last executing test programs: 1m4.22101375s ago: executing program 3 (id=1566): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0x4) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000280)=0x925c, 0x4) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) (async) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001c00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r7}, 0x10) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000018}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}}}], 0x20}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200)=0x1, 0x4) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) 1m0.131083362s ago: executing program 1 (id=871): r0 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f2ffffff000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0)="7684f4dd3a495165d1543c7dfb0d2e5f3c8de1873cf2b8c7b8a7a2339f66de0000005d26a24d2f6f90e88708670231dd1e8909f2d99b6888ada062bd6403ba699c87cb3a06b03893dbb8f3bbb12e2d088877b6f96e9d288188a32af09b28123461d28fb5a4bcca618e25ae7bdbcfaa2d56745dc4661253569a6a75fdf1bbb726a98733e314977332c68c80d09cf63c80d79566f5bb3dc4b819367bfa00163223610475338fa954fe9307dd934c77ac44ff3b7c4d5636ef13d3bf7d0e32c91eb5e80c1babf570e43e28aeb6bf928ce039eb78dd9615e0615bd88e3c57cae274d08fc34b4b032ea3809cd51d4b4f1767", 0xef, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f0000002a80)=""/4098, 0x1002, 0x0, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x407ff, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000680)=ANY=[@ANYBLOB="22dd6fc97c3ed99cce0b20aaea77b50a82e6dcc8e445db6e9ab583b832ac1b400641105c08003aabda35d3991bf6943f9ad534a720bd875461c78654ea4df10acc38ca0da80bc6231f5b06b79bebe25a1e9437a220f4d7a6845aee40849601eda3ee768edd264079e1f324bbfc67a1972eebf838c0bd93bfb92fd681d169614c96a475601cbdff3056ce", @ANYRES16=r10, @ANYRES64=r11, @ANYRES32=r11, @ANYRES8=r1], 0x1c}}, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000480)="7877ee07b9416efc2d1983c287b61464dd387a8c5761f7191d7ff21b83b5929a130ffe8c342ab02db921b1daa3c215d87f1db00b52", 0x0}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r13 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r13, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) 51.529157077s ago: executing program 3 (id=1566): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0x4) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000280)=0x925c, 0x4) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) (async) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001c00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r7}, 0x10) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000018}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}}}], 0x20}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200)=0x1, 0x4) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) 50.011047599s ago: executing program 1 (id=871): r0 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f2ffffff000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0)="7684f4dd3a495165d1543c7dfb0d2e5f3c8de1873cf2b8c7b8a7a2339f66de0000005d26a24d2f6f90e88708670231dd1e8909f2d99b6888ada062bd6403ba699c87cb3a06b03893dbb8f3bbb12e2d088877b6f96e9d288188a32af09b28123461d28fb5a4bcca618e25ae7bdbcfaa2d56745dc4661253569a6a75fdf1bbb726a98733e314977332c68c80d09cf63c80d79566f5bb3dc4b819367bfa00163223610475338fa954fe9307dd934c77ac44ff3b7c4d5636ef13d3bf7d0e32c91eb5e80c1babf570e43e28aeb6bf928ce039eb78dd9615e0615bd88e3c57cae274d08fc34b4b032ea3809cd51d4b4f1767", 0xef, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f0000002a80)=""/4098, 0x1002, 0x0, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x407ff, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000680)=ANY=[@ANYBLOB="22dd6fc97c3ed99cce0b20aaea77b50a82e6dcc8e445db6e9ab583b832ac1b400641105c08003aabda35d3991bf6943f9ad534a720bd875461c78654ea4df10acc38ca0da80bc6231f5b06b79bebe25a1e9437a220f4d7a6845aee40849601eda3ee768edd264079e1f324bbfc67a1972eebf838c0bd93bfb92fd681d169614c96a475601cbdff3056ce", @ANYRES16=r10, @ANYRES64=r11, @ANYRES32=r11, @ANYRES8=r1], 0x1c}}, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000480)="7877ee07b9416efc2d1983c287b61464dd387a8c5761f7191d7ff21b83b5929a130ffe8c342ab02db921b1daa3c215d87f1db00b52", 0x0}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r13 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r13, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) 40.934073579s ago: executing program 3 (id=1566): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d57"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0x4) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000280)=0x925c, 0x4) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) (async) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001c00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r7}, 0x10) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000018}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}}}], 0x20}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200)=0x1, 0x4) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) 40.335939416s ago: executing program 1 (id=871): r0 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f2ffffff000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0)="7684f4dd3a495165d1543c7dfb0d2e5f3c8de1873cf2b8c7b8a7a2339f66de0000005d26a24d2f6f90e88708670231dd1e8909f2d99b6888ada062bd6403ba699c87cb3a06b03893dbb8f3bbb12e2d088877b6f96e9d288188a32af09b28123461d28fb5a4bcca618e25ae7bdbcfaa2d56745dc4661253569a6a75fdf1bbb726a98733e314977332c68c80d09cf63c80d79566f5bb3dc4b819367bfa00163223610475338fa954fe9307dd934c77ac44ff3b7c4d5636ef13d3bf7d0e32c91eb5e80c1babf570e43e28aeb6bf928ce039eb78dd9615e0615bd88e3c57cae274d08fc34b4b032ea3809cd51d4b4f1767", 0xef, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f0000002a80)=""/4098, 0x1002, 0x0, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x407ff, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000680)=ANY=[@ANYBLOB="22dd6fc97c3ed99cce0b20aaea77b50a82e6dcc8e445db6e9ab583b832ac1b400641105c08003aabda35d3991bf6943f9ad534a720bd875461c78654ea4df10acc38ca0da80bc6231f5b06b79bebe25a1e9437a220f4d7a6845aee40849601eda3ee768edd264079e1f324bbfc67a1972eebf838c0bd93bfb92fd681d169614c96a475601cbdff3056ce", @ANYRES16=r10, @ANYRES64=r11, @ANYRES32=r11, @ANYRES8=r1], 0x1c}}, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000480)="7877ee07b9416efc2d1983c287b61464dd387a8c5761f7191d7ff21b83b5929a130ffe8c342ab02db921b1daa3c215d87f1db00b52", 0x0}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r13 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r13, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) 28.587034244s ago: executing program 3 (id=1566): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0x4) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000280)=0x925c, 0x4) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) (async) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001c00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r7}, 0x10) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000018}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}}}], 0x20}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200)=0x1, 0x4) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) 27.237615699s ago: executing program 1 (id=871): r0 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f2ffffff000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0)="7684f4dd3a495165d1543c7dfb0d2e5f3c8de1873cf2b8c7b8a7a2339f66de0000005d26a24d2f6f90e88708670231dd1e8909f2d99b6888ada062bd6403ba699c87cb3a06b03893dbb8f3bbb12e2d088877b6f96e9d288188a32af09b28123461d28fb5a4bcca618e25ae7bdbcfaa2d56745dc4661253569a6a75fdf1bbb726a98733e314977332c68c80d09cf63c80d79566f5bb3dc4b819367bfa00163223610475338fa954fe9307dd934c77ac44ff3b7c4d5636ef13d3bf7d0e32c91eb5e80c1babf570e43e28aeb6bf928ce039eb78dd9615e0615bd88e3c57cae274d08fc34b4b032ea3809cd51d4b4f1767", 0xef, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f0000002a80)=""/4098, 0x1002, 0x0, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x407ff, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000680)=ANY=[@ANYBLOB="22dd6fc97c3ed99cce0b20aaea77b50a82e6dcc8e445db6e9ab583b832ac1b400641105c08003aabda35d3991bf6943f9ad534a720bd875461c78654ea4df10acc38ca0da80bc6231f5b06b79bebe25a1e9437a220f4d7a6845aee40849601eda3ee768edd264079e1f324bbfc67a1972eebf838c0bd93bfb92fd681d169614c96a475601cbdff3056ce", @ANYRES16=r10, @ANYRES64=r11, @ANYRES32=r11, @ANYRES8=r1], 0x1c}}, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000480)="7877ee07b9416efc2d1983c287b61464dd387a8c5761f7191d7ff21b83b5929a130ffe8c342ab02db921b1daa3c215d87f1db00b52", 0x0}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r13 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r13, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) 17.144229026s ago: executing program 3 (id=1566): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0x4) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000280)=0x925c, 0x4) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) (async) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001c00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r7}, 0x10) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000018}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}}}], 0x20}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200)=0x1, 0x4) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) 16.223756662s ago: executing program 1 (id=871): r0 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f2ffffff000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0)="7684f4dd3a495165d1543c7dfb0d2e5f3c8de1873cf2b8c7b8a7a2339f66de0000005d26a24d2f6f90e88708670231dd1e8909f2d99b6888ada062bd6403ba699c87cb3a06b03893dbb8f3bbb12e2d088877b6f96e9d288188a32af09b28123461d28fb5a4bcca618e25ae7bdbcfaa2d56745dc4661253569a6a75fdf1bbb726a98733e314977332c68c80d09cf63c80d79566f5bb3dc4b819367bfa00163223610475338fa954fe9307dd934c77ac44ff3b7c4d5636ef13d3bf7d0e32c91eb5e80c1babf570e43e28aeb6bf928ce039eb78dd9615e0615bd88e3c57cae274d08fc34b4b032ea3809cd51d4b4f1767", 0xef, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f0000002a80)=""/4098, 0x1002, 0x0, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x407ff, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000680)=ANY=[@ANYBLOB="22dd6fc97c3ed99cce0b20aaea77b50a82e6dcc8e445db6e9ab583b832ac1b400641105c08003aabda35d3991bf6943f9ad534a720bd875461c78654ea4df10acc38ca0da80bc6231f5b06b79bebe25a1e9437a220f4d7a6845aee40849601eda3ee768edd264079e1f324bbfc67a1972eebf838c0bd93bfb92fd681d169614c96a475601cbdff3056ce", @ANYRES16=r10, @ANYRES64=r11, @ANYRES32=r11, @ANYRES8=r1], 0x1c}}, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000480)="7877ee07b9416efc2d1983c287b61464dd387a8c5761f7191d7ff21b83b5929a130ffe8c342ab02db921b1daa3c215d87f1db00b52", 0x0}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r13 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r13, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) 7.143527561s ago: executing program 3 (id=1566): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0x4) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000280)=0x925c, 0x4) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) (async) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001c00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r7}, 0x10) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2=0xe0000018}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}}}], 0x20}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200)=0x1, 0x4) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) 6.218032003s ago: executing program 1 (id=871): r0 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f2ffffff000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0)="7684f4dd3a495165d1543c7dfb0d2e5f3c8de1873cf2b8c7b8a7a2339f66de0000005d26a24d2f6f90e88708670231dd1e8909f2d99b6888ada062bd6403ba699c87cb3a06b03893dbb8f3bbb12e2d088877b6f96e9d288188a32af09b28123461d28fb5a4bcca618e25ae7bdbcfaa2d56745dc4661253569a6a75fdf1bbb726a98733e314977332c68c80d09cf63c80d79566f5bb3dc4b819367bfa00163223610475338fa954fe9307dd934c77ac44ff3b7c4d5636ef13d3bf7d0e32c91eb5e80c1babf570e43e28aeb6bf928ce039eb78dd9615e0615bd88e3c57cae274d08fc34b4b032ea3809cd51d4b4f1767", 0xef, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f0000002a80)=""/4098, 0x1002, 0x0, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x407ff, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000680)=ANY=[@ANYBLOB="22dd6fc97c3ed99cce0b20aaea77b50a82e6dcc8e445db6e9ab583b832ac1b400641105c08003aabda35d3991bf6943f9ad534a720bd875461c78654ea4df10acc38ca0da80bc6231f5b06b79bebe25a1e9437a220f4d7a6845aee40849601eda3ee768edd264079e1f324bbfc67a1972eebf838c0bd93bfb92fd681d169614c96a475601cbdff3056ce", @ANYRES16=r10, @ANYRES64=r11, @ANYRES32=r11, @ANYRES8=r1], 0x1c}}, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000480)="7877ee07b9416efc2d1983c287b61464dd387a8c5761f7191d7ff21b83b5929a130ffe8c342ab02db921b1daa3c215d87f1db00b52", 0x0}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r13 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r13, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) 3.882282758s ago: executing program 4 (id=2014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xcc401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 2.484838697s ago: executing program 0 (id=2019): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xb, 0x6, 0x6, 0x80, 0x10003, 0x1, 0x200, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0x0, @void, @value, @value=r3}, 0x50) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1}, 0xffff6a2d}], 0x2, 0x40000000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="020300030e000000000700000000040002000100000000000000030d0000000005000600000000000a004e21000000042001000000000000000018000000000008000000000000000200090008000000e900000000000000030005000080000002000000ac1414000000000000000010"], 0x70}, 0x1, 0x7}, 0x0) sendmmsg$inet(r4, &(0x7f0000004600)=[{{&(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000540)=[{&(0x7f00000024c0)="5a9b7918ba05d94284e444798a70873d6740fbd40726c3582043b073f21533c3acb5d01572300357c07eed18bec1bf9d60ae8eda93b818671c72337a938cabc7dd73567e2405c967a2a04b17f7a4c5ee5d5ea51523ffc09262de24214b74c313f93abe7490ec180f2b332c2bf039ab38ec7db716d391aaf524c8ccc54f9a3ed3fa46a682aabd9b69451fbb0d8be2600fdd1111dde0c87a2f409ae442100470a3aeb7588a1768edb9ef91c99033d1c7985b7e5dcda1c6e1e7d5c51a178dc4bf81a90525b068254f395cd4743ca2dd1974b4437879dc1aea7cdf7155219b35453e61d55b0687c6ed49ae8fc5c99e75682e0af2654c8e056ed94da7577ce1d25d3d6bfde25173c59b365618969718ce80d477586932f490b6b2279e7d5f0203b777df306da42029824ea5cb16c21a52e52c25e260bf8bb25d5e090d59a1d302996cabeff28c55834f538ccc7eb0697109f4242d735c1a7b5b30119397ac0f3f946f82affa37a80b66ee29b232ce0a95561e26e6348bf71e57945e19dda7a6d799db6bdc6475801a902862940d9f0fab8a8eaccc1fdcf2b91435306eb7126809a4b308fd17f6bfd9e4241e22c8a5726ad6da3ee0ce2e6103355eae713eb55d75c16971dc8bacb454afaa0fee3059ac2ba81d39528c71250805509be358072a9efa02e9340c6305f2e77b444df3843c2cab4e88800a7a35bf0dcc24a467a17e0f92a8cf7b05c9cb40726b210c19adccafac172fe6a02aac443a9ad5f9e43734d0b57ac9f78289cb66fb46e2077a647af6fc5380916c0d622347f7a4b23faa29cd9dd91f75347ead974370e7638be83441e0bd639dc8e98aebe7a3739daa309dafa9638f9d462d62f3bddf14560d221c977dfcaf7e83025e6b638631d92624e43e5803d4f7fca7bcfb7618124c319c696674fa89f9b6f72e9981ac9a960fa12bbb726701034a44e1bc20b7d57b86afb72ef70212ad133bf57f6b46024343131a357dd014fc555f1b79136091da9c2eee09aeaee628f25f3e5e4ad372dcb47ff4eafea364dfd4362ec1714b6f56f1e3e98badd714fa11ed2c80222816298f0389accf5905e10b21e32378fd5eee349a7346a8ed262d49a68fac2748303c23a6718b30561d55970950fb7e976e493586144d4569be42715fa3b5e2dbb73728169ac0355e28db98f3d34f6df6866a7cdd1f91fba7cc85c1c3841c7191183fe06cba917f4cbb46ee3caf26223ebc0a34c3fe1e8321bcf9d03abe19a5e57d91b60f25d40f5c2c1d22a42ce1b90951489c4077ca6a7ee535b687591a5a7f266bed049f03d21fea7c860c7a7dec0e781847781234b09695746064bf3cec324b6c2795ef4b9d7ab10ce4bb465b6d95f934114da97154a4b649884c7e730e727a6f82430588e5198a4b9d737ace87ac67807bc42a7e79ab7084bbc7ef43f6a2ba27685aec8e3fb6d52bf1d0c610a4414adecf016e60860d3ad40f6d241881276e9da3920f34af19c9b2d9fdfb3e5737366095d0d21aa96aa9a9c6bc11564b1a7ac75060240f502e9ecba677528b312628aabc6442460ebede3356cdb3e11c919bed0bfaedb23acb22d14e8d03f687929d31edac1b67a9ae325c709a81eac1f738a0416994b4994d193f829ba0ba5f87ecf8f6300622278fee982a85c774d85ebc91f2c60d14a389f31ab4641e9c8a42e3b15422467fc036bdb26610f8622160ab2349e528bc984034dca2c2587c1c0188598e442d6c484df8350f4326aae29f6e1f59f68c0274299bb2f14547f48c20beab0ceba979826f134042cb0cfc7b21437621a77f9ce67aafbbc89d8310fbcc1d40d62089e4905163e867e64f3257a6848df2e937eb309a0990332ae7387913020bcb929bbde39642bc12185c4512ca14eadf89bad0be0d497edff57e83a2bb706caa39ecd2e76429afb9d2f774b34750b7ae451011a0149fe95439f02bde7b7fcf887f40959f61f86c78dd3a2b3fb7cfc1d85e384cbdc603c965c09600812f406e2756b7da1d588f8a9e2651839517be150e91f13b80506b868cfed4346a5fc8386e125708bb6f0fb5dd3880902ea381c31e0eb4c6cb7b7cacef16371aa1de6be0e74803abde5439041761dbfd629a933e68b4183cc8746a1ada3b24e0b434e80b60d0c0f6805a5e523a4a5fa273b28cabb0abee7b996ceb994cbd49f90af33a8bef33dc30337bef0f2088da7042473844d6c56c265e425e48a3ae42bdc851db96db9b5a8c90e7e492dcb19df5aaf383844ed11a80d76de1df2f8ce7e3f27a4a8faf0a08347c2e910545cf3874255ce2d9c797c72c88bc901a7f80e29bb6fe261fb91ca6971edbe9ae57795272524d18236298b4efaf6913d26a741c916375186591aa79e1b6676fca867717e11afcf790ce4b650708bc243501f1b283a9bec27b7a50d700fa5f83c1533fdff1c6054cd4325cc492d4de405d43e12f0823cbd46e6f3a765d74fed8ed477000f811da7fad497cfc9cf8f794bca0b81b3b854e92896f6fd740ccb60d949fa2affd3e70c5dad16de46380747412b659e7eae45764e0cef72bafb2571e52aa45206b59b617837017f07471675792d27805f671cba0c7880431b47456786d8bca58245d3671358c689eceb62c9ad5d724a52915699f8f70f84b9defebae23ab3b89630536f16b372ea7eeaf2be95aa2c9e03440439db8f9507b577eeba4f700cfb33a423a8c1908f008d632286b1dd83eb1cb855458e4b6fd559785f12526ebc6b92f5b7760f8ef4c7b37eeffe54fbf04fbb99d8a69a1cabb1e4c6b316bdd07f96666cbf97570c08b6277159949d7fb446bbd6d45d5d45372f264f3cc4ab93a7d0c6ec0f28cadcda886342378c73daedd7082285148a60300561af4888233e3f23bb1524364a01a61ab5790383d9a9374d7195c07a834ed2976a0d38f29514b37e9158d651b83ef82bdf72b2e030d68e25fc249c596fecb73c3cec9ab6c6ef3ad7567900409097ca141fa29de7052a8b0ab0c594542d1054c5f1e29147ed42037c619dca1144f3b5f74e509db84fbe1f53494573fc1e19f135fda699e3b09e27d39227b7988747e6577d999dd3348a6438d7b8b1ed068b4637d98be16bb48ce76335cbf08d9a7b6d17e2d0466d155b3d2aaaca9a6070f02f780f76680042b1ff87920157f64303991e8a609fb4bea5dea951c64f2182f8d67228053fe48a0504db6be0b8569376c0762a1ce079eb42d570f6fe4d8571e5747893d9b92424eb4c5bf8a7e1fe217f269075ed618bd84249575e56f14bedef1f261a5b714fa91da72669d1fa9dbdb91b1bb4a7e14ed6d337a3f0ce062d48bbd65df31f5031c4b7e69da709cc872df7bc810bcc55d670c270fe8fab6238e797853e10db1367310f458ade97d1f20133feab0e0929d27342e0721ab714082e246660e263c282e2f4002608e4a6ec331f99087d041c1310d82e774abed1b411079af1aeb30114bbf13fe68eab2fd535cd0523233c559ec926c749f48c55e98499f026e6e18b38a7c903c36afe29a113e3ea9e52f234fdaa7f4ff2cba63b3385e80b4e96692aef34cba1025d856f00b2120953e55a9be1b21de02193c13636a1f35c29fe893f32d8a7be7866be744d1466ad37e783d81e20252b07e5d15e8c1acd210b6739041f5c57d8afc41dfe5847f6a536a763e00ecf5d54630d3e3f47d2f4e8316ae17c9cd28ea3fe8ffff6d0fa233439a02aabc41ca29eeeb03c2e46f76e0d1e2044447904bff62c13b3e1ac3a9da23ab7245eed00684cb7109f026530d3cb68a8370bcef726b171daf118cc37165035d3955403696119fc4aa53e16d8fa5bc5e517bad3025baf84f05b0f725beb2baaa43caa063f36fbe0bc130f4ce59a92f715b48432e0cc9338e7cead9add3a813e7774a9dae6c71c5d08defa47bb1519e844fce5e59bd242d22a834ec28b7c3f78e8343c6f6998f478bb1f62758c0849d2efc6c6406ea97115ed844ed0a21f0b3f0a34f6449e05d25933011ee54d33eebcbe4f942ac01faccd094dd7918fa3ebbb7bf6fdc2c53b012a66033f81411e68dd4bd7586a13c438c043b584c2cea36b025e4b5b67dfb7ffaafccd8568b66e9bc813695ed0bf68fe8796a23a4fc62e0e730b81c02ccb5e17547304ffdf9b59b3cc962863f7fab79ea6891b2cc01e4bef80109975d2922edab24fe11e61781d74435523d718bb4ffec106073c6c1e857b57924aee3ba5735a3f305283e719d1193c85b793eb1584c1ca888e150080e43590f03f86f785c14ebdfffbd6cbcf439b73a24a078cdee6ed2541bfbb2d67541d96fc511006bdca598d80fc475fca166dde3be948e860a98f8323eae49842813b6d0f35558f7735f375a2337dc36aa235e210956d9e1d91c93d576cb232c937d231bee34d3e9a0012786344715d799af27214a6e6229e763d6eafd513e1934a725e27d7c90a77f3f5cc8189fc36b61add699b9d8e340f8e206659711a99df63a6835beb778ef5da60e468e52e451cf72965bc0fa12c8493fddb62616d47d630806b20863723555f1a9bd4c8530fb4f68d4a718d264851362d6aa236b21884ac47147e00f7e3bb4a3ebefd245e23ca1b93ababd6c3f2eb9baf6de3120ece84bc1bd050e494a453623bd2698af345d44c4cedd7fbfe8e2e473319bf08c81de21f897f18f64d60fdf8e337ca8fd68427b31a02aeb73422526d4f49e8907e934af5b1021ad5ff882f5c9a4b962327ca22d58841119378365c1a7edb345fde4afdfbe0bd66ba70546539fed20c51a47d47e320173ea4d8e910ece23d0bb2070cd9b913eab651164fcb92eef87e124aafe9ed2d6214fe2827b3f919d350d05aae45c159e79e81d21c39d1e76367785667ddbe1054c2e016379ea2a76a223086bdf8f8a2a56ca9c2665795ce63eea1e2be664f1dcc3288f04af78e2f6e51698b21b32008eb95dcf4f60050e12a2827af787710746a7dccd1a74cb9d1c55127741441d89e9f2d7c038f40f2e01272e2f19a184888b1f8b4ec9f6be218c4fd865b0191c3dc5d774dce90ad08f9830add6a302b5662eea2e00f08b0fcb9e94ef6ebe519931aac4d9ce2e995bcac7fac6c778864542236c9aec1050cf12712d9ab23a8ae68767880a89afdf79ac86ed70b1bad9e996f82f77e474f3b525f4091b78f1bc1558a1c785eab96a36a7a73294311d11347974fd3ff4976f94b1612e352aa8d31154a3c977a7d9f6da76ecc16ce93c5408bb37a7d0c2fefbe031f4ec019ab2fafafffdf48102eb037a12b1abea39e0048fb7ac75c52cc50dc94f47e48f28385f8d89d45a40b93784eed5aa0e84da0414c8089a4791400f48420b74a9b42c17edc2d93d045e54bc781ad9e3aba8f7c810b7b4e4aaede9898234ede5273d02ac7da98a3b9383fe831fe768ded8d509600082f1e4ddaad962fc6ca63abb9cce5eedc727ad0efaac3ca52efabb70d9d2ab5f0ad3eb683118fde85451a9f91ab2b0c448024832b5e53147748d380adccf107f4eb464e747f26c9453ab487679f190dcd2818787944ef35381e8a29c0684ba6cedb5828c3bc710df3e2b45303a7d65cc6c459a225c38778d38386bc360b1cdd62b9666bc01fb0c9a9dc72a31be51991b131392a34ed508529acd51b907486f312cfc73e7411094f9d19ee26ccc5a067b95ce6211862a287e3cb9d628083927d63263ab233cc33476168c0bb7142ebf602966828265b203ad67b842eb2e1ba9f3cfc7266c05c2cea6a2917c06b313d7589ae20aae47144f02de1b2bcf4668e9116f864e632288adfc01dd4df5718724920110aa41acfa39", 