fea121e2ebb3a4e2b79badd41463ed8a90d9cddf452199476da89405a10825eadd443ce3dfa4902755541717db15c6b806c7341dcb4f6440e64bd47ea87c805f3e02a536596fbbae49d4001dd7e98916d49f7f4bc51f186adcc2f3f9e14eaf5f0d16852f0d1b5611384d148829423000c5629fed873911ff2456daf4dcbf2309619e517de048aa069bbcc0481b8928bd4839fdfcdb44b05bf80f56afece7d7fc3a06160eaefd02bbe4ae6f46ca53eefa76f93f5fe6a087", 0xdb}, {&(0x7f00000017c0)="742f3932df2a2d1d1926b1e26b015a360165f66d8544d77a510338e57961b235", 0x20}, {&(0x7f0000001800)="cc69f8bcb8ea5dd8e7d10c2d629a6c1f9bdf077841301531c4179afd9620197cb3dd4f0b87a77e32c35b549ea48cdec5d146c6aafd6d86eec2c1ded16b5a44ae85f54569d6be0b9ea27c4f70f0c18f36a9ad904174a70b0d3eb727bf1cfdf3c041903cd6f96edf0ca655d95c9f1f07d8a3471a663684fd58f586baaf834df8933ee9d6882c6239924cfa981b6d05a0767e89bdacc60c17be222f5d43e1758d286f88712998caca184561928939a0", 0xae}, {&(0x7f00000018c0)="dbd666ba1c45a26575d13bcc1018f73afa5964169f044e339ecb6f7bd42897203f0d636ed85d1c7b3234d4c0e19ac511cdaa0508412e", 0x36}, {&(0x7f0000001900)="0fac520593d01868677f105ddfe14caac639d0668cbb7a5d1bdf34adadf300ee1f6cbc6de7a3c95719041d22a5e8bbcf8f92c3b2cf45b8e4da9a3fe3d52d4efed80848ed710a892a96245da6cf1a19c168c18d760e1acdecbac1857187adc8a8e048d7c3b74d6c64ac76aca8699a962d41de08cbaf8afcdb14e54bb001f51538a9181d762867ccc0e3828bb8254f83fe5a187fbd2cfe584745bb881870b1fcd83e555c58625b81c97aaf550ba85b2b936841b072a7a99b686602e9aaecbb4f4a85b25bf951a2ef278f395eb5951a7c8647de5db749d5", 0xd6}, {&(0x7f0000001a00)="d80bf175b55d14bfa53ce9e8028150cff8e4626423679d7b8e", 0x19}, {&(0x7f0000001a40)="7747804d23e99de678738c6a81e9490addf612930ca4f5c8672b52fb668747e253f421c906d18e3e288c534582fa188215e338a655dd3089f1a35be62ec36c5acf7bc691201a2cd1a2eb76b43d02097c2333b35ad3d99fca76b4cb85f87c7826a4e9b458b43e8357b2851b1b9ec2f26d7ba012c3341389a96d26295a15f6097284b7652165610a80516ca35ba37974ea4a690453551661e1c60caf36403937f2db451bcb6b2a09ebe8aad89dfea55d82fd451ff142", 0xb5}], 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001bc0)='syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000001c00)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x18, 0x3, 0x2c5, 0x5, 0x100c, 0xffffffffffffffff, 0x8, '\x00', r5, r12, 0x0, 0x3, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001cc0)={'wg1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r10) socket$inet6(0xa, 0x2, 0x1) close(r7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001e40)='ip6erspan0\x00', 0x10) 28.42324202s ago: executing program 4 (id=1066): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r1 = socket$inet6(0xa, 0x0, 0x5c8815) socket$packet(0x11, 0x3, 0x300) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x804, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c848) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x0, 0x8001, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@generic={0x44, 0x4, "65a8"}, @noop, @noop]}}}}}) socket$pppoe(0x18, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048050}, 0x4040000) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000440)) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r7, &(0x7f0000001b80)={&(0x7f0000000640)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="edfac63166550a3c5ae908f9f1f15d5a2b740b7f5346b4bfb7707758043f231d0cf780a3fea121e2ebb3a4e2b79badd41463ed8a90d9cddf452199476da89405a10825eadd443ce3dfa4902755541717db15c6b806c7341dcb4f6440e64bd47ea87c805f3e02a536596fbbae49d4001dd7e98916d49f7f4bc51f186adcc2f3f9e14eaf5f0d16852f0d1b5611384d148829423000c5629fed873911ff2456daf4dcbf2309619e517de048aa069bbcc0481b8928bd4839fdfcdb44b05bf80f56afece7d7fc3a06160eaefd02bbe4ae6f46ca53eefa76f93f5fe6a087", 0xdb}, {&(0x7f00000017c0)="742f3932df2a2d1d1926b1e26b015a360165f66d8544d77a510338e57961b235", 0x20}, {&(0x7f0000001800)="cc69f8bcb8ea5dd8e7d10c2d629a6c1f9bdf077841301531c4179afd9620197cb3dd4f0b87a77e32c35b549ea48cdec5d146c6aafd6d86eec2c1ded16b5a44ae85f54569d6be0b9ea27c4f70f0c18f36a9ad904174a70b0d3eb727bf1cfdf3c041903cd6f96edf0ca655d95c9f1f07d8a3471a663684fd58f586baaf834df8933ee9d6882c6239924cfa981b6d05a0767e89bdacc60c17be222f5d43e1758d286f88712998caca184561928939a0", 0xae}, {&(0x7f00000018c0)="dbd666ba1c45a26575d13bcc1018f73afa5964169f044e339ecb6f7bd42897203f0d636ed85d1c7b3234d4c0e19ac511cdaa0508412e", 0x36}, {&(0x7f0000001900)="0fac520593d01868677f105ddfe14caac639d0668cbb7a5d1bdf34adadf300ee1f6cbc6de7a3c95719041d22a5e8bbcf8f92c3b2cf45b8e4da9a3fe3d52d4efed80848ed710a892a96245da6cf1a19c168c18d760e1acdecbac1857187adc8a8e048d7c3b74d6c64ac76aca8699a962d41de08cbaf8afcdb14e54bb001f51538a9181d762867ccc0e3828bb8254f83fe5a187fbd2cfe584745bb881870b1fcd83e555c58625b81c97aaf550ba85b2b936841b072a7a99b686602e9aaecbb4f4a85b25bf951a2ef278f395eb5951a7c8647de5db749d5", 0xd6}, {&(0x7f0000001a00)="d80bf175b55d14bfa53ce9e8028150cff8e4626423679d7b8e", 0x19}, {&(0x7f0000001a40)="7747804d23e99de678738c6a81e9490addf612930ca4f5c8672b52fb668747e253f421c906d18e3e288c534582fa188215e338a655dd3089f1a35be62ec36c5acf7bc691201a2cd1a2eb76b43d02097c2333b35ad3d99fca76b4cb85f87c7826a4e9b458b43e8357b2851b1b9ec2f26d7ba012c3341389a96d26295a15f6097284b7652165610a80516ca35ba37974ea4a690453551661e1c60caf36403937f2db451bcb6b2a09ebe8aad89dfea55d82fd451ff142", 0xb5}], 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001bc0)='syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000001c00)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x18, 0x3, 0x2c5, 0x5, 0x100c, 0xffffffffffffffff, 0x8, '\x00', r5, r12, 0x0, 0x3, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001cc0)={'wg1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r10) socket$inet6(0xa, 0x2, 0x1) close(r7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001e40)='ip6erspan0\x00', 0x10) 17.662143592s ago: executing program 4 (id=1066): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r1 = socket$inet6(0xa, 0x0, 0x5c8815) socket$packet(0x11, 0x3, 0x300) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x804, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c848) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x0, 0x8001, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@generic={0x44, 0x4, "65a8"}, @noop, @noop]}}}}}) socket$pppoe(0x18, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048050}, 0x4040000) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000440)) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r7, &(0x7f0000001b80)={&(0x7f0000000640)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="edfac63166550a3c5ae908f9f1f15d5a2b740b7f5346b4bfb7707758043f231d0cf780a3fea121e2ebb3a4e2b79badd41463ed8a90d9cddf452199476da89405a10825eadd443ce3dfa4902755541717db15c6b806c7341dcb4f6440e64bd47ea87c805f3e02a536596fbbae49d4001dd7e98916d49f7f4bc51f186adcc2f3f9e14eaf5f0d16852f0d1b5611384d148829423000c5629fed873911ff2456daf4dcbf2309619e517de048aa069bbcc0481b8928bd4839fdfcdb44b05bf80f56afece7d7fc3a06160eaefd02bbe4ae6f46ca53eefa76f93f5fe6a087", 0xdb}, {&(0x7f00000017c0)="742f3932df2a2d1d1926b1e26b015a360165f66d8544d77a510338e57961b235", 0x20}, {&(0x7f0000001800)="cc69f8bcb8ea5dd8e7d10c2d629a6c1f9bdf077841301531c4179afd9620197cb3dd4f0b87a77e32c35b549ea48cdec5d146c6aafd6d86eec2c1ded16b5a44ae85f54569d6be0b9ea27c4f70f0c18f36a9ad904174a70b0d3eb727bf1cfdf3c041903cd6f96edf0ca655d95c9f1f07d8a3471a663684fd58f586baaf834df8933ee9d6882c6239924cfa981b6d05a0767e89bdacc60c17be222f5d43e1758d286f88712998caca184561928939a0", 0xae}, {&(0x7f00000018c0)="dbd666ba1c45a26575d13bcc1018f73afa5964169f044e339ecb6f7bd42897203f0d636ed85d1c7b3234d4c0e19ac511cdaa0508412e", 0x36}, {&(0x7f0000001900)="0fac520593d01868677f105ddfe14caac639d0668cbb7a5d1bdf34adadf300ee1f6cbc6de7a3c95719041d22a5e8bbcf8f92c3b2cf45b8e4da9a3fe3d52d4efed80848ed710a892a96245da6cf1a19c168c18d760e1acdecbac1857187adc8a8e048d7c3b74d6c64ac76aca8699a962d41de08cbaf8afcdb14e54bb001f51538a9181d762867ccc0e3828bb8254f83fe5a187fbd2cfe584745bb881870b1fcd83e555c58625b81c97aaf550ba85b2b936841b072a7a99b686602e9aaecbb4f4a85b25bf951a2ef278f395eb5951a7c8647de5db749d5", 0xd6}, {&(0x7f0000001a00)="d80bf175b55d14bfa53ce9e8028150cff8e4626423679d7b8e", 0x19}, {&(0x7f0000001a40)="7747804d23e99de678738c6a81e9490addf612930ca4f5c8672b52fb668747e253f421c906d18e3e288c534582fa188215e338a655dd3089f1a35be62ec36c5acf7bc691201a2cd1a2eb76b43d02097c2333b35ad3d99fca76b4cb85f87c7826a4e9b458b43e8357b2851b1b9ec2f26d7ba012c3341389a96d26295a15f6097284b7652165610a80516ca35ba37974ea4a690453551661e1c60caf36403937f2db451bcb6b2a09ebe8aad89dfea55d82fd451ff142", 0xb5}], 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001bc0)='syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000001c00)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x18, 0x3, 0x2c5, 0x5, 0x100c, 0xffffffffffffffff, 0x8, '\x00', r5, r12, 0x0, 0x3, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001cc0)={'wg1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r10) socket$inet6(0xa, 0x2, 0x1) close(r7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001e40)='ip6erspan0\x00', 0x10) 4.072439068s ago: executing program 3 (id=1418): socket(0x11, 0x4, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700c2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c057a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f275301004eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599e1e415079f5bd816de31f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba007e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802830b22769593122fc1c5ff2696fe122eb99fac093ce2b0a26cc1b97a9661f2a04b07b00c5e93b6049989fac1b2cd342bd131f3c7bbef5b876b537af695aabf43e9c19cb8cd91e503c6ba35b3355bc865f56681ffac1fcbae0dc61da9cf940b7f"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 3.90160328s ago: executing program 3 (id=1419): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x225, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0xf9, 0xe, 0x9, 0x54, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x40, 0x700, 0x17, 0x7}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc", 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000500)=""/128, 0x80, 0x0, &(0x7f0000000580)=""/242, 0xf2}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xe, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x7, 0x0, 0xd, 0x6, 0x9, 0x10, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0xbb, &(0x7f0000000400)=""/187, 0x40f00, 0x8, '\x00', r2, @fallback=0x32, r3, 0x8, &(0x7f00000004c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x2, &(0x7f0000000700)=[r5], &(0x7f0000000740)=[{0x5, 0x2, 0x10, 0x8}, {0x3, 0x3, 0x7, 0x5}], 0x10, 0x1000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x10, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="03006979ad4a6b614ff79ba1774c1a00000700000000000000070000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendto$inet(r0, 0x0, 0x0, 0x24000001, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000180)=0x800003, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e26, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x40000000}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff004003000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd00000010000100090810000c00000000040000", 0x58}], 0x1) 2.854009914s ago: executing program 3 (id=1426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x870bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000440)=0x2, 0x4) (async) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r3}, 0x18) (async) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x90001}, 0x0) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000891214000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001040000000000000000000071120f000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x24020400) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="02fadb00008003000100"], 0x8) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x5, 0x6]}, &(0x7f0000000040)=0x8) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 2.672554368s ago: executing program 3 (id=1428): syz_emit_ethernet(0x76, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private=0xa010101, 0x7}]}, @cipso={0x86, 0x1f, 0x3, [{0x5, 0x6}, {0x6, 0x2}, {0x2, 0x6, "d109567c"}, {0x5, 0xb, "c92d3002d91d907b79"}, {0x5, 0x2}, {0x0, 0x2, "356d7c3316ab0a56832147f09ee5eff4"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "ade34b13"}]}]}}}}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x6, 0x8, 0x800, 0x50, 0x8}, &(0x7f0000000700)=0x9c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000880)={r7, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000940)=0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r6}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x94) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r9) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r10, 0x401, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffffffffffe04, 0x8e, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x48810) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r11, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r12}, &(0x7f0000000400), 0x0}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) close(0x3) 2.672082239s ago: executing program 2 (id=1429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c00000000009500000000000000b90e95e57804548523f5c35eabed82bacebc4acb8d55cd5df36d3d088d5f6bb288d318e11e31e5567471c834b50a1f9d4f997570d089a0e7e96add221dc7bee1e65253c7ba31e17f15aef906df879a352fde25bd93c2047135aa9439e10c57e9fd9005422c2b4a7bdf38f0139694ed361b63be5ed1a3c51bb67d7726d81fe586251b8b599110adf948b1738ebf2ee659f9283ff14eec8040fa03492730f2983093c89207bf5023ef50d7aac3ce05cd4bbfef5a20967ee5493856ce6c29578366bfe3702b8c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6adef}, @IFLA_BROADCAST={0xa, 0x2, @random="c79c9cd7b2f9"}]}, 0x48}}, 0x0) socket$inet(0x2, 0x4, 0xca4) 2.502092058s ago: executing program 4 (id=1066): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r1 = socket$inet6(0xa, 0x0, 0x5c8815) socket$packet(0x11, 0x3, 0x300) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x804, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c848) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x0, 0x8001, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@generic={0x44, 0x4, "65a8"}, @noop, @noop]}}}}}) socket$pppoe(0x18, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048050}, 0x4040000) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000440)) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r7, &(0x7f0000001b80)={&(0x7f0000000640)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="edfac63166550a3c5ae908f9f1f15d5a2b740b7f5346b4bfb7707758043f231d0cf780a3fea121e2ebb3a4e2b79badd41463ed8a90d9cddf452199476da89405a10825eadd443ce3dfa4902755541717db15c6b806c7341dcb4f6440e64bd47ea87c805f3e02a536596fbbae49d4001dd7e98916d49f7f4bc51f186adcc2f3f9e14eaf5f0d16852f0d1b5611384d148829423000c5629fed873911ff2456daf4dcbf2309619e517de048aa069bbcc0481b8928bd4839fdfcdb44b05bf80f56afece7d7fc3a06160eaefd02bbe4ae6f46ca53eefa76f93f5fe6a087", 0xdb}, {&(0x7f00000017c0)="742f3932df2a2d1d1926b1e26b015a360165f66d8544d77a510338e57961b235", 0x20}, {&(0x7f0000001800)="cc69f8bcb8ea5dd8e7d10c2d629a6c1f9bdf077841301531c4179afd9620197cb3dd4f0b87a77e32c35b549ea48cdec5d146c6aafd6d86eec2c1ded16b5a44ae85f54569d6be0b9ea27c4f70f0c18f36a9ad904174a70b0d3eb727bf1cfdf3c041903cd6f96edf0ca655d95c9f1f07d8a3471a663684fd58f586baaf834df8933ee9d6882c6239924cfa981b6d05a0767e89bdacc60c17be222f5d43e1758d286f88712998caca184561928939a0", 0xae}, {&(0x7f00000018c0)="dbd666ba1c45a26575d13bcc1018f73afa5964169f044e339ecb6f7bd42897203f0d636ed85d1c7b3234d4c0e19ac511cdaa0508412e", 0x36}, {&(0x7f0000001900)="0fac520593d01868677f105ddfe14caac639d0668cbb7a5d1bdf34adadf300ee1f6cbc6de7a3c95719041d22a5e8bbcf8f92c3b2cf45b8e4da9a3fe3d52d4efed80848ed710a892a96245da6cf1a19c168c18d760e1acdecbac1857187adc8a8e048d7c3b74d6c64ac76aca8699a962d41de08cbaf8afcdb14e54bb001f51538a9181d762867ccc0e3828bb8254f83fe5a187fbd2cfe584745bb881870b1fcd83e555c58625b81c97aaf550ba85b2b936841b072a7a99b686602e9aaecbb4f4a85b25bf951a2ef278f395eb5951a7c8647de5db749d5", 0xd6}, {&(0x7f0000001a00)="d80bf175b55d14bfa53ce9e8028150cff8e4626423679d7b8e", 0x19}, {&(0x7f0000001a40)="7747804d23e99de678738c6a81e9490addf612930ca4f5c8672b52fb668747e253f421c906d18e3e288c534582fa188215e338a655dd3089f1a35be62ec36c5acf7bc691201a2cd1a2eb76b43d02097c2333b35ad3d99fca76b4cb85f87c7826a4e9b458b43e8357b2851b1b9ec2f26d7ba012c3341389a96d26295a15f6097284b7652165610a80516ca35ba37974ea4a690453551661e1c60caf36403937f2db451bcb6b2a09ebe8aad89dfea55d82fd451ff142", 0xb5}], 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001bc0)='syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000001c00)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x18, 0x3, 0x2c5, 0x5, 0x100c, 0xffffffffffffffff, 0x8, '\x00', r5, r12, 0x0, 0x3, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001cc0)={'wg1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r10) socket$inet6(0xa, 0x2, 0x1) close(r7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001e40)='ip6erspan0\x00', 0x10) 2.472860593s ago: executing program 0 (id=1430): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='consume_skb\x00', r0}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r1], 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) r5 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r5, 0x29, 0x7, 0x0, &(0x7f0000000100)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="340100001800290200ff0000fbdbde250a0000002f002c8008002500", @ANYRES32=r4, @ANYBLOB="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"], 0x134}}, 0x0) close(r8) socket$inet(0x2, 0x2, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000140)=0x1080, 0x4) sendmmsg$alg(r7, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619ba", 