last executing test programs: 2m35.944953622s ago: executing program 2 (id=385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r5 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) (rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) close(r3) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x22217d3d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0xa72}}, 0x95cf, 0x8, 0x7, 0x3afb03da, 0x8, 0x5783, 0x7f}, &(0x7f0000000480)=0x9c) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x20, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x10, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8"}]}, 0x20}], 0x1}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m35.587422448s ago: executing program 2 (id=389): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040026bd7000fedbdf25050000000c0002000a000000000000000c00050002000000000000000c00030009000000000000003244d94dd69ec00985814c0fe8908f68514dfd8d8c8707b8ba8cfe4d0eab62294d4cb2051c596ec2b96003308966fd0e9f97b9c344ac743ccb299703e753b89803cfd7d9ff23334e3ee595256d70afdee44e4699a069cfbd6070422db3947e0fd9294730f03865cab5f70fb9d7b03ee13080626f2ad7e9817b246fc11c71a7e66fa596182e597a5df6c5710956fb66b49090682de5b7eb964abaa2c1471c443b1a01b5791201e5e0aaca6ae293661d0a24ccd8e0924307f78e72a67fc9f2c85c229dac19"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20044840) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000002340)=ANY=[@ANYBLOB="18210000000000000000000000000000950000000000000060676b152c3002000da9aec49409fceba20b97dda3c6f7617e65dc985d117cecfdf182aa82e4adde3e41457cc3dc628644fcc32c08740f5620dbb3a10c2356ac0853221ebe50a6d884fe36f06712a6c0cb36ba94f782c82bdd6de6c5dd7ef70fd54706a421193b425046853fcf4c2a27426deab0e0d8f35b0d8a76d3ddf27d2798a2cf17e344d2c7f77bd0ac8377149556747ed8f4dc569dac49d88c3321923cd0e827b6c9be5a2e385defa93740614a8ea03faf1885b12474099dbb4ea88c4ed4fed8e1530de684c6"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) (async) socketpair(0x11, 0x0, 0xc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) (async) r8 = socket$rds(0x15, 0x5, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) (async) ppoll(&(0x7f0000002180)=[{r5, 0x1000}, {r8, 0x4000}, {r6, 0x400}, {r7, 0x414}, {r9}, {r7, 0x100}, {r5, 0x20a}], 0x7, &(0x7f0000002440)={0x77359400}, &(0x7f0000002480)={[0x8]}, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x9, 0xf3, {{0x1d, 0x4, 0x1, 0x8, 0x74, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x42}, {[@lsrr={0x83, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local]}, @timestamp_prespec={0x44, 0x2c, 0xb8, 0x3, 0xc, [{@remote, 0x7}, {@multicast2, 0x6d2}, {@private=0xa010101, 0x4}, {@broadcast, 0x1ff}, {@empty, 0x9}]}, @ssrr={0x89, 0x23, 0xa5, [@loopback, @empty, @empty, @multicast1, @remote, @empty, @remote, @private=0xa010100]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f00000020c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002080)={&(0x7f0000005440)=ANY=[@ANYBLOB="cc1d0000", @ANYRESOCT=r7, @ANYBLOB="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"/4241, @ANYRES32=r10, @ANYBLOB="1400020077673200000000000000000000000000140002007767320000000000000000000000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e060006004e24000008000700fcffffff3c030880a4010080080003000200000008000a000100000024000100000000000000000000000000000000000000000000000000000000000000000048010980c4000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030002000000060001000200000008000200ffffffff0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000a00000014000200fc010000000000000000000000000000050003000300000040000080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000bb050003000300000040000080060001000a00000014000200fc010000000000000000000000000001050003000300000006000100020000000800020064010101050003000200000024000100000000000000000000000000000000000000000000000000000000000000000004000080200100802400010000000000000000000000000000000000000000000000000000000000000000001400040002004e240000000000000000000000000800030001000000a4000980a0000080060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc02000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414360500030002000000060001000a0000001400020020010000000000000000000000000002050003000000000008000a000100000006000500040000001400040002004e20ac1e010100000000000000001400040002004e23ac14142f00000000000000005c00008024000200e299c000bdfd2b48bd2467b317153cb436882fd800309397b586c709f56be1a306000500a704000008000300040000000800030056adb24608000a00010000001400040002004e227f000001000000000000000014000080080003000200000008000a0001000000a80908800c0000800800030006000000d80400801400040002004e23ac1e0101000000000000000008000a000100000024000200dec6f2ac4d93d99d90a85c4047aa6c0aba4b1447adcc5f9b62279020ef764dac3004098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300020000003c010080060001000a00000014000200ff0200000000000000000000000000010500030002000000060001000200000008000200e00000010500030000000000060001000200000008000200ac1414aa0500030002000000060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fc0000000000000000000000000000010500030002000000060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc0000000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200ac1e00010500030001000000060001000a00000014000200fe8000000000000000000000000000aa05000300020000001c000080060001000200000008000200ac1414bb0500030003000000c4000080060001000200000008000200ac1414bb0500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e00000020500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200fe8000000000000000000000000000380500030000000000060001000200000008000200ac1414aa05000300030000001c0000800600010002000000080002000a0101000500030002000000d00000800600010002000000080002007f0000010500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200ac1e00010500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac1414380500030003000000060001000200000008000200ac1414aa050003000100000088000080060001000200000008000200ac1e01010500030