last executing test programs: 2m37.584562837s ago: executing program 2 (id=5954): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x2a, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0xffef}, 0x0) 2m37.254438977s ago: executing program 2 (id=5959): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4845}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x0, 0xda, "da78bced111bd546e5faba6bc20fcf29a5babc23c523caacdebc6b0cd2792b64609dbe3ffceef401450b3058e37e7a4778addd71c425fe3911a8b92d31c19e32b2bd3e5fc3cb1d50f2b45cab9072f08f8638cd366f7fbb940ad2c15476dc6f390f2b520435826898afdb3ffe4b83b79e0fbe197867db722b0b506714e649996e6e426a613339b10f0514954e00996afe915b3a21bee195ded221f2d9d2e969529ab509a291c8145708b760fd43151dd09edc67369f9f3876d86ada9c19b6c0388523d43427606039e736f846e64df6fef56102c6ebb6734c2a8e"}) (async) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x0, 0xda, "da78bced111bd546e5faba6bc20fcf29a5babc23c523caacdebc6b0cd2792b64609dbe3ffceef401450b3058e37e7a4778addd71c425fe3911a8b92d31c19e32b2bd3e5fc3cb1d50f2b45cab9072f08f8638cd366f7fbb940ad2c15476dc6f390f2b520435826898afdb3ffe4b83b79e0fbe197867db722b0b506714e649996e6e426a613339b10f0514954e00996afe915b3a21bee195ded221f2d9d2e969529ab509a291c8145708b760fd43151dd09edc67369f9f3876d86ada9c19b6c0388523d43427606039e736f846e64df6fef56102c6ebb6734c2a8e"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x200, 0x8, 0x6, 0xffff, 0xb6}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={r4, 0x8001}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={r4, 0x8001}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r4, 0x789}, &(0x7f0000000380)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r4, 0x789}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in6={0xa, 0x4e22, 0x2, @local, 0x81}, @in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}], 0x74) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0xffff}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0xffff, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x2a, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x1, 0xb, 0x1, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x0, 0x9, 0x0, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000600)='syzkaller\x00', 0x8, 0x8b, &(0x7f0000000640)=""/139, 0x1e00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xd, 0x7, 0x100}, 0x10, r7, 0x0, 0x2, 0x0, &(0x7f00000007c0)=[{0x0, 0x2, 0xf, 0x2}, {0x5, 0x2, 0x1}], 0x10, 0x1, @void, @value}, 0x94) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x2a, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x1, 0xb, 0x1, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x0, 0x9, 0x0, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000600)='syzkaller\x00', 0x8, 0x8b, &(0x7f0000000640)=""/139, 0x1e00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xd, 0x7, 0x100}, 0x10, r7, 0x0, 0x2, 0x0, &(0x7f00000007c0)=[{0x0, 0x2, 0xf, 0x2}, {0x5, 0x2, 0x1}], 0x10, 0x1, @void, @value}, 0x94) getpid() (async) r9 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000900)={r9, r1, 0x0, 0x1, &(0x7f00000008c0)='\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000940)={r5, @in6={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}}, 0x10, 0x0, 0x0, 0x4b7bc45e, 0x2}, &(0x7f0000000a00)=0x98) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x12, r1, 0x0) r11 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000a40)={r4, 0x3}, &(0x7f0000000a80)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000a40)={r4, 0x3}, &(0x7f0000000a80)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f0000000ac0)={r12, @in6={{0xa, 0x4e22, 0x799, @mcast2, 0x114}}, 0x0, 0x8}, 0x90) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000b80)={r10, @in6={{0xa, 0x4e24, 0x101, @local, 0x8}}, 0xffffffff, 0x3, 0x89b, 0x6, 0x80, 0x0, 0xb8}, &(0x7f0000000c40)=0x9c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c80)={'batadv0\x00', 0x0}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x20, 0x8, 0x6, 0x9, 0x440, 0x1, 0x0, '\x00', r13, r0, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f40)={r2, 0xffffffffffffffff}, 0x4) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0xe40, 0x0, 0xbb12, 0x8000, r0, 0xce41, '\x00', r13, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x3, @value=r1, @void, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ba4, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x5, 0x3f129e46c2d04a74, 0x8, 0x3216372566c49728, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000d40)='syzkaller\x00', 0x3, 0xa2, &(0x7f0000000d80)=""/162, 0x40f00, 0xa, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x1, 0x9, 0x7, 0xf0b}, 0x10, 0x21b7e, r8, 0x6, &(0x7f0000001000)=[r6, r14, r15, r16], &(0x7f0000001040)=[{0x5, 0x4, 0x3, 0x4}, {0x0, 0x3, 0xf, 0xb}, {0x2, 0x5, 0xf}, {0x4, 0x2, 0x0, 0x2}, {0x4, 0x4, 0x4}, {0x0, 0x2, 0x8}], 0x10, 0x1, @void, @value}, 0x94) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000001180)={0x0, 0x8, [@local, @remote, @random="8588435faba5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local]}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000001180)={0x0, 0x8, [@local, @remote, @random="8588435faba5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local]}) socket$key(0xf, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001240)=@nat={'nat\x00', 0x1b, 0x5, 0x710, 0x0, 0x3c0, 0xffffffff, 0x3c0, 0x4e0, 0x640, 0x640, 0xffffffff, 0x640, 0x640, 0x5, &(0x7f00000011c0), {[{{@ipv6={@loopback, @remote, [0xffffffff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'hsr0\x00', 'ip6gre0\x00', {}, {0xff}, 0x3b, 0x3, 0x1, 0x18}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@icmp6={{0x28}, {0x4, "069a", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@multicast2, @ipv6=@mcast2, @icmp_id=0x64, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x238, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macvlan0\x00', {0x2, 0x6, 0x84000000, 0x3, 0x81, 0xfffffffe, 0xe7d100, 0x20, 0x40}, {0x5}}}, @common=@rt={{0x138}, {0x8, [0x3, 0x10], 0x76, 0x30, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @dev={0xfe, 0x80, '\x00', 0x11}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x26}, @loopback], 0x4}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@loopback, @gre_key=0x2, @gre_key=0x9}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, [0xff, 0xffffff00, 0xff000000], [0xffffff00, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x88, 0x4, 0x4, 0x8}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x7fffffff, 0x5}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@private=0xa010100, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @gre_key=0x3, @port=0x4e20}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0x0, 0xff000000, 0xff000000], [0xff, 0xffffff00, 0x0, 0xffffff00], 'geneve0\x00', 'syzkaller1\x00', {}, {}, 0x67, 0x0, 0x3, 0x49}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x6, 0x0, 0x0, [0x4bd, 0x8, 0x280, 0xd11d, 0x7, 0x3, 0x2, 0x8, 0x7, 0x8, 0x9, 0xe7, 0xfffe, 0x81, 0x0, 0x8], 0x8}}, @common=@eui64={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x6, @ipv4=@multicast2, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}, @port=0x4e24, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x770) socket$inet_sctp(0x2, 0x1, 0x84) (async) r17 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r17, 0x84, 0x73, &(0x7f00000019c0)={r4, 0xa022, 0x10, 0x101, 0x6}, &(0x7f0000001a00)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r17, 0x84, 0x73, &(0x7f00000019c0)={r4, 0xa022, 0x10, 0x101, 0x6}, &(0x7f0000001a00)=0x18) 2m36.978777786s ago: executing program 2 (id=5962): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) unshare(0x40020000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="166e99ee", 0x4) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000024000480200001800b00010064796e7365740000100002800900010073797a3100000000140000001100010000000000000000000500000a32027e2ea7f546ce4833e0e8c1bf77885dcfb16593de567163ca387c21e68808434f50d30bad4527d01696b563ff3709be036735832c8e57d3ed6c68ae518b8b61bb0dd4ec958c897309efee4095fe8c755141b97911"], 0x78}}, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000100)) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x73, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008d520850000002d00000095525728e3792894d3c1389724"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0xfffffffc}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="660a00000000008061118c000000000085000000d100000095000000000000003aab177437f087ffe9dbd3f96b0f5289f8d638b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) close(0x4) r4 = socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000101100fe8000000000000000000000000000bbfe8000000000000000dd372ad499ca17a0bd309f000000000000aa00000e2200"], 0x0) (rerun: 32) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'wlan0\x00'}}, 0x1e) (async) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e1f, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) (async) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @local}}, 0xffff, 0x4}, &(0x7f0000000200)=0x90) 2m35.285087286s ago: executing program 2 (id=5974): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00004000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m35.179725371s ago: executing program 2 (id=5976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYRES16=r0, @ANYBLOB="d7e3366bb907626e6ce9076943dcda695e9219f9ad70f462f7a98669e4e9e8999b70b477a524e47be4110b67cb4bc382425f390cdf40355708cb9c67473263dfefcb4032f5a83b45151b5d02a261e8bb683382f1a323cba0ff848832fc506afaeeadea3dacb46afd2e61d8d304922b6b36113dc621ec5dc8bd53daf574c7523e97e889b54e11fd373706d2b6ff7d79bb02e5ad28fc18313b46b0f126516ed9d1d8f10a99419d5aaa5f7987fecda1503e11c300b302586d0db773", @ANYRESDEC=r0, @ANYBLOB="cdd06e773d98576249e71a0999ae9bba0a9c5b64953fafcbcd25eea2a1aff6f3ab7b8454faaef1401fc6b74564a938e124394beb26f781", @ANYBLOB, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0x6a, 0x0, &(0x7f0000000300)="63eced8e46dc3f0adf33c9f7b986587f91b8ed0e24584275db38640fd680031dad732c6e680007c2a69a4d29acb3be9350e1f219b6970d5b1496259a4e6b5ed5734bb148b10200344e43029b118ccee97a38dbbd5507d69e2062d0e90ac869079d71b870000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$kcm(0x11, 0x2, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) sendfile(r7, r6, 0x0, 0x10000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x32, r7, 0x8, &(0x7f0000000280)={0x0, 0x800000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) sendto$inet6(r4, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2c, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001340), r9) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYRESDEC=r8, @ANYRES16=r11, @ANYBLOB="000227bd7000fedbdf250100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x70) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES64=r10, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRESDEC=0x0, @ANYBLOB="e72d5474d68da02f27428a792d3645e995f404ea99a794906df17d1b34e483dff6", @ANYRES32, @ANYBLOB="a7168c2a83564015"], 0x64}}, 0x0) 2m34.062295192s ago: executing program 2 (id=5982): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES8, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m30.273047816s ago: executing program 4 (id=6004): getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x9, 0x6, 0x30a, 0xd27, 0xb6, 0xffffff1d, 0xc, 0x1}, &(0x7f0000000200)=0x20) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000280)) (async) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000) (async) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0580c20000000180c200000008004500005c00000000002f9078000000000000000024806b58000000001000080010000002000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) (async) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000580)=0x5, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1, 0x0, 0x0, 0x8804}, 0x40044) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000600)=0x3, 0x4) (async) r4 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x0, &(0x7f0000000000)=0x400, 0x4) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x20, 0x7800, 0x4, 0x919, {{0x31, 0x4, 0x1, 0x1, 0xc4, 0x65, 0x0, 0xf, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x4c, 0xe4, 0x1, 0xe, [{@rand_addr=0x64010101, 0x10001}, {@multicast1}, {@empty, 0x8}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x6}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x10}}, {@empty, 0x81}]}, @timestamp_addr={0x44, 0x1c, 0xb0, 0x1, 0x9, [{@empty, 0x8}, {@local, 0x5e5c}, {@empty, 0xfffffff4}]}, @generic={0x88, 0xf, "7f0dbd3902fb097c834c40497e"}, @ssrr={0x89, 0x7, 0xe1, [@loopback]}, @noop, @cipso={0x86, 0x8, 0x1, [{0x0, 0x2}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x58, 0x1, 0xf, [{@local, 0x3}, {@private=0x2, 0x3}, {@private=0xa010101, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x7fffffff}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl2\x00', r6, 0x4, 0x4, 0x64, 0x5, 0x34, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x10, 0x8000, 0x1d, 0x8004}}) (async) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETDEBUG(r7, 0x400454c9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000cc0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 2m30.091116445s ago: executing program 4 (id=6005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a300000000009f5030073797a320000000068000000060a010400000000000000000100000008000b400000000040000480100001800a00010072656469720000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408000240000000120900010073797a3000"], 0xdc}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2m29.93403779s ago: executing program 4 (id=6006): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="000a0000000000000730000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000200000470207200000000006004dee0000000000000000000000000000110001"], 0x60) 2m29.717327672s ago: executing program 4 (id=6007): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x18cb6000) r1 = accept4(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000000c0)=0x80, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="a02f6da2a88b891e6ba87af5", 0xc) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000140)={0x1, [0x0]}, 0x6) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000001c0)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x6, 0xfff3}, {0xd, 0xfff2}, {0x4, 0xd}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4018) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x9, 0x2, 0x7, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8000, 0x80, 0x9, 0xd}}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x89}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x3, 0x9]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10000, 0xb28]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000809}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd29, 0x25dfdbfb, {0x2, 0x14, 0x24, 0x6, 0xfd, 0x0, 0x0, 0x8, 0x400}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000640)={@mcast1, 0x2, 0x1, 0x0, 0x4, 0x7a2f, 0xfffb}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pB \x00'}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x17, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4c43}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000007c0)='GPL\x00', 0xffff, 0x6d, &(0x7f0000000800)=""/109, 0x41100, 0x40, '\x00', r3, 0x0, r7, 0x8, &(0x7f00000008c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x7, 0xcf19, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a00)=[r8], &(0x7f0000000a40)=[{0x2, 0x4, 0x3, 0x6}, {0x4, 0x2, 0x1, 0x381cfca7e023bfe1}, {0x1, 0x1, 0x6, 0x2}, {0x4, 0x5, 0xb, 0x16}, {0x4, 0x1, 0xb, 0x4}, {0x4, 0xfffffffb, 0xe, 0xa}, {0x1, 0x3, 0xf, 0x7}], 0x10, 0x9, @void, @value}, 0x94) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000b80)=@netrom={'nr', 0x0}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x10000, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x10, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0x9, 0x7, 0x4, 0x30, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c80)='GPL\x00', 0x862a, 0x62, &(0x7f0000000cc0)=""/98, 0x40f00, 0x64, '\x00', r4, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x2, 0xb, 0x1, 0x1}, 0x10, 0x16da5, r9, 0x3, &(0x7f0000000d80)=[r8], &(0x7f0000000dc0)=[{0x3, 0x4, 0xa, 0xc}, {0x5, 0x2, 0x1, 0x2}, {0x0, 0x4, 0x8, 0x1}], 0x10, 0x9, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000ec0)=r11) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r12, 0x1, 0x1, &(0x7f0000000f00)={0x5522}, 0x4) r13 = socket$can_raw(0x1d, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000005400)={0x0, 0x0}) recvmmsg(r13, &(0x7f0000005280)=[{{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000000fc0), 0x0, &(0x7f0000001000)=""/148, 0x94}, 0x2c}, {{&(0x7f00000010c0)=@caif=@util, 0x80, &(0x7f0000001300)=[{&(0x7f0000001140)=""/80, 0x50}, {&(0x7f00000011c0)=""/80, 0x50}, {&(0x7f0000001240)=""/188, 0xbc}], 0x3, &(0x7f0000001340)=""/4096, 0x1000}, 0x1fe}, {{&(0x7f0000002340)=@caif, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000023c0)=""/237, 0xed}, {&(0x7f00000024c0)=""/42, 0x2a}, {&(0x7f0000002500)=""/245, 0xf5}, {&(0x7f0000002600)=""/162, 0xa2}, {&(0x7f00000026c0)=""/170, 0xaa}, {&(0x7f0000002780)=""/146, 0x92}, {&(0x7f0000002840)=""/232, 0xe8}, {&(0x7f0000002940)=""/205, 0xcd}, {&(0x7f0000002a40)=""/127, 0x7f}, {&(0x7f0000002ac0)=""/219, 0xdb}], 0xa, &(0x7f0000002c80)}, 0x6}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/77, 0x4d}], 0x2, &(0x7f0000003d80)=""/117, 0x75}, 0x5}, {{&(0x7f0000003e00)=@rc={0x1f, @none}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003e80)=""/103, 0x67}, {&(0x7f0000003f00)=""/99, 0x63}], 0x2}, 0x9}, {{&(0x7f0000003fc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000005200)=[{&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/77, 0x4d}, {&(0x7f00000050c0)=""/193, 0xc1}, {&(0x7f00000051c0)=""/28, 0x1c}], 0x4, &(0x7f0000005240)=""/53, 0x35}, 0x5}], 0x6, 0x10000, &(0x7f0000005440)={r14, r15+60000000}) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r16, &(0x7f00000055c0)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005580)={&(0x7f0000005540)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 2m28.68155743s ago: executing program 4 (id=6008): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r4}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r1, @ANYRESOCT=r1], 0x40}}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r7) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x100, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0xe4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@gcr_ga={0xbd, 0x6}]}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x45, 0x80, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x21}}, @measure_req={0x26, 0x31, {0x8, 0x5, 0xd, "53ba1c1a637dd2ab05df5ee56efc902e6953932b6285b7a5f7387c8409cfbf8a43e4bbd262a35d9be5b278362845"}}, @channel_switch={0x25, 0x3, {0x1, 0x1, 0x26}}]}, @NL80211_ATTR_BEACON_HEAD={0x89, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @random="e8b6a44faba4", {0x8, 0x9}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x7, @default, 0x104, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x5, 0x9, 0x8, 0xc}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x20}}, @void, [{0xdd, 0x3f, "526867e91375215b291fea80eb24654b71f2b213d0506d56ea88434255844efae28a322791568b2142f5b249ce758d260de2c356a2773f88994f694d239e4a"}]}}]]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8008020}, 0x8000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000ac0)={r10}, &(0x7f0000000b00)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r11, 0x9, 0x7fffffff}, &(0x7f0000000080)=0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0xb, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x854}, 0x8004094) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800470000300000000000059078ac1414000a010100890377830363000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0500000800000000"], 0x0) socket(0x1a, 0x5, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r12, 0x0, r5, 0x0, 0x8000f28, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TUNSETCARRIER(r12, 0x400454e2, &(0x7f0000000000)=0x1) 2m27.692895645s ago: executing program 4 (id=6014): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f4f5f28469181f23000001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x53, 0xffffffffffffffff, 0x0, 0x0, 0x1e2, 0x0, 0x100000000}, {0x0, 0x0, 0xfffffffffffffffd, 0x1000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x3, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x400c5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x377}, 0x10) 2m18.40107389s ago: executing program 32 (id=5982): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES8, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m7.384136783s ago: executing program 33 (id=6014): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f4f5f28469181f23000001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x53, 0xffffffffffffffff, 0x0, 0x0, 0x1e2, 0x0, 0x100000000}, {0x0, 0x0, 0xfffffffffffffffd, 0x1000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x3, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x400c5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x377}, 0x10) 1m36.958803422s ago: executing program 3 (id=6364): ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)={0x7b, "6a3f034c8a59b0d319e01842ebf291513c2f7cdbcd9d64f6791ddcb7cc233bbd41c4fe069959a9a33d67eecf385addcb49adefc05944b44ac41a8d6d5ac256b3a87551e07c50498594638b56f4e69f8bb31e7c7783359e5b89df52ae9ed260cc4c0286763310628998a09c978abab28e54cf910291767c13ea1a615db9e3326d"}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x2f8, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x900, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0xaf76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfff2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f0000000d40)="f6020000bd5260ce0a5373aab7da381eaa28e002d521f574f8af48d40289bee5e0ce", 0x0, 0xcf, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x1000000, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x1000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r5, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x3, 0xff}, 0x2}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x3, {0x2, 0x0, 0xf28a1166af312196}, 0xff}, 0x18) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000940)={r7, @in6={{0xa, 0x4e22, 0x6, @local, 0xc9}}, [0x1, 0x7fff, 0xbf99, 0x4, 0x357, 0x1, 0x400, 0x6, 0x1, 0x7, 0x2, 