0x1000}, {&(0x7f00000034c0)="49bc35", 0x3}, {&(0x7f00000001c0)="2efcdd7d0a1eeb61954f2182e5f004df3be115eeff2ff51e65b4ff6ff5f216a7f82b4df2b7e47484025076aea4c1f9b6ca55dd7315ed0d2eac34503904ebc28a711a12b8af7590dda7e1fd63405ddab0b102ec8f8988b0e2dcfa59", 0x5b}], 0x3}}], 0x1, 0x4000004) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x7, 0x8000, 0xc, 0x8, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x67, 0x0, 0xec, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x13}, {[@noop, @generic={0x86, 0x9, "357e3a64cef4fa"}, @noop, @noop, @generic={0x83, 0xc, "0ed32b7553c4d2c6d115"}, @lsrr={0x83, 0x17, 0xc2, [@remote, @multicast1, @private=0xa010102, @broadcast, @rand_addr=0x64010102]}, @rr={0x7, 0x27, 0xa7, [@remote, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x2c, 0x48, 0x1, 0xf, [{@broadcast, 0x76c2}, {@local, 0x8000}, {@remote, 0x101}, {@remote, 0xf}, {@private=0xa010100, 0x95}]}, @lsrr={0x83, 0x27, 0xf, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @rand_addr=0x64010102, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1]}]}}}}}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac14142b0c0001800800"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="060000f0170032a42663f3803d5b000000000000", @ANYRES32, @ANYRES16=r6, @ANYRES32=r6, @ANYRES16=r7], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x2) getsockname(0xffffffffffffffff, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100081050000000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) 2.439275465s ago: executing program 4 (id=2020): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0xb, 0x0, &(0x7f0000000600)="9b72258000000000000000", 0x0, 0x10000006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000800)={r1, r1, 0x6fb, 0x95, &(0x7f0000000740)="d5143c9b513532fe0a0329c00db5f9e8746a5479b4b4f3180d95fc7f4113e35f98bdb00145ba1212bff51149052ee4bc24a4308643556f0ad6a61d81e5edaec780ea1cf1cbf38e638189e31de81ce5feff53b7055e748d4381318b5f194632ab971757831765582506fe92d1741a0226c084ec6e555f0a4784c1fc1ab60b2d3f6dc445460ee2286eddc6d764e63db4f4d728e1c988", 0x5, 0x8, 0x40, 0xd28f, 0x6, 0x3, 0xf11, 'syz0\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000fffffeff000000000101000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000d7d90000650901000000000066000000ffffff80180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000800000000b5030000000000008500000076000000b7000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25a, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0xfffffff6, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}}, 0x4044) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002040)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x95, 0x6, 0x20000000, 0xfffffff9, 0x5}, 0x8, 0x4, [{0x7, 0x1ff, 0x4, 0x323, 0xa, 0x3ff}, {0x48, 0x3ff, 0x4, 0x4, 0x4, 0x2}]}, [{0x9, 0x1000, 0x421, 0x873, 0x5}, {0x2, 0x0, 0x7, 0xde, 0x1, 0x10ac}, {0x9, 0xa, 0xffff, 0xffff7fff, 0x8, 0x7}, {0x1, 0xffff, 0x0, 0x76f2, 0xfffffffb, 0x8}, {0x5fed, 0x9, 0x7, 0xffffff70, 0x31a, 0x4}, {0x1, 0x0, 0x4f, 0x0, 0x10000, 0xb3}, {0x3ff, 0x0, 0x7, 0x3157, 0x0, 0x1000}, {0xf26, 0x8, 0x1, 0xc7, 0xc6a, 0x4}, {0xdb8a, 0x2c3eb87, 0x6, 0x9, 0x40, 0x4}, {0x1ff, 0xb, 0x7, 0x5513, 0x7, 0x6903}, {0x10001, 0x3, 0x1, 0x557, 0xfffffffd, 0x5}, {0x9, 0x80000000, 0x91, 0x1, 0xa}, {0xfb4, 0x40, 0x80000001, 0xd159, 0x4, 0x4}, {0x64, 0x87, 0x1, 0xa2d, 0x48, 0x438c}, {0x62, 0x4, 0x7fff, 0x0, 0x5, 0x6}, {0x10, 0x0, 0x10001, 0xc, 0x916f, 0x3}, {0x6, 0x2, 0xf95, 0x3ff, 0x2, 0x80000000}, {0x5, 0x1, 0xffffffff, 0xffff14eb, 0x4, 0x7}, {0xc4, 0x8, 0x1, 0x0, 0x2, 0x98e1}, {0x7f, 0x405d, 0x200, 0xe, 0x9, 0x10000}, {0x7ff, 0x6, 0x6, 0x8, 0x7, 0xf}, {0xfff, 0x4381, 0x0, 0x8, 0x6, 0x80}, {0xe8c, 0x0, 0xffffffff, 0xfa, 0x80000000, 0x10001}, {0x6, 0xfffffff7, 0x9, 0x9, 0x5, 0x10001}, {0x7, 0x4, 0x6, 0x5, 0x6, 0x200}, {0x9, 0xe, 0x2, 0x5, 0xd1, 0x6}, {0x3, 0xdc, 0xf4, 0x3, 0xb, 0x5}, {0x9, 0x2, 0x3, 0x9, 0x6, 0x3}, {0x4, 0x9b7, 0xffff1f10, 0x4, 0xf21, 0x74}, {0x3, 0x3, 0x15, 0x6, 0x8000, 0x3}, {0xfffffffe, 0x0, 0x9, 0x91b, 0x2, 0x1}, {0xc15, 0x80, 0x4, 0x8, 0x80, 0xe}, {0x8, 0xb432, 0x3, 0x0, 0x5, 0x8}, {0x1000, 0x6, 0x5fca, 0x9, 0xffffff31, 0x100}, {0xfffffff9, 0x8, 0x1, 0xfffffffa, 0x5, 0xad7e}, {0xfffffff5, 0xc6, 0x8, 0xfff, 0x7ff}, {0x7, 0xeb, 0xd8, 0x9, 0x80000001, 0x1}, {0xd107, 0x6, 0x8, 0x0, 0xb, 0x844e}, {0x0, 0x2, 0x2, 0xda, 0x100, 0x8}, {0xfb57, 0x10, 0x8, 0x3ff, 0x80, 0x6aec45df}, {0x2, 0x3ff, 0x6, 0xe403084d, 0x7, 0x9}, {0x5, 0x3, 0xed7, 0x10001, 0x800, 0xb}, {0x40, 0xeb, 0x381, 0x7fff, 0xfffffff8, 0x8}, {0x7fff, 0x8000, 0x3, 0x0, 0x7fff, 0x353a}, {0xe16, 0x2, 0x7fffffff, 0x0, 0x3, 0x1}, {0xfac, 0xff, 0x1, 0x0, 0x4113f076, 0x1}, {0xfffffffa, 0x7, 0x7, 0x0, 0x0, 0x7fff}, {0xfff, 0x3, 0x4, 0x62, 0x8, 0x5}, {0x9, 0x2, 0x1, 0x1, 0x2, 0x7}, {0x8, 0xba, 0x6, 0x4, 0xb16, 0x3}, {0x8de, 0xfab0, 0x0, 0x0, 0x1, 0x2}, {0xc21, 0x0, 0x1ff, 0x4, 0x1, 0x2}, {0x1ff, 0xbbda, 0x3ff, 0xb9, 0xa, 0xd}, {0xfff, 0x0, 0x703, 0x9, 0x7, 0x9}, {0x7, 0x106d, 0x9, 0x2, 0x7, 0x9a3}, {0x6, 0x7, 0x4, 0x4, 0x8, 0x3}, {0x32c, 0x8, 0xe, 0xfffffffc, 0xa6, 0x8}, {0x80000000, 0x7ff, 0x9, 0x800, 0xa, 0x5}, {0x9, 0x9, 0xd, 0x10000, 0x20000, 0xb8e8}, {0xffffffff, 0x8, 0x10, 0xffffff2d, 0x1, 0x5}, {0x1, 0x8, 0x172, 0x2, 0x3, 0x7fff}, {0x8, 0xecc8, 0x0, 0x760, 0xecf, 0x30}, {0x8, 0x2, 0xffff, 0x40000000, 0x8, 0x7fffffff}, {0x9, 0x6, 0x5, 0xfffffc01, 0x7cda259a, 0x10}, {0x3, 0x2, 0xfffffffb, 0x0, 0xd00, 0x2}, {0x4, 0x6, 0x9, 0x4, 0x55, 0x7}, {0x7, 0xe7, 0x8, 0x6, 0x0, 0x8001}, {0x2, 0x100, 0x6, 0xc9, 0xffffffff, 0x100}, {0x4, 0x1ff, 0x3, 0x4, 0x8, 0x5}, {0xfffffff7, 0xb, 0x3, 0x3ff, 0x60, 0x100}, {0x1, 0xb, 0x8, 0x7f, 0x10, 0xfffffa51}, {0x1, 0x6, 0x101, 0x10001, 0x5, 0xffffffff}, {0x401, 0x2, 0x1, 0x6, 0x2, 0x4}, {0x7, 0x3, 0x54e, 0xcd0, 0x5, 0x2}, {0x5, 0x1, 0x9, 0x7, 0xfff, 0x40ef}, {0x10000, 0x4, 0xfffffff9, 0xd4, 0x4, 0x3}, {0x3, 0x42, 0x6, 0x4, 0x5, 0x1}, {0x3, 0x4, 0x7f, 0xfffffffb, 0x9, 0x1}, {0x8, 0x1, 0xf2e, 0x1f6d, 0xfffffffe, 0xf}, {0x9, 0x71, 0x9, 0x297b, 0x3, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x5}, {0x3, 0x6, 0x3f, 0x4, 0x1, 0x7fffffff}, {0x8, 0x4, 0x3, 0xf1, 0x65}, {0xffff, 0xb, 0x10000, 0x1, 0x401, 0x51a}, {0x7, 0x10001, 0x93, 0x2, 0x10}, {0x3, 0x1, 0x2, 0x1, 0x0, 0x1}, {0x3, 0xa, 0x80000000, 0x9, 0x2, 0x3}, {0x4, 0x1, 0x837, 0x101, 0x9, 0x4}, {0x2f86, 0x6, 0x7, 0xff, 0x1, 0x2}, {0x4d797f75, 0x24, 0x5, 0x7, 0x10, 0x8}, {0x7fffffff, 0x100, 0x9, 0x91e, 0x5, 0x8}, {0xaadb, 0x7ff, 0x1, 0x4, 0xd6, 0x80000001}, {0xffff, 0x10001, 0x3ff, 0x8, 0x81, 0x9}, {0x2, 0xfffffff7, 0x7, 0x71, 0x2, 0x800}, {0x8, 0x5, 0x3, 0xfffffffb, 0x80, 0xb}, {0x5, 0xf43, 0x2, 0x9, 0x80, 0xfffffffa}, {0xbff, 0x8, 0xfffffff7, 0x10001, 0x1, 0x5f}, {0x6, 0x8, 0x5, 0x3, 0x1, 0x6}, {0x10001, 0xa67, 0x752, 0x6, 0x1}, {0x3ff, 0x7, 0x5, 0x7fff, 0x0, 0x78}, {0x1, 0x8001, 0xffffffff, 0xf2d, 0x3, 0x400}, {0x1ff, 0x100, 0x5, 0xee1, 0xc, 0x5}, {0x10, 0x400, 0x4, 0x1000, 0x1, 0x600000}, {0x8, 0x3, 0xa149, 0xcad, 0x0, 0xa}, {0x8, 0x5, 0xffff, 0x4, 0xdac2, 0xffff}, {0x7fff, 0x5, 0x9759, 0xfe9, 0xff, 0xe}, {0x1, 0x4, 0xfffff818, 0x100, 0x400, 0x8}, {0x2, 0x80000001, 0x101, 0x10000, 0x3, 0xffffffc0}, {0x3, 0x5, 0x1, 0x6, 0x8, 0x4}, {0x8, 0x4, 0x8, 0x8001, 0xf, 0xd2}, {0x92, 0x2040cc7c, 0x8, 0x7fff, 0x8, 0x2}, {0x6, 0x8001, 0x2, 0x1ff, 0x81, 0x5}, {0xffffffff, 0x2, 0x8, 0x6, 0x7, 0x2}, {0x5, 0x6, 0x8, 0x1, 0x40, 0x5}, {0x5ea, 0x2, 0x4, 0xfffffff2, 0x6, 0x10}, {0x7, 0xf, 0x6, 0x7f, 0x4, 0x612}, {0xc, 0x9, 0x401, 0x8, 0x7, 0x6}, {0x7, 0x9, 0x6, 0xa, 0x3f6, 0x1}, {0x9, 0x5, 0x0, 0x0, 0x0, 0x401}, {0xc9, 0x3, 0x101, 0x0, 0x4, 0x8}, {0x2, 0x1, 0xffffffff, 0x3, 0x80000000, 0x10000}, {0x3, 0x8001, 0xb, 0x40, 0x5, 0x7}, {0xe5, 0x8, 0xffffffc0, 0x1, 0x1, 0x3}, {0x9, 0x55c2, 0xf5a9, 0xf, 0x81, 0xfff}, {0x8, 0x1, 0x7f, 0x0, 0x3, 0x8}, {0xc5c, 0xf95c, 0xc5, 0x0, 0x4, 0x1}, {0xffff0000, 0x8, 0x4, 0x4, 0x8001, 0xf0f}, {0xf, 0x8, 0x2, 0xfffffbff, 0x5, 0x4}], [{0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x4}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2}, {0x4}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x3}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1}, {}, {0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0xb, 0x0, &(0x7f0000000600)="9b72258000000000000000", 0x0, 0x10000006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000800)={r1, r1, 0x6fb, 0x95, &(0x7f0000000740)="d5143c9b513532fe0a0329c00db5f9e8746a5479b4b4f3180d95fc7f4113e35f98bdb00145ba1212bff51149052ee4bc24a4308643556f0ad6a61d81e5edaec780ea1cf1cbf38e638189e31de81ce5feff53b7055e748d4381318b5f194632ab971757831765582506fe92d1741a0226c084ec6e555f0a4784c1fc1ab60b2d3f6dc445460ee2286eddc6d764e63db4f4d728e1c988", 0x5, 0x8, 0x40, 0xd28f, 0x6, 0x3, 0xf11, 'syz0\x00'}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000fffffeff000000000101000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000d7d90000650901000000000066000000ffffff80180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000800000000b5030000000000008500000076000000b7000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25a, @void, @value}, 0x94) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0xfffffff6, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}}, 0x4044) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002040)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x95, 0x6, 0x20000000, 0xfffffff9, 0x5}, 0x8, 0x4, [{0x7, 0x1ff, 0x4, 0x323, 0xa, 0x3ff}, {0x48, 0x3ff, 0x4, 0x4, 0x4, 0x2}]}, [{0x9, 0x1000, 0x421, 0x873, 0x5}, {0x2, 0x0, 0x7, 0xde, 0x1, 0x10ac}, {0x9, 0xa, 0xffff, 0xffff7fff, 0x8, 0x7}, {0x1, 0xffff, 0x0, 0x76f2, 0xfffffffb, 0x8}, {0x5fed, 0x9, 0x7, 0xffffff70, 0x31a, 0x4}, {0x1, 0x0, 0x4f, 0x0, 0x10000, 0xb3}, {0x3ff, 0x0, 0x7, 0x3157, 0x0, 0x1000}, {0xf26, 0x8, 0x1, 0xc7, 0xc6a, 0x4}, {0xdb8a, 0x2c3eb87, 0x6, 0x9, 0x40, 0x4}, {0x1ff, 0xb, 0x7, 0x5513, 0x7, 0x6903}, {0x10001, 0x3, 0x1, 0x557, 0xfffffffd, 0x5}, {0x9, 0x80000000, 0x91, 0x1, 0xa}, {0xfb4, 0x40, 0x80000001, 0xd159, 0x4, 0x4}, {0x64, 0x87, 0x1, 0xa2d, 0x48, 0x438c}, {0x62, 0x4, 0x7fff, 0x0, 0x5, 0x6}, {0x10, 0x0, 0x10001, 0xc, 0x916f, 0x3}, {0x6, 0x2, 0xf95, 0x3ff, 0x2, 0x80000000}, {0x5, 0x1, 0xffffffff, 0xffff14eb, 0x4, 0x7}, {0xc4, 0x8, 0x1, 0x0, 0x2, 0x98e1}, {0x7f, 0x405d, 0x200, 0xe, 0x9, 0x10000}, {0x7ff, 0x6, 0x6, 0x8, 0x7, 0xf}, {0xfff, 0x4381, 0x0, 0x8, 0x6, 0x80}, {0xe8c, 0x0, 0xffffffff, 0xfa, 0x80000000, 0x10001}, {0x6, 0xfffffff7, 0x9, 0x9, 0x5, 0x10001}, {0x7, 0x4, 0x6, 0x5, 0x6, 0x200}, {0x9, 0xe, 0x2, 0x5, 0xd1, 0x6}, {0x3, 0xdc, 0xf4, 0x3, 0xb, 0x5}, {0x9, 0x2, 0x3, 0x9, 0x6, 0x3}, {0x4, 0x9b7, 0xffff1f10, 0x4, 0xf21, 0x74}, {0x3, 0x3, 0x15, 0x6, 0x8000, 0x3}, {0xfffffffe, 0x0, 0x9, 0x91b, 0x2, 0x1}, {0xc15, 0x80, 0x4, 0x8, 0x80, 0xe}, {0x8, 0xb432, 0x3, 0x0, 0x5, 0x8}, {0x1000, 0x6, 0x5fca, 0x9, 0xffffff31, 0x100}, {0xfffffff9, 0x8, 0x1, 0xfffffffa, 0x5, 0xad7e}, {0xfffffff5, 0xc6, 0x8, 0xfff, 0x7ff}, {0x7, 0xeb, 0xd8, 0x9, 0x80000001, 0x1}, {0xd107, 0x6, 0x8, 0x0, 0xb, 0x844e}, {0x0, 0x2, 0x2, 0xda, 0x100, 0x8}, {0xfb57, 0x10, 0x8, 0x3ff, 0x80, 0x6aec45df}, {0x2, 0x3ff, 0x6, 0xe403084d, 0x7, 0x9}, {0x5, 0x3, 0xed7, 0x10001, 0x800, 0xb}, {0x40, 0xeb, 0x381, 0x7fff, 0xfffffff8, 0x8}, {0x7fff, 0x8000, 0x3, 0x0, 0x7fff, 0x353a}, {0xe16, 0x2, 0x7fffffff, 0x0, 0x3, 0x1}, {0xfac, 0xff, 0x1, 0x0, 0x4113f076, 0x1}, {0xfffffffa, 0x7, 0x7, 0x0, 0x0, 0x7fff}, {0xfff, 0x3, 0x4, 0x62, 0x8, 0x5}, {0x9, 0x2, 0x1, 0x1, 0x2, 0x7}, {0x8, 0xba, 0x6, 0x4, 0xb16, 0x3}, {0x8de, 0xfab0, 0x0, 0x0, 0x1, 0x2}, {0xc21, 0x0, 0x1ff, 0x4, 0x1, 0x2}, {0x1ff, 0xbbda, 0x3ff, 0xb9, 0xa, 0xd}, {0xfff, 0x0, 0x703, 0x9, 0x7, 0x9}, {0x7, 0x106d, 0x9, 0x2, 0x7, 0x9a3}, {0x6, 0x7, 0x4, 0x4, 0x8, 0x3}, {0x32c, 0x8, 0xe, 0xfffffffc, 0xa6, 0x8}, {0x80000000, 0x7ff, 0x9, 0x800, 0xa, 0x5}, {0x9, 0x9, 0xd, 0x10000, 0x20000, 0xb8e8}, {0xffffffff, 0x8, 0x10, 0xffffff2d, 0x1, 0x5}, {0x1, 0x8, 0x172, 0x2, 0x3, 0x7fff}, {0x8, 0xecc8, 0x0, 0x760, 0xecf, 0x30}, {0x8, 0x2, 0xffff, 0x40000000, 0x8, 0x7fffffff}, {0x9, 0x6, 0x5, 0xfffffc01, 0x7cda259a, 0x10}, {0x3, 0x2, 0xfffffffb, 0x0, 0xd00, 0x2}, {0x4, 0x6, 0x9, 0x4, 0x55, 0x7}, {0x7, 0xe7, 0x8, 0x6, 0x0, 0x8001}, {0x2, 0x100, 0x6, 0xc9, 0xffffffff, 0x100}, {0x4, 0x1ff, 0x3, 0x4, 0x8, 0x5}, {0xfffffff7, 0xb, 0x3, 0x3ff, 0x60, 0x100}, {0x1, 0xb, 0x8, 0x7f, 0x10, 0xfffffa51}, {0x1, 0x6, 0x101, 0x10001, 0x5, 0xffffffff}, {0x401, 0x2, 0x1, 0x6, 0x2, 0x4}, {0x7, 0x3, 0x54e, 0xcd0, 0x5, 0x2}, {0x5, 0x1, 0x9, 0x7, 0xfff, 0x40ef}, {0x10000, 0x4, 0xfffffff9, 0xd4, 0x4, 0x3}, {0x3, 0x42, 0x6, 0x4, 0x5, 0x1}, {0x3, 0x4, 0x7f, 0xfffffffb, 0x9, 0x1}, {0x8, 0x1, 0xf2e, 0x1f6d, 0xfffffffe, 0xf}, {0x9, 0x71, 0x9, 0x297b, 0x3, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x5}, {0x3, 0x6, 0x3f, 0x4, 0x1, 0x7fffffff}, {0x8, 0x4, 0x3, 0xf1, 0x65}, {0xffff, 0xb, 0x10000, 0x1, 0x401, 0x51a}, {0x7, 0x10001, 0x93, 0x2, 0x10}, {0x3, 0x1, 0x2, 0x1, 0x0, 0x1}, {0x3, 0xa, 0x80000000, 0x9, 0x2, 0x3}, {0x4, 0x1, 0x837, 0x101, 0x9, 0x4}, {0x2f86, 0x6, 0x7, 0xff, 0x1, 0x2}, {0x4d797f75, 0x24, 0x5, 0x7, 0x10, 0x8}, {0x7fffffff, 0x100, 0x9, 0x91e, 0x5, 0x8}, {0xaadb, 0x7ff, 0x1, 0x4, 0xd6, 0x80000001}, {0xffff, 0x10001, 0x3ff, 0x8, 0x81, 0x9}, {0x2, 0xfffffff7, 0x7, 0x71, 0x2, 0x800}, {0x8, 0x5, 0x3, 0xfffffffb, 0x80, 0xb}, {0x5, 0xf43, 0x2, 0x9, 0x80, 0xfffffffa}, {0xbff, 0x8, 0xfffffff7, 0x10001, 0x1, 0x5f}, {0x6, 0x8, 0x5, 0x3, 0x1, 0x6}, {0x10001, 0xa67, 0x752, 0x6, 0x1}, {0x3ff, 0x7, 0x5, 0x7fff, 0x0, 0x78}, {0x1, 0x8001, 0xffffffff, 0xf2d, 0x3, 0x400}, {0x1ff, 0x100, 0x5, 0xee1, 0xc, 0x5}, {0x10, 0x400, 0x4, 0x1000, 0x1, 0x600000}, {0x8, 0x3, 0xa149, 0xcad, 0x0, 0xa}, {0x8, 0x5, 0xffff, 0x4, 0xdac2, 0xffff}, {0x7fff, 0x5, 0x9759, 0xfe9, 0xff, 0xe}, {0x1, 0x4, 0xfffff818, 0x100, 0x400, 0x8}, {0x2, 0x80000001, 0x101, 0x10000, 0x3, 0xffffffc0}, {0x3, 0x5, 0x1, 0x6, 0x8, 0x4}, {0x8, 0x4, 0x8, 0x8001, 0xf, 0xd2}, {0x92, 0x2040cc7c, 0x8, 0x7fff, 0x8, 0x2}, {0x6, 0x8001, 0x2, 0x1ff, 0x81, 0x5}, {0xffffffff, 0x2, 0x8, 0x6, 0x7, 0x2}, {0x5, 0x6, 0x8, 0x1, 0x40, 0x5}, {0x5ea, 0x2, 0x4, 0xfffffff2, 0x6, 0x10}, {0x7, 0xf, 0x6, 0x7f, 0x4, 0x612}, {0xc, 0x9, 0x401, 0x8, 0x7, 0x6}, {0x7, 0x9, 0x6, 0xa, 0x3f6, 0x1}, {0x9, 0x5, 0x0, 0x0, 0x0, 0x401}, {0xc9, 0x3, 0x101, 0x0, 0x4, 0x8}, {0x2, 0x1, 0xffffffff, 0x3, 0x80000000, 0x10000}, {0x3, 0x8001, 0xb, 0x40, 0x5, 0x7}, {0xe5, 0x8, 0xffffffc0, 0x1, 0x1, 0x3}, {0x9, 0x55c2, 0xf5a9, 0xf, 0x81, 0xfff}, {0x8, 0x1, 0x7f, 0x0, 0x3, 0x8}, {0xc5c, 0xf95c, 0xc5, 0x0, 0x4, 0x1}, {0xffff0000, 0x8, 0x4, 0x4, 0x8001, 0xf0f}, {0xf, 0x8, 0x2, 0xfffffbff, 0x5, 0x4}], [{0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x4}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2}, {0x4}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x3}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1}, {}, {0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) (async) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, 0x0, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 2.047087355s ago: executing program 4 (id=2022): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x270, 0x120, 0x0, 0x148, 0x0, 0x148, 0x1d8, 0x240, 0x240, 0x1d8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6}}, @common=@inet=@multiport={{0x50}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) 1.966782629s ago: executing program 0 (id=2024): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x52142, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x4) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0xe) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) 1.932033447s ago: executing program 4 (id=2025): r0 = getpid() r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000700000018110000c97c1ba4115925bc09707fa956e75e08b0697ce4daab1ef39ddb70880711dd54b56ad526566e5fef3d6e2fbf2a00a22637dca4c3854ddba59dffac77b08718104bf901d875954bcb1eea5efaef7e1d7a2f7a991937f01ce232643519bfc289a252199c106bcedfed457e66d6d746b67a41205d1abc2eaf4878d9bdc5", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2200"/56, @ANYRES32=0x0, @ANYBLOB="01000000810000000000000000200000080003"], 0x54}}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x800}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f00000002c0), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socket$netlink(0x10, 0x3, 0x10) 1.600910834s ago: executing program 2 (id=2028): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000200"/12], 0x48) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0x8, 0x1, 0x3, 0xc}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', r1, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.479417937s ago: executing program 0 (id=2029): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x2, 0x34005}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d00047c0000040000000c00018006000600800a0000080002809d05576000c50000000000000000"], 0x2c}}, 0xc000) 1.478945809s ago: executing program 2 (id=2030): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYRES8=r1], 0x10b8}, 0xb75d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_void(r5, 0x1, 0x48, 0x0, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000240)={0x1, 'vlan0\x00', {}, 0x5}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000440)={@private1, r9}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000200)={@empty, r9}, 0x14) 1.448779044s ago: executing program 0 (id=2031): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r2, 0x701, 0x0, 0x0, {0x41}}, 0x14}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r3 = epoll_create(0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000f477674800000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000200)={@bcast, @bcast}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0x8000000000000003}]}, 0x108) r8 = accept(r0, 0x0, 0x0) unshare(0x8020900) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x5c}}, 0x0) bind$xdp(r9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000000080)={0x20000005}) 977.540355ms ago: executing program 2 (id=2032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'geneve1\x00', &(0x7f0000000400)=@ethtool_cmd={0x32, 0xffff, 0x9, 0x0, 0x5, 0x53, 0x0, 0x0, 0x2, 0x20, 0x4, 0x0, 0x0, 0xfc, 0x2, 0x40800, [0x6]}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) socket$caif_stream(0x25, 0x1, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000040000004f6e0c72a400"/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="072c2879941a756c6fac4c136cec08f5582f14b31188ff3f334c5531235d0cf1c726ae6c910ebceeb99909143be6e7046377f6964dfcedcfe8cdcd603ae31916b3f78167c5f08e8b141652"], 