001000000060001000200000008000200ac1414240500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200000000000500030001000000060001000200000008000200ac14142805000300020000001c00008006000100020000000800020064010102050003000200000058000080060001000200000008000200ac14142d0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a00000014000200fe80000000000000000000000000000a0500030002000000240002003e52916d390b1456f90872c3dd1bdcd0f44000f38275a90b31aae25396f66f9a24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22e00000010000000000000000080003000200000074000080200004000a004e2000000080fc01000000000000000000000000000001000000060005000100000008000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e2200000000000000000000000008000a000100000020010080200004000a004e2000005cf9fe80000000000000000000000000002dff000000fc000980340000800600010002000000080002000a0101000500030001000000060001000200000008000200ac1414aa0500030002000000c40000800600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000200000008000200e00000020500030001000000060001000a0000001400020000000000000000000000ffffac1414bb0500030002000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000a00000014000200ff010000000000000000000000000001050003000300000094010080200004000a004e230000b39eff0100000000000000000000000000010a0000005001098028000080060001000a00000014000200ff0200000000000000000000000000010500030001000000700000800600010002000000080002007f0000010500030002000000060001000200000008000200ffffffff0500030003000000060001000200000008000200ac14142c0500030003000000060001000a00000014000200fe8000000000000000000000000000aa050003000000000034000080060001000200000008000200e000000205000300020000000600010002000000080002007f000001050003000200000040000080060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000001b050003000100000040000080060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000020500030001000000200004000a004e2400000001fe8000000000000000000000000000221e1294c44c000080200004000a004e2400000005fc00000000000000000000000000000002000000200004000a004e2200000001fe8000000000000000000000000000aae9ce000008000a000100000014000080080003000200000006000500ff03000038010080240002000fc5c75fad2686f3ac3e38cd24d496f5ffded40a1c870f502aa0c13844d7c1c9080003000500000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922b0000980ac000080060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a0101000500030002000000060001000a00000014000200fc0000000000000000000000000000010500030001000000060001000200000008000200640101020500030001000000060001000200000008000200640101020500030002000000060001000200000008000200e0000001050003000000000008000300020000000800050000000000"], 0x1dcc}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYRESOCT=r2, @ANYRES16=r9, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRES64], 0xc78}, 0x1, 0x0, 0x0, 0x4804}, 0x10) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async, rerun: 32) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940), 0x10) (async, rerun: 32) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x4, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048811}, 0x80) (async, rerun: 64) listen(0xffffffffffffffff, 0x0) (async, rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) 2m35.374903772s ago: executing program 2 (id=392): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffff9, 0x200}, 0xc) close(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = getpid() syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x55b384b88954931e}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40008805) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c3c, 0x0, 0x0, 0x200000000c70, 0x5], 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000600000016eca8aeba000000000000000000000000000000000000000000000000000000000000000000feffff"]}, 0x108) socket$pppoe(0x18, 0x1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time\x00') r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000f2ffffff04000000186100000100000000000000ce000000185d00000400000000000000000000005543f8ff080000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x5, 0x1, 0x2, 0x8}, {0x4, 0x3, 0x1, 0xa}, {0x2, 0x2, 0x5, 0x3}, {0x2, 0x4, 0xb, 0x1}, {0x0, 0x5, 0x3, 0x9}, {0x5, 0x3, 0xa, 0x8}], 0x10, 0xb, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xfa, 0x29, &(0x7f0000000340)="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", &(0x7f0000000440)=""/41, 0x100, 0x0, 0x38, 0x40, &(0x7f0000000480)="c3f621ca3173a8e2788e0306c867e6dd73fefd2425d11f18382f7993fdb44567fa2943c6c5a7023e8f9816c16810f8955c0ef490733fa1d0", &(0x7f00000004c0)="5f28826a84209b8c6824b53b214198e480443fb251b9c666931f3534eaafc2593d90ae124af350884fc4dd385fc53be2681f4e9af66a6fbd0f3b2402153618e6", 0x2, 0x0, 0x6}, 0x50) unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x4af}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004041) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) shutdown(r6, 0x1) 2m34.743108554s ago: executing program 2 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x40, {0xa, 0x50, 0x80, 0x80, 0x0, 0x0, 0x0, 0x3, 0x16}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m34.455031321s ago: executing program 2 (id=402): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x201) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff030768442650e04e7a8c09a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 2m34.150792138s ago: executing program 2 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000250001002cbd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x1f4d2000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000001c0)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x18, 0x1411, 0x1, 0xfffffffe, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000003c40), 0x4) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000200)=0x7f, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)={0x2c, r7, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="2a1cb3e2"}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r7, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) close(r1) 