last executing test programs: 2.226368205s ago: executing program 2 (id=913): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x81, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000001180)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/77, 0x4d}, 0x10000) socket$kcm(0x10, 0x0, 0x0) 1.992909477s ago: executing program 3 (id=915): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611008000000000063019c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000000000010000) 1.991079554s ago: executing program 1 (id=917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "9c7737805e704934", "c91b378acc7080430ee3b79d1bb782ba", '5Dw0', "60ef9166a83bd173"}, 0x28) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, 0x41424344}, 0xf3e, 0x8) write$tun(r1, &(0x7f00000006c0)={@void, @val={0x2, 0x80, 0x7, 0x5e, 0x7fff, 0x200}, @ipv6=@tcp={0x0, 0x6, "7997fc", 0x593, 0x6, 0x1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x32, 0x36, '\x00', [@generic={0xc, 0xe2, "6ed7c3db5e75420199ccc28495ccf756712531054dff3fc3ee4254fbde25041bdd2ed06e7d4487eacd4182f324677cf818e8000c7379bc8c27061b329f0fad2827020138cf45b25a5c281e1064be17401bf272d1977cdc7e71044d3be45fa53192c88a9bb963d0fdd159c339aeb296d14f899c007b520a43f1558cc2e163852cab33908a052dfd1c31d1634437eb6b2d00b3f59a29b7effb8f330253248dfc1aec19769994874d90a93bba11fa38bb5195be06e34a742fb5a3e22255f681d5ffbfbe0c33d5cf1fcd4a77ca3749358d06cc338c5650b87e9c56154e5a85c3f752ebfc"}, @pad1, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x2, 0x9c, "926580fc4861b5f1e7b6405f3f4528f83a06e92b69f6ec9fc3c2391d48bbc4e902e688433b7e4531449cbe13707bf2d11193f540eae562e6108b6a9e80b6f9cd131f2172f9cd85d4708e96d3387ac0f8bb5f7a3e30f9e3978ccba5f790e1b9d6ed06c47961fe060c02ad7a1ca753e0bf5144852fb6aaf14b29dff1ac226033ffddb7ac77298e8b876c287b209a049d232abda1a35112bc385c590d08"}, @pad1, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @private0}]}, @dstopts={0x5c, 0x20, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x6, 0xd9, "75c4749fcc2ac06cb1dea7873b617b819a6c8203ad59cc69b26ce6aee8d29f7955309146da0f1957e81239bd4be73f8dcbe4f4bd1706f96ebbef5e23cf4f08c25eec54becd58a9e79b7d106292d11e010239436fa4d3193ab0e17698ec05a1bf884c11d18ab3040104ed0ba4df91ff3e519d96f09cf7f08b2af299faf22ee71fefffaee62c4389e126e4887563e291219f6f9255b24814e450b4b49adc516f50a6036dd2e353a2b08b59465854783133b3c81be716cf01a5406354bac5ce7af94d6ff1aa4a014160abd0dea586a36f6c35ee9a5690c52946f0"}, @pad1, @ra={0x5, 0x2, 0xfffd}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0xc, 0xee, [0x6, 0x3]}}, @pad1]}, @hopopts={0x67, 0x32, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @generic={0x3, 0xfb, "daf1177ee3bd7f4d2f92412cb3e7940c0b9f9a8020df2b30ade95852dce88695137ee780416a421caa0d9f36d83801b526606b424dc042b47fb6271974650e0fa6a8618474713bcc3d91ffe562528f2b35d709633def4ae372fa17039eb8382d16d8048f6de0c9535b8ab003f6ca8ee0759d15d55e2b695330e882676ec25f26a10ecadf83bea809dd6f463d674b99d180deb4bb4eed4ffd10baaba03a9f14a86eefbe31bce5392bf3c7d88c899915f04624430db82862f7e62b49b7a1d65ae597ce25ea775d2162d2a49d647af632063f6d695a4f4c24a384203a9796c6afdf5522be075acff9f668c6679be09623001a76196cae676f6027ae5e"}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x8f, 0x7b, "86541c1c74f5b5a10d7a21f180a4fe651040a115dc262f88f0332f066b3db2e567e5b4a52615a158eb27124fe9e4e19c6373315633cf1830d23aa3f4dcff0431d33e83d31a472daf34ddecaae4193a46ded32a97b7dbb7bc0a58fd4f59a800d53e328e5da81fdf9f8737b2659547fcea35575ac56a5b2cdb579925"}, @ra={0x5, 0x2, 0x200}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x91, 0x48, 0x5, [@ipv4={'\x00', '\xff\xff', @remote}]}], {{0x4e23, 0x4e24, r2, 0x41424344, 0x0, 0x0, 0x10, 0x1, 0x19a0, 0x0, 0x8, {[@md5sig={0x13, 0x12, "50af1ebb1412cad6c8355d303cb00caf"}, @mss={0x2, 0x4, 0x6}, @exp_fastopen={0xfe, 0x14, 0xf989, "b3a4943a1eaae0c49e822522eaf2890b"}]}}, {"867acb546b62a47fdee19f6dd27e62610722badf98989b3fd1286a65b47a31152acc34e320c6e2cdeeb6ca784b1a5b103c97771aeeb3e8cf1931d2ce1875eb992aea2f810d7feb11cc21daeadfca3137fc96e83b06e6a7ac85e85cd4450c4429614ae1a4e2bf04cc1f34ebea7eba30aca8ed1d0b19db6aa97fb7c6862c66747a410973f9e3d686d3342a9fb1827315288c48d94b9afbf789f150df097575f90f2e2aaf1442c7c9026181ac694d04a3b2730b6efce5766ce793fe46af9657ae26390fd6091db78d99814de0"}}}}}, 0x5c5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x9}, {0x10, 0xffff}, {0x9}}}, 0x24}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) close(0x3) 1.815933237s ago: executing program 3 (id=918): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x48000000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000)=0x2, 0xfe37) sendmsg$802154_dgram(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, @short}, 0x14, &(0x7f00000001c0)={0x0}}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000180000000a000000080000000100000fffffffff01000000030000000300000000000000000000002e00"], 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x1a67, 0x1c) sendmmsg$inet(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="f4", 0x1}], 0x1}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r5], 0x50}, 0x1, 0xba01}, 0x20) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r6, &(0x7f00000006c0), 0x24, 0x2, 0x0) bind$can_raw(r6, &(0x7f00000002c0), 0x10) sendmsg$can_raw(r6, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) read(r6, &(0x7f0000000040)=""/244, 0xf4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in=@rand_addr=0x64010101}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.786198347s ago: executing program 0 (id=919): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 1.719595172s ago: executing program 4 (id=920): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c40a000000000000611148000000000006000000feffffff9500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 1.648042544s ago: executing program 0 (id=921): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=r0, @ANYBLOB="00000000140001"], 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x6, 0xffff}, {0x0, 0x13}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000000301010100000000000600000a0000000c001980060001"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2569, @void, @value}, 0x94) 1.646542103s ago: executing program 1 (id=922): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x405}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}]}, 0x48}}, 0x0) 1.503992066s ago: executing program 4 (id=923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0xfec0ffff00000000}}]}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0) 1.503762872s ago: executing program 1 (id=924): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000200)={0x1, 'sit0\x00', {}, 0x3}) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.400860664s ago: executing program 1 (id=925): socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x4) 1.391747762s ago: executing program 0 (id=926): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000140001ed13bd7000000000000a84"], 0x58}}, 0x0) unshare(0x22020600) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000540)={0x1f, @none}, 0x8) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="03000000047b7900040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000180)={0x21, @empty, 0x4e20, 0x4, 'none\x00', 0x0, 0x1, 0x263}, 0x2c) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r5 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) write(r5, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r6 = epoll_create1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r6, &(0x7f0000000000)={0xa0000001}) 1.29605255s ago: executing program 4 (id=927): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001500)={'veth1_to_hsr\x00', 0x2000}) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4101, 0x1005}], 0x1}, 0x40000040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x8e, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000000740)}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, 0x0, &(0x7f00000005c0)=""/255}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x9, 0xc, 0x14, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x24008000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r6, 0x1, 0x9, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1374}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xcb57}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) 1.289213649s ago: executing program 2 (id=928): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd48, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) (async, rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) 1.157965712s ago: executing program 4 (id=929): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000480)={0x28, 0x0, 0xffffffff, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES64=r2], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x18, &(0x7f0000000000)=""/24, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000380), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000004000000041000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000a6fbd248", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = socket$kcm(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x4008804) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000380), &(0x7f00000003c0)=0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x3, 0x18}, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000d00)) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d8c795dd0ab0", 0x31}], 0x1}, 0x8400) sendmsg$inet(r6, &(0x7f0000000c00)={&(0x7f0000000540)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="6e4602e2", 0x4}], 0x1}, 0x0) syz_emit_ethernet(0x8f, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) 1.079990786s ago: executing program 1 (id=930): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002380), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="d01be284302511c0048e22622dc6315ba6f688aee92fb57fa511c03947097bcb660d907077b04acf456034c09ea14e21316a4862360072adb916088116544784a6808ae40eb8ae7c43099408a85c2156598dc03b476b3472002949f87544392febe7461db1519293adc5f39ef2261454946a571b0e34db69868d0a61dece24fea6ae3cd95ae266081633b89546bcad079f942d45d23e4278cdd69dae4c65ebab6c7734283208de99675cc0a76bf57ab9b66f2748953e27a35eda7998c4c4a2e8e7121f53b7c175fe97ab67261f8374a230389ba5f16c0864bf07aeafdf3738bc9595c2d22d8c1c10045e02b0bcdee2ff13684f7cd7bfc9"}, {&(0x7f0000000100)="67dc5c09e8dac3f1df1cbfaef1918ae6cd305e22"}, {&(0x7f0000000700)="04d208b57cd58b9fcccba5361f683a10cffce75e88d014ec2e5804d6acb722b9913d8624beb37b10d1d3568aa65119dd196fc51328073e0afef0461086d120990179b41ef43d71fddf845eb6fff5cca01e7f1143f980e29f3b18812a7f2425e428c758a5ff1e335f23c58c22355a0a632889cb4010f7f326c4dc011133945db2b805c3c2c4ed0b23d50df486effa15355f1d6b562f4bd58319d2adb913f2ac93add0e273"}, {&(0x7f0000000180)="fb236d0df6b1551f9c4275a6d20c3b490211a0"}, {&(0x7f0000000240)="9a2f73ce89deeac939ad2af10b79a44f1199110b3322bd82cb9b3387fa8f82708c"}, {&(0x7f0000000540)="cb9f48914b4dbf00fa991d61f17b4b293561866d3c9bc5db6b6319f3072ea4a9943f2c26a6093db0a5bf4faddd3b2a6ad3c11eb0ade63e603346158227864a952ead9a"}], 0x0, &(0x7f0000000940)=[@cred, @cred], 0x0, 0x20000001}}, {{&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="7d923e529e9384e2442cfa04c624c8c522a73dd50015884f6d587e73df388d8f9ea8346d1fd18e85c73c347cfb3b740c21af0731578d37d9e346657004b3b1cf0a993f815001bdf5139fc33fd8178662cd359f555980213e5f622e41c8de2baea477d381f5f52dccce544deff5a60e50f822a8c01784983be93c585a81a0022ce8c1784ca384b6b21128c1d624c16b455ac31dfe56d993a0942787a90855e31ed3b3d8b3f1b2cdae1daae6c4ddc6043411f6a7f22a36e1ceb8d6aed133117a699179"}, {&(0x7f0000000cc0)="9d0637eed95d12b79f15e3424d6a70da66f1dfd429dccc2477dbd9bd7f81ce050d32ae644317172180ff3bb5755d7e8cacc5b34ac3e651b2fddaabf3aabbf95e450b4682f97ecac6539b48651e91a327ec48ce7be49d570501e196415842ae633c16b60764f96950f77dacf83a869015bd4450a52bd1eccb74d1c59568ea4d714861988b2c846a09a74b824a94821c1960e640"}], 0x0, &(0x7f0000000d80)=[@cred, @cred, @cred, @cred], 0x0, 0x40}}], 0x4000000000001cd, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x8, [0x8000000000000001, 0x8, 0x6, 0x800, 0xdb, 0x100000001]}) socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) socket$caif_stream(0x25, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x40000000015, 0x5, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES8=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1ffe6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x50}}, 0x44050) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 947.842171ms ago: executing program 2 (id=931): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 922.12825ms ago: executing program 0 (id=932): socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x6) close(0x4) (async) close(0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a30000000000800074000000010040003"], 0xc0}, 0x1, 0x0, 0x0, 0x4800}, 0x4044800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) (async) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "d9b0db7b77b7ea4df776f6b4061440d6ef44477d5b183973aa0ec402b72eed48529a44fe36e91a79344b777fd81334346ff64025e77fcfbc91e29ed9895d69d06e4dc56bbc6a4879d0b34d9b0f0069f9"}, 0xd8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xe, 0xfffffffffffffd5d, &(0x7f00000009c0)="0000ffffff8d00f03f0100000001", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xe, 0xfffffffffffffd5d, &(0x7f00000009c0)="0000ffffff8d00f03f0100000001", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x80, 0x8, 0x3fe, 0x2, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x66, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @empty, {[@cipso={0x86, 0x6, 0x3}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x80, 0x8, 0x3fe, 0x2, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x66, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @empty, {[@cipso={0x86, 0x6, 0x3}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6gre0\x00', r7, 0x4, 0xed, 0x15, 0xfa, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x8, 0x2, 0xa690}}) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000000)='c', 0x1) 906.430975ms ago: executing program 3 (id=933): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002380), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x38, 0x11, 0x800, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x8028, 0x3100}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x10100) connect$inet(r0, &(0x7f0000000000)={0x2, 0xfffe, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{&(0x7f0000002a40)=@qipcrtr, 0x80, &(0x7f0000003b00)=[{&(0x7f0000002300)=""/20, 0x14}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x2}, 0xf}], 0x3, 0x2101, 0x0) 875.815831ms ago: executing program 2 (id=934): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x8c) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x8c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20) close(r3) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) close(r0) (async) close(r0) 780.205484ms ago: executing program 3 (id=935): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000200)={0x1, 'sit0\x00', {}, 