0x11}, {&(0x7f00000048c0)="4aa6ebbaadac821a088be79aff597e399b67d0e0d8b16af93d4078939730787afd7ca85bd5aa74fab362b0585f095ee8c513e864ee7783500a577bfbf648389284cb6744ba7d2e73d9d618702e712ecd6a199286326ff22d59544afc715f8eccf9b851691d3b14dac31434bfec34c03dce1c596738e7f8a4ac186af40bad817595723a21c333b257df41c2a304d5f8d5315fd712508ae16bdaf38e6393b3937971c39c171b44fc2e9ec39572aed0bd04469e4ae3a79961f0c7eb9f2e156940e25ed265df80293c65b0e7e9f48cff3b6edfb3961d9428d952b265ae0875efe5bee0cd300c867df131272d336e0fdb8fb5c3886d97a1a63c957391ec81f82866c9930bb706403157a9d0e1da672e8e6119df5e2207bc026793adcc23c2d5ca80520b2c4c8118b00cf20c837d3421c39d7b8761b364f0e1b3714cc3cbea0c519d0e01580b6e5b97696f7d628cf5a51b25daa113083b97437bd454db2741b1ddc21a3b4e8aa904c973378847c5a00afafa904e384efc9af4046e5de38884d89c4e42deede9cd50aa4d1b94c9066b5d09187f3d91a21996da79ab67c2da60d74d1b2940812ed9a3effc6bbf4cadb776fb5d04de75df09a288a909d442fb1b50c4a0b16c85690803da206a64ca5ac0963d441e943ef3c97f93ba5c44d373e39163dcb88fab44dbd6c13239ea88fca0a0b4ad6da7060bbd9163824da2ec275834bf74ca75c3798dce2c75cf70de274315485342f32094f1236130499407eef762264ff366c6d79b301cfe428ce6358ed98eedb31fd671f27f16c0ea5762cdc29404e64137514b805f338a4d0987152fae512f29301e3ffa153a612e7893b4993320766f818ccdb5e7195e845f3b76279a2f165e810b2e625a6fc2b17800db5cd08375f70cf79423a60eefb8d00d3ce78d37841356c652d844d3fa57730fc4fdb3969c9d4aa5d55c96c54e53827f3309d1051b8543d2086048951c56c009491e1705c856bc30defc45b6626c1d0801e85010026ecdc5eda1f0fb7ecc83cebe656e17b3d990cf5fb6fc31ea9a9d067778b989390d1867be9566b72c0d2c78ec9053332d1e30441e27028d922010375ed528f2c3bb68c0a620262f1c3cbb0f0c3cad552ab21558ff141b60c7e1317dfb7bf69e942ea6fde46bc4096fb0a73aefaa7dbf4ccd814fe2f86f7148e8178bd0dc9e23b9a9c9a4e8ec269bc9fddef6090e57141b", 0x35f}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r7, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000500)=""/232, 0xe8}], 0x3}, 0x3}], 0x1, 0x2100, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f00000001c0)={0xffdb, 0x8}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 1.375098608s ago: executing program 0 (id=1431): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40488d0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000006c0)={0x0, 0xea60}, 0x10) recvmmsg(r3, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000101, 0x0) (async) recvmmsg(r3, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000101, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(r6, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000fedbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="40000000000000000c002b800800030000000000"], 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r6, 0x0, 0x0, 0x80800) read(r10, &(0x7f0000009180)=""/77, 0x4d) (async) read(r10, &(0x7f0000009180)=""/77, 0x4d) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x21, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, [@null, @bcast, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x21, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, [@null, @bcast, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="078201001100000030001280090001006970697000000000200002800800140006000000080003007f000001060012004e2400000400130008000500", @ANYRES32=0x0, @ANYBLOB="deb90beb3cd121d75a85ea8a7b763ac4469938e25fc43f183bfaf173561415f34c6e2b559511a6fff73a754f3c9c2446a09aa1bc61a7358602d8b092188c67dde8a93e4ce00befc08715fff36a30b2838f1e2ad4e4c5d516358dd12524773e6648e654092b30e600000000"], 0x58}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="078201001100000030001280090001006970697000000000200002800800140006000000080003007f000001060012004e2400000400130008000500", @ANYRES32=0x0, @ANYBLOB="deb90beb3cd121d75a85ea8a7b763ac4469938e25fc43f183bfaf173561415f34c6e2b559511a6fff73a754f3c9c2446a09aa1bc61a7358602d8b092188c67dde8a93e4ce00befc08715fff36a30b2838f1e2ad4e4c5d516358dd12524773e6648e654092b30e600000000"], 0x58}}, 0x0) 1.373991667s ago: executing program 2 (id=1432): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462'], 0xa) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c00018006000600884800"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 1.372481156s ago: executing program 3 (id=1433): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r6, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 1.081367492s ago: executing program 2 (id=1434): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async) close(r3) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x1000001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], 0x0, 0x10, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2b5, 0x3, 0x3, 0x66240, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x80}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.01691124s ago: executing program 2 (id=1435): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xcb4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000000308030000000000000000000000fffd050003002f0000000c000480"], 0x28}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0xa, 0x3, 0x3a) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0xffff) r4 = socket(0x10, 0x803, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@gettaction={0x1b8, 0x32, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x22e9}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd31}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe9eb}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcef}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7e8}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff2}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x1b8}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 828.963019ms ago: executing program 2 (id=1436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0xfffffffd, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 733.207796ms ago: executing program 0 (id=1437): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pS \x00'}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000007c0012800b00010067656e65766500006c00028005000400010000001400070000000000000000000000000000000001060005004e200000050003000000503a05000c000100000005000800000000001400070000000000000000000000ffff"], 0x9c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000003000000080000000400000002000000", @ANYRES32, @ANYBLOB="79fb9cfa3193c08c000000000000000000000000c7b31a4c0b05f610ac77b72c26f8b5b091bafa3702301d51ba23164895efa33259a6c6584397296bc75b72ac1bcd86d949a3dd95a612fa2d1289fdc72c3e32c24e92881f996b5204cc64a602a98d9e1caa85d76ce68400dfd709a367cdc4f3220b0b81ddcc94fc3c02c271a8fd670d643031fbfc2ece24595988a7b41ab4a0c3c458d0f094785420602fc913", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x480000000102, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000300)={0x1d, r6}, 0x10) (async) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b90500006100c1517fa00bdc66ad", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 532.053822ms ago: executing program 0 (id=1438): r0 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010100}}}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x7, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0xf3, 0x2, 0x800}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', r1, 0x20, 0x20, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x64, 0x0, 0xe9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 11.176406ms ago: executing program 3 (id=1439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x2, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @limit={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE, @NFTA_LIMIT_UNIT={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x0, 0x3, 0x1, 0x0, 0xfffffffb}]}}}]}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @match={{}, @void}}]}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x88fa}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x9000}]}, @NFTA_RULE_TABLE={0xfffffce9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_FLAGS={0x0, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x0, 0x5, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000580)=[{r2, 0x2000}], 0x1, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4, 0x3fc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getpeername$ax25(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) socket$netlink(0x10, 0x3, 0x9) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010102, 0x4e23, 0x2, 'dh\x00', 0x17, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@random="9ffbf4c8e5bfa99ac3b577c9dda93f037a6aed8189d9775647e82c64ac89f4a2", 0x20, 0x1) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36) bind$bt_hci(r9, &(0x7f0000000280), 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) 1.484978ms ago: executing program 2 (id=1440): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x101, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0a08000000000100"}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x68f}], 0x1, 0x23, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r3, 0x0, 0x6}, 0x18) socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x4a, 0xe4da4bea6626a30d, 0x0, 0x2, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 163.16µs ago: executing program 0 (id=1441): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80, 0x100000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x1, 0x80, 0x0, 0x80, {{0x33, 0x4, 0x3, 0x3d, 0xcc, 0x66, 0x0, 0x40, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x27, 0xffffffffffffffff, [{0x7, 0xb, "ce8c9ae7a62d7e1d84"}, {0x6, 0xb, "ad08b06696b098287b"}, {0x6, 0x9, "ce3dbb96511df0"}, {0x5, 0x2}]}, @end, @ssrr={0x89, 0x1f, 0x8a, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @local, @rand_addr=0x64010101, @broadcast]}, @cipso={0x86, 0x71, 0x0, [{0xe, 0x10, "2a8846b00e53c0a27e87f4630ed6"}, {0x2, 0xe, "b3eb844e9630042d21ab10ff"}, {0x0, 0x12, "3c990e4e9a22fc13fccdc2da92df0077"}, {0x0, 0xf, "fa72a84b96d7b2d3e3aa61d3fe"}, {0xcecf32fd02ffa7f5, 0x9, "a8e3cd15106dd9"}, {0x5, 0x11, "eea53452775bf92a0aa621b79af86d"}, {0x6, 0x9, "69230c8d7fb2b2"}, {0x2, 0x9, "01d2bb29915763"}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)="1f05687ef9b9748232e89329532b9c1aa1", 0x11}, {&(0x7f0000000140)="5286fc31b8a7f9e2ac132e4f588cb6d5bfdfc5040a756d26fd5ac9dabcecc763503c31948b4d2f38156e77dc300210873b018a2ca9b6dce27850dbd2c79d4ea08fc8eb4d5d9d77a51c9184c451591acca23a74ed4ffbaa1b8cb06f866238fa8033be7a2a571cd15905fbe287594b190d64f7ccf49e90be70964369a455c461577e410e52771b1c057534380728aa6038df591bce508af31cd20303ab207ff38f2cdf9a7dd7691ea062954133", 0xac}, {&(0x7f0000000280)="b9dad8306a19448678b325866a61d543e43abd8c9ee62832790f76c0b6885bb2b0adbf7ea86e4bbe228e4deb514f8e5ec86a3186f6e9c8c8df79c7049f41823e97b7299bfeb42f5e00f07e87cac5b97f6fc512", 0x53}, {&(0x7f0000000300)="161ae883f8c28c52dac9353247f9d22206e48fcd4e", 0x15}, {&(0x7f0000000340)="f0a678b55893b8916dad65dfff9ed8", 0xf}, {&(0x7f0000000380)="f48302920f705ccd51e4f7f2857823d9ff3c42e5cc43a3bb6b9570233cb6a1ad2d9c5251c55b44be73e2356e80c99a9b3f09827e77578249b76cdf123ec39fa095ced1be779fe1cc5e575e97a83ed2b31ed5b05f9db6076bf697f86198bf5c2c34ea795ab6124570da8e5114831951aa25af33cab41021de", 0x78}, {&(0x7f0000000400)="d0091a12ce817a33286f12954450424fe56fa2fdb5d963757f3b399da6ad76f7463974642a1bd593b0945e88cf886e37efce86a66d8ee2df32b78261056ff40c88db1c4d0312313f44dce9b86380bfe3952a299216c6feca4becb4169ef94dd131088aa75f29198e97", 0x69}], 0x7, &(0x7f0000000740)=[@ip_retopts={{0x68, 0x0, 0x7, {[@generic={0x82, 0x2}, @timestamp={0x44, 0xc, 0xec, 0x0, 0x4, [0x3, 0x0]}, @noop, @noop, @timestamp={0x44, 0x24, 0x60, 0x0, 0x4, [0x9, 0x9b, 0x9, 0x2, 0x5, 0x3d7, 0x4, 0x100]}, @rr={0x7, 0x3, 0x12}, @timestamp_addr={0x44, 0x14, 0x18, 0x1, 0x0, [{@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @noop, @ssrr={0x89, 0xb, 0x4e, [@remote, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb7, [@dev={0xac, 0x14, 0x14, 0x23}, @loopback, @multicast2, @multicast2]}]}}}], 0x110}}], 0x1, 0x4008004) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @loopback, 0x6, 0x0, 0x40, 0x0, 0x4000000000000009, 0x10200}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) accept4(r0, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80, 0x100000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x1, 0x80, 0x0, 0x80, {{0x33, 0x4, 0x3, 0x3d, 0xcc, 0x66, 0x0, 0x40, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x27, 0xffffffffffffffff, [{0x7, 0xb, "ce8c9ae7a62d7e1d84"}, {0x6, 0xb, "ad08b06696b098287b"}, {0x6, 0x9, "ce3dbb96511df0"}, {0x5, 0x2}]}, @end, @ssrr={0x89, 0x1f, 0x8a, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @local, @rand_addr=0x64010101, @broadcast]}, @cipso={0x86, 0x71, 0x0, [{0xe, 0x10, "2a8846b00e53c0a27e87f4630ed6"}, {0x2, 0xe, "b3eb844e9630042d21ab10ff"}, {0x0, 0x12, "3c990e4e9a22fc13fccdc2da92df0077"}, {0x0, 0xf, "fa72a84b96d7b2d3e3aa61d3fe"}, {0xcecf32fd02ffa7f5, 0x9, "a8e3cd15106dd9"}, {0x5, 0x11, "eea53452775bf92a0aa621b79af86d"}, {0x6, 0x9, "69230c8d7fb2b2"}, {0x2, 0x9, "01d2bb29915763"}]}]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) (async) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)="1f05687ef9b9748232e89329532b9c1aa1", 0x11}, {&(0x7f0000000140)="5286fc31b8a7f9e2ac132e4f588cb6d5bfdfc5040a756d26fd5ac9dabcecc763503c31948b4d2f38156e77dc300210873b018a2ca9b6dce27850dbd2c79d4ea08fc8eb4d5d9d77a51c9184c451591acca23a74ed4ffbaa1b8cb06f866238fa8033be7a2a571cd15905fbe287594b190d64f7ccf49e90be70964369a455c461577e410e52771b1c057534380728aa6038df591bce508af31cd20303ab207ff38f2cdf9a7dd7691ea062954133", 0xac}, {&(0x7f0000000280)="b9dad8306a19448678b325866a61d543e43abd8c9ee62832790f76c0b6885bb2b0adbf7ea86e4bbe228e4deb514f8e5ec86a3186f6e9c8c8df79c7049f41823e97b7299bfeb42f5e00f07e87cac5b97f6fc512", 0x53}, {&(0x7f0000000300)="161ae883f8c28c52dac9353247f9d22206e48fcd4e", 0x15}, {&(0x7f0000000340)="f0a678b55893b8916dad65dfff9ed8", 0xf}, {&(0x7f0000000380)="f48302920f705ccd51e4f7f2857823d9ff3c42e5cc43a3bb6b9570233cb6a1ad2d9c5251c55b44be73e2356e80c99a9b3f09827e77578249b76cdf123ec39fa095ced1be779fe1cc5e575e97a83ed2b31ed5b05f9db6076bf697f86198bf5c2c34ea795ab6124570da8e5114831951aa25af33cab41021de", 0x78}, {&(0x7f0000000400)="d0091a12ce817a33286f12954450424fe56fa2fdb5d963757f3b399da6ad76f7463974642a1bd593b0945e88cf886e37efce86a66d8ee2df32b78261056ff40c88db1c4d0312313f44dce9b86380bfe3952a299216c6feca4becb4169ef94dd131088aa75f29198e97", 0x69}], 0x7, &(0x7f0000000740)=[@ip_retopts={{0x68, 0x0, 0x7, {[@generic={0x82, 0x2}, @timestamp={0x44, 0xc, 0xec, 0x0, 0x4, [0x3, 0x0]}, @noop, @noop, @timestamp={0x44, 0x24, 0x60, 0x0, 0x4, [0x9, 0x9b, 0x9, 0x2, 0x5, 0x3d7, 0x4, 0x100]}, @rr={0x7, 0x3, 0x12}, @timestamp_addr={0x44, 0x14, 0x18, 0x1, 0x0, [{@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @noop, @ssrr={0x89, 0xb, 0x4e, [@remote, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb7, [@dev={0xac, 0x14, 0x14, 0x23}, @loopback, @multicast2, @multicast2]}]}}}], 0x110}}], 0x1, 0x4008004) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @loopback, 0x6, 0x0, 0x40, 0x0, 0x4000000000000009, 0x10200}) (async) 0s ago: executing program 0 (id=1442): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) listen(r1, 0xe9c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000001780)=ANY=[@ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="925a95e24550ec24e8e1a95586dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x301, 0x100, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0xe}}}, 0x24}, 0x1, 0x4000000, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): 33] xt_hashlimit: size too large, truncated to 1048576 [ 209.738291][ T8472] veth0_macvtap: entered promiscuous mode [ 209.799261][ T8472] veth1_macvtap: entered promiscuous mode [ 209.842556][ T8472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.865476][ T8472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.878548][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 209.906045][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.970391][ T8739] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 210.044798][ T8739] macsec0: entered promiscuous mode [ 210.086898][ T8739] macsec0: entered allmulticast mode [ 210.092267][ T8739] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 210.162872][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.217055][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.259049][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.278552][ T8751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.699'. [ 210.306894][ T8751] nbd: must specify a device to reconfigure [ 210.454967][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.493918][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.610828][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.631634][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.762198][ T8757] netlink: 'syz.4.702': attribute type 39 has an invalid length. [ 211.339373][ T1165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.455603][ T1165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.764673][ T1165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.839887][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 211.841739][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 211.852536][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 211.953987][ T1165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.067741][ T1165] bridge_slave_1: left allmulticast mode [ 212.073451][ T1165] bridge_slave_1: left promiscuous mode [ 212.079635][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.089399][ T1165] bridge_slave_0: left allmulticast mode [ 212.095063][ T1165] bridge_slave_0: left promiscuous mode [ 212.101927][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.404812][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.420268][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.432181][ T1165] bond0 (unregistering): Released all slaves [ 212.665396][ T1165] hsr_slave_0: left promiscuous mode [ 212.699353][ T1165] hsr_slave_1: left promiscuous mode [ 212.705581][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.756702][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.781745][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.813192][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.870021][ T8795] xt_TCPMSS: Only works on TCP SYN packets [ 212.912635][ T1165] veth1_macvtap: left promiscuous mode [ 212.939020][ T1165] veth0_macvtap: left promiscuous mode [ 212.966176][ T1165] veth1_vlan: left promiscuous mode [ 212.983772][ T1165] veth0_vlan: left promiscuous mode [ 213.030188][ T8802] IPv6: Can't replace route, no match found [ 213.513753][ T30] audit: type=1800 audit(1751814722.097:5): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.711" name="memory.events" dev="tmpfs" ino=905 res=0 errno=0 [ 213.763291][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.783986][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.792761][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.804536][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.813220][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.959931][ T8830] __nla_validate_parse: 1 callbacks suppressed [ 213.959953][ T8830] netlink: 164 bytes leftover after parsing attributes in process `syz.2.719'. [ 214.281635][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 214.322169][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 214.767645][ T8832] batadv_slave_1: entered