2m30.903091354s ago: executing program 1 (id=434): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000240)=0x62a6, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050000000000000f07000000000000006161"], 0x0, 0x2b, 0x0, 0x9, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)={0x18, r5, 0x1, 0x70bd2d, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x1000, 0x0, 0x1d}}]}}]}, 0x14c}}, 0x0) 2m30.522256095s ago: executing program 1 (id=440): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd70100600010007000000080009000200000008000b000000000008000c00a80a0000050012"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2m30.415424545s ago: executing program 1 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000001b0000000000880000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x73, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1006, @void, @value}, 0x94) 2m30.250313159s ago: executing program 1 (id=445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) (fail_nth: 56) listen(r1, 0xd3) 2m29.891139352s ago: executing program 1 (id=448): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m29.707144346s ago: executing program 1 (id=452): syz_emit_ethernet(0x76, &(0x7f00000005c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x6, 0x6, "dff1ee", 0x3ff, 0x2f, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [@hopopts={0x1b7}], "1fdeaa897fccfd44"}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m19.09234301s ago: executing program 32 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000250001002cbd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x1f4d2000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000001c0)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x18, 0x1411, 0x1, 0xfffffffe, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000003c40), 0x4) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000200)=0x7f, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)={0x2c, r7, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="2a1cb3e2"}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r7, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) close(r1) 2m14.647242534s ago: executing program 33 (id=452): syz_emit_ethernet(0x76, &(0x7f00000005c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x6, 0x6, "dff1ee", 0x3ff, 0x2f, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [@hopopts={0x1b7}], "1fdeaa897fccfd44"}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m25.980379625s ago: executing program 4 (id=1093): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={0x0, 0x81, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000980)={r1, 0x8001, 0x7}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x50, 0x8, {r4, r5/1000+10000}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "82de965d148a9fb2"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x48801) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) 1m23.251187243s ago: executing program 3 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x200040c1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x68, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1c}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CHANNEL={0x1c, 0x8, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000002c000000050a81020000000000000000010020000c00074000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) 1m9.319829891s ago: executing program 4 (id=1093): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={0x0, 0x81, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000980)={r1, 0x8001, 0x7}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x50, 0x8, {r4, r5/1000+10000}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "82de965d148a9fb2"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x48801) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) 1m8.136192302s ago: executing program 3 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x200040c1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x68, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1c}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CHANNEL={0x1c, 0x8, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000002c000000050a81020000000000000000010020000c00074000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) 1m3.384951917s ago: executing program 5 (id=1353): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x2000}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x8, 0x1, &(0x7f0000000400)="1f", 0x8, 0x1, 0xb57, 0xb, 0xc7, 0x2, 0x7, 'syz1\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r3) close(0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000500)="586fa1a8efed1037d65d7619937e4869a4e0655191607fc11f429e53576e8c8e90090201bc2fb87753587806257cc0bd49c3e9bbca064fb586cc1079ef9e3e555fabfd051dec989953a93dee4f06aa5f673f83ffffff7f51797876eae237e64a202afa2a1ca199ddd68e6e85e3344f0c4c8d0743afffb5d72e49bce95e1e9092e78dc425b38660333b983fb1fe70b89ec180775af25e0ccbd6715cc57bba094326dae33b", 0xa4, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000380), &(0x7f00000003c0)=0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000000)={{r3}, 0xb, 0x7ff}) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000000)=0x3, 0x4) 1m2.587192137s ago: executing program 5 (id=1357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x9f}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m2.529077435s ago: executing program 5 (id=1358): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x3000008, 0x44070, r0, 0x913e0000) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x3000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x3000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305829, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 1m2.139037118s ago: executing program 5 (id=1361): r0 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0xba01, 