0x4, 0x9, 0x9, 0x4]}, &(0x7f0000000280)=0x100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140)) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r6, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010029bd7000fedbdf250200020004000800060007000500000004000400"], 0x24}, 0x1, 0x0, 0x0, 0xb71bdf545f4f29d9}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x7d41000) 1m24.884704713s ago: executing program 0 (id=6420): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x20c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1b8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x17c, 0x1, [@m_simple={0xb8, 0x1e, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x3, 0x20000000, 0x7f7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x587, 0x5, 0x81, 0xa}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x20000000, 0x2, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x88, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x8, 0xc, 0x8}, 0xff21}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x20000000, 0xcdb, 0x305}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 1m24.674801066s ago: executing program 0 (id=6422): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000fec20000f700000002020000e6e99404dde367a86b335d437451a6eb8c99b0efc9d381272399c6c213cc7677f5db63741afec1f317815066d2a783954ae77211b564fd34779cf7c3df3656f5bb4ea2627d3908579407"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x1, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4]}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3}, 0x10) close(r2) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(0x4) 1m24.227238295s ago: executing program 0 (id=6429): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x2, 0x4, 0x4}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffff3, 0x61a, 0xfff, 0x7, 0x5010000000000000, 0x20000000000005, 0x6, 0xff9}, &(0x7f0000000200)={0x1, 0x7, 0x2000006, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3ff]}, 0x8}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmmsg$alg(r0, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="e60211ab3d4890ca78afcb3aa130d2ad4cc496f15e46eb6043c784647fa5213079b9a89360414d3a13fa6784da2879a4b25b5339607098392314fd8f34585077827122baea5236179c1ae86bd71c1bab832850f785f166496e93b3bab546adf6efd21953173e5f62691ae2734b45b5b01952e0ec23a87cde39e048be8cd2ac451b58fb6007af637aab4f57736ac27c2b84c277bad941de996ae7515228f56538557a5c320a32dc94ef484bb8172b6f2c5be2c5b33bc36694df7fcbca7baeabf07b56042ebf542360cfb0fc000276577cfd30dab683347bf9f361da5a9c5bf1b585c44111ee8fd19446b1b53601652cf25da118ba8777c6", 0xf7}, {&(0x7f0000000240)="9c13c41323216f8c320876f030a86d4c98cffc0a529bc50ddce839a1ba53f4be5d9858caed9bf06124a430a43db44d9fb0ef082b12c0387b533f039bdab15aa4134dbe35ac64f3d19fc9f6cd3c54f943478c30dbfa7ac9684ffcea7e8c4f15b250eee2363186c1c50d0c5dbb8690a8af8528a3c53354", 0x76}, {&(0x7f0000000500)="7b6fc6fcae9bddbf77f20477a88c96fc2c275adef8097a07ea73f8e976b21274094ba368a93b9b1c8a205bcd1484f62c87eebfe9def49bf3b84ca3c47f75f4b8d3d8112cfecd096972199960240c", 0x4e}], 0x3, &(0x7f0000000580)=[@assoc={0x18, 0x117, 0x4, 0x10001}, @iv={0x110, 0x117, 0x2, 0xfb, "dd18800a092ef5483c9a0319c07b87f93756f3fb4bd2a526564050d3883ba8b1212aa9f59a604a1ac97f48783af7b3ad33b74295e591daeca03e2f94605e84285028d9b4438b0be0fdc77f6e50df8effdf333fc913686eda54ba9266b69079fabd51294af14dbcc4d7e2f4adb3812339114d68c6de63e206a723425ebaab37842f5d49648bdfeb9ffb894d22798eed18d3e07cda138c447a4804fee0edf21fb4e47e4b58b76c52481bca572c1304cdc4f6ad0e5105aebcbc010fa8036199a06ba92903dfd05c9cc094010d07093b42c3706be7d5cc5f5b81bb04c42407f4a63b06513dd5eeb17854095771a855a9fef999b3518f48d01238739618"}], 0x128, 0x20040814}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)="717b6a11dd58c3e8e95b8c2a3e0425bb196ab5251483bfc128a125b1300dea77a40528a49226afb9c79330522323da8f990848215441807fbdfb5fdc0c2f19cc7edde202e02e41cd787b6f5256e57cdc63197f979cead4471c6dc053eb6aaf43156a5be0dd8d591d93a9e3b4e74f2c6eee808166daa8f44f9ade717fbf5ba69fea7c6d02d01c4768d6e6f2759840b498ee59c34c2efece3dc35c7946bc0c50d4df6ffde81090fc696a081b1c2fe0842f2962910849966d5bb4bc511fce4cd09cfba3a8c62ad9148d4454943a173c3e3ad336d1b7dee8d1d0b61513e92ad8c2c8164be14b6dfee5b107f6d1f86e324e43259f0bb8960ee60f", 0xf8}, {&(0x7f0000000380)="6fb92e78d610721a5767430a4c5712a83fafde8cf40ae685b6b54602ff8405e5ad860c18aab245", 0x27}], 0x2, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9f9}], 0x48, 0x1}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)="c5de85f86bf78ce71dc9d8e9489ad6880bd74b1cc945e638f7f64c8d3b70d7afec25bdf22b241ba5a869040d945839b0cba5fba70ca196cea197621a076e04d4115c527be723e4fa3df5a80f837f532d0779e3cee3c7d727c680757773f46101c1322782b960a37aecf240795e791ed1bdb9ade772f0161d893f55412dedf507c5730f", 0x83}, {&(0x7f0000000980)="b96e6889a3feaa190187839466266262b0bee38152ea1dbb14e7c2163227ecd0b0a407329e0f560d21ceb7349389c93cdd1bfb9fbd65df5c942a4dc774981d8f13d570c8db62587cb6e0cfb618fc451853604eeb031f4a73c9d745e138704ac6238bfa8ce98d5d567fa1f76bf9ed55d35db3c4586cefa8dfefb42dea3a2a563c2c40e5bd1936febed404912af0c7d576b5589d12df19e2ba164199e92f0f05b2a1736336fa724954db8cd401a87db4", 0xaf}, {&(0x7f0000000a40)="56d977ee85395e62555ecbaa60d435c620c5ba3caaa0774df5669ed3fba41e43d74925c1dc025c3630e7a8249c5c4346791c65f254d60ee1985d1cfbc9d6ce64", 0x40}], 0x3, &(0x7f0000001f40), 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="a81932716b80b5100e846c2fd695b570d6890c3c1d06239ea79fad97fa5048d31b230785b018aabc9046f0b98891b86ecd21ea6e4fa52a8bb4b15c392e87131c80c05e2887e29429dad054d180572e3496100110c1c79baa9b8889fa", 0x5c}], 0x1, &(0x7f0000000b80)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x800}], 0x4, 0x8040) 1m22.667291516s ago: executing program 0 (id=6441): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x24, 0x4) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}}}]}, 0x48}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x802, 0x4) 1m22.518407393s ago: executing program 0 (id=6446): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x1, 0x7, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x8000, 0x1, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x2, 0x15, 0x80000001, 0x1000, 0x1, 0x10, '\x00', r3, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x18, 0x0, 0x30, 0x7}, @enum={0x4, 0xa, 0x0, 0x6, 0x4, [{0x9}, {0x8, 0x2}, {0x7, 0x5}, {0xb, 0x9}, {0xc, 0x80}, {0x10}, {0x9, 0x10001}, {0x4, 0xffffb495}, {0x7, 0x3ff}, {0x10, 0x2}]}]}, {0x0, [0x30, 0x5f, 0x30]}}, &(0x7f0000000280)=""/97, 0x89, 0x61, 0x0, 0x8001, 0x0, @void, @value}, 0x28) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@deltclass={0x34, 0x29, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe0, 0x4}, {0x7, 0xfff1}, {0xfff0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7a}}, @TCA_RATE={0x6, 0x5, {0xb, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000010) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', r3, 0x2f, 0x3, 0x6, 0xf, 0x18, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7800, 0x80, 0x8, 0x5}}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000007c0)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xf8, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4885}, 0x40) r13 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r13, &(0x7f0000000980)={0xa, 0x4e24, 0xc, @loopback, 0x7}, 0x1c) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0c0}, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000ac0)) socket$netlink(0x10, 0x3, 0x5) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b40)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1}, &(0x7f0000000b00), &(0x7f0000000b80)=r14}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r13, 0xc020f509, &(0x7f0000000c00)={r4, 0x7, 0x2a1, 0xfffffffffffffffc}) sendmsg$NL80211_CMD_GET_REG(r15, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44008090}, 0x4044050) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000d40)=[{}], &(0x7f0000000d80)=0x8) 1m22.384689997s ago: executing program 3 (id=6364): ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)={0x7b, "6a3f034c8a59b0d319e01842ebf291513c2f7cdbcd9d64f6791ddcb7cc233bbd41c4fe069959a9a33d67eecf385addcb49adefc05944b44ac41a8d6d5ac256b3a87551e07c50498594638b56f4e69f8bb31e7c7783359e5b89df52ae9ed260cc4c0286763310628998a09c978abab28e54cf910291767c13ea1a615db9e3326d"}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x2f8, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x900, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0xaf76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfff2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f0000000d40)="f6020000bd5260ce0a5373aab7da381eaa28e002d521f574f8af48d40289bee5e0ce", 0x0, 0xcf, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x1000000, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x1000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r5, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x3, 0xff}, 0x2}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x3, {0x2, 0x0, 0xf28a1166af312196}, 0xff}, 0x18) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000940)={r7, @in6={{0xa, 0x4e22, 0x6, @local, 0xc9}}, [0x1, 0x7fff, 0xbf99, 0x4, 0x357, 0x1, 0x400, 0x6, 0x1, 0x7, 0x2, 0x4, 0x9, 0x9, 0x4]}, &(0x7f0000000280)=0x100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140)) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r6, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010029bd7000fedbdf250200020004000800060007000500000004000400"], 0x24}, 0x1, 0x0, 0x0, 0xb71bdf545f4f29d9}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x7d41000) 1m21.862996934s ago: executing program 0 (id=6450): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0xfffffffe, 0x3, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0xa, @in6=@private1}}, 0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() syz_emit_ethernet(0x82, &(0x7f0000000300)={@multicast, @broadcast, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "01a102e9493a5d5b"}}}}}}}, 0x0) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x61e440b859c1e87f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1400000010003507d25a849b785fd1bbb7358213bbbca30f008c6394f9032428e2ba1e7a1bf6022b644bf24377c584cb70dc0890aa2e86be4a99fdbc53724e794e9ff56f9321ec577d7e58073285bd035dfc5f6de9d141be359d9e379e289cbcd82317be76eee50a5d58b0", 0x6b}, {&(0x7f0000000100)="2776db9e03fc88d94257742d455d3d26c415c1ca0274b254e1863ba0553e98d5c474283da39b3b7f9e3651df8c4a2c525c6d4f96d0665bbe3a9bd20032ba6fef558ce2d2516e5c4ecd65390fc7b8156e19f7f1b6081cef28c94807f8b16c35e01133ee2488c5c355c4ddb14cecf4779c5106932896326a8629d9540b834e4336efca31e3e627d09910a7e8a6d1d5aaee179c746edf49362c58e29e785e8fd01400fca23bfcd8ab8c2f0901d88feeab1d8b920329db9b2d3d1ace4687fdae6673c0732736f07a6d9e85eca5d05bb9bed339588c", 0xd3}], 0x2}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0) 1m15.362692677s ago: executing program 6 (id=6473): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x2, 0x4, 0x4}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffff3, 0x61a, 0xfff, 0x7, 0x5010000000000000, 0x20000000000005, 0x6, 0xff9}, &(0x7f0000000200)={0x1, 0x7, 0x2000006, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3ff]}, 0x8}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmmsg$alg(r0, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="e60211ab3d4890ca78afcb3aa130d2ad4cc496f15e46eb6043c784647fa5213079b9a89360414d3a13fa6784da2879a4b25b5339607098392314fd8f34585077827122baea5236179c1ae86bd71c1bab832850f785f166496e93b3bab546adf6efd21953173e5f62691ae2734b45b5b01952e0ec23a87cde39e048be8cd2ac451b58fb6007af637aab4f57736ac27c2b84c277bad941de996ae7515228f56538557a5c320a32dc94ef484bb8172b6f2c5be2c5b33bc36694df7fcbca7baeabf07b56042ebf542360cfb0fc000276577cfd30dab683347bf9f361da5a9c5bf1b585c44111ee8fd19446b1b53601652cf25da118ba8777c6", 0xf7}, {&(0x7f0000000240)="9c13c41323216f8c320876f030a86d4c98cffc0a529bc50ddce839a1ba53f4be5d9858caed9bf06124a430a43db44d9fb0ef082b12c0387b533f039bdab15aa4134dbe35ac64f3d19fc9f6cd3c54f943478c30dbfa7ac9684ffcea7e8c4f15b250eee2363186c1c50d0c5dbb8690a8af8528a3c53354", 0x76}, {&(0x7f0000000500)="7b6fc6fcae9bddbf77f20477a88c96fc2c275adef8097a07ea73f8e976b21274094ba368a93b9b1c8a205bcd1484f62c87eebfe9def49bf3b84ca3c47f75f4b8d3d8112cfecd096972199960240c", 0x4e}], 0x3, &(0x7f0000000580)=[@assoc={0x18, 0x117, 0x4, 0x10001}, @iv={0x110, 0x117, 0x2, 0xfb, "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"}], 0x128, 0x20040814}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)="717b6a11dd58c3e8e95b8c2a3e0425bb196ab5251483bfc128a125b1300dea77a40528a49226afb9c79330522323da8f990848215441807fbdfb5fdc0c2f19cc7edde202e02e41cd787b6f5256e57cdc63197f979cead4471c6dc053eb6aaf43156a5be0dd8d591d93a9e3b4e74f2c6eee808166daa8f44f9ade717fbf5ba69fea7c6d02d01c4768d6e6f2759840b498ee59c34c2efece3dc35c7946bc0c50d4df6ffde81090fc696a081b1c2fe0842f2962910849966d5bb4bc511fce4cd09cfba3a8c62ad9148d4454943a173c3e3ad336d1b7dee8d1d0b61513e92ad8c2c8164be14b6dfee5b107f6d1f86e324e43259f0bb8960ee60f", 0xf8}, {&(0x7f0000000380)="6fb92e78d610721a5767430a4c5712a83fafde8cf40ae685b6b54602ff8405e5ad860c18aab245", 0x27}], 0x2, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9f9}], 0x48, 0x1}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)="c5de85f86bf78ce71dc9d8e9489ad6880bd74b1cc945e638f7f64c8d3b70d7afec25bdf22b241ba5a869040d945839b0cba5fba70ca196cea197621a076e04d4115c527be723e4fa3df5a80f837f532d0779e3cee3c7d727c680757773f46101c1322782b960a37aecf240795e791ed1bdb9ade772f0161d893f55412dedf507c5730f", 0x83}, {&(0x7f0000000980)="b96e6889a3feaa190187839466266262b0bee38152ea1dbb14e7c2163227ecd0b0a407329e0f560d21ceb7349389c93cdd1bfb9fbd65df5c942a4dc774981d8f13d570c8db62587cb6e0cfb618fc451853604eeb031f4a73c9d745e138704ac6238bfa8ce98d5d567fa1f76bf9ed55d35db3c4586cefa8dfefb42dea3a2a563c2c40e5bd1936febed404912af0c7d576b5589d12df19e2ba164199e92f0f05b2a1736336fa724954db8cd401a87db4", 0xaf}, {&(0x7f0000000a40)="56d977ee85395e62555ecbaa60d435c620c5ba3caaa0774df5669ed3fba41e43d74925c1dc025c3630e7a8249c5c4346791c65f254d60ee1985d1cfbc9d6ce64", 0x40}], 0x3, &(0x7f0000001f40)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x60, 0x117, 0x2, 0x4b, "1c2d33dc373715b4b44982beaa8f10dba8746ec74b268c21b29524b0435730fdab581f0c8393482cc290e7244c3e668e6ec91a80f5d16e892d81b7459203fbe41774a2444437f756a0fe86"}], 0x1078, 0x4000000}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="a81932716b80b5100e846c2fd695b570d6890c3c1d06239ea79fad97fa5048d31b230785b018aabc9046f0b98891b86ecd21ea6e4fa52a8bb4b15c392e87131c80c05e2887e29429dad054d180572e3496100110c1c79baa9b8889fa", 0x5c}], 0x1, &(0x7f0000000b80)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x800}], 0x4, 0x8040) 1m14.995120768s ago: executing program 6 (id=6477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x8000000a}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0), 0x100000000000026d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000102010200000000000000000a00000730480001802c00018014000300ff02000000000000000000000000000114000400fc000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x200}, 0x8) 1m6.793947953s ago: executing program 34 (id=6450): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0xfffffffe, 0x3, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0xa, @in6=@private1}}, 0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() syz_emit_ethernet(0x82, &(0x7f0000000300)={@multicast, @broadcast, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "01a102e9493a5d5b"}}}}}}}, 0x0) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x61e440b859c1e87f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1400000010003507d25a849b785fd1bbb7358213bbbca30f008c6394f9032428e2ba1e7a1bf6022b644bf24377c584cb70dc0890aa2e86be4a99fdbc53724e794e9ff56f9321ec577d7e58073285bd035dfc5f6de9d141be359d9e379e289cbcd82317be76eee50a5d58b0", 0x6b}, {&(0x7f0000000100)="2776db9e03fc88d94257742d455d3d26c415c1ca0274b254e1863ba0553e98d5c474283da39b3b7f9e3651df8c4a2c525c6d4f96d0665bbe3a9bd20032ba6fef558ce2d2516e5c4ecd65390fc7b8156e19f7f1b6081cef28c94807f8b16c35e01133ee2488c5c355c4ddb14cecf4779c5106932896326a8629d9540b834e4336efca31e3e627d09910a7e8a6d1d5aaee179c746edf49362c58e29e785e8fd01400fca23bfcd8ab8c2f0901d88feeab1d8b920329db9b2d3d1ace4687fdae6673c0732736f07a6d9e85eca5d05bb9bed339588c", 0xd3}], 0x2}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0) 1m5.011961322s ago: executing program 3 (id=6364): ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)={0x7b, "6a3f034c8a59b0d319e01842ebf291513c2f7cdbcd9d64f6791ddcb7cc233bbd41c4fe069959a9a33d67eecf385addcb49adefc05944b44ac41a8d6d5ac256b3a87551e07c50498594638b56f4e69f8bb31e7c7783359e5b89df52ae9ed260cc4c0286763310628998a09c978abab28e54cf910291767c13ea1a615db9e3326d"}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x2f8, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x900, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0xaf76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfff2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f0000000d40)="f6020000bd5260ce0a5373aab7da381eaa28e002d521f574f8af48d40289bee5e0ce", 0x0, 0xcf, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x1000000, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x1000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r5, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x3, 0xff}, 0x2}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x3, {0x2, 0x0, 0xf28a1166af312196}, 0xff}, 0x18) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000940)={r7, @in6={{0xa, 0x4e22, 0x6, @local, 0xc9}}, [0x1, 0x7fff, 0xbf99, 0x4, 0x357, 0x1, 0x400, 0x6, 0x1, 0x7, 0x2, 0x4, 0x9, 0x9, 0x4]}, &(0x7f0000000280)=0x100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140)) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r6, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010029bd7000fedbdf250200020004000800060007000500000004000400"], 0x24}, 0x1, 0x0, 0x0, 0xb71bdf545f4f29d9}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x7d41000) 58.896438746s ago: executing program 6 (id=6477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x8000000a}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0), 0x100000000000026d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000102010200000000000000000a00000730480001802c00018014000300ff02000000000000000000000000000114000400fc000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x200}, 0x8) 47.913020242s ago: executing program 3 (id=6364): ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)={0x7b, "6a3f034c8a59b0d319e01842ebf291513c2f7cdbcd9d64f6791ddcb7cc233bbd41c4fe069959a9a33d67eecf385addcb49adefc05944b44ac41a8d6d5ac256b3a87551e07c50498594638b56f4e69f8bb31e7c7783359e5b89df52ae9ed260cc4c0286763310628998a09c978abab28e54cf910291767c13ea1a615db9e3326d"}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x2f8, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x900, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0xaf76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfff2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f0000000d40)="f6020000bd5260ce0a5373aab7da381eaa28e002d521f574f8af48d40289bee5e0ce", 0x0, 0xcf, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x1000000, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x1000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r5, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x3, 0xff}, 0x2}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x3, {0x2, 0x0, 0xf28a1166af312196}, 0xff}, 0x18) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000940)={r7, @in6={{0xa, 0x4e22, 0x6, @local, 0xc9}}, [0x1, 0x7fff, 0xbf99, 0x4, 0x357, 0x1, 0x400, 0x6, 0x1, 0x7, 0x2, 0x4, 0x9, 0x9, 0x4]}, &(0x7f0000000280)=0x100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140)) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r6, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010029bd7000fedbdf250200020004000800060007000500000004000400"], 0x24}, 0x1, 0x0, 0x0, 0xb71bdf545f4f29d9}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x7d41000) 44.324683677s ago: executing program 6 (id=6477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x8000000a}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0), 0x100000000000026d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000102010200000000000000000a00000730480001802c00018014000300ff02000000000000000000000000000114000400fc000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x200}, 0x8) 27.731335653s ago: executing program 3 (id=6364): ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)={0x7b, "6a3f034c8a59b0d319e01842ebf291513c2f7cdbcd9d64f6791ddcb7cc233bbd41c4fe069959a9a33d67eecf385addcb49adefc05944b44ac41a8d6d5ac256b3a87551e07c50498594638b56f4e69f8bb31e7c7783359e5b89df52ae9ed260cc4c0286763310628998a09c978abab28e54cf910291767c13ea1a615db9e3326d"}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x2f8, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x900, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0xaf76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfff2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f0000000d40)="f6020000bd5260ce0a5373aab7da381eaa28e002d521f574f8af48d40289bee5e0ce", 0x0, 0xcf, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x1000000, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x1000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r5, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x3, 0xff}, 0x2}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x3, {0x2, 0x0, 0xf28a1166af312196}, 0xff}, 0x18) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000940)={r7, @in6={{0xa, 0x4e22, 0x6, @local, 0xc9}}, [0x1, 0x7fff, 0xbf99, 0x4, 0x357, 0x1, 0x400, 0x6, 0x1, 0x7, 0x2, 0x4, 0x9, 0x9, 0x4]}, &(0x7f0000000280)=0x100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140)) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r6, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010029bd7000fedbdf250200020004000800060007000500000004000400"], 0x24}, 0x1, 0x0, 0x0, 0xb71bdf545f4f29d9}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x7d41000) 26.363131333s ago: executing program 6 (id=6477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x8000000a}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0), 0x100000000000026d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000102010200000000000000000a00000730480001802c00018014000300ff02000000000000000000000000000114000400fc000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x200}, 0x8) 8.786187519s ago: executing program 3 (id=6364): ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)={0x7b, "6a3f034c8a59b0d319e01842ebf291513c2f7cdbcd9d64f6791ddcb7cc233bbd41c4fe069959a9a33d67eecf385addcb49adefc05944b44ac41a8d6d5ac256b3a87551e07c50498594638b56f4e69f8bb31e7c7783359e5b89df52ae9ed260cc4c0286763310628998a09c978abab28e54cf910291767c13ea1a615db9e3326d"}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x2f8, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x900, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0xaf76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfff2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f0000000d40)="f6020000bd5260ce0a5373aab7da381eaa28e002d521f574f8af48d40289bee5e0ce", 0x0, 0xcf, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x1000000, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x1000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r5, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x3, 0xff}, 0x2}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x3, {0x2, 0x0, 0xf28a1166af312196}, 0xff}, 0x18) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000940)={r7, @in6={{0xa, 0x4e22, 0x6, @local, 0xc9}}, [0x1, 0x7fff, 0xbf99, 0x4, 0x357, 0x1, 0x400, 0x6, 0x1, 0x7, 0x2, 0x4, 0x9, 0x9, 0x4]}, &(0x7f0000000280)=0x100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140)) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r6, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010029bd7000fedbdf250200020004000800060007000500000004000400"], 0x24}, 0x1, 0x0, 0x0, 0xb71bdf545f4f29d9}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x7d41000) 7.972434586s ago: executing program 6 (id=6477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x8000000a}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0), 0x100000000000026d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000102010200000000000000000a00000730480001802c00018014000300ff02000000000000000000000000000114000400fc000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x200}, 0x8) 2.847604118s ago: executing program 7 (id=6836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000008000000180100002020752500000000002020207b1af8ff00000000bfa100000000002007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.713862511s ago: executing program 7 (id=6837): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x5}, {{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/28, 0x1c}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000000700)=""/53, 0x35}, {&(0x7f0000000740)=""/213, 0xd5}, {&(0x7f0000000840)=""/210, 0xd2}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x6, &(0x7f00000009c0)=""/165, 0xa5}}], 0x2, 0x45833af92e4b39ff, 0x0) 2.05836371s ago: executing program 7 (id=6841): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xeb, "701ad4011ac417b80a637099910a3ff654e14faed4c18c9a9df6cba2cbf7687da9a0ffae3e77e987f88ef337036bab4a2bdc4f851a17c2fac873ad545539692f2ae4192f9895fd7f65006bc16e210623218ce6e50d1b1caf9a77d585b08ebde5adba0b157370e06328b2fe6e1a4e3969ce7d0cf4593332c6711e17396337044fd2c3dcdd08339f008f0872a7974def1d7cee1c89e70e66f7af835b2cda70ef74ff9a18e854ae5838e041031af90cfe4b8554adb04a34c2ecbb9640b36cdad62fb7f0b948ae70770df377123b6b5ebc3a002b8cb8ecb6289afd4cc72d381e21c6e19ae7c81f21f9325c2fb5"}, &(0x7f0000000100)=0xf3) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r1, 0x7, 0xe8, 0x40, 0x0, 0x9, 0x5, 0xe0, {0x0, @in={{0x2, 0x4e20, @local}}, 0x4, 0xfffffff8, 0x4, 0xff, 0x80000000}}, &(0x7f0000000200)=0xb0) (async) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@null, @null, 0x5, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default]}) (async, rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000002c0)) (rerun: 32) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000300)="7a3df0e9dd0f5d9db97049c845023e6e6c102df84e54adb9bbe8c9209f6ce523c183989f4e8621627fafed5b30e5699458") (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000340)={0x0, @empty, 0x4e20, 0x1, 'rr\x00', 0x11, 0x7, 0x5a}, 0x2c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x2, 0x14, 0xf6, 0x9, 0x1e, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_sec_ctx={0xd, 0x18, 0x7, 0x4, 0x5d, "2bdbb4a9ea9a62bbefb62d9dc3ef98dfac6ff31170521dd98feffd304b58bd61260560d59a3d211d4cd3e17c3c03e364fc3824b500456911f25102fa14b447251941009a2a78910f29108c8f764075f8ceb13761982b3bf2afa48464b4"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d6, 0x8, 0x40, 0x92, 0x3, 0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in6=@loopback, 0x1, 0x0, 0x8}, @sadb_lifetime={0x4, 0x2, 0x4, 0xffffffffffffffff, 0xea5, 0xffffffffffffffc0}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd25, 0x3503}]}, 0xf0}}, 0x4000000) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x1404, 0x4, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xcee0968b5912d0ad}, 0x81) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000600)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc8, r6, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x4010841) (async) ioctl$SIOCAX25GETINFO(r5, 0x89ed, &(0x7f0000000840)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000008c0)={r1, 0x3, 0xffff}, &(0x7f0000000900)=0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x7, 0x11, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x5, 0x1, 0x0, r5}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xb}, @ldst={0x2, 0x2, 0x4, 0x0, 0x5, 0x10, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2c}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000a00)='GPL\x00', 0x3, 0xb6, &(0x7f0000000a40)=""/182, 0x41100, 0x75, '\x00', 0x0, @fallback=0x1a, r5, 0x8, &(0x7f0000000b00)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0x0, 0x1, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000b80)=[0xffffffffffffffff], &(0x7f0000000bc0)=[{0x5, 0x4, 0xe, 0x4}, {0x5, 0x4, 0x2, 0x3}, {0x2, 0x3, 0x6}], 0x10, 0x1c85, @void, @value}, 0x94) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r5, 0xffffffffffffffff}, 0x4) (rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x6, 0x0, r9, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000d80)={r7, 0x3}, &(0x7f0000000dc0)=0x8) (async, rerun: 32) ioctl$AUTOFS_IOC_FAIL(r8, 0x9361, 0xffffffffffffffff) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) (async, rerun: 64) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x1a, 0x800, 0x8, &(0x7f0000000e00)) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fb, &(0x7f0000000e40)="72f99760d3a70e9e529ff7bb53e2bd2a8dc5d7a64932a03ba4710695c22e251d01d53ae4bef7ab70edaaf53c202815dcf3dff875a17daafa1de5ad07107896c45e9c63dcf832f259d3d3b0d1313672203deff7f6e1dffcbb342dd6f5e774dfd314ae9e2c99") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000ec0)={r7, @in6={{0xa, 0x4e24, 0x1, @local, 0x9}}, 0x8, 0x2, 0x8, 0x8, 0xac, 0x0, 0x9}, &(0x7f0000000f80)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000fc0)={r10, 0xfff2, 0x2}, 0x8) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000001100)={0x0, 0x54, &(0x7f0000001080)=[@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000}, @in6={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e22, 0xc, @mcast2, 0xfa93}]}, &(0x7f0000001140)=0x10) 1.802079051s ago: executing program 1 (id=6842): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @local, [0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000614400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x80, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x8000, 0xa, [0x3b, 0x4, 0x13, 0x38, 0x7, 0x1e, 0x23, 0x26, 0xd, 0x23, 0x9, 0x3e, 0x7, 0x36, 0x0, 0xf], 0x45b7d282eb3cfcc0, 0x2, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r6, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) close(r4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x70bd2b, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d4, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="1ec86e88bf4ba4466ecffff7edad", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) 1.800280649s ago: executing program 7 (id=6843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000), 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300", @ANYRES32], 0x84}}, 0x20008040) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x6a35}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', r4, 0x1, 0x10, 0xf8, 0x0, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x64, 0x0, 0xc5, 0x29, 0x0, @loopback, @empty, {[@generic={0x82, 0x3, "c4"}]}}}}}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = socket(0x2a, 0x2, 0x0) sendto$isdn(r9, 0x0, 0xfffffeb3, 0x0, &(0x7f00000003c0)={0x22, 0xff, 0x4, 0xd, 0x81}, 0x6) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x1) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff000000000000000000000000007cabe5aadc1800128008000100707070000c913d3cd0c600028008000100"/58, @ANYRES32=r8], 0x4c}}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="dc43f54290b924041d2000e1f6a6d401120ccfb8df729a7f53bb271a16219c379b6448d20152417a6545fc744653d7f5723c47fee2cc3522520a9259593456362660de7d03137c591cffdff36cc913ad13b69182a1c7f540b19d877770f8f9beb18a7b50353f5ea689952ad92a8265fe4ccb5483cbc3d607966718c53aea743083ab41321422594299050a1f7c5decbc55", @ANYRES16=r10, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x400c010}, 0xc090) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r11, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1064}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x377}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xcba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040000) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xf, r6, 0x38}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r4, @ANYBLOB="08000b000000000008000200ac14143f08"], 0x54}}, 0x0) 1.711808931s ago: executing program 1 (id=6844): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000027c0000000039a0040008000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r3, 0x0, 0x6, 0x9, 0x9, 0x4}, &(0x7f0000000100)=0x14) 1.238137788s ago: executing program 7 (id=6846): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c000280050001000000090024"], 0xa8}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000004400000008000300", @ANYRES32], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.234785575s ago: executing program 5 (id=6847): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000c0000000000000000085000000270000001801000020756c2500000000002020207b1af8ff00000003bfa100000000000007010000f8ffffffb702000008800000b7030000ff7f0000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.134823211s ago: executing program 7 (id=6848): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r2, 0xf03, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 1.026830505s ago: executing program 5 (id=6849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0xffd0}, 0x94) 933.698317ms ago: executing program 5 (id=6850): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xb2ed}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000000)=@req={0x28, &(0x7f0000000040)={'dvmrp0\x00', @ifru_addrs=@xdp={0x2c, 0x2, r4, 0x21}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b708000000000000739af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 739.337739ms ago: executing program 5 (id=6851): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x5}, {{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/28, 0x1c}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000000700)=""/53, 0x35}, {&(0x7f0000000740)=""/213, 0xd5}, {&(0x7f0000000840)=""/210, 0xd2}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x6, &(0x7f00000009c0)=""/165, 0xa5}}], 0x2, 0x45833af92e4b39ff, 0x0) 538.627141ms ago: executing program 1 (id=6852): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000008c0)="8457", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_FLOW={0x8, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20000050) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063019f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063019f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140c, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140c, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x2, 0x3cb5}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r5, 0xb}, 0x8) r6 = socket(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0xb, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x3, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x38}}, 0x0) 295.143129ms ago: executing program 1 (id=6853): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6400}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffffefffffff, 0x0, 0x40000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0x3) 274.610376ms ago: executing program 5 (id=6854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000e000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 143.067356ms ago: executing program 1 (id=6855): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000300ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00"], 0x23c}}, 0x0) 73.336311ms ago: executing program 5 (id=6856): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8000061, 0x1}}]}, 0x20}}, 0x40810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) 0s ago: executing program 1 (id=6857): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000040)="aa2eba911e59d2d176d33a") ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x0) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x2}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2f, 0x0, 0x4, @void, @value=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r5, @ANYBLOB="08000b000000000008000200ac14143f08"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): es in process `syz.1.6270'. [ 669.548435][ T5835] Bluetooth: hci7: command tx timeout [ 669.778084][T24347] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 669.787911][T24347] syzkaller0: entered promiscuous mode [ 669.793451][T24347] syzkaller0: entered allmulticast mode [ 670.108290][T24369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6272'. [ 670.172435][T24364] tun0: tun_chr_ioctl cmd 1074025677 [ 670.178863][T24364] tun0: linktype set to 5 [ 670.338995][T24219] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.356390][T24219] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.369033][T24219] bridge_slave_0: entered allmulticast mode [ 670.387614][T24219] bridge_slave_0: entered promiscuous mode [ 670.424072][T24219] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.456321][T24219] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.463701][T24219] bridge_slave_1: entered allmulticast mode [ 670.489031][T24219] bridge_slave_1: entered promiscuous mode [ 670.697535][T24219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.712536][T24391] netlink: 788 bytes leftover after parsing attributes in process `syz.5.6281'. [ 670.740735][T24219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.006744][T24384] netlink: 'syz.6.6279': attribute type 3 has an invalid length. [ 671.020328][T24219] team0: Port device team_slave_0 added [ 671.025757][T24384] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6279'. [ 671.042364][T24401] netlink: 'syz.1.6283': attribute type 10 has an invalid length. [ 671.052744][T24401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6283'. [ 671.062626][T24401] dummy0: entered promiscuous mode [ 671.069593][T24401] bridge0: port 3(dummy0) entered blocking state [ 671.076259][T24401] bridge0: port 3(dummy0) entered disabled state [ 671.083032][T24401] dummy0: entered allmulticast mode [ 671.092389][T24392] syzkaller1: entered promiscuous mode [ 671.115717][T24392] syzkaller1: entered allmulticast mode [ 671.155428][T24219] team0: Port device team_slave_1 added [ 671.437171][T24219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.461212][T24412] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6286'. [ 671.488945][T24219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.583829][T24219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.586705][T24416] netlink: 'syz.5.6286': attribute type 21 has an invalid length. [ 671.612248][T24416] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6286'. [ 671.625932][ T5835] Bluetooth: hci7: command tx timeout [ 671.666323][T24219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.673336][T24219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.715491][T24418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6286'. [ 671.756904][T24219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.814771][T24416] netlink: 'syz.5.6286': attribute type 4 has an invalid length. [ 671.833483][T24416] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6286'. [ 671.952205][T24418] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.998676][T24421] netlink: 'syz.3.6288': attribute type 7 has an invalid length. [ 672.014630][T24421] netlink: 'syz.3.6288': attribute type 8 has an invalid length. [ 672.023297][T24421] netlink: 'syz.3.6288': attribute type 15 has an invalid length. [ 672.057467][T24431] netlink: 'syz.1.6289': attribute type 58 has an invalid length. [ 672.136365][T24431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6289'. [ 672.146244][T24423] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 672.156112][T24433] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 672.206460][T24426] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 672.264770][ T53] veth1_macvtap: left promiscuous mode [ 672.278349][ T53] veth0_macvtap: left promiscuous mode [ 672.286465][ T53] veth1_vlan: left promiscuous mode [ 672.302159][ T53] veth0_vlan: left promiscuous mode [ 672.533741][ T53] pim6reg (unregistering): left allmulticast mode [ 673.698130][ T5835] Bluetooth: hci7: command tx timeout [ 673.745279][T24418] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.794069][T24219] hsr_slave_0: entered promiscuous mode [ 673.810960][T24219] hsr_slave_1: entered promiscuous mode [ 673.819827][T24219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.828124][T24219] Cannot create hsr debugfs directory [ 673.931872][T24418] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.053386][T24446] bridge0: port 4(erspan0) entered blocking state [ 674.074493][T24446] bridge0: port 4(erspan0) entered disabled state [ 674.087277][T24446] erspan0: entered allmulticast mode [ 674.094385][T24446] erspan0: entered promiscuous mode [ 674.110330][T24447] erspan0: left allmulticast mode [ 674.115410][T24447] erspan0: left promiscuous mode [ 674.120788][T24447] bridge0: port 4(erspan0) entered disabled state [ 674.192400][T24418] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.426214][ T53] IPVS: stop unused estimator thread 0... [ 674.459908][T24461] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 674.709668][T24418] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.729416][T24471] xt_ecn: cannot match TCP bits for non-tcp packets [ 674.756146][T24472] xt_ecn: cannot match TCP bits for non-tcp packets [ 674.793207][T24474] __nla_validate_parse: 6 callbacks suppressed [ 674.793228][T24474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6304'. [ 674.797115][T24472] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6303'. [ 674.829179][T24418] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.858977][T24471] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6303'. [ 674.858987][T24476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6303'. [ 674.927363][T24418] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.970538][T24418] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.330594][T24487] ip6gretap0: entered promiscuous mode [ 675.350067][T24487] ip6gretap0: left promiscuous mode [ 675.587769][T24219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 675.622698][T24219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 675.670680][T24219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 675.710639][T24219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 675.766462][T24497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6309'. [ 675.776294][T24497] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6309'. [ 675.785285][T24497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6309'. [ 675.794526][T24497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6309'. [ 676.174806][T24219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.296379][T24219] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.349941][T24504] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 676.435415][T24505] syzkaller0: entered promiscuous mode [ 676.441475][T24505] syzkaller0: entered allmulticast mode [ 676.467468][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.474721][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.752463][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.759742][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.773575][T24219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.067819][T24219] veth0_vlan: entered promiscuous mode [ 678.093656][T24219] veth1_vlan: entered promiscuous mode [ 678.157722][T24219] veth0_macvtap: entered promiscuous mode [ 678.170535][T24219] veth1_macvtap: entered promiscuous mode [ 678.265845][T24219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.301718][T24219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.351572][T24219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.390169][T24219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.419701][T24219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.443923][T24219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.635893][ T8652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.666375][ T8652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.753502][T24560] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6333'. [ 678.764944][T24563] netlink: 'syz.3.6331': attribute type 1 has an invalid length. [ 678.784467][T24563] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6331'. [ 678.786923][T24560] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 678.805645][T13655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.813500][T13655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.818402][T24563] netlink: 'syz.3.6331': attribute type 1 has an invalid length. [ 678.837284][T24563] netlink: 'syz.3.6331': attribute type 2 has an invalid length. [ 679.343922][T24581] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input10 [ 679.863268][T24609] __nla_validate_parse: 2 callbacks suppressed [ 679.863291][T24609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6343'. [ 680.086218][T24614] netlink: 'syz.6.6347': attribute type 11 has an invalid