promiscuous mode [ 214.798741][ T8831] batadv_slave_1: left promiscuous mode [ 214.887038][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 215.269583][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 215.284693][ T8851] netlink: 'syz.3.725': attribute type 13 has an invalid length. [ 215.316995][ T8854] netlink: 'syz.0.727': attribute type 46 has an invalid length. [ 215.327010][ T8851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.725'. [ 215.349753][ T8854] netlink: 156 bytes leftover after parsing attributes in process `syz.0.727'. [ 215.367750][ T8851] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 215.397439][ T8822] chnl_net:caif_netlink_parms(): no params data found [ 215.405628][ T8861] netlink: 104 bytes leftover after parsing attributes in process `syz.0.727'. [ 215.564302][ T8863] macsec0: entered allmulticast mode [ 215.758793][ T8863] veth1_macvtap: entered allmulticast mode [ 215.764701][ T8863] macsec0: left allmulticast mode [ 215.773822][ T8863] veth1_macvtap: left allmulticast mode [ 215.856609][ T5857] Bluetooth: hci0: command tx timeout [ 215.875811][ T8871] netlink: 348 bytes leftover after parsing attributes in process `syz.3.730'. [ 215.939102][ T8822] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.950405][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.966108][ T8822] bridge_slave_0: entered allmulticast mode [ 215.978378][ T8822] bridge_slave_0: entered promiscuous mode [ 215.988568][ T8822] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.998867][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.008353][ T8822] bridge_slave_1: entered allmulticast mode [ 216.017199][ T8822] bridge_slave_1: entered promiscuous mode [ 216.127771][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'. [ 216.143151][ T8822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.234775][ T8822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.379541][ T8905] netlink: 'syz.3.739': attribute type 18 has an invalid length. [ 216.423554][ T8907] netlink: 52 bytes leftover after parsing attributes in process `syz.0.742'. [ 216.440253][ T8822] team0: Port device team_slave_0 added [ 216.450580][ T8822] team0: Port device team_slave_1 added [ 216.567392][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.574409][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.623080][ T8822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.642117][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.657421][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.717332][ T8822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.906198][ T8822] hsr_slave_0: entered promiscuous mode [ 216.917562][ T8822] hsr_slave_1: entered promiscuous mode [ 216.935345][ T8928] netlink: 147052 bytes leftover after parsing attributes in process `syz.4.749'. [ 216.948200][ T8922] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 217.313617][ T8942] netlink: 'syz.4.755': attribute type 1 has an invalid length. [ 217.588634][ T8942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.655131][ T8943] syzkaller1: entered promiscuous mode [ 217.663311][ T8943] syzkaller1: entered allmulticast mode [ 217.727681][ T8959] netlink: 'syz.3.757': attribute type 2 has an invalid length. [ 217.917242][ T5857] Bluetooth: hci0: command tx timeout [ 218.063532][ T8966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.733798][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.752221][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.920883][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.941648][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.013478][ T9008] __nla_validate_parse: 5 callbacks suppressed [ 219.013501][ T9008] netlink: 104 bytes leftover after parsing attributes in process `syz.2.772'. [ 219.014357][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'. [ 219.032035][ T8822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.118968][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.140543][ T9011] netlink: zone id is out of range [ 219.156933][ T9011] netlink: zone id is out of range [ 219.162174][ T9011] netlink: zone id is out of range [ 219.168481][ T9011] netlink: zone id is out of range [ 219.174325][ T9012] netlink: 72 bytes leftover after parsing attributes in process `syz.2.772'. [ 219.185160][ T9011] netlink: zone id is out of range [ 219.194336][ T9011] netlink: zone id is out of range [ 219.199692][ T9011] netlink: zone id is out of range [ 219.204991][ T9011] netlink: zone id is out of range [ 219.212559][ T9004] bridge_slave_1 (unregistering): left allmulticast mode [ 219.226973][ T9004] bridge_slave_1 (unregistering): left promiscuous mode [ 219.235036][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.283011][ T8822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.361512][ T8822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.420519][ T8822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.570982][ T9029] !: renamed from dummy0 [ 219.590955][ T9027] can: request_module (can-proto-0) failed. [ 219.720834][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.801938][ T8822] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.841634][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.848871][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.943020][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.950279][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.011774][ T5857] Bluetooth: hci0: command tx timeout [ 220.019729][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.779'. [ 220.361042][ T8822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.404466][ T8822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.989094][ T9098] netlink: 'syz.4.783': attribute type 16 has an invalid length. [ 221.022151][ T9098] netlink: 'syz.4.783': attribute type 17 has an invalid length. [ 221.202177][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.248022][ T9098] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.413732][ T8822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.488417][ T8822] veth0_vlan: entered promiscuous mode [ 221.512576][ T8822] veth1_vlan: entered promiscuous mode [ 221.552171][ T8822] veth0_macvtap: entered promiscuous mode [ 221.574033][ T8822] veth1_macvtap: entered promiscuous mode [ 221.610820][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.647887][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.685675][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.704937][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.722328][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.748696][ T1148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.970284][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.001135][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.076918][ T5857] Bluetooth: hci0: command tx timeout [ 222.252141][ T9122] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.788'. [ 222.277364][ T9122] net_ratelimit: 31 callbacks suppressed [ 222.277385][ T9122] netlink: zone id is out of range [ 222.308010][ T9122] netlink: zone id is out of range [ 222.363237][ T9122] netlink: zone id is out of range [ 222.394429][ T9122] netlink: zone id is out of range [ 222.418722][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.435553][ T9122] netlink: zone id is out of range [ 222.440880][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.460700][ T9122] netlink: zone id is out of range [ 222.465888][ T9122] netlink: zone id is out of range [ 222.473309][ T9122] netlink: zone id is out of range [ 222.482368][ T9122] netlink: zone id is out of range [ 222.492499][ T9122] netlink: zone id is out of range [ 222.525756][ T9131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.721701][ T9137] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.794'. [ 222.753725][ T9134] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 222.779311][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 223.322680][ T9155] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 223.382532][ T9158] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 223.442034][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.517771][ T9157] dummy0: left allmulticast mode [ 223.538972][ T9155] netlink: 'syz.2.798': attribute type 10 has an invalid length. [ 223.548582][ T9157] dummy0: left promiscuous mode [ 223.566710][ T9157] bridge0: port 3(dummy0) entered disabled state [ 223.608344][ T9157] bridge_slave_0: left allmulticast mode [ 223.629134][ T9157] bridge_slave_0: left promiscuous mode [ 223.635186][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.690138][ T9157] bridge_slave_1: left allmulticast mode [ 223.695921][ T9157] bridge_slave_1: left promiscuous mode [ 223.712691][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.770251][ T9157] bond0: (slave bond_slave_0): Releasing backup interface [ 223.801549][ T9157] bond0: (slave bond_slave_1): Releasing backup interface [ 223.824873][ T9157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.833303][ T9157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.843559][ T9157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.852282][ T9157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.894069][ T9155] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 223.939877][ T9155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.962230][ T9155] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 224.001066][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.134042][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.403715][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.497077][ T64] bridge_slave_1: left allmulticast mode [ 224.502773][ T64] bridge_slave_1: left promiscuous mode [ 224.509106][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.519608][ T64] bridge_slave_0: left allmulticast mode [ 224.525269][ T64] bridge_slave_0: left promiscuous mode [ 224.531417][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.834222][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.845376][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.856900][ T64] bond0 (unregistering): Released all slaves [ 224.959793][ T9168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.801'. [ 225.335197][ T9182] 8021q: adding VLAN 0 to HW filter on device  [ 225.626058][ T64] hsr_slave_0: left promiscuous mode [ 225.636722][ T64] hsr_slave_1: left promiscuous mode [ 225.643450][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.661780][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.679394][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.695275][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.749048][ T64] veth1_macvtap: left promiscuous mode [ 225.755295][ T64] veth0_macvtap: left promiscuous mode [ 225.765362][ T64] veth1_vlan: left promiscuous mode [ 225.775601][ T64] veth0_vlan: left promiscuous mode [ 225.845290][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.858577][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.871697][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.881026][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.889501][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.664288][ T64] team0 (unregistering): Port device team_slave_1 removed [ 226.705571][ T64] team0 (unregistering): Port device team_slave_0 removed [ 227.275670][ T9218] bond0: Master is either lo or non-ether device [ 227.411823][ T9221] !: renamed from dummy0 (while UP) [ 227.621583][ T9231] netlink: 48 bytes leftover after parsing attributes in process `syz.3.815'. [ 227.918566][ T5854] Bluetooth: hci0: command tx timeout [ 228.002085][ T9195] chnl_net:caif_netlink_parms(): no params data found [ 228.570777][ T9195] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.578695][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.585973][ T9195] bridge_slave_0: entered allmulticast mode [ 228.595216][ T9195] bridge_slave_0: entered promiscuous mode [ 228.605595][ T9195] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.613851][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.621655][ T9195] bridge_slave_1: entered allmulticast mode [ 228.631852][ T9195] bridge_slave_1: entered promiscuous mode [ 228.646907][ T9273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.821'. [ 228.765420][ T9195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.821082][ T9195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.940703][ T9195] team0: Port device team_slave_0 added [ 228.963766][ T9195] team0: Port device team_slave_1 added [ 228.982653][ T9293] netlink: 252 bytes leftover after parsing attributes in process `syz.4.827'. [ 229.154658][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.198433][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.262091][ T9195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.310864][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.327851][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.378848][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 229.412936][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 229.430035][ T9195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.740508][ T9313] netlink: 172 bytes leftover after parsing attributes in process `syz.4.831'. [ 229.902488][ T9195] hsr_slave_0: entered promiscuous mode [ 229.916609][ T9195] hsr_slave_1: entered promiscuous mode [ 229.996842][ T5854] Bluetooth: hci0: command tx timeout [ 230.098339][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 230.236622][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.040950][ T9367] Bluetooth: MGMT ver 1.23 [ 231.226183][ T9195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.245875][ T9195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.258324][ T9195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 231.283603][ T9195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.440597][ T9195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.459104][ T9379] xt_TCPMSS: Only works on TCP SYN packets [ 231.536181][ T9195] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.599345][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.606599][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.701424][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.708670][ T8815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.977006][ T9400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.853'. [ 232.076888][ T5854] Bluetooth: hci0: command tx timeout [ 232.912324][ T9433] netlink: 52 bytes leftover after parsing attributes in process `syz.4.857'. [ 232.972138][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.857'. [ 233.204323][ T9442] netlink: 112 bytes leftover after parsing attributes in process `syz.4.860'. [ 233.274139][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 233.339362][ T9195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.580040][ T9195] veth0_vlan: entered promiscuous mode [ 233.603101][ T9195] veth1_vlan: entered promiscuous mode [ 233.744075][ T9195] veth0_macvtap: entered promiscuous mode [ 233.920436][ T9466] syzkaller0: entered promiscuous mode [ 233.925974][ T9466] syzkaller0: entered allmulticast mode [ 233.943144][ T9195] veth1_macvtap: entered promiscuous mode [ 234.157751][ T5854] Bluetooth: hci0: command tx timeout [ 235.580464][ T9195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.640462][ T9195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.703019][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.735248][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.771760][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.810889][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.126174][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 236.154630][ T9514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.883'. [ 236.165496][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.882'. [ 236.233460][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 236.305035][ T9514] netlink: 'syz.0.883': attribute type 1 has an invalid length. [ 236.363449][ T9524] netlink: 44 bytes leftover after parsing attributes in process `syz.2.885'. [ 236.407866][ T9514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.425472][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.452777][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.510801][ T9520] veth5: entered promiscuous mode [ 236.535737][ T9520] bond3: (slave veth5): Enslaving as an active interface with a down link [ 236.569429][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.886'. [ 236.592710][ T9514] erspan0: entered allmulticast mode [ 236.758596][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.787721][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.868607][ T9542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.890'. [ 237.155157][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.370003][ T1165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.494425][ T1165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.594869][ T1165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.698555][ T1165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.836214][ T1165] bridge_slave_1: left allmulticast mode [ 237.842781][ T1165] bridge_slave_1: left promiscuous mode [ 237.848720][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.860959][ T1165] bridge_slave_0: left allmulticast mode [ 237.867696][ T1165] bridge_slave_0: left promiscuous mode [ 237.873509][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.212947][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.224616][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.240197][ T1165] bond0 (unregistering): Released all slaves [ 238.502875][ T1165] hsr_slave_0: left promiscuous mode [ 238.509028][ T1165] hsr_slave_1: left promiscuous mode [ 238.514915][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.523395][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.532993][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.540562][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.564932][ T1165] veth1_macvtap: left promiscuous mode [ 238.570832][ T1165] veth0_macvtap: left promiscuous mode [ 238.576612][ T1165] veth1_vlan: left promiscuous mode [ 238.582990][ T1165] veth0_vlan: left promiscuous mode [ 238.963870][ T9561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.897'. [ 239.046295][ T9571] netlink: 'syz.2.896': attribute type 5 has an invalid length. [ 