0x0, 0x60000800}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) (async) r3 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000180)={0x2000200a}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x2000200b}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) (async) recvmsg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1}, 0x40000000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008847"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m1.902903926s ago: executing program 5 (id=1362): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010020bd70100600010007000000080009000200000008000b00", @ANYRESDEC=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m1.814002176s ago: executing program 5 (id=1365): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0xc0, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x84}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xc0}}, 0x0) unshare(0x6a040000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) r3 = socket$netlink(0x10, 0x3, 0x8000000008) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x18}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) pipe(&(0x7f00000002c0)) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f8, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4010}, 0x4) writev(r3, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0ba392230cd97147691897469dac36f3247c8c9d10577362d1c7f5e5a9b2f2bd3114640df0fa823c719e341d4c0c04a1738795d308f47ef162ed8a167bd5b612203ea0afe5928da267857923e3f53f04b097f63957d935440dfe3ef5943e95fc2a3f839f7f7a9af4454d25f88dd1b212c911905127cd61cade509c1a987b784fd4ab6d0f50444d7b92fa39130701499e7c96f75c084a4144dc095c7e137e2faebca832c2086b", @ANYRES16=r10, @ANYBLOB="010025bd7000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="20005a801200008004000200140003000f0007000f00060006002000ff010800"], 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200025bd7000fedbdf250600000008000300", @ANYRES32=r11, @ANYBLOB="6677f770080005000800c000000800a78988c20366eb4e5300e70000"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 55.459373449s ago: executing program 3 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x200040c1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x68, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1c}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CHANNEL={0x1c, 0x8, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000002c000000050a81020000000000000000010020000c00074000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) 55.121077581s ago: executing program 4 (id=1093): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={0x0, 0x81, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000980)={r1, 0x8001, 0x7}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x50, 0x8, {r4, r5/1000+10000}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "82de965d148a9fb2"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x48801) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) 46.756420959s ago: executing program 34 (id=1365): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0xc0, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x84}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xc0}}, 0x0) unshare(0x6a040000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) r3 = socket$netlink(0x10, 0x3, 0x8000000008) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x18}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) pipe(&(0x7f00000002c0)) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f8, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4010}, 0x4) writev(r3, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0ba392230cd97147691897469dac36f3247c8c9d10577362d1c7f5e5a9b2f2bd3114640df0fa823c719e341d4c0c04a1738795d308f47ef162ed8a167bd5b612203ea0afe5928da267857923e3f53f04b097f63957d935440dfe3ef5943e95fc2a3f839f7f7a9af4454d25f88dd1b212c911905127cd61cade509c1a987b784fd4ab6d0f50444d7b92fa39130701499e7c96f75c084a4144dc095c7e137e2faebca832c2086b", @ANYRES16=r10, @ANYBLOB="010025bd7000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="20005a801200008004000200140003000f0007000f00060006002000ff010800"], 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200025bd7000fedbdf250600000008000300", @ANYRES32=r11, @ANYBLOB="6677f770080005000800c000000800a78988c20366eb4e5300e70000"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 45.110454571s ago: executing program 3 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x200040c1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x68, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1c}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CHANNEL={0x1c, 0x8, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000002c000000050a81020000000000000000010020000c00074000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) 41.023075525s ago: executing program 0 (id=1464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x6, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="014c6c7f5d50fb9c5b447c774f5c2000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xb29, 0xffffffff, {}, {}, {}, 0x1, @canfd={{}, 0x25, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x1, 0x8, 0x5, {}, {0x0, 0xea60}, {0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "9d3b91eee52ea4d8"}}, 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0x4008014) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000600)=@req={0x28, &(0x7f00000005c0)={'gretap0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr=0x64010102}}}) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) 40.718746021s ago: executing program 0 (id=1467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="1e253ec931cc2734d5462725cddf6374995c82eceeca917f107e897432b51de03d3abf33ccfe22c152a693d1c169216b00fc6f4fe59798df24f443d7d981499940ca3d0e7b639a9c5699f40130615e8699408a777f5e92eb4179005efedbc946304666375d5d574e27aed6dce365611418c626ce7655ab5a0fe9e00a99f9ea1e8bfb3e5a76e1a34b33f767108f528b26b97ee08cb6706031454e8c6835cf077a2b0015e7a5ad84006b8ee7e416f7fadd4f3a59d9b8bca7bbdc3202f972ed42f3bff0981ce8f99ed93be4171d0a42feedebc274526115293e6deba184062ef3be97711af06d6abf576bf08cb099c6181380b3aa2b48a8b254090a6a2c2cdb37b69d975af91d344c646aadc5ebdc26e1b652eb6b0363b98b03a7b7db3600b258ba87fe77ff18a3dbd2bdd24f8d7961602ced3562dce471a4f3d3397900e1c8629da04127ecd8b24bbf75052fa4b84d3a52c31f0d541e813c4ebb95e9067b452fa13314033dbe8e726ad3b14e7a29fcb3215932d2269b2bf8792c847e4542c6be4f9d1d6ff235dd9df3508b26566f0e193811a7f0a8cee12ca6bb11f69dc84b3e8e0c7f6beefee4af3571b8c83f52e2d6ebf04ed1d687fafc13174d428756aefb7c7b75fa6f50b7a169e52e3a13388bc3c6066a967684da965877e69c16e60ae8fd4c437e9f6cafc979502895bb51c48f17a5692204a17760f719911b33d07436f5b976637d405ddb214fa7452efe0892aa8715fc6aa3f674fbb6f6baaa6de869a781ac9944767a5edf9ce99c766262dca2003a8743ec33d436ac2256185b89cba63a387bfb034e8f13770dda355706e41bb9774dacd19c42b9436ae60744cd0e587802e93f2046b61194e2bbb6e5debac9feb601f2084f0d82e95d26813047ddf15b19659f25bded4a1fc05540af6432bf4c0c6d5489cdbdc1e89462ffd7b8a85a024fb66b0b697e8340b01226fe27d1d78e96f7eb4d90d0f1ae7217c61a1c29072157852e34df4824c1ee2926ecb7c31443a24470c4fb12b053c638d30c22a94ec145c50d582826ca4fdff72c687130a17c2ccf340fcde10fc8dc91cb8b593fba17ba50c7b12577cc860175312bcb52863013501b39e819b7e56441cfafe0cd13c5ec6cd55569f5fffa5aa0b8cbcb3d6ea3a4552173141b2bf5adab8a3f2738d2f0df749d4c59e464c3a3b6a3991ee13a07118ebc81b214716ae01d00ac660955c22d25846143e4054df8ac495ec86f19bb683e9842c875b51a95e422cb5438ea9fe39173cb26bef54a11cab1c08499c137081101d20074f94606d58d32c618391b4c110b6b7a0fa4d5ed47b7391929b78d6c2ec805ec92d4b579bffba4a2fdec41c3ce3d8239057d20592d5975a940336cd90419c157c5c7b64e62ee633c791da8e2265bbbf6b2ee93ef85cee2db467cbf77a7003c21e71bce18be0253c7901ce3ad62443009e891d8c1ae388e19c888cce02748cefb2a82a0d3da51ffe68e64da44de0602bc3196b6bffa9947967ce3facfd46a2299e7956baa231a09f460f9c068346cc6dc361fcc6c0ea3a4d0426ca365166a57c2bc61a5217fd7f2416310380fa3384496af7e14615419b6a221b3c3ab96cd050edc287cc8568be54765e67b1e45e1997c50b8a14d691aceedab514628af37ae04a2baf898a0dd29ce5fce183eed2cbb494d20cae2488fd19dac1f7de95a6a836d644ec41ba4594c1bd4df9d6c26f8c7bbee84dc048741e401c87e1c88a0bf999b9ea4a3de47787935ff80e2d01e6a536d9f061e470c23d7f89f78f4608a815e0bac1df9fd6d080f92ee6c7be7497f8ed318d3685ee9afb0c5de5736ffd66977878e17c6b70ad2fa7c43ef7583a33b8b713f9b479be58ba5c61f6271fcee2dc747813eeedee6c5e9268da84c6c0075e64e681ba4398b32e2e6862b8519a8ef84802dfed1f1e4da2aa54673976fb89c9a6a13d89a8d3a362b44e21c2b780cf5d363c894e2553003f984b6e69f3081ec36fb0dd7821c81225623b6098bd13fb9f5b4a845664dd8a94207c09c30bbc6fb919268665eae3c3afb0b0866e0a6fa6fdfcfbab800e8e2f5f5daf36f4ca36dbbae6773b14770640221bc358f48dc0568c03c700919c12652951cec6762adfc6be65791e9b56d9008fd12f63689f4d2f16bc867e50df4d43feaef31bac5066cf5fb6eaf810b41b4a621384a7bd8aab04e6c20a7cd4c27598d52aeb21f1a053d59a37c05af71f3117f7c3bb0b0db218a046d3e06b8e9a98a48c71ee3c7449858a9237935152e73adc8a02fa34d20f46c3d96ce693634633cdff973026ad9e85ed8f86d1105bf7f2a72f4f32e1253beb78797c4edb3ab75df3a1db9a9bc600a7e0eb205f97e54ddef789a7568b0b6749aa3851e907982a6368a17b61d7671c03e05952cd474b274f17d7a8473640246251dbe4ef30e87dd862f7b5f1b407684df3f058f4dcf1954019997168eb71ae37173ca8a90ef7a9dfc4a4a87a2b1ad8ebd9ee510f5125683dcf53f416e329011e5aa7089118a82564bb9d65de10f7476218d3ab9e931c85683a5dc970eaea32071f06360bd749caf9a01c2f618e7e7fea2770a5aa484d1d3693e8f1a2ccfa8bac5d6f54220a88eb86c8ab57bbc9281fa8bde720c452400f6cd62406797d728ce19b6b5d0972f139b7cbc5b8f9c1f346a73fa10afa1d2951d12eca4d8ca3969b052d55f8784d8bdca5224ef38e2a396f7f943f8d760344f900185003c1b1ab94e3746563444e85c3aa2d99f271eb5719de2a39019afc386c32aa666964e1b22c0f80ad3bae3c087d1268e9cc213b1735e7c47b9837ab2a2cd2330254a58fa1e4efd2ee79bcfa76fd762130bfbbf526e00902e83ed47b3538d565b5f2f2c1efc00dd9eee560c763dd8ef6f39be9047c4dfc4c1b56fe5005df571e91aaa4b7980d0065b5211dc1f57d61204e501b1bcbdf88561c3ed6763b37b63be45f825ff5b7b828e7da526ab2d872bd5151ec0699cacb1458753ebf7a7d9f25219d435b85172215cde94c415246451a371c7429ef4a50a74cae4b9df1ab87ceefaeeab649b57f8e53ea709f5516537f5cbce49ce609fe8bdc421fb6682fe9049dedad9c9a3e30360b311f85bc08c4a725b0902430942753fa988f380505b246e98eeedd28d7307bb8beef2a73098c8ea269009430e50d34cc98b417b857485d1047cfd306b1c1adc5138912cb79c4c780d15c3f27086feb3a2823f54c60050e4b94286d6098b7701eec1f2dde0280209cf50aca7a27064e0e51373cbc430e7764dbfed0ca7e0203a4594aeeb90aac58b3e1b44e2900e87213ec385a6aae8c68ca1e14cfb435fa933ef818b4c74a88dba4221ee6540c9ae139f625096343f11ad2c60d897c77ebb26bca8e126b0900abaa89c7a124f6021c57d4f842875e2d8ee520cc804940d8df2736d5bc33abf3d4ec1632d3a7fc726a1a0037dff38720dc5ae3859ff4a1c3269b850ff6d73c7229040ac3c1a303abb2b2fccc8ad2b57bb5d0dd7c55ed2a562aaa91c83042ff12eb98cabdb92ab58ac716cdec3522fb57085b479b5f97bf0f36943c3cf3952e5a9d4620501fd6d8737d42a897ee861fb85a8b2b0ee621a8f3b1b6a8c043042003502f2915cf874eb2e071b9d8479a00acf689f1e6bcf679a7a379ac8d4fb9deabf83396071606a2327dabdbf4751b9b4dbead6971662318da04e8a11f249303c6fbd0e6bf47d0cfcd2886133bafcd38d2c203635dfdaca04edea6e3fea651e679c6aacd88d6f23af4b6bbca79c778b3f7195a1a93e1c227a2565f315fae256bc73d6596edcfe87e6bdf004c885fc196e51dfdbd00f3f9e7e8247e76288b60256a347c6afab86634723e46ea2f6abfb62b9bda447a74665193b6575648e8c52979ac0f4e1ed117dfb2d254f75ba03dd1a2d8e62fc9ebcace028a8370f76e9a33deb1875d315b766ab3c54fe48169863aeb88a3f2a5137e32f87af3bcfa4e070e7eae622e53f74ab6ee0b2b5f4f7a590cee4a45d0d548c676ecef1df64e96b7ba7baf50e45b51168f5f5f9a9627a1f3be744c3dc43596f22bcc3ff3691dd7d85ff79124fecffee052ce8ff998a87e93041dff1fc6231f4cdf0b5140f373d4573d57cee13131508dcd4d43e9716e25bc9fe4db0de779cbe579afc0a59c94f7d97c68505438c0800000000000000a5086977fb375cff19c5c513879f3cff0ce5a64d5ed26b2744b8ccd9c0a4354da3516415f605975de4ea98107483bc06697467221e629fcaf7375120c2d8df88b3efae1715e9441c57cfea6c4d39ee540ac891cf8d9aea25375df9faa18bd5718f3e0f45ddee95750b87c42c5974adfd9232cbcd66088aad9d185a736f33eb56ffdf9c9c16b7aed0119630097bb87814c79d073a770127613d46ba21fa79cc710f4118ec1