0x10) close(r5) close(r6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa0028000}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000480)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r9, @ANYBLOB="0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000300"/21], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r9}, &(0x7f00000003c0), &(0x7f0000000800)='%pB \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000500)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x42, {0x2, 0x4e21, @broadcast}, 'veth0_macvtap\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000080003005f8f5762edd12f1adb9a11fc10d744c5602c03fda39fb2cc96482f50f987bb783c9ae5143c8d1da773f8c91068e7722568cb43c4442dca0b4dcac9324d08f8d28831b50d7aab7eb0b58a1ad312f13d8100"/109, @ANYRES32=r11, @ANYBLOB="0500530001000000"], 0x24}}, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r12, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 826.796144ms ago: executing program 4 (id=2033): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x2}}]}, {0x0, [0x5f, 0x30, 0x30, 0x0, 0x0, 0x61, 0x2e]}}, &(0x7f0000000640)=""/107, 0x39, 0x6b, 0x1, 0x3, 0x0, @void, @value}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000003c0)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x48, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001868000000000000000000080000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}]}, 0x54}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'vlan1\x00', 0x10}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r8, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4011}, 0x8000) 495.448648ms ago: executing program 0 (id=2034): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlinkprop={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xc, 0x1, @broadcast}]}, 0x40}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) 252.564605ms ago: executing program 0 (id=2035): r0 = getpid() (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x6, 0xa, 0x6, 0x8000, 0xc, @empty, @mcast1, 0x700, 0x40, 0xfffffff8, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="99095e6832c7a6c895793b839cda7493dca72b3b5367a678a054efa01d6fd1bf659cedd9410ff7809777a74ed6b59fa4aac3fd392eb29196537604f9703e98225d9a0f304604d65119ca5f617c79df867f5f6332a3e1dbd6629d85b056531cec0d956fa4c3a55b", 0x67}, {&(0x7f0000001040)="ff8dbb1618ed79a5b29663e5cbff2b95709552f34bd692d63575a29f59205ffbe61f88667c87a5cc001c7df2cdd0660ca346927e8be62e4f76f771e7835e29325defb1f10bf98357bdcfc701bcf40ea4d88051f654b945557e3837a232433bf4c6119ecaf761010d4feacf895c284c5b78360fb9c6400c29ad650434ea62811b41bc5aa8982b4c56e10d0016280e0561a8d8e6cb4bf6dd62ab", 0x99}], 0x2, 0x0, 0x0, 0x40}], 0x1, 0x8000) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x122, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004004}, 0x80c4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000000c0)={r9, 0x2, 0x6, @remote}, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000002780)=ANY=[@ANYBLOB="85000000610000003500000000000020850000000700000095000000000000000001000000000000200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa3b4b87b3e0cc7444a2391511c93fabd5f9810e81ae0b737136ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903000000000000006c6386d7ec7209d031f40f3012e9576e51a7f578602f5807785b92e544fc46c744aeeee4418d6af3e4195cc02436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e465eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c5324812696aa89e393c941d9541c86238d0703394a90231ccca9c3499c9a4cd3cd8a4f8070000000b0800000000000000087b5efabf84960ba0e3c4c00322de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ec91d83cf4fbf975d9c07d8d3c76e65760ff000000b78863e629b3b200000000000000000000000000008b0000000a449c810d3174c87ee545867a3126af7a8b20744ea9875b1cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac929a4fc6e625247510bc24e20ad88d4fe6a3ae2f7967546c4aae83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca3000000000000000000000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c82c96f10dfa978bee51f581d124216e8bd9b1855f77138e438bdc037865f07f98c068be4c6155ec27365410866059475714844a3ea4cbe37e0000000000ef6dc4dd63bb928ff58b3bd2a600089d172a884dcdb8b9f9050297815a371deec596838e38068b5e438cbcd585a8cf37c44795f61d51e79496a8d2dab79d4242a353917ebdf2dcdb26d80260898d4e1ca5e3a833f8f65429845bc3c3092af2bc4ee7263d3cbd9cab24eafd961a2d0c7bbfca952475c7e6158bfbb32f187d18f977117101076bad4167d5559ac12ff1473fa0ac0c0e71925a25933bfe309a040034b0cc8f69074670efc8101b89477d23823605dfa8e5945c31a0225b50d18a010ecf3c349cbac4d5191c3d78726b9ab4bff5e05027ca5b338a62e955e514da8ca2846919b7b56c192bb43f7032d845997b0dd103c784a53ad0243624566e0dacfe4029ffbe59e7e7751b3a9e619107bde39bfa81791ff0e4577055528aef46891c3c49afda8137d03cf6893db7b0f1fe95f8a096159869db71853b6bb5c08ce5fc61353f1e659d7ac53f54a7e2c94cba21994930a423ac7f84ed873a76b0dda0a4b4c5f87eef3164a0c03bc2a7f08290ddf300b298de3fd9167fb8b9c2f26e27f97cf5e90586ea50b85eb5b420eebe171893782b8326148ef5f5174e7ea5dd7f1caa699e4a241291c2f43e9edbf44c0ffb8ee32a18b6e8f0b61836146e2eab9a767800c2c91190c96cf88466adf775b4cf517dc5e39be99c4ab471f381c3915203cd2f27466c8943a80ba03150699c787696de272affa4e4940e59d8b7c69f804d6d3fa7543176a4df033532e5053d72521d097dda0c7a70bd1278c61513c1b87b01d9a9ec4d5ef793096dab53d3224f245fd5d87984d58dc09d11ba0094ba8c39942be41f362e29bba1cdcf8068a4d8d67d2d6d79aa2d089bc4d475097d7523860ec41dab4fa4b0cfe674c163ad419753bd73882336d42036a179bb33162b31f2a58436ea88fba598fad987a60b1847cc63a77c2bb30477ecbeaaa590cde56be4102d0365987e557f0000000000000000000000000000000000000000000000000000000000000000000000000050"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x17, 0x0, &(0x7f0000000440)="b9ff03076044238c8f9e15f088a84cb688a84d72860100", 0x0, 0x6131, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x20044094) 223.399728ms ago: executing program 4 (id=2036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet(0x2, 0x3, 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x8, 0x1, @empty}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, 0x0, 0x50) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000180)={'nat\x00'}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000200), 0x4) 159.450313ms ago: executing program 2 (id=2037): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) unshare(0x400) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 97.150462ms ago: executing program 2 (id=2038): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff080001"], 0x4c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000b88940a11b0d0faccbf06190789dfd6d8ec583ed20f13c22c3994a08465f25c3dcf4153aca09323f986ca83bcdb4925dad2d729af7e416676b1c2208338ef399345afe4bc9643ea0f4d57c19ef8c2020bb8f58732ab4b0638bbba8b52752727d089f7852c33b1c50f41c8a46754413a83bdc88621d07155224fde77026fb30c5d3db4ba4bd331d059d0620ded50aa605af1e52f0b31cd7c2e79a6ec4e963908dcdf5f16fe11e0b3775908ae8a98ec591d65747f9681e00eb705fd4e105d19b20754577ab815517669c6237701000000bc9dfddcda8d37b22d1b6810ee91c5ae8cadac1a6902390964", @ANYRES16=r3, @ANYBLOB="010025bd70000000000002000000"], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008090}, 0x24000800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINK_NETNSID]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 0s ago: executing program 2 (id=2039): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)}}, {{0x0, 0x0, &(0x7f0000003bc0)}, 0x4}], 0x2, 0x40000121, 0x0) kernel console output (not intermixed with test programs): 20000 - 0 [ 184.765514][T11121] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.804605][T11137] tipc: Started in network mode [ 184.814834][T11137] tipc: Node identity 46e6db47387f, cluster identity 4711 [ 184.824260][T11137] tipc: Enabled bearer , priority 0 [ 184.880746][T11137] syzkaller0: entered promiscuous mode [ 184.899410][T11137] syzkaller0: entered allmulticast mode [ 184.921479][T11137] tipc: Resetting bearer [ 184.957626][T11137] tipc: Disabling bearer [ 185.041726][ T9185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.153827][ T9185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.190977][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.200679][T11147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1574'. [ 185.206246][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.221846][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.241840][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.251028][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 185.258995][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.262343][ T9185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.278281][ T9184] wlan0: Trigger new scan to find an IBSS to join [ 185.311048][T11121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.386514][ T9185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.442555][T11121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.464309][T11121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.509081][T11121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.665801][ T9185] bridge_slave_1: left allmulticast mode [ 185.671609][ T9185] bridge_slave_1: left promiscuous mode [ 185.678339][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 185.679914][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.701027][ T9185] bridge_slave_0: left allmulticast mode [ 185.707395][ T9185] bridge_slave_0: left promiscuous mode [ 185.713745][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.917053][ T5833] Bluetooth: hci4: command tx timeout [ 186.098766][ T9185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.109875][ T9185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.120235][ T9185] bond0 (unregistering): Released all slaves [ 186.236769][ T6071] wlan0: Creating new IBSS network, BSSID d6:cb:f1:06:c2:fd [ 186.348901][T11166] netlink: 'syz.4.1579': attribute type 13 has an invalid length. [ 186.356929][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 186.381220][T11145] chnl_net:caif_netlink_parms(): no params data found [ 186.478981][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 186.555164][T11121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.595255][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.602583][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.615534][T11145] bridge_slave_0: entered allmulticast mode [ 186.622660][T11145] bridge_slave_0: entered promiscuous mode [ 186.641739][ T9185] hsr_slave_0: left promiscuous mode [ 186.648362][ T9185] hsr_slave_1: left promiscuous mode [ 186.656521][ T9185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.664186][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.674613][ T9185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.682481][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.713507][ T9185] veth1_macvtap: left promiscuous mode [ 186.719731][ T9185] veth0_macvtap: left promiscuous mode [ 186.726153][ T9185] veth1_vlan: left promiscuous mode [ 186.736232][ T9185] veth0_vlan: left promiscuous mode [ 187.332264][ T9185] team0 (unregistering): Port device team_slave_1 removed [ 187.365900][ T5847] Bluetooth: hci1: command tx timeout [ 187.393606][ T9185] team0 (unregistering): Port device team_slave_0 removed [ 187.789961][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.798176][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.805813][T11145] bridge_slave_1: entered allmulticast mode [ 187.812745][T11145] bridge_slave_1: entered promiscuous mode [ 187.888699][T11145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.927391][T11145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.991119][T11121] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.999916][ T5847] Bluetooth: hci4: command tx timeout [ 188.071165][T11145] team0: Port device team_slave_0 added [ 188.099862][T11145] team0: Port device team_slave_1 added [ 188.174571][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.181774][ T9188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.301726][T11145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.312210][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.357578][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 188.368300][T11145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.402739][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.409951][ T9182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.460342][T11145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.472560][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.503817][T11145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.649606][T11145] hsr_slave_0: entered promiscuous mode [ 188.658779][T11145] hsr_slave_1: entered promiscuous mode [ 188.666911][T11145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.674854][T11145] Cannot create hsr debugfs directory [ 189.192798][T11251] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1601'. [ 189.215182][T11251] ip6gretap0: entered promiscuous mode [ 189.354013][T11121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.436006][ T5842] Bluetooth: hci1: command tx timeout [ 189.582366][T11121] veth0_vlan: entered promiscuous mode [ 189.631281][T11121] veth1_vlan: entered promiscuous mode [ 189.655197][T11145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.679092][T11145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.713641][T11121] veth0_macvtap: entered promiscuous mode [ 189.729542][T11145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.744520][T11121] veth1_macvtap: entered promiscuous mode [ 189.754929][T11145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.766906][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1604'. [ 189.812797][T11263] bond0: entered promiscuous mode [ 189.818742][T11263] bond_slave_0: entered promiscuous mode [ 189.824646][T11263] bond_slave_1: entered promiscuous mode [ 189.835117][T11263] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 189.843775][T11263] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 189.857793][T11263] bond0: left promiscuous mode [ 189.862698][T11263] bond_slave_0: left promiscuous mode [ 189.872156][T11263] bond_slave_1: left promiscuous mode [ 189.878242][T11263] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 189.909107][T11121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.932017][T11121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.981057][T11121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.001414][T11121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.030353][T11121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.046977][T11121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.076979][ T5842] Bluetooth: hci4: command tx timeout [ 190.201152][T11285] delete_channel: no stack [ 190.239227][T11145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.252404][T11285] delete_channel: no stack [ 190.266585][T11285] delete_channel: no stack [ 190.271185][T11285] delete_channel: no stack [ 190.284192][T11285] delete_channel: no stack [ 190.290198][T11285] delete_channel: no stack [ 190.294874][T11285] delete_channel: no stack [ 190.300378][T11285] delete_channel: no stack [ 190.305034][T11285] delete_channel: no stack [ 190.311048][T11285] delete_channel: no stack [ 190.315987][T11285] delete_channel: no stack [ 190.320818][T11285] delete_channel: no stack [ 190.326358][T11285] delete_channel: no stack [ 190.330962][T11285] delete_channel: no stack [ 190.337295][ T9181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.345779][T11285] delete_channel: no stack [ 190.345880][ T9181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.350358][T11285] delete_channel: no stack [ 190.382674][T11285] delete_channel: no stack [ 190.393116][T11285] delete_channel: no stack [ 190.395269][T11145] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.399155][T11285] delete_channel: no stack [ 190.412727][ T9187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.424573][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.430183][T11285] delete_channel: no stack [ 190.431683][ T9186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.437115][ T9187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.451646][T11285] delete_channel: no stack [ 190.457506][T11285] delete_channel: no stack [ 190.468996][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.476200][ T9186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.534136][T11301] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.1615'. [ 190.553004][T11301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.602045][T11302] ip6gretap0: entered promiscuous mode [ 190.613481][T11302] macsec0: entered promiscuous mode [ 190.625099][T11302] macsec0: entered allmulticast mode [ 190.637045][T11302] ip6gretap0: entered allmulticast mode [ 190.931143][ T9186] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.976127][T11145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.049411][ T9186] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.211404][ T9186] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.264843][T11145] veth0_vlan: entered promiscuous mode [ 191.298931][T11145] veth1_vlan: entered promiscuous mode [ 191.352561][T11320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1621'. [ 191.398652][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.412848][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.441428][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.456360][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.467049][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 191.470472][ T9186] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.485105][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.504276][T11339] netlink: 'syz.0.1625': attribute type 15 has an invalid length. [ 191.515732][ T5833] Bluetooth: hci1: command 0x040f tx timeout [ 191.551652][T11145] veth0_macvtap: entered promiscuous mode [ 191.592354][T11145] veth1_macvtap: entered promiscuous mode [ 191.679234][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.701230][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.714384][T11145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.739890][ T5874] IPVS: starting estimator thread 0... [ 191.786267][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.802295][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.810723][T11358] x_tables: duplicate underflow at hook 1 [ 191.816848][T11145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.836893][T11354] IPVS: using max 25 ests per chain, 60000 per kthread [ 191.858579][T11145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.877593][T11145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.887922][T11145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.896742][T11145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.983265][ T9186] bridge_slave_1: left allmulticast mode [ 191.997867][ T9186] bridge_slave_1: left promiscuous mode [ 192.011772][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.036839][ T9186] bridge_slave_0: left allmulticast mode [ 192.051301][ T9186] bridge_slave_0: left promiscuous mode [ 192.062310][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.493474][ T9186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.508359][ T9186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.522483][ T9186] bond0 (unregistering): Released all slaves [ 192.671781][T11386] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1638'. [ 192.698649][T11386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.811530][ T9182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.811553][ T9182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.988115][T11327] chnl_net:caif_netlink_parms(): no params data found [ 193.005272][ T9186] hsr_slave_0: left promiscuous mode [ 193.019929][ T9186] hsr_slave_1: left promiscuous mode [ 193.051989][T11405] sctp: [Deprecated]: syz.2.1642 (pid 11405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.051989][T11405] Use struct sctp_sack_info instead [ 193.054599][ T9186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.076475][ T9186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.083935][T11406] sctp: [Deprecated]: syz.2.1642 (pid 11406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.083935][T11406] Use struct sctp_sack_info instead [ 193.101509][ T9186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.109194][ T9186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.124971][T11405] sctp: [Deprecated]: syz.2.1642 (pid 11405) Use of int in maxseg socket option. [ 193.124971][T11405] Use struct sctp_assoc_value instead [ 193.158444][ T9186] veth1_macvtap: left