239.389304][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 239.490245][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 239.542206][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.561268][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.575359][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.585957][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.594547][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.082857][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.184696][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.213240][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.259782][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.292595][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 240.791200][ T9611] xt_CT: No such helper "syz1" [ 240.896072][ T9580] chnl_net:caif_netlink_parms(): no params data found [ 240.942414][ T9616] netlink: 48 bytes leftover after parsing attributes in process `syz.0.908'. [ 240.957342][ T64] wlan0: Trigger new scan to find an IBSS to join [ 241.019662][ T9619] netlink: 'syz.4.909': attribute type 4 has an invalid length. [ 241.020278][ T9621] netlink: 'syz.4.909': attribute type 4 has an invalid length. [ 241.365811][ T9580] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.402536][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.430722][ T9580] bridge_slave_0: entered allmulticast mode [ 241.471524][ T9580] bridge_slave_0: entered promiscuous mode [ 241.511985][ T9640] !: renamed from dummy0 (while UP) [ 241.543408][ T9580] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.574375][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.599166][ T9580] bridge_slave_1: entered allmulticast mode [ 241.632618][ T9580] bridge_slave_1: entered promiscuous mode [ 241.676461][ T5854] Bluetooth: hci0: command tx timeout [ 241.862708][ T9580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.913461][ T9580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.365217][ T9580] team0: Port device team_slave_0 added [ 242.427786][ T9580] team0: Port device team_slave_1 added [ 242.558414][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 243.094238][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.111634][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.148764][ T9580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.211788][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.237184][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.325931][ T9580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.613861][ T9713] netlink: 140 bytes leftover after parsing attributes in process `syz.2.923'. [ 243.654234][ T9580] hsr_slave_0: entered promiscuous mode [ 243.669738][ T9580] hsr_slave_1: entered promiscuous mode [ 243.759213][ T5857] Bluetooth: hci0: command tx timeout [ 244.016446][ T36] wlan0: Trigger new scan to find an IBSS to join [ 244.049318][ T9722] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 244.309392][ T9717] syzkaller0: entered promiscuous mode [ 244.314940][ T9717] syzkaller0: entered allmulticast mode [ 245.117413][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.836648][ T5857] Bluetooth: hci0: command tx timeout [ 246.485764][ T9730] netlink: 27 bytes leftover after parsing attributes in process `syz.4.928'. [ 247.919980][ T5857] Bluetooth: hci0: command tx timeout [ 248.128623][ T9738] C: renamed from team_slave_0 [ 248.138288][ T9738] netlink: 108 bytes leftover after parsing attributes in process `syz.4.928'. [ 248.309873][ T9752] gretap2: entered promiscuous mode [ 248.363981][ T9751] net_ratelimit: 11 callbacks suppressed [ 248.364003][ T9751] netlink: zone id is out of range [ 248.382599][ T9751] netlink: zone id is out of range [ 248.405916][ T9751] netlink: zone id is out of range [ 248.422459][ T9751] netlink: zone id is out of range [ 248.428874][ T9751] netlink: del zone limit has 4 unknown bytes [ 248.436018][ T9758] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 248.674298][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.938'. [ 248.717016][ T9764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.775845][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.938'. [ 248.839925][ T9769] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 248.852403][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.938'. [ 248.866874][ T9769] syzkaller1: linktype set to 780 [ 248.957715][ T9772] tipc: Started in network mode [ 248.962820][ T9772] tipc: Node identity ac14140f, cluster identity 4711 [ 248.981797][ T9772] tipc: New replicast peer: 255.255.255.255 [ 249.011415][ T9772] tipc: Enabled bearer , priority 10 [ 249.525564][ T9580] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.546737][ T9816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.946'. [ 249.581520][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.946'. [ 249.591799][ T9580] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.747733][ T9816] geneve2: entered allmulticast mode [ 249.792408][ T9580] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.841522][ T9580] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.017367][ T9839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.952'. [ 250.147290][ T6801] tipc: Node number set to 2886997007 [ 253.144201][ T9879] set match dimension is over the limit! [ 253.151243][ T9580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.262912][ T9580] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.294456][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.301734][ T2138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.341771][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.349017][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.379587][ T9882] netlink: 136 bytes leftover after parsing attributes in process `syz.2.965'. [ 253.388984][ T9882] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 253.519246][ T9580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.543395][ T9580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.610165][ T9889] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 253.765567][ T9900] bridge0: port 3(batadv0) entered disabled state [ 253.845421][ T9900] bridge_slave_0: left allmulticast mode [ 253.878072][ T9900] bridge_slave_0: left promiscuous mode [ 253.905897][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.919725][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 253.930240][ T9900] bridge_slave_1: left allmulticast mode [ 253.935940][ T9900] bridge_slave_1: left promiscuous mode [ 253.957233][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.987907][ T9900] bond0: (slave ..@ÿ): Releasing backup interface [ 254.010846][ T9900] bond0: (slave bond_slave_1): Releasing backup interface [ 254.038650][ T9900] team0: Port device C removed [ 254.069270][ T9900] team0: Port device team_slave_1 removed [ 254.075687][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.098115][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.137139][ T9900] team0: Port device batadv1 removed [ 254.177554][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.975'. [ 254.357881][ T9931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.978'. [ 254.480653][ T9580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.655406][ T9580] veth0_vlan: entered promiscuous mode [ 254.715574][ T9580] veth1_vlan: entered promiscuous mode [ 254.819017][ T9580] veth0_macvtap: entered promiscuous mode [ 254.822603][ T9955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.982'. [ 254.849591][ T9580] veth1_macvtap: entered promiscuous mode [ 254.943259][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.975372][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.034785][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.072649][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.111370][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.166553][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.406941][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.435239][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.443192][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 255.491706][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 255.581065][ T2138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.607158][ T2138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.995212][ T9984] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.991'. [ 256.017069][ T9984] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 256.028243][ T9984] team0: Port device batadv2 added [ 256.071130][ T9986] x_tables: duplicate underflow at hook 1 [ 256.326559][ T5854] Bluetooth: hci0: command 0x0405 tx timeout [ 256.391033][T10010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.429394][T10010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.529378][T10017] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 256.850212][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.993449][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.028063][T10038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1007'. [ 257.170516][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.251016][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.356153][ T64] bridge_slave_1: left allmulticast mode [ 257.362662][ T64] bridge_slave_1: left promiscuous mode [ 257.368960][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.379012][ T64] bridge_slave_0: left allmulticast mode [ 257.384787][ T64] bridge_slave_0: left promiscuous mode [ 257.392230][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.751777][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.764455][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.774979][ T64] bond0 (unregistering): Released all slaves [ 258.012090][ T64] hsr_slave_0: left promiscuous mode [ 258.019293][ T64] hsr_slave_1: left promiscuous mode [ 258.025218][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.032795][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.041542][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.053541][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.075284][ T64] veth1_macvtap: left promiscuous mode [ 258.081237][ T64] veth0_macvtap: left promiscuous mode [ 258.087366][ T64] veth1_vlan: left promiscuous mode [ 258.092708][ T64] veth0_vlan: left promiscuous mode [ 258.635971][T10050] netlink: 212296 bytes leftover after parsing attributes in process `syz.3.1010'. [ 258.687905][T10050] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1010'. [ 258.845917][ T64] team0 (unregistering): Port device team_slave_1 removed [ 258.934752][ T64] team0 (unregistering): Port device team_slave_0 removed [ 259.083388][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.093295][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.102632][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.115025][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.133492][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.853895][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 260.465466][T10060] chnl_net:caif_netlink_parms(): no params data found [ 260.557133][T10100] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1023'. [ 260.671294][T10100] netlink: 'syz.3.1023': attribute type 4 has an invalid length. [ 260.962697][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.196615][ T5857] Bluetooth: hci0: command tx timeout [ 261.288760][T10060] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.298536][T10060] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.305910][T10060] bridge_slave_0: entered allmulticast mode [ 261.330449][T10060] bridge_slave_0: entered promiscuous mode [ 261.335177][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1029'. [ 261.340826][T10060] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.354968][T10060] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.362678][T10060] bridge_slave_1: entered allmulticast mode [ 261.374534][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 261.388564][T10060] bridge_slave_1: entered promiscuous mode [ 261.399698][T10132] netlink: 'syz.0.1029': attribute type 10 has an invalid length. [ 261.543296][T10132] bridge0: port 1(team0) entered blocking state [ 261.552414][T10132] bridge0: port 1(team0) entered disabled state [ 261.559402][T10132] team0: entered allmulticast mode [ 261.572326][T10134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1031'. [ 261.745058][T10060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.781451][T10145] xt_TPROXY: Can be used only with -p tcp or -p udp [ 261.812779][T10060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.843253][T10145] tipc: Enabling of bearer rejected, failed to enable media [ 261.960814][T10060] team0: Port device team_slave_0 added [ 261.980051][T10060] team0: Port device team_slave_1 added [ 262.057747][T10060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.065210][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.092509][T10060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.147772][T10060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.154794][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.191843][T10060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.495564][T10060] hsr_slave_0: entered promiscuous mode [ 262.511612][T10060] hsr_slave_1: entered promiscuous mode [ 262.807532][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 262.827590][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 262.887613][T10180] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1043'. [ 263.036974][T10186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.245812][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1048'. [ 263.276938][ T5857] Bluetooth: hci0: command tx timeout [ 263.312498][T10195] bridge_slave_0: left allmulticast mode [ 263.342789][T10195] bridge_slave_0: left promiscuous mode [ 263.359084][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.516946][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 263.524379][ T1210] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 263.968358][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'. [ 264.496015][T10060] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.563410][T10060] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.590261][T10060] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.617071][T10060] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.660015][T10250] tipc: Started in network mode [ 264.671842][T10250] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 264.692475][T10250] tipc: Enabling of bearer rejected, failed to enable media [ 264.837952][T10253] gretap0: entered promiscuous mode [ 264.843720][T10253] vlan0: entered promiscuous mode [ 264.983173][T10060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.025398][T10060] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.042392][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.049616][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.064483][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.071808][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.171577][T10267] netlink: 'syz.0.1068': attribute type 1 has an invalid length. [ 265.199187][T10268] __nla_validate_parse: 5 callbacks suppressed [ 265.199208][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 265.357387][ T5854] Bluetooth: hci0: command tx timeout [ 265.518673][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 265.626920][T10282] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1075'. [ 265.636197][T10282] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 265.785942][T10060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.953119][T10060] veth0_vlan: entered promiscuous mode [ 265.983399][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.988374][T10060] veth1_vlan: entered promiscuous mode [ 266.004631][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.015126][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.025440][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.037772][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.108770][T10060] veth0_macvtap: entered promiscuous mode [ 266.198614][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'. [ 266.215106][T10060] veth1_macvtap: entered promiscuous mode [ 266.234047][T10300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.437260][T10060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.510697][T10306] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 266.551330][T10306] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1082'. [ 266.579997][T10060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.795748][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.814191][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.921005][T10327] netlink: 'syz.2.1084': attribute type 10 has an invalid length. [ 266.936378][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.967375][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.989380][T10327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1084'. [ 267.071832][T10295] chnl_net:caif_netlink_parms(): no params data found [ 267.101329][T10327] batman_adv: batadv0: Adding interface: virt_wifi0 [ 267.123189][T10327] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.157743][T10327] batman_adv: batadv0: Interface activated: virt_wifi0 [ 267.301204][ T2138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.312110][ T2138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.449331][ T5859] Bluetooth: hci0: command 0x0419 tx timeout [ 267.476185][ T8815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.487637][ T8815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.745531][T10295] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.758544][T10295] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.766125][T10295] bridge_slave_0: entered allmulticast mode [ 267.775418][T10295] bridge_slave_0: entered promiscuous mode [ 267.848653][T10295] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.862228][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.872263][T10295] bridge_slave_1: entered allmulticast mode [ 267.881406][T10295] bridge_slave_1: entered promiscuous mode [ 268.079063][ T5857] Bluetooth: hci4: command tx timeout [ 268.082707][T10295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.169423][T10295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.381967][T10295] team0: Port device team_slave_0 added [ 268.421750][T10295] team0: Port device