length. [ 680.104234][T24614] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6347'. [ 680.377490][T24619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.417211][T24619] bridge0: port 3(bond1) entered blocking state [ 680.436909][T24619] bridge0: port 3(bond1) entered disabled state [ 680.449396][T24627] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 680.459148][T24027] IPVS: starting estimator thread 0... [ 680.480055][T24619] bond1: entered allmulticast mode [ 680.513769][T24619] bond1: entered promiscuous mode [ 680.533625][T24619] bridge0: port 3(bond1) entered blocking state [ 680.541404][T24619] bridge0: port 3(bond1) entered forwarding state [ 680.555707][T24631] IPVS: using max 24 ests per chain, 57600 per kthread [ 680.591461][T24635] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6352'. [ 680.891803][T24644] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6354'. [ 681.204388][ T53] bridge0: port 3(bond1) entered disabled state [ 681.295197][T24652] syzkaller0: entered promiscuous mode [ 681.328428][T24652] syzkaller0: entered allmulticast mode [ 681.722522][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.022932][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.211262][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.396399][T24668] netlink: 'syz.5.6366': attribute type 11 has an invalid length. [ 682.418250][T24668] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6366'. [ 682.432271][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.580277][T24670] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6365'. [ 682.900694][T24674] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.908587][T24674] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.094723][T24687] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6369'. [ 683.119228][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.141953][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.150928][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.160296][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.169184][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.273389][T24674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.293855][T24674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.376153][ T5835] Bluetooth: hci7: command tx timeout [ 683.397215][T24674] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.405724][T24674] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.415825][T24674] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.426899][T24674] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.521324][T24684] pim6reg: entered allmulticast mode [ 683.552425][T24692] netlink: 'syz.1.6370': attribute type 10 has an invalid length. [ 683.616808][T24692] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.6370'. [ 683.753976][ T53] bond1: left allmulticast mode [ 683.760043][ T53] bond1: left promiscuous mode [ 683.777432][ T53] bridge0: port 3(bond1) entered disabled state [ 683.876591][ T53] bridge_slave_1: left allmulticast mode [ 683.882313][ T53] bridge_slave_1: left promiscuous mode [ 683.915636][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.015214][ T53] bridge_slave_0: left allmulticast mode [ 684.049319][ T53] bridge_slave_0: left promiscuous mode [ 684.065492][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.443118][T24716] netlink: 'syz.0.6373': attribute type 4 has an invalid length. [ 684.691878][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.704248][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.714835][ T53] bond0 (unregistering): Released all slaves [ 684.868060][ T53] bond1 (unregistering): Released all slaves [ 685.226923][ T5835] Bluetooth: hci3: command tx timeout [ 685.247721][T24731] netlink: 'syz.1.6378': attribute type 11 has an invalid length. [ 685.256490][T24731] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6378'. [ 685.318801][T24729] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6377'. [ 685.473454][T24688] chnl_net:caif_netlink_parms(): no params data found [ 685.607295][T24738] netlink: 'syz.6.6380': attribute type 2 has an invalid length. [ 685.958275][T24750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6383'. [ 686.298081][T24725] Cannot find del_set index 2 as target [ 687.062322][T24744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.114772][T24744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.296244][ T5835] Bluetooth: hci3: command tx timeout [ 687.591380][T24744] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.604996][T24744] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.615154][T24744] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.625434][T24744] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.697186][T24744] gtp0: left promiscuous mode [ 687.702078][T24744] gtp0: left allmulticast mode [ 687.820264][T24761] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 688.017490][T24766] netlink: 'syz.6.6387': attribute type 4 has an invalid length. [ 688.029433][T24766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6387'. [ 688.279009][T24688] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.306068][T24688] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.313417][T24688] bridge_slave_0: entered allmulticast mode [ 688.373357][T24688] bridge_slave_0: entered promiscuous mode [ 688.405398][T24778] netlink: 'syz.0.6391': attribute type 11 has an invalid length. [ 688.414804][T24778] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6391'. [ 688.475213][ T53] hsr_slave_0: left promiscuous mode [ 688.507640][ T53] hsr_slave_1: left promiscuous mode [ 688.513987][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.524278][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.533055][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.541669][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.576395][ T53] veth1_macvtap: left promiscuous mode [ 688.582115][ T53] veth0_macvtap: left promiscuous mode [ 688.588526][ T53] veth1_vlan: left promiscuous mode [ 688.593840][ T53] veth0_vlan: left promiscuous mode [ 688.708871][ T53] pim6reg9 (unregistering): left allmulticast mode [ 689.163704][ T53] team0 (unregistering): Port device team_slave_1 removed [ 689.215780][ T53] team0 (unregistering): Port device team_slave_0 removed [ 689.385890][ T5835] Bluetooth: hci3: command tx timeout [ 689.720878][T24688] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.729080][T24688] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.736957][T24688] bridge_slave_1: entered allmulticast mode [ 689.746018][T24688] bridge_slave_1: entered promiscuous mode [ 689.921281][T24688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.963228][T24688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.972590][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6395'. [ 690.160672][T24798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6397'. [ 690.180909][T24798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6397'. [ 690.196371][T24798] netlink: 46 bytes leftover after parsing attributes in process `syz.0.6397'. [ 690.259624][T24688] team0: Port device team_slave_0 added [ 690.270591][T24688] team0: Port device team_slave_1 added [ 690.371735][T24688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.381546][ T53] IPVS: stop unused estimator thread 0... [ 690.388428][T24688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.443552][T24688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.474318][T24688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.482030][T24688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.512181][T24688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.650683][T24688] hsr_slave_0: entered promiscuous mode [ 690.670612][T24688] hsr_slave_1: entered promiscuous mode [ 690.684339][T24688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.707679][T24688] Cannot create hsr debugfs directory [ 690.733933][T24812] syzkaller0: entered promiscuous mode [ 690.739986][T24812] syzkaller0: entered allmulticast mode [ 691.041494][T24821] netlink: 'syz.0.6405': attribute type 11 has an invalid length. [ 691.050220][T24821] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6405'. [ 691.243393][T24826] netlink: 'syz.5.6407': attribute type 1 has an invalid length. [ 691.255505][T24826] netlink: 'syz.5.6407': attribute type 2 has an invalid length. [ 691.269460][T24826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6407'. [ 691.465483][ T5835] Bluetooth: hci3: command tx timeout [ 691.546985][T24834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6408'. [ 691.579291][T24833] hsr0: entered promiscuous mode [ 691.584538][T24833] macvtap1: entered promiscuous mode [ 691.641417][T24833] macvtap1: entered allmulticast mode [ 691.657499][T24833] hsr0: entered allmulticast mode [ 691.670776][T24833] hsr_slave_0: entered allmulticast mode [ 691.687227][T24833] hsr_slave_1: entered allmulticast mode [ 691.764205][T24834] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.792625][T24833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6409'. [ 691.917098][T24834] bridge_slave_1 (unregistering): left allmulticast mode [ 691.956017][T24834] bridge_slave_1 (unregistering): left promiscuous mode [ 691.983728][T24834] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.115053][T24833] hsr0 (unregistering): left allmulticast mode [ 692.239566][T24855] macvtap1: entered promiscuous mode [ 692.244962][T24855] hsr0: entered promiscuous mode [ 692.257236][T24855] macvtap1: entered allmulticast mode [ 692.262759][T24855] hsr0: entered allmulticast mode [ 692.306851][T24855] hsr_slave_0: entered allmulticast mode [ 692.312548][T24855] hsr_slave_1: entered allmulticast mode [ 692.349645][T24855] hsr0: left allmulticast mode [ 692.354477][T24855] hsr_slave_0: left allmulticast mode [ 692.388175][T24855] hsr_slave_1: left allmulticast mode [ 692.393617][T24855] hsr0: left promiscuous mode [ 692.579072][T24688] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 692.637968][T24688] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 692.710145][T24688] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 692.763793][T24865] netlink: 'syz.5.6416': attribute type 11 has an invalid length. [ 692.773402][T24688] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 692.789926][T24865] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6416'. [ 693.389803][T24688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.442766][T24688] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.484342][T23181] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.491614][T23181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.522804][T23181] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.530072][T23181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.089965][T24889] syzkaller0: entered promiscuous mode [ 694.115873][T24889] syzkaller0: entered allmulticast mode [ 694.153044][T24688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.229600][T24893] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 694.246181][T24893] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 694.343016][T24900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6427'. [ 694.360864][T24688] veth0_vlan: entered promiscuous mode [ 694.367000][T24900] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6427'. [ 694.384947][T24902] netlink: 'syz.5.6428': attribute type 11 has an invalid length. [ 694.395172][T24902] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6428'. [ 694.438269][T24688] veth1_vlan: entered promiscuous mode [ 694.570328][T24688] veth0_macvtap: entered promiscuous mode [ 694.583777][T24688] veth1_macvtap: entered promiscuous mode [ 694.627340][T24688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.644273][T24688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.660990][T24688] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.671405][T24688] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.682124][T24688] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.693215][T24688] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.999114][ T8652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.023656][ T8652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.046084][T24917] block nbd3: server does not support multiple connections per device. [ 695.055411][T24917] block nbd3: shutting down sockets [ 695.103284][T24918] bridge1: entered promiscuous mode [ 695.121982][T24918] bridge1: entered allmulticast mode [ 695.177588][T24918] team0: Port device bridge1 added [ 695.305371][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.327524][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.383181][T24935] netlink: 'syz.1.6437': attribute type 7 has an invalid length. [ 695.406625][T24935] netlink: 'syz.1.6437': attribute type 8 has an invalid length. [ 695.451817][T24935] netlink: 'syz.1.6437': attribute type 15 has an invalid length. [ 695.479774][T24938] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 695.674137][T24941] netlink: 788 bytes leftover after parsing attributes in process `syz.6.6439'. [ 696.524433][ T8652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.677023][ T8652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.927212][T24983] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6454'. [ 696.945752][T24983] netlink: 'syz.6.6454': attribute type 3 has an invalid length. [ 696.978702][T24983] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6454'. [ 696.989286][T24985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6454'. [ 697.025515][T24985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6454'. [ 697.068044][ T8652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.288441][ T8652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.413733][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 697.425870][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 697.445887][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 697.465040][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 697.489291][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 697.734694][ T8652] bridge_slave_1: left allmulticast mode [ 697.746257][ T8652] bridge_slave_1: left promiscuous mode [ 697.759910][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.794945][ T8652] bridge_slave_0: left allmulticast mode [ 697.800893][ T8652] bridge_slave_0: left promiscuous mode [ 697.823645][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.028412][T25011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6460'. [ 698.360990][ T8652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.373446][ T8652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.386014][ T8652] bond0 (unregistering): Released all slaves [ 698.411339][T25012] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6460'. [ 698.991523][T25029] netlink: 'syz.6.6465': attribute type 10 has an invalid length. [ 699.011230][T25029] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6465'. [ 699.120474][T25029] team0: entered promiscuous mode [ 699.130238][T25029] team_slave_0: entered promiscuous mode [ 699.154499][T25029] team_slave_1: entered promiscuous mode [ 699.164560][T25029] team0: entered allmulticast mode [ 699.184609][T25029] team_slave_0: entered allmulticast mode [ 699.202266][T25029] team_slave_1: entered allmulticast mode [ 699.222846][T25029] bridge0: port 3(team0) entered blocking state [ 699.246739][T25029] bridge0: port 3(team0) entered disabled state [ 699.264775][T25029] bridge0: port 3(team0) entered blocking state [ 699.271242][T25029] bridge0: port 3(team0) entered forwarding state [ 699.412190][T25038] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 699.519018][T25035] syzkaller0: entered promiscuous mode [ 699.544172][T25035] syzkaller0: entered allmulticast mode [ 699.613291][ T8652] hsr_slave_0: left promiscuous mode [ 699.618827][ T5835] Bluetooth: hci3: command tx timeout [ 699.629161][ T8652] hsr_slave_1: left promiscuous mode [ 699.636459][ T8652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.643992][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.652904][ T8652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.662448][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.732767][ T8652] veth1_macvtap: left promiscuous mode [ 699.745862][ T8652] veth0_macvtap: left promiscuous mode [ 699.759821][ T8652] veth1_vlan: left promiscuous mode [ 699.773508][ T8652] veth0_vlan: left promiscuous mode [ 700.410510][ T8652] team0 (unregistering): Port device team_slave_1 removed [ 700.462854][ T8652] team0 (unregistering): Port device team_slave_0 removed [ 700.983854][T25049] tipc: Started in network mode [ 700.994780][T25049] tipc: Node identity 8, cluster identity 3 [ 701.002093][T25049] tipc: Node number set to 8 [ 701.010123][T25049] tipc: Cannot configure node identity twice [ 701.393160][T25056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6471'. [ 701.700066][ T5835] Bluetooth: hci3: command tx timeout [ 703.170034][T25054] bridge2: entered allmulticast mode [ 703.271147][T25059] netlink: 'syz.1.6472': attribute type 21 has an invalid length. [ 703.288916][T25059] netlink: 'syz.1.6472': attribute type 1 has an invalid length. [ 703.586285][T25065] netlink: 'syz.1.6475': attribute type 11 has an invalid length. [ 703.594182][T25065] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6475'. [ 703.642206][T24997] chnl_net:caif_netlink_parms(): no params data found [ 703.749191][ T8652] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.785646][ T5835] Bluetooth: hci3: command tx timeout [ 703.942659][ T8652] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.979982][T25072] FAULT_INJECTION: forcing a failure. [ 703.979982][T25072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.027074][T25072] CPU: 1 UID: 0 PID: 25072 Comm: syz.5.6479 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) [ 704.027107][T25072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 704.027121][T25072] Call Trace: [ 704.027129][T25072] [ 704.027139][T25072] dump_stack_lvl+0x189/0x250 [ 704.027179][T25072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.027210][T25072] ? __pfx__printk+0x10/0x10 [ 704.027245][T25072] should_fail_ex+0x414/0x560 [ 704.027274][T25072] _copy_to_user+0x31/0xb0 [ 704.027308][T25072] simple_read_from_buffer+0xe1/0x170 [ 704.027341][T25072] proc_fail_nth_read+0x1df/0x250 [ 704.027376][T25072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.027410][T25072] ? rw_verify_area+0x258/0x650 [ 704.027433][T25072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.027465][T25072] vfs_read+0x1fd/0x980 [ 704.027508][T25072] ? __pfx___mutex_lock+0x10/0x10 [ 704.027534][T25072] ? __pfx_vfs_read+0x10/0x10 [ 704.027561][T25072] ? __fget_files+0x2a/0x420 [ 704.027594][T25072] ? __fget_files+0x3a0/0x420 [ 704.027621][T25072] ? __fget_files+0x2a/0x420 [ 704.027659][T25072] ksys_read+0x145/0x250 [ 704.027687][T25072] ? __pfx_ksys_read+0x10/0x10 [ 704.027715][T25072] ? do_syscall_64+0xba/0x210 [ 704.027745][T25072] do_syscall_64+0xf6/0x210 [ 704.027771][T25072] ? clear_bhb_loop+0x60/0xb0 [ 704.027797][T25072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.027818][T25072] RIP: 0033:0x7ff0dbb8d37c [ 704.027837][T25072] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 704.027855][T25072] RSP: 002b:00007ff0dc95b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.027878][T25072] RAX: ffffffffffffffda RBX: 00007ff0dbdb5fa0 RCX: 00007ff0dbb8d37c [ 704.027893][T25072] RDX: 000000000000000f RSI: 00007ff0dc95b0a0 RDI: 0000000000000004 [ 704.027907][T25072] RBP: 00007ff0dc95b090 R08: 0000000000000000 R09: 0000000000000000 [ 704.027920][T25072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.027933][T25072] R13: 0000000000000000 R14: 00007ff0dbdb5fa0 R15: 00007ffc2af91c68 [ 704.027967][T25072] [ 704.319534][T25078] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 704.359277][ T8652] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.395901][T24997] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.403227][T24997] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.423399][T24997] bridge_slave_0: entered allmulticast mode [ 704.430410][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 704.437865][T24997] bridge_slave_0: entered promiscuous mode [ 704.440312][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 704.450595][T24997] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.458020][T24997] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.465294][T24997] bridge_slave_1: entered allmulticast mode [ 704.470476][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 704.473780][T24997] bridge_slave_1: entered promiscuous mode [ 704.487055][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 704.496831][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 704.550352][ T8652] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.661716][T24997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.700916][T24997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.777916][T24997] team0: Port device team_slave_0 added [ 704.788554][T24997] team0: Port device team_slave_1 added [ 704.925260][T25093] netlink: 'syz.5.6483': attribute type 4 has an invalid length. [ 704.937528][T24997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.942263][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6483'. [ 704.963771][T24997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.033991][T24997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.062256][T24997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.077466][T24997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.120025][T24997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.284733][ T8652] bridge0: port 3(team0) entered disabled state [ 705.289912][T25103] netlink: 'syz.1.6488': attribute type 11 has an invalid length. [ 705.299858][T25103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6488'. [ 705.317503][ T8652] bridge_slave_1: left allmulticast mode [ 705.323214][ T8652] bridge_slave_1: left promiscuous mode [ 705.335901][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.376750][ T8652] bridge_slave_0: left allmulticast mode [ 705.382507][ T8652] bridge_slave_0: left promiscuous mode [ 705.390161][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.813730][ T8652] team0: Port device bridge1 removed [ 705.863003][ T5835] Bluetooth: hci3: command tx timeout [ 706.015129][ T8652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.027992][ T8652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.039571][ T8652] bond0 (unregistering): Released all slaves [ 706.058069][ T8652] bond1 (unregistering): Released all slaves [ 706.101990][T24997] hsr_slave_0: entered promiscuous mode [ 706.120178][T24997] hsr_slave_1: entered promiscuous mode [ 706.128620][T24997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 706.136336][T24997] Cannot create hsr debugfs directory [ 706.211776][ T8652] tipc: Left network mode [ 706.398299][T25117] netlink: 'syz.5.6492': attribute type 11 has an invalid length. [ 706.416366][T25117] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6492'. [ 706.577093][ T5835] Bluetooth: hci5: command tx timeout [ 706.642134][T25122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 706.711705][T25126] netlink: 'syz.1.6496': attribute type 7 has an invalid length. [ 706.725395][T25126] netlink: 'syz.1.6496': attribute type 8 has an invalid length. [ 706.733707][T25126] netlink: 'syz.1.6496': attribute type 15 has an invalid length. [ 706.814768][T25126] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 706.848741][T25129] netlink: 'syz.5.6497': attribute type 10 has an invalid length. [ 706.870473][T25129] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 706.911457][T25129] bridge_slave_1: left allmulticast mode [ 706.917394][T25129] bridge_slave_1: left promiscuous mode [ 706.923210][T25129] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.934562][T25129] bridge_slave_0: left allmulticast mode [ 706.940615][T25129] bridge_slave_0: left promiscuous mode [ 706.947390][T25129] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.956829][T25131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6497'. [ 707.040873][T25129] bond0: (slave bridge0): Releasing backup interface [ 707.243308][ T8652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.259473][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.274115][ T8652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.292378][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.332343][ T8652] veth1_macvtap: left promiscuous mode [ 707.338478][ T8652] veth0_macvtap: left promiscuous mode [ 707.344193][ T8652] veth1_vlan: left promiscuous mode [ 707.350051][ T8652] veth0_vlan: left promiscuous mode [ 707.725216][T25142] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6501'. [ 707.989728][ T8652] team_slave_1 (unregistering): left promiscuous mode [ 707.996726][ T8652] team_slave_1 (unregistering): left allmulticast mode [ 708.009002][ T8652] team0 (unregistering): Port device team_slave_1 removed [ 708.052386][ T8652] team_slave_0 (unregistering): left promiscuous mode [ 708.059328][ T8652] team_slave_0 (unregistering): left allmulticast mode [ 708.071034][ T8652] team0 (unregistering): Port device team_slave_0 removed [ 708.656715][ T5835] Bluetooth: hci5: command tx timeout [ 708.718465][T25082] chnl_net:caif_netlink_parms(): no params data found [ 708.804922][T25152] validate_nla: 1 callbacks suppressed [ 708.804944][T25152] netlink: 'syz.1.6504': attribute type 11 has an invalid length. [ 708.819493][T25152] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6504'. [ 709.036422][T25082] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.043693][T25082] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.065957][T25082] bridge_slave_0: entered allmulticast mode [ 709.073833][T25082] bridge_slave_0: entered promiscuous mode [ 709.098126][T25082] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.117093][T25082] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.124413][T25082] bridge_slave_1: entered allmulticast mode [ 709.148118][T25082] bridge_slave_1: entered promiscuous mode [ 709.340798][T25082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.402860][T25082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.554308][T25183] netlink: 'syz.1.6513': attribute type 11 has an invalid length. [ 709.576547][T25183] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6513'. [ 709.594578][T24997] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 709.644870][T25082] team0: Port device team_slave_0 added [ 709.663438][T24997] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 709.710278][T25082] team0: Port device team_slave_1 added [ 709.743972][T24997] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 709.791537][T24997] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 709.810576][T25082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.817806][T25082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.844553][T25082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.867895][T25082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.874885][T25082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.901154][T25082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.018932][T25082] hsr_slave_0: entered promiscuous mode [ 710.035120][T25082] hsr_slave_1: entered promiscuous mode [ 710.042173][T25082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 710.050019][T25082] Cannot create hsr debugfs directory [ 710.393050][T24997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.470144][T24997] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.537058][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.544218][ T8652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.600919][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.608162][ T8652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.650886][T25207] netlink: 788 bytes leftover after parsing attributes in process `syz.1.6523'. [ 710.735957][ T5835] Bluetooth: hci5: command tx timeout [ 710.937574][T25213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6525'. [ 711.061007][T25082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 711.117672][T25082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 711.159835][T25082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 711.206946][T25082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 711.231800][T25215] netlink: 'syz.5.6524': attribute type 4 has an invalid length. [ 711.438263][T24997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.524376][T25082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.619931][T25082] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.659777][T24997] veth0_vlan: entered promiscuous mode [ 711.699348][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.706562][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.725403][T25228] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6529'. [ 711.728272][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.741568][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.813241][T24997] veth1_vlan: entered promiscuous mode [ 711.948681][T25235] netlink: 'syz.5.6533': attribute type 7 has an invalid length. [ 711.967773][T25235] netlink: 'syz.5.6533': attribute type 8 has an invalid length. [ 711.986716][T25235] netlink: 'syz.5.6533': attribute type 15 has an invalid length. [ 712.022107][T25236] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 712.140687][T24997] veth0_macvtap: entered promiscuous mode [ 712.152667][T25238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6534'. [ 712.233369][T24997] veth1_macvtap: entered promiscuous mode [ 712.320725][T24997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.380010][T24997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.428784][T24997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.465051][T24997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.465232][T25244] netlink: 'syz.1.6536': attribute type 3 has an invalid length. [ 712.493920][T24997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.517127][T24997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.673863][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 712.687026][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 712.698676][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 712.722287][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 712.733610][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 712.817316][ T5835] Bluetooth: hci5: command tx timeout [ 712.874462][ T8653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.901263][ T8653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.006641][T25258] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 713.073234][ T8653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.090875][ T8653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.101904][T25082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.102750][T25260] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6539'. [ 713.740471][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.920601][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.964040][T25275] netlink: 'syz.5.6540': attribute type 4 has an invalid length. [ 714.124248][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.326519][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.489595][T25082] veth0_vlan: entered promiscuous mode [ 714.582473][T25284] netlink: 'syz.1.6544': attribute type 7 has an invalid length. [ 714.601415][T25284] netlink: 'syz.1.6544': attribute type 8 has an invalid length. [ 714.613011][T25284] netlink: 'syz.1.6544': attribute type 15 has an invalid length. [ 714.671876][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 714.683190][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 714.693164][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 714.703727][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 714.716551][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 714.770857][T25284] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 714.815892][ T5842] Bluetooth: hci6: command tx timeout [ 714.877789][T25082] veth1_vlan: entered promiscuous mode [ 715.013249][T25251] chnl_net:caif_netlink_parms(): no params data found [ 715.177707][ T53] bridge_slave_1: left allmulticast mode [ 715.184496][ T53] bridge_slave_1: left promiscuous mode [ 715.191024][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.202300][ T53] bridge_slave_0: left allmulticast mode [ 715.214738][ T53] bridge_slave_0: left promiscuous mode [ 715.227431][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.711762][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.728638][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.739066][ T53] bond0 (unregistering): Released all slaves [ 715.772399][T25082] veth0_macvtap: entered promiscuous mode [ 715.840952][T25304] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 715.949992][T25308] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 716.068781][T25312] netlink: 'syz.1.6552': attribute type 10 has an invalid length. [ 716.086168][T25312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6552'. [ 716.117987][T25314] 8021q: VLANs not supported on vcan0 [ 716.125225][T25082] veth1_macvtap: entered promiscuous mode [ 716.139340][T25316] netlink: 'syz.1.6552': attribute type 10 has an invalid length. [ 716.153892][T25251] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.162137][T25316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6552'. [ 716.171373][T25251] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.186769][T25251] bridge_slave_0: entered allmulticast mode [ 716.194864][T25251] bridge_slave_0: entered promiscuous mode [ 716.272673][T25251] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.294250][T25251] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.304916][T25251] bridge_slave_1: entered allmulticast mode [ 716.319465][T25251] bridge_slave_1: entered promiscuous mode [ 716.469427][T25082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.635131][T25251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.710803][T25332] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6558'. [ 716.737124][T25251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.817786][ T5842] Bluetooth: hci3: command tx timeout [ 716.844668][T25082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.883109][ T53] hsr_slave_0: left promiscuous mode [ 716.889804][ T53] hsr_slave_1: left promiscuous mode [ 716.897399][ T5842] Bluetooth: hci6: command tx timeout [ 716.904600][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.915067][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.926213][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.933672][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.964865][ T53] veth1_macvtap: left promiscuous mode [ 716.970695][ T53] veth0_macvtap: left promiscuous mode [ 716.977293][ T53] veth1_vlan: left promiscuous mode [ 716.982643][ T53] veth0_vlan: left promiscuous mode [ 717.543727][ T53] team0 (unregistering): Port device team_slave_1 removed [ 717.602572][ T53] team0 (unregistering): Port device team_slave_0 removed [ 718.289534][T25082] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.301697][T25082] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.310718][T25082] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.323426][T25082] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.350803][T25251] team0: Port device team_slave_0 added [ 718.378662][T25251] team0: Port device team_slave_1 added [ 718.488211][T25251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.495218][T25251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.527073][T25251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.601836][T25251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.610659][T25251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.637319][T25251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.897459][T25251] hsr_slave_0: entered promiscuous mode [ 718.904050][T25251] hsr_slave_1: entered promiscuous mode [ 718.911083][ T5842] Bluetooth: hci3: command tx timeout [ 718.928090][T25251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.966335][T25251] Cannot create hsr debugfs directory [ 718.985412][ T8653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.986400][ T5842] Bluetooth: hci6: command tx timeout [ 719.019110][ T8653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.052211][T25288] chnl_net:caif_netlink_parms(): no params data found [ 719.087169][T25365] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6569'. [ 719.096706][T25365] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6569'. [ 719.185426][ T8653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.204054][ T8653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.558889][T25288] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.572721][T25288] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.581240][T25288] bridge_slave_0: entered allmulticast mode [ 719.592262][T25288] bridge_slave_0: entered promiscuous mode [ 719.675774][T25288] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.686646][T25288] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.726124][T25288] bridge_slave_1: entered allmulticast mode [ 719.742817][T25288] bridge_slave_1: entered promiscuous mode [ 719.960454][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.999995][T25288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.044346][T25288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.127830][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.414851][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.486293][T25288] team0: Port device team_slave_0 added [ 720.615249][T25288] team0: Port device team_slave_1 added [ 720.665164][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 720.674648][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 720.683861][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 720.693449][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 720.703240][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 720.768029][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.845221][T25288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.860407][T25288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.894530][T25288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.950371][T25251] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 720.978280][ T5842] Bluetooth: hci3: command tx timeout [ 720.996443][T25288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.003790][T25288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.040402][T25288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.056336][ T5842] Bluetooth: hci6: command tx timeout [ 721.110177][T25251] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 721.149697][T25251] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 721.225239][T25251] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 721.317307][T25288] hsr_slave_0: entered promiscuous mode [ 721.324183][T25288] hsr_slave_1: entered promiscuous mode [ 721.346667][T25288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 721.354294][T25288] Cannot create hsr debugfs directory [ 721.564833][ T53] bridge_slave_1: left allmulticast mode [ 721.575834][ T53] bridge_slave_1: left promiscuous mode [ 721.581672][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.608989][ T53] bridge_slave_0: left allmulticast mode [ 721.624962][ T53] bridge_slave_0: left promiscuous mode [ 721.631043][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.938431][T25408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6580'. [ 722.010321][T25407] netlink: 'syz.5.6580': attribute type 4 has an invalid length. [ 722.202819][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.214379][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.224810][ T53] bond0 (unregistering): Released all slaves [ 722.826907][ T5842] Bluetooth: hci5: command tx timeout [ 723.062093][ T5842] Bluetooth: hci3: command tx timeout [ 723.304039][ T53] hsr_slave_0: left promiscuous mode [ 723.323770][ T53] hsr_slave_1: left promiscuous mode [ 723.334685][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.349578][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.359295][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.367197][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.393946][ T53] veth1_macvtap: left promiscuous mode [ 723.402365][ T53] veth0_macvtap: left promiscuous mode [ 723.410062][ T53] veth1_vlan: left promiscuous mode [ 723.420332][ T53] veth0_vlan: left promiscuous mode [ 723.948196][ T53] team0 (unregistering): Port device team_slave_1 removed [ 723.994617][ T53] team0 (unregistering): Port device team_slave_0 removed [ 724.587804][T25251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.699890][T25251] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.744790][T25398] chnl_net:caif_netlink_parms(): no params data found [ 724.847287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.854480][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.894755][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6589'. [ 724.896033][ T5842] Bluetooth: hci5: command tx timeout [ 724.983113][T23181] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.990416][T23181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.032200][T25439] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6589'. [ 725.032817][T25288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 725.076452][T25288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 725.145991][T25288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 725.189256][T25288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 725.312994][T25398] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.320351][T25398] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.328037][T25398] bridge_slave_0: entered allmulticast mode [ 725.340349][T25398] bridge_slave_0: entered promiscuous mode [ 725.349561][T25398] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.360652][T25398] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.368068][T25398] bridge_slave_1: entered allmulticast mode [ 725.376349][T25398] bridge_slave_1: entered promiscuous mode [ 725.538273][T25398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.567301][T25398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.680529][T25398] team0: Port device team_slave_0 added [ 725.716353][T25398] team0: Port device team_slave_1 added [ 725.826553][T25398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.838397][T25398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.895745][T25398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.947884][T25398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.954908][T25398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.981337][T25398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.120835][T25398] hsr_slave_0: entered promiscuous mode [ 726.137598][T25398] hsr_slave_1: entered promiscuous mode [ 726.144054][T25398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.174536][T25398] Cannot create hsr debugfs directory [ 726.426817][T25251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.640570][T25288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.779131][T25288] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.880093][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.887461][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.920064][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.927416][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.976230][ T5842] Bluetooth: hci5: command tx timeout [ 727.229651][T25288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 727.397843][T25251] veth0_vlan: entered promiscuous mode [ 727.448590][T25251] veth1_vlan: entered promiscuous mode [ 727.490858][T25487] netlink: 'syz.5.6601': attribute type 3 has an invalid length. [ 727.516727][T25487] netlink: 'syz.5.6601': attribute type 1 has an invalid length. [ 727.751950][T25251] veth0_macvtap: entered promiscuous mode [ 727.873768][T25251] veth1_macvtap: entered promiscuous mode [ 727.887779][T25398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 727.926801][T25398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 727.985325][T25398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 728.018474][T25288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.053968][T25251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.086828][T25398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 728.224634][T25251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.260804][T25251] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.285783][T25251] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.294884][T25251] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.303874][T25251] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.425437][T25398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.505291][T25288] veth0_vlan: entered promiscuous mode [ 728.564844][T25398] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.661672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.668971][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.737971][T25288] veth1_vlan: entered promiscuous mode [ 728.790043][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.797299][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.833249][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.853618][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.943727][T25288] veth0_macvtap: entered promiscuous mode [ 728.969315][ T8653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.974000][T25288] veth1_macvtap: entered promiscuous mode [ 728.992801][ T8653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.056837][ T5842] Bluetooth: hci5: command tx timeout [ 729.159611][T25288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.217131][T25288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.278159][T25288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.303139][T25288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.323413][T25288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.354283][T25288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.768912][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.898834][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.051356][T25398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.120848][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.147040][T25531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6615'. [ 730.161216][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.208630][T25531] netlink: 788 bytes leftover after parsing attributes in process `syz.5.6615'. [ 730.452272][T25537] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6616'. [ 730.499455][T25540] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6616'. [ 731.026433][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.210305][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.256557][T25398] veth0_vlan: entered promiscuous mode [ 731.282022][T25398] veth1_vlan: entered promiscuous mode [ 731.339090][T25398] veth0_macvtap: entered promiscuous mode [ 731.354024][T25398] veth1_macvtap: entered promiscuous mode [ 731.425231][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.453717][T25398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.472738][T25398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.485173][T25398] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.495158][T25398] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.513002][T25398] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.526635][T25398] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.620900][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.174653][ T8652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.199561][ T8652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.234423][ T36] bridge_slave_1: left allmulticast mode [ 732.242370][ T36] bridge_slave_1: left promiscuous mode [ 732.264616][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.305166][ T36] bridge_slave_0: left allmulticast mode [ 732.315957][ T36] bridge_slave_0: left promiscuous mode [ 732.333140][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.368204][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 732.386330][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 732.396525][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 732.406305][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 732.414338][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 732.641330][T25570] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6625'. [ 733.252012][T25584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.282795][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.298864][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.312542][ T36] bond0 (unregistering): Released all slaves [ 733.380043][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.413340][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.502853][ T5842] Bluetooth: hci3: command tx timeout [ 734.607026][T25614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6640'. [ 734.657726][T25613] Bluetooth: MGMT ver 1.23 [ 735.031897][ T36] hsr_slave_0: left promiscuous mode [ 735.084278][ T36] hsr_slave_1: left promiscuous mode [ 735.090668][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.118830][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.157039][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.174745][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.212781][T25631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6646'. [ 735.241211][T25631] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6646'. [ 735.243140][ T36] veth1_macvtap: left promiscuous mode [ 735.276001][ T36] veth0_macvtap: left promiscuous mode [ 735.286004][ T36] veth1_vlan: left promiscuous mode [ 735.302990][ T36] veth0_vlan: left promiscuous mode [ 735.363240][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 735.374330][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 735.388466][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 735.399942][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 735.407973][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 735.483751][T25643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.012607][ T36] team0 (unregistering): Port device team_slave_1 removed [ 736.071640][ T36] team0 (unregistering): Port device team_slave_0 removed [ 736.588121][ T5835] Bluetooth: hci3: command tx timeout [ 736.808538][T25566] chnl_net:caif_netlink_parms(): no params data found [ 736.901029][T25648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6649'. [ 737.216124][T25566] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.245724][T25566] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.259232][T25566] bridge_slave_0: entered allmulticast mode [ 737.297402][T25566] bridge_slave_0: entered promiscuous mode [ 737.357281][T25566] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.397936][T25566] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.427998][T25566] bridge_slave_1: entered allmulticast mode [ 737.456867][ T5835] Bluetooth: hci5: command tx timeout [ 737.471240][T25566] bridge_slave_1: entered promiscuous mode [ 737.748992][T25566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.789389][T25566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.018137][T25566] team0: Port device team_slave_0 added [ 738.047405][T25566] team0: Port device team_slave_1 added [ 738.260736][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.481627][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.532409][T25566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.551395][T25566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.585855][T25566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.648107][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.664753][ T5835] Bluetooth: hci3: command tx timeout [ 738.691193][T25566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.702490][T25566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.730102][T25566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.749162][ T30] audit: type=1804 audit(1748353765.600:6): pid=25666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6654" name="memory.events" dev="tmpfs" ino=884 res=1 errno=0 [ 738.792515][ T30] audit: type=1800 audit(1748353765.600:7): pid=25666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6654" name="memory.events" dev="tmpfs" ino=884 res=0 errno=0 [ 738.864304][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.916676][T25671] netlink: 'syz.1.6655': attribute type 4 has an invalid length. [ 738.932451][T25566] hsr_slave_0: entered promiscuous mode [ 738.936772][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6655'. [ 738.952910][T25566] hsr_slave_1: entered promiscuous mode [ 738.959795][T25566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.967667][T25566] Cannot create hsr debugfs directory [ 739.296769][T25682] netlink: 'syz.7.6659': attribute type 10 has an invalid length. [ 739.475910][T25636] chnl_net:caif_netlink_parms(): no params data found [ 739.492635][ T36] bridge_slave_1: left allmulticast mode [ 739.498675][ T36] bridge_slave_1: left promiscuous mode [ 739.504540][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.521971][ T36] bridge_slave_0: left allmulticast mode [ 739.530831][ T36] bridge_slave_0: left promiscuous mode [ 739.541356][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.545877][ T5835] Bluetooth: hci5: command tx timeout [ 740.019552][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.032495][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.043347][ T36] bond0 (unregistering): Released all slaves [ 740.514917][T25704] netlink: 'syz.5.6667': attribute type 4 has an invalid length. [ 740.558772][T25704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6667'. [ 740.595865][T25636] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.603094][T25636] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.625932][T25636] bridge_slave_0: entered allmulticast mode [ 740.639244][T25636] bridge_slave_0: entered promiscuous mode [ 740.743997][ T5835] Bluetooth: hci3: command tx timeout [ 740.750842][T25716] FAULT_INJECTION: forcing a failure. [ 740.750842][T25716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.776395][T25716] CPU: 0 UID: 0 PID: 25716 Comm: syz.5.6671 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) [ 740.776428][T25716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.776441][T25716] Call Trace: [ 740.776449][T25716] [ 740.776460][T25716] dump_stack_lvl+0x189/0x250 [ 740.776494][T25716] ? __lock_acquire+0xaac/0xd20 [ 740.776527][T25716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.776556][T25716] ? __pfx__printk+0x10/0x10 [ 740.776577][T25716] ? __might_fault+0xb0/0x130 [ 740.776617][T25716] should_fail_ex+0x414/0x560 [ 740.776646][T25716] _copy_from_user+0x2d/0xb0 [ 740.776678][T25716] ___sys_sendmsg+0x158/0x2a0 [ 740.776713][T25716] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.776780][T25716] ? __fget_files+0x2a/0x420 [ 740.776807][T25716] ? __fget_files+0x3a0/0x420 [ 740.776846][T25716] __x64_sys_sendmsg+0x19b/0x260 [ 740.776881][T25716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 740.776930][T25716] ? do_syscall_64+0xba/0x210 [ 740.776959][T25716] do_syscall_64+0xf6/0x210 [ 740.776983][T25716] ? clear_bhb_loop+0x60/0xb0 [ 740.777009][T25716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.777028][T25716] RIP: 0033:0x7ff0dbb8e969 [ 740.777048][T25716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.777065][T25716] RSP: 002b:00007ff0dc95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.777087][T25716] RAX: ffffffffffffffda RBX: 00007ff0dbdb5fa0 RCX: 00007ff0dbb8e969 [ 740.777102][T25716] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 740.777116][T25716] RBP: 00007ff0dc95b090 R08: 0000000000000000 R09: 0000000000000000 [ 740.777136][T25716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.777149][T25716] R13: 0000000000000000 R14: 00007ff0dbdb5fa0 R15: 00007ffc2af91c68 [ 740.777182][T25716] [ 741.014654][T25636] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.022146][T25636] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.029709][T25636] bridge_slave_1: entered allmulticast mode [ 741.038492][T25636] bridge_slave_1: entered promiscuous mode [ 741.156471][T25724] xt_CT: No such helper "pptp" [ 741.323052][T25721] netlink: 'syz.5.6672': attribute type 32 has an invalid length. [ 741.345952][T25721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6672'. [ 741.376729][T25636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.399855][T25636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.478972][T25721] (unnamed net_device) (uninitialized): option coupled_control: invalid value (76) [ 741.615773][ T5835] Bluetooth: hci5: command tx timeout [ 741.685920][T25636] team0: Port device team_slave_0 added [ 742.019142][T25735] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.026947][T25735] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.608758][T25735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.639090][T25735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.734426][T25761] netlink: 'syz.5.6677': attribute type 10 has an invalid length. [ 742.774990][T25735] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.790960][T25735] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.800187][T25735] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.809180][T25735] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.884852][T25737] !: renamed from dummy0 [ 742.913633][T25636] team0: Port device team_slave_1 added [ 742.967025][ T36] hsr_slave_0: left promiscuous mode [ 742.973454][ T36] hsr_slave_1: left promiscuous mode [ 742.985332][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.993053][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.023618][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.041482][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.117904][ T36] veth1_macvtap: left promiscuous mode [ 743.125240][ T36] veth0_macvtap: left promiscuous mode [ 743.131357][ T36] veth1_vlan: left promiscuous mode [ 743.137312][ T36] veth0_vlan: left promiscuous mode [ 743.314371][T25765] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6678'. [ 743.393514][T25766] netlink: 'syz.7.6678': attribute type 4 has an invalid length. [ 743.699790][ T5842] Bluetooth: hci5: command tx timeout [ 743.756561][ T36] team0 (unregistering): Port device team_slave_1 removed [ 743.810530][ T36] team0 (unregistering): Port device team_slave_0 removed [ 744.255987][ T5842] Bluetooth: hci2: command 0x0405 tx timeout [ 744.312686][T25758] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6677'. [ 744.334996][T25759] bond0: (slave bond_slave_0): Releasing backup interface [ 744.343987][T25759] bond0: (slave bond_slave_1): Releasing backup interface [ 744.370970][T25759] team0: Port device team_slave_0 removed [ 744.390054][T25759] team0: Port device team_slave_1 removed [ 744.396738][T25759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.404817][T25759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.418906][T25761] bond0: (slave wlan1): refused to change device type [ 744.496053][T25636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.504508][T25636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.534638][T25636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.548715][T25636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.576696][T25636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.634319][T25636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.066771][T25566] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 745.112969][T25636] hsr_slave_0: entered promiscuous mode [ 745.130338][T25636] hsr_slave_1: entered promiscuous mode [ 745.143090][T25777] netlink: 788 bytes leftover after parsing attributes in process `syz.7.6683'. [ 745.158178][T25636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.165867][T25636] Cannot create hsr debugfs directory [ 745.214596][T25566] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 745.239918][T25566] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 745.388081][T25566] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 745.566021][T25788] netlink: 'syz.7.6686': attribute type 11 has an invalid length. [ 745.598798][T25788] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6686'. [ 746.783903][T25566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.851660][T25566] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.002621][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.009869][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.043395][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.050686][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.074042][T25814] netlink: 'syz.7.6695': attribute type 4 has an invalid length. [ 747.363709][T25636] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 747.415266][T25636] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 747.459448][T25636] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 747.501274][T25636] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 747.536061][T25821] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6696'. [ 747.769852][T25566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.817719][T25826] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6698'. [ 747.852789][T25636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.101609][T25636] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.158076][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.165234][ T8652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.190129][T25832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6701'. [ 748.214867][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.222074][ T8652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.349069][T25566] veth0_vlan: entered promiscuous mode [ 748.416008][T25841] netlink: 'syz.5.6704': attribute type 11 has an invalid length. [ 748.438261][T25841] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6704'. [ 748.454117][T25566] veth1_vlan: entered promiscuous mode [ 748.555402][T25844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.564969][T25844] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.584232][T25844] bridge0: port 3(0!) entered blocking state [ 748.590651][T25844] bridge0: port 3(0!) entered forwarding state [ 748.616499][T25844] !: left allmulticast mode [ 748.630557][T25844] !: left promiscuous mode [ 748.635435][T25844] bridge0: port 3(0!) entered disabled state [ 748.655806][T25844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 748.683867][T25841] FAULT_INJECTION: forcing a failure. [ 748.683867][T25841] name failslab, interval 1, probability 0, space 0, times 0 [ 748.701148][T25841] CPU: 1 UID: 0 PID: 25841 Comm: syz.5.6704 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) [ 748.701180][T25841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 748.701194][T25841] Call Trace: [ 748.701203][T25841] [ 748.701212][T25841] dump_stack_lvl+0x189/0x250 [ 748.701250][T25841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 748.701280][T25841] ? __pfx__printk+0x10/0x10 [ 748.701308][T25841] ? __pfx___might_resched+0x10/0x10 [ 748.701328][T25841] ? fs_reclaim_acquire+0x7d/0x100 [ 748.701376][T25841] should_fail_ex+0x414/0x560 [ 748.701405][T25841] should_failslab+0xa8/0x100 [ 748.701435][T25841] __kmalloc_cache_noprof+0x70/0x3d0 [ 748.701461][T25841] ? inet_rtm_newaddr+0x530/0x18b0 [ 748.701489][T25841] inet_rtm_newaddr+0x530/0x18b0 [ 748.701533][T25841] ? irqentry_exit+0x74/0x90 [ 748.701560][T25841] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 748.701603][T25841] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 748.701626][T25841] rtnetlink_rcv_msg+0x7cc/0xb70 [ 748.701678][T25841] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 748.701703][T25841] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 748.701752][T25841] netlink_rcv_skb+0x208/0x470 [ 748.701781][T25841] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 748.701809][T25841] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.701852][T25841] ? netlink_deliver_tap+0x2e/0x1b0 [ 748.701879][T25841] ? netlink_deliver_tap+0x2e/0x1b0 [ 748.701931][T25841] netlink_unicast+0x75b/0x8d0 [ 748.701971][T25841] netlink_sendmsg+0x805/0xb30 [ 748.702011][T25841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.702045][T25841] ? aa_sock_msg_perm+0x94/0x160 [ 748.702072][T25841] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 748.702097][T25841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.702127][T25841] __sock_sendmsg+0x21c/0x270 [ 748.702155][T25841] ____sys_sendmsg+0x505/0x830 [ 748.702193][T25841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.702252][T25841] ? import_iovec+0x74/0xa0 [ 748.702287][T25841] ___sys_sendmsg+0x21f/0x2a0 [ 748.702321][T25841] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.702395][T25841] ? __fget_files+0x2a/0x420 [ 748.702423][T25841] ? __fget_files+0x3a0/0x420 [ 748.702463][T25841] __x64_sys_sendmsg+0x19b/0x260 [ 748.702498][T25841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 748.702549][T25841] ? do_syscall_64+0xba/0x210 [ 748.702578][T25841] do_syscall_64+0xf6/0x210 [ 748.702603][T25841] ? clear_bhb_loop+0x60/0xb0 [ 748.702629][T25841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.702655][T25841] RIP: 0033:0x7ff0dbb8e969 [ 748.702674][T25841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.702692][T25841] RSP: 002b:00007ff0dc95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.702714][T25841] RAX: ffffffffffffffda RBX: 00007ff0dbdb5fa0 RCX: 00007ff0dbb8e969 [ 748.702729][T25841] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 748.702743][T25841] RBP: 00007ff0dc95b090 R08: 0000000000000000 R09: 0000000000000000 [ 748.702755][T25841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.702768][T25841] R13: 0000000000000000 R14: 00007ff0dbdb5fa0 R15: 00007ffc2af91c68 [ 748.702801][T25841] [ 748.723593][T25846] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 749.014230][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6707'. [ 749.164798][T25857] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x6 [ 749.240233][T25566] veth0_macvtap: entered promiscuous mode [ 749.301239][T25566] veth1_macvtap: entered promiscuous mode [ 749.378803][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 749.382048][T25566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.421373][T25862] netlink: 'syz.1.6710': attribute type 11 has an invalid length. [ 749.449631][T25862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6710'. [ 749.475190][T25566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.489370][T25566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.498974][T25566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.507746][T25566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.516836][T25566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.655212][T25636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.709907][T25865] sit0: entered promiscuous