0x3}) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 702.980595ms ago: executing program 2 (id=936): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='R', 0x1}], 0x1, 0x0, 0x0, 0x200400e0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000ac0)="6ccfa02267d97d4d0b5d93762754c484e1ebb21c921ed4422829b4c9525cf009920f0b33e324afec95394e77afd26a553504da8d9ce6f462d3df9d854358068e2635df77dd96651241dd92bdc4548182db3ac46aa62a83a184fc0240eb28422d0e1aa97fedc28f8ecdae97b4384a0fc736607da68da7bca7e1dcbac4bbf0d0035e7b442bac94af5db9c0abef7a752de37b3e9211cd8e5f2608", 0x99}], 0x1, 0x0, 0x0, 0x404c801}}], 0x2, 0x0) recvmmsg(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/210, 0xd2}, 0xce}], 0x1, 0x40002002, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xc4}}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) close(r0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$inet6(0xa, 0x5, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x1e, 0x1, 0x0) (async) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) sendmmsg$unix(r4, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='R', 0x1}], 0x1, 0x0, 0x0, 0x200400e0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000ac0)="6ccfa02267d97d4d0b5d93762754c484e1ebb21c921ed4422829b4c9525cf009920f0b33e324afec95394e77afd26a553504da8d9ce6f462d3df9d854358068e2635df77dd96651241dd92bdc4548182db3ac46aa62a83a184fc0240eb28422d0e1aa97fedc28f8ecdae97b4384a0fc736607da68da7bca7e1dcbac4bbf0d0035e7b442bac94af5db9c0abef7a752de37b3e9211cd8e5f2608", 0x99}], 0x1, 0x0, 0x0, 0x404c801}}], 0x2, 0x0) (async) recvmmsg(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/210, 0xd2}, 0xce}], 0x1, 0x40002002, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xc4}}, 0x20050800) (async) 590.790474ms ago: executing program 0 (id=937): socket$unix(0x1, 0x5, 0x0) clock_gettime(0x5, &(0x7f0000000300)={0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x7, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f0000000340)='GPL\x00', 0x0, 0x9f, &(0x7f00000009c0)=""/159, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) syz_emit_ethernet(0x2e, &(0x7f0000001180)=ANY=[@ANYBLOB="10fecfa691ecfe678b905956d4e0e9c5e594f86894f24c98c7a7a1c5ff35ba6e000e7f387f01b2c87cd12205157c202c9b66d03c6516ee236e1b44e658e16b3abda667a09e26f38b0c9c601a0ff54b76045656c3e17e67d98ba258932cc6e3047b9c301ce061382b16d31af39de498e0fb8747e477f125db0fe161d1bc2e9af9c9103d6299b116b1fdfe87e9599981166491f4c8384075d86f4c3eed9722ad2686785dd05a0cf06010cc7be652da60435155a9fe0cc25386bcdcec5c", @ANYRESOCT=0x0, @ANYRES8=r4, @ANYRES16=r0], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r5}, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000001, @void, @value}, 0x94) socket$kcm(0x11, 0x200000000000005, 0x300) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES8=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYRES32=r12, @ANYRES16=r8, @ANYRESDEC=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r7, 0x35) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="e1f4e8d29286a9810964754183ed962ec8081382cb21cc7fa1e0cd2f6f21ed31aa5086973bed628af5bc2da967d8843c4a7fb5cbd805ceec98514b81e7ee59c40818bdcd1c76c71e93cbbd67287c16bd602c4f2e34a0bcaa855de4bb5ad4d31f3b2620c97f3a2f6b71e2d77685e1789ec9d828e61e4b5b967999892f84b525d8f2e638bd", @ANYRESHEX=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) splice(r9, 0x0, r11, 0x0, 0xf3a, 0x0) write(r7, &(0x7f0000000240)="94", 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000580)="fec38d1f90c33210eba9dfa8d7b7c3e173f7b351b0c7f37e33d6b68366ed400395b2975087399afa156225fd435c2a54f06ad4270f24a928c26e001f75821077976f134cef63c49fc365a8cecbc53581237fe2849e8d61cee4bf8eb035522af84a1420c650fb19c033a3f59f8be1860986c3b94946b6d0c9d72b9f757105570eb3e6170939cd3537e68a820e18cc9f38492cb39662866ac522df1bab490a47ece9ad186db2094bf7966eeb6533da4bbe49059981f2cfd6544334a49c2a3b4ce24e096133", 0xc4}, {&(0x7f0000000380)="fa6f", 0x2}, {&(0x7f0000001080)="271a64740101606d1cf7d2f873d3e2891185ba786ef0bb0e1110630178f73bb7237ff87b48d685d60671f34bd405951eeeeb856e54200f49c6294ce81147f0a816d025c3bf7457e6f279084fadd3a84a6d9f403f523dd874c8de7e1e3e3c556d37ba09f6cd4d5a4fa8c2e67285324883339722c5a7f2e58bc1a1b53e10d14c244773c76151c5574667b444648b46f5760aa87c04c06a7c655fed811c6a2178550f0e3f42bd0052b0ecefeedefcf64d31d7e80822e5dc6e505b45e4ea48687999b87985b7389eea9d5b7a2719ab1e0bf8df9e0dcd0ebdf5a8c0dc22d108c116305bfae123500e98541000000000000000", 0xf0}, {&(0x7f0000000840)="a5a565de7acbdb5f8a4c08b51ca83055cce47970e676465fbbfece8d8f78cd7a79a62de0c7a936a9df2fb8fa4b1803944acb18ce38185715a990bf2810cc49ddf51585bd0197f050cb4cff3cf07579d325ebc35c4ebe7ad51fe80e92d7f632b8f85c77acf1021a58d236d3322cc681e1893973ef4e007d14938b721a422e81886b499a6428ae2756e7a05c9875d9bf9617df09f9910b131cdfc531fcbf27abfe30825ddc9ffcd575dd15c31bd3874508969b329f55b38034c7a2dd7319b19d490fe9544e0b93742c82c05ff6213e72eca5090b", 0xd3}, {&(0x7f0000000e00)="acf603f97be02c70b98f5e25530963a3c44493a171abbf1a3f8c1c3d08815165596c463706cf95ea8b7823f32e0b19e034559bf7da068c5cc517e7e0add82f900fbf59db55cc9d44d493d692b61a1cc01d39e0b089f5a44c3844b9ee96005a98151fd01381d9214d851d4c848bbc1cd8d9ba405c9d281393e350064cf600843a4b647ea495b0306d87b30a55b09457a8a42a45cfaa4d9e334e70b13258592e6c810d43df63c7788e112c13beb0b9b19037bb6068a265e6cc77e0c655b84b2f729cc08743b1aeb81ac6f35c3f32310540b79f124b468af7247a14e727123097e8c8116122e996dd1d1cfef14c0984629dc30794", 0xf3}, {&(0x7f0000000b40)="0429225cfdb102e6e8942e25a789cfb7b516f4aed2b78a883a3bd31a0d34b3bed02c196872885d343ae295d483f45e05bf1b5849797493cc716a34ba54a848d31ba9d8227adbaa57745cb7cdbd9aa5fdafa881754faec4933b9e7cfc0653d98b44cdb98578ac4deea49c6e0d9824093ae2eb2cbe765d9d5ac50d667ea373dee12a44a0", 0x83}, {&(0x7f0000000f00)="651a839f82917311a09f9fc81cfedab1c67d782eaaaddbbc548ace0f8a0092b65b1421b273ca702d9f6cdf51cf4bc01345c15a5e11947f2a5fd41761ae19d75dc626a3e7401c260a40c818680f502a6576380a768118de51669963b8a6dacba34cb8724e53767dcb7991581cd34f8eed38811f2d00c0d6a05d42d6af56f7fac46b44273ec2f2fb53ed884fe2f6a22aee40642ccc61135c5430dc85348b80b1bcc67bc72f993f7e73afe8b4c4042a0e08ce433dfc03fa70c2906b4d40755f856d523d", 0xc2}], 0x7, 0x0) tee(r6, r11, 0x800008f5, 0x0) write(r8, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4246ced04531179b0200000000000000a447e4", @ANYRES32, @ANYBLOB="91a3d79244bffa3471a44513825afae746d4822ba002b2a9d0"], 0x14}}, 0x8010) socket$alg(0x26, 0x5, 0x0) 532.868849ms ago: executing program 3 (id=938): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x7e272708}) 299.595048ms ago: executing program 2 (id=939): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001500)={'veth1_to_hsr\x00', 0x2000}) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4101, 0x1005}], 0x1}, 0x40000040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x8e, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000000740)}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, 0x0, &(0x7f00000005c0)=""/255}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x9, 0xc, 0x14, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x24008000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r6, 0x1, 0x9, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1374}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xcb57}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) 154.307279ms ago: executing program 4 (id=940): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) sendmsg$xdp(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2c, 0x0, r1, 0x1f}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="1f50eb9f868ea6a9ee40f9d1137ec5b1660b027985a6d22b700dc2b8bf98ac4058d9f2b1eba42a112c46b2e91716807ace4271c077536c548e54debd5d5ab3b9d37f2e968e842344fecc106721e6bec0a7bd8aa896f76b6d3323563cd77a535e8b7ebcd359e82425e081c18fa687ac9e7f7fe371a70383fa8e6858f8b7eb91d86cc894671bd56982283c0bcc4841ba234f6664e481bd4706070bb37f214df0652a4ae01bd3d60f7e7b8d9d7ea6b062ac7b9b3b881b3168369d13ac1635e7e6294c2a792abdaa3a69ee6a46016b4d6ec824f750004f568a26", 0xd8}, {&(0x7f00000001c0)="c901c2fdc24827ca905efff255697ecb2f3eb75c08ca3ded9146a458434019c50dada3cd40ae20b47f12a33c608e6e55e1c90284fbadadb3d5df874c80d94897c55fc8ca2f8d46ce2b8a6da32a278838fc2021cc7722cde7f357dfc8", 0x5c}, {&(0x7f0000000240)="f2bdd9c80b87065e80c476b4ad1e37a7e0d5174bd0563aff5ebf32a9df984d8df6aaf4e8e26753216660a86cd191a1288a74ba83c810a36ef6b9a0f51818d506a837a7167d7e6779e70b0b832865a534e48d123593492135285a0bdeb7922c655f3a01d2de07130875818be3da4887892ad3612a0c876bd01c385968b2e1deb5588f1969ff48951b58070ee05a5c1386ba2ac9f8f85726998651700541261f3e769d0f9223071f62d79cd31ce667fe2b23782574ea8a59bc2060c6058fca9500203cef155af124a0d013e1fce4325b31680d8f4541c5c6897fa33ddf812c7838d020efdf7116", 0xe6}], 0x3, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000400)={0x7, 0x38, '\x00', 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480)={0x9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000004c0)=r5, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1a8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xa7, 0x8, "5f3dcc8120bf9386c59db10c78f7510d6cddc6024db488970628a375207d8e93629f44ff16c6087fc8788cff0a92dbe9c46b7e72155bd0651fbb00a126da8769632b0abedec9b5726e8347585a1a23ee72b2aa45c515d914d539d8f436d6840b57337ec7ec51c1d58c6028eb454a32824607479ef4766e8df040b43c4e77496f96bf393b6d5ea7950dbfebb927c2b5b4ffc3db5a1a5394b1531150c784ad22d1ead79f"}, @NFTA_OBJ_USERDATA={0xaf, 0x8, "c96975b09e91ec7239caa78217190406d8f5a16eb02e6e4b7e02ba8df2d19d5bfb7e6c99592c16710cbed2f2e9278e41802559aaa6c0c9d760016bdadee6eed28a78c22657762a5145c8885aaf98aa419db0130d960f5e9a59088db81c2966280ffe60bec7704356e7c0690327e6a72cfe5a794989f235f752808516c52c05fde2446a399663990bd7ec1694446ff9af84988332f8801ea9f890a7a8a4f19a48150b80de6db4cfc2660b90"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r9, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0xc800) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000900)={@loopback, @private=0xa010102, 0x1, 0x1, [@rand_addr=0x64010102]}, 0x14) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x17, &(0x7f0000000980)=@raw=[@call={0x85, 0x0, 0x0, 0x7a}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0xb, 0x7, 0xa, 0x8, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000a40)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ac0)=[{0x5, 0x1, 0x4, 0xb}], 0x10, 0xb2a, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='rxrpc_peer\x00', r10, 0x0, 0xfffffffffffffbff}, 0x18) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f0000000c00)={0x2}, 0x1) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r8) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, r12, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "ed35663498966c7ec8c5f9c55cf8e44c7fb84f1279eb3ca3733aec96d7d3b3eeffa59a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r8) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x80, r13, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040010}, 0x44000) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f40)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x89e2, &(0x7f0000000f80)={r2}) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000fc0)=@assoc_value, &(0x7f0000001000)=0x8) getsockopt$inet_udp_int(r15, 0x11, 0x1, &(0x7f0000001040), &(0x7f0000001080)=0x4) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000002100)={0x1, &(0x7f00000020c0)=[{0x6, 0x1000, &(0x7f00000010c0)="95d74b91ede16fc8c9b8d23763d03f5a538833b23fc1e35945e1670299a9a95402ccfa9b68f394b67b0d4279a9b00cac855658fd1fa46ff2e3b48edab6ed3bddb06802934e1ad94ca77b8ca6b4726d9d45b6363322fa412bf2826df0457fc9afd9f0d87b422bce2ed6bf8ad07724e26f7515edba950d6f4f025a4bc1b70b828a253f183412953186a4d20370feaadaf5acf9ae55def96cff22e891d8f5f7eae7bdee416cb6c1aff51f1c3c84b76b964da12fcbfa5fffe74c4af315bf6777e219eebeeb0b4e1f7a32d1f6ca5bc895e52f02eed61817ede4945fae6a9ee58abc505ef53dbdcd21245a36c8a18ab9cbf2b6faad64838c329800d84904d37d899757b1dbf34ba30193cab34a375376aa6f2bb97d8b9b1e4c423d2ed75632a402d792089f6dc594b3364fbf80d70d257e6f3f05ca7ed9f56dcb6dff3551dbf5e14462ead2a2d68e3e016210f791b4cc260fcff1820afaed83e2084e75514c7326e919ea7cdc65a5d75babb6e31f9ae18d3e8ee1f1778d5f172b0245b45c4be9a165197defba9bf7a84d11197cdd359869e10fd0511b82918ee7ad5b31da3c176ccb0edd427941312144a83bc1da91de644693d9560e7a93794f2322d71bc8f2686b14e9f56426689a2a1fbdaffc964fe7b25ecc9b67b9e8544c865d83d08ab198d23c8d8bfa033fc8faa64c45ddf4e523e3993db54359ab9b992ceba2651c10ac7eec1bc174cdff5ab4c61bd25384d149f79df2aaaf278a325f4fa8783bf884b7aeb8675acee7d8feca72f8e4b8f374d8886326a147a04d0f04d4bd30ad41f3c6db6df40c5329456d04d52ee96a6f40fbd988d8d1df4249e2b8c4d949d5528fe383a4a73d14f8db5c4babc021adb41cb3813ca21e2e1b278830a18c1ee6b8448be1415bdb8cdf81f4cea60f882e06fbf64deb70d6edd93f679a31c6a8569322d3469277d2e56a9d6bda8e29e7d78eaf840a10c513769c3b734c362aa8b12010a8141f83b1d150a562a725e2aca793edd5d8e02ad7aff933d8e92d7a0870b3a1d272d89de4cf7a4e19daf05960f3ce358b8d7f363be1d9fdacc81d8fde1dd3eccf0ba0887f21fa1a5b90b94828271d88a6fa1f1be7bbd4cde6a6feb93192bbfcb363e65cdeb5fd470565314573d3038e69e7b1a63e73e5d4bc932a2163829d7e3028e759645f15c172693b9d5eba660ce57cd61b5990e05bdd6edd1e33bde8f8d7528a63cb1d8244ddac6c0f109c4cfdff0f3c2132d933441e9a7982175452b6f44589dc0fe4c3cf5ed8f021642b0b37b3cbe60cdab5824d4c61cddc616323e73f5838bd13ac7b1841c9ab28575c22ba32a3381482cdd2ed7f7429047a344bb4999ef58da1791b74971f031a4a4293ad4f36f510fa3f3168d165edda3ff8913452ef55d0e572a7a180ea03aa583d081c83e2432ab967610836c73622339d0a3b009a6ac1af7d12fa415403de696ffb383262e4f697f9b5736a7eb39063f11a85f3bbe415800d246ff80663aeb6c8e1a3af122f81c4979d52938cc2b416fd849b60a6743ca141b2adcf63df6ffe5767c161ca659c9dbe0ab05a9e55de027bcb138bd198978f278f3a10a38ab072b88e31f075453513f3a7b5a32c55e44a092004abb87797ef19b1310f90935d3b0bc82a3f586c2b23af32d2d4339520cfa51ed21321c0f35f03faef512290b647d1a31fc1c830099d55f65dd006a3f4fea9ec063dd74a76297aa92f382a344ab12f51ff35d54013bcbda1a4a438ab210003861e8f9191d19ddac025367775750846f487813e5f2bbdbeb20f3cb1b0ac01ec60dc631559160f2304cce3c5f01efac24d8f45105f7e374cb88647787fab908980a34c51e696c8e79f181b90616038f7deef5dd4e6bbc57940fc5925816c1e6a69b41587af13513ee5b72d83e523a7e4321028e0dcb01d7a3f5f75ecf2be8cd24336cd0253e4be97d8664114e67e051f04710dabed7f5364f476e00e5dbb422db44294d7d223ea103aac1ad472c8b84d9789eb5c5fb50ad5ed6ec439b1f6dfd889f95226b2d18a3871a43c0fd0f3db35b2044ee93c19833f5fd75d2e41c4742fc97b714b2cfc261f99d30a3c15b3904aa7ec167af87c4f5cbec7cab2ad4c9e03e54645beb250f87f8cff7c95590f4c0b3a3aea769d6b861f270d870354d6d92c2e34e0bafc73d838d7f3d9e7da070924a6937f9c2adce3e21083400cc96a524576e62d3a9e01f853c04fa54a92caee2337cfda4162e1d6fa50707d096ba158c92b31deb3a4cb2d6c1bc1e65dcfd9aa2787ec9659b1687ab2461b7e63a519c1b21f32ab93a18c2d307580b479cb5b2d870a7699b2f9eade740b43e4f4a54a6f1fa5f72df2c06d8d77d3ec7d44bd138324d06354c45896bb8862cd39dc8988c63de9f830609900f7bd83bcd1a4a8b04e479aebc3b8c24f8f95e9cc4292edd36fa7493dd6e780cc40137a6f7ae7deb37c0261baf0b7803fefced53d0060215fbcb14e52a48e11e895018ece585d0fe857672d259eb1ead6ff2a52613312b628b56bdd4d5baa69fd6f800f792f18ba9ba77c4beffc10c399c8ce96a8fa7cdbd8b1f52ae46aca1353578d1249ae75577b99a345acbc6e4e5abe99f86588