last executing test programs: 1m32.800362002s ago: executing program 4 (id=51): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0xf0bd2b, 0xfffffffc, {0x5}}, 0x14}}, 0xc7cfd72761cf52a7) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000004480)=[@in6={0xa, 0x4e24, 0xf, @empty, 0x44d}, @in6={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}], 0x38) socket$qrtr(0x2a, 0x2, 0x0) 1m23.688342093s ago: executing program 4 (id=51): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0xf0bd2b, 0xfffffffc, {0x5}}, 0x14}}, 0xc7cfd72761cf52a7) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000004480)=[@in6={0xa, 0x4e24, 0xf, @empty, 0x44d}, @in6={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}], 0x38) socket$qrtr(0x2a, 0x2, 0x0) 1m16.162088385s ago: executing program 4 (id=51): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0xf0bd2b, 0xfffffffc, {0x5}}, 0x14}}, 0xc7cfd72761cf52a7) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000004480)=[@in6={0xa, 0x4e24, 0xf, @empty, 0x44d}, @in6={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}], 0x38) socket$qrtr(0x2a, 0x2, 0x0) 1m9.760993731s ago: executing program 4 (id=51): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0xf0bd2b, 0xfffffffc, {0x5}}, 0x14}}, 0xc7cfd72761cf52a7) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000004480)=[@in6={0xa, 0x4e24, 0xf, @empty, 0x44d}, @in6={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}], 0x38) socket$qrtr(0x2a, 0x2, 0x0) 35.642979712s ago: executing program 0 (id=1019): socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c0002800800074000000000050002000000000008000340000000000800064000000001080006400000000b"], 0x94}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 35.553011342s ago: executing program 0 (id=1020): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @link_local}) r1 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) epoll_create1(0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x2000c080) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f00000004c0)=[{r0, 0x30a8}, {r6, 0x1000}, {r0, 0x215e}], 0x3, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000020000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r12, &(0x7f0000000140), &(0x7f0000000100)=""/15, 0x2}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="9840517264be74129fe9e23e7f197cb6756fc62544e7f37e03b38d52c26bd3db936ca5dd306d7eda3153ad05651560ed1034bb1257d95c5ab09e04bf33ec623a38adc39c087f0c203ac217a21cd4f4213db2b631fb4090115a6e5a6ef06404", 0x5f}, {&(0x7f0000000280)="13cf", 0x2}], 0x2, &(0x7f0000000300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts={{0xb0, 0x29, 0x37, {0x67, 0x12, '\x00', [@pad1, @pad1, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x20, {0x1, 0x6, 0x10, 0x7, [0x7, 0x8, 0x3]}}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x5, 0x39, "ac706180b0bf041ab8af4f330ce214878e286a9de21c110f9b09798ba41f641c9047e2636d3b930eb160c9e016704efa475eabd5fba4c527b0"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x9, 0x800, [0x5, 0x80000000, 0x66]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x62, 0x5, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x7ff, [0x0, 0x2, 0x2, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x2e, 0x6, 0x57271686e554ced1, 0x5, 0x0, [@mcast2, @private2, @empty]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1000}}], 0x170}, 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r12, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 35.38110129s ago: executing program 0 (id=1023): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a0001007678"], 0x50}}, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x9, 0x12) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet(0x2, 0xa, 0x4a6) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) socket(0x5, 0x0, 0xfffffffe) (async) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="3aa8ee63f212e79d25c43c2141990dc80eb03223722a68abf4b89d65af27d05f3d4baf9ae3deb8f05ba9b56cf3dd4c385bc97b3b98f01c0500bab3a07ddf2ffe077758c57244078c99fc34072c81310803a0363ccc30"], 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000001ac0), 0x6) (async) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000000)) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) (async) close(r5) 31.336484212s ago: executing program 0 (id=1023): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a0001007678"], 0x50}}, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x9, 0x12) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet(0x2, 0xa, 0x4a6) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) socket(0x5, 0x0, 0xfffffffe) (async) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="3aa8ee63f212e79d25c43c2141990dc80eb03223722a68abf4b89d65af27d05f3d4baf9ae3deb8f05ba9b56cf3dd4c385bc97b3b98f01c0500bab3a07ddf2ffe077758c57244078c99fc34072c81310803a0363ccc30"], 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000001ac0), 0x6) (async) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000000)) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) (async) close(r5) 26.245465623s ago: executing program 0 (id=1023): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a0001007678"], 0x50}}, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x9, 0x12) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet(0x2, 0xa, 0x4a6) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) socket(0x5, 0x0, 0xfffffffe) (async) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="3aa8ee63f212e79d25c43c2141990dc80eb03223722a68abf4b89d65af27d05f3d4baf9ae3deb8f05ba9b56cf3dd4c385bc97b3b98f01c0500bab3a07ddf2ffe077758c57244078c99fc34072c81310803a0363ccc30"], 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000001ac0), 0x6) (async) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000000)) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) (async) close(r5) 23.394462255s ago: executing program 4 (id=51): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0xf0bd2b, 0xfffffffc, {0x5}}, 0x14}}, 0xc7cfd72761cf52a7) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000004480)=[@in6={0xa, 0x4e24, 0xf, @empty, 0x44d}, @in6={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}], 0x38) socket$qrtr(0x2a, 0x2, 0x0) 21.260499607s ago: executing program 0 (id=1023): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a0001007678"], 0x50}}, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x9, 0x12) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet(0x2, 0xa, 0x4a6) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) socket(0x5, 0x0, 0xfffffffe) (async) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="3aa8ee63f212e79d25c43c2141990dc80eb03223722a68abf4b89d65af27d05f3d4baf9ae3deb8f05ba9b56cf3dd4c385bc97b3b98f01c0500bab3a07ddf2ffe077758c57244078c99fc34072c81310803a0363ccc30"], 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000001ac0), 0x6) (async) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000000)) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) (async) close(r5) 18.863411597s ago: executing program 3 (id=1217): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1d8e0, 0x1a704}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x26}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000480)=0x8) 18.765208477s ago: executing program 1 (id=1218): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='task_newtask\x00', r2, 0x0, 0xf}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYBLOB="7f"], 0x20) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) listen(r0, 0x0) 18.717199482s ago: executing program 1 (id=1220): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) close(r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xf, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private, @in6=@dev}}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x78}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x8, 0x8000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_EVENT={0x8, 0x2c, 0x8}]}, 0x28}}, 0x4000800) 18.639912419s ago: executing program 1 (id=1221): unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x64, 0x0, 0x110, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x84080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r7 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r7, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @rand_addr=0x64010102}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, 0x236, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xfffffffffffffffe}) 18.639016027s ago: executing program 3 (id=1222): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100001000130400000000f9dbdf25ff010000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x170}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x1, 0x20, 0xd, 0x4, {{0x30, 0x4, 0x1, 0x9, 0xc0, 0x66, 0x0, 0x9, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0xb6, 0x3, 0x8, [{@empty, 0x70}, {@private=0xa010100, 0x7b4}, {@loopback, 0x4}, {@broadcast, 0x65aa}, {@empty, 0x1}]}, @timestamp_addr={0x44, 0xc, 0x78, 0x1, 0x4, [{@empty, 0xd601}]}, @timestamp_prespec={0x44, 0x44, 0x3b, 0x3, 0xa, [{@loopback, 0x7}, {@empty, 0xfffffffd}, {@remote, 0x9}, {@rand_addr=0x64010101}, {@loopback, 0x9}, {@local, 0x7fff}, {@multicast2, 0x4}, {@multicast1}]}, @rr={0x7, 0x7, 0xb8, [@broadcast]}, @ssrr={0x89, 0x13, 0xdb, [@multicast2, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @generic={0x1f9, 0x12, "aef8a77789ed42abdc3553c3967e34d6"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x20, 0x707, 0x1000, 0x9, {{0x15, 0x4, 0x1, 0x9, 0x54, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x24, 0xbe, 0x1, 0x0, [{@rand_addr=0x64010100, 0x401}, {@rand_addr=0x64010102, 0x4}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x91}]}, @timestamp={0x44, 0x14, 0xeb, 0x0, 0x1, [0x80000000, 0x7, 0x200, 0x8]}, @ssrr={0x89, 0x7, 0x96, [@empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0x81, 0x7, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x65, 0x0, 0x1, 0x2f, 0x0, @empty, @empty, {[@ssrr={0x89, 0xb, 0x55, [@multicast1, @private=0xa010100]}, @timestamp_prespec={0x44, 0x1c, 0x44, 0x3, 0x0, [{@broadcast, 0x2}, {@loopback, 0x1}, {@rand_addr=0x64010102, 0x9}]}]}}}}}) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r3, @ANYBLOB="20002abd7000ffdbdf250700000074000180140002007767320000000000000000000000000008000300020000001400020073797a5f74756e00000000000000000008000300010000000800030000000000140002006c6f000000000000000000000000000008000300010000001400020076657468305f6d61637674617000000050000180140002007665746830000000000000000000000008000300010000001400020076657468305f746f5f7465616d0000001400020076657468315f6d61637674617000000008000100", @ANYRES32=r6, @ANYBLOB="44000180140002009106000000000000000000fd0000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="14000200776c616e30000000000000000000000008000300030000000c00018008000100", @ANYRES32=r9, @ANYBLOB="180001801400020076657468305f746f5f626174616476000c00018008000100", @ANYRES32=r12, @ANYBLOB], 0x14c}, 0x1, 0x0, 0x0, 0x24000000}, 0x404c890) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100001000130400000000f9dbdf25ff010000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x170}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket(0x200000100000011, 0x3, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x1, 0x20, 0xd, 0x4, {{0x30, 0x4, 0x1, 0x9, 0xc0, 0x66, 0x0, 0x9, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0xb6, 0x3, 0x8, [{@empty, 0x70}, {@private=0xa010100, 0x7b4}, {@loopback, 0x4}, {@broadcast, 0x65aa}, {@empty, 0x1}]}, @timestamp_addr={0x44, 0xc, 0x78, 0x1, 0x4, [{@empty, 0xd601}]}, @timestamp_prespec={0x44, 0x44, 0x3b, 0x3, 0xa, [{@loopback, 0x7}, {@empty, 0xfffffffd}, {@remote, 0x9}, {@rand_addr=0x64010101}, {@loopback, 0x9}, {@local, 0x7fff}, {@multicast2, 0x4}, {@multicast1}]}, @rr={0x7, 0x7, 0xb8, [@broadcast]}, @ssrr={0x89, 0x13, 0xdb, [@multicast2, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @generic={0x1f9, 0x12, "aef8a77789ed42abdc3553c3967e34d6"}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x20, 0x707, 0x1000, 0x9, {{0x15, 0x4, 0x1, 0x9, 0x54, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x24, 0xbe, 0x1, 0x0, [{@rand_addr=0x64010100, 0x401}, {@rand_addr=0x64010102, 0x4}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x91}]}, @timestamp={0x44, 0x14, 0xeb, 0x0, 0x1, [0x80000000, 0x7, 0x200, 0x8]}, @ssrr={0x89, 0x7, 0x96, [@empty]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0x81, 0x7, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x65, 0x0, 0x1, 0x2f, 0x0, @empty, @empty, {[@ssrr={0x89, 0xb, 0x55, [@multicast1, @private=0xa010100]}, @timestamp_prespec={0x44, 0x1c, 0x44, 0x3, 0x0, [{@broadcast, 0x2}, {@loopback, 0x1}, {@rand_addr=0x64010102, 0x9}]}]}}}}}) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async) sendto$packet(r11, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r3, @ANYBLOB="20002abd7000ffdbdf250700000074000180140002007767320000000000000000000000000008000300020000001400020073797a5f74756e00000000000000000008000300010000000800030000000000140002006c6f000000000000000000000000000008000300010000001400020076657468305f6d61637674617000000050000180140002007665746830000000000000000000000008000300010000001400020076657468305f746f5f7465616d0000001400020076657468315f6d61637674617000000008000100", @ANYRES32=r6, @ANYBLOB="44000180140002009106000000000000000000fd0000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="14000200776c616e30000000000000000000000008000300030000000c00018008000100", @ANYRES32=r9, @ANYBLOB="180001801400020076657468305f746f5f626174616476000c00018008000100", @ANYRES32=r12, @ANYBLOB], 0x14c}, 0x1, 0x0, 0x0, 0x24000000}, 0x404c890) (async) 18.363046505s ago: executing program 3 (id=1224): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100)=0x5, 0x4) bind$802154_dgram(r2, &(0x7f0000000200)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x99}}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4da3ec06826f123b7fe4ba13866abca95436fb798073376eec104077b4cc20fe481c42abaf24a7173a4aae81e5727ab5ad0352d1aa38ecf7fef68b483c51152085eca41fd2a09158c5f98cb9f9fae50ea164d0c34a6d7f6f", @ANYRES16=r3, @ANYBLOB="000106000000fcdbdf2501000000060001004e220000050002000a00000008000b00", @ANYRES32=r5, @ANYBLOB="0500040002000000050002000a000000050003002c0000000400050006000a004e200000"], 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x20000015) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="f724fa39", 0x4}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000000000000a004e230000000900000000000000000000ffffac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e22fffffffcff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000001fffc02000000000000000000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22000070b90000000000000000000000000000000181000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000004ff0100000000000000000000000000010101000000000000000000000000000000000000000000000000000000000000bc00"/646], 0x290) 18.184822563s ago: executing program 3 (id=1225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r6], 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r5, r10, 0x2, 0x6, 0x4000, @void, @value}, 0x20) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000f000000050038000000000008000300", @ANYRES32=r2, @ANYBLOB="09582d7127360f081ffba442d1e679003eecd2c529da21b3f73d34f554056c11c3422899956251d283fd6c253ab9a1d13e8bf406dc07e48d4d04771c34ec991e7507c6f6490e67284ac2b4a890cf0077013d11cca84c5416908c0f1e"], 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r11 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000200)={r0}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newtfilter={0x68, 0x2c, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0x1}, {0xfff3, 0xfff3}, {0x9, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x2c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2189}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r13 = socket$kcm(0x10, 0x2, 0x0) (async) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r12, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000e40)={0x454, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x19d98d0a}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x36}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xca9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4bf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x71e}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0x238, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "0ed378a3dbe8c3abb288324964134b25f356fa5a47b4025b1b3d4050602fd1afc1864fdf942bb3e2f91ec3b7f0b11c34eac738775b509a05beb19293da3ec55aa7b71480e31fd759a0923f87ea4c0b7f2773eb6a4898679823592b349f052ce8e0eb353a0534f5d6f1a7174abda895c6c58139c3860c3860222ba33844040248080b186c6f922f34891b21bce6da670dce9ee763952a11"}, @TIPC_NLA_NODE_ID={0x6e, 0x3, "f87d30a59f6eaf14fdb4474cbe1930b4a30b8e322d6780fa2c0b47cac6f47c2040fc180e60236fa3f8a30f79267a0601ddfb1e9e2d7e76858c0757a4e263e74898458e7fce485cfa121ffe9fcba8f0f1115335cf4e608a0d3dfbbfef89cd88d9ae58daf041c777f91bee"}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2b, 0x3, "9184c404d902b8134acebae57a3877369da89b6ab99183ba6a78c13b7ab0a4ec01d978ed63ac3f"}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4ba2f41c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdc26}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x669c944}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x40488d1}, 0x800) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd6004008000002c00000000000000000000001800e0000002fe80000000000000000000001ad2f8ac"], 0x0) (async, rerun: 32) unshare(0x24020400) setsockopt$PNPIPE_ENCAP(r14, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62a4cf100009f0ba1f848360000005e140602000200000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0xffffffffffffff48}, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r12, 0x29, 0x44, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) 18.021069782s ago: executing program 3 (id=1226): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044840}, 0x24000040) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x28ce80, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close(r3) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0xfffffffffffffef6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000340)=r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) write$cgroup_devices(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1e040600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r0, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0xae, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x73f08efddadcea0f, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.869197924s ago: executing program 3 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0x0, 0x2}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001a0001000000000000000000020000ff00000000", @ANYRES32=0x0, @ANYBLOB="14000503"], 0x38}}, 0x8000) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40041) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x40}}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) unshare(0x400) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2, &(0x7f0000000f40)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}], &(0x7f0000000fc0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001080)={0x3, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd274bba, @void, @value}, 0x94) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000001c0)=[@mss={0x2, 0x1441a3ec}], 0x1) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="45efef00", @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf2564000000080001001e0000000c009900d206000056000000"], 0x28}}, 0x10) 17.821252627s ago: executing program 2 (id=1229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000100)=0xfffffffb, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60002000}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @private1, 0x8}, 0x1c) 17.546297727s ago: executing program 2 (id=1230): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'batadv_slave_1\x00'}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) (async) r0 = socket$kcm(0xa, 0x6, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000001300)={'syztnl0\x00', 0x0, 0x29, 0x18, 0x8, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x0, 0x40, 0x9, 0x400}}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000001380)={0xffffffffffffffff, 0xbda310da4ac90f63, 0x7, 0x6, @vifc_lcl_ifindex=r3, @remote}, 0x10) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'macvlan1\x00', 0x0}) (async) r7 = socket$inet6(0xa, 0x2, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000001400), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "ec5a4bf70ead5e5dc7bcc364b80b11d5d6e5ca3efba6eb9dbad6bd490972"}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6, 0x3}, {0x0, 0x2, 0x4}, 0x5, 0xcca}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x130, 0x37f, 0x148, 0x130, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r9, 0x5411, &(0x7f00000013c0)) (async) syz_emit_ethernet(0xa8, &(0x7f0000001480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @dccp={{0x1d, 0x4, 0x2, 0x7, 0x9a, 0x65, 0x0, 0xd, 0x21, 0x0, @multicast1, @rand_addr=0x64010102, {[@ssrr={0x89, 0x13, 0xde, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @private=0xa010102]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x5b, 0x1, 0x4, [{@broadcast, 0x5}, {@local, 0x9}, {@empty, 0x81}, {@local, 0xffffffff}, {@local, 0xfffffffc}, {@private=0xa010100, 0x5}, {@rand_addr=0x64010102, 0x7}, {@private=0xa010102, 0x4}]}, @ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0x5, 0x0, 0x0, 0x8, 0x0, "09dd60", 0x6, "dd18ad"}, "ac2284677e7ade5428f3b8e64d9eca671b94fc64b72b"}}}}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x10000, {0x0, 0x0, 0x0, r6, {0xc}}}, 0x24}}, 0x4045014) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x74, 0x24, 0x8, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0x7}, {0xd, 0x1}, {0xa, 0xf}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0x8, 0x0, 0x2, 0x5, 0x6, 0x2}}, {0x8, 0x2, [0x3b, 0xfff7]}}, {{0x1c, 0x1, {0x8, 0x2, 0xf3a0, 0x4, 0x1, 0x6, 0x5, 0x4}}, {0xc, 0x2, [0x40, 0x8, 0x4, 0x410]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) (async) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r11, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r12, 0x120) 17.109887507s ago: executing program 2 (id=1231): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r0, 0x8, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x38}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010001c04a4cd00000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b09001801238c09d0f49c3227f00d", 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 16.981176263s ago: executing program 2 (id=1232): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xfffffffe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x7fff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x94}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000400000d000000000000006e1c72ad4f6bc4302dc2949303b82a60b7da2e94543fac68ecd206ee15192685dca665133c95dc10cb8bac436a2ec57c650cb264bd0e6a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000000000000008000100030000000500020000000000050002"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0x2}, 0x6) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a20004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) write$bt_hci(r9, &(0x7f0000000100)={0x1, @accept_conn_req={{0x409, 0x7}, {@none, 0x7f}}}, 0xb) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r13, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r12}, 0x10, &(0x7f00000001c0)={&(0x7f0000000300)={0x1, 0x51, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{0x1, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "e4593581fb00f885"}}, 0x48}, 0x2}, 0x84) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1a000000f4000000f8ffffff8dffff7f092a0200", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r12, @ANYRES32=r7, @ANYBLOB="05000000010000000400"/28], 0x50) 16.841636525s ago: executing program 2 (id=1233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {0x20}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16.365554252s ago: executing program 1 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x0, 0x400, {}, {}, {}, 0x1, @can={{}, 0x1, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x6, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0) 16.353135607s ago: executing program 4 (id=51): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0xf0bd2b, 0xfffffffc, {0x5}}, 0x14}}, 0xc7cfd72761cf52a7) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000004480)=[@in6={0xa, 0x4e24, 0xf, @empty, 0x44d}, @in6={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}], 0x38) socket$qrtr(0x2a, 0x2, 0x0) 15.381096979s ago: executing program 1 (id=1235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x1f, 0x0, 0x8000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8000, 0x7808, 0x4, 0x5259dc71, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x8f, 0x29, 0x0, @local, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffff772341abf29a831500002b00000018000180140002351d35a068315f766972747f"], 0x2c}}, 0x4000000) (async) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r1) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) (async) r4 = socket(0x2a, 0x2, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0xffffffffffffffff) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b}, @srh={0x88}]}}}}}}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000400006600000008000300", @ANYRES32=r10, @ANYBLOB="080026008f0900000800b7"], 0x50}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3, 0x2}, {0x0, 0xf}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x4c}}, 0x24000000) (async) r11 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.378093662s ago: executing program 2 (id=1236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d016e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e8b701d2d17ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01d51e242443618c02e0a428da651366e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab7158edeeccd92e3a88dc0f432187ce92d7b17a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb373845255012e028cb2654d493afb4b35faae176f99b745eda2967199cc93685bb444f9bc50713061385537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d1ff07000000000000000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ab2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31f3f514573f1e30d1fd2d763f3ee9210b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f240080000534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74d1ffdaccf0ea5f02e0163a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01f7ada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd2190780fa39c43ea647eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0000000000000001062a35376413c29f7c6f7bde29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000fc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5018e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e2b70590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5002adef9546abb7a2d9c085b189b5ff30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd0387837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f012df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dc816126b6f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bb01b53a2d862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94986157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d7004d29ad77f54836779600bb0b247139d429df96362db3ecfbd36fa8164fabdcf2e58b720e8e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a56f3ebb16fad3e9269495230cd88b0ea2e3affa196a2f0adf733bc6afd37a659ecc933d636c1b27d3a16c5ea25301f9b5789e4aa8e7228e3002f146aa5e575bb74b1ebb82147edf8161d362704377058e887c608be8719ea1b6c490f79e0832e2ddd7e217c7adddd4731e032d7eb35bdc38160c676d840e2e8be9033a686cf7061f5f55e2851736aa8c2f3bad8ac05c048e20d8c03b68008a70b8f80c93ebd2ababb5c65fe9abc4642d7b58d8c93efd7b6b39c68a16d75a7852dfc37a6a50cb28a9b6f685a465d08fc603d81d8ddd5296fae97be1401a8be7748a71fcdc85ba2049e96c4e6dce59b88cd5472726bc237fbcf3ffcbf32e2aac9b2f9d6013b59780ded723b08c767fa091e2fa4d51863500fcd5041bcc98a685504835743194113ea0b97b4f9ddc395b9ac4defefadd37a8871fd91f31a56eb96ecf90000000000000000000000000000000000000000000c447ea475c236c3b7f24079fe375f3f861fc54d9d8a04a6cb8c0dbf9e9cc53a84a5795ae5ebcbd825e3572df16fbdcd395e995fa4fcbbf31583d9e1d3ff537f401a3139200a8bd2122157887199cd54075a4d5b29935dda5c6aa0f3ac6895eb73c7abbd4603abdaa8629dedb2cab0fa80f9514ad310491a9a300015c18cdfd9342cff50d849d7516134d45d1a8cf157abe0c79de543993cf689f8a7113508fbf8a610417045e6c38a5d4ff4656dbd9656ad6ce625e1674ab57944ebb834743a248a2be304ba1e037cb63a169d340be8befc1b238aa26e24"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)="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", 0x15a}], 0x1}}], 0x1, 0x40004) r3 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', 0x0}) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000004600)={0x29, 0x206, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x9, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0xfffff4db}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @ra={0x5, 0x2, 0xe0}, @jumbo={0xc2, 0x4, 0x640}, @calipso={0x7, 0x10, {0x2, 0x2, 0xb6, 0x8, [0x5]}}]}, 0x1038) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r1, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0], 0x0, 0x83, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, 0x20000}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x7fe00000000000}}]}]}, @IFLA_MTU={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x20000080) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000c04fcff", 0x58}], 0x1) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r2, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x39c46b3a281cdb71, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0xa}, {0xfffd, 0xe}, {0x5, 0xb}}}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x8, @empty, 0x18}}, 0x6}, 0x90) 15.258079793s ago: executing program 1 (id=1237): r0 = socket(0x2a, 0x1, 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711077000000000006000000000000009500000000ffff00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000010000000000000000000000631104000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x6a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0xc}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8880) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, 'p'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='pimreg0\x00', 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000003c0), &(0x7f0000000480)=0xe) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001d0001002cbd7000ffdbdf250a000000", @ANYRES32, @ANYBLOB="04009005140001"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4008894) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x7, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x353}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044004}, 0x80) 28.557342ms ago: executing program 32 (id=1237): r0 = socket(0x2a, 0x1, 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711077000000000006000000000000009500000000ffff00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000010000000000000000000000631104000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x6a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0xc}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8880) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, 'p'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='pimreg0\x00', 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000003c0), &(0x7f0000000480)=0xe) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001d0001002cbd7000ffdbdf250a000000", @ANYRES32, @ANYBLOB="04009005140001"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4008894) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x7, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x353}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044004}, 0x80) 0s ago: executing program 33 (id=1236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d016e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e8b701d2d17ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01d51e242443618c02e0a428da651366e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab7158edeeccd92e3a88dc0f432187ce92d7b17a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb373845255012e028cb2654d493afb4b35faae176f99b745eda2967199cc93685bb444f9bc50713061385537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d1ff07000000000000000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ab2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31f3f514573f1e30d1fd2d763f3ee9210b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f240080000534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74d1ffdaccf0ea5f02e0163a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01f7ada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd2190780fa39c43ea647eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0000000000000001062a35376413c29f7c6f7bde29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000fc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5018e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e2b70590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5002adef9546abb7a2d9c085b189b5ff30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd0387837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f012df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dc816126b6f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bb01b53a2d862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94986157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d7004d29ad77f54836779600bb0b247139d429df96362db3ecfbd36fa8164fabdcf2e58b720e8e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a56f3ebb16fad3e9269495230cd88b0ea2e3affa196a2f0adf733bc6afd37a659ecc933d636c1b27d3a16c5ea25301f9b5789e4aa8e7228e3002f146aa5e575bb74b1ebb82147edf8161d362704377058e887c608be8719ea1b6c490f79e0832e2ddd7e217c7adddd4731e032d7eb35bdc38160c676d840e2e8be9033a686cf7061f5f55e2851736aa8c2f3bad8ac05c048e20d8c03b68008a70b8f80c93ebd2ababb5c65fe9abc4642d7b58d8c93efd7b6b39c68a16d75a7852dfc37a6a50cb28a9b6f685a465d08fc603d81d8ddd5296fae97be1401a8be7748a71fcdc85ba2049e96c4e6dce59b88cd5472726bc237fbcf3ffcbf32e2aac9b2f9d6013b59780ded723b08c767fa091e2fa4d51863500fcd5041bcc98a685504835743194113ea0b97b4f9ddc395b9ac4defefadd37a8871fd91f31a56eb96ecf90000000000000000000000000000000000000000000c447ea475c236c3b7f24079fe375f3f861fc54d9d8a04a6cb8c0dbf9e9cc53a84a5795ae5ebcbd825e3572df16fbdcd395e995fa4fcbbf31583d9e1d3ff537f401a3139200a8bd2122157887199cd54075a4d5b29935dda5c6aa0f3ac6895eb73c7abbd4603abdaa8629dedb2cab0fa80f9514ad310491a9a300015c18cdfd9342cff50d849d7516134d45d1a8cf157abe0c79de543993cf689f8a7113508fbf8a610417045e6c38a5d4ff4656dbd9656ad6ce625e1674ab57944ebb834743a248a2be304ba1e037cb63a169d340be8befc1b238aa26e24"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)="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", 0x15a}], 0x1}}], 0x1, 0x40004) r3 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', 0x0}) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000004600)={0x29, 0x206, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x9, 0x1000, "58e732d4f04bfdb0093bb4befb024f3e970f4b79f60b5d285c1e8b915722488dae0fd1beff1654a6075204da7e6a92cb8232bd6ad890c6538c5df6adff8be57ef6df21ca2bd55c6f01200a5a9489f7e80e5b9388b547eb340c7a16f939629aef2afae114913c0ab3d2e323e503c1d238e838baca063a372ea3d858948899f3387e8a2715e69224765e9c62fe6dfe2fb05129a40aea8d033d774d335188cb59fd3975227744255fa4e69353dcb819ef2374580893335a264f53c7ef0b24373f46f5d7b590f5d4ec5cd125a4cdac7c9c7281d094b5ead8033eac39fe3b00dbfce4243e5a5fe69a6cf652ca35ba901aa2222d28b54e9c3d5c264191661a0f4baa6b1433e49131098b81b6571769aeb59ce8f051b2ab39bf0e17bd69eec6061226cb1de02e8485026ac9e68faaf836eaa2d24d641ecc775f9a8315e3bc09b26e2b04a32981c743b682bc716949445fc45b7a01f7c7a94bed756e9a03c774cd9b42b7d1980d18809d9dbf45e059c1dbeef37b0510a9d689c0d92bcf44bd9740ba32dd638ad4eec3448638cd65bd6950343c0fe3e5d3a702e0e71246e4946e6f137e198ffb51412e255843b50f6af7383584b8d26b6bc7e4157d402ae813e6845364eb7405a46a470c41be3c9c90007e7bd98b6db225b8c785705dd9690a2fc73535998fa8f439eb834f7e0f0ee0352552a5a3373099eae29f849d89fede5c7565218deb1b1dd363308319bfba1e087d50bc02b3f8efd2c5cc3f446774f84abdfea3540e4d4e7daf1c97d12add73b7d188986f1e01f31027cb22e66809ed997229d7256222555e268e469b51fef096df58bc24da97262626bd71ee3d497fa6f07345b46134cbb8f4489d7fa94fc2c2771dd9d9c61c110423ddc6faded172b0e3237ba28bd7cea8eddd66e17ed41f3c02d286b50f21f5ad7f8a981295c312bdf436b332ef04affe7c5f4fe833503e29f866fb8c75238307881a5964bdcc09a359d224afb3b47ffc03efc94f234dcd16a7568b4c242ed0aba57e3be4969531199a71b3571695c80b4becfccefa3b67782df6e586c233b3dfc6eec0c7cc435f69017f50de1859a7dd1041446a30dddb9775658896e5f4ae502d8980d6e0afc5423fbc97b1da6988e5a6b128116a0b42a4c65a702524a3023955b25a440b28187392cd6cbdae7961d9aa94c174b19dc37eb3154b044e1870f19c83b4882db81900e18ac3d157be29582fb23f274555b32d5b8d5b360514e0057703605be99815c8d59de9f7b9f5a097078ea7ad8a89caa99b86f6c906aaa3460887617cc53addd2aa2dd629de91e938640147097cde07728150b0b52ab6aefaebf2cdeaecfac50cc53a1ecc24823b04a426da9f45168de4924d4e29bf5c8a09bddd1a9994e1e50dd1da33efd7f91d93f02bb6084954fe814dd681963ce93dcbec33ff42b28faad78bab0f75821474e1051e3276d7363a979e8537234a84208cf38e816e5343c45fead950fc9c8a5ef65d6f47bc7371b043bd18470464ff21506a160f027a753a09dafcf300cd19dcedbca4316952eb5d3dc63871a3ee476443792f314b738ff939e3d5a3371f6bebd322209c74434bc097519e8d77c94790ee246ff6a69c3e9f702bffe16a83539190210ed48a385c4fe7506e0d07f8ad05c86229740fb678223dd272ab59eb5b09cad44e23b27bb5d1bd2a6752b0c104b70ff5d5ef8553fb84f8e5c70412eaf56ea3438971773aaebd3d299f14e4e936875fe16b21b871b8c771080eefda008d0577e723bf996db31de7df578f4310cca69c1d883e4ccc5c11f3b80109719bebe7ba2a3b1c3393f1b8a23e86388598061bfdfc5f82ef42e0da946ac235ead7c981237bbcdea5bc205a6bb57626752b6c3504749953de52a58a4ab571705d9a2c0b6d3d66e4093ee2ed68ffc083b63380f9a2dc7d6cfdadb2555fbc16178afd95247484bd9961294e276e9e6c6b892bcebc195da2f67c24088e0053e84f67e0512c379f4d8061b1dee266cb9c24060d868ce7437c52e0b350cfe2b5bd2bbb815987b05c249d25ac7af6d5531e76f9725b4da54d89d7506a94b6b248ed38a96fea5de7c235fd35da0628e08541fd0926cafbe5a6a3e55b0f507693da1396cdda8acd8eed8818ac413b6162f7fed7f584a4d40dff489f84d34b85c815b6816ed5f9040a9e6592ba2bd4ce934368b6332749e6d3acf826082e59fd7edc5c535d08d30ac024d6fec806cfc56ce1b9ecf44761d33e0196557287a12d2b45e965fd6e49ff252f2ba29d335027d8213708ac46d8f8f7a13ca99799e8b979140f3505caa862fec00ef34333e749f3e5f43a610e1e221703062beca5edad1248ef6907148ac41a88a45f6aeed54c4c199bedb46602a2974dae4ffad6ece7bd63bf9cf11fe974498b74e6a5cc108e951a26611903e59c00df8e7010b5a5b4daaaf65696655d2f6fc5e9fe1a9c2b2b0751d56402f1ffd98156b9db99737a7754df66ab815db85b1df47b2e1eb75f37c701e81a8f7bdf5230b76197cf24637933d4a358c2518d6ea85c22fb1a39a408b02f676742738c09fae08deae5b5b0cdb45b487aa02996ec295d1e6f60b7eb96271df1413c948f33eb2c468e6f80ce41cd7ad093ed824dd9bb61c02fc326a5880d82d52d76c914e61dae6d776ef94544dfd92aa8a4982e922233bd6f3c88528bf7ff4c94ce0be6a65e5d43fe35240d7cb4b61adf112b8f429dd4e1abe80dff5963886f649573498e39b3dc83b210782002be89f987e1716fdffe32b88edcc455e77de675d072188b50c6f871935721704bac31b15eaf285a21be79f09a5edc1452471680826522778c11bc6622232b2b7fefa13c45541e3678ced71a8d7856e042f0036cb807ea9f9e99475be16e8741ed842da39be90290af55548744491b39cc514b9dca1e9e33bb32347365aff057509d6811d62dd074cb2fddc3c4ebdd9052f65852a06b247c93cd42797fb02e7e713ab4be1bc6621e207444f2cfabe13039cc52c61891565bd9030144030eac6d9dc40343026fce1f84824028a243c8d88847905dd0ed7e013f1b59c69d9586d0685452aa9da215a7cb345c0b0505e97a5d6da20e2773fece43342a5433893a2b9f4dee6dd3de736fbe645579b60337514139c6364060d968111ba7c95277963d69f7b3ec4078d4174c5fb93ca57ba114553fe693bf7dd13f5d27e96695880cee5d42b01d940c2a3cff31712654f86f77451bdd55a347f6b584271ed1f17a601343018df58ca27b332b1380ed27f2fd1c5c14e647a78185036f3dc5653ceafdf6e3c3a8e202284e0df8a5304e1091dbf8a826026b02d60651cb840a76363e62316fb9a1d9af59c741710efc6031dee8f5805955433afa1892d5820c131733241505dc241517a600ffb7fcfe1c7ea8165c9d052b46b68f79c8ff116c26dd52107d33d0c2318767daa85f5e8bba7d892baded59958e3e2cd501d311c3cc8cd346b6f52e018f90744db9300364ed7bd81248ae747a6437e7c4911e2bdcc473fb47172b6be26acf6ef2fc9bcf8be352a4028e3cb58c81f8271f33748f5eee60b3f755ca6f1ef7be4fbf6f133ed3d27395e17077cda74591de9b63f0dcb42336cd187135cf14653714b7d5b3b6e0acaeb5cf47912a775d67a52eccf923851444486248c98ec545f6cfdba7c1e82d5fc418fe503df9432a47259fdb1fb40b53723bbc5be8496347bf200d7f20a29f98ef8d1fa52272265ae199f865dbb86addcfb820d57aaefcf12c3d8bc7e82a09505d326cf0675179ef33b6d9bc31ec7064cb6e0067fa05160273860444f8dcd53112bbe363738c22629dabe36d76a2d70a6bab089ce8a218b055a04af576170492776d047f8347f41921e6cf26bd314868fb2845b00cb1b77cd4050749135f547e073bd3cf5fbbc9b3584d703117f5952979d8746be28f5f29240dceea67d19b63f34a2d55c36d7e466bbc1d02a43d93075baec080bd653a7a24044e59c846556a266e1e59abfc0554c5107dc8f15a80322444f2383e4516b7d63cbc7a2bb2602a8fe65db887af2184c2c80e38cfab4ec3e7d0075c93ed17d83672629f0d91db604be1b20276c59f068fb5d591a73f7490124fa162a7af68b2fd5ccd24795ba692d0ccd57ce960f5a472b241fa05ad90453a5b2950b40f337c1782c4d161623b80f5a767a98dfd7118d87ad8cfc903530c6f74ed521c1565d2bc64ed557c720309e953a189f63ee553ab6d332078822b1bc69c83095ca85c0cc022e58722bc4ec6101284e3b537f86e0c4dce065b808531d118b907a021ed501b32f6cf8fa2af13b3a58662c4771e9e55f90fa1fb2a9d27373a002383c4fc0ebab8764e06092b0edf6df66ef537ca7162e9966c85a40ac8666d8549c58e67d4c3b70d19977c3ed2d726d22feecac70edef56f310989a1c0dd873b2728a6a7dfd481382277a37dc158c9407e293a33a9b7d2d6527bc1b4122d6353e8d18a2ad61b468b894888ec2245e196338d1e0dcf582b29c648fe6feadb33159e0aaea6eb734d5a02e3320d545e39ac664af7397ba1b75de4866db5adbbb2024ff3f0453039e5f9f872699b42998f1a0fc54370476cb4cac80de74fd2c109291c37f22f129036351c4b81d3894e338dea5ad69790c299de177493201a3510797fe9cb3a6cf41092c6e330b197edb47b2d94c3848afcffa06c7167ad1bbfbb426e04dd27733fa0ef85b9ffbd15953bba846a78de1ef58adf337f4e712636251d0220acb49f776932a9cbd92312043a3de4048f42bf2233e9250f2da6b8aa4b92b4be4ef3eb1cade0d702a4ed950a0bddff95a6ec129cf284dc600aaad96f1949fee463b558ae052b9e99d12cdb804bbdffe5d7dfefe7990e7ce4c9ba10673819d578a4d6e30c14a55579a828ffd038eb9c4e2b3368b4828629ae32f5f52565953f5462d070ee03566b7561cd018e6eb4781592f6d4e60e77a138e6faad913bf2c1bf2df66da439d84324b479209f9786137d2c96a2c5d1313ac9dbc60de5778441fa8e52ae13876b4079af1316c19cb9077d5ae312e6cce05cc9373c210cda079842fa9540eee9541dde7471976f604438adea30d3e073c16708e51b84b11844172cc7849e40da1202f0ce158239bb08d33a191ac0ed45708d2a500af52abe41de05f1e05df2180379c7bf40595d31ad562cdcec49e42c4edc029fcc24d00b2e61c491b4a7cb12408be58c19894766873e36afd517414472b043a39a92490594828d4caca2a7f5b2a6f9239b9137396708a040b3b5d97c46afdf1b6906860c601343f50b07eaeca4fdcc2cf44ebe66e4bf7a870b8742c456d22d2a73fa65e25786033f69121a7298c02924093f8f286e7fdfccfd4e98cdff2041949f5453b43590c223180af01fd4146cd730254791ddce393309f465716bf1ad2f5ccec9c4ecacf7c28b1cf8e0c552c6657ad5b026eaccdbb34101f5b9b262042e4733a0987d7c2bddfdc009168f0de8db6e69b73f039fedc35847381ff2869511e84a92b33bf19e74850fd17f0c53bddbe8f8aaa6ebd6a1897cdc5c938575e175da00149fa0b23454502cead3b207dcc0b4615f8a9099d9a2b0a931aa46c0da56b34faf6568a8ebea4e4c8174ed3d8967b69fcd87ea9911cf0bcfd6911ac2d39fdb46ddc9ee2556942bd062b9534854ccb07412630bf5b92f08a7fa6fc80507760564670864c9222fe0b98d6e63efa45905f44522e13c5ee32f51ab29ee7c89e4347077a9fee723b5b00a633e2279c96a93708d3e5184bcf68ccd8c7649834662cc558bdcd1313109a4f7f8"}, @jumbo={0xc2, 0x4, 0xfffff4db}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @ra={0x5, 0x2, 0xe0}, @jumbo={0xc2, 0x4, 0x640}, @calipso={0x7, 0x10, {0x2, 0x2, 0xb6, 0x8, [0x5]}}]}, 0x1038) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r1, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0], 0x0, 0x83, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, 0x20000}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x7fe00000000000}}]}]}, @IFLA_MTU={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x20000080) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000c04fcff", 0x58}], 0x1) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r2, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x39c46b3a281cdb71, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0xa}, {0xfffd, 0xe}, {0x5, 0xb}}}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x8, @empty, 0x18}}, 0x6}, 0x90) kernel console output (not intermixed with test programs): `syz.0.372'. [ 123.822581][ T7672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.370'. [ 123.861170][ T7676] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 123.878527][ T7672] netlink: 116 bytes leftover after parsing attributes in process `syz.2.370'. [ 124.074289][ T7695] netlink: 120 bytes leftover after parsing attributes in process `syz.3.376'. [ 124.215124][ T7423] veth0_vlan: entered promiscuous mode [ 124.261663][ T7423] veth1_vlan: entered promiscuous mode [ 124.304762][ T7423] veth0_macvtap: entered promiscuous mode [ 124.331572][ T7423] veth1_macvtap: entered promiscuous mode [ 124.373477][ T7717] ip6tnl1: entered allmulticast mode [ 124.385320][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.441406][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.464275][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.481814][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.494380][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.513410][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.542636][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.587328][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.620634][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.645831][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.678241][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.719844][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.740722][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.797269][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.833118][ T7423] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.869896][ T7423] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.880133][ T7423] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.891211][ T7423] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.025358][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.053565][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.081131][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.089882][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.796891][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.856791][ T7804] xt_CT: No such helper "snmp" [ 126.031138][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.180687][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.335582][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.448367][ T11] bridge_slave_1: left allmulticast mode [ 126.456579][ T11] bridge_slave_1: left promiscuous mode [ 126.464622][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.474124][ T11] bridge_slave_0: left allmulticast mode [ 126.481873][ T11] bridge_slave_0: left promiscuous mode [ 126.487629][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.590805][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.602335][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.613208][ T11] bond0 (unregistering): Released all slaves [ 126.979209][ T11] hsr_slave_0: left promiscuous mode [ 127.003909][ T11] hsr_slave_1: left promiscuous mode [ 127.019860][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.027381][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.071517][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.079075][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.155692][ T11] veth1_macvtap: left promiscuous mode [ 127.174603][ T11] veth0_macvtap: left promiscuous mode [ 127.190929][ T11] veth1_vlan: left promiscuous mode [ 127.196303][ T11] veth0_vlan: left promiscuous mode [ 127.244094][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.253253][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.261551][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.270222][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.277864][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.289391][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.469096][ T7847] __nla_validate_parse: 11 callbacks suppressed [ 127.469117][ T7847] netlink: 428 bytes leftover after parsing attributes in process `syz.3.410'. [ 127.565941][ T11] team0 (unregistering): Port device team_slave_1 removed [ 127.594938][ T11] team0 (unregistering): Port device team_slave_0 removed [ 127.804393][ T7864] sctp: [Deprecated]: syz.1.413 (pid 7864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.804393][ T7864] Use struct sctp_sack_info instead [ 127.820916][ T7840] lo speed is unknown, defaulting to 1000 [ 127.841421][ T7865] netlink: 'syz.2.412': attribute type 5 has an invalid length. [ 127.873903][ T7865] : entered promiscuous mode [ 127.945766][ T7870] delete_channel: no stack [ 128.059615][ T7876] lo speed is unknown, defaulting to 1000 [ 128.087840][ T7877] lo speed is unknown, defaulting to 1000 [ 128.156492][ T7840] chnl_net:caif_netlink_parms(): no params data found [ 128.288724][ T7840] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.312576][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.320384][ T7840] bridge_slave_0: entered allmulticast mode [ 128.328111][ T7840] bridge_slave_0: entered promiscuous mode [ 128.353571][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.369521][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.392091][ T7840] bridge_slave_1: entered allmulticast mode [ 128.392921][ T7899] netlink: 88 bytes leftover after parsing attributes in process `syz.3.424'. [ 128.400944][ T7840] bridge_slave_1: entered promiscuous mode [ 128.408031][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 128.430765][ T7899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 128.439910][ T7899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 128.452940][ T7840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.466760][ T7840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.490040][ T7840] team0: Port device team_slave_0 added [ 128.497350][ T7840] team0: Port device team_slave_1 added [ 128.517758][ T7840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.524832][ T7840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.552152][ T7840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.564133][ T7840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.571517][ T7840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.597783][ T7840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.628080][ T7901] netlink: 48 bytes leftover after parsing attributes in process `syz.0.425'. [ 128.675232][ T7840] hsr_slave_0: entered promiscuous mode [ 128.690994][ T7840] hsr_slave_1: entered promiscuous mode [ 129.078078][ T7840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.089019][ T7840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.100291][ T7840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.134807][ T7840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.264778][ T7943] pimreg: entered allmulticast mode [ 129.379491][ T5843] Bluetooth: hci4: command tx timeout [ 129.429005][ T7840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.456794][ T7840] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.474186][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.481355][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.501652][ T2936] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.508949][ T2936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.703185][ T7972] netlink: 32 bytes leftover after parsing attributes in process `syz.2.447'. [ 129.884970][ T7840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.224967][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'. [ 130.280007][ T7840] veth0_vlan: entered promiscuous mode [ 130.306013][ T7840] veth1_vlan: entered promiscuous mode [ 130.319101][ T8010] sctp: [Deprecated]: syz.2.455 (pid 8010) Use of int in maxseg socket option. [ 130.319101][ T8010] Use struct sctp_assoc_value instead [ 130.339708][ T8005] lo speed is unknown, defaulting to 1000 [ 130.367268][ T8010] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 130.413959][ T7840] veth0_macvtap: entered promiscuous mode [ 130.434885][ T7840] veth1_macvtap: entered promiscuous mode [ 130.521176][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.572838][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.590682][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.603119][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.614726][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.625637][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.644458][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.671628][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.685383][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.696046][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.713405][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.723615][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.754167][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.766336][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.847669][ T7840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.876545][ T7840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.888264][ T7840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.897709][ T7840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.004897][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.016790][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.027420][ T8047] netlink: 44 bytes leftover after parsing attributes in process `syz.1.463'. [ 131.081555][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.092022][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.129998][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 131.287142][ T29] audit: type=1800 audit(1737959566.097:2): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.467" name=646570746820300A70726F636573736564203020696E736E7320286C696D6974203130303030303029206D61785F7374617465735F7065725F696E736E203020746F74616C5F7374617465732030207065616B5F737461 dev="tmpfs" ino=568 res=0 errno=0 [ 131.688013][ T8082] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 131.700010][ T8081] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 131.743780][ T8081] bond2: entered promiscuous mode [ 131.749175][ T8081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.886093][ T8092] netlink: 'syz.1.475': attribute type 32 has an invalid length. [ 131.900670][ T8090] netlink: 'syz.0.474': attribute type 4 has an invalid length. [ 132.043761][ T8101] ebt_among: dst integrity fail: 200 [ 132.082207][ T8103] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 132.125875][ T8105] netlink: 'syz.1.480': attribute type 9 has an invalid length. [ 132.140278][ T8105] vlan1: entered allmulticast mode [ 132.145551][ T8105] macvlan1: entered allmulticast mode [ 132.151318][ T8105] veth1_vlan: entered allmulticast mode [ 132.171422][ T82] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.883118][ T82] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.978092][ T8119] netlink: 'syz.2.484': attribute type 10 has an invalid length. [ 132.996744][ T8119] vlan0: entered allmulticast mode [ 133.025424][ T8119] veth0_vlan: entered allmulticast mode [ 133.041360][ T8119] team0: Port device vlan0 added [ 133.053531][ T8120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.055070][ T8125] __nla_validate_parse: 6 callbacks suppressed [ 133.055091][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.484'. [ 133.094569][ T8128] x_tables: duplicate underflow at hook 1 [ 133.116602][ T8128] x_tables: duplicate underflow at hook 1 [ 133.122737][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 133.319054][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.331404][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.346460][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.362598][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.371150][ T82] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.381944][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.399405][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.463739][ T8139] lo speed is unknown, defaulting to 1000 [ 133.490922][ T82] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.705713][ T8162] netlink: 'syz.3.495': attribute type 10 has an invalid length. [ 133.791418][ T8162] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.823955][ T8162] bond0: (slave team0): Enslaving as an active interface with an up link [ 133.834189][ T8156] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:9847:97ff:feab:afa4 error=-28 [ 133.924753][ T82] bridge_slave_1: left allmulticast mode [ 133.932438][ T82] bridge_slave_1: left promiscuous mode [ 133.938375][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.953467][ T82] bridge_slave_0: left allmulticast mode [ 133.964314][ T82] bridge_slave_0: left promiscuous mode [ 133.977123][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.039053][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.498'. [ 134.162656][ T8176] dccp_v4_rcv: dropped packet with invalid checksum [ 134.163755][ T8156] infiniband syz1: set active [ 134.175084][ T8156] infiniband syz1: added team_slave_0 [ 134.188588][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.206995][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.220368][ T8156] RDS/IB: syz1: added [ 134.224553][ T8156] smc: adding ib device syz1 with port count 1 [ 134.233814][ T8156] smc: ib device syz1 port 1 has pnetid [ 134.241806][ T82] bond0 (unregistering): Released all slaves [ 134.256432][ T8166] lo speed is unknown, defaulting to 1000 [ 134.270627][ T8173] lo speed is unknown, defaulting to 1000 [ 134.270793][ T8180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.500'. [ 134.279432][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 134.380413][ T46] IPVS: starting estimator thread 0... [ 134.481407][ T8187] IPVS: using max 36 ests per chain, 86400 per kthread [ 134.534234][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.542805][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.550149][ T8139] bridge_slave_0: entered allmulticast mode [ 134.557000][ T8139] bridge_slave_0: entered promiscuous mode [ 134.598258][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.616263][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.629735][ T8139] bridge_slave_1: entered allmulticast mode [ 134.637411][ T8139] bridge_slave_1: entered promiscuous mode [ 134.682242][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.694940][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.707576][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 134.765720][ T8139] team0: Port device team_slave_0 added [ 134.775128][ T8139] team0: Port device team_slave_1 added [ 134.832416][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.843379][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.875346][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.887264][ T8203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.505'. [ 134.914583][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.921837][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.959187][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.087264][ T8208] ax25_connect(): syz.1.506 uses autobind, please contact jreuter@yaina.de [ 135.145823][ T8139] hsr_slave_0: entered promiscuous mode [ 135.170335][ T8139] hsr_slave_1: entered promiscuous mode [ 135.176560][ T8139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.199391][ T8139] Cannot create hsr debugfs directory [ 135.459433][ T54] Bluetooth: hci4: command tx timeout [ 135.708893][ T8231] siw: device registration error -23 [ 135.926233][ T8139] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.978211][ T8139] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.979875][ T8246] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.018680][ T82] hsr_slave_0: left promiscuous mode [ 136.034632][ T82] hsr_slave_1: left promiscuous mode [ 136.046355][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.054458][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.062670][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.072000][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.083526][ T82] veth1_macvtap: left promiscuous mode [ 136.089133][ T82] veth0_macvtap: left promiscuous mode [ 136.095049][ T82] veth1_vlan: left promiscuous mode [ 136.101087][ T82] veth0_vlan: left promiscuous mode [ 136.152006][ T8139] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.223956][ T82] team0 (unregistering): Port device team_slave_1 removed [ 136.236865][ T82] team0 (unregistering): Port device team_slave_0 removed [ 136.297443][ T8139] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.383828][ T8139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.398611][ T8139] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.420385][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.427738][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.460414][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.467604][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.532209][ T8251] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 136.544413][ T8139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.610015][ T8251] netlink: 'syz.2.518': attribute type 10 has an invalid length. [ 136.617906][ T8251] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.518'. [ 136.640863][ T8253] xt_hashlimit: size too large, truncated to 1048576 [ 136.642228][ T8251] openvswitch: netlink: Flow key attr not present in new flow. [ 136.803519][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.948057][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 136.960086][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 136.990090][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 137.041929][ T8279] nbd: must specify a device to reconfigure [ 137.375647][ T8139] veth0_vlan: entered promiscuous mode [ 137.406266][ T8306] bond0: entered promiscuous mode [ 137.413837][ T8306] bond_slave_0: entered promiscuous mode [ 137.422267][ T8310] IPv6: addrconf: prefix option has invalid lifetime [ 137.431773][ T8306] bond_slave_1: entered promiscuous mode [ 137.431788][ T8309] IPv6: addrconf: prefix option has invalid lifetime [ 137.445021][ T8309] openvswitch: netlink: Duplicate key (type 32). [ 137.453764][ T8310] openvswitch: netlink: Duplicate key (type 32). [ 137.459516][ T8312] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 137.464266][ T8306] bond0: left promiscuous mode [ 137.475137][ T8306] bond_slave_0: left promiscuous mode [ 137.481032][ T8306] bond_slave_1: left promiscuous mode [ 137.539629][ T54] Bluetooth: hci4: command tx timeout [ 137.802059][ T8293] lo speed is unknown, defaulting to 1000 [ 137.805926][ T8139] veth1_vlan: entered promiscuous mode [ 137.871672][ T8139] veth0_macvtap: entered promiscuous mode [ 137.898889][ T8139] veth1_macvtap: entered promiscuous mode [ 137.938389][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.959260][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.971325][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.990932][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.001508][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.014913][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.046261][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.103563][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.118332][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.128733][ T8332] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 138.129420][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.149535][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.161909][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.173396][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.186215][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.208361][ T8332] bond2: entered promiscuous mode [ 138.214691][ T8332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.226611][ T8139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.237728][ T8139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.251108][ T8139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.260969][ T8139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.316499][ T8339] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 138.337970][ T8339] __nla_validate_parse: 2 callbacks suppressed [ 138.337989][ T8339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.541'. [ 138.349452][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.363935][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.394471][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 138.408575][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.417290][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.513335][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 138.523796][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 138.582077][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.588521][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.721991][ T8348] team0 (unregistering): Port device C removed [ 138.746478][ T8348] team0 (unregistering): Port device team_slave_1 removed [ 138.776822][ T8355] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 138.787484][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 138.895365][ T8357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.546'. [ 139.046139][ T8359] netlink: 104 bytes leftover after parsing attributes in process `syz.0.547'. [ 139.132729][ T8365] lo speed is unknown, defaulting to 1000 [ 139.522330][ T8376] netlink: 'syz.1.549': attribute type 4 has an invalid length. [ 139.539082][ T910] lo speed is unknown, defaulting to 1000 [ 139.619654][ T5843] Bluetooth: hci4: command tx timeout [ 139.685525][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.550'. [ 139.873041][ T8392] openvswitch: netlink: Missing valid actions attribute. [ 139.899177][ T8392] openvswitch: netlink: Actions may not be safe on all matching packets [ 139.974390][ T8402] netlink: 'syz.1.560': attribute type 2 has an invalid length. [ 139.975026][ T8404] netlink: 'syz.1.560': attribute type 2 has an invalid length. [ 140.040134][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.047349][ T8408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.838748][ T8441] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 140.856349][ T8441] bond3: entered promiscuous mode [ 140.861824][ T8441] bond3: entered allmulticast mode [ 140.911976][ T8441] batadv1: entered allmulticast mode [ 140.918322][ T8441] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 140.931683][ T8441] bond3: (slave batadv1): making interface the new active one [ 140.941824][ T8441] batadv1: entered promiscuous mode [ 140.948585][ T8441] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 141.102364][ T8454] tipc: Can't bind to reserved service type 0 [ 141.168532][ T8463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.578'. [ 141.205886][ T8465] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 141.232586][ T8470] tipc: Started in network mode [ 141.247376][ T8470] tipc: Node identity 9a37db2f0a9b, cluster identity 4711 [ 141.256366][ T8470] tipc: Enabled bearer , priority 0 [ 141.286329][ T8470] tipc: Disabling bearer [ 141.558843][ T8498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.603356][ T8509] @ÿ: renamed from bond_slave_0 (while UP) [ 141.681282][ T8519] netlink: 'syz.3.587': attribute type 29 has an invalid length. [ 141.693837][ T8519] netlink: 'syz.3.587': attribute type 29 has an invalid length. [ 141.877075][ T8538] dccp_invalid_packet: pskb_may_pull failed [ 141.934416][ T8532] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.979744][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 142.012400][ T8547] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 142.102573][ T8550] delete_channel: no stack [ 142.462889][ T8590] lo speed is unknown, defaulting to 1000 [ 142.594364][ T8599] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 142.642192][ T8602] tipc: Enabling of bearer rejected, failed to enable media [ 142.650629][ T8604] FAULT_INJECTION: forcing a failure. [ 142.650629][ T8604] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.650675][ T8604] CPU: 1 UID: 0 PID: 8604 Comm: syz.1.611 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 142.650697][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 142.650710][ T8604] Call Trace: [ 142.650726][ T8604] [ 142.650734][ T8604] dump_stack_lvl+0x241/0x360 [ 142.650782][ T8604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.650814][ T8604] ? __pfx__printk+0x10/0x10 [ 142.650845][ T8604] ? __pfx_lock_release+0x10/0x10 [ 142.650874][ T8604] ? sb_end_write+0xe9/0x1c0 [ 142.650907][ T8604] should_fail_ex+0x3b0/0x4e0 [ 142.650931][ T8604] _copy_from_user+0x2d/0xb0 [ 142.650962][ T8604] __sys_bpf+0x1a4/0x810 [ 142.650986][ T8604] ? __pfx___sys_bpf+0x10/0x10 [ 142.651016][ T8604] ? ksys_write+0x251/0x2b0 [ 142.651037][ T8604] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.651065][ T8604] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.651093][ T8604] ? rcu_is_watching+0x15/0xb0 [ 142.651126][ T8604] __x64_sys_bpf+0x7c/0x90 [ 142.651147][ T8604] do_syscall_64+0xf3/0x230 [ 142.651167][ T8604] ? clear_bhb_loop+0x35/0x90 [ 142.651193][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.651215][ T8604] RIP: 0033:0x7f8ded38cd29 [ 142.651238][ T8604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.651255][ T8604] RSP: 002b:00007f8dee18d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.651287][ T8604] RAX: ffffffffffffffda RBX: 00007f8ded5a5fa0 RCX: 00007f8ded38cd29 [ 142.651302][ T8604] RDX: 0000000000000094 RSI: 00000000200007c0 RDI: 0000000000000005 [ 142.651314][ T8604] RBP: 00007f8dee18d090 R08: 0000000000000000 R09: 0000000000000000 [ 142.651328][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.651340][ T8604] R13: 0000000000000000 R14: 00007f8ded5a5fa0 R15: 00007ffe613e06b8 [ 142.651364][ T8604] [ 143.242173][ T8642] netlink: 'syz.2.622': attribute type 2 has an invalid length. [ 143.253714][ T8642] fþ²¹¥‰: entered promiscuous mode [ 143.316462][ T8646] xt_connbytes: Forcing CT accounting to be enabled [ 143.323856][ T8646] set match dimension is over the limit! [ 143.343027][ T8648] __nla_validate_parse: 7 callbacks suppressed [ 143.343046][ T8648] netlink: 44 bytes leftover after parsing attributes in process `syz.3.625'. [ 143.392488][ T8650] bridge5: entered promiscuous mode [ 143.398454][ T8650] bridge5: entered allmulticast mode [ 143.408406][ T8650] team0: Port device bridge5 added [ 143.410731][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 143.419194][ T8650] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 143.427927][ T8652] netlink: 'syz.0.627': attribute type 2 has an invalid length. [ 143.442956][ T8652] Tq€: entered promiscuous mode [ 143.472387][ T8650] bridge0: port 3(ip6gretap0) entered blocking state [ 143.487126][ T8650] bridge0: port 3(ip6gretap0) entered disabled state [ 143.494431][ T8650] ip6gretap0: entered allmulticast mode [ 143.502441][ T8650] ip6gretap0: entered promiscuous mode [ 143.548610][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 143.558326][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 143.675114][ T8671] netlink: 'syz.0.633': attribute type 7 has an invalid length. [ 143.683021][ T8671] netlink: 'syz.0.633': attribute type 3 has an invalid length. [ 143.691432][ T8671] netlink: 204 bytes leftover after parsing attributes in process `syz.0.633'. [ 143.781853][ T8676] bridge0: port 4(syz_tun) entered blocking state [ 143.788642][ T8676] bridge0: port 4(syz_tun) entered disabled state [ 143.795840][ T8676] syz_tun: entered allmulticast mode [ 143.804531][ T8676] syz_tun: entered promiscuous mode [ 143.885328][ T8680] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 143.894830][ T8680] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 143.955693][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 143.965308][ T8684] xt_TPROXY: Can be used only with -p tcp or -p udp [ 144.006890][ T8689] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 144.016519][ T8689] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 144.030661][ T8690] IPv6: sit1: Disabled Multicast RS [ 144.039576][ T8689] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 144.051178][ T8689] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 144.065807][ T8689] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 144.075685][ T8689] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 144.084027][ T8689] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 144.093386][ T8689] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 144.102319][ T8689] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 144.110380][ T8689] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 144.162398][ T8693] atomic_op ffff888022be4998 conn xmit_atomic 0000000000000000 [ 144.705062][ T8714] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 144.742389][ T8714] bond3: entered promiscuous mode [ 144.748129][ T8714] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.765535][ T8723] bond3: (slave veth3): making interface the new active one [ 144.773388][ T8723] veth3: entered promiscuous mode [ 144.779094][ T8723] bond3: (slave veth3): Enslaving as an active interface with an up link [ 144.802846][ T8719] tipc: Enabling of bearer rejected, already enabled [ 144.840172][ T8722] tipc: Enabling of bearer rejected, already enabled [ 144.938368][ T8730] lo speed is unknown, defaulting to 1000 [ 145.002903][ T8738] bridge1: entered promiscuous mode [ 145.024201][ T8738] bridge1: entered allmulticast mode [ 145.038220][ T8745] netlink: 'syz.0.653': attribute type 10 has an invalid length. [ 145.043471][ T8738] team0: Port device bridge1 added [ 145.096836][ T8745] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 145.157746][ T8753] lo speed is unknown, defaulting to 1000 [ 145.184964][ T8738] bridge0: port 3(ip6gretap0) entered blocking state [ 145.201318][ T8738] bridge0: port 3(ip6gretap0) entered disabled state [ 145.217069][ T8738] ip6gretap0: entered allmulticast mode [ 145.223757][ T8738] ip6gretap0: entered promiscuous mode [ 145.230552][ T8738] bridge0: port 3(ip6gretap0) entered blocking state [ 145.237372][ T8738] bridge0: port 3(ip6gretap0) entered forwarding state [ 145.345401][ T8758] netlink: 64106 bytes leftover after parsing attributes in process `syz.3.660'. [ 145.364718][ T8758] netlink: 64106 bytes leftover after parsing attributes in process `syz.3.660'. [ 145.444376][ T8762] Cannot find add_set index 0 as target [ 145.965218][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.671'. [ 146.159795][ T8795] syz.3.673: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 146.175230][ T8795] CPU: 0 UID: 0 PID: 8795 Comm: syz.3.673 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 146.175282][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 146.175295][ T8795] Call Trace: [ 146.175302][ T8795] [ 146.175311][ T8795] dump_stack_lvl+0x241/0x360 [ 146.175348][ T8795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.175378][ T8795] ? __pfx__printk+0x10/0x10 [ 146.175417][ T8795] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 146.175451][ T8795] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 146.175485][ T8795] warn_alloc+0x278/0x410 [ 146.175509][ T8795] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 146.175532][ T8795] ? __pfx_warn_alloc+0x10/0x10 [ 146.175555][ T8795] ? kasan_save_track+0x3f/0x80 [ 146.175578][ T8795] ? __kasan_kmalloc+0x98/0xb0 [ 146.175603][ T8795] ? xsk_setsockopt+0x4ea/0x950 [ 146.175627][ T8795] ? do_sock_setsockopt+0x3af/0x720 [ 146.175649][ T8795] ? __x64_sys_setsockopt+0x1ee/0x280 [ 146.175671][ T8795] ? do_syscall_64+0xf3/0x230 [ 146.175688][ T8795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.175714][ T8795] __vmalloc_node_range_noprof+0x126/0x1380 [ 146.175753][ T8795] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 146.175779][ T8795] ? __kasan_kmalloc+0x98/0xb0 [ 146.175806][ T8795] vmalloc_user_noprof+0x74/0x80 [ 146.175829][ T8795] ? xskq_create+0xb6/0x170 [ 146.175853][ T8795] xskq_create+0xb6/0x170 [ 146.175878][ T8795] xsk_init_queue+0xa1/0x100 [ 146.175904][ T8795] xsk_setsockopt+0x4ea/0x950 [ 146.175930][ T8795] ? __pfx_xsk_setsockopt+0x10/0x10 [ 146.175954][ T8795] ? rcu_is_watching+0x15/0xb0 [ 146.175985][ T8795] ? __pfx_aa_sk_perm+0x10/0x10 [ 146.176002][ T8795] ? lock_release+0xbf/0xa30 [ 146.176030][ T8795] ? aa_sock_opt_perm+0x79/0x120 [ 146.176054][ T8795] ? __pfx_xsk_setsockopt+0x10/0x10 [ 146.176087][ T8795] do_sock_setsockopt+0x3af/0x720 [ 146.176113][ T8795] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 146.176137][ T8795] ? __fget_files+0x395/0x410 [ 146.176166][ T8795] ? __fget_files+0x2a/0x410 [ 146.176198][ T8795] __x64_sys_setsockopt+0x1ee/0x280 [ 146.176224][ T8795] do_syscall_64+0xf3/0x230 [ 146.176241][ T8795] ? clear_bhb_loop+0x35/0x90 [ 146.176265][ T8795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.176287][ T8795] RIP: 0033:0x7fc14798cd29 [ 146.176304][ T8795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.176322][ T8795] RSP: 002b:00007fc148745038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.176344][ T8795] RAX: ffffffffffffffda RBX: 00007fc147ba5fa0 RCX: 00007fc14798cd29 [ 146.176360][ T8795] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 146.176372][ T8795] RBP: 00007fc147a0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 146.176392][ T8795] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.176406][ T8795] R13: 0000000000000000 R14: 00007fc147ba5fa0 R15: 00007fff5b6e32f8 [ 146.176429][ T8795] [ 146.176442][ T8795] Mem-Info: [ 146.486069][ T8795] active_anon:4304 inactive_anon:0 isolated_anon:0 [ 146.486069][ T8795] active_file:1353 inactive_file:38338 isolated_file:0 [ 146.486069][ T8795] unevictable:768 dirty:109 writeback:0 [ 146.486069][ T8795] slab_reclaimable:11213 slab_unreclaimable:104820 [ 146.486069][ T8795] mapped:28355 shmem:1482 pagetables:627 [ 146.486069][ T8795] sec_pagetables:0 bounce:0 [ 146.486069][ T8795] kernel_misc_reclaimable:0 [ 146.486069][ T8795] free:1331798 free_pcp:3120 free_cma:0 [ 146.513766][ T8806] x_tables: duplicate underflow at hook 1 [ 146.549383][ T8795] Node 0 active_anon:17372kB inactive_anon:0kB active_file:5412kB inactive_file:153280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113444kB dirty:436kB writeback:0kB shmem:4424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11216kB pagetables:2648kB sec_pagetables:0kB all_unreclaimable? no [ 146.583865][ T8795] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 146.615699][ T8795] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.646598][ T8795] lowmem_reserve[]: 0 2490 2491 0 0 [ 146.679465][ T8795] Node 0 DMA32 free:1417196kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:17332kB inactive_anon:0kB active_file:5412kB inactive_file:152704kB unevictable:1536kB writepending:436kB present:3129332kB managed:2550704kB mlocked:0kB bounce:0kB free_pcp:3404kB local_pcp:692kB free_cma:0kB [ 146.727817][ T8795] lowmem_reserve[]: 0 0 0 0 0 [ 146.752943][ T8795] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:576kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 146.796299][ T8795] lowmem_reserve[]: 0 0 0 0 0 [ 146.801289][ T8795] Node 1 Normal free:3904464kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 146.842302][ T8795] lowmem_reserve[]: 0 0 0 0 0 [ 146.847119][ T8795] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 146.853182][ T8812] vlan2: entered allmulticast mode [ 146.879984][ T8795] Node 0 DMA32: 84*4kB (UM) 182*8kB (ME) 144*16kB (UME) 232*32kB (UME) 629*64kB (UME) 323*128kB (UME) 130*256kB (UME) 63*512kB (UME) 45*1024kB (UM) 8*2048kB (UME) 293*4096kB (UM) = 1421248kB [ 146.887968][ T8812] hsr0: entered allmulticast mode [ 146.918438][ T8795] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 146.930352][ T8795] Node 1 Normal: 164*4kB (UE) 50*8kB (UME) 41*16kB (UME) 185*32kB (UME) 76*64kB (UME) 32*128kB (UME) 13*256kB (UME) 13*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (UM) = 3904464kB [ 146.949155][ T8795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.961199][ T8795] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.972525][ T8812] hsr_slave_0: entered allmulticast mode [ 146.973175][ T8795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.978968][ T8812] hsr_slave_1: entered allmulticast mode [ 146.992145][ T8795] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.005599][ T8812] hsr0: left allmulticast mode [ 147.011559][ T8812] hsr_slave_0: left allmulticast mode [ 147.017495][ T8812] hsr_slave_1: left allmulticast mode [ 147.026026][ T8795] 41131 total pagecache pages [ 147.031310][ T8795] 0 pages in swap cache [ 147.035766][ T8795] Free swap = 124996kB [ 147.041161][ T8795] Total swap = 124996kB [ 147.045780][ T8795] 2097051 pages RAM [ 147.050760][ T8795] 0 pages HighMem/MovableOnly [ 147.055840][ T8795] 427589 pages reserved [ 147.063233][ T8795] 0 pages cma reserved [ 147.325681][ T8836] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 147.465741][ T8852] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 147.512413][ T8852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.718667][ T8874] netlink: 'syz.3.696': attribute type 10 has an invalid length. [ 147.737739][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.747077][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.785627][ T8874] bond0: (slave team0): Releasing backup interface [ 147.793810][ T8874] batman_adv: batadv0: Adding interface: team0 [ 147.801053][ T8874] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.827562][ T8874] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 147.838178][ T8884] netlink: 'syz.3.696': attribute type 10 has an invalid length. [ 147.859428][ T8884] netlink: 2 bytes leftover after parsing attributes in process `syz.3.696'. [ 147.874170][ T8884] team0: entered promiscuous mode [ 147.879459][ T8884] team_slave_0: entered promiscuous mode [ 147.885349][ T8884] team_slave_1: entered promiscuous mode [ 147.897641][ T8884] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.920801][ T8884] batman_adv: batadv0: Interface activated: team0 [ 147.927886][ T8884] batman_adv: batadv0: Interface deactivated: team0 [ 147.950006][ T8884] batman_adv: batadv0: Removing interface: team0 [ 147.958937][ T8884] bridge0: port 3(team0) entered blocking state [ 147.966107][ T8884] bridge0: port 3(team0) entered disabled state [ 147.975447][ T8884] team0: entered allmulticast mode [ 147.980758][ T8884] team_slave_0: entered allmulticast mode [ 147.986522][ T8884] team_slave_1: entered allmulticast mode [ 148.117397][ T8904] nbd: must specify at least one socket [ 148.293900][ T8920] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 148.387876][ T8926] __nla_validate_parse: 2 callbacks suppressed [ 148.387891][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 148.934570][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 148.955742][ T8940] lo speed is unknown, defaulting to 1000 [ 149.012699][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 149.544970][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 149.639898][ T8991] validate_nla: 1 callbacks suppressed [ 149.639920][ T8991] netlink: 'syz.1.734': attribute type 4 has an invalid length. [ 149.654537][ T8991] netlink: 152 bytes leftover after parsing attributes in process `syz.1.734'. [ 149.859019][ T9008] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 149.956439][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 150.031683][ T9030] netlink: 'syz.2.749': attribute type 1 has an invalid length. [ 150.043694][ T9030] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.749'. [ 150.065005][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'. [ 150.074177][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'. [ 150.085395][ T9033] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 150.096947][ T9033] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 150.107513][ T9033] netlink: 'syz.1.751': attribute type 2 has an invalid length. [ 150.133854][ T9033] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 150.158222][ T9033] netlink: 'syz.1.751': attribute type 2 has an invalid length. [ 150.322016][ T9049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 151.064079][ T9068] netlink: 'syz.0.760': attribute type 16 has an invalid length. [ 151.072048][ T9068] netlink: 'syz.0.760': attribute type 17 has an invalid length. [ 151.266140][ T9074] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 151.332725][ T9087] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 151.356687][ T9075] tipc: Enabling of bearer rejected, already enabled [ 151.376392][ T9088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.386524][ T9088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.395355][ T9088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.403477][ T9088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.486581][ T9095] TCP: TCP_TX_DELAY enabled [ 151.550431][ T9099] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 151.583560][ T9104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.641803][ T9099] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 151.653195][ T9099] gretap1: entered promiscuous mode [ 151.658646][ T9099] gretap1: entered allmulticast mode [ 152.402686][ T9140] xt_TCPMSS: Only works on TCP SYN packets [ 152.693154][ T29] audit: type=1800 audit(1737959587.507:3): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.789" name=646570746820300A70726F636573736564203020696E736E7320286C696D6974203130303030303029206D61785F7374617465735F7065725F696E736E203020746F74616C5F7374617465732030207065616B5F737461 dev="tmpfs" ino=1012 res=0 errno=0 [ 152.716490][ T9167] lo speed is unknown, defaulting to 1000 [ 152.781774][ T29] audit: type=1804 audit(1737959587.547:4): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.789" name=2F6E6577726F6F742F3139332F646570746820300A70726F636573736564203020696E736E7320286C696D6974203130303030303029206D61785F7374617465735F7065725F696E736E203020746F74616C5F7374617465732030207065616B5F737461 dev="tmpfs" ino=1012 res=1 errno=0 [ 152.987617][ T9167] lo speed is unknown, defaulting to 1000 [ 153.919611][ T9208] __nla_validate_parse: 11 callbacks suppressed [ 153.919635][ T9208] netlink: 124 bytes leftover after parsing attributes in process `syz.0.802'. [ 153.935744][ T9208] netlink: 104 bytes leftover after parsing attributes in process `syz.0.802'. [ 154.076319][ T9210] sch_fq: defrate 511 ignored. [ 154.438168][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 154.754454][ T9271] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.815'. [ 154.764496][ T9268] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.815'. [ 154.865580][ T9280] lo speed is unknown, defaulting to 1000 [ 154.918905][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 154.947272][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 154.993902][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'. [ 155.004246][ T9283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.816'. [ 155.056004][ T5843] block nbd0: Receive control failed (result -107) [ 155.092499][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.825'. [ 155.104448][ T9283] nbd0: detected capacity change from 0 to 256 [ 155.113157][ T9293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.198107][ T9308] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 155.348734][ T9311] lo speed is unknown, defaulting to 1000 [ 155.367677][ T9310] lo speed is unknown, defaulting to 1000 [ 155.470255][ T9325] validate_nla: 4 callbacks suppressed [ 155.470275][ T9325] netlink: 'syz.0.833': attribute type 29 has an invalid length. [ 155.828872][ T9347] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 155.958377][ T9356] netlink: 'syz.3.840': attribute type 4 has an invalid length. [ 156.013494][ T9364] netlink: 'syz.3.840': attribute type 4 has an invalid length. [ 156.151481][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.158058][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.164661][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.171211][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.177790][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.184430][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.190992][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.197480][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.203993][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.210532][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.217009][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.223535][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.230091][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.236584][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.243122][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.249675][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.256196][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.262742][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.269259][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.275817][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.282374][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.288884][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.295413][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.301942][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.308446][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.314980][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.321516][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.328036][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.334581][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.341112][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.347625][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.354159][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.360699][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.367211][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.373757][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.380287][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.386808][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.393346][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.399879][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.406389][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.412922][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.419444][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.425969][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.432535][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.439055][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.445750][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.452287][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.458810][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.465350][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.471860][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.478332][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.484868][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.491413][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.497899][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.504426][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.510980][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.517464][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.524025][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.530649][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.537136][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.543652][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.550188][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.556676][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.563190][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 156.571732][ C1] vcan0: j1939_tp_txtimer: 0xffff888053e37800: tx aborted with unknown reason: -2 [ 156.637660][ T9381] xt_hashlimit: invalid rate [ 156.653563][ T9379] lo speed is unknown, defaulting to 1000 [ 156.767647][ T9386] netlink: 'syz.2.845': attribute type 1 has an invalid length. [ 156.797581][ T9386] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.917275][ T9397] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 157.076398][ T9407] sctp: [Deprecated]: syz.1.851 (pid 9407) Use of int in max_burst socket option deprecated. [ 157.076398][ T9407] Use struct sctp_assoc_value instead [ 157.091912][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053e37800: abort rx timeout. Force session deactivation [ 157.254743][ T9424] veth0_vlan: left allmulticast mode [ 157.281780][ T9424] team0: Port device vlan0 removed [ 157.466616][ T9449] netlink: 'syz.0.865': attribute type 3 has an invalid length. [ 157.896356][ T9471] lo speed is unknown, defaulting to 1000 [ 157.973400][ T9480] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 158.044930][ T9485] nbd: must specify a size in bytes for the device [ 158.054564][ T9480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.073790][ T9485] block nbd0: must specify backend [ 158.169810][ T9486] vcan0: entered allmulticast mode [ 158.205296][ T9486] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.213186][ T9486] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 158.228672][ T9486] bond3: (slave vcan0): Error -95 calling set_mac_address [ 158.285797][ T9495] netlink: 'syz.1.878': attribute type 3 has an invalid length. [ 158.299473][ T9493] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 158.422335][ T9502] netlink: 'syz.2.879': attribute type 10 has an invalid length. [ 158.528467][ T9506] lo speed is unknown, defaulting to 1000 [ 158.592037][ T9520] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 158.603014][ T9517] netlink: 'syz.2.884': attribute type 4 has an invalid length. [ 158.808780][ T9531] ax25_connect(): syz.2.886 uses autobind, please contact jreuter@yaina.de [ 158.885038][ T9533] tipc: Enabled bearer , priority 10 [ 158.978716][ T9542] __nla_validate_parse: 26 callbacks suppressed [ 158.978739][ T9542] netlink: 211456 bytes leftover after parsing attributes in process `syz.1.891'. [ 158.997941][ T9542] netlink: zone id is out of range [ 159.003442][ T9542] netlink: zone id is out of range [ 159.008900][ T9542] netlink: zone id is out of range [ 159.015118][ T9542] netlink: get zone limit has 8 unknown bytes [ 159.233734][ T9550] batadv_slave_0: entered promiscuous mode [ 159.244698][ T9548] batadv_slave_0: left promiscuous mode [ 159.311630][ T9557] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 159.327036][ T9557] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 159.363424][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'. [ 159.424965][ T9566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.898'. [ 159.519086][ T9578] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 159.766886][ T9595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.794960][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 159.947865][ T9619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.977553][ T9619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.129140][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 160.266486][ T9643] netlink: 48 bytes leftover after parsing attributes in process `syz.1.921'. [ 160.274241][ T9645] xt_l2tp: unknown flags: 10 [ 160.301497][ T9643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.921'. [ 160.661184][ T9670] validate_nla: 2 callbacks suppressed [ 160.661208][ T9670] netlink: 'syz.1.929': attribute type 10 has an invalid length. [ 160.675616][ T9670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.685853][ T9670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.760381][ T9676] netlink: 36 bytes leftover after parsing attributes in process `syz.1.932'. [ 160.971227][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.938'. [ 160.987902][ T9700] vlan2: entered promiscuous mode [ 160.993251][ T9700] ip6gretap0: entered promiscuous mode [ 161.003297][ T9700] ip6gretap0: left promiscuous mode [ 161.239013][ T9718] syzkaller0: entered promiscuous mode [ 161.246644][ T9718] syzkaller0: entered allmulticast mode [ 161.391850][ T9729] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 161.447353][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 161.459135][ T9735] nr0: entered promiscuous mode [ 161.467756][ T9737] netlink: 'syz.0.948': attribute type 5 has an invalid length. [ 161.598659][ T9748] syzkaller1: entered promiscuous mode [ 161.604412][ T9748] syzkaller1: entered allmulticast mode [ 161.941336][ T9759] lo speed is unknown, defaulting to 1000 [ 162.231191][ T9767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.259230][ T9767] netlink: 'syz.2.960': attribute type 10 has an invalid length. [ 162.442586][ T9771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.490059][ T9771] veth1_vlan: left allmulticast mode [ 162.506145][ T9771] macvtap0: left promiscuous mode [ 162.520703][ T9771] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.530429][ T9771] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.540250][ T9771] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.559451][ T9771] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.595686][ T9771] macvlan1: left allmulticast mode [ 162.601566][ T9771] vlan1: left allmulticast mode [ 162.607909][ T9771] bond2: left promiscuous mode [ 162.615674][ T9771] bond3: left promiscuous mode [ 162.621685][ T9771] veth3: left promiscuous mode [ 162.887997][ T9818] netlink: 'syz.3.971': attribute type 1 has an invalid length. [ 162.895923][ T9818] netlink: 'syz.3.971': attribute type 3 has an invalid length. [ 162.946553][ T9822] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 163.000266][ T9825] lo speed is unknown, defaulting to 1000 [ 163.268594][ T9844] openvswitch: netlink: Flow actions attr not present in new flow. [ 163.338367][ T9846] lo speed is unknown, defaulting to 1000 [ 163.486406][ T9852] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 163.809029][ T9869] netlink: 'syz.0.988': attribute type 10 has an invalid length. [ 163.824972][ T9869] team0: Port device geneve0 added [ 164.945596][ T9916] team_slave_0: entered promiscuous mode [ 164.951376][ T9916] team_slave_1: entered promiscuous mode [ 164.957052][ T9916] geneve0: entered promiscuous mode [ 164.965013][ T9916] vlan6: entered promiscuous mode [ 164.973645][ T9916] team0: entered promiscuous mode [ 164.989800][ T9916] team0: left promiscuous mode [ 164.995348][ T9916] team_slave_0: left promiscuous mode [ 165.000827][ T9916] team_slave_1: left promiscuous mode [ 165.006309][ T9916] geneve0: left promiscuous mode [ 165.012812][ T9920] __nla_validate_parse: 8 callbacks suppressed [ 165.012831][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 