mode [ 749.731928][T25865] netlink: 'syz.1.6711': attribute type 1 has an invalid length. [ 749.747583][T25865] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6711'. [ 750.093631][T25877] netlink: 'syz.5.6714': attribute type 11 has an invalid length. [ 750.094385][T23181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.103469][T25877] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6714'. [ 750.169126][T23181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.335215][ T8652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.377146][ T8652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.454681][T25636] veth0_vlan: entered promiscuous mode [ 750.472964][T25636] veth1_vlan: entered promiscuous mode [ 750.674272][T25636] veth0_macvtap: entered promiscuous mode [ 750.740075][T25636] veth1_macvtap: entered promiscuous mode [ 750.754766][T25893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6717'. [ 750.808513][T25895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6718'. [ 750.825897][T25636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.879699][T25636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.047116][T23181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.084562][T25636] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.110893][T25636] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.138538][T25636] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.159748][T25636] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.188747][T25898] FAULT_INJECTION: forcing a failure. [ 751.188747][T25898] name failslab, interval 1, probability 0, space 0, times 0 [ 751.222434][T25898] CPU: 1 UID: 0 PID: 25898 Comm: syz.5.6719 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) [ 751.222467][T25898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.222481][T25898] Call Trace: [ 751.222489][T25898] [ 751.222499][T25898] dump_stack_lvl+0x189/0x250 [ 751.222538][T25898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.222569][T25898] ? __pfx__printk+0x10/0x10 [ 751.222598][T25898] ? __pfx___might_resched+0x10/0x10 [ 751.222618][T25898] ? fs_reclaim_acquire+0x7d/0x100 [ 751.222656][T25898] should_fail_ex+0x414/0x560 [ 751.222686][T25898] should_failslab+0xa8/0x100 [ 751.222716][T25898] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 751.222745][T25898] ? __alloc_skb+0x112/0x2d0 [ 751.222779][T25898] __alloc_skb+0x112/0x2d0 [ 751.222810][T25898] netlink_ack+0x146/0xa50 [ 751.222832][T25898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 751.222851][T25898] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 751.222871][T25898] ? __pfx_nl80211_post_doit+0x10/0x10 [ 751.222906][T25898] netlink_rcv_skb+0x28c/0x470 [ 751.222932][T25898] ? __lock_acquire+0xaac/0xd20 [ 751.222959][T25898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 751.222980][T25898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 751.223027][T25898] ? down_read+0x1ad/0x2e0 [ 751.223056][T25898] genl_rcv+0x28/0x40 [ 751.223076][T25898] netlink_unicast+0x75b/0x8d0 [ 751.223113][T25898] netlink_sendmsg+0x805/0xb30 [ 751.223153][T25898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.223187][T25898] ? aa_sock_msg_perm+0x94/0x160 [ 751.223215][T25898] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 751.223241][T25898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.223273][T25898] __sock_sendmsg+0x21c/0x270 [ 751.223302][T25898] ____sys_sendmsg+0x505/0x830 [ 751.223341][T25898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.223383][T25898] ? import_iovec+0x74/0xa0 [ 751.223431][T25898] ___sys_sendmsg+0x21f/0x2a0 [ 751.223473][T25898] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.223547][T25898] ? __fget_files+0x2a/0x420 [ 751.223575][T25898] ? __fget_files+0x3a0/0x420 [ 751.223615][T25898] __x64_sys_sendmsg+0x19b/0x260 [ 751.223651][T25898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 751.223702][T25898] ? do_syscall_64+0xba/0x210 [ 751.223731][T25898] do_syscall_64+0xf6/0x210 [ 751.223757][T25898] ? clear_bhb_loop+0x60/0xb0 [ 751.223784][T25898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.223804][T25898] RIP: 0033:0x7ff0dbb8e969 [ 751.223824][T25898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.223842][T25898] RSP: 002b:00007ff0dc95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.223866][T25898] RAX: ffffffffffffffda RBX: 00007ff0dbdb5fa0 RCX: 00007ff0dbb8e969 [ 751.223881][T25898] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 751.223895][T25898] RBP: 00007ff0dc95b090 R08: 0000000000000000 R09: 0000000000000000 [ 751.223909][T25898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.223923][T25898] R13: 0000000000000000 R14: 00007ff0dbdb5fa0 R15: 00007ffc2af91c68 [ 751.223958][T25898] [ 751.580198][T23181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.663742][ T8652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.680262][ T8652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.722473][T23181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.759309][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.767702][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.850048][T25903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6720'. [ 751.868999][T25902] netlink: 'syz.1.6721': attribute type 11 has an invalid length. [ 751.896598][T25902] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6721'. [ 752.127337][T23181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.258932][T25910] bridge1: entered promiscuous mode [ 752.284634][T25910] bridge1: entered allmulticast mode [ 752.311868][T25910] team0: Port device bridge1 added [ 752.464753][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 752.483520][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 752.493190][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 752.526719][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 752.549467][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 752.657167][T23181] bridge_slave_1: left allmulticast mode [ 752.678642][T23181] bridge_slave_1: left promiscuous mode [ 752.684577][T23181] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.721387][T23181] bridge_slave_0: left allmulticast mode [ 752.730782][T23181] bridge_slave_0: left promiscuous mode [ 752.743326][T23181] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.172760][T23181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.191556][T23181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.202789][T23181] bond0 (unregistering): Released all slaves [ 753.493754][T25927] netlink: 'syz.7.6729': attribute type 2 has an invalid length. [ 753.661790][T25932] tipc: Started in network mode [ 753.679178][T25932] tipc: Node identity 723951a84eaf, cluster identity 4711 [ 753.698537][T25932] tipc: Enabled bearer , priority 0 [ 753.758550][T25928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6728'. [ 753.770300][T25928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6728'. [ 753.975453][T25928] tipc: Disabling bearer [ 754.004842][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 754.016254][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 754.028659][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 754.049076][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 754.068726][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 754.161054][T25943] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6734'. [ 754.658329][ T5842] Bluetooth: hci3: command tx timeout [ 754.865444][T25920] chnl_net:caif_netlink_parms(): no params data found [ 755.093859][T23181] hsr_slave_0: left promiscuous mode [ 755.115180][T23181] hsr_slave_1: left promiscuous mode [ 755.121955][T25957] netlink: 'syz.7.6737': attribute type 10 has an invalid length. [ 755.124454][T23181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.150578][T23181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.166819][T23181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.183423][T23181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.224588][T23181] veth1_macvtap: left promiscuous mode [ 755.235561][T23181] veth0_macvtap: left promiscuous mode [ 755.241332][T23181] veth1_vlan: left promiscuous mode [ 755.255761][T23181] veth0_vlan: left promiscuous mode [ 755.825478][T23181] team0 (unregistering): Port device team_slave_1 removed [ 755.874577][T23181] team0 (unregistering): Port device team_slave_0 removed [ 756.099654][ T5842] Bluetooth: hci5: command tx timeout [ 756.320149][T25965] netlink: 'syz.7.6740': attribute type 11 has an invalid length. [ 756.328821][T25965] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6740'. [ 756.735937][ T5842] Bluetooth: hci3: command tx timeout [ 756.948797][T25920] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.956437][T25920] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.963782][T25920] bridge_slave_0: entered allmulticast mode [ 756.972497][T25920] bridge_slave_0: entered promiscuous mode [ 756.985160][T25920] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.992974][T25920] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.000419][T25920] bridge_slave_1: entered allmulticast mode [ 757.008649][T25920] bridge_slave_1: entered promiscuous mode [ 757.133627][T25920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.171303][T25920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.457212][T25920] team0: Port device team_slave_0 added [ 757.473711][T25920] team0: Port device team_slave_1 added [ 757.603963][T25920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.624876][T25920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.652949][T25920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.675951][T25920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.682950][T25920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.718881][T25920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.024609][T26005] netlink: 'syz.7.6752': attribute type 11 has an invalid length. [ 758.056194][T26005] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6752'. [ 758.139828][T25920] hsr_slave_0: entered promiscuous mode [ 758.153942][T25920] hsr_slave_1: entered promiscuous mode [ 758.163205][T25920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.175780][ T5842] Bluetooth: hci5: command tx timeout [ 758.186848][T25920] Cannot create hsr debugfs directory [ 758.200892][T25939] chnl_net:caif_netlink_parms(): no params data found [ 758.319937][T26016] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6756'. [ 758.334919][T23181] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.613549][T23181] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.761449][T23181] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.816328][ T5842] Bluetooth: hci3: command tx timeout [ 758.927257][T23181] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.946878][T25939] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.954398][T25939] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.961982][T25939] bridge_slave_0: entered allmulticast mode [ 758.971041][T25939] bridge_slave_0: entered promiscuous mode [ 758.986579][T25939] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.001397][T25939] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.013421][T25939] bridge_slave_1: entered allmulticast mode [ 759.021305][T25939] bridge_slave_1: entered promiscuous mode [ 759.123723][T25939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.163857][T25939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.400939][T25939] team0: Port device team_slave_0 added [ 759.452918][T25939] team0: Port device team_slave_1 added [ 759.656327][T25939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.663458][T25939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.689973][T25939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.716774][T26051] bridge1: left promiscuous mode [ 759.721791][T26051] bridge1: left allmulticast mode [ 759.756399][T25939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.763404][T25939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.851741][T25939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.883661][T23181] bridge_slave_1: left allmulticast mode [ 759.892755][T23181] bridge_slave_1: left promiscuous mode [ 759.899073][T23181] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.938369][T23181] bridge_slave_0: left allmulticast mode [ 759.953708][T23181] bridge_slave_0: left promiscuous mode [ 759.960986][T23181] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.255812][ T5842] Bluetooth: hci5: command tx timeout [ 760.536846][T23181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.553837][T23181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.565078][T23181] bond0 (unregistering): Released all slaves [ 760.840248][T25939] hsr_slave_0: entered promiscuous mode [ 760.856973][T25939] hsr_slave_1: entered promiscuous mode [ 760.863425][T25939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.871429][T25939] Cannot create hsr debugfs directory [ 760.896009][ T5842] Bluetooth: hci3: command tx timeout [ 761.315936][T26072] netlink: 16162 bytes leftover after parsing attributes in process `syz.5.6774'. [ 761.543314][T26074] FAULT_INJECTION: forcing a failure. [ 761.543314][T26074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.632240][T26074] CPU: 0 UID: 0 PID: 26074 Comm: syz.5.6775 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) [ 761.632275][T26074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 761.632289][T26074] Call Trace: [ 761.632298][T26074] [ 761.632308][T26074] dump_stack_lvl+0x189/0x250 [ 761.632342][T26074] ? __lock_acquire+0xaac/0xd20 [ 761.632375][T26074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.632406][T26074] ? __pfx__printk+0x10/0x10 [ 761.632427][T26074] ? __might_fault+0xb0/0x130 [ 761.632491][T26074] should_fail_ex+0x414/0x560 [ 761.632521][T26074] _copy_from_user+0x2d/0xb0 [ 761.632553][T26074] get_timespec64+0x8e/0x1a0 [ 761.632582][T26074] ? __pfx_get_timespec64+0x10/0x10 [ 761.632622][T26074] __se_sys_pselect6+0x129/0x300 [ 761.632656][T26074] ? __pfx___se_sys_pselect6+0x10/0x10 [ 761.632691][T26074] ? __x64_sys_pselect6+0x21/0xf0 [ 761.632720][T26074] do_syscall_64+0xf6/0x210 [ 761.632747][T26074] ? clear_bhb_loop+0x60/0xb0 [ 761.632772][T26074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.632793][T26074] RIP: 0033:0x7ff0dbb8e969 [ 761.632811][T26074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.632829][T26074] RSP: 002b:00007ff0dc95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 761.632850][T26074] RAX: ffffffffffffffda RBX: 00007ff0dbdb5fa0 RCX: 00007ff0dbb8e969 [ 761.632865][T26074] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 761.632879][T26074] RBP: 00007ff0dc95b090 R08: 0000200000000280 R09: 0000000000000000 [ 761.632893][T26074] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 761.632906][T26074] R13: 0000000000000000 R14: 00007ff0dbdb5fa0 R15: 00007ffc2af91c68 [ 761.632939][T26074] [ 762.020690][T25920] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 762.044905][T25920] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 762.124778][T23181] hsr_slave_0: left promiscuous mode [ 762.131383][T23181] hsr_slave_1: left promiscuous mode [ 762.146501][T23181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.153974][T23181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.170270][T23181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.178500][T23181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.234829][T23181] veth1_macvtap: left promiscuous mode [ 762.244066][T26090] netlink: 'syz.5.6778': attribute type 11 has an invalid length. [ 762.244070][T23181] veth0_macvtap: left promiscuous mode [ 762.244273][T23181] veth1_vlan: left promiscuous mode [ 762.263706][T26090] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6778'. [ 762.285630][T23181] veth0_vlan: left promiscuous mode [ 762.335904][ T5842] Bluetooth: hci5: command tx timeout [ 763.161256][T26092] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6780'. [ 763.184403][T26092] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6780'. [ 763.273672][T23181] team0 (unregistering): Port device team_slave_1 removed [ 763.329659][T23181] team0 (unregistering): Port device team_slave_0 removed [ 763.820318][T25920] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 763.865218][T25920] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 764.324351][T26105] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6782'. [ 764.744109][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 764.745325][T25920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.882200][T25920] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.966706][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.973927][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.037540][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.039271][T26123] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6788'. [ 765.044786][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.663103][T25939] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 765.697627][T25939] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 765.756026][T25939] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 765.795678][T25939] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 766.109806][T25939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.209637][T25939] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.247406][T13654] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.254640][T13654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.281601][T26136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6792'. [ 766.303213][T13654] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.310457][T13654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.506345][T26136] netlink: 'syz.5.6792': attribute type 10 has an invalid length. [ 766.514226][T26136] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6792'. [ 766.529494][T25939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 766.572272][T26136] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.613636][T26136] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.643704][T26136] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.675147][T26136] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.704329][T26136] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 766.723624][T26136] team0: Failed to send options change via netlink (err -105) [ 766.735373][T26136] team0: Port device geneve0 added [ 766.840002][T25920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.049413][T26154] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6796'. [ 767.080944][T26148] sit0: left promiscuous mode [ 767.351140][T25939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.413086][T26159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6797'. [ 767.415272][T25920] veth0_vlan: entered promiscuous mode [ 767.484953][T25920] veth1_vlan: entered promiscuous mode [ 767.591916][T26165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6799'. [ 767.632729][T25920] veth0_macvtap: entered promiscuous mode [ 767.694819][T25920] veth1_macvtap: entered promiscuous mode [ 767.766665][T26173] tipc: New replicast peer: 255.255.255.255 [ 767.773585][T26173] tipc: Enabled bearer , priority 10 [ 767.845269][T25920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.847561][T26175] netlink: 'syz.1.6801': attribute type 2 has an invalid length. [ 767.862485][T26175] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.6801'. [ 767.921283][T25920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.935381][T25920] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.944790][T25920] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.954689][T25920] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.966370][T25920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.293264][T25939] veth0_vlan: entered promiscuous mode [ 768.399498][T25939] veth1_vlan: entered promiscuous mode [ 768.572204][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.615950][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.743315][T25939] veth0_macvtap: entered promiscuous mode [ 768.771926][T13655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.791981][T13655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.799895][T26196] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.821880][T26196] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.832013][T26196] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.841831][T26196] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.880943][T25939] veth1_macvtap: entered promiscuous mode [ 768.897682][T24028] tipc: Node number set to 1016484264 [ 768.922777][T25939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.952441][T25939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.981783][T25939] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.004098][T25939] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.014733][T25939] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.031612][T25939] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.353576][T26205] FAULT_INJECTION: forcing a failure. [ 769.353576][T26205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.373561][T26205] CPU: 1 UID: 0 PID: 26205 Comm: syz.7.6810 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) [ 769.373593][T26205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 769.373606][T26205] Call Trace: [ 769.373615][T26205] [ 769.373624][T26205] dump_stack_lvl+0x189/0x250 [ 769.373657][T26205] ? __lock_acquire+0xaac/0xd20 [ 769.373690][T26205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.373719][T26205] ? __pfx__printk+0x10/0x10 [ 769.373741][T26205] ? __might_fault+0xb0/0x130 [ 769.373780][T26205] should_fail_ex+0x414/0x560 [ 769.373809][T26205] set_fd_set+0x3a/0xa0 [ 769.373835][T26205] core_sys_select+0x875/0x990 [ 769.373874][T26205] ? __pfx_core_sys_select+0x10/0x10 [ 769.373928][T26205] ? __pfx_set_user_sigmask+0x10/0x10 [ 769.373961][T26205] __se_sys_pselect6+0x27a/0x300 [ 769.373994][T26205] ? __pfx___se_sys_pselect6+0x10/0x10 [ 769.374029][T26205] ? __x64_sys_pselect6+0x21/0xf0 [ 769.374059][T26205] do_syscall_64+0xf6/0x210 [ 769.374085][T26205] ? clear_bhb_loop+0x60/0xb0 [ 769.374111][T26205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.374131][T26205] RIP: 0033:0x7f800d98e969 [ 769.374149][T26205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.374167][T26205] RSP: 