516b92cd7542c6606b13ffbc972086e8f27e74e74c51ad703edf618adf7c57729709d0c50b04eb02f06fc08c7e7f29e06e829fdb0e4165430b12d9d8e6b6bcf934245be5ad2b57c77f49c2d27e8c26d44654dd414e0e03cc13ad85e7cd742c12feb1dc7eedd8e6ea04d8a9d4a03f90511e00306df94d12d80c11b77b361cf9a9c3623482927e67ed179d81e768fb2be02910f3f2731957e8c367d330358a5a7ed7a321e13045f691c3db6b502a7bef127228d9ad543b3aaf03441bbe837053070953efc1e060804b5082740f70cf8e700306925e67702c3797c3ed3dce576da870dc2ecb71f7bd3b290deab962a2a1e40f2f6c2258e1415e624662b01655dcfb5cc1f57f7fe98a6b6fbe46da4a9975fbe161b89e07af2c3cfed7991ee3a4a8893dc857a0158031686cb1b79a61d3553e4d9f12f56b9e84872ccd53a39d02c036aad9d4e552f46fa0e10c0a2d99365c068cfe137f1c7c059929611fbc22ef092f3fe7ada76d80edb770dfdbf2028f5b89e2d85b0305da6f409b6d525c1bbcbef3f638c1e38d2cf8a57a983fe7f1b7d172741f90bc8d08181ae7017cf5f2abe01f85748012986b4649a831f44b0322079f3beb2745b2939abaea5996f3b3f7b4cc9bfbef16964d6b9a49043bd9414042f8afb9a1375ccb24390ea0110af93c12205ed67539a8a44614b7630401b73ed255872459312c2be874bc69fcb88e9fa201066eec1d71ab85cf704bdc643ee4ad390b44195cada4883b5545be712caccc87b10a16247c550ad7a5fb47192e5dd4c044d970d4ec057d422b057a863109cdd11a2551081f4f084e9a8024e1b5e7b0368d2572782affb1ddee3ccaa425ffbfad721ecb88c1e3dd71ac291db7dda8d8fbaeb4cff9f81bf02b96d169bb6e5a01f293b39d6608f0dc60af5cf9d1db449c2d769614cf25f27003b85471259eadb10597d0053de8e5d09763a9d3fa811880277463b5ce219b375af72e19c2bf303405501769141e987d9e92942e36334348d3cdcc68e864a82677ab007f72f63aea065be43c33b5c4b93bd690887906241d3b3152c9e952ff8d0a7b8b943a8b12bca9f8a805897622bdab4f27b927337eb21429e01b4158ab5b89148b0960d492ebb68dfb06f9bd2df0d9beca542f40bb1cd08d43697e94a98da29b933916719b05459d72a4e1cba940a64f16bedc28d2eedd018648aae961ae6b95fd303a3692e30cf882a5f262b46a209b3416153e9afaa10e2abdd337ee1fdc494548015c853215c40655e57929835cdc4e6ccb8fc4984f91a5a809058c78082d030097d49c7b47064a7b67c49492520fc2820a5cfbb43d03aa4f22baed7ef9f98266f5e98b48c00e210a234f0e52a739d2201c511ab916deac1b6eee8dd8190be5f049f2f1373f0b8eaff5145d4ea110eae8702ac7ac5f25eba1ca3ccddea03c53857a25e744a2afb16562549949353c6fd6975c92b1f8951fedb71c10dda804e51b6d1ee74b4d1018f7b28ec345a48d50654ba0168a9b702f3262c5e167fe7ad0d54d6c52db7ba7037d1122dbbd44069f94f05443f08c69f6a4d10db41efc104cce4d7ccbd3f54beea3b9556f311eb671616f1ee3ccee5111df5297eaf0c0655aa642c10a22abab254e392842c5c5d8905f765e304676ef34da41eaf76baf6256d59dd45d96b274e2aec8590dda138952e4b67e84d2086d79c3a6667572808eda67a70a1ba8265bce321105985f2a23163a439dc186f674de1b033e3f39e979a28e8f76530d4dc97b13235fcbee887605b7cc8e8f1eadd6205ed4e7846006f58210871edbcc432f2b2889af0c65414a0f4d0793a50eb806658086fd8bf34064553296c891980210fe340b509aaf703c331c4eb167ba181a78015b5ab43bf1a50cc25b858b1ce580ac63e8277f1c3e8e024adb72898e0dcd71eccf10afe539d09ada1f0211ede9346e801bf4cb5f6d24ca7301cb2edffdd5672ffc64b1f845aac0d236010a9959ea580b9c8087c4ae8aba89e6fddedbafef15a3e3e3b6e4615911a6d0116475e3e99316a6ea2a9ebbc52032fd6fc33a9839bd8c972908787010b98c1a486191cb8b126b255ad1950db5a5efa54204bcb75119a16a002574a86f6b1796c8d0d74bfcc9c3952cc29c1637e66d1d540ea29ef3728518b0d7d41c8c769c8b6909d725f8518722697ad670c9788d6d82d318d0ed7f4de3762d065ec4b0053792db661dda1088cf9550332c13857283b182a876ae2b6d229929b4ba552d7c0f40e8a7c6a6c96d15b8a9554cdc8d7ded2232ea42d021769fb6051f5991147c6fc2b62c3ebf32d340685ae521a9a63237b2b309820822269c2bd17364533f3792e9167cef16cc19bebfaa5685950f0b734c8ba60a881dbad07de7863e7f5f08f539d95983b36c26c5bea0faeb00ed01fb1302f0dfda8d65245a0827ae07946eafc843b88686dc77e2075a262ee17228abfe1450e2dc6a6502104b91fb685ce7b1b064b068dca053caacc6eb4c39cfe176c60e46c680d70bae8c9871fe6d0c83427aeac11781a13adf258bea5d6e702d1b103c11449ebcf8ee97dbfb654b301f97892bfa749e2090537bd6572975fef3a3f919d1dafbf513c70fcf39adcfa115e8d7becf72f2c14fcdee87b22bc00cfa0a9e5f967de7049e559a19b04bceed159cc8ee75196df9aa26ab1c466a69de1c1015d06f32a33fb9d1cc5b9a4a77db3dfac84ab619813c2d7737db41b0976f8de8f9a42e966817277472fb9cfb92586a90fe697126b6ec05e14f9a251541c93b7a7ec7e727f59f3c3775a3d9cb85db0d030c01eb254e5aa859f0ba764b787b9639dda8408dedb6d9dc94ff9fd1efb4a82ab6986e3a3be807e58ad5fa1cb5f142e58f8b14a07d7f8336809127445ee09ff3da3cf12f5a977df6d92a53371fa00af305b582fad40e3863e79dfbfb16fb8b757ca1079c570ae253bf2de9b10a3ad5629b46e24b8e408b9178f07fc7948d94bb73d165cea4bf8a4089abe571933cbf69f7795dc2e477daffa5c2a33ea25c98631476848fcf6e2607cf718a79c35b5b976fe1be6399bbdd2153b17b0b1a6e16aeeb7cee49432c0f4e220088aecfe95fee7c70c16445ef5fc6a1ec9597dd147eced1a06bd560d52de01ec847788910458dc2e8ac42482d8bbce76ff3b62abe38fd31aa06a65ac9e0a4915bc58272b8", 0x1}]}) 96.025871ms ago: executing program 1 (id=941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0], 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000004000000040000001500000000000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x38) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000200)}, 0x10) close(0x3) 67.551033ms ago: executing program 0 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001c000500000000000000000002000000", @ANYRES32=r2, @ANYBLOB="a10000000a0001000000000800"], 0x34}}, 0x0) 66.85281ms ago: executing program 3 (id=943): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x8311, 0x4) 0s ago: executing program 4 (id=944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 73.589563][ T5818] cgroup: Unknown subsys name 'net' [ 73.729852][ T5818] cgroup: Unknown subsys name 'cpuset' [ 73.741173][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.290617][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.629864][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.647906][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.666600][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.679132][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.699097][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.708833][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.747526][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.756937][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.761695][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.765724][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.775707][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.784024][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.793447][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.807764][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.816877][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.826857][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.832897][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.839292][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.848394][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.864539][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.864610][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.865538][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.884164][ T5145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.903208][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.903278][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.905481][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.928681][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.932366][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.949166][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.957771][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.364623][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 78.472475][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 78.525126][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 78.633767][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 78.728451][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 78.755372][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.763732][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.774157][ T5834] bridge_slave_0: entered allmulticast mode [ 78.783841][ T5834] bridge_slave_0: entered promiscuous mode [ 78.794287][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.802398][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.810687][ T5828] bridge_slave_0: entered allmulticast mode [ 78.819936][ T5828] bridge_slave_0: entered promiscuous mode [ 78.835832][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.844028][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.852558][ T5832] bridge_slave_0: entered allmulticast mode [ 78.861474][ T5832] bridge_slave_0: entered promiscuous mode [ 78.871142][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.881026][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.888767][ T5832] bridge_slave_1: entered allmulticast mode [ 78.900121][ T5832] bridge_slave_1: entered promiscuous mode [ 78.909475][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.918161][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.926788][ T5834] bridge_slave_1: entered allmulticast mode [ 78.934248][ T5834] bridge_slave_1: entered promiscuous mode [ 78.951595][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.960340][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.968405][ T5828] bridge_slave_1: entered allmulticast mode [ 78.976249][ T5828] bridge_slave_1: entered promiscuous mode [ 79.017193][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.072847][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.085772][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.099282][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.124670][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.170050][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.179840][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.188726][ T5833] bridge_slave_0: entered allmulticast mode [ 79.198408][ T5833] bridge_slave_0: entered promiscuous mode [ 79.207646][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.216681][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.224448][ T5833] bridge_slave_1: entered allmulticast mode [ 79.232570][ T5833] bridge_slave_1: entered promiscuous mode [ 79.242401][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.274242][ T5828] team0: Port device team_slave_0 added [ 79.284637][ T5828] team0: Port device team_slave_1 added [ 79.343980][ T5832] team0: Port device team_slave_0 added [ 79.354959][ T5834] team0: Port device team_slave_0 added [ 79.364320][ T5834] team0: Port device team_slave_1 added [ 79.387563][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.397394][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.406068][ T5840] bridge_slave_0: entered allmulticast mode [ 79.414136][ T5840] bridge_slave_0: entered promiscuous mode [ 79.441754][ T5832] team0: Port device team_slave_1 added [ 79.458274][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.466915][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.495780][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.511163][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.519914][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.527849][ T5840] bridge_slave_1: entered allmulticast mode [ 79.535455][ T5840] bridge_slave_1: entered promiscuous mode [ 79.545141][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.574334][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.582234][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.621857][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.653186][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.682784][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.691970][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.721597][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.738717][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.746995][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.778219][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.801008][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.817548][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.838951][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.847928][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.879439][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.908662][ T5833] team0: Port device team_slave_0 added [ 79.925933][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.935870][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.967251][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.985449][ T5833] team0: Port device team_slave_1 added [ 79.992763][ T5846] Bluetooth: hci2: command tx timeout [ 79.992768][ T5844] Bluetooth: hci4: command tx timeout [ 79.999957][ T5844] Bluetooth: hci3: command tx timeout [ 80.000191][ T5844] Bluetooth: hci0: command tx timeout [ 80.005966][ T53] Bluetooth: hci1: command tx timeout [ 80.031797][ T5840] team0: Port device team_slave_0 added [ 80.074160][ T5840] team0: Port device team_slave_1 added [ 80.110315][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.118328][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.149737][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.166794][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.174240][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.204535][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.228121][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.237111][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.272207][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.299311][ T5828] hsr_slave_0: entered promiscuous mode [ 80.308206][ T5828] hsr_slave_1: entered promiscuous mode [ 80.320980][ T5834] hsr_slave_0: entered promiscuous mode [ 80.328701][ T5834] hsr_slave_1: entered promiscuous mode [ 80.337248][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.345639][ T5834] Cannot create hsr debugfs directory [ 80.359212][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.367902][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.396600][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.420342][ T5832] hsr_slave_0: entered promiscuous mode [ 80.427384][ T5832] hsr_slave_1: entered promiscuous mode [ 80.433888][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.442372][ T5832] Cannot create hsr debugfs directory [ 80.547880][ T5833] hsr_slave_0: entered promiscuous mode [ 80.555405][ T5833] hsr_slave_1: entered promiscuous mode [ 80.569438][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.578865][ T5833] Cannot create hsr debugfs directory [ 80.635973][ T5840] hsr_slave_0: entered promiscuous mode [ 80.644133][ T5840] hsr_slave_1: entered promiscuous mode [ 80.652802][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.661618][ T5840] Cannot create hsr debugfs directory [ 