team_slave_1 added [ 268.518578][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.603304][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.620859][T10295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.628387][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.655317][T10295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.687323][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.702329][T10295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.710242][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.738655][T10295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.811248][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.836120][T10295] hsr_slave_0: entered promiscuous mode [ 268.842724][T10295] hsr_slave_1: entered promiscuous mode [ 268.850254][T10295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.859181][T10295] Cannot create hsr debugfs directory [ 268.987292][ T12] bridge_slave_1: left allmulticast mode [ 268.993007][ T12] bridge_slave_1: left promiscuous mode [ 268.999354][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.010519][ T12] bridge_slave_0: left allmulticast mode [ 269.016201][ T12] bridge_slave_0: left promiscuous mode [ 269.022816][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.368876][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.380743][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.392178][ T12] bond0 (unregistering): Released all slaves [ 269.505750][T10295] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.580233][T10295] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.672779][T10295] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.714340][ T12] hsr_slave_0: left promiscuous mode [ 269.724084][ T12] hsr_slave_1: left promiscuous mode [ 269.732306][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.741252][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.750081][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.757823][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.782192][ T12] veth1_macvtap: left promiscuous mode [ 269.787979][ T12] veth0_macvtap: left promiscuous mode [ 269.793595][ T12] veth1_vlan: left promiscuous mode [ 269.799140][ T12] veth0_vlan: left promiscuous mode [ 270.157487][ T5857] Bluetooth: hci4: command tx timeout [ 270.604513][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.615448][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.624868][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.639000][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.648246][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.388296][ T12] team0 (unregistering): Port device team_slave_1 removed [ 271.479010][ T12] team0 (unregistering): Port device team_slave_0 removed [ 271.978012][T10295] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.236642][ T5857] Bluetooth: hci4: command tx timeout [ 272.602781][T10403] Cannot find add_set index 0 as target [ 272.716818][ T5857] Bluetooth: hci0: command tx timeout [ 272.938882][T10295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.116921][ T1210] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 273.142448][T10295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.158579][T10295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.206587][T10295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.451062][T10387] chnl_net:caif_netlink_parms(): no params data found [ 273.503888][T10424] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 273.544423][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1106'. [ 273.566125][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1106'. [ 273.937168][T10387] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.944442][T10387] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.960859][T10387] bridge_slave_0: entered allmulticast mode [ 273.973675][T10387] bridge_slave_0: entered promiscuous mode [ 274.033614][T10295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.044894][T10387] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.054290][T10387] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.062498][T10387] bridge_slave_1: entered allmulticast mode [ 274.072968][T10387] bridge_slave_1: entered promiscuous mode [ 274.227370][T10295] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.240333][T10387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.317757][ T5857] Bluetooth: hci4: command tx timeout [ 274.405920][T10387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.489122][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.496380][ T2138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.594133][T10387] team0: Port device team_slave_0 added [ 274.604209][T10387] team0: Port device team_slave_1 added [ 274.621772][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.629032][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.703574][T10387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.716392][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.744875][T10387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.793615][T10387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.801872][ T5857] Bluetooth: hci0: command tx timeout [ 274.815434][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.848598][T10387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.957303][T10457] netlink: 'syz.0.1114': attribute type 10 has an invalid length. [ 274.965277][T10457] openvswitch: netlink: Flow key attr not present in new flow. [ 274.992234][T10387] hsr_slave_0: entered promiscuous mode [ 275.037970][T10387] hsr_slave_1: entered promiscuous mode [ 275.054749][T10459] sctp: [Deprecated]: syz.0.1114 (pid 10459) Use of int in max_burst socket option deprecated. [ 275.054749][T10459] Use struct sctp_assoc_value instead [ 275.164483][T10459] pim6reg: entered allmulticast mode [ 275.225788][T10457] pim6reg: left allmulticast mode [ 275.295356][T10295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.313971][T10295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.686974][T10478] x_tables: duplicate underflow at hook 1 [ 275.693308][T10478] x_tables: duplicate underflow at hook 1 [ 275.931029][T10487] sctp: [Deprecated]: syz.0.1121 (pid 10487) Use of int in max_burst socket option. [ 275.931029][T10487] Use struct sctp_assoc_value instead [ 275.981706][T10489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.054763][T10295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.263332][T10505] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1125'. [ 276.519942][T10387] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.587884][T10387] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.614084][T10387] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.615044][T10516] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.1127'. [ 276.654497][T10518] Bluetooth: MGMT ver 1.23 [ 276.666192][T10387] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.715230][T10521] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1128'. [ 276.842628][T10527] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1130'. [ 276.881334][ T5857] Bluetooth: hci0: command tx timeout [ 276.981467][T10536] netlink: 'syz.2.1130': attribute type 11 has an invalid length. [ 277.085696][T10295] veth0_vlan: entered promiscuous mode [ 277.233436][T10295] veth1_vlan: entered promiscuous mode [ 277.389708][T10295] veth0_macvtap: entered promiscuous mode [ 277.410830][T10295] veth1_macvtap: entered promiscuous mode [ 277.460024][T10387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.477337][T10544] netlink: 'syz.2.1133': attribute type 4 has an invalid length. [ 277.499522][T10295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.549283][T10295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.573859][T10387] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.588814][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.600592][ T64] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 277.602323][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.706698][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.735846][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.815474][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.822741][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.875717][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.882950][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.105575][T10387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.168710][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.208669][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.239791][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 278.287549][T10558] ip6tnl2: entered promiscuous mode [ 278.299576][T10558] ip6tnl2: entered allmulticast mode [ 278.425915][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.434189][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.494799][T10553] delete_channel: no stack [ 278.764142][T10574] veth1_macvtap: left promiscuous mode [ 278.777420][T10574] macsec0: entered promiscuous mode [ 278.865176][T10582] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 278.957593][ T5857] Bluetooth: hci0: command tx timeout [ 279.019394][ T1165] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.056192][T10387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.084849][T10593] netlink: 'syz.3.1144': attribute type 6 has an invalid length. [ 279.099836][T10593] netlink: 'syz.3.1144': attribute type 7 has an invalid length. [ 279.124422][T10593] netlink: 'syz.3.1144': attribute type 8 has an invalid length. [ 279.158691][T10589] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 279.180339][ T1165] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.336169][ T1165] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.406370][T10387] veth0_vlan: entered promiscuous mode [ 279.434753][T10601] netlink: 'syz.3.1148': attribute type 26 has an invalid length. [ 279.469340][T10387] veth1_vlan: entered promiscuous mode [ 279.549723][ T1165] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.039245][T10387] veth0_macvtap: entered promiscuous mode [ 280.113774][T10387] veth1_macvtap: entered promiscuous mode [ 280.137991][T10609] netlink: 'syz.0.1146': attribute type 6 has an invalid length. [ 280.325171][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.335472][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.354235][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.365733][T10387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.383640][T10387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.391527][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.399970][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.453667][T10632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1151'. [ 280.464893][T10632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1151'. [ 280.545153][ T3468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.578387][ T3468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.683641][ T3468] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.706866][ T3468] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.765759][ T1165] bridge_slave_1: left allmulticast mode [ 280.772335][ T1165] bridge_slave_1: left promiscuous mode [ 280.787333][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.813743][ T1165] bridge_slave_0: left allmulticast mode [ 280.820758][ T1165] bridge_slave_0: left promiscuous mode [ 280.834867][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.861308][T10644] netlink: 'syz.2.1155': attribute type 1 has an invalid length. [ 281.376209][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.389685][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.401413][ T1165] bond0 (unregistering): Released all slaves [ 281.939304][T10658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1159'. [ 281.974596][T10651] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 282.158535][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.179942][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.398146][ T1165] hsr_slave_0: left promiscuous mode [ 282.417685][ T1165] hsr_slave_1: left promiscuous mode [ 282.428379][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.435856][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.454986][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.475296][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.483883][ T5859] Bluetooth: hci4: command tx timeout [ 282.515569][ T1165] veth1_macvtap: left promiscuous mode [ 282.521445][ T1165] veth0_macvtap: left promiscuous mode [ 282.527308][ T1165] veth1_vlan: left promiscuous mode [ 282.532776][ T1165] veth0_vlan: left promiscuous mode [ 282.571515][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'. [ 282.588412][T10685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1164'. [ 282.719248][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 282.726889][ T6776] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 283.104400][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 283.143971][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 283.606571][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.616820][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.875166][T10628] chnl_net:caif_netlink_parms(): no params data found [ 283.892611][T10704] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1168'. [ 284.338975][T10628] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.346577][T10628] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.353887][T10628] bridge_slave_0: entered allmulticast mode [ 284.365297][T10720] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1173'. [ 284.369364][T10628] bridge_slave_0: entered promiscuous mode [ 284.415068][T10628] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.431750][T10628] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.446630][T10628] bridge_slave_1: entered allmulticast mode [ 284.454808][T10628] bridge_slave_1: entered promiscuous mode [ 284.556594][ T5859] Bluetooth: hci4: command tx timeout [ 284.678419][T10628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.719190][T10628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.829932][ T1165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.921032][T10628] team0: Port device team_slave_0 added [ 284.970384][ T1165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.001004][T10628] team0: Port device team_slave_1 added [ 285.057769][ T1165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.078407][T10628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.085388][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.112585][T10628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.142507][ T1165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.159358][T10628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.167948][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.194676][T10628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.260970][T10628] hsr_slave_0: entered promiscuous mode [ 285.272221][T10628] hsr_slave_1: entered promiscuous mode [ 285.278963][T10628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.287291][T10628] Cannot create hsr debugfs directory [ 285.380901][ T1165] bridge_slave_1: left allmulticast mode [ 285.386701][ T1165] bridge_slave_1: left promiscuous mode [ 285.392437][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.402068][ T1165] bridge_slave_0: left allmulticast mode [ 285.408145][ T1165] bridge_slave_0: left promiscuous mode [ 285.413959][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.727028][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.738755][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.749662][ T1165] bond0 (unregistering): Released all slaves [ 286.136096][ T1165] hsr_slave_0: left promiscuous mode [ 286.142618][ T1165] hsr_slave_1: left promiscuous mode [ 286.148779][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.156190][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.173900][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.181450][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.204915][ T1165] veth1_macvtap: left promiscuous mode [ 286.213221][ T1165] veth0_macvtap: left promiscuous mode [ 286.219020][ T1165] veth1_vlan: left promiscuous mode [ 286.224353][ T1165] veth0_vlan: left promiscuous mode [ 286.493883][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 286.558089][T10732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.590713][T10732] netlink: 'syz.3.1176': attribute type 13 has an invalid length. [ 286.640728][ T5859] Bluetooth: hci4: command tx timeout [ 286.659064][T10735] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 286.675159][T10735] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1177'. [ 286.983728][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.992789][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.008223][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.032603][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.047012][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.153206][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 287.214489][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 287.840096][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 288.617232][T10732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.678483][T10732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.716442][ T5857] Bluetooth: hci4: command tx timeout [ 289.080391][T10732] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 289.126682][ T5857] Bluetooth: hci0: command tx timeout [ 289.175719][ T2138] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.210559][ T2138] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.265327][ T2138] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.294001][ T2138] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.317399][ T2138] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.341949][ T2138] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.386446][ T2138] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.395403][ T2138] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.679518][T10628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.740706][T10628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.765243][T10628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.802692][T10628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.063455][T10755] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 