002b:00007f800e8db038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 769.374189][T26205] RAX: ffffffffffffffda RBX: 00007f800dbb5fa0 RCX: 00007f800d98e969 [ 769.374204][T26205] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 769.374218][T26205] RBP: 00007f800e8db090 R08: 0000200000000280 R09: 0000000000000000 [ 769.374232][T26205] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 769.374245][T26205] R13: 0000000000000000 R14: 00007f800dbb5fa0 R15: 00007ffc8caff368 [ 769.374278][T26205] [ 769.613874][T13656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.655680][T13656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.711516][ T8653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.719533][ T8653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.850764][T26216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6814'. [ 769.858834][T26220] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6813'. [ 770.159740][T13655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.353152][T13655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.458279][T13655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.569817][T13655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.681155][T26227] sock: sock_timestamping_bind_phc: sock not bind to device [ 770.694821][T26227] netlink: 'syz.1.6817': attribute type 11 has an invalid length. [ 770.704877][T26227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6817'. [ 770.864883][T13655] bridge_slave_1: left allmulticast mode [ 770.883083][T13655] bridge_slave_1: left promiscuous mode [ 770.892515][T13655] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.919930][T13655] bridge_slave_0: left allmulticast mode [ 770.926835][T13655] bridge_slave_0: left promiscuous mode [ 770.932668][T13655] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.092068][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 771.124310][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 771.138867][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 771.178153][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 771.202008][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 771.826779][T13655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.847584][T13655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.859840][T13655] bond0 (unregistering): Released all slaves [ 771.892819][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 771.903661][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 771.912914][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 771.922208][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 771.937590][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 772.074307][T26253] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6824'. [ 772.214279][T26259] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6827'. [ 772.790112][T26269] netlink: 'syz.7.6829': attribute type 4 has an invalid length. [ 772.798725][T26269] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6829'. [ 772.973657][T26275] macvtap0: entered promiscuous mode [ 772.987840][T26275] macvtap0: entered allmulticast mode [ 773.104402][T26279] netlink: 'syz.7.6832': attribute type 11 has an invalid length. [ 773.119161][T26230] chnl_net:caif_netlink_parms(): no params data found [ 773.127630][T26279] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6832'. [ 773.216407][ T5842] Bluetooth: hci3: command tx timeout [ 773.481880][T26230] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.498340][T26230] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.517828][T26230] bridge_slave_0: entered allmulticast mode [ 773.531252][T26230] bridge_slave_0: entered promiscuous mode [ 773.554119][T26230] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.572558][T26230] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.584167][T26230] bridge_slave_1: entered allmulticast mode [ 773.626298][T26230] bridge_slave_1: entered promiscuous mode [ 773.832641][T13655] hsr_slave_0: left promiscuous mode [ 773.847756][T13655] hsr_slave_1: left promiscuous mode [ 773.856103][T13655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.863646][T13655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.873006][T13655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.880808][T13655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.927388][T13655] veth1_macvtap: left promiscuous mode [ 773.941356][T13655] veth0_macvtap: left promiscuous mode [ 773.948112][T13655] veth1_vlan: left promiscuous mode [ 773.953517][T13655] veth0_vlan: left promiscuous mode [ 774.022700][ T5842] Bluetooth: hci5: command tx timeout [ 774.782587][T13655] team0 (unregistering): Port device team_slave_1 removed [ 774.840112][T13655] team0 (unregistering): Port device team_slave_0 removed [ 775.305979][ T5842] Bluetooth: hci3: command tx timeout [ 775.419083][T26230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.448298][T26230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.534185][T26294] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6835'. [ 775.612089][T26294] bridge_slave_0 (unregistering): left allmulticast mode [ 775.626088][T26294] bridge_slave_0 (unregistering): left promiscuous mode [ 775.633282][T26294] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.690922][T26230] team0: Port device team_slave_0 added [ 775.703282][T26230] team0: Port device team_slave_1 added [ 775.893563][T26230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.913520][T26230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.954100][T26230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.972666][T26230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.980072][T26230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.029576][T26230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.096483][ T5842] Bluetooth: hci5: command tx timeout [ 776.352117][T26230] hsr_slave_0: entered promiscuous mode [ 776.377870][T26230] hsr_slave_1: entered promiscuous mode [ 776.395917][T26230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.427801][T26230] Cannot create hsr debugfs directory [ 776.574529][T26310] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 776.574985][T26306] netlink: 'syz.1.6840': attribute type 4 has an invalid length. [ 776.615790][T26306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6840'. [ 776.787812][T26317] xt_TCPMSS: Only works on TCP SYN packets [ 776.801534][ T965] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.822852][T26319] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6843'. [ 776.844173][T26319] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6843'. [ 776.921531][T26250] chnl_net:caif_netlink_parms(): no params data found [ 776.929438][T26319] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6843'. [ 776.943729][T26321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6844'. [ 776.987870][ T965] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.033808][T26324] netlink: 'syz.7.6843': attribute type 11 has an invalid length. [ 777.065588][T26324] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6843'. [ 777.145935][ T965] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.171851][T24028] IPVS: starting estimator thread 0... [ 777.172080][T26327] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 777.179626][T26328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6845'. [ 777.285186][T26329] IPVS: using max 37 ests per chain, 88800 per kthread [ 777.288348][ T965] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.376123][ T5835] Bluetooth: hci3: command tx timeout [ 777.479340][T26250] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.486944][T26250] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.494268][T26250] bridge_slave_0: entered allmulticast mode [ 777.506243][T26250] bridge_slave_0: entered promiscuous mode [ 777.549604][T26250] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.569823][T26250] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.577473][T26250] bridge_slave_1: entered allmulticast mode [ 777.594854][T26250] bridge_slave_1: entered promiscuous mode [ 777.726587][T26250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.867487][T26250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.176403][ T5835] Bluetooth: hci5: command tx timeout [ 778.308107][T26250] team0: Port device team_slave_0 added [ 778.342178][ T965] bridge_slave_1: left allmulticast mode [ 778.354990][ T965] bridge_slave_1: left promiscuous mode [ 778.368403][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.421154][ T965] bridge_slave_0: left allmulticast mode [ 778.434405][ T965] bridge_slave_0: left promiscuous mode [ 778.454278][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.655811][ T31] INFO: task syz.4.6014:23498 blocked for more than 143 seconds. [ 778.664476][ T31] Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 [ 778.689296][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 778.704478][ T31] task:syz.4.6014 state:D stack:22904 pid:23498 tgid:23486 ppid:15384 task_flags:0x400140 flags:0x00000004 [ 778.759044][ T31] Call Trace: [ 778.762402][ T31] [ 778.765377][ T31] __schedule+0x16e2/0x4cd0 [ 778.792924][ T31] ? __lock_acquire+0xaac/0xd20 [ 778.823333][ T31] ? schedule+0x165/0x360 [ 778.842294][ T31] ? __pfx___schedule+0x10/0x10 [ 778.853941][T26369] netlink: 'syz.1.6857': attribute type 11 has an invalid length. [ 778.871336][ T31] ? schedule+0x91/0x360 [ 778.889799][T26369] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6857'. [ 778.925593][ T31] schedule+0x165/0x360 [ 778.929835][ T31] schedule_preempt_disabled+0x13/0x30 [ 778.935355][ T31] __mutex_lock+0x724/0xe80 [ 778.972337][ T31] ? __mutex_lock+0x51b/0xe80 [ 778.984218][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 779.005715][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 779.010841][ T31] ? stack_trace_save+0x9c/0xe0 [ 779.025335][ T31] nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 779.031762][ T31] ? kasan_save_track+0x4f/0x80 [ 779.044013][ T31] ? kasan_save_track+0x3e/0x80 [ 779.049042][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 779.053827][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 779.060635][ T31] ? kmalloc_reserve+0x136/0x290 [ 779.066131][ T31] ? __alloc_skb+0x142/0x2d0 [ 779.070822][ T31] ? netlink_dump+0x22b/0xe20 [ 779.075605][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 779.081527][ T31] ? genl_rcv_msg+0x5da/0x790 [ 779.086398][ T31] ? netlink_rcv_skb+0x208/0x470 [ 779.091450][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 779.098132][ T31] ? __sock_sendmsg+0x21c/0x270 [ 779.103004][ T31] ? ____sys_sendmsg+0x505/0x830 [ 779.108024][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 779.112943][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 779.118195][ T31] ? do_syscall_64+0xf6/0x210 [ 779.122880][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.129027][ T31] ? __alloc_skb+0x142/0x2d0 [ 779.133634][ T31] ? rcu_is_watching+0x15/0xb0 [ 779.138895][ T31] ? trace_kmalloc+0x1f/0xd0 [ 779.143522][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 779.150202][ T31] ? __build_skb_around+0x257/0x3e0 [ 779.155448][ T31] genl_dumpit+0x10b/0x1b0 [ 779.160006][ T31] netlink_dump+0x62d/0xe20 [ 779.164536][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 779.170037][ T31] ? genl_start+0x499/0x6c0 [ 779.174672][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 779.180001][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 779.185873][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 779.192165][ T31] ? genl_get_cmd+0x496/0x910 [ 779.197060][ T31] ? __pfx_genl_start+0x10/0x10 [ 779.201940][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 779.206921][ T31] ? __pfx_genl_done+0x10/0x10 [ 779.211788][ T31] genl_rcv_msg+0x5da/0x790 [ 779.216648][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.221870][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 779.228495][ T31] netlink_rcv_skb+0x208/0x470 [ 779.233294][ T31] ? __lock_acquire+0xaac/0xd20 [ 779.238420][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.243473][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 779.248969][ T31] ? down_read+0x1ad/0x2e0 [ 779.253425][ T31] genl_rcv+0x28/0x40 [ 779.257478][ T31] netlink_unicast+0x75b/0x8d0 [ 779.262280][ T31] netlink_sendmsg+0x805/0xb30 [ 779.267194][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.272807][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 779.277856][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 779.283164][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.288599][ T31] __sock_sendmsg+0x21c/0x270 [ 779.293325][ T31] ____sys_sendmsg+0x505/0x830 [ 779.299119][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.304451][ T31] ? import_iovec+0x74/0xa0 [ 779.309112][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 779.313833][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.319151][ T31] ? __fget_files+0x2a/0x420 [ 779.323769][ T31] ? __fget_files+0x3a0/0x420 [ 779.328513][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 779.333484][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.339065][ T31] ? do_syscall_64+0xba/0x210 [ 779.343767][ T31] do_syscall_64+0xf6/0x210 [ 779.348412][ T31] ? clear_bhb_loop+0x60/0xb0 [ 779.353100][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.359180][ T31] RIP: 0033:0x7f4de8b8e969 [ 779.363623][ T31] RSP: 002b:00007f4de6591038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.372106][ T31] RAX: ffffffffffffffda RBX: 00007f4de8db6240 RCX: 00007f4de8b8e969 [ 779.380460][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000f [ 779.388547][ T31] RBP: 00007f4de8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 779.396617][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.404611][ T31] R13: 0000000000000000 R14: 00007f4de8db6240 R15: 00007ffd44ea7268 [ 779.412650][ T31] [ 779.415882][ T31] [ 779.415882][ T31] Showing all locks held in the system: [ 779.423635][ T31] 1 lock held by khungtaskd/31: [ 779.437389][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 779.447827][ T31] 5 locks held by kworker/u8:5/965: [ 779.453054][ T31] #0: ffff88801aefe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 779.464090][ T5835] Bluetooth: hci3: command tx timeout [ 779.469990][ T31] #1: ffffc9000392fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 779.481241][ T31] #2: ffffffff8f2ee050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x8a0 [ 779.491116][ T31] #3: ffffffff8f2fac48 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 779.500295][ T31] #4: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 779.511345][ T31] 2 locks held by getty/5595: [ 779.516416][ T31] #0: ffff888030c6d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 779.526738][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 779.537106][ T31] 2 locks held by syz.2.5982/23373: [ 779.542328][ T31] #0: ffffffff8f360cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 779.551031][ T31] #1: ffffffff8e216d28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 779.561331][ T31] 3 locks held by syz.4.6014/23498: [ 779.566743][ T31] #0: ffffffff8f360cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 779.574990][ T31] #1: ffff8880537de6d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 779.586809][ T31] #2: ffffffff8e216d28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 779.597381][ T31] 3 locks held by kworker/u8:4/24709: [ 779.602789][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 779.614558][ T31] #1: ffffc90005087c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 779.626050][ T31] #2: ffffffff8f2fac48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 779.635093][ T31] 3 locks held by kworker/0:3/24757: [ 779.640715][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 779.651776][ T31] #1: ffffc9000492fc60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 779.663009][ T31] #2: ffffffff8f2fac48 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 779.673491][ T31] 2 locks held by syz.0.6450/24976: [ 779.678781][ T31] #0: ffffffff8f360cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 779.688900][ T31] #1: ffffffff8e216d28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 779.699572][ T31] 7 locks held by syz-executor/26230: [ 779.704980][ T31] #0: ffff888034a78420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 779.714186][ T31] #1: ffff88804467a088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 779.724053][ T31] #2: ffff8881447b23c8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 779.734158][ T31] #3: ffffffff8eb9a708 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 [ 779.744950][ T31] #4: ffff88805d2f70e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 779.754543][ T31] #5: ffff88803418b250 (&devlink->lock_key#27){+.+.}-{4:4}, at: nsim_drv_probe+0xc1/0xb70 [ 779.764694][ T31] #6: ffffffff8f2fac48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 779.774179][ T31] 1 lock held by syz-executor/26250: [ 779.779577][ T31] #0: ffffffff8f2fac48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 779.789148][ T31] 2 locks held by syz.7.6848/26338: [ 779.794364][ T31] #0: ffffffff8f2ee050 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 779.804003][ T31] #1: ffffffff8f2fac48 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 779.813653][ T31] 1 lock held by syz.5.6856/26363: [ 779.818996][ T31] #0: ffffffff8f2fac48 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 779.828576][ T31] 1 lock held by syz.1.6857/26364: [ 779.833683][ T31] #0: ffffffff8f2fac48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 779.842559][ T31] 1 lock held by syz.1.6857/26366: [ 779.847739][ T31] #0: ffffffff8f2fac48 (rtnl_mutex){+.+.}-{4:4}, at: tcx_link_attach+0xe7/0x8a0 [ 779.857186][ T31] 1 lock held by syz.1.6857/26369: [ 779.862314][ T31] #0: ffffffff8f2fac48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 779.871858][ T31] [ 779.878303][ T31] ============================================= [ 779.878303][ T31] [ 779.887174][ T31] NMI backtrace for cpu 0 [ 779.887193][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) [ 779.887223][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.887237][ T31] Call Trace: [ 779.887245][ T31] [ 779.887255][ T31] dump_stack_lvl+0x189/0x250 [ 779.887288][ T31] ? __wake_up_klogd+0xd9/0x110 [ 779.887316][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.887346][ T31] ? __pfx__printk+0x10/0x10 [ 779.887381][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 779.887416][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 779.887444][ T31] ? _printk+0xcf/0x120 [ 779.887470][ T31] ? __pfx__printk+0x10/0x10 [ 779.887494][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 779.887519][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 779.887554][ T31] watchdog+0xfee/0x1030 [ 779.887584][ T31] ? watchdog+0x1de/0x1030 [ 779.887620][ T31] kthread+0x70e/0x8a0 [ 779.887650][ T31] ? __pfx_watchdog+0x10/0x10 [ 779.887675][ T31] ? __pfx_kthread+0x10/0x10 [ 779.887702][ T31] ? __pfx_kthread+0x10/0x10 [ 779.887726][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 779.887747][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.887770][ T31] ? __pfx_kthread+0x10/0x10 [ 779.887794][ T31] ret_from_fork+0x4b/0x80 [ 779.887823][ T31] ? __pfx_kthread+0x10/0x10 [ 779.887847][ T31] ret_from_fork_asm+0x1a/0x30 [ 779.887884][ T31] [ 779.887893][ T31] Sending NMI from CPU 0 to CPUs 1: [ 780.046971][ C1] NMI backtrace for cpu 1 [ 780.046989][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) [ 780.047025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 780.047037][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 780.047061][ C1] Code: c3 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 2f 0f 00 f3 0f 1e fa fb f4 98 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 780.047077][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 780.047093][ C1] RAX: 3cd4715c4bee8000 RBX: ffffffff81977118 RCX: 3cd4715c4bee8000 [ 780.047107][ C1] RDX: 0000000000000001 RSI: ffffffff8d75737d RDI: ffffffff8bc1f640 [ 780.047119][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 780.047132][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7faa70 [ 780.047145][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dab40 [ 780.047156][ C1] FS: 0000000000000000(0000) GS:ffff8881261b0000(0000) knlGS:0000000000000000 [ 780.047171][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 780.047183][ C1] CR2: 000055f1661ad000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 780.047198][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 780.047208][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 780.047220][ C1] Call Trace: [ 780.047226][ C1] [ 780.047233][ C1] default_idle+0x13/0x20 [ 780.047254][ C1] default_idle_call+0x74/0xb0 [ 780.047277][ C1] do_idle+0x1e8/0x510 [ 780.047298][ C1] ? __pfx_do_idle+0x10/0x10 [ 780.047324][ C1] cpu_startup_entry+0x44/0x60 [ 780.047341][ C1] start_secondary+0x101/0x110 [ 780.047358][ C1] common_startup_64+0x13e/0x147 [ 780.047392][ C1] [ 780.066557][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 780.066583][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-01769-g358bea91ce6b #0 PREEMPT(full) [ 780.066613][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 780.066629][ T31] Call Trace: [ 780.066639][ T31] [ 780.066652][ T31] dump_stack_lvl+0x99/0x250 [ 780.066692][ T31] ? __asan_memcpy+0x40/0x70 [ 780.066718][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 780.066752][ T31] ? __pfx__printk+0x10/0x10 [ 780.066791][ T31] panic+0x2db/0x790 [ 780.066830][ T31] ? __pfx_panic+0x10/0x10 [ 780.066859][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 780.066890][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 780.066929][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 780.066975][ T31] watchdog+0x102d/0x1030 [ 780.067009][ T31] ? watchdog+0x1de/0x1030 [ 780.067049][ T31] kthread+0x70e/0x8a0 [ 780.067081][ T31] ? __pfx_watchdog+0x10/0x10 [ 780.067111][ T31] ? __pfx_kthread+0x10/0x10 [ 780.067141][ T31] ? __pfx_kthread+0x10/0x10 [ 780.067168][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 780.067191][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.067217][ T31] ? __pfx_kthread+0x10/0x10 [ 780.067244][ T31] ret_from_fork+0x4b/0x80 [ 780.067268][ T31] ? __pfx_kthread+0x10/0x10 [ 780.067297][ T31] ret_from_fork_asm+0x1a/0x30 [ 780.067337][ T31] [ 780.370702][ T31] Kernel Offset: disabled [ 780.375044][ T31] Rebooting in 86400 seconds..