80.998355][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.022665][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.051243][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.073646][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.115277][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.127159][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.142097][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.153629][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.210485][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.254519][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.268329][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.291933][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.347781][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.383991][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.414368][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.452654][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.479609][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.491517][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.504213][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.519472][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.553636][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.645305][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.689665][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.713495][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.722399][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.735468][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.743918][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.798532][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.825204][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.862732][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.880245][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.890024][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.901989][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.910505][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.925169][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.933819][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.975369][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.983828][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.065335][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.075244][ T53] Bluetooth: hci1: command tx timeout [ 82.076476][ T5846] Bluetooth: hci2: command tx timeout [ 82.082343][ T5844] Bluetooth: hci0: command tx timeout [ 82.089468][ T5145] Bluetooth: hci3: command tx timeout [ 82.096982][ T5835] Bluetooth: hci4: command tx timeout [ 82.155883][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.184468][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.203482][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.268868][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.308380][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.317769][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.341068][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.350209][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.408538][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.432359][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.478176][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.487185][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.544044][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.552396][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.579679][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.684007][ T5828] veth0_vlan: entered promiscuous mode [ 82.725627][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.753159][ T5828] veth1_vlan: entered promiscuous mode [ 82.852654][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.891602][ T5828] veth0_macvtap: entered promiscuous mode [ 82.923858][ T5840] veth0_vlan: entered promiscuous mode [ 82.935869][ T5828] veth1_macvtap: entered promiscuous mode [ 82.965960][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.985785][ T5840] veth1_vlan: entered promiscuous mode [ 83.049700][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.100917][ T5832] veth0_vlan: entered promiscuous mode [ 83.135220][ T5840] veth0_macvtap: entered promiscuous mode [ 83.148926][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.175125][ T5840] veth1_macvtap: entered promiscuous mode [ 83.199618][ T5832] veth1_vlan: entered promiscuous mode [ 83.214772][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.228421][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.240199][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.254421][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.272542][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.342164][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.365272][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.382676][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.408447][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.422231][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.437247][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.454127][ T5832] veth0_macvtap: entered promiscuous mode [ 83.494042][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.513901][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.526806][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.539172][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.560580][ T5832] veth1_macvtap: entered promiscuous mode [ 83.670495][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.693211][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.702397][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.722189][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.736099][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.752107][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.768097][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.790901][ T5833] veth0_vlan: entered promiscuous mode [ 83.803225][ T5834] veth0_vlan: entered promiscuous mode [ 83.825086][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.842108][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.855842][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.869209][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.883855][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.898859][ T5833] veth1_vlan: entered promiscuous mode [ 83.940312][ T5834] veth1_vlan: entered promiscuous mode [ 83.958113][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.985226][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.997935][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.002427][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.010235][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.029891][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.051453][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.075119][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.147058][ T53] Bluetooth: hci2: command tx timeout [ 84.154570][ T53] Bluetooth: hci3: command tx timeout [ 84.162600][ T5844] Bluetooth: hci1: command tx timeout [ 84.169721][ T5835] Bluetooth: hci0: command tx timeout [ 84.179152][ T5835] Bluetooth: hci4: command tx timeout [ 84.181084][ T5834] veth0_macvtap: entered promiscuous mode [ 84.200532][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.259574][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.275988][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.294077][ T5833] veth0_macvtap: entered promiscuous mode [ 84.334797][ T5834] veth1_macvtap: entered promiscuous mode [ 84.400699][ T5833] veth1_macvtap: entered promiscuous mode [ 84.473677][ T5915] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 84.488420][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.502837][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.518355][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.530902][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.544400][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.558288][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.573121][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.600340][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.639370][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.661753][ T5915] syzkaller1: entered promiscuous mode [ 84.668705][ T5915] syzkaller1: entered allmulticast mode [ 84.675620][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 84.714826][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.729381][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.741410][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.755385][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.768463][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.782530][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.808362][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.819732][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.834701][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.846522][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.859944][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.873156][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.885852][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.897710][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.911787][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.925272][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.968235][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.993249][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.039889][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.056507][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.073771][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.093047][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.105110][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.120406][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.134563][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.146585][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.160790][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.175559][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.185265][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.197221][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.207856][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.288318][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.306087][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.319940][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.332462][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.836080][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.847852][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.015983][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.040630][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.096554][ T5938] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 86.115900][ T5941] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 86.190054][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 86.223765][ T5941] vlan2: entered promiscuous mode [ 86.236822][ T5844] Bluetooth: hci1: command tx timeout [ 86.243346][ T5844] Bluetooth: hci3: command tx timeout [ 86.250584][ T5846] Bluetooth: hci4: command tx timeout [ 86.250734][ T5844] Bluetooth: hci0: command tx timeout [ 86.258231][ T5846] Bluetooth: hci2: command tx timeout [ 86.264946][ T5941] hsr0: entered promiscuous mode [ 86.290011][ T5943] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 86.301807][ T5941] hsr0: left promiscuous mode [ 86.320079][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 86.493149][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.503836][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.573108][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 86.729139][ T5949] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 86.758040][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.776003][ T5956] netlink: 204156 bytes leftover after parsing attributes in process `syz.3.14'. [ 86.786487][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.820981][ T5956] netlink: zone id is out of range [ 86.840419][ T5956] netlink: zone id is out of range [ 86.874761][ T5956] netlink: zone id is out of range [ 86.897755][ T5956] netlink: zone id is out of range [ 86.903906][ T5956] netlink: zone id is out of range [ 86.921529][ T5956] netlink: zone id is out of range [ 86.933280][ T5956] netlink: zone id is out of range [ 86.948444][ T5956] netlink: zone id is out of range [ 86.980083][ T5956] netlink: zone id is out of range [ 87.006470][ T5956] netlink: zone id is out of range [ 87.051880][ T5961] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16'. [ 87.229164][ T5967] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 87.322671][ T5967] netlink: 'syz.0.16': attribute type 3 has an invalid length. [ 87.484153][ T5967] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16'. [ 87.509068][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 87.535897][ T5967] NCSI netlink: No device for ifindex 0 [ 87.687996][ T5975] syzkaller1: entered promiscuous mode [ 87.694171][ T5947] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12'. [ 87.695528][ T5975] syzkaller1: entered allmulticast mode [ 87.878837][ T5983] netlink: 44 bytes leftover after parsing attributes in process `syz.0.20'. [ 87.902266][ T5950] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.074359][ T5989] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 89.324198][ T6025] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 89.362485][ T6025] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 89.380902][ T6030] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 89.393894][ T6030] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 89.459248][ T6031] tap0: tun_chr_ioctl cmd 1074025677 [ 89.482864][ T6031] tap0: linktype set to 778 [ 89.849428][ T6046] pimreg: entered allmulticast mode [ 90.305740][ T6046] pimreg: left allmulticast mode [ 90.417907][ T6063] netlink: 'syz.1.42': attribute type 39 has an invalid length. [ 90.788861][ T6067] Zero length message leads to an empty skb [ 90.927580][ T6068] __nla_validate_parse: 4 callbacks suppressed [ 90.927600][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 91.149879][ T6069] RDS: rds_bind could not find a transport for 1400::, load rds_tcp or rds_rdma? [ 91.436644][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 91.600498][ T6077] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.847252][ T6089] netlink: 64 bytes leftover after parsing attributes in process `syz.2.49'. [ 92.489868][ T119] cfg80211: failed to load regulatory.db [ 92.832125][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 92.884842][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 92.950069][ T6141] netlink: 'syz.3.60': attribute type 25 has an invalid length. [ 92.961773][ T6141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'. [ 93.102903][ T6153] netlink: 76 bytes leftover after parsing attributes in process `syz.1.61'. [ 93.264538][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.61'. [ 93.293413][ T6155] x_tables: duplicate entry at hook 1 [ 93.308595][ T6166] pim6reg: entered allmulticast mode [ 93.354449][ T6153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.61'. [ 