290.282684][T10739] chnl_net:caif_netlink_parms(): no params data found [ 290.436122][T10628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.144166][T10813] ip6gretap2: entered promiscuous mode [ 291.201070][T10628] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.220186][T10813] netlink: 'syz.3.1192': attribute type 4 has an invalid length. [ 291.277272][T10815] netlink: 'syz.3.1192': attribute type 4 has an invalid length. [ 291.466000][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.474607][T10739] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.486707][T10739] bridge_slave_0: entered allmulticast mode [ 291.497754][T10739] bridge_slave_0: entered promiscuous mode [ 291.506882][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.514085][ T8815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.548999][T10739] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.556266][T10739] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.565928][T10739] bridge_slave_1: entered allmulticast mode [ 291.579758][T10739] bridge_slave_1: entered promiscuous mode [ 291.732289][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.739644][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.835886][T10739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.898087][T10739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.005999][T10739] team0: Port device team_slave_0 added [ 292.014033][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1200'. [ 292.027249][T10739] team0: Port device team_slave_1 added [ 292.110505][T10739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.118340][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.145820][T10739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.165075][T10739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.173778][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.200920][T10739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.315055][T10739] hsr_slave_0: entered promiscuous mode [ 292.322697][T10739] hsr_slave_1: entered promiscuous mode [ 292.330491][ T6795] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 292.763629][T10628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.335709][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'. [ 293.508001][T10739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 293.552730][T10739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 293.589803][T10884] netlink: 'syz.3.1211': attribute type 1 has an invalid length. [ 293.601000][T10739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.616532][T10884] netlink: 'syz.3.1211': attribute type 10 has an invalid length. [ 293.634644][T10884] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1211'. [ 293.657191][T10739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 293.768857][T10628] veth0_vlan: entered promiscuous mode [ 293.820571][T10628] veth1_vlan: entered promiscuous mode [ 293.898506][T10896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.952178][T10739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.011234][T10628] veth0_macvtap: entered promiscuous mode [ 294.037946][T10739] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.059109][T10628] veth1_macvtap: entered promiscuous mode [ 294.113684][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.120949][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.165074][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.172388][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.219961][T10628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.277349][T10628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.350233][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.384108][ T1165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.427594][ T1165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.446890][ T1165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.653021][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.670395][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.702007][T10921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.792520][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.802236][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.955119][T10930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1221'. [ 295.080604][T10739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.451036][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.563617][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.603578][T10739] veth0_vlan: entered promiscuous mode [ 295.687332][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.761932][T10739] veth1_vlan: entered promiscuous mode [ 295.882326][T10953] netlink: 'syz.0.1228': attribute type 23 has an invalid length. [ 295.901801][T10953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1228'. [ 295.946367][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.033596][T10739] veth0_macvtap: entered promiscuous mode [ 296.107884][T10739] veth1_macvtap: entered promiscuous mode [ 296.182403][T10739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.230930][T10739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.337807][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.356602][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.365367][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.402847][T10955] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1229'. [ 296.449938][T10955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1229'. [ 296.530668][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.664023][ T36] bridge_slave_1: left allmulticast mode [ 296.687034][ T36] bridge_slave_1: left promiscuous mode [ 296.714934][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.750240][ T36] bridge_slave_0: left allmulticast mode [ 296.757806][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.770208][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.778618][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.785308][ T36] bridge_slave_0: left promiscuous mode [ 296.792729][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.801473][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.805604][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.260704][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.285732][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.306032][ T36] bond0 (unregistering): Released all slaves [ 297.415880][ T2138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.455589][ T2138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.620432][T10977] openvswitch: netlink: Actions may not be safe on all matching packets [ 297.787026][T10984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1235'. [ 297.814612][T10983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1235'. [ 297.816759][T10984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1235'. [ 297.825428][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1235'. [ 297.887495][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.895938][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.914819][ T36] hsr_slave_0: left promiscuous mode [ 297.929580][ T36] hsr_slave_1: left promiscuous mode [ 297.938477][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.960190][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.970718][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.988116][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.035177][ T36] veth1_macvtap: left promiscuous mode [ 298.050849][ T36] veth0_macvtap: left promiscuous mode [ 298.060308][ T36] veth1_vlan: left promiscuous mode [ 298.065826][ T36] veth0_vlan: left promiscuous mode [ 298.876996][ T5859] Bluetooth: hci4: command tx timeout [ 298.994403][ T36] team0 (unregistering): Port device team_slave_1 removed [ 299.083983][ T36] team0 (unregistering): Port device team_slave_0 removed [ 300.120109][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 300.130570][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1243'. [ 300.246158][T10965] chnl_net:caif_netlink_parms(): no params data found [ 300.586222][T10965] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.602914][T10965] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.612595][T10965] bridge_slave_0: entered allmulticast mode [ 300.624157][T10965] bridge_slave_0: entered promiscuous mode [ 300.657009][T10965] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.664287][T10965] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.676778][T10965] bridge_slave_1: entered allmulticast mode [ 300.684754][T10965] bridge_slave_1: entered promiscuous mode [ 300.751187][T11034] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1247'. [ 300.865622][T10965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.890268][T11037] lo speed is unknown, defaulting to 1000 [ 300.890553][T10965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.956990][ T5859] Bluetooth: hci4: command tx timeout [ 300.976006][T11037] lo speed is unknown, defaulting to 1000 [ 300.991733][T10965] team0: Port device team_slave_0 added [ 301.013202][T11037] lo speed is unknown, defaulting to 1000 [ 301.028236][T11037] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 301.047673][T11037] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 301.070517][T10965] team0: Port device team_slave_1 added [ 301.171002][T11037] lo speed is unknown, defaulting to 1000 [ 301.171508][T10965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.192739][T10965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.235078][T10965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.276970][T11037] lo speed is unknown, defaulting to 1000 [ 301.284493][T10965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.300029][T10965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.337162][T10965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.355894][T11037] lo speed is unknown, defaulting to 1000 [ 301.417678][T11037] lo speed is unknown, defaulting to 1000 [ 301.495580][T11037] lo speed is unknown, defaulting to 1000 [ 301.541431][T11037] lo speed is unknown, defaulting to 1000 [ 301.564771][T10965] hsr_slave_0: entered promiscuous mode [ 301.585577][T10965] hsr_slave_1: entered promiscuous mode [ 301.607889][T10965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.625771][T10965] Cannot create hsr debugfs directory [ 301.695138][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 301.916941][ T6795] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 301.926568][ T5937] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 302.358055][T11081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1256'. [ 302.810289][T11095] netlink: 'syz.0.1257': attribute type 142 has an invalid length. [ 302.865182][T11097] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 303.024755][T10965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.038563][ T5859] Bluetooth: hci4: command tx timeout [ 303.041157][T10965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.078665][T10965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.120061][T10965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.485383][T10965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.574418][T10965] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.615343][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.622669][ T2138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.663554][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.670787][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.777844][T11124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1263'. [ 304.205102][T11134] lo speed is unknown, defaulting to 1000 [ 304.510730][T10965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.865243][T11159] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1270'. [ 304.906758][T11159] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1270'. [ 305.014877][T11155] lo speed is unknown, defaulting to 1000 [ 305.117046][ T5859] Bluetooth: hci4: command tx timeout [ 305.340855][T11173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1272'. [ 305.559827][T10965] veth0_vlan: entered promiscuous mode [ 305.581314][T10965] veth1_vlan: entered promiscuous mode [ 305.591294][T11179] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1273'. [ 305.659424][T10965] veth0_macvtap: entered promiscuous mode [ 305.673718][T10965] veth1_macvtap: entered promiscuous mode [ 305.741378][T10965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.784522][T10965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.818377][T11182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1274'. [ 305.850750][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.964067][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.012839][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.104393][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.266828][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.281247][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.362550][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.389728][T11199] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 306.404042][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.940246][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.081732][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.195327][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.274576][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.552257][ T13] bridge_slave_1: left allmulticast mode [ 307.558255][ T13] bridge_slave_1: left promiscuous mode [ 307.564766][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.575272][ T13] bridge_slave_0: left allmulticast mode [ 307.582008][ T13] bridge_slave_0: left promiscuous mode [ 307.587980][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.361697][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.387277][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.396120][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.413096][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.421629][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.657647][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.685396][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.699075][ T13] bond0 (unregistering): Released all slaves [ 308.754138][T11227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1287'. [ 308.767108][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 308.781147][T11235] !: renamed from dummy0 [ 308.962657][T11245] lo speed is unknown, defaulting to 1000 [ 309.074789][T11257] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1293'. [ 309.358320][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 309.657512][ T64] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 309.840866][ T13] hsr_slave_0: left promiscuous mode [ 309.870214][T11278] xt_l2tp: missing protocol rule (udp|l2tpip) [ 309.882154][ T13] hsr_slave_1: left promiscuous mode [ 309.895051][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.914465][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.926186][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.941817][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.998535][ T13] veth1_macvtap: left promiscuous mode [ 310.004156][ T13] veth0_macvtap: left promiscuous mode [ 310.010749][ T13] veth1_vlan: left promiscuous mode [ 310.016158][ T13] veth0_vlan: left promiscuous mode [ 310.486736][ T5859] Bluetooth: hci4: command tx timeout [ 310.754998][ T13] team0 (unregistering): Port device team_slave_1 removed [ 310.795916][ T13] team0 (unregistering): Port device team_slave_0 removed [ 311.436869][T11245] chnl_net:caif_netlink_parms(): no params data found [ 311.517411][ T6795] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 311.685378][T11245] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.694989][T11245] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.705546][T11245] bridge_slave_0: entered allmulticast mode [ 311.714306][T11245] bridge_slave_0: entered promiscuous mode [ 311.724729][T11245] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.733138][T11245] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.745116][T11305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.762828][T11245] bridge_slave_1: entered allmulticast mode [ 311.772439][T11245] bridge_slave_1: entered promiscuous mode [ 311.795279][T11305] team0: Refused to change device type [ 311.898525][T11245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.935449][T11245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.018903][T11245] team0: Port device team_slave_0 added [ 312.034694][T11245] team0: Port device team_slave_1 added [ 312.111783][T11311] lo speed is unknown, defaulting to 1000 [ 312.117182][T11245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.124514][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.161628][T11245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.176244][T11245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.191633][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.226004][T11245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.245072][T11313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.252427][T11313] IPv6: NLM_F_CREATE should be set when creating new route [ 312.535141][T11326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1309'. [ 312.574165][ T5859] Bluetooth: hci4: command tx timeout [ 312.600797][T11245] hsr_slave_0: entered promiscuous mode [ 312.608306][T11245] hsr_slave_1: entered promiscuous mode [ 312.614814][T11245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.623324][T11245] Cannot create hsr debugfs directory [ 312.635643][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 312.646109][T11331] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1309'. [ 312.668675][T11331] vlan1: entered allmulticast mode [ 312.673885][T11331] veth1: entered allmulticast mode [ 312.722624][T11330] nbd: must specify at least one socket [ 312.821617][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1305'. [ 312.863059][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 312.901454][T11311] netlink: 'syz.0.1305': attribute type 12 has an invalid length. [ 313.103298][T11348] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 313.339523][T11358] FAULT_INJECTION: forcing a failure. [ 313.339523][T11358] name failslab, interval 1, probability 0, space 0, times 0 [ 313.341747][T11359] syz.0.1317 