promiscuous mode [ 193.164035][ T9186] veth0_macvtap: left promiscuous mode [ 193.176153][ T9186] veth1_vlan: left promiscuous mode [ 193.181491][ T9186] veth0_vlan: left promiscuous mode [ 193.516359][ T5847] Bluetooth: hci4: command tx timeout [ 193.602277][ T5847] Bluetooth: hci1: command 0x040f tx timeout [ 193.622993][ T9186] team0 (unregistering): Port device team_slave_1 removed [ 193.670143][ T9186] team0 (unregistering): Port device team_slave_0 removed [ 194.101193][T11416] tap0: tun_chr_ioctl cmd 1074025677 [ 194.109207][T11416] tap0: linktype set to 768 [ 194.149713][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.160230][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.374877][T11327] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.387744][T11327] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.395050][T11327] bridge_slave_0: entered allmulticast mode [ 194.412592][T11327] bridge_slave_0: entered promiscuous mode [ 194.433084][T11327] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.441596][T11327] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.448968][T11327] bridge_slave_1: entered allmulticast mode [ 194.461245][T11327] bridge_slave_1: entered promiscuous mode [ 194.587053][T11440] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 194.638533][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.644882][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.682079][T11327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.749223][T11327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.816290][T11327] team0: Port device team_slave_0 added [ 194.824535][T11327] team0: Port device team_slave_1 added [ 194.860271][T11327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.868444][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.914758][T11327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.974860][T11327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.987650][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.017501][T11327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.065924][ T9186] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.150320][T11327] hsr_slave_0: entered promiscuous mode [ 195.167701][T11327] hsr_slave_1: entered promiscuous mode [ 195.174091][T11327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.194997][T11327] Cannot create hsr debugfs directory [ 195.229373][ T9186] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.289099][T11465] bond0: (slave bond_slave_0): Releasing backup interface [ 195.311044][T11465] bond_slave_0: left allmulticast mode [ 195.340223][T11465] bond0: (slave bond_slave_1): Releasing backup interface [ 195.358198][T11465] bond_slave_1: left allmulticast mode [ 195.412803][T11465] team0: Port device team_slave_0 removed [ 195.444471][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.456940][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.466219][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.480942][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.489282][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 195.493480][T11465] team0: Port device team_slave_1 removed [ 195.503128][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.545984][T11465] team0: Port device netdevsim0 removed [ 195.571646][T11465] bond0: (slave bond4): Releasing backup interface [ 195.597260][ T5833] Bluetooth: hci4: command tx timeout [ 195.606972][T11465] bond4: left allmulticast mode [ 195.667879][ T9186] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.790159][ T9186] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.107283][T11495] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1666'. [ 196.130648][T11495] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 196.350928][ T9186] bridge_slave_1: left allmulticast mode [ 196.360843][ T9186] bridge_slave_1: left promiscuous mode [ 196.391507][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.412659][ T9186] bridge_slave_0: left allmulticast mode [ 196.431220][ T9186] bridge_slave_0: left promiscuous mode [ 196.442468][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.143462][ T9186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.177514][ T9186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.206124][ T9186] bond0 (unregistering): Released all slaves [ 197.244892][T11517] netlink: 'syz.0.1672': attribute type 15 has an invalid length. [ 197.453311][T11470] chnl_net:caif_netlink_parms(): no params data found [ 197.597063][ T5833] Bluetooth: hci1: command tx timeout [ 197.687356][ T5833] Bluetooth: hci4: command tx timeout [ 197.696591][ T9186] hsr_slave_0: left promiscuous mode [ 197.702692][ T9186] hsr_slave_1: left promiscuous mode [ 197.710744][ T9186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.718852][ T9186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.727840][ T9186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.735366][ T9186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.757012][ T9186] veth1_macvtap: left promiscuous mode [ 197.762542][ T9186] veth0_macvtap: left promiscuous mode [ 197.768392][ T9186] veth1_vlan: left promiscuous mode [ 197.773739][ T9186] veth0_vlan: left promiscuous mode [ 198.184791][ T9186] team0 (unregistering): Port device team_slave_1 removed [ 198.231271][ T9186] team0 (unregistering): Port device team_slave_0 removed [ 198.763279][T11470] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.781763][T11470] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.789525][T11470] bridge_slave_0: entered allmulticast mode [ 198.797393][T11470] bridge_slave_0: entered promiscuous mode [ 198.828421][T11327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.859482][T11470] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.871273][T11470] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.880294][T11470] bridge_slave_1: entered allmulticast mode [ 198.893071][T11470] bridge_slave_1: entered promiscuous mode [ 198.916466][T11327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.950110][T11327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.978387][T11327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.049546][T11576] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1684'. [ 199.066221][T11470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.078574][T11470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.126600][T11577] netlink: 'syz.4.1685': attribute type 3 has an invalid length. [ 199.153221][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'. [ 199.213941][T11470] team0: Port device team_slave_0 added [ 199.264064][T11470] team0: Port device team_slave_1 added [ 199.370341][T11590] netlink: 'syz.0.1686': attribute type 1 has an invalid length. [ 199.375191][T11470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.394695][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.427981][T11470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.442024][T11470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.453986][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.481075][T11470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.653014][T11470] hsr_slave_0: entered promiscuous mode [ 199.669851][T11470] hsr_slave_1: entered promiscuous mode [ 199.676870][T11470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.684460][T11470] Cannot create hsr debugfs directory [ 199.686705][ T5833] Bluetooth: hci1: command tx timeout [ 199.744049][T11600] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 199.759521][ T5833] Bluetooth: hci4: command tx timeout [ 200.046598][T11327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.169758][T11327] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.212564][ T9181] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.219681][ T9181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.284363][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.291540][ T6071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.526073][T11614] tipc: New replicast peer: 255.255.255.255 [ 200.536306][T11614] tipc: Enabled bearer , priority 10 [ 200.582277][T11617] netlink: 'syz.2.1695': attribute type 2 has an invalid length. [ 200.601839][T11617] netlink: 'syz.2.1695': attribute type 9 has an invalid length. [ 200.622956][T11617] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1695'. [ 200.862128][T11327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.992149][T11470] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.052801][T11470] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.087118][T11470] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.138966][T11327] veth0_vlan: entered promiscuous mode [ 201.155073][T11470] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.227103][T11327] veth1_vlan: entered promiscuous mode [ 201.424240][T11327] veth0_macvtap: entered promiscuous mode [ 201.510163][T11327] veth1_macvtap: entered promiscuous mode [ 201.533213][T11470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.577766][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 201.602445][T11327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.635260][T11470] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.650888][T11327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.682155][T11327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.697811][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 201.710683][T11327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.720574][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 201.720602][T11327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.739375][T11327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.761813][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.769011][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.777026][ T5847] Bluetooth: hci1: command tx timeout [ 201.789729][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.796856][ T9186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.845318][T11652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1706'. [ 201.880177][T11470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.890858][T11470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.000827][T11661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1709'. [ 202.191279][T11670] FAULT_INJECTION: forcing a failure. [ 202.191279][T11670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.204898][T11670] CPU: 0 UID: 0 PID: 11670 Comm: syz.0.1713 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 [ 202.215668][T11670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 202.215704][T11670] Call Trace: [ 202.215713][T11670] [ 202.215721][T11670] dump_stack_lvl+0x241/0x360 [ 202.215773][T11670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.241901][T11670] ? __pfx__printk+0x10/0x10 [ 202.246529][T11670] ? snprintf+0xda/0x120 [ 202.250800][T11670] should_fail_ex+0x3b0/0x4e0 [ 202.255506][T11670] _copy_to_user+0x31/0xb0 [ 202.259951][T11670] simple_read_from_buffer+0xca/0x150 [ 202.265355][T11670] proc_fail_nth_read+0x1e9/0x250 [ 202.271189][T11670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.276761][T11670] ? rw_verify_area+0x55e/0x6f0 [ 202.281630][T11670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.287201][T11670] vfs_read+0x1fc/0xb70 [ 202.291390][T11670] ? __pfx___mutex_lock+0x10/0x10 [ 202.296438][T11670] ? __pfx_vfs_read+0x10/0x10 [ 202.301147][T11670] ? __fget_files+0x2a/0x410 [ 202.305763][T11670] ? __fget_files+0x395/0x410 [ 202.310455][T11670] ? __fget_files+0x2a/0x410 [ 202.315053][T11670] ksys_read+0x18f/0x2b0 [ 202.319298][T11670] ? __pfx_ksys_read+0x10/0x10 [ 202.324145][T11670] ? do_syscall_64+0x100/0x230 [ 202.328906][T11670] ? do_syscall_64+0xb6/0x230 [ 202.333579][T11670] do_syscall_64+0xf3/0x230 [ 202.338088][T11670] ? clear_bhb_loop+0x35/0x90 [ 202.342790][T11670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.348700][T11670] RIP: 0033:0x7fb9c438473c [ 202.353130][T11670] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.372756][T11670] RSP: 002b:00007fb9c5104030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.381192][T11670] RAX: ffffffffffffffda RBX: 00007fb9c4575fa0 RCX: 00007fb9c438473c [ 202.389170][T11670] RDX: 000000000000000f RSI: 00007fb9c51040a0 RDI: 0000000000000004 [ 202.397145][T11670] RBP: 00007fb9c5104090 R08: 0000000000000000 R09: 0000000000000000 [ 202.405117][T11670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.413085][T11670] R13: 0000000000000000 R14: 00007fb9c4575fa0 R15: 00007ffec6f66298 [ 202.421070][T11670] [ 202.497905][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'. [ 202.512744][ T9181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.528735][ T9181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.590849][ T9182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.601670][ T9182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.723550][T11470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.841037][T11681] veth0_to_batadv: entered promiscuous mode [ 203.013981][T11470] veth0_vlan: entered promiscuous mode [ 203.040971][T11470] veth1_vlan: entered promiscuous mode [ 203.099815][T11470] veth0_macvtap: entered promiscuous mode [ 203.122108][T11470] veth1_macvtap: entered promiscuous mode [ 203.154291][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.169668][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.182216][T11470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.204699][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.220474][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.234926][T11470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.252339][T11470] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.264587][T11470] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.274565][T11470] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.289668][T11470] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.614642][ T9181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.729088][ T9185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.771642][ T9185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.837494][ T5847] Bluetooth: hci1: command tx timeout [ 203.868119][ T9181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.941878][ T9188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.963927][ T9188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.013039][ T9181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.271405][T11701] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 204.295822][T11701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.346588][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.383835][T11709] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1721'. [ 204.393121][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.409449][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.424934][ T9181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.446077][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.473811][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.480137][T11712] netlink: 'syz.2.1722': attribute type 10 has an invalid length. [ 204.491295][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.534312][T11712] netlink: 'syz.2.1722': attribute type 10 has an invalid length. [ 204.573803][T11712] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1722'. [ 204.697223][T11712] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 204.705090][T11712] netlink: 'syz.2.1722': attribute type 2 has an invalid length. [ 204.746844][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1725'. [ 204.799749][ T9181] bridge_slave_1: left allmulticast mode [ 204.807976][ T9181] bridge_slave_1: left promiscuous mode [ 204.816429][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.831202][ T9181] bridge_slave_0: left allmulticast mode [ 204.840718][ T9181] bridge_slave_0: left promiscuous mode [ 204.854971][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.914713][T11730] delete_channel: no stack [ 204.958602][T11734] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 205.582082][ T9181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.592895][ T9181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.603183][ T9181] bond0 (unregistering): Released all slaves [ 205.752072][T11703] chnl_net:caif_netlink_parms(): no params data found [ 206.128408][T11703] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.149949][T11703] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.158373][T11703] bridge_slave_0: entered allmulticast mode [ 206.179795][T11703] bridge_slave_0: entered promiscuous mode [ 206.191075][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.201468][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.209924][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.218373][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.228580][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.238153][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.246722][ T9181] hsr_slave_0: left promiscuous mode [ 206.260000][ T9181] hsr_slave_1: left promiscuous mode [ 206.266381][ T9181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.273855][ T9181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.282498][ T9181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.290388][ T9181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.320382][ T9181] veth1_macvtap: left promiscuous mode [ 206.326071][ T9181] veth0_macvtap: left promiscuous mode [ 206.332716][ T9181] veth1_vlan: left promiscuous mode [ 206.338529][ T9181] veth0_vlan: left promiscuous mode [ 206.564437][ T5833] Bluetooth: hci4: command tx timeout [ 206.817611][ T9181] team0 (unregistering): Port device team_slave_1 removed [ 206.867336][ T9181] team0 (unregistering): Port device team_slave_0 removed [ 207.165397][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'. [ 207.330877][T11703] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.342037][T11703] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.349494][T11703] bridge_slave_1: entered allmulticast mode [ 207.362047][T11703] bridge_slave_1: entered promiscuous mode [ 207.504673][T11703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.517107][T11703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.566585][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1739'. [ 207.649689][T11703] team0: Port device team_slave_0 added [ 207.684924][T11703] team0: Port device team_slave_1 added [ 207.843377][T11703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.856205][T11703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.866411][T11787] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1741'. [ 207.905768][T11703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.992428][T11703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.000287][T11703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.030328][T11703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.125380][T11763] chnl_net:caif_netlink_parms(): no params data found [ 208.234579][T11703] hsr_slave_0: entered promiscuous mode [ 208.247528][T11703] hsr_slave_1: entered promiscuous mode [ 208.267434][T11703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.283259][T11703] Cannot create hsr debugfs directory [ 208.316308][ T5833] Bluetooth: hci1: command tx timeout [ 208.348568][T11800] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 208.450698][ T9181] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.599233][ T9181] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.619393][T11763] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.631738][T11763] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.640469][ T5833] Bluetooth: hci4: command tx timeout [ 208.648314][T11763] bridge_slave_0: entered allmulticast mode [ 208.656598][T11763] bridge_slave_0: entered promiscuous mode [ 208.664441][T11763] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.672006][T11763] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.679450][T11763] bridge_slave_1: entered allmulticast mode [ 208.687250][T11763] bridge_slave_1: entered promiscuous mode [ 208.717863][ T9181] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.777335][ T9181] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.860041][T11763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.889514][T11763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.974056][T11763] team0: Port device team_slave_0 added [ 208.994672][T11763] team0: Port device team_slave_1 added [ 209.108164][T11763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.125852][T11763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.175783][T11763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.197776][T11763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.204751][T11763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.275706][T11763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.416302][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 209.425203][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'. [ 209.441457][T11847] netlink: 'syz.2.1758': attribute type 13 has an invalid length. [ 209.459269][ T9181] bridge_slave_1: left allmulticast mode [ 209.465894][ T9181] bridge_slave_1: left promiscuous mode [ 209.472130][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.512195][ T9181] bridge_slave_0: left allmulticast mode [ 209.518264][ T9181] bridge_slave_0: left promiscuous mode [ 209.521919][T11854] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1761'. [ 209.524031][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.588656][T11857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1761'. [ 209.888832][ T9181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.900398][ T9181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.910662][ T9181] bond0 (unregistering): Released all slaves [ 209.929110][T11763] hsr_slave_0: entered promiscuous mode [ 209.946534][T11763] hsr_slave_1: entered promiscuous mode [ 209.953408][T11763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.965782][T11763] Cannot create hsr debugfs directory [ 210.271286][T11703] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.304909][T11703] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.323855][ T9181] hsr_slave_0: left promiscuous mode [ 210.332746][ T9181] hsr_slave_1: left promiscuous mode [ 210.339410][ T9181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.347153][ T9181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.357067][ T9181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.364712][ T9181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.383964][ T9181] veth1_macvtap: left promiscuous mode [ 210.395186][ T9181] veth0_macvtap: left promiscuous mode [ 210.401748][ T5833] Bluetooth: hci1: command tx timeout [ 210.408271][ T9181] veth1_vlan: left promiscuous mode [ 210.413544][ T9181] veth0_vlan: left promiscuous mode [ 210.718113][ T5833] Bluetooth: hci4: command tx timeout [ 210.924931][ T9181] team0 (unregistering): Port device team_slave_1 removed [ 210.974561][ T9181] team0 (unregistering): Port device team_slave_0 removed [ 211.491234][T11703] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.523501][T11703] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.642193][T11703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.676070][T11703] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.709834][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.717015][ T9186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.774951][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.782109][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.991105][T11763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.002112][T11763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.018093][T11763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.037562][T11763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.104731][T11703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.148751][T11908] tc_dump_action: action bad kind [ 212.219006][T11703] veth0_vlan: entered promiscuous mode [ 212.243524][T11763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.261005][T11703] veth1_vlan: entered promiscuous mode [ 212.275264][T11763] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.294718][ T9181] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.301899][ T9181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.319807][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.326976][ T9185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.354061][T11703] veth0_macvtap: entered promiscuous mode [ 212.384626][T11703] veth1_macvtap: entered promiscuous mode [ 212.442670][T11703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.467387][T11703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.476951][ T5833] Bluetooth: hci1: command tx timeout [ 212.497834][T11703] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.508095][T11703] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.522393][T11703] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.531633][T11703] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.573411][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1776'. [ 212.631309][T11915] xt_TPROXY: Can be used only with -p tcp or -p udp [ 212.651566][T11919] netlink: 'syz.2.1777': attribute type 2 has an invalid length. [ 212.662204][ T9184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.675199][ T9184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.714422][ T9184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.749868][ T9184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.759622][T11919] : entered promiscuous mode [ 212.800859][ T5833] Bluetooth: hci4: command tx timeout [ 212.879396][T11763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.019893][T11763] veth0_vlan: entered promiscuous mode [ 213.049960][T11763] veth1_vlan: entered promiscuous mode [ 213.090450][T11763] veth0_macvtap: entered promiscuous mode [ 213.105924][T11763] veth1_macvtap: entered promiscuous mode [ 213.140371][T11763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.153768][T11763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.171915][T11763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.191457][T11763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.206905][T11763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.223122][T11763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.247788][T11763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.261839][T11763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.271760][T11763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.287476][T11763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.379964][T11941] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 213.460043][ T9187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.478780][ T9187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.519499][ T9187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.534374][ T9187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.589395][T11945] IPv6: sit1: Disabled Multicast RS [ 213.611990][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 213.633571][T11945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1787'. [ 213.652802][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1789'. [ 213.854679][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'. [ 213.871366][T11957] RDS: rds_bind could not find a transport for ::4000:20:0:0, load rds_tcp or rds_rdma? [ 213.921434][T11958] bond4: entered promiscuous mode [ 213.926820][T11958] bond4: entered allmulticast mode [ 213.932300][T11958] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.940026][T11960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1793'. [ 214.013039][T11967] netlink: 'syz.4.1795': attribute type 10 has an invalid length. [ 214.041997][T11967] syz_tun: entered promiscuous mode [ 214.106237][T11971] netlink: 'syz.4.1795': attribute type 10 has an invalid length. [ 214.148816][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1796'. [ 214.173413][ T9187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.246398][T11974] netlink: 'syz.2.1794': attribute type 10 has an invalid length. [ 214.918702][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.929220][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.939329][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.947365][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.958081][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.965555][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.068692][T11978] chnl_net:caif_netlink_parms(): no params data found [ 215.114198][T11978] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.121992][T11978] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.132037][T11978] bridge_slave_0: entered allmulticast mode [ 215.139099][T11978] bridge_slave_0: entered promiscuous mode [ 215.147741][T11978] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.154815][T11978] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.162795][T11978] bridge_slave_1: entered allmulticast mode [ 215.169762][T11978] bridge_slave_1: entered promiscuous mode [ 215.192842][T11978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.206132][T11978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.231705][T11978] team0: Port device team_slave_0 added [ 215.242140][T11978] team0: Port device team_slave_1 added [ 215.323071][T11978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.334193][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.389620][T11978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.455664][ T9187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.501808][T11978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.525242][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.591555][T11978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.618337][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 215.620631][T12001] netlink: 'syz.2.1800': attribute type 1 has an invalid length. [ 215.702610][ T9187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.786773][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.809530][T12011] FAULT_INJECTION: forcing a failure. [ 215.809530][T12011] name failslab, interval 1, probability 0, space 0, times 0 [ 215.824873][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.837305][T12011] CPU: 0 UID: 0 PID: 12011 Comm: syz.4.1804 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 [ 215.848109][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 215.858182][T12011] Call Trace: [ 215.861485][T12011] [ 215.864436][T12011] dump_stack_lvl+0x241/0x360 [ 215.869142][T12011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.874366][T12011] ? __pfx__printk+0x10/0x10 [ 215.878975][T12011] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 215.884978][T12011] ? __pfx___might_resched+0x10/0x10 [ 215.890275][T12011] should_fail_ex+0x3b0/0x4e0 [ 215.894949][T12011] should_failslab+0xac/0x100 [ 215.899628][T12011] kmem_cache_alloc_node_noprof+0x77/0x380 [ 215.905453][T12011] ? __alloc_skb+0x1c3/0x440 [ 215.910063][T12011] __alloc_skb+0x1c3/0x440 [ 215.914506][T12011] ? __pfx___alloc_skb+0x10/0x10 [ 215.919459][T12011] ? netlink_autobind+0xd6/0x2f0 [ 215.924418][T12011] ? netlink_autobind+0x2b0/0x2f0 [ 215.929468][T12011] netlink_sendmsg+0x638/0xcb0 [ 215.934267][T12011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.939576][T12011] ? aa_sock_msg_perm+0x91/0x160 [ 215.944535][T12011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.949834][T12011] __sock_sendmsg+0x221/0x270 [ 215.954516][T12011] ____sys_sendmsg+0x52a/0x7e0 [ 215.959286][T12011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.964562][T12011] ? __fget_files+0x2a/0x410 [ 215.969152][T12011] ? __fget_files+0x2a/0x410 [ 215.973744][T12011] __sys_sendmsg+0x269/0x350 [ 215.978328][T12011] ? __pfx_lock_release+0x10/0x10 [ 215.983348][T12011] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.988462][T12011] ? __pfx_vfs_write+0x10/0x10 [ 215.993236][T12011] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.999561][T12011] ? do_syscall_64+0x100/0x230 [ 216.004325][T12011] ? do_syscall_64+0xb6/0x230 [ 216.008997][T12011] do_syscall_64+0xf3/0x230 [ 216.013494][T12011] ? clear_bhb_loop+0x35/0x90 [ 216.018169][T12011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.024060][T12011] RIP: 0033:0x7f3b84b85d29 [ 216.028474][T12011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.048078][T12011] RSP: 002b:00007f3b8597a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.056490][T12011] RAX: ffffffffffffffda RBX: 00007f3b84d75fa0 RCX: 00007f3b84b85d29 [ 216.064455][T12011] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 216.072421][T12011] RBP: 00007f3b8597a090 R08: 0000000000000000 R09: 0000000000000000 [ 216.080387][T12011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.088354][T12011] R13: 0000000000000000 R14: 00007f3b84d75fa0 R15: 00007ffd67242678 [ 216.096333][T12011] [ 216.111580][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.115826][ T9187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.139694][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.143879][T11978] hsr_slave_0: entered promiscuous mode [ 216.209013][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.216847][T11978] hsr_slave_1: entered promiscuous mode [ 216.230150][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.247072][T11978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.255703][T11978] Cannot create hsr debugfs directory [ 216.446177][T12037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1812'. [ 216.465769][T12037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1812'. [ 216.499802][T12040] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535) [ 216.776810][ T9187] bridge_slave_1: left allmulticast mode [ 216.782522][ T9187] bridge_slave_1: left promiscuous mode [ 216.806019][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.861731][ T9187] bridge_slave_0: left allmulticast mode [ 216.867518][ T9187] bridge_slave_0: left promiscuous mode [ 216.873278][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.047826][ T5847] Bluetooth: hci1: command tx timeout [ 217.249087][ T9187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.260837][ T9187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.271174][ T9187] bond0 (unregistering): Released all slaves [ 217.636557][T12009] chnl_net:caif_netlink_parms(): no params data found [ 217.672361][ T9187] hsr_slave_0: left promiscuous mode [ 217.687752][ T9187] hsr_slave_1: left promiscuous mode [ 217.694860][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.703396][ T9187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.712642][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.721108][ T9187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.750523][ T9187] veth1_macvtap: left promiscuous mode [ 217.756724][ T9187] veth0_macvtap: left promiscuous mode [ 217.762329][ T9187] veth1_vlan: left promiscuous mode [ 217.768417][ T9187] veth0_vlan: left promiscuous mode [ 218.154841][ T9187] team0 (unregistering): Port device team_slave_1 removed [ 218.201986][ T9187] team0 (unregistering): Port device team_slave_0 removed [ 218.326156][ T9181] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 218.330994][ T5833] Bluetooth: hci4: command tx timeout [ 218.768769][T12078] veth11: entered promiscuous mode [ 218.834820][T12009] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.852953][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.885731][T12009] bridge_slave_0: entered allmulticast mode [ 218.893302][T12009] bridge_slave_0: entered promiscuous mode [ 218.936109][T12009] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.953940][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.963407][T12009] bridge_slave_1: entered allmulticast mode [ 218.978347][T12009] bridge_slave_1: entered promiscuous mode [ 219.119668][ T5847] Bluetooth: hci1: command tx timeout [ 219.130380][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 219.153919][T12087] netlink: 'syz.4.1824': attribute type 2 has an invalid length. [ 219.174368][T11978] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.208329][T12009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.227304][T12089] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1825'. [ 219.245856][T11978] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.268305][T12009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.337355][T11978] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.351332][T12091] netlink: 'syz.2.1827': attribute type 4 has an invalid length. [ 219.354508][T11978] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.363899][T12091] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1827'. [ 219.410582][T12009] team0: Port device team_slave_0 added [ 219.420377][T12009] team0: Port device team_slave_1 added [ 219.468101][T12009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.475077][T12009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.501695][T12009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.520323][T12009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.527892][T12009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.561304][T12009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.660241][ T9184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.689189][T12009] hsr_slave_0: entered promiscuous mode [ 219.698557][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1828'. [ 219.699901][T12009] hsr_slave_1: entered promiscuous mode [ 219.714393][T12009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.722285][T12009] Cannot create hsr debugfs directory [ 219.745263][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1828'. [ 219.779225][ T9184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.930369][ T9184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.941739][T12101] FAULT_INJECTION: forcing a failure. [ 219.941739][T12101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.961724][T12101] CPU: 0 UID: 0 PID: 12101 Comm: syz.0.1829 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 [ 219.972626][T12101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 219.982708][T12101] Call Trace: [ 219.986010][T12101] [ 219.988960][T12101] dump_stack_lvl+0x241/0x360 [ 219.993666][T12101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.999064][T12101] ? __pfx__printk+0x10/0x10 [ 220.003686][T12101] ? __pfx_lock_release+0x10/0x10 [ 220.008746][T12101] should_fail_ex+0x3b0/0x4e0 [ 220.013459][T12101] _copy_from_iter+0x1e9/0x1c20 [ 220.018339][T12101] ? __virt_addr_valid+0x183/0x530 [ 220.023490][T12101] ? __alloc_skb+0x28f/0x440 [ 220.028111][T12101] ? __pfx__copy_from_iter+0x10/0x10 [ 220.033427][T12101] ? __virt_addr_valid+0x183/0x530 [ 220.038741][T12101] ? __virt_addr_valid+0x183/0x530 [ 220.043977][T12101] ? __virt_addr_valid+0x45f/0x530 [ 220.049121][T12101] ? __phys_addr_symbol+0x2f/0x70 [ 220.054170][T12101] ? __check_object_size+0x47a/0x730 [ 220.059501][T12101] netlink_sendmsg+0x73d/0xcb0 [ 220.064304][T12101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.069617][T12101] ? aa_sock_msg_perm+0x91/0x160 [ 220.074583][T12101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.079893][T12101] __sock_sendmsg+0x221/0x270 [ 220.084605][T12101] ____sys_sendmsg+0x52a/0x7e0 [ 220.089409][T12101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.094707][T12101] ? __fget_files+0x2a/0x410 [ 220.099295][T12101] ? __fget_files+0x2a/0x410 [ 220.103879][T12101] __sys_sendmsg+0x269/0x350 [ 220.108464][T12101] ? __pfx_lock_release+0x10/0x10 [ 220.113494][T12101] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.118617][T12101] ? __pfx_vfs_write+0x10/0x10 [ 220.123403][T12101] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.129720][T12101] ? do_syscall_64+0x100/0x230 [ 220.134477][T12101] ? do_syscall_64+0xb6/0x230 [ 220.139149][T12101] do_syscall_64+0xf3/0x230 [ 220.143644][T12101] ? clear_bhb_loop+0x35/0x90 [ 220.148315][T12101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.154201][T12101] RIP: 0033:0x7fb9c4385d29 [ 220.158616][T12101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.178220][T12101] RSP: 002b:00007fb9c5104038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.186640][T12101] RAX: ffffffffffffffda RBX: 00007fb9c4575fa0 RCX: 00007fb9c4385d29 [ 220.194609][T12101] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 220.202579][T12101] RBP: 00007fb9c5104090 R08: 0000000000000000 R09: 0000000000000000 [ 220.210560][T12101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.218537][T12101] R13: 0000000000000000 R14: 00007fb9c4575fa0 R15: 00007ffec6f66298 [ 220.226540][T12101] [ 