165.033620][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 165.048782][ T9917] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 165.169037][ T9934] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 165.194201][ T9937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.601035][ T9964] syzkaller1: entered promiscuous mode [ 165.606693][ T9964] syzkaller1: entered allmulticast mode [ 165.615064][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 166.213591][ T9971] sctp: [Deprecated]: syz.3.1018 (pid 9971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.213591][ T9971] Use struct sctp_sack_info instead [ 166.285540][ T9971] netlink: 'syz.3.1018': attribute type 9 has an invalid length. [ 166.294092][ T9971] netlink: 'syz.3.1018': attribute type 7 has an invalid length. [ 166.302434][ T9971] netlink: 'syz.3.1018': attribute type 8 has an invalid length. [ 166.451542][ T9976] vcan0: Master is either lo or non-ether device [ 166.737958][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.747421][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.755388][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.763615][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.771249][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 166.778554][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.800643][ T9986] lo speed is unknown, defaulting to 1000 [ 166.966036][ T9986] chnl_net:caif_netlink_parms(): no params data found [ 167.015599][ T9999] lo speed is unknown, defaulting to 1000 [ 167.026041][ T9986] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.033616][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.043377][ T9986] bridge_slave_0: entered allmulticast mode [ 167.055949][ T9986] bridge_slave_0: entered promiscuous mode [ 167.069972][ T9986] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.121842][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.125091][T10007] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 167.129140][ T9986] bridge_slave_1: entered allmulticast mode [ 167.158222][ T9986] bridge_slave_1: entered promiscuous mode [ 167.193206][ T9986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.211790][ T9986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.212286][T10013] netlink: 'syz.3.1032': attribute type 4 has an invalid length. [ 167.253415][ T9986] team0: Port device team_slave_0 added [ 167.263644][ T9986] team0: Port device team_slave_1 added [ 167.288059][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.299687][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.328644][ T9986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.344537][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.352002][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.378379][ T9986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.395973][T10018] gretap1: entered promiscuous mode [ 167.420042][ T9986] hsr_slave_0: entered promiscuous mode [ 167.426464][ T9986] hsr_slave_1: entered promiscuous mode [ 167.524325][ T9986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.567699][T10027] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1038'. [ 167.584830][ T9986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.679003][ T9986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.746400][ T9986] bond0: (slave netdevsim0): Releasing backup interface [ 167.756015][ T9986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.846298][ T9986] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.855981][ T9986] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.868387][ T9986] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.878383][ T9986] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.984183][ T9986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.007633][ T9986] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.025716][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.032897][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.074071][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.081250][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.107572][T10055] netlink: 'syz.3.1048': attribute type 4 has an invalid length. [ 168.182154][T10059] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1047'. [ 168.191492][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 168.381138][T10071] netlink: 'syz.3.1051': attribute type 8 has an invalid length. [ 168.403484][ T9986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.444054][ T9986] veth0_vlan: entered promiscuous mode [ 168.471605][ T9986] veth1_vlan: entered promiscuous mode [ 168.508073][ T9986] veth0_macvtap: entered promiscuous mode [ 168.523215][ T9986] veth1_macvtap: entered promiscuous mode [ 168.550511][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.562383][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.595313][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.621322][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.654001][ T9986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.686171][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.691471][T10093] netlink: 3464 bytes leftover after parsing attributes in process `syz.3.1054'. [ 168.719330][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.735555][ T9986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.754989][ T9986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.768278][ T9986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.812205][ T9986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.819541][ T5843] Bluetooth: hci1: command tx timeout [ 168.823020][T10093] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1054'. [ 168.849477][ T9986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.870213][ T9986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.897100][ T9986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.132337][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.218219][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.239866][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.248411][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.611507][T10122] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.717299][T10127] netlink: 'syz.1.1064': attribute type 3 has an invalid length. [ 169.725731][T10127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1064'. [ 169.783824][T10127] trusted_key: syz.1.1064 sent an empty control message without MSG_MORE. [ 170.030410][T10142] bridge: RTM_NEWNEIGH with invalid ether address [ 170.037065][T10146] bridge: RTM_NEWNEIGH with invalid ether address [ 170.047047][T10142] ip6tnl2: entered promiscuous mode [ 170.052709][T10142] ip6tnl2: entered allmulticast mode [ 170.066569][T10140] ip6tnl2: entered promiscuous mode [ 170.072003][T10140] ip6tnl2: entered allmulticast mode [ 170.092053][T10148] veth1_macvtap: left promiscuous mode [ 170.097571][T10148] macsec0: entered promiscuous mode [ 170.254459][T10153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.261951][T10153] IPv6: NLM_F_CREATE should be set when creating new route [ 170.269236][T10153] IPv6: NLM_F_CREATE should be set when creating new route [ 170.498702][T10173] ip6tnl2: entered promiscuous mode [ 170.504815][T10173] ip6tnl2: entered allmulticast mode [ 170.603770][ T82] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.795116][T10199] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1086'. [ 170.814507][T10199] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1086'. [ 170.837857][T10199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1086'. [ 171.050652][T10221] netlink: 'syz.3.1089': attribute type 4 has an invalid length. [ 171.058447][T10221] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1089'. [ 171.085300][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.095132][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.102481][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.114344][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.123972][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 171.131301][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.160745][T10222] lo speed is unknown, defaulting to 1000 [ 171.353550][T10222] chnl_net:caif_netlink_parms(): no params data found [ 171.430191][T10222] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.437482][T10222] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.445832][T10222] bridge_slave_0: entered allmulticast mode [ 171.453461][T10222] bridge_slave_0: entered promiscuous mode [ 171.461756][T10222] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.468994][T10222] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.476357][T10222] bridge_slave_1: entered allmulticast mode [ 171.483188][T10222] bridge_slave_1: entered promiscuous mode [ 171.505289][T10246] tipc: Enabled bearer , priority 0 [ 171.514806][T10222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.544646][T10246] syzkaller0: entered promiscuous mode [ 171.551131][T10246] syzkaller0: entered allmulticast mode [ 171.558126][T10246] tipc: Resetting bearer [ 171.565689][T10222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.582074][T10245] tipc: Resetting bearer [ 171.610543][T10245] tipc: Disabling bearer [ 171.625784][T10222] team0: Port device team_slave_0 added [ 171.633915][T10222] team0: Port device team_slave_1 added [ 171.659664][T10222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.667079][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.693987][T10222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.708492][T10222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.715965][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.743237][T10222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.790090][T10222] hsr_slave_0: entered promiscuous mode [ 171.803182][T10222] hsr_slave_1: entered promiscuous mode [ 171.817870][T10222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.826005][T10222] Cannot create hsr debugfs directory [ 171.917644][T10263] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1100'. [ 171.972506][T10267] netlink: 'syz.2.1101': attribute type 13 has an invalid length. [ 172.007083][T10262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1101'. [ 172.065747][ T82] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.116412][ T82] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.168861][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'. [ 172.184015][ T82] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.264672][T10291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1109'. [ 172.275859][T10290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1109'. [ 172.309727][ T82] bridge_slave_1: left allmulticast mode [ 172.329381][ T82] bridge_slave_1: left promiscuous mode [ 172.335650][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.353503][ T82] bridge_slave_0: left allmulticast mode [ 172.359204][ T82] bridge_slave_0: left promiscuous mode [ 172.372016][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.543596][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.554425][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.566026][ T82] bond0 (unregistering): Released all slaves [ 172.631060][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 172.691743][T10302] netlink: 'syz.1.1112': attribute type 7 has an invalid length. [ 172.890526][T10308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.896272][ T82] hsr_slave_0: left promiscuous mode [ 172.912434][ T82] hsr_slave_1: left promiscuous mode [ 172.918234][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.925786][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.933752][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.941919][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.953900][ T82] veth1_macvtap: left promiscuous mode [ 172.960282][ T82] veth0_macvtap: left promiscuous mode [ 172.966047][ T82] veth1_vlan: left promiscuous mode [ 172.973650][ T82] veth0_vlan: left promiscuous mode [ 173.099051][ T82] team0 (unregistering): Port device team_slave_1 removed [ 173.123083][ T82] team0 (unregistering): Port device team_slave_0 removed [ 173.219953][ T5843] Bluetooth: hci1: command tx timeout [ 173.265480][T10222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.275701][T10222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.286019][T10222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.300676][T10222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.458163][T10323] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.472158][T10323] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.481236][T10323] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.490531][T10323] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.515688][T10323] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.525106][T10323] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.534376][T10323] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.543707][T10323] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.578651][T10222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.606065][T10222] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.618506][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.625701][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.643215][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.650512][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.814963][T10222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.849557][T10222] veth0_vlan: entered promiscuous mode [ 173.860998][T10222] veth1_vlan: entered promiscuous mode [ 173.893258][T10222] veth0_macvtap: entered promiscuous mode [ 173.904063][T10222] veth1_macvtap: entered promiscuous mode [ 173.917201][T10222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.928002][T10222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.938074][T10222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.948873][T10222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.960645][T10222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.972957][T10222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.983789][T10222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.994006][T10222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.005256][T10222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.017559][T10222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.033116][T10222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.043192][T10222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.052192][T10222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.061663][T10222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.115594][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.135400][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.147762][T10351] sctp: [Deprecated]: syz.2.1126 (pid 10351) Use of int in max_burst socket option. [ 174.147762][T10351] Use struct sctp_assoc_value instead [ 174.157065][ T4490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.171426][ T4490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.220195][T10353] macvlan3: entered promiscuous mode [ 174.225626][T10353] bridge0: entered promiscuous mode [ 174.237150][T10353] bridge0: port 5(macvlan3) entered blocking state [ 174.244120][T10353] bridge0: port 5(macvlan3) entered disabled state [ 174.251005][T10353] macvlan3: entered allmulticast mode [ 174.256549][T10353] bridge0: entered allmulticast mode [ 174.265918][T10353] macvlan3: left allmulticast mode [ 174.271367][T10353] bridge0: left allmulticast mode [ 174.277034][T10353] bridge0: left promiscuous mode [ 174.362609][T10358] netlink: 'syz.1.1129': attribute type 8 has an invalid length. [ 174.461896][T10366] xt_TCPMSS: Only works on TCP SYN packets [ 174.471475][T10366] netlink: 'syz.2.1132': attribute type 1 has an invalid length. [ 174.672570][T10373] netlink: 'syz.1.1134': attribute type 1 has an invalid length. [ 175.481203][T10401] syzkaller1: entered promiscuous mode [ 175.486731][T10401] syzkaller1: entered allmulticast mode [ 175.496657][T10401] batadv_slave_1: entered promiscuous mode [ 175.505156][T10400] batadv_slave_1: left promiscuous mode [ 175.557292][T10410] tun0: tun_chr_ioctl cmd 1074025677 [ 175.562821][T10410] tun0: linktype set to 1 [ 175.676002][T10420] dvmrp5: entered allmulticast mode [ 175.683534][T10419] dvmrp5: left allmulticast mode [ 175.716743][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.884509][T10432] lo speed is unknown, defaulting to 1000 [ 176.004055][T10441] __nla_validate_parse: 11 callbacks suppressed [ 176.004077][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 176.052311][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.056335][T10441] gtp0: entered allmulticast mode [ 176.065711][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.075687][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.075902][T10441] team0: Device gtp0 is of different type [ 176.098861][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.107805][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 176.115405][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.206573][T10442] lo speed is unknown, defaulting to 1000 [ 176.324147][T10449] bridge0: port 4(syz_tun) entered blocking state [ 176.349563][T10449] bridge0: port 4(syz_tun) entered disabled state [ 176.370372][T10449] syz_tun: entered allmulticast mode [ 176.387933][T10449] syz_tun: entered promiscuous mode [ 176.605442][T10442] chnl_net:caif_netlink_parms(): no params data found [ 176.682205][T10463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1156'. [ 176.705370][T10463] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1156'. [ 176.718614][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1156'. [ 176.729601][T10442] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.737382][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.747567][T10442] bridge_slave_0: entered allmulticast mode [ 176.760794][T10442] bridge_slave_0: entered promiscuous mode [ 176.767284][ T5884] hid-generic 0005:10CF:54FF.0001: unknown main item tag 0x0 [ 176.771312][T10442] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.783038][ T5884] hid-generic 0005:10CF:54FF.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 176.793092][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.804777][T10442] bridge_slave_1: entered allmulticast mode [ 176.813257][T10442] bridge_slave_1: entered promiscuous mode [ 176.860443][T10442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.872308][T10442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.920468][T10442] team0: Port device team_slave_0 added [ 176.929168][T10442] team0: Port device team_slave_1 added [ 176.965075][T10442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.972266][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.999129][T10442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.011921][T10442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.019060][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.048584][T10442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.061789][T10483] syz_tun: left allmulticast mode [ 177.066972][T10483] syz_tun: left promiscuous mode [ 177.072971][T10483] bridge0: port 4(syz_tun) entered disabled state [ 177.088174][T10483] ip6gretap0: left allmulticast mode [ 177.094037][T10483] ip6gretap0: left promiscuous mode [ 177.099707][T10483] bridge0: port 3(ip6gretap0) entered disabled state [ 177.108069][T10483] bridge_slave_0: left allmulticast mode [ 177.114460][T10483] bridge_slave_0: left promiscuous mode [ 177.120453][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.130424][T10483] bridge_slave_1: left allmulticast mode [ 177.136113][T10483] bridge_slave_1: left promiscuous mode [ 177.143201][T10483] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.153976][T10483] bond0: (slave 2@ÿ): Releasing backup interface [ 177.162592][T10483] bond0: (slave bond_slave_1): Releasing backup interface [ 177.173982][T10483] team0: Port device team_slave_0 removed [ 177.184058][T10483] team0: Port device team_slave_1 removed [ 177.191947][T10483] team0: Port device macvlan2 removed [ 177.198874][T10483] team0: Port device bridge5 removed [ 177.212143][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.242634][T10442] hsr_slave_0: entered promiscuous mode [ 177.249006][T10442] hsr_slave_1: entered promiscuous mode [ 177.283581][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.338905][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.426653][ T35] bridge_slave_1: left allmulticast mode [ 177.435618][ T35] bridge_slave_1: left promiscuous mode [ 177.442077][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.454616][ T35] bridge_slave_0: left allmulticast mode [ 177.461342][ T35] bridge_slave_0: left promiscuous mode [ 177.467542][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.586732][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.598043][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.608527][ T35] bond0 (unregistering): Released all slaves [ 177.835317][T10500] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1165'. [ 177.914733][T10504] tun0: tun_chr_ioctl cmd 21731 [ 177.938295][ T35] hsr_slave_0: left promiscuous mode [ 177.992411][ T35] hsr_slave_1: left promiscuous mode [ 177.999175][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.007287][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.020363][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.030234][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 178.032858][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.049238][ T35] veth1_macvtap: left promiscuous mode [ 178.054870][ T35] veth0_macvtap: left promiscuous mode [ 178.060609][ T35] veth1_vlan: left promiscuous mode [ 178.065905][ T35] veth0_vlan: left promiscuous mode [ 178.121172][T10510] netlink: 'syz.2.1170': attribute type 3 has an invalid length. [ 178.131208][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 178.180096][ T5848] Bluetooth: hci1: command tx timeout [ 178.226869][ T35] team0 (unregistering): Port device team_slave_1 removed [ 178.240426][ T35] team0 (unregistering): Port device team_slave_0 removed [ 178.349206][T10442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.362484][T10442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.373826][T10442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.392353][T10442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.464363][T10442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.484415][T10442] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.504654][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.511842][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.557467][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.564661][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.596172][T10529] lo speed is unknown, defaulting to 1000 [ 178.866212][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.904184][T10442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.918328][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.950938][T10442] veth0_vlan: entered promiscuous mode [ 178.962795][T10442] veth1_vlan: entered promiscuous mode [ 178.976413][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.999190][T10442] veth0_macvtap: entered promiscuous mode [ 179.008101][T10442] veth1_macvtap: entered promiscuous mode [ 179.033510][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.047655][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.058463][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.069186][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.081420][T10442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.090178][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.104419][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.115526][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.126301][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.137343][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.148428][T10442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.160885][T10442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.169841][T10442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.178559][T10442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.187387][T10442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.216165][ T52] bridge_slave_1: left allmulticast mode [ 179.221963][ T52] bridge_slave_1: left promiscuous mode [ 179.227641][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.236713][ T52] bridge_slave_0: left allmulticast mode [ 179.242769][ T52] bridge_slave_0: left promiscuous mode [ 179.248442][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.334658][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.345175][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.358726][ T52] bond0 (unregistering): Released all slaves [ 179.397641][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.405598][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.432175][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.441350][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.563370][T10545] tipc: Enabled bearer , priority 0 [ 179.692988][T10551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1180'. [ 179.831909][ T52] hsr_slave_0: left promiscuous mode [ 179.837941][ T52] hsr_slave_1: left promiscuous mode [ 179.854047][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.872219][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.895023][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.896272][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.910322][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.917586][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.921691][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.925431][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.940041][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.947292][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.964444][ T52] veth1_macvtap: left promiscuous mode [ 179.973513][ T52] veth0_macvtap: left promiscuous mode [ 179.982656][ T52] veth1_vlan: left promiscuous mode [ 179.988364][ T52] veth0_vlan: left promiscuous mode [ 180.028456][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1185'. [ 180.039022][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 180.100459][T10570] Cannot find set identified by id 0 to match [ 180.192675][ T52] team0 (unregistering): Port device team_slave_1 removed [ 180.206239][ T52] team0 (unregistering): Port device team_slave_0 removed [ 180.309356][T10559] lo speed is unknown, defaulting to 1000 [ 180.466156][T10593] vlan0: entered allmulticast mode [ 180.537029][T10593] vlan0: entered allmulticast mode [ 180.600049][T10559] chnl_net:caif_netlink_parms(): no params data found [ 180.763864][T10615] netlink: 'syz.3.1195': attribute type 16 has an invalid length. [ 180.789082][T10615] netlink: 'syz.3.1195': attribute type 17 has an invalid length. [ 180.800205][T10559] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.807405][T10559] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.816266][T10559] bridge_slave_0: entered allmulticast mode [ 180.824306][T10559] bridge_slave_0: entered promiscuous mode [ 180.832514][T10559] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.839963][T10559] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.847187][T10559] bridge_slave_1: entered allmulticast mode [ 180.854437][T10559] bridge_slave_1: entered promiscuous mode [ 180.868189][T10615] infiniband syz1: set active [ 180.899724][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.926462][T10559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.942245][T10559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.965591][T10559] team0: Port device team_slave_0 added [ 180.973251][T10559] team0: Port device team_slave_1 added [ 180.992389][T10559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.000016][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.026677][T10559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.038423][T10559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.045672][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.072049][T10559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.102073][T10559] hsr_slave_0: entered promiscuous mode [ 181.108241][T10559] hsr_slave_1: entered promiscuous mode [ 181.114579][T10559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.122541][T10559] Cannot create hsr debugfs directory [ 181.283691][T10624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.418171][T10632] __nla_validate_parse: 10 callbacks suppressed [ 181.418194][T10632] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1202'. [ 181.528352][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.536343][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.543919][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.551676][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.559169][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 181.559457][T10642] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1205'. [ 181.566807][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.636164][T10638] lo speed is unknown, defaulting to 1000 [ 181.670826][T10559] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.682296][T10559] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.703052][T10559] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.729691][T10652] tun0: tun_chr_ioctl cmd 1074025677 [ 181.736019][T10652] tun0: linktype set to 776 [ 181.746339][T10559] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.019389][ T54] Bluetooth: hci1: command tx timeout [ 182.027924][T10559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.046225][T10638] chnl_net:caif_netlink_parms(): no params data found [ 182.159673][T10638] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.166997][T10638] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.174870][T10638] bridge_slave_0: entered allmulticast mode [ 182.182836][T10638] bridge_slave_0: entered promiscuous mode [ 182.191107][T10638] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.198725][T10638] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.207242][T10638] bridge_slave_1: entered allmulticast mode [ 182.214747][T10638] bridge_slave_1: entered promiscuous mode [ 182.265120][T10559] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.276500][T10638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.289121][T10638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.312885][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.320093][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.339235][T10638] team0: Port device team_slave_0 added [ 182.347950][T10638] team0: Port device team_slave_1 added [ 182.377891][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.385075][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.396344][T10638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.403610][T10638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.433302][T10638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.445362][T10638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.452699][T10638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.479160][T10638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.506805][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.538561][T10559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.549749][T10559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.633123][T10638] hsr_slave_0: entered promiscuous mode [ 182.641361][T10638] hsr_slave_1: entered promiscuous mode [ 182.647438][T10638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.655478][T10638] Cannot create hsr debugfs directory [ 182.686367][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.865182][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.904869][T10682] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 182.944105][T10689] netlink: 'syz.2.1215': attribute type 3 has an invalid length. [ 182.999827][T10559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.125901][ T52] bridge_slave_1: left allmulticast mode [ 183.133755][ T52] bridge_slave_1: left promiscuous mode [ 183.150393][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.162997][ T52] bridge_slave_0: left allmulticast mode [ 183.168699][ T52] bridge_slave_0: left promiscuous mode [ 183.179580][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.226321][T10700] (unnamed net_device) (uninitialized): down delay (38) is not a multiple of miimon (100), value rounded to 0 ms [ 183.436715][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.457419][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.480648][ T52] bond0 (unregistering): Released all slaves [ 183.522861][T10711] lo speed is unknown, defaulting to 1000 [ 183.619811][ T54] Bluetooth: hci4: command tx timeout [ 183.652345][T10717] lo speed is unknown, defaulting to 1000 [ 183.694761][T10559] veth0_vlan: entered promiscuous mode [ 183.749474][T10559] veth1_vlan: entered promiscuous mode [ 183.903303][T10638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.925886][T10638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.939178][ T5829] syz_tun (unregistering): left allmulticast mode [ 183.962648][ T5829] syz_tun (unregistering): left promiscuous mode [ 183.969183][ T5829] bridge0: port 4(syz_tun) entered disabled state [ 183.981867][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 183.996366][T10638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.006212][T10638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.032958][T10559] veth0_macvtap: entered promiscuous mode [ 184.058414][T10559] veth1_macvtap: entered promiscuous mode [ 184.100026][ T54] Bluetooth: hci1: command tx timeout [ 184.108623][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.189598][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.229442][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.259873][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.282941][T10559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.405527][ T52] hsr_slave_0: left promiscuous mode [ 184.414332][ T52] hsr_slave_1: left promiscuous mode [ 184.420701][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.428188][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.436561][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.444306][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.454440][ T52] veth1_macvtap: left promiscuous mode [ 184.460262][ T52] veth0_macvtap: left promiscuous mode [ 184.465934][ T52] veth1_vlan: left promiscuous mode [ 184.471345][ T52] veth0_vlan: left promiscuous mode [ 184.616297][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.637644][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.645251][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.654728][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.666679][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 184.674135][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.681780][ T52] team0 (unregistering): Port device team_slave_1 removed [ 184.693812][ T52] team0 (unregistering): Port device team_slave_0 removed [ 184.753199][T10559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.764100][T10559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.775788][T10559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.816760][T10559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.830405][T10559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.839157][T10559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.848745][T10755] netlink: 'syz.2.1231': attribute type 16 has an invalid length. [ 184.848860][T10559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.862013][T10755] netlink: 'syz.2.1231': attribute type 17 has an invalid length. [ 184.954530][T10752] lo speed is unknown, defaulting to 1000 [ 184.967441][T10638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.999442][T10757] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1232'. [ 185.032362][T10638] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.050743][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.057892][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.100811][ T2936] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.107964][ T2936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.229480][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.237362][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.294125][T10759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.304182][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.304206][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.443628][T10752] chnl_net:caif_netlink_parms(): no params data found [ 185.550050][T10752] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.557273][T10752] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.570312][T10752] bridge_slave_0: entered allmulticast mode [ 185.577312][T10752] bridge_slave_0: entered promiscuous mode [ 185.592199][T10752] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.633299][T10752] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.643884][T10752] bridge_slave_1: entered allmulticast mode [ 185.651681][T10752] bridge_slave_1: entered promiscuous mode [ 185.665752][ T1153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.696367][T10638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.703390][ T5848] Bluetooth: hci4: command tx timeout [ 185.727478][T10752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.738699][T10752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.764322][T10752] team0: Port device team_slave_0 added [ 185.773405][T10752] team0: Port device team_slave_1 added [ 185.781277][ T1153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.810251][T10752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.817312][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.843959][T10752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.856247][T10752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.865305][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.892835][T10752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.914829][ T1153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.948822][T10752] hsr_slave_0: entered promiscuous mode [ 185.955115][T10752] hsr_slave_1: entered promiscuous mode [ 185.997294][ T1153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.008800][T10638] veth0_vlan: entered promiscuous mode [ 186.046890][T10638] veth1_vlan: entered promiscuous mode [ 186.068145][T10752] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.104224][T10638] veth0_macvtap: entered promiscuous mode [ 186.112771][T10638] veth1_macvtap: entered promiscuous mode [ 186.126356][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.137018][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.147320][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.157997][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.168846][T10638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.187444][T10752] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.210339][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.221058][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.231527][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.242094][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.252842][T10638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.271650][T10638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.280581][T10638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.289416][T10638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.298128][T10638] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.320824][T10752] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.346886][ T1153] bridge_slave_1: left allmulticast mode [ 186.352794][ T1153] bridge_slave_1: left promiscuous mode [ 186.358485][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.367379][ T1153] bridge_slave_0: left allmulticast mode [ 186.373425][ T1153] bridge_slave_0: left promiscuous mode [ 186.379127][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.477901][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.488181][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.499459][ T1153] bond0 (unregistering): Released all slaves [ 186.518501][T10752] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.612601][T10782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.652460][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.680863][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.740057][ T5848] Bluetooth: hci0: command tx timeout [ 186.787658][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.795162][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.805042][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.813160][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.821169][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 186.828441][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.059470][ T5848] Bluetooth: hci2: command tx timeout [ 187.779465][ T5848] Bluetooth: hci4: command tx timeout [ 188.819494][ T5848] Bluetooth: hci0: command tx timeout [ 188.899522][ T5848] Bluetooth: hci1: command tx timeout [ 189.859747][ T5848] Bluetooth: hci4: command tx timeout [ 190.899733][ T5848] Bluetooth: hci0: command tx timeout [ 190.979478][ T5848] Bluetooth: hci1: command tx timeout [ 192.979516][ T5848] Bluetooth: hci0: command tx timeout [ 193.059448][ T5848] Bluetooth: hci1: command tx timeout [ 195.139577][ T5848] Bluetooth: hci1: command tx timeout [ 200.022438][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.028811][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.065649][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.073303][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.081150][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.088804][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.096842][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 202.104247][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.114781][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 202.122276][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 202.130064][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 202.137930][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 202.145567][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 202.153077][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 204.189591][ T54] Bluetooth: hci5: command tx timeout [ 204.190170][ T5848] Bluetooth: hci6: command tx timeout [ 206.259567][ T5843] Bluetooth: hci6: command tx timeout [ 206.262849][ T54] Bluetooth: hci5: command tx timeout [ 207.219443][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 208.339575][ T5848] Bluetooth: hci6: command tx timeout [ 208.343724][ T54] Bluetooth: hci5: command tx timeout [ 210.419513][ T54] Bluetooth: hci5: command tx timeout [ 210.419689][ T5848] Bluetooth: hci6: command tx timeout [ 242.055884][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 242.063405][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 242.070763][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 242.078593][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 242.086827][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 242.094124][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.180444][ T5848] Bluetooth: hci7: command tx timeout [ 245.073321][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 245.080839][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 245.088105][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 245.096122][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 245.103677][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 245.111224][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 246.269492][ T54] Bluetooth: hci7: command tx timeout [ 247.139436][ T54] Bluetooth: hci8: command tx timeout [ 247.961733][ T5848] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 247.969039][ T5848] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 247.977319][ T5848] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 247.985244][ T5848] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 247.993456][ T5848] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 248.001025][ T5848] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 248.339473][ T5848] Bluetooth: hci7: command tx timeout [ 249.219429][ T5848] Bluetooth: hci8: command tx timeout [ 250.019459][ T5848] Bluetooth: hci9: command tx timeout [ 250.419544][ T5848] Bluetooth: hci7: command tx timeout [ 251.299427][ T5848] Bluetooth: hci8: command tx timeout [ 252.099559][ T5848] Bluetooth: hci9: command tx timeout [ 253.379423][ T5848] Bluetooth: hci8: command tx timeout [ 254.179484][ T5848] Bluetooth: hci9: command tx timeout [ 256.259563][ T5848] Bluetooth: hci9: command tx timeout [ 261.461750][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.468086][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.655066][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 262.662964][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 262.667178][ T5847] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 262.673394][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 262.677674][ T5847] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 262.685184][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 262.692670][ T5847] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 262.699639][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 262.706929][ T5847] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 262.713317][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 262.720802][ T5847] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 262.734634][ T5847] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 264.739506][ T5847] Bluetooth: hci10: command tx timeout [ 264.819498][ T5847] Bluetooth: hci11: command tx timeout [ 266.819467][ T5847] Bluetooth: hci10: command tx timeout [ 266.899469][ T5847] Bluetooth: hci11: command tx timeout [ 268.899643][ T5847] Bluetooth: hci10: command tx timeout [ 268.979458][ T5847] Bluetooth: hci11: command tx timeout [ 270.979523][ T5847] Bluetooth: hci10: command tx timeout [ 271.059695][ T5847] Bluetooth: hci11: command tx timeout [ 289.139417][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 302.727394][ T5848] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 302.735067][ T5848] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 302.742498][ T5848] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 302.750351][ T5848] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 302.757963][ T5848] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 302.765418][ T5848] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 304.499530][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 304.819382][ T5847] Bluetooth: hci12: command tx timeout [ 305.632159][ T5848] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 305.639792][ T5848] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 305.647204][ T5848] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 305.655771][ T5848] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 305.663556][ T5848] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 305.670935][ T5848] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 306.899467][ T5848] Bluetooth: hci12: command tx timeout [ 307.699433][ T5843] Bluetooth: hci13: command tx timeout [ 308.979455][ T5843] Bluetooth: hci12: command tx timeout [ 309.619510][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 309.625631][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 309.654806][ T5847] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 309.662443][ T5847] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 309.669797][ T5847] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 309.677715][ T5847] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 309.685630][ T5847] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 309.693217][ T5847] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 309.779411][ T5843] Bluetooth: hci13: command tx timeout [ 311.059450][ T5843] Bluetooth: hci12: command tx timeout [ 311.779462][ T5843] Bluetooth: hci14: command tx timeout [ 311.859499][ T5843] Bluetooth: hci13: command tx timeout [ 313.859460][ T5843] Bluetooth: hci14: command tx timeout [ 313.939433][ T5843] Bluetooth: hci13: command tx timeout [ 315.939347][ T5843] Bluetooth: hci14: command tx timeout [ 318.019367][ T5843] Bluetooth: hci14: command tx timeout [ 322.901635][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.907986][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.205178][ T54] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 323.213242][ T54] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 323.223930][ T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 323.231735][ T54] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 323.239438][ T54] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 323.244300][ T5852] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 323.246781][ T54] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 323.254788][ T5852] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 323.270781][ T5852] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 323.278844][ T5852] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 323.286641][ T5852] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 323.294129][ T5852] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 324.979625][ T5852] Bluetooth: hci6: command 0x0406 tx timeout [ 324.983438][ T5145] Bluetooth: hci5: command 0x0406 tx timeout [ 325.299526][ T5847] Bluetooth: hci15: command tx timeout [ 325.379556][ T5847] Bluetooth: hci16: command tx timeout [ 327.380053][ T5847] Bluetooth: hci15: command tx timeout [ 327.459449][ T5847] Bluetooth: hci16: command tx timeout [ 329.459432][ T5847] Bluetooth: hci15: command tx timeout [ 329.539489][ T5847] Bluetooth: hci16: command tx timeout [ 331.539498][ T5847] Bluetooth: hci15: command tx timeout [ 331.619471][ T5847] Bluetooth: hci16: command tx timeout [ 346.579518][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 346.587208][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 346.594686][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.603445][ T30] task:kworker/u8:0 state:D stack:21448 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 346.613738][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 346.620797][ T30] Call Trace: [ 346.624087][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 346.627014][ T30] __schedule+0x186c/0x4be0 [ 346.631593][ T30] ? schedule+0x90/0x320 [ 346.635966][ T30] ? schedule+0x90/0x320 [ 346.640338][ T30] ? __pfx___schedule+0x10/0x10 [ 346.645415][ T30] ? __pfx_lock_release+0x10/0x10 [ 346.650572][ T30] ? rcu_is_watching+0x15/0xb0 [ 346.655376][ T30] ? kthread_data+0x52/0xd0 [ 346.660615][ T30] ? schedule+0x90/0x320 [ 346.664902][ T30] ? wq_worker_sleeping+0x66/0x240 [ 346.670414][ T30] ? schedule+0x90/0x320 [ 346.674699][ T30] schedule+0x14b/0x320 [ 346.678883][ T30] schedule_preempt_disabled+0x13/0x30 [ 346.685247][ T30] __mutex_lock+0x817/0x1010 [ 346.690149][ T30] ? __mutex_lock+0x602/0x1010 [ 346.694975][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 346.701788][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 346.706884][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 346.713228][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.719932][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 346.726307][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 346.732264][ T30] ? __pfx_lock_release+0x10/0x10 [ 346.737323][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 346.744050][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 346.751230][ T30] ? rcu_is_watching+0x15/0xb0 [ 346.779301][ T30] ? process_scheduled_works+0x976/0x1840 [ 346.785100][ T30] process_scheduled_works+0xa66/0x1840 [ 346.804679][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.812490][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 346.818095][ T30] ? assign_work+0x364/0x3d0 [ 346.822937][ T30] worker_thread+0x870/0xd30 [ 346.827597][ T30] ? __kthread_parkme+0x169/0x1d0 [ 346.832774][ T30] ? __pfx_worker_thread+0x10/0x10 [ 346.837918][ T30] kthread+0x7a9/0x920 [ 346.842087][ T30] ? __pfx_kthread+0x10/0x10 [ 346.846711][ T30] ? __pfx_worker_thread+0x10/0x10 [ 346.851911][ T30] ? __pfx_kthread+0x10/0x10 [ 346.856526][ T30] ? __pfx_kthread+0x10/0x10 [ 346.861214][ T30] ? __pfx_kthread+0x10/0x10 [ 346.866039][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.871343][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 346.876569][ T30] ? __pfx_kthread+0x10/0x10 [ 346.881215][ T30] ret_from_fork+0x4b/0x80 [ 346.885659][ T30] ? __pfx_kthread+0x10/0x10 [ 346.890390][ T30] ret_from_fork_asm+0x1a/0x30 [ 346.895189][ T30] [ 346.898217][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 346.906167][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 346.913542][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.922321][ T30] task:kworker/u8:1 state:D stack:24176 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 346.932619][ T30] Workqueue: events_unbound linkwatch_event [ 346.938555][ T30] Call Trace: [ 346.941917][ T30] [ 346.944873][ T30] __schedule+0x186c/0x4be0 [ 346.949485][ T30] ? schedule+0x90/0x320 [ 346.953766][ T30] ? schedule+0x90/0x320 [ 346.958010][ T30] ? __pfx___schedule+0x10/0x10 [ 346.962950][ T30] ? __pfx_lock_release+0x10/0x10 [ 346.968204][ T30] ? rcu_is_watching+0x15/0xb0 [ 346.973093][ T30] ? kthread_data+0x52/0xd0 [ 346.977617][ T30] ? schedule+0x90/0x320 [ 346.981968][ T30] ? wq_worker_sleeping+0x66/0x240 [ 346.987102][ T30] ? schedule+0x90/0x320 [ 346.991411][ T30] schedule+0x14b/0x320 [ 346.995599][ T30] schedule_preempt_disabled+0x13/0x30 [ 347.001156][ T30] __mutex_lock+0x817/0x1010 [ 347.005806][ T30] ? __mutex_lock+0x602/0x1010 [ 347.010686][ T30] ? linkwatch_event+0xe/0x60 [ 347.015384][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 347.020544][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 347.026557][ T30] ? rcu_is_watching+0x15/0xb0 [ 347.031370][ T30] ? process_scheduled_works+0x976/0x1840 [ 347.037136][ T30] linkwatch_event+0xe/0x60 [ 347.041700][ T30] process_scheduled_works+0xa66/0x1840 [ 347.047288][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 347.053361][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 347.058967][ T30] ? assign_work+0x364/0x3d0 [ 347.064095][ T30] worker_thread+0x870/0xd30 [ 347.069011][ T30] ? __kthread_parkme+0x169/0x1d0 [ 347.074113][ T30] ? __pfx_worker_thread+0x10/0x10 [ 347.079286][ T30] kthread+0x7a9/0x920 [ 347.083383][ T30] ? __pfx_kthread+0x10/0x10 [ 347.087980][ T30] ? __pfx_worker_thread+0x10/0x10 [ 347.093213][ T30] ? __pfx_kthread+0x10/0x10 [ 347.097845][ T30] ? __pfx_kthread+0x10/0x10 [ 347.102536][ T30] ? __pfx_kthread+0x10/0x10 [ 347.107154][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.112409][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 347.117633][ T30] ? __pfx_kthread+0x10/0x10 [ 347.122288][ T30] ret_from_fork+0x4b/0x80 [ 347.126723][ T30] ? __pfx_kthread+0x10/0x10 [ 347.131409][ T30] ret_from_fork_asm+0x1a/0x30 [ 347.136202][ T30] [ 347.139306][ T30] INFO: task kworker/u8:5:1153 blocked for more than 143 seconds. [ 347.147123][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 347.154561][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.163282][ T30] task:kworker/u8:5 state:D stack:23152 pid:1153 tgid:1153 ppid:2 flags:0x00004000 [ 347.173801][ T30] Workqueue: netns cleanup_net [ 347.178611][ T30] Call Trace: [ 347.182001][ T30] [ 347.184955][ T30] __schedule+0x186c/0x4be0 [ 347.189585][ T30] ? schedule+0x90/0x320 [ 347.193869][ T30] ? schedule+0x90/0x320 [ 347.198142][ T30] ? __pfx___schedule+0x10/0x10 [ 347.203067][ T30] ? __pfx_lock_release+0x10/0x10 [ 347.208124][ T30] ? rcu_is_watching+0x15/0xb0 [ 347.213017][ T30] ? kthread_data+0x52/0xd0 [ 347.217548][ T30] ? schedule+0x90/0x320 [ 347.221967][ T30] ? wq_worker_sleeping+0x66/0x240 [ 347.227151][ T30] ? schedule+0x90/0x320 [ 347.231450][ T30] schedule+0x14b/0x320 [ 347.235891][ T30] schedule_preempt_disabled+0x13/0x30 [ 347.241421][ T30] __mutex_lock+0x817/0x1010 [ 347.246075][ T30] ? __mutex_lock+0x602/0x1010 [ 347.250929][ T30] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 347.257471][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 347.262597][ T30] ? __pfx___might_resched+0x10/0x10 [ 347.267912][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 347.274948][ T30] ? rcu_is_watching+0x15/0xb0 [ 347.279827][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 347.286359][ T30] unregister_netdevice_many_notify+0xac2/0x2030 [ 347.292801][ T30] ? rcu_is_watching+0x15/0xb0 [ 347.297662][ T30] ? lock_release+0xbf/0xa30 [ 347.302462][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.308852][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 347.315757][ T30] ? rcu_is_watching+0x15/0xb0 [ 347.320614][ T30] ? __pfx_lock_release+0x10/0x10 [ 347.325686][ T30] unregister_netdevice_queue+0x303/0x370 [ 347.331487][ T30] ? __pfx_up_write+0x10/0x10 [ 347.336202][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 347.342534][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 347.348285][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 347.353988][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 347.359876][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 347.366263][ T30] ? rcu_is_watching+0x15/0xb0 [ 347.371175][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 347.376775][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 347.382427][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 347.388533][ T30] hwsim_exit_net+0x5c1/0x670 [ 347.393263][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 347.398497][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 347.404357][ T30] cleanup_net+0x812/0xd60 [ 347.408814][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 347.413870][ T30] ? rcu_is_watching+0x15/0xb0 [ 347.418674][ T30] ? process_scheduled_works+0x976/0x1840 [ 347.424486][ T30] process_scheduled_works+0xa66/0x1840 [ 347.430140][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 347.436134][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 347.441726][ T30] ? assign_work+0x364/0x3d0 [ 347.446333][ T30] worker_thread+0x870/0xd30 [ 347.451062][ T30] ? __kthread_parkme+0x169/0x1d0 [ 347.456127][ T30] ? __pfx_worker_thread+0x10/0x10 [ 347.461378][ T30] kthread+0x7a9/0x920 [ 347.465476][ T30] ? __pfx_kthread+0x10/0x10 [ 347.470165][ T30] ? __pfx_worker_thread+0x10/0x10 [ 347.475304][ T30] ? __pfx_kthread+0x10/0x10 [ 347.480256][ T30] ? __pfx_kthread+0x10/0x10 [ 347.484876][ T30] ? __pfx_kthread+0x10/0x10 [ 347.489575][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.494801][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 347.500272][ T30] ? __pfx_kthread+0x10/0x10 [ 347.504908][ T30] ret_from_fork+0x4b/0x80 [ 347.509376][ T30] ? __pfx_kthread+0x10/0x10 [ 347.514010][ T30] ret_from_fork_asm+0x1a/0x30 [ 347.518867][ T30] [ 347.521994][ T30] INFO: task kworker/u8:6:2936 blocked for more than 144 seconds. [ 347.530061][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 347.537371][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.546510][ T30] task:kworker/u8:6 state:D stack:21456 pid:2936 tgid:2936 ppid:2 flags:0x00004000 [ 347.557036][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 347.563303][ T30] Call Trace: [ 347.566601][ T30] [ 347.569884][ T30] __schedule+0x186c/0x4be0 [ 347.574422][ T30] ? schedule+0x90/0x320 [ 347.578675][ T30] ? schedule+0x90/0x320 [ 347.583294][ T30] ? __pfx___schedule+0x10/0x10 [ 347.588184][ T30] ? __pfx_lock_release+0x10/0x10 [ 347.593283][ T30] ? rcu_is_watching+0x15/0xb0 [ 347.598077][ T30] ? kthread_data+0x52/0xd0 [ 347.602666][ T30] ? schedule+0x90/0x320 [ 347.606930][ T30] ? wq_worker_sleeping+0x66/0x240 [ 347.612078][ T30] ? schedule+0x90/0x320 [ 347.616368][ T30] schedule+0x14b/0x320 [ 347.620792][ T30] schedule_preempt_disabled+0x13/0x30 [ 347.626287][ T30] __mutex_lock+0x817/0x1010 [ 347.631271][ T30] ? __mutex_lock+0x602/0x1010 [ 347.636112][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 347.641391][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 347.646440][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 347.651717][ T30] addrconf_dad_work+0x10e/0x16a0 [ 347.656773][ T30] ? __pfx_lock_release+0x10/0x10 [ 347.661842][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 347.667324][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.673722][ T30] ? rcu_is_watching+0x15/0xb0 [ 347.678560][ T30] ? process_scheduled_works+0x976/0x1840 [ 347.684613][ T30] process_scheduled_works+0xa66/0x1840 [ 347.690457][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 347.696472][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 347.702180][ T30] ? assign_work+0x364/0x3d0 [ 347.707058][ T30] worker_thread+0x870/0xd30 [ 347.711721][ T30] ? __kthread_parkme+0x169/0x1d0 [ 347.716769][ T30] ? __pfx_worker_thread+0x10/0x10 [ 347.721936][ T30] kthread+0x7a9/0x920 [ 347.726042][ T30] ? __pfx_kthread+0x10/0x10 [ 347.730711][ T30] ? __pfx_worker_thread+0x10/0x10 [ 347.735846][ T30] ? __pfx_kthread+0x10/0x10 [ 347.740495][ T30] ? __pfx_kthread+0x10/0x10 [ 347.745114][ T30] ? __pfx_kthread+0x10/0x10 [ 347.749772][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.755005][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 347.760266][ T30] ? __pfx_kthread+0x10/0x10 [ 347.764878][ T30] ret_from_fork+0x4b/0x80 [ 347.769346][ T30] ? __pfx_kthread+0x10/0x10 [ 347.773960][ T30] ret_from_fork_asm+0x1a/0x30 [ 347.778732][ T30] [ 347.781935][ T30] INFO: task syz-executor:10638 blocked for more than 144 seconds. [ 347.790216][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 347.797540][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.807148][ T30] task:syz-executor state:D stack:21392 pid:10638 tgid:10638 ppid:1 flags:0x00004004 [ 347.817751][ T30] Call Trace: [ 347.821133][ T30] [ 347.824081][ T30] __schedule+0x186c/0x4be0 [ 347.828597][ T30] ? schedule+0x90/0x320 [ 347.832903][ T30] ? schedule+0x90/0x320 [ 347.837175][ T30] ? __pfx___schedule+0x10/0x10 [ 347.842180][ T30] ? __pfx_lock_release+0x10/0x10 [ 347.847229][ T30] ? rcu_is_watching+0x15/0xb0 [ 347.852130][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 347.858093][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 347.864678][ T30] ? schedule+0x90/0x320 [ 347.869046][ T30] schedule+0x14b/0x320 [ 347.873257][ T30] schedule_preempt_disabled+0x13/0x30 [ 347.878760][ T30] __mutex_lock+0x817/0x1010 [ 347.883416][ T30] ? __mutex_lock+0x602/0x1010 [ 347.888404][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 347.894657][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 347.899790][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 347.905808][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 347.911871][ T30] wiphy_register+0x1be5/0x27b0 [ 347.916757][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 347.922040][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 347.927184][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 347.933350][ T30] ieee80211_register_hw+0x354e/0x4240 [ 347.938868][ T30] ? ieee80211_register_hw+0x15f1/0x4240 [ 347.944742][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 347.950612][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 347.956441][ T30] ? __asan_memset+0x23/0x50 [ 347.961106][ T30] ? __hrtimer_init+0x170/0x250 [ 347.965986][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 347.971779][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 347.977873][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 347.983121][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 347.988865][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 347.994772][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 348.001192][ T30] genl_rcv_msg+0xb14/0xec0 [ 348.005727][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.010866][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 348.016087][ T30] ? kasan_save_track+0x51/0x80 [ 348.021063][ T30] ? __sys_sendto+0x363/0x4c0 [ 348.025768][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 348.030853][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 348.036430][ T30] ? __pfx___might_resched+0x10/0x10 [ 348.041788][ T30] netlink_rcv_skb+0x1e3/0x430 [ 348.046588][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.051703][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.057009][ T30] ? lock_release+0xbf/0xa30 [ 348.061687][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 348.067176][ T30] genl_rcv+0x28/0x40 [ 348.071220][ T30] netlink_unicast+0x7f6/0x990 [ 348.076021][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 348.081395][ T30] ? __virt_addr_valid+0x45f/0x530 [ 348.086569][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 348.091906][ T30] ? __check_object_size+0x47a/0x730 [ 348.097242][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 348.102537][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.107891][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 348.112907][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.118221][ T30] __sock_sendmsg+0x221/0x270 [ 348.122963][ T30] __sys_sendto+0x363/0x4c0 [ 348.127515][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 348.132603][ T30] ? __phys_addr+0xba/0x170 [ 348.137133][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.143694][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.150093][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.154906][ T30] __x64_sys_sendto+0xde/0x100 [ 348.159741][ T30] do_syscall_64+0xf3/0x230 [ 348.164268][ T30] ? clear_bhb_loop+0x35/0x90 [ 348.168993][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.174978][ T30] RIP: 0033:0x7ff0cf18ebbc [ 348.179500][ T30] RSP: 002b:00007ffc65d5ce50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 348.188099][ T30] RAX: ffffffffffffffda RBX: 00007ff0cfed4620 RCX: 00007ff0cf18ebbc [ 348.196388][ T30] RDX: 0000000000000024 RSI: 00007ff0cfed4670 RDI: 0000000000000003 [ 348.204535][ T30] RBP: 0000000000000000 R08: 00007ffc65d5cea4 R09: 000000000000000c [ 348.212569][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 348.220620][ T30] R13: 0000000000000000 R14: 00007ff0cfed4670 R15: 0000000000000000 [ 348.228644][ T30] [ 348.231732][ T30] INFO: task syz-executor:10752 blocked for more than 145 seconds. [ 348.239697][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 348.246985][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.255729][ T30] task:syz-executor state:D stack:22128 pid:10752 tgid:10752 ppid:1 flags:0x00004004 [ 348.266133][ T30] Call Trace: [ 348.269490][ T30] [ 348.272442][ T30] __schedule+0x186c/0x4be0 [ 348.276985][ T30] ? schedule+0x90/0x320 [ 348.281374][ T30] ? schedule+0x90/0x320 [ 348.285645][ T30] ? __pfx___schedule+0x10/0x10 [ 348.290587][ T30] ? __pfx_lock_release+0x10/0x10 [ 348.295734][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.300830][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 348.306761][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 348.313194][ T30] ? schedule+0x90/0x320 [ 348.317490][ T30] schedule+0x14b/0x320 [ 348.321721][ T30] schedule_preempt_disabled+0x13/0x30 [ 348.327203][ T30] __mutex_lock+0x817/0x1010 [ 348.331871][ T30] ? __mutex_lock+0x602/0x1010 [ 348.336666][ T30] ? register_netdevice_notifier_net+0x1a/0xa0 [ 348.342912][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 348.347963][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 348.353400][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 348.358616][ T30] ? __raw_spin_lock_init+0x45/0x100 [ 348.363959][ T30] register_netdevice_notifier_net+0x1a/0xa0 [ 348.370001][ T30] nsim_dev_hwstats_init+0xc8/0x3d0 [ 348.375203][ T30] nsim_drv_probe+0x817/0xb80 [ 348.380040][ T30] ? __pfx_nsim_drv_probe+0x10/0x10 [ 348.385264][ T30] ? kernfs_create_link+0x187/0x1f0 [ 348.390519][ T30] ? sysfs_do_create_link_sd+0xdd/0x110 [ 348.396097][ T30] ? driver_sysfs_add+0x1de/0x1f0 [ 348.401454][ T30] ? really_probe+0x148/0xad0 [ 348.406176][ T30] ? __pfx_nsim_bus_probe+0x10/0x10 [ 348.411450][ T30] really_probe+0x2b9/0xad0 [ 348.415987][ T30] __driver_probe_device+0x1a2/0x390 [ 348.421362][ T30] driver_probe_device+0x50/0x430 [ 348.426420][ T30] __device_attach_driver+0x2d6/0x530 [ 348.431871][ T30] bus_for_each_drv+0x24e/0x2e0 [ 348.436742][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 348.442697][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 348.448117][ T30] ? lock_release+0xbf/0xa30 [ 348.452768][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 348.457817][ T30] __device_attach+0x333/0x520 [ 348.462646][ T30] ? __pfx___device_attach+0x10/0x10 [ 348.467958][ T30] bus_probe_device+0x189/0x260 [ 348.472874][ T30] device_add+0x856/0xbf0 [ 348.477336][ T30] new_device_store+0x3f3/0x890 [ 348.482231][ T30] ? __pfx_new_device_store+0x10/0x10 [ 348.487639][ T30] ? __virt_addr_valid+0x45f/0x530 [ 348.492806][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 348.497674][ T30] ? bus_attr_store+0x4f/0xb0 [ 348.503156][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 348.508382][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 348.513750][ T30] vfs_write+0xaeb/0xd30 [ 348.518020][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 348.523901][ T30] ? __pfx_vfs_write+0x10/0x10 [ 348.528690][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 348.533606][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 348.538993][ T30] ksys_write+0x18f/0x2b0 [ 348.543418][ T30] ? __pfx_ksys_write+0x10/0x10 [ 348.548296][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.553143][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.557954][ T30] do_syscall_64+0xf3/0x230 [ 348.562507][ T30] ? clear_bhb_loop+0x35/0x90 [ 348.567202][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.573131][ T30] RIP: 0033:0x7f9ae198b7df [ 348.577560][ T30] RSP: 002b:00007ffe1ba09450 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 348.586016][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f9ae198b7df [ 348.594030][ T30] RDX: 0000000000000003 RSI: 00007ffe1ba094a0 RDI: 0000000000000005 [ 348.602055][ T30] RBP: 00007f9ae1a0f4d1 R08: 0000000000000000 R09: 00007ffe1ba092a7 [ 348.610496][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 348.618503][ T30] R13: 00007ffe1ba094a0 R14: 00007f9ae26d4620 R15: 0000000000000003 [ 348.626532][ T30] [ 348.629630][ T30] INFO: task syz.2.1236:10782 blocked for more than 145 seconds. [ 348.637365][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 348.645246][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.653998][ T30] task:syz.2.1236 state:D stack:22896 pid:10782 tgid:10781 ppid:5833 flags:0x00000004 [ 348.664484][ T30] Call Trace: [ 348.667767][ T30] [ 348.670733][ T30] __schedule+0x186c/0x4be0 [ 348.675269][ T30] ? schedule+0x90/0x320 [ 348.679570][ T30] ? schedule+0x90/0x320 [ 348.683837][ T30] ? __pfx___schedule+0x10/0x10 [ 348.688692][ T30] ? __pfx_lock_release+0x10/0x10 [ 348.693759][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.698549][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 348.704514][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 348.711099][ T30] ? schedule+0x90/0x320 [ 348.715367][ T30] schedule+0x14b/0x320 [ 348.719589][ T30] schedule_preempt_disabled+0x13/0x30 [ 348.725072][ T30] __mutex_lock+0x817/0x1010 [ 348.729720][ T30] ? __mutex_lock+0x602/0x1010 [ 348.734516][ T30] ? rtnl_dumpit+0x99/0x200 [ 348.739019][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 348.744172][ T30] ? __build_skb_around+0x245/0x3d0 [ 348.749445][ T30] ? __alloc_skb+0x28f/0x440 [ 348.754058][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 348.758991][ T30] ? __pfx_tc_dump_tclass+0x10/0x10 [ 348.764258][ T30] rtnl_dumpit+0x99/0x200 [ 348.768620][ T30] netlink_dump+0x64d/0xe10 [ 348.773190][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 348.778233][ T30] ? __netlink_lookup+0x780/0x890 [ 348.783355][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 348.788399][ T30] ? stack_trace_save+0x118/0x1d0 [ 348.793489][ T30] __netlink_dump_start+0x5a2/0x790 [ 348.798706][ T30] ? __pfx_tc_dump_tclass+0x10/0x10 [ 348.803969][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 348.809216][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.814755][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 348.819816][ T30] ? __pfx_tc_dump_tclass+0x10/0x10 [ 348.825118][ T30] ? lock_acquire+0xe3/0x550 [ 348.829861][ T30] netlink_rcv_skb+0x1e3/0x430 [ 348.834644][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.840150][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.845477][ T30] ? net_generic+0x1f/0x240 [ 348.850092][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.855315][ T30] netlink_unicast+0x7f6/0x990 [ 348.860166][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 348.865468][ T30] ? __virt_addr_valid+0x45f/0x530 [ 348.870642][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 348.875705][ T30] ? __check_object_size+0x47a/0x730 [ 348.881086][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 348.885892][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.891261][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 348.896229][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.901574][ T30] __sock_sendmsg+0x221/0x270 [ 348.906284][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 348.911396][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.916702][ T30] ? __fget_files+0x2a/0x410 [ 348.921362][ T30] ? __fget_files+0x2a/0x410 [ 348.925978][ T30] __sys_sendmsg+0x269/0x350 [ 348.930644][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.935794][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.942192][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.947022][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.951864][ T30] do_syscall_64+0xf3/0x230 [ 348.956395][ T30] ? clear_bhb_loop+0x35/0x90 [ 348.961116][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.967022][ T30] RIP: 0033:0x7fc64ff8cd29 [ 348.971500][ T30] RSP: 002b:00007fc650d2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.980152][ T30] RAX: ffffffffffffffda RBX: 00007fc6501a5fa0 RCX: 00007fc64ff8cd29 [ 348.988155][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000c [ 348.996677][ T30] RBP: 00007fc65000e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.004794][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.012916][ T30] R13: 0000000000000000 R14: 00007fc6501a5fa0 R15: 00007ffe6714dd18 [ 349.021577][ T30] [ 349.024685][ T30] INFO: task syz.1.1237:10784 blocked for more than 145 seconds. [ 349.032534][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 349.039951][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.048629][ T30] task:syz.1.1237 state:D stack:24400 pid:10784 tgid:10783 ppid:5836 flags:0x00000004 [ 349.058932][ T30] Call Trace: [ 349.062277][ T30] [ 349.065228][ T30] __schedule+0x186c/0x4be0 [ 349.069806][ T30] ? schedule+0x90/0x320 [ 349.074076][ T30] ? schedule+0x90/0x320 [ 349.078325][ T30] ? __pfx___schedule+0x10/0x10 [ 349.083243][ T30] ? __pfx_lock_release+0x10/0x10 [ 349.088291][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.093126][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 349.099050][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.105465][ T30] ? schedule+0x90/0x320 [ 349.109759][ T30] schedule+0x14b/0x320 [ 349.113939][ T30] schedule_preempt_disabled+0x13/0x30 [ 349.119775][ T30] __mutex_lock+0x817/0x1010 [ 349.124411][ T30] ? __mutex_lock+0x602/0x1010 [ 349.129234][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 349.134378][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 349.139914][ T30] ? bpf_lsm_capable+0x9/0x10 [ 349.144629][ T30] ? security_capable+0x7e/0x2d0 [ 349.149747][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 349.154718][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 349.159905][ T30] ? lock_release+0xbf/0xa30 [ 349.164554][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.170081][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 349.175123][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.179974][ T30] ? lock_acquire+0xe3/0x550 [ 349.184590][ T30] netlink_rcv_skb+0x1e3/0x430 [ 349.189401][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.194887][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.200240][ T30] ? net_generic+0x1f/0x240 [ 349.204769][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.210035][ T30] netlink_unicast+0x7f6/0x990 [ 349.214830][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 349.220544][ T30] ? __virt_addr_valid+0x45f/0x530 [ 349.225714][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 349.230799][ T30] ? __check_object_size+0x47a/0x730 [ 349.236112][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 349.240953][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.246268][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 349.251282][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.256600][ T30] __sock_sendmsg+0x221/0x270 [ 349.261354][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 349.266153][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.271507][ T30] ? __fget_files+0x2a/0x410 [ 349.276124][ T30] ? __fget_files+0x2a/0x410 [ 349.280786][ T30] __sys_sendmmsg+0x36a/0x720 [ 349.285488][ T30] ? __pfx___sys_sendmmsg+0x10/0x10 [ 349.290736][ T30] ? futex_hash+0x1e/0x1f0 [ 349.295183][ T30] ? futex_wait+0x285/0x360 [ 349.299877][ T30] ? __pfx_futex_wait+0x10/0x10 [ 349.304764][ T30] ? lock_release+0xbf/0xa30 [ 349.309509][ T30] ? __fget_files+0x395/0x410 [ 349.314191][ T30] ? __fget_files+0x2a/0x410 [ 349.318790][ T30] ? __pfx_lock_release+0x10/0x10 [ 349.324129][ T30] ? do_futex+0x33b/0x560 [ 349.328502][ T30] ? __fget_files+0x395/0x410 [ 349.333256][ T30] ? __pfx___sys_bpf+0x10/0x10 [ 349.338038][ T30] ? __fget_files+0x2a/0x410 [ 349.342797][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.349148][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.353993][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.360400][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.365255][ T30] __x64_sys_sendmmsg+0xa0/0xb0 [ 349.370283][ T30] do_syscall_64+0xf3/0x230 [ 349.374817][ T30] ? clear_bhb_loop+0x35/0x90 [ 349.379651][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.385584][ T30] RIP: 0033:0x7f8ded38cd29 [ 349.390064][ T30] RSP: 002b:00007f8dee18d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 349.398510][ T30] RAX: ffffffffffffffda RBX: 00007f8ded5a5fa0 RCX: 00007f8ded38cd29 [ 349.406545][ T30] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 349.414565][ T30] RBP: 00007f8ded40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.422864][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.430888][ T30] R13: 0000000000000000 R14: 00007f8ded5a5fa0 R15: 00007ffe613e06b8 [ 349.438900][ T30] [ 349.442004][ T30] INFO: task syz.1.1237:10786 blocked for more than 146 seconds. [ 349.449841][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 349.457115][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.465856][ T30] task:syz.1.1237 state:D stack:28152 pid:10786 tgid:10783 ppid:5836 flags:0x00000004 [ 349.476133][ T30] Call Trace: [ 349.479462][ T30] [ 349.482416][ T30] __schedule+0x186c/0x4be0 [ 349.486945][ T30] ? schedule+0x90/0x320 [ 349.491290][ T30] ? schedule+0x90/0x320 [ 349.495566][ T30] ? __pfx___schedule+0x10/0x10 [ 349.500474][ T30] ? __pfx_lock_release+0x10/0x10 [ 349.505527][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.510367][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 349.516318][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.522721][ T30] ? schedule+0x90/0x320 [ 349.527289][ T30] schedule+0x14b/0x320 [ 349.531534][ T30] schedule_preempt_disabled+0x13/0x30 [ 349.537039][ T30] __mutex_lock+0x817/0x1010 [ 349.541702][ T30] ? __mutex_lock+0x602/0x1010 [ 349.546498][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 349.551666][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 349.556720][ T30] ? bpf_lsm_capable+0x9/0x10 [ 349.561480][ T30] ? security_capable+0x7e/0x2d0 [ 349.566443][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 349.571446][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 349.576603][ T30] ? lock_release+0xbf/0xa30 [ 349.581252][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.586738][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 349.591840][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.596658][ T30] ? lock_acquire+0xe3/0x550 [ 349.601428][ T30] netlink_rcv_skb+0x1e3/0x430 [ 349.606222][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.611747][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.617071][ T30] ? net_generic+0x1f/0x240 [ 349.621662][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.626894][ T30] netlink_unicast+0x7f6/0x990 [ 349.632036][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 349.637349][ T30] ? __virt_addr_valid+0x45f/0x530 [ 349.642527][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 349.647578][ T30] ? __check_object_size+0x47a/0x730 [ 349.652976][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 349.657776][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.663129][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 349.668091][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.673429][ T30] __sock_sendmsg+0x221/0x270 [ 349.678132][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 349.682954][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.688290][ T30] ? __fget_files+0x2a/0x410 [ 349.692950][ T30] ? __fget_files+0x2a/0x410 [ 349.697593][ T30] __sys_sendmsg+0x269/0x350 [ 349.702706][ T30] ? __pfx_futex_wake+0x10/0x10 [ 349.707568][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.712720][ T30] ? lock_release+0xbf/0xa30 [ 349.717347][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.723731][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.728525][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.733641][ T30] do_syscall_64+0xf3/0x230 [ 349.738171][ T30] ? clear_bhb_loop+0x35/0x90 [ 349.742918][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.748843][ T30] RIP: 0033:0x7f8ded38cd29 [ 349.753321][ T30] RSP: 002b:00007f8dee16c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.761821][ T30] RAX: ffffffffffffffda RBX: 00007f8ded5a6080 RCX: 00007f8ded38cd29 [ 349.769885][ T30] RDX: 0000000004008894 RSI: 00000000200001c0 RDI: 0000000000000005 [ 349.777893][ T30] RBP: 00007f8ded40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.786073][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.794188][ T30] R13: 0000000000000000 R14: 00007f8ded5a6080 R15: 00007ffe613e06b8 [ 349.802229][ T30] [ 349.805276][ T30] INFO: task syz-executor:10787 blocked for more than 146 seconds. [ 349.813240][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 349.820579][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.829365][ T30] task:syz-executor state:D stack:26768 pid:10787 tgid:10787 ppid:1 flags:0x00000004 [ 349.840076][ T30] Call Trace: [ 349.843379][ T30] [ 349.846348][ T30] __schedule+0x186c/0x4be0 [ 349.850905][ T30] ? schedule+0x90/0x320 [ 349.855174][ T30] ? schedule+0x90/0x320 [ 349.859480][ T30] ? __pfx___schedule+0x10/0x10 [ 349.864361][ T30] ? __pfx_lock_release+0x10/0x10 [ 349.869457][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.874248][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 349.880226][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.886610][ T30] ? schedule+0x90/0x320 [ 349.890901][ T30] schedule+0x14b/0x320 [ 349.895116][ T30] schedule_preempt_disabled+0x13/0x30 [ 349.900635][ T30] __mutex_lock+0x817/0x1010 [ 349.905254][ T30] ? __mutex_lock+0x602/0x1010 [ 349.910099][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 349.915256][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 349.920390][ T30] ? __nla_parse+0x40/0x60 [ 349.924832][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 349.929844][ T30] ? lock_release+0xbf/0xa30 [ 349.934467][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 349.939884][ T30] ? stack_trace_save+0x118/0x1d0 [ 349.944951][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 349.950413][ T30] ? bpf_lsm_capable+0x9/0x10 [ 349.955118][ T30] ? security_capable+0x7e/0x2d0 [ 349.960127][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 349.965533][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 349.970562][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 349.975699][ T30] ? lock_release+0xbf/0xa30 [ 349.980335][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.985846][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 349.990944][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.995732][ T30] ? lock_acquire+0xe3/0x550 [ 350.000472][ T30] netlink_rcv_skb+0x1e3/0x430 [ 350.005267][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.010789][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.016098][ T30] ? net_generic+0x1f/0x240 [ 350.020870][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.026098][ T30] netlink_unicast+0x7f6/0x990 [ 350.030920][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 350.036221][ T30] ? __virt_addr_valid+0x45f/0x530 [ 350.041684][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 350.046753][ T30] ? __check_object_size+0x47a/0x730 [ 350.052120][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 350.056946][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.062300][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 350.067346][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.072699][ T30] __sock_sendmsg+0x221/0x270 [ 350.077430][ T30] __sys_sendto+0x363/0x4c0 [ 350.082004][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 350.087071][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 350.092181][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.098534][ T30] ? __pfx___up_read+0x10/0x10 [ 350.103415][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.109802][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.114573][ T30] __x64_sys_sendto+0xde/0x100 [ 350.119384][ T30] do_syscall_64+0xf3/0x230 [ 350.123905][ T30] ? clear_bhb_loop+0x35/0x90 [ 350.128581][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.134522][ T30] RIP: 0033:0x7f47aa58ebbc [ 350.138952][ T30] RSP: 002b:00007fff8cca0580 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 350.147686][ T30] RAX: ffffffffffffffda RBX: 00007f47ab2d4620 RCX: 00007f47aa58ebbc [ 350.155711][ T30] RDX: 0000000000000028 RSI: 00007f47ab2d4670 RDI: 0000000000000003 [ 350.163760][ T30] RBP: 0000000000000000 R08: 00007fff8cca05d4 R09: 000000000000000c [ 350.171779][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 350.180282][ T30] R13: 0000000000000000 R14: 00007f47ab2d4670 R15: 0000000000000000 [ 350.188372][ T30] [ 350.191469][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 350.200556][ T30] INFO: task syz-executor:10792 blocked for more than 146 seconds. [ 350.208468][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 350.215834][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.224562][ T30] task:syz-executor state:D stack:26768 pid:10792 tgid:10792 ppid:1 flags:0x00000004 [ 350.234791][ T30] Call Trace: [ 350.238080][ T30] [ 350.241082][ T30] __schedule+0x186c/0x4be0 [ 350.245829][ T30] ? schedule+0x90/0x320 [ 350.250143][ T30] ? schedule+0x90/0x320 [ 350.254407][ T30] ? __pfx___schedule+0x10/0x10 [ 350.259320][ T30] ? __pfx_lock_release+0x10/0x10 [ 350.264366][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.269147][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 350.275125][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 350.281644][ T30] ? schedule+0x90/0x320 [ 350.285925][ T30] schedule+0x14b/0x320 [ 350.290179][ T30] schedule_preempt_disabled+0x13/0x30 [ 350.295678][ T30] __mutex_lock+0x817/0x1010 [ 350.300347][ T30] ? __mutex_lock+0x602/0x1010 [ 350.305145][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 350.310324][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 350.315414][ T30] ? __nla_parse+0x40/0x60 [ 350.319896][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 350.324868][ T30] ? lock_release+0xbf/0xa30 [ 350.329522][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 350.334580][ T30] ? stack_trace_save+0x118/0x1d0 [ 350.339839][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 350.345445][ T30] ? bpf_lsm_capable+0x9/0x10 [ 350.350217][ T30] ? security_capable+0x7e/0x2d0 [ 350.355179][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 350.360590][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 350.365550][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 350.370757][ T30] ? lock_release+0xbf/0xa30 [ 350.375373][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.380905][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 350.385951][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.390784][ T30] ? lock_acquire+0xe3/0x550 [ 350.395435][ T30] netlink_rcv_skb+0x1e3/0x430 [ 350.400254][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.405746][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.411207][ T30] ? net_generic+0x1f/0x240 [ 350.415751][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.421022][ T30] netlink_unicast+0x7f6/0x990 [ 350.425811][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 350.431200][ T30] ? __virt_addr_valid+0x45f/0x530 [ 350.436346][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 350.441448][ T30] ? __check_object_size+0x47a/0x730 [ 350.447076][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 350.451967][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.457328][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 350.462346][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.467668][ T30] __sock_sendmsg+0x221/0x270 [ 350.472423][ T30] __sys_sendto+0x363/0x4c0 [ 350.476948][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 350.482028][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 350.487083][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.493467][ T30] ? __pfx___up_read+0x10/0x10 [ 350.498253][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.504665][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.509502][ T30] __x64_sys_sendto+0xde/0x100 [ 350.514291][ T30] do_syscall_64+0xf3/0x230 [ 350.518816][ T30] ? clear_bhb_loop+0x35/0x90 [ 350.523589][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.529659][ T30] RIP: 0033:0x7f04d438ebbc [ 350.534089][ T30] RSP: 002b:00007ffc3a8f7130 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 350.542554][ T30] RAX: ffffffffffffffda RBX: 00007f04d50d4620 RCX: 00007f04d438ebbc [ 350.550904][ T30] RDX: 0000000000000028 RSI: 00007f04d50d4670 RDI: 0000000000000003 [ 350.558914][ T30] RBP: 0000000000000000 R08: 00007ffc3a8f7184 R09: 000000000000000c [ 350.566957][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 350.574992][ T30] R13: 0000000000000000 R14: 00007f04d50d4670 R15: 0000000000000000 [ 350.583039][ T30] [ 350.586082][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 350.595174][ T30] INFO: task syz-executor:10794 blocked for more than 147 seconds. [ 350.603136][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 350.610477][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.619156][ T30] task:syz-executor state:D stack:26768 pid:10794 tgid:10794 ppid:1 flags:0x00000004 [ 350.629512][ T30] Call Trace: [ 350.632807][ T30] [ 350.635741][ T30] __schedule+0x186c/0x4be0 [ 350.640301][ T30] ? schedule+0x90/0x320 [ 350.644574][ T30] ? schedule+0x90/0x320 [ 350.648855][ T30] ? __pfx___schedule+0x10/0x10 [ 350.654132][ T30] ? __pfx_lock_release+0x10/0x10 [ 350.659240][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.664035][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 350.670058][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 350.676531][ T30] ? schedule+0x90/0x320 [ 350.680925][ T30] schedule+0x14b/0x320 [ 350.685106][ T30] schedule_preempt_disabled+0x13/0x30 [ 350.690658][ T30] __mutex_lock+0x817/0x1010 [ 350.695280][ T30] ? __mutex_lock+0x602/0x1010 [ 350.700134][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 350.705375][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 350.710520][ T30] ? __nla_parse+0x40/0x60 [ 350.714979][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 350.719998][ T30] ? lock_release+0xbf/0xa30 [ 350.724616][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 350.729727][ T30] ? stack_trace_save+0x118/0x1d0 [ 350.734800][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 350.740343][ T30] ? bpf_lsm_capable+0x9/0x10 [ 350.745041][ T30] ? security_capable+0x7e/0x2d0 [ 350.750079][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 350.755664][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 350.760680][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 350.765851][ T30] ? lock_release+0xbf/0xa30 [ 350.770529][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.776013][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 350.781084][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.785875][ T30] ? lock_acquire+0xe3/0x550 [ 350.790561][ T30] netlink_rcv_skb+0x1e3/0x430 [ 350.795347][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.800871][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.806179][ T30] ? net_generic+0x1f/0x240 [ 350.810770][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.816013][ T30] netlink_unicast+0x7f6/0x990 [ 350.820898][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 350.826208][ T30] ? __virt_addr_valid+0x45f/0x530 [ 350.831435][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 350.836483][ T30] ? __check_object_size+0x47a/0x730 [ 350.841841][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 350.846659][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.852038][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 350.857211][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.862590][ T30] __sock_sendmsg+0x221/0x270 [ 350.867297][ T30] __sys_sendto+0x363/0x4c0 [ 350.871896][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 350.876944][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 350.882052][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.888400][ T30] ? __pfx___up_read+0x10/0x10 [ 350.893248][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.899691][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.904552][ T30] __x64_sys_sendto+0xde/0x100 [ 350.909420][ T30] do_syscall_64+0xf3/0x230 [ 350.913943][ T30] ? clear_bhb_loop+0x35/0x90 [ 350.918620][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.924582][ T30] RIP: 0033:0x7fb0fad8ebbc [ 350.929025][ T30] RSP: 002b:00007ffe2c648df0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 350.937537][ T30] RAX: ffffffffffffffda RBX: 00007fb0fbad4620 RCX: 00007fb0fad8ebbc [ 350.945590][ T30] RDX: 0000000000000028 RSI: 00007fb0fbad4670 RDI: 0000000000000003 [ 350.953680][ T30] RBP: 0000000000000000 R08: 00007ffe2c648e44 R09: 000000000000000c [ 350.961987][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 350.970080][ T30] R13: 0000000000000000 R14: 00007fb0fbad4670 R15: 0000000000000000 [ 350.978071][ T30] [ 350.981153][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 350.990284][ T30] INFO: lockdep is turned off. [ 350.995095][ T30] NMI backtrace for cpu 1 [ 350.995107][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 350.995123][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 350.995133][ T30] Call Trace: [ 350.995139][ T30] [ 350.995145][ T30] dump_stack_lvl+0x241/0x360 [ 350.995172][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.995194][ T30] ? __pfx__printk+0x10/0x10 [ 350.995214][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 350.995238][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 350.995261][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 350.995278][ T30] ? _printk+0xd5/0x120 [ 350.995297][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 350.995317][ T30] ? __pfx__printk+0x10/0x10 [ 350.995338][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 350.995354][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 350.995375][ T30] watchdog+0xff6/0x1040 [ 350.995394][ T30] ? watchdog+0x1ea/0x1040 [ 350.995415][ T30] ? __pfx_watchdog+0x10/0x10 [ 350.995432][ T30] kthread+0x7a9/0x920 [ 350.995451][ T30] ? __pfx_kthread+0x10/0x10 [ 350.995470][ T30] ? __pfx_watchdog+0x10/0x10 [ 350.995488][ T30] ? __pfx_kthread+0x10/0x10 [ 350.995506][ T30] ? __pfx_kthread+0x10/0x10 [ 350.995526][ T30] ? __pfx_kthread+0x10/0x10 [ 350.995545][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.995564][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 350.995586][ T30] ? __pfx_kthread+0x10/0x10 [ 350.995605][ T30] ret_from_fork+0x4b/0x80 [ 350.995621][ T30] ? __pfx_kthread+0x10/0x10 [ 350.995640][ T30] ret_from_fork_asm+0x1a/0x30 [ 350.995661][ T30] [ 350.995666][ T30] Sending NMI from CPU 1 to CPUs 0: [ 351.162808][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 351.163941][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 351.178984][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 351.189142][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 351.199208][ T30] Call Trace: [ 351.202507][ T30] [ 351.205437][ T30] dump_stack_lvl+0x241/0x360 [ 351.210129][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.215333][ T30] ? __pfx__printk+0x10/0x10 [ 351.219940][ T30] ? vscnprintf+0x5d/0x90 [ 351.224298][ T30] panic+0x349/0x880 [ 351.228227][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 351.234404][ T30] ? __pfx_panic+0x10/0x10 [ 351.238832][ T30] ? __pfx_delay_tsc+0x10/0x10 [ 351.243607][ T30] ? nmi_trigger_cpumask_backtrace+0x1d4/0x320 [ 351.249788][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 351.255178][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 351.261348][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 351.267518][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 351.273690][ T30] watchdog+0x1035/0x1040 [ 351.278034][ T30] ? watchdog+0x1ea/0x1040 [ 351.282461][ T30] ? __pfx_watchdog+0x10/0x10 [ 351.287142][ T30] kthread+0x7a9/0x920 [ 351.291231][ T30] ? __pfx_kthread+0x10/0x10 [ 351.295841][ T30] ? __pfx_watchdog+0x10/0x10 [ 351.300562][ T30] ? __pfx_kthread+0x10/0x10 [ 351.305165][ T30] ? __pfx_kthread+0x10/0x10 [ 351.309806][ T30] ? __pfx_kthread+0x10/0x10 [ 351.314409][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.319615][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 351.324822][ T30] ? __pfx_kthread+0x10/0x10 [ 351.329423][ T30] ret_from_fork+0x4b/0x80 [ 351.333843][ T30] ? __pfx_kthread+0x10/0x10 [ 351.338437][ T30] ret_from_fork_asm+0x1a/0x30 [ 351.343208][ T30] [ 351.346569][ T30] Kernel Offset: disabled [ 351.350895][ T30] Rebooting in 86400 seconds..