uses old SIOCAX25GETINFO [ 313.358723][T11358] CPU: 1 UID: 0 PID: 11358 Comm: syz.2.1318 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 313.358750][T11358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.358779][T11358] Call Trace: [ 313.358787][T11358] [ 313.358794][T11358] dump_stack_lvl+0x189/0x250 [ 313.358822][T11358] ? __pfx____ratelimit+0x10/0x10 [ 313.358844][T11358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.358864][T11358] ? __pfx__printk+0x10/0x10 [ 313.358888][T11358] ? __pfx___might_resched+0x10/0x10 [ 313.358908][T11358] ? fs_reclaim_acquire+0x7d/0x100 [ 313.358936][T11358] should_fail_ex+0x414/0x560 [ 313.358965][T11358] should_failslab+0xa8/0x100 [ 313.358989][T11358] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 313.359010][T11358] ? __alloc_skb+0x112/0x2d0 [ 313.359039][T11358] __alloc_skb+0x112/0x2d0 [ 313.359065][T11358] alloc_skb_with_frags+0xca/0x890 [ 313.359095][T11358] ? rcu_is_watching+0x15/0xb0 [ 313.359119][T11358] sock_alloc_send_pskb+0x857/0x990 [ 313.359153][T11358] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 313.359176][T11358] ? dev_get_by_index+0x22/0x2e0 [ 313.359195][T11358] ? dev_get_by_index+0x22/0x2e0 [ 313.359220][T11358] packet_sendmsg+0x3672/0x53f0 [ 313.359262][T11358] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 313.359305][T11358] ? __pfx___might_resched+0x10/0x10 [ 313.359325][T11358] ? __lock_acquire+0xab9/0xd20 [ 313.359355][T11358] ? __pfx_packet_sendmsg+0x10/0x10 [ 313.359379][T11358] ? aa_sk_perm+0x81e/0x950 [ 313.359410][T11358] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 313.359436][T11358] ? aa_sock_msg_perm+0x94/0x160 [ 313.359469][T11358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.359487][T11358] ? __pfx_packet_sendmsg+0x10/0x10 [ 313.359520][T11358] __sock_sendmsg+0x219/0x270 [ 313.359549][T11358] __sys_sendto+0x3bd/0x520 [ 313.359582][T11358] ? __pfx___sys_sendto+0x10/0x10 [ 313.359609][T11358] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 313.359652][T11358] ? __fget_files+0x3a0/0x420 [ 313.359694][T11358] ? ksys_write+0x22a/0x250 [ 313.359721][T11358] ? __pfx_ksys_write+0x10/0x10 [ 313.359743][T11358] ? rcu_is_watching+0x15/0xb0 [ 313.359781][T11358] __x64_sys_sendto+0xde/0x100 [ 313.359815][T11358] do_syscall_64+0xfa/0x3b0 [ 313.359843][T11358] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.359868][T11358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.359889][T11358] ? clear_bhb_loop+0x60/0xb0 [ 313.359914][T11358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.359935][T11358] RIP: 0033:0x7f224598e929 [ 313.359955][T11358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.359973][T11358] RSP: 002b:00007f2246747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 313.360006][T11358] RAX: ffffffffffffffda RBX: 00007f2245bb5fa0 RCX: 00007f224598e929 [ 313.360021][T11358] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 0000000000000003 [ 313.360034][T11358] RBP: 00007f2246747090 R08: 0000200000000340 R09: 0000000000000014 [ 313.360047][T11358] R10: 00000000200408c2 R11: 0000000000000246 R12: 0000000000000001 [ 313.360059][T11358] R13: 0000000000000000 R14: 00007f2245bb5fa0 R15: 00007ffc190dcf88 [ 313.360094][T11358] [ 313.797988][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 313.821199][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 313.921094][T11366] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1319'. [ 313.930372][T11245] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.947470][T11245] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.982060][T11245] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.015127][T11245] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.302417][T11245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.316042][T11393] __nla_validate_parse: 1 callbacks suppressed [ 314.316063][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'. [ 314.342708][T11392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1327'. [ 314.367468][T11393] batadv0: entered promiscuous mode [ 314.373557][T11393] macvtap1: entered promiscuous mode [ 314.381327][T11393] macvtap1: entered allmulticast mode [ 314.389707][T11393] batadv0: entered allmulticast mode [ 314.401838][T11393] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 314.490744][T11245] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.588416][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.595626][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.611144][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.618378][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.637005][ T5859] Bluetooth: hci4: command tx timeout [ 314.817450][T11409] geneve2: entered promiscuous mode [ 314.822891][T11409] geneve2: entered allmulticast mode [ 315.014734][ T8815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.039312][ T8815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.064074][T11423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.080384][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 315.090237][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 315.105625][T11421] netlink: 'syz.0.1334': attribute type 13 has an invalid length. [ 315.233749][T11245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.349515][T11431] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 315.863434][T11245] veth0_vlan: entered promiscuous mode [ 315.906205][T11245] veth1_vlan: entered promiscuous mode [ 315.973847][T11245] veth0_macvtap: entered promiscuous mode [ 316.009511][T11245] veth1_macvtap: entered promiscuous mode [ 316.061560][T11245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.092555][T11245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.138579][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.164751][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.200764][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.241150][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.471246][T11457] wireguard0: entered promiscuous mode [ 316.484356][T11457] wireguard0: entered allmulticast mode [ 316.564190][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'. [ 316.598304][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.644928][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.713428][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.716471][ T5859] Bluetooth: hci4: command tx timeout [ 316.738099][T11474] erspan0: left allmulticast mode [ 316.744843][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.777771][T11474] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 317.008842][T11481] lo speed is unknown, defaulting to 1000 [ 317.011087][T11483] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1350'. [ 317.381139][T11486] syzkaller0: entered promiscuous mode [ 317.396644][T11486] syzkaller0: entered allmulticast mode [ 318.203120][ T2138] bond0 (unregistering): Released all slaves [ 318.220310][ T2138] bond1 (unregistering): Released all slaves [ 318.333086][ T2138] bond2 (unregistering): Released all slaves [ 318.437389][ T2138] bond3 (unregistering): Released all slaves [ 319.017873][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.027326][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.042837][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.074367][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.098969][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.764347][ T2138] tipc: Disabling bearer [ 320.770957][ T2138] tipc: Left network mode [ 320.814423][T11505] lo speed is unknown, defaulting to 1000 [ 321.002506][T11515] syzkaller0: entered promiscuous mode [ 321.014770][T11515] syzkaller0: entered allmulticast mode [ 321.123996][ T5937] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 321.131876][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 321.175755][T11522] netlink: 'syz.3.1358': attribute type 10 has an invalid length. [ 321.197364][ T5859] Bluetooth: hci4: command tx timeout [ 321.213662][T11522] wlan1: mtu less than device minimum [ 321.223824][T11522] : (slave wlan1): Error -22 calling dev_set_mtu [ 321.475932][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'. [ 321.519435][T11527] netlink: 'syz.0.1359': attribute type 10 has an invalid length. [ 321.566977][ T2138] hsr_slave_0: left promiscuous mode [ 321.585561][ T2138] hsr_slave_1: left promiscuous mode [ 321.667538][ T2138] team0 (unregistering): Port device batadv2 removed [ 321.748397][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 322.174590][T11525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.408976][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.806039][T11527] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 322.842448][T11526] tipc: Enabled bearer , priority 0 [ 322.850674][T11533] syzkaller0: entered promiscuous mode [ 322.876546][T11533] syzkaller0: entered allmulticast mode [ 322.892880][T11537] tipc: Resetting bearer [ 322.909737][T11525] tipc: Resetting bearer [ 322.930674][T11525] tipc: Disabling bearer [ 322.952279][T11505] chnl_net:caif_netlink_parms(): no params data found [ 323.286486][ T5859] Bluetooth: hci4: command tx timeout [ 323.331246][T11505] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.352708][T11505] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.360870][T11505] bridge_slave_0: entered allmulticast mode [ 323.369304][T11505] bridge_slave_0: entered promiscuous mode [ 323.379628][T11505] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.387073][T11505] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.394437][T11505] bridge_slave_1: entered allmulticast mode [ 323.403242][T11505] bridge_slave_1: entered promiscuous mode [ 323.515093][T11505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.554356][T11505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.729436][T11505] team0: Port device team_slave_0 added [ 323.769762][T11505] team0: Port device team_slave_1 added [ 323.813798][T11569] warn_alloc: 1 callbacks suppressed [ 323.813819][T11569] syz.3.1367: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 323.852123][T11569] CPU: 0 UID: 0 PID: 11569 Comm: syz.3.1367 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 323.852156][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.852171][T11569] Call Trace: [ 323.852180][T11569] [ 323.852191][T11569] dump_stack_lvl+0x189/0x250 [ 323.852229][T11569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.852257][T11569] ? __pfx__printk+0x10/0x10 [ 323.852290][T11569] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 323.852323][T11569] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 323.852357][T11569] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 323.852392][T11569] warn_alloc+0x214/0x310 [ 323.852425][T11569] ? stack_depot_save_flags+0x40/0x900 [ 323.852464][T11569] ? __pfx_warn_alloc+0x10/0x10 [ 323.852499][T11569] ? kasan_save_track+0x4f/0x80 [ 323.852525][T11569] ? xskq_create+0x56/0x170 [ 323.852551][T11569] ? xsk_init_queue+0xb0/0x110 [ 323.852574][T11569] ? xsk_setsockopt+0x43f/0x710 [ 323.852597][T11569] ? do_sock_setsockopt+0x257/0x3e0 [ 323.852629][T11569] ? __x64_sys_setsockopt+0x18b/0x220 [ 323.852660][T11569] ? do_syscall_64+0xfa/0x3b0 [ 323.852689][T11569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.852722][T11569] __vmalloc_node_range_noprof+0x125/0x12f0 [ 323.852789][T11569] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 323.852828][T11569] ? __kasan_kmalloc+0x93/0xb0 [ 323.852860][T11569] vmalloc_user_noprof+0xad/0xf0 [ 323.852891][T11569] ? xskq_create+0xbf/0x170 [ 323.852920][T11569] xskq_create+0xbf/0x170 [ 323.852957][T11569] xsk_init_queue+0xb0/0x110 [ 323.852988][T11569] xsk_setsockopt+0x43f/0x710 [ 323.853017][T11569] ? __pfx_xsk_setsockopt+0x10/0x10 [ 323.853041][T11569] ? __lock_acquire+0xab9/0xd20 [ 323.853077][T11569] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 323.853097][T11569] ? __pfx_xsk_setsockopt+0x10/0x10 [ 323.853125][T11569] do_sock_setsockopt+0x257/0x3e0 [ 323.853163][T11569] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 323.853204][T11569] ? __fget_files+0x2a/0x420 [ 323.853246][T11569] __x64_sys_setsockopt+0x18b/0x220 [ 323.853288][T11569] do_syscall_64+0xfa/0x3b0 [ 323.853316][T11569] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.853345][T11569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.853368][T11569] ? clear_bhb_loop+0x60/0xb0 [ 323.853396][T11569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.853418][T11569] RIP: 0033:0x7fb7b5d8e929 [ 323.853438][T11569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.853459][T11569] RSP: 002b:00007fb7b6c44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 323.853483][T11569] RAX: ffffffffffffffda RBX: 00007fb7b5fb5fa0 RCX: 00007fb7b5d8e929 [ 323.853500][T11569] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 323.853513][T11569] RBP: 00007fb7b5e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 323.853527][T11569] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.853542][T11569] R13: 0000000000000000 R14: 00007fb7b5fb5fa0 R15: 00007ffc16d0d798 [ 323.853578][T11569] [ 323.853588][T11569] Mem-Info: [ 323.992955][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'. [ 324.009706][T11569] active_anon:7561 inactive_anon:0 isolated_anon:0 [ 324.009706][T11569] active_file:1613 inactive_file:39956 isolated_file:0 [ 324.009706][T11569] unevictable:768 dirty:108 writeback:0 [ 324.009706][T11569] slab_reclaimable:11871 slab_unreclaimable:165976 [ 324.009706][T11569] mapped:29176 shmem:1378 pagetables:1319 [ 324.009706][T11569] sec_pagetables:0 bounce:0 [ 324.009706][T11569] kernel_misc_reclaimable:0 [ 324.009706][T11569] free:1256432 free_pcp:16697 free_cma:0 [ 324.240537][T11569] Node 0 active_anon:30432kB inactive_anon:0kB active_file:6452kB inactive_file:159636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124848kB dirty:472kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13028kB pagetables:5232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 324.299509][T11505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.302750][T11583] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1371'. [ 324.317921][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.336566][T11569] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 324.388372][T11505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.401340][T11569] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 324.429468][T11505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.454259][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.466403][T11569] lowmem_reserve[]: [ 324.483881][T11505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.512427][T11569] 0 2498 2499 2499 2499 [ 324.517226][T11569] Node 0 DMA32 free:1112556kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30584kB inactive_anon:0kB active_file:6452kB inactive_file:158060kB unevictable:1536kB writepending:468kB present:3129332kB managed:2558316kB mlocked:0kB bounce:0kB free_pcp:45440kB local_pcp:21476kB free_cma:0kB [ 324.550280][T11569] lowmem_reserve[]: 0 0 1 1 1 [ 324.555059][T11569] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 324.586221][T11569] lowmem_reserve[]: 0 0 0 0 0 [ 324.601225][T11569] Node 1 Normal free:3900100kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18112kB local_pcp:5920kB free_cma:0kB [ 324.639346][T11569] lowmem_reserve[]: 0 0 0 0 0 [ 324.655763][T11569] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 324.689747][ T2138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.701342][T11569] Node 0 DMA32: 687*4kB (UME) 499*8kB (UME) 221*16kB (UME) 541*32kB (UME) 703*64kB (UME) 539*128kB (UME) 420*256kB (UM) 307*512kB (UM) 192*1024kB (UME) 4*2048kB (UME) 123*4096kB (M) = 1114884kB [ 324.735794][T11569] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 324.758311][T11569] Node 1 Normal: 177*4kB (UME) 46*8kB (UME) 39*16kB (UME) 147*32kB (UME) 51*64kB (UME) 12*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3900100kB [ 324.778579][T11569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.788909][T11569] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 324.798941][T11569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.809110][T11569] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 324.839362][T11569] 42928 total pagecache pages [ 324.844124][T11569] 0 pages in swap cache [ 324.895599][T11569] Free swap = 124996kB [ 324.919543][T11569] Total swap = 124996kB [ 324.924765][T11569] 2097051 pages RAM [ 324.928804][T11569] 0 pages HighMem/MovableOnly [ 324.941648][T11505] hsr_slave_0: entered promiscuous mode [ 324.953564][T11569] 425430 pages reserved [ 324.965250][T11569] 0 pages cma reserved [ 324.975680][T11505] hsr_slave_1: entered promiscuous mode [ 324.995645][T11505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.015256][T11505] Cannot create hsr debugfs directory [ 325.106059][ T2138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.302822][ T2138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.366697][ T5859] Bluetooth: hci4: command tx timeout [ 325.446960][T11617] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1377'. [ 325.463076][ T2138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.780289][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1382'. [ 325.812196][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1382'. [ 326.162488][ T2138] bridge_slave_1: left allmulticast mode [ 326.171611][ T2138] bridge_slave_1: left promiscuous mode [ 326.178785][ T2138] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.190772][ T2138] bridge_slave_0: left allmulticast mode [ 326.206598][ T2138] bridge_slave_0: left promiscuous mode [ 326.216970][ T2138] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.260257][T11653] netlink: 'syz.3.1386': attribute type 3 has an invalid length. [ 326.671145][ T2138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.683543][ T2138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.694211][ T2138] bond0 (unregistering): Released all slaves [ 326.919904][T11664] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1389'. [ 326.919904][T11665] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1389'. [ 327.070783][T11668] nbd: socks must be embedded in a SOCK_ITEM attr [ 327.081041][T11668] block nbd0: shutting down sockets [ 327.198878][ T2138] hsr_slave_0: left promiscuous mode [ 327.215399][ T2138] hsr_slave_1: left promiscuous mode [ 327.226057][ T2138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.227838][T11675] netlink: 