220.351603][T11978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.368322][T11978] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.399694][T11978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.410337][T11978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.425452][ T5847] Bluetooth: hci4: command tx timeout [ 220.473954][T12118] netlink: 'syz.2.1834': attribute type 1 has an invalid length. [ 220.526259][ T9184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.553287][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.560457][ T9185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.578058][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.585224][ T9185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.609315][T12114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.616621][T12114] IPv6: NLM_F_CREATE should be set when creating new route [ 220.623987][T12114] IPv6: NLM_F_CREATE should be set when creating new route [ 220.706676][ T9184] bridge_slave_1: left allmulticast mode [ 220.712449][ T9184] bridge_slave_1: left promiscuous mode [ 220.728980][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.771340][ T9184] bridge_slave_0: left allmulticast mode [ 220.788078][ T9184] bridge_slave_0: left promiscuous mode [ 220.793811][ T9184] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.205594][ T5847] Bluetooth: hci1: command tx timeout [ 221.515743][ T9184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.594288][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 221.610355][T12133] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1837'. [ 221.619507][T12133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1837'. [ 221.707608][ T9184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.718946][ T9184] bond0 (unregistering): Released all slaves [ 222.114812][T11978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.183887][T11978] veth0_vlan: entered promiscuous mode [ 222.439854][T11978] veth1_vlan: entered promiscuous mode [ 222.476034][ T5847] Bluetooth: hci4: command tx timeout [ 222.512765][ T9184] hsr_slave_0: left promiscuous mode [ 222.522677][ T9184] hsr_slave_1: left promiscuous mode [ 222.540229][ T9184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.549871][ T9184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.561519][ T9184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.572333][ T9184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.611529][ T9184] veth1_macvtap: left promiscuous mode [ 222.620930][ T9184] veth0_macvtap: left promiscuous mode [ 222.628678][ T9184] veth1_vlan: left promiscuous mode [ 222.633996][ T9184] veth0_vlan: left promiscuous mode [ 223.282729][ T5847] Bluetooth: hci1: command tx timeout [ 223.437316][ T9184] team0 (unregistering): Port device team_slave_1 removed [ 223.504988][ T9184] team0 (unregistering): Port device team_slave_0 removed [ 224.553067][T11978] veth0_macvtap: entered promiscuous mode [ 224.561071][ T5847] Bluetooth: hci4: command tx timeout [ 224.711593][T12154] FAULT_INJECTION: forcing a failure. [ 224.711593][T12154] name failslab, interval 1, probability 0, space 0, times 0 [ 224.741027][T12154] CPU: 1 UID: 0 PID: 12154 Comm: syz.4.1842 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 [ 224.751848][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 224.761944][T12154] Call Trace: [ 224.765235][T12154] [ 224.768184][T12154] dump_stack_lvl+0x241/0x360 [ 224.772891][T12154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.778110][T12154] ? __pfx__printk+0x10/0x10 [ 224.782746][T12154] should_fail_ex+0x3b0/0x4e0 [ 224.787464][T12154] should_failslab+0xac/0x100 [ 224.792175][T12154] ? skb_clone+0x20c/0x390 [ 224.796884][T12154] kmem_cache_alloc_noprof+0x70/0x380 [ 224.802285][T12154] skb_clone+0x20c/0x390 [ 224.806555][T12154] __netlink_deliver_tap+0x3cc/0x7f0 [ 224.811871][T12154] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.817087][T12154] netlink_deliver_tap+0x19d/0x1b0 [ 224.822225][T12154] netlink_unicast+0x7c4/0x990 [ 224.827022][T12154] ? __pfx_netlink_unicast+0x10/0x10 [ 224.832334][T12154] ? __virt_addr_valid+0x45f/0x530 [ 224.837472][T12154] ? __phys_addr_symbol+0x2f/0x70 [ 224.842514][T12154] ? __check_object_size+0x47a/0x730 [ 224.847822][T12154] netlink_sendmsg+0x8e4/0xcb0 [ 224.852616][T12154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.857921][T12154] ? aa_sock_msg_perm+0x91/0x160 [ 224.862882][T12154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.868189][T12154] __sock_sendmsg+0x221/0x270 [ 224.872987][T12154] ____sys_sendmsg+0x52a/0x7e0 [ 224.877786][T12154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.883087][T12154] ? __fget_files+0x2a/0x410 [ 224.887710][T12154] ? __fget_files+0x2a/0x410 [ 224.892337][T12154] __sys_sendmsg+0x269/0x350 [ 224.896958][T12154] ? __pfx_lock_release+0x10/0x10 [ 224.902013][T12154] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.907164][T12154] ? __pfx_vfs_write+0x10/0x10 [ 224.911970][T12154] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.918320][T12154] ? do_syscall_64+0x100/0x230 [ 224.923104][T12154] ? do_syscall_64+0xb6/0x230 [ 224.927795][T12154] do_syscall_64+0xf3/0x230 [ 224.932311][T12154] ? clear_bhb_loop+0x35/0x90 [ 224.937009][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.942921][T12154] RIP: 0033:0x7f3b84b85d29 [ 224.947351][T12154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.966983][T12154] RSP: 002b:00007f3b8597a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.975431][T12154] RAX: ffffffffffffffda RBX: 00007f3b84d75fa0 RCX: 00007f3b84b85d29 [ 224.983424][T12154] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 224.991415][T12154] RBP: 00007f3b8597a090 R08: 0000000000000000 R09: 0000000000000000 [ 224.999410][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.007395][T12154] R13: 0000000000000000 R14: 00007f3b84d75fa0 R15: 00007ffd67242678 [ 225.015403][T12154] [ 225.037730][T11978] veth1_macvtap: entered promiscuous mode [ 225.053204][T11978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.064155][T11978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.154990][T11978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.164440][T11978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.175498][T11978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.179376][T12157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1843'. [ 225.184204][T11978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.220462][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'. [ 225.287821][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'. [ 225.302648][T12157] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1843'. [ 225.345270][T12162] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 225.358179][T12162] bond5: (slave vti0): Error -95 calling set_mac_address [ 225.416775][ T9185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.427241][ T9185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.461818][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.469768][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.479230][T12009] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 225.490339][T12169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1847'. [ 225.496262][T12009] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.512671][T12009] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.521517][T12169] netlink: 'syz.4.1847': attribute type 2 has an invalid length. [ 225.567514][T12009] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.837831][T12176] tipc: Enabling of bearer rejected, already enabled [ 225.869525][T12009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.890279][T12009] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.901787][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.908947][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.932197][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.939373][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.199409][T12189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1852'. [ 226.209394][T12189] netlink: 'syz.2.1852': attribute type 3 has an invalid length. [ 226.284764][T12009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.351882][T12009] veth0_vlan: entered promiscuous mode [ 226.362866][T12192] netlink: 'syz.2.1853': attribute type 1 has an invalid length. [ 226.378936][T12009] veth1_vlan: entered promiscuous mode [ 226.441760][T12009] veth0_macvtap: entered promiscuous mode [ 226.477473][T12009] veth1_macvtap: entered promiscuous mode [ 226.566855][ T9187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.624638][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.649937][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.662304][T12009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.690509][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.701452][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.713950][T12009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.734511][T12009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.743749][T12009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.752952][T12009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.761955][T12009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.843397][ T9187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.891411][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.904549][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.931190][ T9184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.939938][ T9184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.017674][ T9187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.081216][ T9187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.183811][ T9187] bridge_slave_1: left allmulticast mode [ 227.190259][ T9187] bridge_slave_1: left promiscuous mode [ 227.197095][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.207602][ T9187] bridge_slave_0: left allmulticast mode [ 227.213284][ T9187] bridge_slave_0: left promiscuous mode [ 227.219492][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.486590][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 227.649169][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.661567][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.673052][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.682555][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.690649][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.700557][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.742524][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 227.878356][ T9187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.904694][ T9187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.921144][ T9187] bond0 (unregistering): Released all slaves [ 227.934806][T12195] FAULT_INJECTION: forcing a failure. [ 227.934806][T12195] name failslab, interval 1, probability 0, space 0, times 0 [ 227.958848][T12203] IPVS: Error joining to the multicast group [ 227.965223][T12205] netlink: 'syz.4.1859': attribute type 2 has an invalid length. [ 227.985909][T12195] CPU: 1 UID: 0 PID: 12195 Comm: syz.2.1855 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 [ 227.996714][T12195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 228.006792][T12195] Call Trace: [ 228.010090][T12195] [ 228.013035][T12195] dump_stack_lvl+0x241/0x360 [ 228.017746][T12195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.022975][T12195] ? __pfx__printk+0x10/0x10 [ 228.027591][T12195] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 228.033599][T12195] ? __pfx___might_resched+0x10/0x10 [ 228.038924][T12195] should_fail_ex+0x3b0/0x4e0 [ 228.043640][T12195] should_failslab+0xac/0x100 [ 228.048334][T12195] kmem_cache_alloc_node_noprof+0x77/0x380 [ 228.054139][T12195] ? __alloc_skb+0x1c3/0x440 [ 228.058749][T12195] __alloc_skb+0x1c3/0x440 [ 228.063162][T12195] ? __pfx___alloc_skb+0x10/0x10 [ 228.068101][T12195] ? netlink_ack_tlv_len+0x6e/0x200 [ 228.073292][T12195] netlink_ack+0x145/0xa50 [ 228.077788][T12195] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 228.083159][T12195] ? __pfx_nl80211_post_doit+0x10/0x10 [ 228.088617][T12195] ? __pfx___might_resched+0x10/0x10 [ 228.093907][T12195] netlink_rcv_skb+0x262/0x430 [ 228.098744][T12195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.103768][T12195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.109077][T12195] genl_rcv+0x28/0x40 [ 228.113059][T12195] netlink_unicast+0x7f6/0x990 [ 228.117830][T12195] ? __pfx_netlink_unicast+0x10/0x10 [ 228.123113][T12195] ? __virt_addr_valid+0x45f/0x530 [ 228.128222][T12195] ? __phys_addr_symbol+0x2f/0x70 [ 228.133243][T12195] ? __check_object_size+0x47a/0x730 [ 228.138545][T12195] netlink_sendmsg+0x8e4/0xcb0 [ 228.143315][T12195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.148597][T12195] ? aa_sock_msg_perm+0x91/0x160 [ 228.153540][T12195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.158825][T12195] __sock_sendmsg+0x221/0x270 [ 228.163507][T12195] ____sys_sendmsg+0x52a/0x7e0 [ 228.168276][T12195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.173553][T12195] ? __fget_files+0x2a/0x410 [ 228.178146][T12195] ? __fget_files+0x2a/0x410 [ 228.182736][T12195] __sys_sendmsg+0x269/0x350 [ 228.187327][T12195] ? __pfx_lock_release+0x10/0x10 [ 228.192350][T12195] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.197467][T12195] ? __pfx_vfs_write+0x10/0x10 [ 228.202243][T12195] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 228.208567][T12195] ? do_syscall_64+0x100/0x230 [ 228.213333][T12195] ? do_syscall_64+0xb6/0x230 [ 228.218011][T12195] do_syscall_64+0xf3/0x230 [ 228.222511][T12195] ? clear_bhb_loop+0x35/0x90 [ 228.227186][T12195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.233071][T12195] RIP: 0033:0x7f6910f85d29 [ 228.237482][T12195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.257085][T12195] RSP: 002b:00007f6911ddc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.265501][T12195] RAX: ffffffffffffffda RBX: 00007f6911175fa0 RCX: 00007f6910f85d29 [ 228.273468][T12195] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 228.281431][T12195] RBP: 00007f6911ddc090 R08: 0000000000000000 R09: 0000000000000000 [ 228.289402][T12195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.297365][T12195] R13: 0000000000000000 R14: 00007f6911175fa0 R15: 00007ffd87fb10d8 [ 228.305344][T12195] [ 228.541978][T12207] chnl_net:caif_netlink_parms(): no params data found [ 228.568289][ T9187] hsr_slave_0: left promiscuous mode [ 228.574682][ T9187] hsr_slave_1: left promiscuous mode [ 228.582248][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.590664][ T9187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.598751][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.606769][ T9187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.627677][ T9187] veth1_macvtap: left promiscuous mode [ 228.633216][ T9187] veth0_macvtap: left promiscuous mode [ 228.641246][ T9187] veth1_vlan: left promiscuous mode [ 228.647683][ T9187] veth0_vlan: left promiscuous mode [ 228.834755][T12221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1861'. [ 228.972557][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1862'. [ 229.144103][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.164900][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.175248][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.189224][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.209330][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.216836][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.757337][ T5847] Bluetooth: hci1: command tx timeout [ 229.910877][ T9187] team0 (unregistering): Port device team_slave_1 removed [ 229.951089][ T9187] team0 (unregistering): Port device team_slave_0 removed [ 230.586119][T12207] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.601927][T12207] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.613099][T12207] bridge_slave_0: entered allmulticast mode [ 230.627776][T12207] bridge_slave_0: entered promiscuous mode [ 230.636324][T12207] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.643468][T12207] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.651598][T12207] bridge_slave_1: entered allmulticast mode [ 230.662660][T12207] bridge_slave_1: entered promiscuous mode [ 230.693183][T12253] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 230.727072][T12255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1869'. [ 230.770803][T12207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.833475][T12207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.887719][T12255] ip6t_rpfilter: unknown options [ 230.901186][T12207] team0: Port device team_slave_0 added [ 230.957446][T12207] team0: Port device team_slave_1 added [ 231.043017][T12207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.060107][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.090597][T12207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.161776][ T9187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.206548][T12207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.214847][T12207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.246333][T12207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.275893][ T5847] Bluetooth: hci4: command tx timeout [ 231.295259][ T9187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.457280][ T9187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.507848][T12207] hsr_slave_0: entered promiscuous mode [ 231.515366][T12275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1873'. [ 231.528255][T12207] hsr_slave_1: entered promiscuous mode [ 231.536556][T12276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1873'. [ 231.554437][T12207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.575967][T12207] Cannot create hsr debugfs directory [ 231.619123][T12234] chnl_net:caif_netlink_parms(): no params data found [ 231.660478][ T9187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.696607][T12280] unknown channel width for channel at 909000KHz? [ 231.837468][ T5847] Bluetooth: hci1: command tx timeout [ 231.905787][T12284] tap0: tun_chr_ioctl cmd 1074025677 [ 231.911373][T12284] tap0: linktype set to 769 [ 232.062634][T12234] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.081993][T12234] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.094280][T12234] bridge_slave_0: entered allmulticast mode [ 232.102025][T12234] bridge_slave_0: entered promiscuous mode [ 232.159565][T12302] netlink: 'syz.4.1880': attribute type 2 has an invalid length. [ 232.171673][T12234] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.179340][T12234] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.191630][T12234] bridge_slave_1: entered allmulticast mode [ 232.199365][T12234] bridge_slave_1: entered promiscuous mode [ 232.212467][ T9187] bridge_slave_1: left allmulticast mode [ 232.235978][ T9187] bridge_slave_1: left promiscuous mode [ 232.241705][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.266835][ T9187] bridge_slave_0: left allmulticast mode [ 232.272592][ T9187] bridge_slave_0: left promiscuous mode [ 232.280278][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.341411][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 232.509431][T12314] netlink: 'syz.0.1882': attribute type 39 has an invalid length. [ 232.640039][ T9187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.651912][ T9187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.667277][ T9187] bond0 (unregistering): Released all slaves [ 232.779299][T12305] wg1: entered promiscuous mode [ 232.795087][T12311] bridge31: port 1(bridge_slave_1) entered blocking state [ 232.825367][T12311] bridge31: port 1(bridge_slave_1) entered disabled state [ 232.834086][T12311] bridge_slave_1: entered allmulticast mode [ 232.841675][T12311] bridge_slave_1: entered promiscuous mode [ 232.892127][T12234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.975125][T12234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.011635][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 233.092255][T12234] team0: Port device team_slave_0 added [ 233.112341][T12234] team0: Port device team_slave_1 added [ 233.250338][ T9187] hsr_slave_0: left promiscuous mode [ 233.278854][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 233.299166][ T9187] hsr_slave_1: left