93.660461][ T6180] netlink: 44 bytes leftover after parsing attributes in process `syz.4.67'. [ 93.705875][ T6180] netlink: 'syz.4.67': attribute type 1 has an invalid length. [ 94.243970][ T6211] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 94.513735][ T6211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.615107][ T6223] IPv6: sit1: Disabled Multicast RS [ 94.869428][ T6211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.051870][ T6211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.182504][ T6246] net_ratelimit: 8 callbacks suppressed [ 95.182524][ T6246] dccp_invalid_packet: P.Data Offset(10) too large [ 95.223638][ T6249] dccp_invalid_packet: P.Data Offset(10) too large [ 95.289945][ T6211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.290745][ T6242] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 95.458081][ T6211] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.483138][ T6211] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.507883][ T6211] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.537798][ T6211] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.997588][ T6268] __nla_validate_parse: 5 callbacks suppressed [ 95.997608][ T6268] netlink: 60 bytes leftover after parsing attributes in process `syz.3.88'. [ 96.059414][ T6273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.88'. [ 96.075631][ T6288] x_tables: duplicate entry at hook 1 [ 96.140423][ T6287] netlink: 68 bytes leftover after parsing attributes in process `syz.0.92'. [ 96.529383][ T6309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.662204][ T6313] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.699822][ T6318] pimreg: entered allmulticast mode [ 96.727984][ T6319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.770002][ T6324] pimreg: left allmulticast mode [ 96.786842][ T6313] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.838184][ T6327] openvswitch: netlink: Duplicate key (type 32). [ 97.324254][ T6348] netlink: 136 bytes leftover after parsing attributes in process `syz.0.107'. [ 97.429157][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 97.469832][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.108'. [ 97.517758][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.108'. [ 97.647977][ T6370] netlink: 'syz.1.114': attribute type 7 has an invalid length. [ 97.659878][ T6364] netlink: 76 bytes leftover after parsing attributes in process `syz.3.110'. [ 97.662097][ T6370] netlink: 244 bytes leftover after parsing attributes in process `syz.1.114'. [ 97.752457][ T6368] netlink: 60 bytes leftover after parsing attributes in process `syz.3.110'. [ 97.801368][ T6364] x_tables: duplicate entry at hook 1 [ 98.469960][ T6406] vlan2: entered promiscuous mode [ 98.486325][ T6406] dummy0: entered promiscuous mode [ 98.493056][ T6406] vlan2: entered allmulticast mode [ 98.516659][ T6406] dummy0: entered allmulticast mode [ 98.543780][ T6406] dummy0: left allmulticast mode [ 98.576751][ T6406] dummy0: left promiscuous mode [ 98.839439][ T6412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.853188][ T6412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.882444][ T6412] bond0 (unregistering): Released all slaves [ 98.992064][ T6421] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 99.743545][ T6445] x_tables: duplicate entry at hook 1 [ 100.656076][ T6492] gretap1: entered promiscuous mode [ 100.911306][ T6498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.042903][ T6498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.238990][ T6498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.473432][ T6532] netlink: 'syz.4.159': attribute type 2 has an invalid length. [ 101.499584][ T6534] netlink: 'syz.1.160': attribute type 1 has an invalid length. [ 101.509658][ T6498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.509793][ T6532] netlink: 'syz.4.159': attribute type 9 has an invalid length. [ 101.585445][ T6534] bond1: entered promiscuous mode [ 101.605522][ T6532] __nla_validate_parse: 13 callbacks suppressed [ 101.605545][ T6532] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.159'. [ 101.637372][ T6534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.671181][ T6537] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 101.854838][ T6548] openvswitch: netlink: Flow actions attr not present in new flow. [ 101.931092][ T6498] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.969574][ T6498] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.987391][ T6539] netlink: 64 bytes leftover after parsing attributes in process `syz.1.160'. [ 102.179604][ T6561] FAULT_INJECTION: forcing a failure. [ 102.179604][ T6561] name failslab, interval 1, probability 0, space 0, times 1 [ 102.209431][ T6561] CPU: 0 UID: 0 PID: 6561 Comm: syz.2.167 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 [ 102.222001][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 102.233848][ T6561] Call Trace: [ 102.237808][ T6561] [ 102.240968][ T6561] dump_stack_lvl+0x241/0x360 [ 102.246228][ T6561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.253988][ T6561] ? __pfx__printk+0x10/0x10 [ 102.259675][ T6561] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 102.266126][ T6561] ? __pfx___might_resched+0x10/0x10 [ 102.273976][ T6561] should_fail_ex+0x3b0/0x4e0 [ 102.279864][ T6561] should_failslab+0xac/0x100 [ 102.285705][ T6561] __kmalloc_node_noprof+0xe1/0x4d0 [ 102.293910][ T6561] ? crypto_create_tfm_node+0x88/0x3d0 [ 102.299765][ T6561] crypto_create_tfm_node+0x88/0x3d0 [ 102.307814][ T6561] crypto_spawn_tfm2+0x5c/0x90 [ 102.313240][ T6561] hmac_init_tfm+0x45/0xe0 [ 102.319106][ T6561] crypto_shash_init_tfm+0x185/0x2c0 [ 102.325656][ T6561] crypto_create_tfm_node+0x167/0x3d0 [ 102.332536][ T6561] crypto_ahash_init_tfm+0x143/0x400 [ 102.340456][ T6561] crypto_create_tfm_node+0x167/0x3d0 [ 102.346176][ T6561] crypto_spawn_tfm2+0x5c/0x90 [ 102.351939][ T6561] crypto_authenc_init_tfm+0x46/0x220 [ 102.357991][ T6561] crypto_create_tfm_node+0x167/0x3d0 [ 102.364633][ T6561] crypto_spawn_tfm2+0x5c/0x90 [ 102.370408][ T6561] aead_init_geniv+0x18e/0x260 [ 102.377557][ T6561] crypto_create_tfm_node+0x167/0x3d0 [ 102.384226][ T6561] crypto_alloc_tfm_node+0x161/0x360 [ 102.391427][ T6561] esp_init_state+0x611/0x10b0 [ 102.398246][ T6561] ? __pfx_esp_init_state+0x10/0x10 [ 102.404257][ T6561] ? __xfrm_init_state+0x708/0xea0 [ 102.413274][ T6561] ? __pfx_lock_release+0x10/0x10 [ 102.419036][ T6561] __xfrm_init_state+0x9db/0xea0 [ 102.425189][ T6561] xfrm_init_state+0x1f/0x80 [ 102.431840][ T6561] pfkey_add+0x1dfe/0x3030 [ 102.437470][ T6561] ? __pfx_pfkey_add+0x10/0x10 [ 102.443751][ T6561] ? pfkey_broadcast+0x45/0x400 [ 102.449683][ T6561] ? pfkey_broadcast+0x3e3/0x400 [ 102.456160][ T6561] pfkey_sendmsg+0xbcc/0x1050 [ 102.462846][ T6561] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 102.470389][ T6561] ? __pfx_aa_sk_perm+0x10/0x10 [ 102.476566][ T6561] ? __pfx_lock_release+0x10/0x10 [ 102.482074][ T6561] ? __import_iovec+0x590/0x870 [ 102.487967][ T6561] ? aa_sock_msg_perm+0x91/0x160 [ 102.493216][ T6561] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 102.498972][ T6561] __sock_sendmsg+0x221/0x270 [ 102.504589][ T6561] ____sys_sendmsg+0x52a/0x7e0 [ 102.510478][ T6561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.518761][ T6561] ? __fget_files+0x2a/0x410 [ 102.524934][ T6561] ? __fget_files+0x2a/0x410 [ 102.531401][ T6561] __sys_sendmsg+0x269/0x350 [ 102.537343][ T6561] ? __pfx_lock_release+0x10/0x10 [ 102.544308][ T6561] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.551932][ T6561] ? __pfx_vfs_write+0x10/0x10 [ 102.558742][ T6561] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.566965][ T6561] ? do_syscall_64+0x100/0x230 [ 102.573031][ T6561] ? do_syscall_64+0xb6/0x230 [ 102.579372][ T6561] do_syscall_64+0xf3/0x230 [ 102.584975][ T6561] ? clear_bhb_loop+0x35/0x90 [ 102.591626][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.602940][ T6561] RIP: 0033:0x7fbeb9185d29 [ 102.609354][ T6561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.634319][ T6561] RSP: 002b:00007fbeb9fb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.644126][ T6561] RAX: ffffffffffffffda RBX: 00007fbeb9375fa0 RCX: 00007fbeb9185d29 [ 102.653191][ T6561] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 102.662830][ T6561] RBP: 00007fbeb9fb3090 R08: 0000000000000000 R09: 0000000000000000 [ 102.673249][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.682327][ T6561] R13: 0000000000000000 R14: 00007fbeb9375fa0 R15: 00007fffdb775ed8 [ 102.695357][ T6561] [ 102.855299][ T6498] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.855493][ T119] IPVS: starting estimator thread 0... [ 103.015697][ T6498] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.089641][ T6573] IPVS: using max 20 ests per chain, 48000 per kthread [ 103.110436][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 103.265701][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 103.270899][ T6591] veth3: entered promiscuous mode [ 103.314592][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 103.372112][ T6596] netlink: 'syz.2.176': attribute type 11 has an invalid length. [ 103.549992][ T6612] netlink: 'syz.1.179': attribute type 10 has an invalid length. [ 103.587388][ T6612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.179'. [ 103.625918][ T6612] bridge0: port 3(macvlan1) entered blocking state [ 103.655495][ T6617] netlink: 104 bytes leftover after parsing attributes in process `syz.2.180'. [ 103.680909][ T6612] bridge0: port 3(macvlan1) entered disabled state [ 103.698212][ T6612] macvlan1: entered allmulticast mode [ 103.726257][ T6612] veth1_vlan: entered allmulticast mode [ 103.751108][ T6612] macvlan1: entered promiscuous mode [ 103.784730][ T6612] bridge0: port 3(macvlan1) entered blocking state [ 103.793325][ T6612] bridge0: port 3(macvlan1) entered forwarding state [ 104.469613][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 104.482078][ T6650] nbd: must specify a device to reconfigure [ 104.703194][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.724607][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.799200][ T6663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.191'. [ 104.995746][ T6677] gre1: entered promiscuous mode [ 105.153360][ T6680] bond1: entered promiscuous mode [ 105.186605][ T6680] bond1: entered allmulticast mode [ 105.193427][ T6680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.580733][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 105.754875][ T6697] macvlan0: entered allmulticast mode [ 105.772332][ T6697] veth1_vlan: entered allmulticast mode [ 105.983971][ T6678] openvswitch: netlink: Message has 7 unknown bytes. [ 106.581646][ T6726] netlink: 'syz.1.205': attribute type 1 has an invalid length. [ 106.694867][ T6726] smc: net device bond0 applied user defined pnetid SYZ0 [ 106.901314][ T6747] FAULT_INJECTION: forcing a failure. [ 106.901314][ T6747] name failslab, interval 1, probability 0, space 0, times 0 [ 106.917296][ T6747] CPU: 0 UID: 0 PID: 6747 Comm: syz.4.214 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 [ 106.930196][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 106.942278][ T6747] Call Trace: [ 106.946135][ T6747] [ 106.949519][ T6747] dump_stack_lvl+0x241/0x360 [ 106.954702][ T6747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.960578][ T6747] ? __pfx__printk+0x10/0x10 [ 106.962652][ T6739] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.966378][ T6747] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 106.966449][ T6747] ? __pfx___might_resched+0x10/0x10 [ 106.966472][ T6747] should_fail_ex+0x3b0/0x4e0 [ 106.966503][ T6747] should_failslab+0xac/0x100 [ 106.966524][ T6747] __kmalloc_node_noprof+0xe1/0x4d0 [ 106.988897][ T6739] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 106.991559][ T6747] ? crypto_create_tfm_node+0x88/0x3d0 [ 107.003341][ T6739] netlink: 'syz.0.210': attribute type 2 has an invalid length. [ 107.004400][ T6747] crypto_create_tfm_node+0x88/0x3d0 [ 107.004445][ T6747] crypto_spawn_tfm2+0x5c/0x90 [ 107.039676][ T6747] cryptd_skcipher_init_tfm+0x44/0xe0 [ 107.046922][ T6747] crypto_create_tfm_node+0x167/0x3d0 [ 107.052778][ T6747] crypto_alloc_tfm_node+0x161/0x360 [ 107.054691][ T6750] x_tables: duplicate underflow at hook 1 [ 107.059188][ T6747] cryptd_alloc_skcipher+0xe2/0x200 [ 107.059235][ T6747] ? __pfx_cryptd_alloc_skcipher+0x10/0x10 [ 107.059264][ T6747] ? rcu_is_watching+0x15/0xb0 [ 107.059287][ T6747] ? trace_kmalloc+0x1f/0xd0 [ 107.059310][ T6747] simd_skcipher_init+0x67/0x140 [ 107.059336][ T6747] crypto_create_tfm_node+0x167/0x3d0 [ 107.059360][ T6747] crypto_spawn_tfm2+0x5c/0x90 [ 107.059376][ T6747] crypto_rfc3686_init_tfm+0x48/0x130 [ 107.059404][ T6747] crypto_create_tfm_node+0x167/0x3d0 [ 107.059426][ T6747] crypto_spawn_tfm2+0x5c/0x90 [ 107.059439][ T6747] crypto_authenc_init_tfm+0x6a/0x220 [ 107.059464][ T6747] crypto_create_tfm_node+0x167/0x3d0 [ 107.059491][ T6747] crypto_spawn_tfm2+0x5c/0x90 [ 107.059509][ T6747] aead_init_geniv+0x18e/0x260 [ 107.059533][ T6747] crypto_create_tfm_node+0x167/0x3d0 [ 107.059556][ T6747] crypto_alloc_tfm_node+0x161/0x360 [ 107.059581][ T6747] esp_init_state+0x611/0x10b0 [ 107.059615][ T6747] ? __pfx_esp_init_state+0x10/0x10 [ 107.099769][ T6750] IPv6: addrconf: prefix option has invalid lifetime [ 107.101312][ T6747] ? __xfrm_init_state+0x708/0xea0 [ 107.188002][ T6747] ? __pfx_lock_release+0x10/0x10 [ 107.193709][ T6747] __xfrm_init_state+0x9db/0xea0 [ 107.199454][ T6747] xfrm_init_state+0x1f/0x80 [ 107.204518][ T6747] pfkey_add+0x1dfe/0x3030 [ 107.208976][ T6756] netlink: 'syz.2.215': attribute type 33 has an invalid length. [ 107.210377][ T6747] ? __pfx_pfkey_add+0x10/0x10 [ 107.210415][ T6747] ? pfkey_broadcast+0x45/0x400 [ 107.230886][ T6747] ? pfkey_broadcast+0x3e3/0x400 [ 107.237022][ T6747] pfkey_sendmsg+0xbcc/0x1050 [ 107.242871][ T6747] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 107.249266][ T6747] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.255466][ T6747] ? __pfx_lock_release+0x10/0x10 [ 107.261234][ T6747] ? __import_iovec+0x590/0x870 [ 107.267025][ T6747] ? aa_sock_msg_perm+0x91/0x160 [ 107.272893][ T6747] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 107.278894][ T6747] __sock_sendmsg+0x221/0x270 [ 107.284231][ T6747] ____sys_sendmsg+0x52a/0x7e0 [ 107.291307][ T6747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.298188][ T6747] ? __fget_files+0x2a/0x410 [ 107.303602][ T6747] ? __fget_files+0x2a/0x410 [ 107.308772][ T6747] __sys_sendmsg+0x269/0x350 [ 107.318174][ T6747] ? __pfx_lock_release+0x10/0x10 [ 107.323874][ T6747] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.331559][ T6747] ? __pfx_vfs_write+0x10/0x10 [ 107.337251][ T6747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.345380][ T6747] ? do_syscall_64+0x100/0x230 [ 107.351664][ T6747] ? do_syscall_64+0xb6/0x230 [ 107.356921][ T6747] do_syscall_64+0xf3/0x230 [ 107.362643][ T6747] ? clear_bhb_loop+0x35/0x90 [ 107.368820][ T6747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.375833][ T6747] RIP: 0033:0x7fe986b85d29 [ 107.382266][ T6747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.405167][ T6747] RSP: 002b:00007fe987a31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.412515][ T6761] __nla_validate_parse: 3 callbacks suppressed [ 107.412536][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 107.416737][ T6747] RAX: ffffffffffffffda RBX: 00007fe986d75fa0 RCX: 00007fe986b85d29 [ 107.416764][ T6747] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 107.416774][ T6747] RBP: 00007fe987a31090 R08: 0000000000000000 R09: 0000000000000000 [ 107.416786][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.416797][ T6747] R13: 0000000000000000 R14: 00007fe986d75fa0 R15: 00007ffdbf136708 [ 107.416825][ T6747] [ 107.704008][ T6765] netlink: 'syz.0.218': attribute type 22 has an invalid length. [ 107.892152][ T6771] team0: Device gtp0 is of different type [ 107.974912][ T6779] netlink: 'syz.3.220': attribute type 4 has an invalid length. [ 108.103406][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 108.964641][ T6815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.232'. [ 109.060777][ T6818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.233'. [ 109.098345][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 109.150664][ T6818] netlink: 256 bytes leftover after parsing attributes in process `syz.2.233'. [ 109.422563][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'. [ 109.512374][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 109.591893][ T6844] warning: `syz.4.236' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.620205][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 109.642709][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 110.071988][ T6867] netlink: 'syz.2.247': attribute type 12 has an invalid length. [ 110.125130][ T6867] netlink: 'syz.2.247': attribute type 29 has an invalid length. [ 110.332025][ T6881] bridge_slave_0: left allmulticast mode [ 110.382054][ T6881] bridge_slave_0: left promiscuous mode [ 110.407836][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.445656][ T6881] bridge_slave_1: left allmulticast mode [ 110.492499][ T6881] bridge_slave_1: left promiscuous mode [ 110.548339][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.589120][ T6881] bond0: (slave bond_slave_0): Releasing backup interface [ 110.641052][ T6881] bond0: (slave bond_slave_1): Releasing backup interface [ 110.764700][ T6881] team0: Port device team_slave_0 removed [ 110.835383][ T6881] team0: Port device team_slave_1 removed [ 110.879047][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.908743][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.934623][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.969256][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.023147][ T6881] macvlan1: left allmulticast mode [ 111.055284][ T6881] veth1_vlan: left allmulticast mode [ 111.065340][ T6881] macvlan1: left promiscuous mode [ 111.079392][ T6881] bridge0: port 3(macvlan1) entered disabled state [ 111.292214][ T6888] bridge0: port 3(vlan2) entered blocking state [ 111.313264][ T6888] bridge0: port 3(vlan2) entered disabled state [ 111.332481][ T6888] vlan2: entered allmulticast mode [ 111.347783][ T6888] veth0: entered allmulticast mode [ 111.387766][ T6888] vlan2: entered promiscuous mode [ 111.399654][ T6888] veth0: entered promiscuous mode [ 111.424768][ T6888] bridge0: port 3(vlan2) entered blocking state [ 111.433396][ T6888] bridge0: port 3(vlan2) entered forwarding state [ 111.454413][ T6911] netlink: 'syz.2.253': attribute type 8 has an invalid length. [ 111.496798][ T6913] No such timeout policy "syz0" [ 111.539588][ T81] bridge0: port 3(vlan2) entered disabled state [ 111.852910][ T6930] openvswitch: netlink: Message has 8 unknown bytes. [ 111.996811][ T6929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.187043][ T6933] netlink: 'syz.4.258': attribute type 4 has an invalid length. [ 112.692978][ T6960] __nla_validate_parse: 10 callbacks suppressed [ 112.693004][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 112.837935][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 113.103110][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 113.355877][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 113.398514][ T6981] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 113.431778][ T6984] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 113.630968][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 113.665913][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 113.774680][ T6999] netlink: 'syz.3.272': attribute type 4 has an invalid length. [ 113.813696][ T6999] netlink: 144 bytes leftover after parsing attributes in process `syz.3.272'. [ 114.132833][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 114.175572][ T7020] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 114.572192][ T7040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.277'. [ 114.952538][ T7050] netlink: 'syz.0.280': attribute type 13 has an invalid length. [ 115.092393][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 115.195619][ T7060] Bluetooth: MGMT ver 1.23 [ 115.239588][ T7055] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 115.827322][ T7077] netlink: 'syz.1.285': attribute type 4 has an invalid length. [ 116.990884][ T7137] dccp_invalid_packet: P.Data Offset(8) too large [ 117.186751][ T5844] Bluetooth: hci0: command 0x0c20 tx timeout [ 117.195034][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.302853][ T7149] netlink: 'syz.0.303': attribute type 14 has an invalid length. [ 117.318235][ T7149] netlink: 'syz.0.303': attribute type 13 has an invalid length. [ 117.322541][ T7154] raw_sendmsg: syz.2.305 forgot to set AF_INET. Fix it! [ 117.568541][ T7165] ip6tnl2: entered allmulticast mode [ 117.595333][ T7165] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 117.782329][ T7174] __nla_validate_parse: 8 callbacks suppressed [ 117.782350][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'. [ 117.816840][ T7165] netlink: 'syz.4.306': attribute type 10 has an invalid length. [ 117.825497][ T7165] netlink: 40 bytes leftover after parsing attributes in process `syz.4.306'. [ 117.889544][ T7165] veth0_vlan: entered allmulticast mode [ 117.904358][ T7165] bridge0: port 3(veth0_vlan) entered blocking state [ 117.949828][ T7165] bridge0: port 3(veth0_vlan) entered disabled state [ 118.059966][ T7165] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 118.192229][ T7191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.319'. [ 118.220341][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 118.400618][ T7195] Cannot find set identified by id 0 to match [ 118.411580][ T7197] Cannot find set identified by id 0 to match [ 118.530882][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 118.574337][ T7203] 8021q: VLANs not supported on ipvlan0 [ 118.759002][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 119.133913][ T7227] syzkaller0: entered promiscuous mode [ 119.154174][ T7227] syzkaller0: entered allmulticast mode [ 119.214276][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 119.228951][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 119.274565][ T53] Bluetooth: hci0: command 0x0c20 tx timeout [ 122.153012][ T7284] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 122.227753][ T7288] sctp: [Deprecated]: syz.0.343 (pid 7288) Use of int in max_burst socket option deprecated. [ 122.227753][ T7288] Use struct sctp_assoc_value instead [ 122.489200][ T7301] netlink: 'syz.1.350': attribute type 21 has an invalid length. [ 122.563819][ T7301] netlink: 'syz.1.350': attribute type 6 has an invalid length. [ 122.591965][ T7301] netlink: 156 bytes leftover after parsing attributes in process `syz.1.350'. [ 122.605443][ T7312] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 122.657071][ T7312] netlink: 224 bytes leftover after parsing attributes in process `syz.0.351'. [ 122.923343][ T7324] __nla_validate_parse: 1 callbacks suppressed [ 122.923365][ T7324] netlink: 132 bytes leftover after parsing attributes in process `syz.1.356'. [ 123.210339][ T7336] xt_TPROXY: Can be used only with -p tcp or -p udp [ 123.327735][ T7328] veth0: left allmulticast mode [ 123.343956][ T7328] veth0: left promiscuous mode [ 123.429294][ T7328] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 123.477807][ T7335] netlink: 'syz.1.359': attribute type 8 has an invalid length. [ 123.717960][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.361'. [ 123.740448][ T7321] siw: device registration error -23 [ 123.752879][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.361'. [ 123.802707][ T7349] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20002 [ 123.831481][ T7344] erspan0: entered promiscuous mode [ 123.860432][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 123.870156][ T7338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.355'. [ 123.872498][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 123.909530][ T7344] erspan0: left promiscuous mode [ 124.404025][ T7369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.568356][ T7380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.371'. [ 124.714646][ T7385] syz.0.372[7385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.714761][ T7385] syz.0.372[7385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.729697][ T7385] syz.0.372[7385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.967330][ T7394] netlink: 1 bytes leftover after parsing attributes in process `syz.4.376'. [ 124.994911][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 125.579827][ T7410] netlink: 84 bytes leftover after parsing attributes in process `syz.3.381'. [ 126.212746][ T7437] Cannot find set identified by id 0 to match [ 126.299174][ T7440] xt_nat: multiple ranges no longer supported [ 127.131134][ T7474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.194779][ T7474] batadv_slave_0: entered promiscuous mode [ 127.276025][ T7488] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 127.336818][ T7488] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 127.393053][ T7493] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 127.421552][ T7493] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 127.448284][ T7495] Cannot find del_set index 0 as target [ 127.600040][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 127.747981][ T7507] atomic_op ffff88807a84a998 conn xmit_atomic 0000000000000000 [ 127.788634][ T7511] x_tables: duplicate underflow at hook 1 [ 127.821160][ T7511] x_tables: duplicate underflow at hook 1 [ 127.857406][ T7510] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 127.920129][ T7510] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.084434][ T7523] __nla_validate_parse: 4 callbacks suppressed [ 128.084457][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 128.146396][ T7524] netlink: 'syz.0.415': attribute type 21 has an invalid length. [ 128.154655][ T7524] netlink: 128 bytes leftover after parsing attributes in process `syz.0.415'. [ 128.177862][ T7524] netlink: 'syz.0.415': attribute type 5 has an invalid length. [ 128.194632][ T7524] netlink: 3 bytes leftover after parsing attributes in process `syz.0.415'. [ 128.281617][ T7528] dvmrp0: entered allmulticast mode [ 128.852877][ T7518] dvmrp0: left allmulticast mode [ 128.866508][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.903690][ T7556] netlink: 72 bytes leftover after parsing attributes in process `syz.4.425'. [ 128.995013][ T7552] veth0_to_bridge: entered promiscuous mode [ 129.244078][ T7568] netlink: 'syz.0.428': attribute type 33 has an invalid length. [ 129.910634][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.919444][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.977134][ T7552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.987432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.011057][ T7550] veth0_to_bridge: left promiscuous mode [ 130.016908][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 130.016948][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 130.122077][ T7610] netlink: 332 bytes leftover after parsing attributes in process `syz.3.438'. [ 130.256365][ T7613] netlink: 332 bytes leftover after parsing attributes in process `syz.3.438'. [ 130.464917][ T7628] netlink: 1 bytes leftover after parsing attributes in process `syz.1.441'. [ 130.525010][ T7632] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 130.652250][ T7636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.661819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.889441][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 131.067706][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.099373][ T7650] ipt_rpfilter: unknown options [ 131.195029][ T7651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.228597][ T7651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.901285][ T7675] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 132.307898][ T7702] netlink: 'syz.0.465': attribute type 3 has an invalid length. [ 132.399146][ T7707] trusted_key: syz.2.462 sent an empty control message without MSG_MORE. [ 132.475315][ T7703] pim6reg: entered allmulticast mode [ 132.496921][ T7703] pim6reg: left allmulticast mode [ 132.781619][ T7727] bond0: entered promiscuous mode [ 132.800903][ T7727] batadv0: entered promiscuous mode [ 132.832241][ T7727] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 132.861566][ T7727] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 133.135794][ T7741] __nla_validate_parse: 5 callbacks suppressed [ 133.135816][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.478'. [ 133.346063][ T7747] netlink: 208 bytes leftover after parsing attributes in process `syz.3.481'. [ 133.381197][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 133.415615][ T7744] bridge_slave_0: left allmulticast mode [ 133.432577][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.440855][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.458578][ T7744] bridge_slave_0: left promiscuous mode [ 133.464712][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.484278][ T7744] bridge_slave_1: left allmulticast mode [ 133.496270][ T7744] bridge_slave_1: left promiscuous mode [ 133.502213][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.564339][ T7744] bond0: (slave bond_slave_0): Releasing backup interface [ 133.589085][ T7744] bond0: (slave bond_slave_1): Releasing backup interface [ 133.651991][ T7744] team0: Port device team_slave_0 removed [ 133.661226][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 133.730105][ T7744] team0: Port device team_slave_1 removed [ 133.747533][ T7744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.762731][ T7744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.789412][ T7744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.815941][ T7744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.889314][ T5880] net_ratelimit: 16 callbacks suppressed [ 133.889336][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.943905][ T7756] C: renamed from team_slave_0 (while UP) [ 133.959058][ T7756] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 133.968141][ T7756] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 134.076886][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.126549][ T7772] netlink: 136 bytes leftover after parsing attributes in process `syz.0.487'. [ 134.162153][ T7772] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 134.229304][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.400440][ T7786] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 134.410250][ T7791] netlink: 'syz.0.492': attribute type 1 has an invalid length. [ 134.504050][ T7789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.555678][ T7791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.578088][ T7796] lo speed is unknown, defaulting to 1000 [ 134.588869][ T7796] lo speed is unknown, defaulting to 1000 [ 134.590149][ T7795] Cannot find del_set index 1 as target [ 134.707257][ T7796] lo speed is unknown, defaulting to 1000 [ 134.897086][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.497'. [ 134.921444][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.497'. [ 134.943487][ T7789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.010317][ T7808] netlink: 'syz.0.496': attribute type 21 has an invalid length. [ 135.038035][ T7808] netlink: 132 bytes leftover after parsing attributes in process `syz.0.496'. [ 135.055103][ T7796] infiniband syz0: set active [ 135.066499][ T7796] infiniband syz0: added lo [ 135.084310][ T7816] bridge_slave_0: left allmulticast mode [ 135.101814][ T7816] bridge_slave_0: left promiscuous mode [ 135.109661][ T7796] RDS/IB: syz0: added [ 135.114666][ T7796] smc: adding ib device syz0 with port count 1 [ 135.123842][ T7796] smc: ib device syz0 port 1 has pnetid [ 135.131919][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.144143][ T7816] bridge_slave_1: left allmulticast mode [ 135.150963][ T7816] bridge_slave_1: left promiscuous mode [ 135.158087][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.213573][ T7816] team0: Port device C removed [ 135.230176][ T7816] team0: Port device team_slave_1 removed [ 135.236610][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.246091][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.255510][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.267925][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.293213][ T7816] vlan2: left allmulticast mode [ 135.299140][ T7816] vlan2: left promiscuous mode [ 135.304219][ T7816] bridge0: port 3(vlan2) entered disabled state [ 135.322332][ T7815] erspan0: entered promiscuous mode [ 135.333160][ T7815] erspan0: left promiscuous mode [ 135.348165][ T119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.372830][ T5880] lo speed is unknown, defaulting to 1000 [ 135.404170][ T7789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.515101][ T7829] tipc: Started in network mode [ 135.534306][ T7829] tipc: Node identity 002e0000000000000000000000000001, cluster identity 4711 [ 135.564689][ T7829] tipc: Enabling of bearer rejected, failed to enable media [ 135.579379][ T9] lo speed is unknown, defaulting to 1000 [ 135.640934][ T7789] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.710581][ T7796] lo speed is unknown, defaulting to 1000 [ 135.821050][ T7852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.869059][ T7853] netlink: 'syz.0.506': attribute type 4 has an invalid length. [ 135.985257][ T7789] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.997109][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.070022][ T7789] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.125487][ T7789] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.135014][ T7796] lo speed is unknown, defaulting to 1000 [ 136.170757][ T7789] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.197014][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 136.213748][ T7863] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.246041][ T7863] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.284756][ T7863] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.308660][ T7868] xt_hashlimit: max too large, truncated to 1048576 [ 136.312632][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.339616][ T7865] netlink: 76 bytes leftover after parsing attributes in process `syz.3.510'. [ 136.345792][ T7863] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.411334][ T7796] lo speed is unknown, defaulting to 1000 [ 136.459841][ T7867] x_tables: duplicate entry at hook 1 [ 136.574025][ T7796] lo speed is unknown, defaulting to 1000 [ 136.715867][ T7796] lo speed is unknown, defaulting to 1000 [ 137.933320][ T7950] netlink: 'syz.4.535': attribute type 1 has an invalid length. [ 137.954091][ T7949] vlan2: entered promiscuous mode [ 138.166825][ T7962] __nla_validate_parse: 13 callbacks suppressed [ 138.166849][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 138.379578][ T7975] netlink: 'syz.4.544': attribute type 7 has an invalid length. [ 138.401159][ T7962] netlink: 68 bytes leftover after parsing attributes in process `syz.1.540'. [ 138.408149][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.544'. [ 138.678539][ T7998] Cannot find add_set index 32768 as target [ 138.979927][ T8014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.552'. [ 138.996937][ T8014] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 139.026928][ T119] net_ratelimit: 39 callbacks suppressed [ 139.026948][ T119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.182572][ T8023] netlink: 'syz.2.554': attribute type 4 has an invalid length. [ 139.230191][ T8023] xt_CONNSECMARK: invalid mode: 0 [ 139.427845][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.549141][ T119] IPVS: starting estimator thread 0... [ 139.638206][ T8040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.560'. [ 139.657885][ T8034] IPVS: using max 22 ests per chain, 52800 per kthread [ 139.664474][ T8043] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 139.795025][ T8046] netlink: 232 bytes leftover after parsing attributes in process `syz.0.562'. [ 139.819089][ T8049] netlink: 76 bytes leftover after parsing attributes in process `syz.4.563'. [ 139.988723][ T8060] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 140.156232][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'. [ 140.251405][ T8068] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 140.283704][ T8068] bond2: (slave vti0): Error -95 calling set_mac_address [ 140.291816][ T8082] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 140.338057][ T8082] bond2: entered promiscuous mode [ 140.344975][ T8085] netlink: 3 bytes leftover after parsing attributes in process `syz.1.572'. [ 140.346061][ T8082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.372605][ T8085] batadv1: entered promiscuous mode [ 140.385036][ T8085] batadv1: entered allmulticast mode [ 140.393720][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 140.404014][ T8085] bond2: (slave batadv1): making interface the new active one [ 140.415228][ T8085] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 140.467935][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.564761][ T8093] netlink: 47 bytes leftover after parsing attributes in process `syz.2.573'. [ 140.829845][ T8102] rose2: entered allmulticast mode [ 141.061681][ T8119] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 141.073389][ T8119] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 141.083010][ T8119] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 141.131757][ T8122] netlink: 'syz.1.584': attribute type 7 has an invalid length. [ 141.145692][ T8122] netlink: 'syz.1.584': attribute type 8 has an invalid length. [ 141.304888][ T8125] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.383968][ T8125] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.431114][ T8125] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.472041][ T8125] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.541380][ T8125] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.555155][ T8125] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.571321][ T8125] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.583959][ T8125] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.908662][ T8139] team0: Mode changed to "loadbalance" [ 141.917272][ T8136] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 142.230178][ T8162] netlink: 'syz.4.598': attribute type 4 has an invalid length. [ 142.435033][ T8171] FAULT_INJECTION: forcing a failure. [ 142.435033][ T8171] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.455949][ T8171] CPU: 1 UID: 0 PID: 8171 Comm: syz.0.600 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 [ 142.466865][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 142.476952][ T8171] Call Trace: [ 142.480257][ T8171] [ 142.483302][ T8171] dump_stack_lvl+0x241/0x360 [ 142.488111][ T8171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.493527][ T8171] ? __pfx__printk+0x10/0x10 [ 142.498180][ T8171] ? __pfx_lock_release+0x10/0x10 [ 142.503347][ T8171] should_fail_ex+0x3b0/0x4e0 [ 142.508248][ T8171] _copy_from_user+0x2f/0xc0 [ 142.512905][ T8171] copy_msghdr_from_user+0xae/0x680 [ 142.518170][ T8171] ? __lock_acquire+0x1397/0x2100 [ 142.523891][ T8171] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 142.529744][ T8171] ? __fget_files+0x2a/0x410 [ 142.534562][ T8171] ? __fget_files+0x2a/0x410 [ 142.539617][ T8171] do_recvmmsg+0x3bd/0xab0 [ 142.544320][ T8171] ? __pfx_do_recvmmsg+0x10/0x10 [ 142.549711][ T8171] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 142.555717][ T8171] ? ksys_write+0x22a/0x2b0 [ 142.560255][ T8171] ? __pfx_lock_release+0x10/0x10 [ 142.565382][ T8171] ? vfs_write+0x730/0xd30 [ 142.569928][ T8171] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.576018][ T8171] ? __fget_files+0x2a/0x410 [ 142.580824][ T8171] __x64_sys_recvmmsg+0x199/0x250 [ 142.586180][ T8171] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 142.592479][ T8171] ? do_syscall_64+0x100/0x230 [ 142.598330][ T8171] ? do_syscall_64+0xb6/0x230 [ 142.603749][ T8171] do_syscall_64+0xf3/0x230 [ 142.608476][ T8171] ? clear_bhb_loop+0x35/0x90 [ 142.613371][ T8171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.619548][ T8171] RIP: 0033:0x7ff697585d29 [ 142.624173][ T8171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.644047][ T8171] RSP: 002b:00007ff6983f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 142.652744][ T8171] RAX: ffffffffffffffda RBX: 00007ff697775fa0 RCX: 00007ff697585d29 [ 142.660844][ T8171] RDX: 0000000000000003 RSI: 0000000020003b40 RDI: 0000000000000003 [ 142.668961][ T8171] RBP: 00007ff6983f6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.677421][ T8171] R10: 0000000000002101 R11: 0000000000000246 R12: 0000000000000001 [ 142.685995][ T8171] R13: 0000000000000000 R14: 00007ff697775fa0 R15: 00007ffefaac81c8 [ 142.694607][ T8171] [ 142.951087][ T8198] vlan2: entered promiscuous mode [ 143.035665][ T53] Bluetooth: hci3: command 0x0405 tx timeout [ 143.128608][ T8205] IPv6: syztnl0: Disabled Multicast RS [ 143.492472][ T8226] FAULT_INJECTION: forcing a failure. [ 143.492472][ T8226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.520932][ T8226] CPU: 0 UID: 0 PID: 8226 Comm: syz.0.614 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 [ 143.532301][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 143.543538][ T8226] Call Trace: [ 143.547565][ T8226] [ 143.550813][ T8226] dump_stack_lvl+0x241/0x360 [ 143.555615][ T8226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.561291][ T8226] ? __pfx__printk+0x10/0x10 [ 143.566448][ T8226] ? snprintf+0xda/0x120 [ 143.571028][ T8226] should_fail_ex+0x3b0/0x4e0 [ 143.575754][ T8226] _copy_to_user+0x31/0xb0 [ 143.580296][ T8226] simple_read_from_buffer+0xca/0x150 [ 143.585712][ T8226] proc_fail_nth_read+0x1e9/0x250 [ 143.590792][ T8226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.596381][ T8226] ? rw_verify_area+0x55e/0x6f0 [ 143.601545][ T8226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.607159][ T8226] vfs_read+0x1fc/0xb70 [ 143.611359][ T8226] ? __pfx___mutex_lock+0x10/0x10 [ 143.616514][ T8226] ? __pfx_vfs_read+0x10/0x10 [ 143.621312][ T8226] ? __fget_files+0x2a/0x410 [ 143.626106][ T8226] ? __fget_files+0x395/0x410 [ 143.630836][ T8226] ? __fget_files+0x2a/0x410 [ 143.635484][ T8226] ksys_read+0x18f/0x2b0 [ 143.639772][ T8226] ? __pfx_ksys_read+0x10/0x10 [ 143.644689][ T8226] ? do_syscall_64+0x100/0x230 [ 143.649683][ T8226] ? do_syscall_64+0xb6/0x230 [ 143.654505][ T8226] do_syscall_64+0xf3/0x230 [ 143.659226][ T8226] ? clear_bhb_loop+0x35/0x90 [ 143.664394][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.670512][ T8226] RIP: 0033:0x7ff69758473c [ 143.674965][ T8226] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.694869][ T8226] RSP: 002b:00007ff6983f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.703690][ T8226] RAX: ffffffffffffffda RBX: 00007ff697775fa0 RCX: 00007ff69758473c [ 143.711728][ T8226] RDX: 000000000000000f RSI: 00007ff6983f60a0 RDI: 0000000000000005 [ 143.719759][ T8226] RBP: 00007ff6983f6090 R08: 0000000000000000 R09: 0000000000000000 [ 143.727771][ T8226] R10: 0000000000002101 R11: 0000000000000246 R12: 0000000000000001 [ 143.735862][ T8226] R13: 0000000000000000 R14: 00007ff697775fa0 R15: 00007ffefaac81c8 [ 143.743912][ T8226] [ 144.212694][ T8264] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 144.241696][ T8264] __nla_validate_parse: 7 callbacks suppressed [ 144.241718][ T8264] netlink: 55 bytes leftover after parsing attributes in process `syz.0.626'. [ 144.363385][ T8278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.628'. [ 144.488569][ T8284] netlink: 'syz.2.629': attribute type 11 has an invalid length. [ 144.504081][ T8284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.629'. [ 144.515176][ T8284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'. [ 144.764070][ T8279] syzkaller0: entered promiscuous mode [ 144.771111][ T8279] syzkaller0: entered allmulticast mode [ 144.780205][ T8285] netlink: 80 bytes leftover after parsing attributes in process `syz.3.630'. [ 144.845343][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 144.855820][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 144.864860][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 144.875957][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 144.925784][ T8299] ip6t_srh: unknown srh match flags 4000 [ 144.997128][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 145.057225][ T8309] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 145.142851][ T8306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.150649][ T8306] IPv6: NLM_F_CREATE should be set when creating new route [ 145.157983][ T8306] IPv6: NLM_F_CREATE should be set when creating new route [ 147.404410][ T8323] tipc: Enabled bearer , priority 10 [ 147.637451][ T8343] xt_recent: Unsupported userspace flags (00000042) [ 147.725500][ T8350] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 147.749236][ T8350] wg1: entered promiscuous mode [ 147.892185][ T8357] geneve3: entered promiscuous mode [ 147.909479][ T8357] geneve3: entered allmulticast mode [ 147.974752][ T8360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.995142][ T8355] syzkaller1: entered promiscuous mode [ 148.001387][ T8355] syzkaller1: entered allmulticast mode [ 148.029579][ T8360] netlink: 'syz.1.652': attribute type 10 has an invalid length. [ 148.238290][ T8360] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 148.274730][ T8360] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 148.475221][ T29] audit: type=1107 audit(1734655159.775:2): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?