'syz.3.1392': attribute type 11 has an invalid length. [ 327.242107][ T2138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.251950][T11678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1393'. [ 327.265384][ T2138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.275942][ T2138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.308250][ T2138] veth1_macvtap: left promiscuous mode [ 327.313877][ T2138] veth0_macvtap: left promiscuous mode [ 327.320244][ T2138] veth1_vlan: left promiscuous mode [ 327.321237][T11679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.325660][ T2138] veth0_vlan: left promiscuous mode [ 327.346110][T11680] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1394'. [ 327.436679][ T5859] Bluetooth: hci4: command tx timeout [ 327.529977][ T5937] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 327.862316][ T2138] team0 (unregistering): Port device team_slave_1 removed [ 327.903762][ T2138] team0 (unregistering): Port device team_slave_0 removed [ 328.513423][T11680] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 328.536126][T11680] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 328.554114][T11680] bond0 (unregistering): Released all slaves [ 328.602009][T11685] netlink: 'syz.2.1395': attribute type 10 has an invalid length. [ 328.614945][T11682] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 328.631264][T11682] batman_adv: batadv0: Removing interface: virt_wifi0 [ 328.665869][T11682] bond0: (slave wlan1): Releasing backup interface [ 328.704695][T11685] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 328.886925][ T8815] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.927017][ T64] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.935281][ T64] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.975485][ T64] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.045064][T11505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.048429][T11697] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1399'. [ 329.082951][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 329.094571][T11505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.115683][T11700] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1399'. [ 329.159399][T11505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.208938][T11505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.459702][T11719] netlink: 'syz.2.1404': attribute type 21 has an invalid length. [ 329.474723][T11719] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1404'. [ 329.491592][T11505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.519615][T11716] lo speed is unknown, defaulting to 1000 [ 329.585422][T11505] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.654820][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.662105][ T8815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.739142][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.746419][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.772873][T11726] lo speed is unknown, defaulting to 1000 [ 329.865828][T11725] lo speed is unknown, defaulting to 1000 [ 330.003532][T11744] IPVS: length: 167 != 8 [ 330.523686][T11505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.584409][ T30] audit: type=1800 audit(1751814839.167:6): pid=11761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1413" name="x000000000000000c00000000000000000000014" dev="tmpfs" ino=1995 res=0 errno=0 [ 330.633543][ T30] audit: type=1804 audit(1751814839.167:7): pid=11761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1413" name="x000000000000000c00000000000000000000014" dev="tmpfs" ino=1995 res=1 errno=0 [ 330.939735][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 331.232639][T11505] veth0_vlan: entered promiscuous mode [ 331.260009][T11505] veth1_vlan: entered promiscuous mode [ 331.369850][T11505] veth0_macvtap: entered promiscuous mode [ 331.381282][T11505] veth1_macvtap: entered promiscuous mode [ 331.401853][T11505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.417394][T11505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.439952][ T1165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.474011][ T1165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.488843][ T1165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.511652][ T1165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.680439][ T8815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.695042][ T8815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.784404][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.804457][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.464134][T11812] xfrm1: entered promiscuous mode [ 332.471670][T11812] xfrm1: entered allmulticast mode [ 332.598715][T11823] tipc: Started in network mode [ 332.603678][T11823] tipc: Node identity 96096ebe7f3c, cluster identity 4711 [ 332.612578][T11823] tipc: Enabled bearer , priority 0 [ 332.657332][ T6795] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 332.730722][T11823] tipc: Disabling bearer [ 332.983501][ T3468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.119574][ T3468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.295720][ T3468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.463681][ T3468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.626696][ T3468] bridge_slave_1: left allmulticast mode [ 333.632419][ T3468] bridge_slave_1: left promiscuous mode [ 333.638513][ T3468] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.652691][ T3468] bridge_slave_0: left allmulticast mode [ 333.658572][ T3468] bridge_slave_0: left promiscuous mode [ 333.664333][ T3468] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.000280][T11835] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 334.294098][ T3468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.327014][ T3468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.348914][ T3468] bond0 (unregistering): Released all slaves [ 334.495113][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1437'. [ 334.584115][ T64] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.608291][ T64] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.623234][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.646224][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.647888][ T64] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.663232][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.682878][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.692813][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.727644][ T64] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.837973][T11866] netlink: 'syz.0.1438': attribute type 4 has an invalid length. [ 334.904621][T11862] lo speed is unknown, defaulting to 1000 [ 334.955118][ T3468] hsr_slave_0: left promiscuous mode [ 334.969306][ T3468] hsr_slave_1: left promiscuous mode [ 334.975503][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.985790][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.996730][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.004345][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.035373][ T3468] veth1_macvtap: left promiscuous mode [ 335.045775][ T3468] veth0_macvtap: left promiscuous mode [ 335.056751][ T3468] veth1_vlan: left promiscuous mode [ 335.062164][ T3468] veth0_vlan: left promiscuous mode [ 335.124696][T11882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.596648][ T3468] team0 (unregistering): Port device team_slave_1 removed [ 335.642131][ T3468] team0 (unregistering): Port device team_slave_0 removed [ 335.843846][ T7501] ================================================================== [ 335.851985][ T7501] BUG: KASAN: slab-use-after-free in __mutex_unlock_slowpath+0xd4/0x700 [ 335.860357][ T7501] Read of size 8 at addr ffff8880585bbad0 by task kworker/0:19/7501 [ 335.868863][ T7501] [ 335.871210][ T7501] CPU: 0 UID: 0 PID: 7501 Comm: kworker/0:19 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 335.871233][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.871245][ T7501] Workqueue: events l2cap_chan_timeout [ 335.871265][ T7501] Call Trace: [ 335.871273][ T7501] [ 335.871283][ T7501] dump_stack_lvl+0x189/0x250 [ 335.871303][ T7501] ? __virt_addr_valid+0x1c8/0x5c0 [ 335.871324][ T7501] ? rcu_is_watching+0x15/0xb0 [ 335.871343][ T7501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.871361][ T7501] ? rcu_is_watching+0x15/0xb0 [ 335.871379][ T7501] ? lock_release+0x4b/0x3e0 [ 335.871396][ T7501] ? __virt_addr_valid+0x1c8/0x5c0 [ 335.871416][ T7501] ? __virt_addr_valid+0x4a5/0x5c0 [ 335.871437][ T7501] print_report+0xd2/0x2b0 [ 335.871452][ T7501] ? __mutex_unlock_slowpath+0xd4/0x700 [ 335.871478][ T7501] kasan_report+0x118/0x150 [ 335.871500][ T7501] ? __mutex_unlock_slowpath+0xd4/0x700 [ 335.871525][ T7501] kasan_check_range+0x2b0/0x2c0 [ 335.871544][ T7501] ? process_scheduled_works+0x9ef/0x17b0 [ 335.871563][ T7501] __mutex_unlock_slowpath+0xd4/0x700 [ 335.871585][ T7501] ? kasan_quarantine_put+0xdd/0x220 [ 335.871602][ T7501] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.871621][ T7501] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 335.871643][ T7501] ? kfree+0x18e/0x440 [ 335.871659][ T7501] ? _raw_write_unlock+0x28/0x50 [ 335.871679][ T7501] ? l2cap_chan_timeout+0x1ac/0x390 [ 335.871693][ T7501] ? process_scheduled_works+0x9ef/0x17b0 [ 335.871711][ T7501] process_scheduled_works+0xade/0x17b0 [ 335.871745][ T7501] ? __pfx_process_scheduled_works+0x10/0x10 [ 335.871770][ T7501] worker_thread+0x8a0/0xda0 [ 335.871793][ T7501] ? __kthread_parkme+0x7b/0x200 [ 335.871817][ T7501] kthread+0x70e/0x8a0 [ 335.871839][ T7501] ? __pfx_worker_thread+0x10/0x10 [ 335.871856][ T7501] ? __pfx_kthread+0x10/0x10 [ 335.871878][ T7501] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.871895][ T7501] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.871913][ T7501] ? __pfx_kthread+0x10/0x10 [ 335.871942][ T7501] ret_from_fork+0x3fc/0x770 [ 335.871966][ T7501] ? __pfx_ret_from_fork+0x10/0x10 [ 335.871993][ T7501] ? __switch_to_asm+0x39/0x70 [ 335.872021][ T7501] ? __switch_to_asm+0x33/0x70 [ 335.872046][ T7501] ? __pfx_kthread+0x10/0x10 [ 335.872068][ T7501] ret_from_fork_asm+0x1a/0x30 [ 335.872096][ T7501] [ 335.872102][ T7501] [ 336.102166][ T7501] Allocated by task 10940: [ 336.106598][ T7501] kasan_save_track+0x3e/0x80 [ 336.111291][ T7501] __kasan_kmalloc+0x93/0xb0 [ 336.115893][ T7501] __kmalloc_cache_noprof+0x230/0x3d0 [ 336.121277][ T7501] l2cap_conn_add+0xaa/0x8d0 [ 336.125880][ T7501] l2cap_chan_connect+0x6c8/0xe30 [ 336.130940][ T7501] l2cap_sock_connect+0x5c8/0x7a0 [ 336.135980][ T7501] kernel_connect+0x113/0x180 [ 336.140665][ T7501] rfcomm_dlc_open+0x8fe/0xed0 [ 336.145454][ T7501] rfcomm_sock_connect+0x2f7/0x610 [ 336.150758][ T7501] __sys_connect+0x313/0x440 [ 336.155360][ T7501] __x64_sys_connect+0x7a/0x90 [ 336.160135][ T7501] do_syscall_64+0xfa/0x3b0 [ 336.164655][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.170565][ T7501] [ 336.172894][ T7501] Freed by task 10739: [ 336.176965][ T7501] kasan_save_track+0x3e/0x80 [ 336.181652][ T7501] kasan_save_free_info+0x46/0x50 [ 336.186701][ T7501] __kasan_slab_free+0x62/0x70 [ 336.191490][ T7501] kfree+0x18e/0x440 [ 336.195397][ T7501] hci_conn_hash_flush+0x10a/0x230 [ 336.200522][ T7501] hci_dev_close_sync+0xaef/0x1330 [ 336.205650][ T7501] hci_unregister_dev+0x21a/0x510 [ 336.210688][ T7501] vhci_release+0x80/0xd0 [ 336.215032][ T7501] __fput+0x449/0xa70 [ 336.219023][ T7501] task_work_run+0x1d1/0x260 [ 336.223636][ T7501] do_exit+0x6b5/0x22e0 [ 336.227810][ T7501] do_group_exit+0x21c/0x2d0 [ 336.232425][ T7501] __x64_sys_exit_group+0x3f/0x40 [ 336.237471][ T7501] x64_sys_call+0x21ba/0x21c0 [ 336.242166][ T7501] do_syscall_64+0xfa/0x3b0 [ 336.246686][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.252590][ T7501] [ 336.254921][ T7501] The buggy address belongs to the object at ffff8880585bb800 [ 336.254921][ T7501] which belongs to the cache kmalloc-1k of size 1024 [ 336.269067][ T7501] The buggy address is located 720 bytes inside of [ 336.269067][ T7501] freed 1024-byte region [ffff8880585bb800, ffff8880585bbc00) [ 336.282957][ T7501] [ 336.285287][ T7501] The buggy address belongs to the physical page: [ 336.291712][ T7501] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880585ba000 pfn:0x585b8 [ 336.301785][ T7501] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 336.310286][ T7501] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 336.318800][ T7501] page_type: f5(slab) [ 336.322787][ T7501] raw: 00fff00000000240 ffff88801a441dc0 ffffea0000d4fe10 ffffea0000a5ca10 [ 336.331377][ T7501] raw: ffff8880585ba000 000000000010000d 00000000f5000000 0000000000000000 [ 336.339973][ T7501] head: 00fff00000000240 ffff88801a441dc0 ffffea0000d4fe10 ffffea0000a5ca10 [ 336.348654][ T7501] head: ffff8880585ba000 000000000010000d 00000000f5000000 0000000000000000 [ 336.357341][ T7501] head: 00fff00000000003 ffffea0001616e01 00000000ffffffff 00000000ffffffff [ 336.366018][ T7501] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 336.374859][ T7501] page dumped because: kasan: bad access detected [ 336.381283][ T7501] page_owner tracks the page as allocated [ 336.387006][ T7501] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9029, tgid 9025 (syz.0.774), ts 221318306752, free_ts 221131676995 [ 336.407775][ T7501] post_alloc_hook+0x240/0x2a0 [ 336.412561][ T7501] get_page_from_freelist+0x21e4/0x22c0 [ 336.418121][ T7501] __alloc_frozen_pages_noprof+0x181/0x370 [ 336.423946][ T7501] alloc_pages_mpol+0x232/0x4a0 [ 336.428808][ T7501] allocate_slab+0x8a/0x3b0 [ 336.433316][ T7501] ___slab_alloc+0xbfc/0x1480 [ 336.438011][ T7501] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 336.444442][ T7501] kmalloc_reserve+0x136/0x290 [ 336.449224][ T7501] __alloc_skb+0x142/0x2d0 [ 336.453653][ T7501] xfrm_alloc_compat+0x1a6/0x16f0 [ 336.458683][ T7501] xfrm_nlmsg_multicast+0xd7/0x1f0 [ 336.463937][ T7501] xfrm_send_acquire+0x99d/0xee0 [ 336.468914][ T7501] km_query+0x11c/0x210 [ 336.473079][ T7501] xfrm_state_find+0x3c07/0x5450 [ 336.478025][ T7501] xfrm_resolve_and_create_bundle+0x768/0x2f90 [ 336.484198][ T7501] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 336.489819][ T7501] page last free pid 9029 tgid 9025 stack trace: [ 336.496326][ T7501] __free_frozen_pages+0xc71/0xe70 [ 336.501456][ T7501] __slab_free+0x326/0x400 [ 336.505878][ T7501] qlist_free_all+0x97/0x140 [ 336.510478][ T7501] kasan_quarantine_reduce+0x148/0x160 [ 336.515948][ T7501] __kasan_slab_alloc+0x22/0x80 [ 336.520824][ T7501] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 336.526739][ T7501] __alloc_skb+0x112/0x2d0 [ 336.531206][ T7501] alloc_skb_with_frags+0xca/0x890 [ 336.536336][ T7501] sock_alloc_send_pskb+0x857/0x990 [ 336.541560][ T7501] __ip_append_data+0x2cff/0x40d0 [ 336.546604][ T7501] ip_make_skb+0x1de/0x3f0 [ 336.551058][ T7501] udp_sendmsg+0x1925/0x2300 [ 336.555701][ T7501] __sock_sendmsg+0x19c/0x270 [ 336.560474][ T7501] ____sys_sendmsg+0x52d/0x830 [ 336.565258][ T7501] ___sys_sendmsg+0x21f/0x2a0 [ 336.569977][ T7501] __sys_sendmmsg+0x227/0x430 [ 336.574663][ T7501] [ 336.576991][ T7501] Memory state around the buggy address: [ 336.582623][ T7501] ffff8880585bb980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.590696][ T7501] ffff8880585bba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.598871][ T7501] >ffff8880585bba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.607027][ T7501] ^ [ 336.613701][ T7501] ffff8880585bbb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.621766][ T7501] ffff8880585bbb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.629831][ T7501] ================================================================== [ 336.659727][ T7501] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 336.666991][ T7501] CPU: 0 UID: 0 PID: 7501 Comm: kworker/0:19 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 336.679204][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.689298][ T7501] Workqueue: events l2cap_chan_timeout [ 336.694811][ T7501] Call Trace: [ 336.698166][ T7501] [ 336.701104][ T7501] dump_stack_lvl+0x99/0x250 [ 336.705735][ T7501] ? __asan_memcpy+0x40/0x70 [ 336.710354][ T7501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.715573][ T7501] ? __pfx__printk+0x10/0x10 [ 336.720184][ T7501] panic+0x2db/0x790 [ 336.724099][ T7501] ? __pfx_panic+0x10/0x10 [ 336.728529][ T7501] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 336.734434][ T7501] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.740872][ T7501] ? print_memory_metadata+0x314/0x400 [ 336.746360][ T7501] ? __mutex_unlock_slowpath+0xd4/0x700 [ 336.752007][ T7501] check_panic_on_warn+0x89/0xb0 [ 336.756973][ T7501] ? __mutex_unlock_slowpath+0xd4/0x700 [ 336.762543][ T7501] end_report+0x78/0x160 [ 336.766801][ T7501] kasan_report+0x129/0x150 [ 336.771337][ T7501] ? __mutex_unlock_slowpath+0xd4/0x700 [ 336.776902][ T7501] kasan_check_range+0x2b0/0x2c0 [ 336.781855][ T7501] ? process_scheduled_works+0x9ef/0x17b0 [ 336.787583][ T7501] __mutex_unlock_slowpath+0xd4/0x700 [ 336.792990][ T7501] ? kasan_quarantine_put+0xdd/0x220 [ 336.798407][ T7501] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.803659][ T7501] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 336.809659][ T7501] ? kfree+0x18e/0x440 [ 336.813752][ T7501] ? _raw_write_unlock+0x28/0x50 [ 336.818702][ T7501] ? l2cap_chan_timeout+0x1ac/0x390 [ 336.823911][ T7501] ? process_scheduled_works+0x9ef/0x17b0 [ 336.829650][ T7501] process_scheduled_works+0xade/0x17b0 [ 336.835235][ T7501] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.841236][ T7501] worker_thread+0x8a0/0xda0 [ 336.845853][ T7501] ? __kthread_parkme+0x7b/0x200 [ 336.850981][ T7501] kthread+0x70e/0x8a0 [ 336.855065][ T7501] ? __pfx_worker_thread+0x10/0x10 [ 336.860191][ T7501] ? __pfx_kthread+0x10/0x10 [ 336.864813][ T7501] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.870034][ T7501] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.875245][ T7501] ? __pfx_kthread+0x10/0x10 [ 336.879867][ T7501] ret_from_fork+0x3fc/0x770 [ 336.884559][ T7501] ? __pfx_ret_from_fork+0x10/0x10 [ 336.889681][ T7501] ? __switch_to_asm+0x39/0x70 [ 336.894486][ T7501] ? __switch_to_asm+0x33/0x70 [ 336.899276][ T7501] ? __pfx_kthread+0x10/0x10 [ 336.903882][ T7501] ret_from_fork_asm+0x1a/0x30 [ 336.908681][ T7501] [ 336.912041][ T7501] Kernel Offset: disabled [ 336.916384][ T7501] Rebooting in 86400 seconds..