promiscuous mode [ 233.316761][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.324218][ T9187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.356000][ T5847] Bluetooth: hci4: command tx timeout [ 233.357405][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.393887][ T9187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.425177][ T9187] veth1_macvtap: left promiscuous mode [ 233.434600][ T9187] veth0_macvtap: left promiscuous mode [ 233.449234][ T9187] veth1_vlan: left promiscuous mode [ 233.454555][ T9187] veth0_vlan: left promiscuous mode [ 233.918137][ T5847] Bluetooth: hci1: command tx timeout [ 233.941936][ T9187] team0 (unregistering): Port device team_slave_1 removed [ 233.983718][ T9187] team0 (unregistering): Port device team_slave_0 removed [ 234.366751][T12335] smc: net device bond0 applied user defined pnetid SYZ0 [ 234.374324][T12337] smc: net device bond0 erased user defined pnetid SYZ0 [ 234.387970][T12343] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1890'. [ 234.446755][T12234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.453736][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.480469][T12234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.492956][T12234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.500003][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.526341][T12234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.721196][T12234] hsr_slave_0: entered promiscuous mode [ 234.730274][T12234] hsr_slave_1: entered promiscuous mode [ 234.745854][T12234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.756969][T12234] Cannot create hsr debugfs directory [ 234.820932][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1894'. [ 234.830494][T12207] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.896040][T12207] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.921499][T12207] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.956878][T12357] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1894'. [ 234.995584][T12207] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.117413][T12377] netlink: 'syz.2.1896': attribute type 1 has an invalid length. [ 235.135657][T12377] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1896'. [ 235.312718][T12207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.394491][T12207] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.420862][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.428036][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.435688][ T5847] Bluetooth: hci4: command tx timeout [ 235.486514][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.493645][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.562519][T12207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.719287][T12234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.744281][T12234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.782997][T12234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.801785][T12234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 235.873273][T12405] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 235.974248][T12405] 8021q: adding VLAN 0 to HW filter on device bond8 [ 235.983183][T12405] bond7: (slave bond8): making interface the new active one [ 235.992565][T12405] bond7: (slave bond8): Enslaving as an active interface with an up link [ 235.996058][ T5847] Bluetooth: hci1: command tx timeout [ 236.011066][T12207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.092868][T12416] __nla_validate_parse: 3 callbacks suppressed [ 236.092888][T12416] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1908'. [ 236.139687][T12207] veth0_vlan: entered promiscuous mode [ 236.165006][T12234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.182222][T12207] veth1_vlan: entered promiscuous mode [ 236.220807][T12234] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.263004][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.270186][ T9184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.291785][T12207] veth0_macvtap: entered promiscuous mode [ 236.316739][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.321061][T12423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1910'. [ 236.323854][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.376221][T12207] veth1_macvtap: entered promiscuous mode [ 236.391997][T12207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.429742][T12207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.470877][T12207] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.484002][T12207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.494671][T12207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.508168][T12207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.548996][T12425] netlink: 'syz.0.1911': attribute type 16 has an invalid length. [ 236.558468][T12425] netlink: 'syz.0.1911': attribute type 17 has an invalid length. [ 236.662253][T12234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.698554][T12234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.727885][T12429] tipc: Enabling of bearer rejected, failed to enable media [ 236.741606][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 236.822542][T12436] netlink: 'syz.4.1914': attribute type 10 has an invalid length. [ 236.978116][T12440] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1915'. [ 237.086132][ T9186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.101177][ T9186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.222601][ T9184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.246303][ T9184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.262717][T12234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.459926][T12234] veth0_vlan: entered promiscuous mode [ 237.484496][T12234] veth1_vlan: entered promiscuous mode [ 237.515980][ T5847] Bluetooth: hci4: command tx timeout [ 237.542827][T12234] veth0_macvtap: entered promiscuous mode [ 237.562209][T12234] veth1_macvtap: entered promiscuous mode [ 237.573372][T12451] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 237.584565][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'. [ 237.593929][T12451] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 237.604151][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.620799][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.633283][T12234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.649905][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.661331][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.674064][T12234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.711731][T12234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.723778][T12234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.735686][T12234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.744382][T12234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.813256][ T9184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.826243][ T9184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.892260][ T9184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.910325][ T9184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.064987][ T9187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.352076][ T9187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.814298][ T9187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.948301][ T9187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.057356][ T9187] bridge_slave_1: left allmulticast mode [ 239.063436][ T9187] bridge_slave_1: left promiscuous mode [ 239.072875][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.075138][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.091997][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.092576][ T9187] bridge_slave_0: left allmulticast mode [ 239.100157][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.105366][ T9187] bridge_slave_0: left promiscuous mode [ 239.113398][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.121906][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.128329][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 239.139683][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.432801][ T9187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.444687][ T9187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.455098][ T9187] bond0 (unregistering): Released all slaves [ 239.593050][T12467] chnl_net:caif_netlink_parms(): no params data found [ 239.743203][T12481] netlink: 4224 bytes leftover after parsing attributes in process `syz.2.1922'. [ 239.744800][T12480] netlink: 'syz.4.1923': attribute type 3 has an invalid length. [ 239.862652][ T9187] hsr_slave_0: left promiscuous mode [ 239.890760][ T9187] hsr_slave_1: left promiscuous mode [ 239.912371][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.932393][ T9187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.962661][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.975974][ T9187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.015160][ T9187] veth1_macvtap: left promiscuous mode [ 240.021251][ T9187] veth0_macvtap: left promiscuous mode [ 240.031225][ T9187] veth1_vlan: left promiscuous mode [ 240.037578][ T9187] veth0_vlan: left promiscuous mode [ 240.093847][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.104689][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.113677][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.121821][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.131561][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 240.139071][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.509893][ T9187] team0 (unregistering): Port device team_slave_1 removed [ 240.553175][ T9187] team0 (unregistering): Port device team_slave_0 removed [ 240.929735][T12467] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.937834][T12467] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.945050][T12467] bridge_slave_0: entered allmulticast mode [ 240.966295][T12467] bridge_slave_0: entered promiscuous mode [ 240.986856][T12467] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.997586][T12467] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.004898][T12467] bridge_slave_1: entered allmulticast mode [ 241.013208][T12467] bridge_slave_1: entered promiscuous mode [ 241.027987][T12495] bridge0: port 1(gretap0) entered blocking state [ 241.034493][T12495] bridge0: port 1(gretap0) entered disabled state [ 241.042338][T12495] gretap0: entered allmulticast mode [ 241.050247][T12495] gretap0: left allmulticast mode [ 241.182040][T12467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.206813][ T5847] Bluetooth: hci1: command tx timeout [ 241.224440][T12467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.250418][T12506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1929'. [ 241.268268][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'. [ 241.373256][T12467] team0: Port device team_slave_0 added [ 241.398884][T12467] team0: Port device team_slave_1 added [ 241.509131][T12467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.524323][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.554240][T12467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.577597][T12467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.584726][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.612134][T12467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.696417][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 241.731374][T12467] hsr_slave_0: entered promiscuous mode [ 241.741652][T12467] hsr_slave_1: entered promiscuous mode [ 241.748692][T12467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.757241][T12467] Cannot create hsr debugfs directory [ 241.844959][T12493] chnl_net:caif_netlink_parms(): no params data found [ 241.952614][ T6071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.093007][T12547] netlink: 'syz.4.1939': attribute type 1 has an invalid length. [ 242.095111][ T6071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.101578][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 242.125057][T12547] netlink: 'syz.4.1939': attribute type 1 has an invalid length. [ 242.242610][ T5847] Bluetooth: hci4: command tx timeout [ 242.311652][ T6071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.313500][T12563] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 242.391474][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 242.418051][ T6071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.439193][T12493] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.452570][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.460671][T12493] bridge_slave_0: entered allmulticast mode [ 242.468225][T12493] bridge_slave_0: entered promiscuous mode [ 242.509636][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1944'. [ 242.531981][T12568] team0: Mode "" not found [ 242.537658][T12493] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.545243][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.553248][T12493] bridge_slave_1: entered allmulticast mode [ 242.560488][T12493] bridge_slave_1: entered promiscuous mode [ 242.619605][T12493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.645112][T12493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.721489][T12493] team0: Port device team_slave_0 added [ 242.739675][T12493] team0: Port device team_slave_1 added [ 242.834020][T12493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.841544][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.870771][T12493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.883641][T12493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.894511][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.923656][T12493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.948850][ T6071] bridge_slave_1: left allmulticast mode [ 242.955121][ T6071] bridge_slave_1: left promiscuous mode [ 242.962292][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.972441][ T6071] bridge_slave_0: left allmulticast mode [ 242.979313][ T6071] bridge_slave_0: left promiscuous mode [ 242.985068][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.023216][T12582] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1949'. [ 243.032749][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1949'. [ 243.276331][ T5847] Bluetooth: hci1: command tx timeout [ 243.540745][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.570612][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.600845][ T6071] bond0 (unregistering): Released all slaves [ 243.769493][T12612] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1955'. [ 243.831309][T12612] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1955'. [ 243.942079][T12493] hsr_slave_0: entered promiscuous mode [ 243.948772][T12493] hsr_slave_1: entered promiscuous mode [ 243.954921][T12493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.963082][T12493] Cannot create hsr debugfs directory [ 244.141230][T12467] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 244.153867][T12467] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 244.205352][T12467] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 244.227909][T12467] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 244.266928][ T6071] hsr_slave_0: left promiscuous mode [ 244.273293][ T6071] hsr_slave_1: left promiscuous mode [ 244.286179][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.293705][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.302347][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.310531][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.323274][ T5847] Bluetooth: hci4: command tx timeout [ 244.339167][ T6071] veth1_macvtap: left promiscuous mode [ 244.344803][ T6071] veth0_macvtap: left promiscuous mode [ 244.350658][ T6071] veth1_vlan: left promiscuous mode [ 244.356514][ T6071] veth0_vlan: left promiscuous mode [ 244.803626][T12639] netlink: 'syz.2.1964': attribute type 32 has an invalid length. [ 244.849808][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 244.899339][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 245.351669][T12639] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 245.361586][ T5847] Bluetooth: hci1: command tx timeout [ 245.469606][T12467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.485880][T12467] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.497212][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.504347][ T9184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.580686][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.587871][ T9187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.713501][T12467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.732849][T12467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.759831][T12653] netlink: 'syz.4.1967': attribute type 21 has an invalid length. [ 245.966884][T12493] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.999839][T12493] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.045919][T12493] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.068552][T12493] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.103993][T12467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.198981][T12467] veth0_vlan: entered promiscuous mode [ 246.247963][T12467] veth1_vlan: entered promiscuous mode [ 246.274501][T12493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.344659][T12691] __nla_validate_parse: 8 callbacks suppressed [ 246.344680][T12691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1977'. [ 246.367562][T12467] veth0_macvtap: entered promiscuous mode [ 246.378307][T12493] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.392409][T12467] veth1_macvtap: entered promiscuous mode [ 246.399086][ T5847] Bluetooth: hci4: command tx timeout [ 246.414289][T12467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.470704][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.477945][ T9184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.502682][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.509879][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.526941][T12467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.564216][T12467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.573480][T12467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.587978][T12467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.598947][T12467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.729668][ T9181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.756182][ T9181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.785236][ T9184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.811554][ T9184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.883212][T12493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.987563][T12493] veth0_vlan: entered promiscuous mode [ 247.002718][T12493] veth1_vlan: entered promiscuous mode [ 247.011885][T12707] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1981'. [ 247.060235][T12493] veth0_macvtap: entered promiscuous mode [ 247.073388][T12493] veth1_macvtap: entered promiscuous mode [ 247.107550][T12493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.123554][T12711] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 247.124098][T12493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.134604][T12711] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1983'. [ 247.143043][T12493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.170543][T12493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.199369][T12493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.224174][T12493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.245106][T12493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.259680][T12493] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.270345][T12493] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.300062][T12493] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.413388][T12723] netlink: 'syz.0.1986': attribute type 13 has an invalid length. [ 247.422226][T12723] netlink: 'syz.0.1986': attribute type 58 has an invalid length. [ 247.430715][T12723] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1986'. [ 247.450965][ T9187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.470147][ T9187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.493410][T12725] netlink: 'syz.2.1987': attribute type 12 has an invalid length. [ 247.519546][ T9185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.531841][ T9185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.752018][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'. [ 247.765721][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1991'. [ 247.776890][T12734] netlink: 'syz.4.1991': attribute type 25 has an invalid length. [ 247.823555][T12736] netlink: 'syz.2.1992': attribute type 3 has an invalid length. [ 247.851554][T12736] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1992'. [ 248.009606][ T6071] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.871732][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 248.991420][ T6071] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.068934][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.080576][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.089445][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.097389][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.106605][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 249.113903][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.211756][T12756] chnl_net:caif_netlink_parms(): no params data found [ 249.253884][T12756] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.262055][T12756] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.269600][T12756] bridge_slave_0: entered allmulticast mode [ 249.277714][T12756] bridge_slave_0: entered promiscuous mode [ 249.285060][T12756] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.292936][T12756] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.300527][T12756] bridge_slave_1: entered allmulticast mode [ 249.308783][T12756] bridge_slave_1: entered promiscuous mode [ 249.328082][T12756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.339761][T12756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.370298][T12756] team0: Port device team_slave_0 added [ 249.380277][T12756] team0: Port device team_slave_1 added [ 249.400437][T12756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.408237][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.440052][T12756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.469978][ T6071] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.482713][T12756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.491466][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.519119][T12756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.543025][ T6071] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.576725][T12756] hsr_slave_0: entered promiscuous mode [ 249.582960][T12756] hsr_slave_1: entered promiscuous mode [ 249.590822][T12756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.599338][T12756] Cannot create hsr debugfs directory [ 249.687276][ T9184] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 249.717985][ T6071] bridge_slave_1: left allmulticast mode [ 249.723690][ T6071] bridge_slave_1: left promiscuous mode [ 249.758205][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.786777][ T6071] bridge_slave_0: left allmulticast mode [ 249.796406][ T6071] bridge_slave_0: left promiscuous mode [ 249.802881][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.826894][T12771] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1999'. [ 250.023964][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.035908][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.050470][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.062604][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.072714][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 250.081772][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.245593][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 250.408307][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.419617][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.431421][ T6071] bond0 (unregistering): Released all slaves [ 251.102421][ T6071] hsr_slave_0: left promiscuous mode [ 251.119179][ T6071] hsr_slave_1: left promiscuous mode [ 251.196786][ T5847] Bluetooth: hci1: command tx timeout [ 251.208580][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.225557][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.253101][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.262575][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.291253][ T6071] veth1_macvtap: left promiscuous mode [ 251.297337][ T6071] veth0_macvtap: left promiscuous mode [ 251.303018][ T6071] veth1_vlan: left promiscuous mode [ 251.308678][ T6071] veth0_vlan: left promiscuous mode [ 251.406127][T12832] openvswitch: netlink: ufid size 204 bytes exceeds the range (1, 16) [ 251.412453][T12831] openvswitch: netlink: ufid size 204 bytes exceeds the range (1, 16) [ 251.414512][T12832] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 251.462593][T12831] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 251.638859][T12838] __nla_validate_parse: 5 callbacks suppressed [ 251.638879][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2017'. [ 251.710362][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 251.982141][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 252.027219][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 252.160121][ T5847] Bluetooth: hci4: command tx timeout [ 252.443856][T12839] bridge4: entered promiscuous mode [ 252.450710][T12839] macsec3: entered promiscuous mode [ 252.456271][T12839] macsec3: entered allmulticast mode [ 252.461554][T12839] bridge4: entered allmulticast mode [ 252.666427][T12756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.739643][T12776] chnl_net:caif_netlink_parms(): no params data found [ 252.760919][T12756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.773829][T12853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2019'. [ 252.822765][T12756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.893131][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 252.922365][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 252.931980][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 252.966030][T12756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.119515][T12870] team0: entered promiscuous mode [ 253.144352][T12776] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.153210][T12776] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.161321][T12776] bridge_slave_0: entered allmulticast mode [ 253.169004][T12776] bridge_slave_0: entered promiscuous mode [ 253.177897][T12868] team0: left promiscuous mode [ 253.182926][T12776] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.191738][T12776] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.203914][T12776] bridge_slave_1: entered allmulticast mode [ 253.213202][T12776] bridge_slave_1: entered promiscuous mode [ 253.275621][ T5847] Bluetooth: hci1: command tx timeout [ 253.278854][ T6071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.303391][T12874] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.364463][T12776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.380720][T12776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.414598][ T6071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.433117][T12756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.454676][T12874] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.543733][ T6071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.591740][T12776] team0: Port device team_slave_0 added [ 253.612306][T12874] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.646402][T12776] team0: Port device team_slave_1 added [ 253.672027][ T6071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.689332][T12756] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.701160][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 253.714155][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 253.728655][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 253.740143][T12874] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.769249][T12776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.779705][T12776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.808693][T12776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.848082][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.855266][ T9186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.865126][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.872259][ T9186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.890115][T12776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.897845][T12776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.932642][T12776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.999307][T12776] hsr_slave_0: entered promiscuous mode [ 254.011477][T12776] hsr_slave_1: entered promiscuous mode [ 254.019436][T12776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.027667][T12776] Cannot create hsr debugfs directory [ 254.057404][T12874] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.102044][T12874] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.118707][T12874] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.147469][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 254.166677][T12874] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.175186][ T6071] bridge_slave_1: left allmulticast mode [ 254.185978][ T6071] bridge_slave_1: left promiscuous mode [ 254.191750][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.209210][ T6071] bridge_slave_0: left allmulticast mode [ 254.215061][ T6071] bridge_slave_0: left promiscuous mode [ 254.221480][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.235804][ T5847] Bluetooth: hci4: command tx timeout [ 254.590202][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.601323][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.611994][ T6071] bond0 (unregistering): Released all slaves [ 254.651664][T12897] gretap0: entered promiscuous mode [ 254.684661][T12897] macsec1: entered promiscuous mode [ 254.690839][T12897] macsec1: entered allmulticast mode [ 254.702375][T12897] gretap0: entered allmulticast mode [ 254.720516][T12900] netlink: 'syz.0.2034': attribute type 3 has an invalid length. [ 254.847750][T12905] netlink: 'syz.4.2036': attribute type 1 has an invalid length. [ 255.034321][T12921] [ 255.036697][T12921] ====================================================== [ 255.043726][T12921] WARNING: possible circular locking dependency detected [ 255.050759][T12921] 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 Not tainted [ 255.057881][T12921] ------------------------------------------------------ [ 255.064915][T12921] syz.4.2036/12921 is trying to acquire lock: [ 255.070999][T12921] ffffffff8fcb2008 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x9e8/0x3640 [ 255.080166][T12921] [ 255.080166][T12921] but task is already holding lock: [ 255.087533][T12921] ffff8880793b38a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 255.097658][T12921] [ 255.097658][T12921] which lock already depends on the new lock. [ 255.097658][T12921] [ 255.108067][T12921] [ 255.108067][T12921] the existing dependency chain (in reverse order) is: [ 255.117077][T12921] [ 255.117077][T12921] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 255.125676][T12921] lock_acquire+0x1ed/0x550 [ 255.130698][T12921] __mutex_lock+0x1ac/0xee0 [ 255.135714][T12921] smc_switch_to_fallback+0x35/0xd90 [ 255.141515][T12921] smc_sendmsg+0x11f/0x530 [ 255.146451][T12921] __sock_sendmsg+0x221/0x270 [ 255.151650][T12921] __sys_sendto+0x363/0x4c0 [ 255.156664][T12921] __x64_sys_sendto+0xde/0x100 [ 255.161941][T12921] do_syscall_64+0xf3/0x230 [ 255.166955][T12921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.173363][T12921] [ 255.173363][T12921] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 255.181005][T12921] lock_acquire+0x1ed/0x550 [ 255.186025][T12921] lock_sock_nested+0x48/0x100 [ 255.191308][T12921] do_ip_setsockopt+0x1a2d/0x3cd0 [ 255.196844][T12921] ip_setsockopt+0x63/0x100 [ 255.201877][T12921] do_sock_setsockopt+0x3af/0x720 [ 255.207419][T12921] __x64_sys_setsockopt+0x1ee/0x280 [ 255.213128][T12921] do_syscall_64+0xf3/0x230 [ 255.218146][T12921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.224554][T12921] [ 255.224554][T12921] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 255.231759][T12921] validate_chain+0x18ef/0x5920 [ 255.237128][T12921] __lock_acquire+0x1397/0x2100 [ 255.242502][T12921] lock_acquire+0x1ed/0x550 [ 255.247528][T12921] __mutex_lock+0x1ac/0xee0 [ 255.252547][T12921] do_ipv6_setsockopt+0x9e8/0x3640 [ 255.258172][T12921] ipv6_setsockopt+0x5d/0x170 [ 255.263362][T12921] smc_setsockopt+0x275/0xe50 [ 255.268549][T12921] do_sock_setsockopt+0x3af/0x720 [ 255.274091][T12921] __x64_sys_setsockopt+0x1ee/0x280 [ 255.279801][T12921] do_syscall_64+0xf3/0x230 [ 255.284817][T12921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.291220][T12921] [ 255.291220][T12921] other info that might help us debug this: [ 255.291220][T12921] [ 255.301434][T12921] Chain exists of: [ 255.301434][T12921] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 255.301434][T12921] [ 255.314988][T12921] Possible unsafe locking scenario: [ 255.314988][T12921] [ 255.322515][T12921] CPU0 CPU1 [ 255.327868][T12921] ---- ---- [ 255.333220][T12921] lock(&smc->clcsock_release_lock); [ 255.338587][T12921] lock(sk_lock-AF_INET); [ 255.345520][T12921] lock(&smc->clcsock_release_lock); [ 255.353405][T12921] lock(rtnl_mutex); [ 255.357385][T12921] [ 255.357385][T12921] *** DEADLOCK *** [ 255.357385][T12921] [ 255.365512][T12921] 1 lock held by syz.4.2036/12921: [ 255.370608][T12921] #0: ffff8880793b38a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 255.381135][T12921] [ 255.381135][T12921] stack backtrace: [ 255.387008][T12921] CPU: 0 UID: 0 PID: 12921 Comm: syz.4.2036 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 [ 255.397753][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 255.407890][T12921] Call Trace: [ 255.411161][T12921] [ 255.414090][T12921] dump_stack_lvl+0x241/0x360 [ 255.418767][T12921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.423958][T12921] ? __pfx__printk+0x10/0x10 [ 255.428542][T12921] print_circular_bug+0x13a/0x1b0 [ 255.433578][T12921] check_noncircular+0x36a/0x4a0 [ 255.438510][T12921] ? mark_lock+0x9a/0x360 [ 255.442941][T12921] ? __pfx_check_noncircular+0x10/0x10 [ 255.448396][T12921] ? lockdep_lock+0x123/0x2b0 [ 255.453066][T12921] ? validate_chain+0x11e/0x5920 [ 255.458000][T12921] validate_chain+0x18ef/0x5920 [ 255.462848][T12921] ? folio_prealloc+0x2e/0x170 [ 255.467610][T12921] ? validate_chain+0x11e/0x5920 [ 255.472542][T12921] ? __pfx_validate_chain+0x10/0x10 [ 255.477733][T12921] ? validate_chain+0x11e/0x5920 [ 255.482661][T12921] ? page_ext_get+0x20/0x2a0 [ 255.487244][T12921] ? __pfx_validate_chain+0x10/0x10 [ 255.492436][T12921] ? __pfx_validate_chain+0x10/0x10 [ 255.497624][T12921] ? __pfx_validate_chain+0x10/0x10 [ 255.502815][T12921] ? get_page_from_freelist+0x365c/0x37a0 [ 255.508524][T12921] ? __pfx_validate_chain+0x10/0x10 [ 255.513715][T12921] ? __pfx_validate_chain+0x10/0x10 [ 255.518911][T12921] ? __lock_acquire+0x1397/0x2100 [ 255.523935][T12921] ? mark_lock+0x9a/0x360 [ 255.528258][T12921] __lock_acquire+0x1397/0x2100 [ 255.533105][T12921] lock_acquire+0x1ed/0x550 [ 255.537600][T12921] ? do_ipv6_setsockopt+0x9e8/0x3640 [ 255.542888][T12921] ? __pfx_lock_acquire+0x10/0x10 [ 255.547912][T12921] ? __pfx___might_resched+0x10/0x10 [ 255.553191][T12921] __mutex_lock+0x1ac/0xee0 [ 255.557687][T12921] ? do_ipv6_setsockopt+0x9e8/0x3640 [ 255.562992][T12921] ? __pfx___might_resched+0x10/0x10 [ 255.568297][T12921] ? do_ipv6_setsockopt+0x9e8/0x3640 [ 255.573593][T12921] ? __pfx___mutex_lock+0x10/0x10 [ 255.578618][T12921] ? __might_fault+0xc6/0x120 [ 255.583301][T12921] do_ipv6_setsockopt+0x9e8/0x3640 [ 255.588426][T12921] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 255.593986][T12921] ? __mutex_trylock_common+0x183/0x2e0 [ 255.599541][T12921] ? __pfx___might_resched+0x10/0x10 [ 255.604830][T12921] ? __pfx___mutex_trylock_common+0x10/0x10 [ 255.610729][T12921] ? rcu_is_watching+0x15/0xb0 [ 255.615495][T12921] ? trace_contention_end+0x3c/0x120 [ 255.620778][T12921] ? __mutex_lock+0x37f/0xee0 [ 255.625470][T12921] ? smc_setsockopt+0x1c3/0xe50 [ 255.630334][T12921] ? __pfx___mutex_lock+0x10/0x10 [ 255.635374][T12921] ipv6_setsockopt+0x5d/0x170 [ 255.640063][T12921] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 255.646130][T12921] smc_setsockopt+0x275/0xe50 [ 255.650802][T12921] ? __pfx_smc_setsockopt+0x10/0x10 [ 255.655992][T12921] ? aa_sock_opt_perm+0x79/0x120 [ 255.660927][T12921] ? __pfx_smc_setsockopt+0x10/0x10 [ 255.666118][T12921] do_sock_setsockopt+0x3af/0x720 [ 255.671143][T12921] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 255.676681][T12921] ? __fget_files+0x395/0x410 [ 255.681354][T12921] ? __fget_files+0x2a/0x410 [ 255.685945][T12921] __x64_sys_setsockopt+0x1ee/0x280 [ 255.691138][T12921] do_syscall_64+0xf3/0x230 [ 255.695635][T12921] ? clear_bhb_loop+0x35/0x90 [ 255.700307][T12921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.706192][T12921] RIP: 0033:0x7f3b84b85d29 [ 255.710599][T12921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.730197][T12921] RSP: 002b:00007f3b85938038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 255.738690][T12921] RAX: ffffffffffffffda RBX: 00007f3b84d76160 RCX: 00007f3b84b85d29 [ 255.746662][T12921] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000005 [ 255.754621][T12921] RBP: 00007f3b84c01aa8 R08: 0000000000000004 R09: 0000000000000000 [ 255.762583][T12921] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 255.770546][T12921] R13: 0000000000000001 R14: 00007f3b84d76160 R15: 00007ffd67242678 [ 255.778513][T12921] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 255.796043][ T5847] Bluetooth: hci1: command tx timeout [ 256.032871][ T6071] hsr_slave_0: left promiscuous mode [ 256.085806][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.183662][ T6071] hsr_slave_1: left promiscuous mode [ 256.193280][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.201137][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.222300][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.231401][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.252650][ T6071] veth1_macvtap: left promiscuous mode [ 256.258679][ T6071] veth0_macvtap: left promiscuous mode [ 256.264270][ T6071] veth1_vlan: left promiscuous mode [ 256.271280][ T6071] veth0_vlan: left promiscuous mode [ 256.410967][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 256.436129][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 257.278587][ T6071] bridge_slave_1: left allmulticast mode [ 257.284234][ T6071] bridge_slave_1: left promiscuous mode [ 257.290318][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.298324][ T6071] bridge_slave_0: left allmulticast mode [ 257.303958][ T6071] bridge_slave_0: left promiscuous mode [ 257.309724][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.318116][ T6071] bridge_slave_1: left allmulticast mode [ 257.323745][ T6071] bridge_slave_1: left promiscuous mode [ 257.329555][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.337684][ T6071] bridge_slave_0: left allmulticast mode [ 257.343318][ T6071] bridge_slave_0: left promiscuous mode [ 257.349095][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.488168][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.498603][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.508385][ T6071] bond0 (unregistering): Released all slaves [ 257.519912][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.530165][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.540530][ T6071] bond0 (unregistering): Released all slaves [ 257.631220][ T6071] hsr_slave_0: left promiscuous mode [ 257.637193][ T6071] hsr_slave_1: left promiscuous mode [ 257.642879][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.651238][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.661090][ T6071] hsr_slave_0: left promiscuous mode [ 257.667406][ T6071] hsr_slave_1: left promiscuous mode [ 257.673120][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.680789][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.763097][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 257.786417][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 257.931796][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 257.954717][ T6071] team0 (unregistering): Port device team_slave_0 removed