€†vãÊ&_q• ¨<ñ,PÊ~1çéîwOBÓi•ëÔ¿;Ì‹È÷$e5Ðø}rxÃ]Xf“êÆ? ‡âÖG·iMò]4Ð0p„ÕêtÖ³ñh`»ö~¬ÈŠÙÑYшxeGǦª<#u ?9Å0©¾ÇÜ\= G!í y-œ÷ [ 148.475221][ T29] hõ'ÃÆd”ÓÙù¶A) Œ×‚ßsó7©­ˆy †µ>|Ç3Weæ|¾¾üÜ¥#1ézŽ_R§?=' [ 148.524349][ T5882] tipc: Node number set to 3014657 [ 148.597169][ T8388] can: request_module (can-proto-0) failed. [ 149.063259][ T8405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.590844][ T8427] netlink: 'syz.3.671': attribute type 10 has an invalid length. [ 149.634959][ T8431] netlink: 'syz.3.671': attribute type 10 has an invalid length. [ 149.680966][ T8431] __nla_validate_parse: 13 callbacks suppressed [ 149.681014][ T8431] netlink: 2 bytes leftover after parsing attributes in process `syz.3.671'. [ 149.719272][ T8441] netlink: 'syz.1.674': attribute type 1 has an invalid length. [ 149.728668][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 149.729396][ T8427] batman_adv: batadv0: Adding interface: team0 [ 149.759177][ T8442] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 149.766217][ T8442] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 149.782887][ T8427] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.854982][ T8427] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 149.888288][ T8431] team0: entered promiscuous mode [ 149.904771][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.944598][ T8431] batman_adv: batadv0: Interface activated: team0 [ 149.972304][ T8431] batman_adv: batadv0: Interface deactivated: team0 [ 149.993590][ T8431] batman_adv: batadv0: Removing interface: team0 [ 150.012317][ T8457] netlink: 'syz.0.678': attribute type 7 has an invalid length. [ 150.032355][ T8431] bridge0: port 1(team0) entered blocking state [ 150.032478][ T8457] netlink: 244 bytes leftover after parsing attributes in process `syz.0.678'. [ 150.046833][ T8431] bridge0: port 1(team0) entered disabled state [ 150.063485][ T8431] team0: entered allmulticast mode [ 150.096851][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'. [ 150.117992][ T8457] tipc: Started in network mode [ 150.123333][ T8457] tipc: Node identity 00400000000000010000000000000001, cluster identity 4711 [ 150.137521][ T8457] tipc: Enabling of bearer rejected, failed to enable media [ 150.150582][ T8457] netlink: 'syz.0.678': attribute type 21 has an invalid length. [ 150.160875][ T8457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.678'. [ 150.407685][ T8472] ax25_connect(): syz.1.683 uses autobind, please contact jreuter@yaina.de [ 150.481008][ T8471] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.499473][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.683'. [ 150.534525][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 150.701289][ T8471] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.738461][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 150.742924][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.686'. [ 150.769277][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 150.859503][ T8471] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.935265][ T8503] lo speed is unknown, defaulting to 1000 [ 151.000454][ T8471] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.163582][ T8471] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.232521][ T8471] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.329767][ T8471] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.427935][ T8471] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.959554][ T8549] lo speed is unknown, defaulting to 1000 [ 152.745214][ T8589] erspan0: entered promiscuous mode [ 152.779058][ T8589] erspan0: left promiscuous mode [ 153.615305][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.624257][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.008687][ T8614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.053979][ T8614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.237425][ T8614] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.253619][ T8614] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.264112][ T8614] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.284053][ T8614] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.425546][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.441647][ T8619] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.466664][ T8619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.467095][ T12] wlan0: Trigger new scan to find an IBSS to join [ 154.523809][ T8629] netlink: 'syz.2.727': attribute type 21 has an invalid length. [ 154.594563][ T8619] syz.0.724 (8619) used greatest stack depth: 18192 bytes left [ 154.628405][ T8655] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 154.664203][ T8655] vlan3: entered promiscuous mode [ 154.677403][ T8655] vlan3: entered allmulticast mode [ 154.719770][ T8660] netlink: 'syz.1.733': attribute type 4 has an invalid length. [ 154.728971][ T8660] __nla_validate_parse: 5 callbacks suppressed [ 154.728993][ T8660] netlink: 144 bytes leftover after parsing attributes in process `syz.1.733'. [ 155.081688][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 155.154475][ T8710] syz_tun: entered promiscuous mode [ 155.211696][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.4.742'. [ 155.355474][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.747'. [ 155.443559][ T8740] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 155.458152][ T8740] netlink: 144 bytes leftover after parsing attributes in process `syz.0.746'. [ 155.609734][ T8749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.751'. [ 155.673903][ T8751] nbd: must specify at least one socket [ 155.769777][ T8702] syz_tun: left promiscuous mode [ 155.829434][ T8756] netlink: 'syz.1.753': attribute type 10 has an invalid length. [ 155.865337][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.753'. [ 155.897386][ T8756] ipvlan1: entered promiscuous mode [ 155.912445][ T8756] ipvlan1: entered allmulticast mode [ 155.927544][ T8763] xt_l2tp: wrong L2TP version: 0 [ 155.933305][ T8756] veth0_vlan: entered allmulticast mode [ 155.942245][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'. [ 155.964998][ T8756] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 155.987538][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'. [ 159.506488][ T8697] wlan0: Trigger new scan to find an IBSS to join [ 160.408047][ T8690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.864102][ T8829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.149684][ T8829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.240901][ T8841] netlink: 48 bytes leftover after parsing attributes in process `syz.4.779'. [ 167.337976][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 167.643200][ T8829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.810903][ T8829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.952306][ T8829] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.008022][ T8829] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.062727][ T8829] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.093278][ T8829] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.227665][ T8861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.788'. [ 168.810796][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 168.820133][ T8884] netlink: 'syz.2.798': attribute type 12 has an invalid length. [ 168.898392][ T8880] veth0_virt_wifi: entered promiscuous mode [ 168.935088][ T8880] veth0_virt_wifi: left promiscuous mode [ 169.361038][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.809'. [ 169.418515][ T8805] Set syz1 is full, maxelem 65536 reached [ 169.932066][ T8932] team0: Device gtp0 is of different type [ 170.129295][ T8945] vxcan1: tx address claim with dlc 1 [ 170.135364][ T8943] netlink: 176 bytes leftover after parsing attributes in process `syz.4.825'. [ 170.162248][ T8943] netlink: 176 bytes leftover after parsing attributes in process `syz.4.825'. [ 170.759105][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 170.799159][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 170.821649][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.842'. [ 170.896878][ T8982] netlink: 'syz.4.842': attribute type 12 has an invalid length. [ 171.171759][ T9000] syzkaller1: entered promiscuous mode [ 171.186361][ T9000] syzkaller1: entered allmulticast mode [ 171.507404][ T9018] netlink: 'syz.1.860': attribute type 5 has an invalid length. [ 171.568679][ T8692] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 171.657001][ T8692] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 174.958524][ T9087] __nla_validate_parse: 1 callbacks suppressed [ 174.958544][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 175.194008][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 175.229921][ T9102] netlink: 48 bytes leftover after parsing attributes in process `syz.4.893'. [ 175.254762][ T9105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.895'. [ 175.348598][ T9111] tipc: Started in network mode [ 175.353552][ T9111] tipc: Node identity b2cb75f59b59, cluster identity 4711 [ 175.377809][ T9111] tipc: Enabled bearer , priority 0 [ 175.410201][ T9111] syzkaller0: entered promiscuous mode [ 175.422876][ T9111] syzkaller0: entered allmulticast mode [ 175.487761][ T9105] tipc: Resetting bearer [ 175.561601][ T9105] tipc: Disabling bearer [ 175.574154][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 175.604037][ T9117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.901'. [ 175.623692][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'. [ 175.644865][ T9120] netlink: 'syz.1.901': attribute type 14 has an invalid length. [ 175.700559][ T9120] netlink: 'syz.1.901': attribute type 11 has an invalid length. [ 176.018789][ T9144] veth0_to_batadv: entered promiscuous mode [ 176.034107][ T9144] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 176.418095][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.917'. [ 176.500768][ T9167] tipc: Started in network mode [ 176.505983][ T9167] tipc: Node identity 080211000001, cluster identity 4711 [ 176.526623][ T9167] tipc: Enabled bearer , priority 0 [ 176.550009][ T9162] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 176.567713][ T9162] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 176.602591][ T9168] lo speed is unknown, defaulting to 1000 [ 176.673367][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 176.783752][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 176.847649][ T9178] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 176.969427][ T9168] netlink: 'syz.3.918': attribute type 32 has an invalid length. [ 177.430834][ T9201] ip6_tunnel: non-ECT from 2000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xf [ 177.646271][ T57] tipc: Node number set to 134418688 [ 178.277327][ T9263] [ 178.279769][ T9263] ============================= [ 178.284713][ T9263] WARNING: suspicious RCU usage [ 178.289764][ T9263] 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 Not tainted [ 178.297821][ T9263] ----------------------------- [ 178.302792][ T9263] net/ethtool/common.c:873 suspicious rcu_dereference_protected() usage! [ 178.311711][ T9263] [ 178.311711][ T9263] other info that might help us debug this: [ 178.311711][ T9263] [ 178.322263][ T9263] [ 178.322263][ T9263] rcu_scheduler_active = 2, debug_locks = 1 [ 178.330437][ T9263] 1 lock held by syz.3.943/9263: [ 178.335382][ T9263] #0: ffff88802979c658 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xebc/0x3290 [ 178.345544][ T9263] [ 178.345544][ T9263] stack backtrace: [ 178.351727][ T9263] CPU: 1 UID: 0 PID: 9263 Comm: syz.3.943 Not tainted 6.13.0-rc2-syzkaller-00516-g6b3099ebca13 #0 [ 178.362424][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 178.372764][ T9263] Call Trace: [ 178.376067][ T9263] [ 178.379022][ T9263] dump_stack_lvl+0x241/0x360 [ 178.383820][ T9263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.389050][ T9263] ? __pfx__printk+0x10/0x10 [ 178.393678][ T9263] lockdep_rcu_suspicious+0x226/0x340 [ 178.399087][ T9263] __ethtool_get_ts_info+0x97/0x410 [ 178.404324][ T9263] ethtool_get_phc_vclocks+0xa1/0x160 [ 178.409739][ T9263] ? __pfx_ethtool_get_phc_vclocks+0x10/0x10 [ 178.416088][ T9263] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.422098][ T9263] ? dev_get_by_index+0x23/0x2d0 [ 178.427474][ T9263] sock_set_timestamping+0x3e2/0xab0 [ 178.432784][ T9263] ? __pfx_sock_set_timestamping+0x10/0x10 [ 178.438606][ T9263] sk_setsockopt+0x1fe7/0x3290 [ 178.443515][ T9263] ? __pfx_sk_setsockopt+0x10/0x10 [ 178.449512][ T9263] ? __pfx___might_resched+0x10/0x10 [ 178.455105][ T9263] ? __lock_acquire+0x1397/0x2100 [ 178.460255][ T9263] udp_lib_setsockopt+0x11d/0xc10 [ 178.465320][ T9263] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 178.470890][ T9263] ? __pfx_aa_sk_perm+0x10/0x10 [ 178.475757][ T9263] udpv6_setsockopt+0x73/0xb0 [ 178.480436][ T9263] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 178.487132][ T9263] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 178.494643][ T9263] do_sock_setsockopt+0x3af/0x720 [ 178.500059][ T9263] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 178.506006][ T9263] ? __fget_files+0x395/0x410 [ 178.511232][ T9263] ? __fget_files+0x2a/0x410 [ 178.515851][ T9263] __x64_sys_setsockopt+0x1ee/0x280 [ 178.521065][ T9263] do_syscall_64+0xf3/0x230 [ 178.525582][ T9263] ? clear_bhb_loop+0x35/0x90 [ 178.530315][ T9263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.536484][ T9263] RIP: 0033:0x7fb45d585d29 [ 178.541157][ T9263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.561683][ T9263] RSP: 002b:00007fb45e360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.570846][ T9263] RAX: ffffffffffffffda RBX: 00007fb45d775fa0 RCX: 00007fb45d585d29 [ 178.578841][ T9263] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000003 [ 178.587787][ T9263] RBP: 00007fb45d601aa8 R08: 0000000000000004 R09: 0000000000000000 [ 178.595945][ T9263] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 178.604017][ T9263] R13: 0000000000000000 R14: 00007fb45d775fa0 R15: 00007ffc4e1b7e48 [ 178.612204][ T9263]