398b960746a81eea96eafa2dd6a13a42a079215963f19f71ec90133ff64b5592a0391384dfa73addf99eefba416244bab6bf62da53229d0e3477007ab29747af11a738cb41fd74473f2a9667d7dd501991684d914867ddad45d7cb93472a47284444c9546edc4cc834f570c083345d83409a3507d25c1979ce9d3f6fbe073d26e95074a020ebdba442fe420b3c2b80180a3dd24cd089ae37c302b597df5b3d8b7c00bdde719b17785b6edd96a09ab21ee6e58211bdeb5a85c510274512336e2af686afa65d6dc7c4289ee5d279195b38ca49e40fb6fcfe710c816a3a98e94858a0b5031f4033296d9e59879e35177365d0a999ce28f925d2ecb2e3317a5b734c9dafec51ee926e3c93288435bb37f0305896cce17db15bd43a7b6c53b4118cc2f6a31e44d7a6ea0a65a98a614704ba03f4de8d0acf9685460958ee6a035e408ef09784ab90ca0f8c2c3ab5a7227d02e70ff5f289e1c14cc3e1d542386b9641ac5755ade49374341da0aef5937b9711d84d4314b834b19adcc1ddadef5387424ca306cd5444b1676abab20103c6fb5efc081a91c52dee291f8db45c77b7dc006b15e1b7ae224a397edd5fa7ad615bb38ddfb4d44c7c9c76ab8308d93e2d481a6594a6e71e6e0f23d4799510f59f77095b51a90aeb331309c2177d791ae8ca78cb82302822b9380436bcdce801810b0b2e729d647694523f56fb86d4b6991688c20a227f06bccfbdf971d2038fba97445ceb300352318e4c86e9fa318826af85cf29bff7856dc076f31f1a549f7070e7fd4ba17cefda8edddd491b09885b00c6258ee1dfa67dd02e40cd9a95683a86f5c0a176bb591742e9b718e35bb9b8b14e4c7295fd4931f0bbe3bedbf328e9a5d8f21588bf11d622e610bdb3eeebded139b20150c7e46f6f9f947ba187ff51a831f90c05d11076e1bfabe1cb2cc39b0e9a709340e5d3c2a235684a242c344517f5a1c3638300160ff77f46a8f2eec7b873f7d2a9093318c954bba0f3c95c627adb5b0fc9aeb97a7778f261a8f4defcdc9de2abd6593bd70ec74cc06978a53678d272f9648d08ac676fc7497274c75cbe86773f207bd611bbda9ac5c91d85514b357fb78c342cf217558319a91715c328b22191fc0de598dec62cadc48ebee39ebe83c4134441f8f59", 0xf61}], 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @broadcast}, &(0x7f0000000080)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', r7, 0x20, 0x10, 0x4, 0x8, {{0x14, 0x4, 0x3, 0x9, 0x50, 0x64, 0x0, 0x9a, 0x4, 0x0, @remote, @local, {[@lsrr={0x83, 0xf, 0xd3, [@rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x28, 0x0, 0x6}, @timestamp={0x44, 0x24, 0x49, 0x0, 0x7, [0x5, 0x8000, 0x3, 0x9, 0xffffff81, 0x3, 0x1000, 0x6c8a]}]}}}}}) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000001eef558a921eb7b2a36988d6fd1dfc8f00", @ANYBLOB="05e928da4e1fda169c6bb26ce91f7904ef8245327bed630ff2a0576d77c621ca267164b4a32bc964b1553e4b74", @ANYBLOB="01002bbd7000fedbdf2537000000080003007df7596a6eb7c8a1697a61360e596c", @ANYRES32=r8, @ANYBLOB='\b\x00&\x00l\t\x00\x00\b\x00W\x00\x00\b\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x20008854}, 0x4000) 39.546412302s ago: executing program 0 (id=1472): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r0, 0x24, 0x0, 0x6, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 39.544180393s ago: executing program 4 (id=1093): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={0x0, 0x81, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000980)={r1, 0x8001, 0x7}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x50, 0x8, {r4, r5/1000+10000}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "82de965d148a9fb2"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x48801) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) 39.294864917s ago: executing program 0 (id=1474): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000001403000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000007c000000b700000001000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac66ad029d1c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a7c31de7910d1ed4065a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db3503680e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dacfeb47479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3de8726c2a61ec45c19f97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9bdce38c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4af05c28308241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5490f6589880ed6eea7b9c670012be05e7de0940313c5870786554df2623d58f5ace92d028f2c71a6ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77962a2cd8a104e16b77d5f7f13b1640d43e11801140caf1a8b1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b905fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf34117a82a96b2ced73abb8e4bb718d6ee7aebf9ef40662d7836d252c566f5ee938a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000001762e5f5a3a0bc33fdbe28a5ffc83f2f08544eb2794e7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f85d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d801002653c4d9818708e27c89b552d3fcd11ebce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff2a8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4000000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782ae57773e0d8b0ab900edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0bd91e328b6a6f732a91f0e2e9120be61e58c79d497247d278888901d44bf77ff246605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c2d0836395fe39f0e11c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc71300000000000021000000b12f0ec0412268860027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b50f3ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861ddb54684cb73e7aeefae47fa09fd88e6043bd52ae84c1bb0c8a6b769f952283a1f4e3842edb3d42c68a2102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e81163bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4c4b51b1f922a44ec675203bf8d1548e49262727c3de6daab3b4ed15aa99802e45d0620617e839b5237ddfcf103c91e61d174e3be6c9fd47398797e3b814e751ff31ecb42de6dd9d6b88121aaa680c236a303914e00150e1ec3f144ebc28287d5b51cfb8cabb844d12b140767d0fc24425590024b2e431722392489e3d43b3e31438a0138988083c47c61384d54e9a40fba01cac6e59ec82edc764840fe551c1d57442970cd8e59b9f41094e158c0a1ee855d8515599685486c2a21fa1c107531a0db8306441e8408b34aa90e9736e672d74cb8e78f8bdb93a23d024fc200796836ab396911a56231e953efad6cd83db32ffc595d970108e9547ea0000002730d5d1b70fe8b458ac1651135037b6cb9c8053299f77ab84c5b9fd2f764c3caa9c69377c397d310ddc7bc4bfa165def7b49e28ef196ae263b6829a8419d8860f56c86c288964ac4bc19839d96ff24b981c3a4fd6f93a000000ea9d6b06dafae4c91177", @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x50) 29.182735599s ago: executing program 3 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x200040c1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x68, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1c}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CHANNEL={0x1c, 0x8, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000002c000000050a81020000000000000000010020000c00074000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) 25.684555428s ago: executing program 0 (id=1474): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x50) 20.821293432s ago: executing program 4 (id=1093): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={0x0, 0x81, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000980)={r1, 0x8001, 0x7}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x50, 0x8, {r4, r5/1000+10000}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "82de965d148a9fb2"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x48801) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) 11.428053494s ago: executing program 3 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x200040c1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x68, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1c}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CHANNEL={0x1c, 0x8, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000002c000000050a81020000000000000000010020000c00074000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) 10.465162585s ago: executing program 0 (id=1474): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x50) 4.215338797s ago: executing program 6 (id=1595): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) socket$l2tp(0x2, 0x2, 0x73) socket$key(0xf, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r3) close(0x4) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) accept4$ax25(r1, 0x0, &(0x7f0000000200), 0x80000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x200000e4}]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendmmsg$inet(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000500)}}, {}], 0x2, 0xd0) 4.079061856s ago: executing program 7 (id=1597): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r2, 0x4}, 0x8) (fail_nth: 2) 3.758748041s ago: executing program 7 (id=1598): r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) r1 = socket(0x11, 0xa, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.empty_time\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000940)="c38b1c1b744e919e6d1b079393d412e2e18a6fdda6f04ca3da382bdb2e17257e33e5f902ff4939ba0bfe18664e0450524df1b390fc7f3df6db4fac0df65e5531e5252784f449e5163794414f4afd035717cee4a4fc902fb19ce97318d5ed1ae18703054ad19b9708aa6b6755c02745444ccbb797de20b3bbff502c84d2f5292a77887cada73aee82a73562cf5e8b75b3aa90005fe7ca40d975e6c5384339168606c7079a6c6f5435a4f9543c89725bf7902cd4f83fed3d3f48f50d2348847c", 0xbf, 0x4008090, &(0x7f0000000a00)={0xa, 0x4e24, 0x5b5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xedcb04a2514a765a, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfff, 0x70}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x9, 0x8, 0x4, 0xfffb, 0x3, 0x7]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6a845ecb6f20be71}, 0x24008080) r4 = socket(0x1d, 0x3, 0x3) syz_emit_ethernet(0x3a, &(0x7f0000002100)=ANY=[@ANYBLOB="0180c200000000000000000000004500002c00119078e0000001e000000100004e20001890780400"/58], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_xfrm(r6, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000540)=@expire={0x374, 0x18, 0x200, 0x70bd28, 0x25dfdbfd, {{{@in6=@empty, @in=@multicast2, 0x4e22, 0x101, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x0, r7, r8}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x3c}, @in6=@private0, {0xffffffffffff0e48, 0x0, 0xfb, 0x1, 0x8, 0x2, 0xffff, 0x4}, {0x8, 0x1, 0xe, 0x9}, {0x4, 0xa, 0x3}, 0x70bd2a, 0x34ff, 0xa, 0x2, 0xf, 0x3}, 0xfd}, [@mark={0xc, 0x15, {0x35075a, 0x3}}, @etimer_thresh={0x8, 0xc, 0x6}, @coaddr={0x14, 0xe, @in=@private=0xa010102}, @algo_aead={0x7b, 0x12, {{'generic-gcm-aesni\x00'}, 0x178, 0x80, "bfd5c1022a8f4e75181548224c8f74ce6a558d4e8c253f9dfec2a3528314feabb02f35a9f8bf6878eee8466dd8f466"}}, @algo_auth_trunc={0xa4, 0x14, {{'hmac(sha1)\x00'}, 0x2c0, 0x180, "e199d5cd5f6395e7c24adca24cf872a09c8cade5d020ab1dcff998a5cb27a3f177db7ea6de662f38708e06b8cf62e8aa594284892964846d75517d1b0ad117d6c4e941054e3aa035d5e6667860dfdae71dd31081989b7d84"}}, @tfcpad={0x8, 0x16, 0x800000}, @mark={0xc, 0x15, {0x35075a, 0x5}}, @srcaddr={0x14, 0xd, @in6=@private0}, @algo_aead={0x101, 0x12, {{'gcm-aes-ce\x00'}, 0x5a8, 0x0, "d987f40849d631abf689883e32ced8435ef7a76b10ae4472243f314e3bcba7d5721be7e3dfd5e2bcfbc37da7dbdb79e780fe3841d35ee71381f0e9bc1a37a33eb788fee131abb45b3f00e83be42cea8f45404b043c5a67cc5b565275e8603c00bf5b3056b60b4e2cee348d0841fb2b0e958ba32ff302e844cf832b6400709827edf4d77e513be41685760ab46d4fd23ea2e9080a3842805ac021fa2e2082fa5083e5920f4c4a8cca037b5b57672761c7ea8da05760"}}, @extra_flags={0x8, 0x18, 0x3}]}, 0x374}, 0x1, 0x0, 0x0, 0x20000851}, 0x40c04) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8c800000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0xc0004) 1.790224492s ago: executing program 7 (id=1599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000020000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1e00, 0x60, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045) close(0x3) r5 = socket(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40954}, 0x20040814) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x800448f0, &(0x7f0000000140)={0xffffffffffffffff, 0x4, "90b19d", 0xd, 0xdd}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) 1.724256534s ago: executing program 6 (id=1600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94) 1.631512944s ago: executing program 6 (id=1601): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e24, 0x8001, @loopback, 0x6}}, 0xfff4}, &(0x7f00000004c0)=0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="0e000400"/20], 0x14}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x1, 0x6, @local}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x31, 0x0, "40e052a571a26e480921d3c9b898b29e4a92b6f63cbc4093fce9c501a1a5ee77a79b2dbd7d7948577f98bee325102e5f37c377073654b35ba5f74a226adeaccd05d6deac042d84cfd85532f2f1553dcf"}, 0xd8) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket(0x2b, 0x1, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r9, 0x2) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109700000000007b0ae8ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ffc}, 0xe) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x11e, 0x1, 0x0, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000100000000000000800000a4c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000000000000000400808000640ffffff11140000001000010000000000000000000084000a"], 0x74}}, 0x0) 458.780773ms ago: executing program 7 (id=1602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800615e42b509c359dc0000000000000000000005000500000000000900020073797a3200000000050004000000000005000100070000000d0003006c6973743a73657400000000"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/91, 0x5b}, {&(0x7f0000000040)=""/35, 0x23}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/242, 0xf2}, {&(0x7f00000012c0)=""/225, 0xe1}], 0x5}, 0x10000}, {{&(0x7f0000001440)=@x25, 0x80, &(0x7f0000001740)=[{&(0x7f00000014c0)=""/192, 0xc0}, {&(0x7f0000001580)=""/150, 0x96}, {&(0x7f0000001640)=""/246, 0xf6}], 0x3, &(0x7f0000001780)=""/192, 0xc0}, 0x1}], 0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xfe0c) r2 = socket$igmp(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, 0xffffffffffffffff, 0x14, 0x0, 0x4000, @void, @value}, 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r4, 0x5421, &(0x7f0000001100)=0x2000000009) accept4(r4, 0x0, 0x0, 0x0) write(r0, &(0x7f00000018c0)="5951532fb92aea3cc72594fcb4ad9ae64eed0917342ba875d349ac645b08568a0c24b453c80bd3987ed1356a3ec0fb4a63f378741fa273ab1c47b7e779496ea62adfc80b93764ef095cb2433a2e08d1023f41bff3e39183b079dc2049e95fd01eddf0c5ae17d1c83309e661e9f59efed7bcb118334607a4787fd8f50393180e432435f208839b8dd", 0x88) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x70}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$MRT_TABLE(r5, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) openat$cgroup_ro(r7, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x26e1, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0xf, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x7b}, @local}, 0x10) sendmsg(r1, &(0x7f0000004080)={&(0x7f0000001980)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="3d52aa3ff257a7aa46c63409deeb0648fb27ed50d6710b040b20397b8e9bf85611486c7b20a0a732b899b01e99d04586706a6fc80ba6aecd341f0fce75ebaad7dd09d3c7711cf4ca79207a0662e3a271a6bde293cc07de2108a13a79304ae2958af266dc0af4291968d550acbf09528251e96fadea6eee59f288e06eeaf0d789f638b3726f119d779b05a6489bf364b0f28b7b89ba1577389eed66377428817c4a02811f33ae051d58239287f5677f5bfc6020558d286414c233b9fc3155e9ae089fda2f2121f1520c97eaa1183bd59eff9f48802a24a73f288a9be31055767c85a0ce477059eea348d062065c9436", 0xef}, {&(0x7f0000001b00)="64b4ad09b6ca16a3845aed38ece1bd1975b6f46cca3ecd0ddf1bdf55784f64dc1f8983a7962fd31dba073126b9931ae4f28bf4b7a0f9dd88bf2e32435a51e9f61f28fc022a3a4deec194e6b7c389e3d9575df1f654fb51811dfe06bc8bee46980841efa54ab05a08ee8b673e3fbfb68ffadb658238f6e38420e388c6603de9ef15def8cc48ce0c0eae32b42b409a3c6ec0a49ab498c5b3a182152ff68f6d149e2ee7477cd1", 0xa5}, {&(0x7f0000001bc0)="2bf870ce8484a2ce29aca76a0aa08b2ecd668b03b88204a354d54fedd9f0591f482684a9151a424b4e2a6dc2530d8a967c66618d5d403814c38e82e92dc4eb8a69200b57fbd1e96293c1f54ac61aeb45d153ca8a9fe522af80965303cf3c94de9c863afe74c35e88997fb3ec43cf051e41465e8ccee9e3abf98111d6e9e6c2feac463a7faf673ce0a8310db70810775a1a49586a573a784d2752ac7cf059d7778a62f0a422bc5b3d519bb3e4fe030ddde2dfb06ee5f0e18c37d4e31decb3b973c14a5db1acc841f0d8fa98974f90768f11cc766e873ae6a4e0d14d718743171dffae7f801c7286", 0xe7}, {&(0x7f0000001cc0)="7e9ffe0168bc2d4702f9b2b105ac36cb4b4981cde4c26ff701d9cd6d77e7669f043c464b8896ed8edc13402b428462f5b4858c1242c5", 0x36}, {&(0x7f0000001d00)="6d9942756b805ec9790641c6aacb0830d62c6603b2f838985b1c45956a05665638165378ec87339f2060c8c992d204137008ed5c64ec4dd66d836407517d457b4c06e9e7a4cfb44559212760276691eeba5970247ede27a718010603bf1a739b483ad688bdda1aa30229f57eac9fc5810f1eae078460d355b4f7319a133e2b9fcfe6dcda469498ab9a20392a397ee6f626f18862bff1fea46aaf15a69237cf179d4fa30a56422c41ad5bbac0998fa1a0", 0xb0}, {&(0x7f0000001dc0)="a5607a5ba22fc623ad319642f33002a21f", 0x11}, {&(0x7f0000001e00)="88ee6b64ccd64c32f1dad20668a57d6738a8d94bef295113ffc583958a5c0a28c19f44d24e01c176b48dc813057f2956444eeda053762255cd1bd2f6bb3d60c878ed7c709662a930c311ab82318b49782a1148125074dd7f34717168d5c35692ed3120cfe61780345de6a52af2a7d3cfaf71887db0f58a43d298f5aabc851193b8e00d0e93d5b8084933ce0b8d3b791ea11f497a47a94dea3b03d49bbb73a84beafa258b9c7f257c00f98873eb4c4c5c03d0c6147fe7ccab1c7de007119b46561d1ccfe2766c6609b53fb4098c5bdde89c7bd6b5", 0xd4}, {&(0x7f0000001f00)="b9e56bea4f10fb3fa4ebe83ab433e8d8965be687334e03d753032a941db96cdfc9214f3d3cf14e918713aa3f3d7ec87befad4a6a7aef472bdb51794742dc56393cd614972e43ba41314c36ace729d1090282e5b66521c231ed45ae53fd46104c1e2760560904dd7ac2ed94de632f654398c35456b89a9b0ead39ff30938d961128b1e08331d79cc1c8182912b0cf7ebcdf79e62277150b8ea1db6eff0592560e820e2a531c125947d70cf6bc10149e83675612c3382e1f7bc61944f34fd43bd2", 0xc0}], 0x8, &(0x7f0000002040)=[{0x1010, 0x10d, 0x8001, "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"}, {0x1010, 0x6, 0x4, "9e329a7a7559e1acf3dfc39596957ca46b2dbccc04005819c30f12bbf8c3b2a8ebdd194a6fc84c3e10f5b26656d6ed078c22be53be7cac8e1c12e4668ea3fc34d14f7e3a6b5ba11e01c2ee0b2209a40fe2ab4e1b06e1ad10839a391e3a2a4568b15aabbf3e86fe09bf2532e28d8a0eca227e43b8fe2adf6749ed5452ba3d404b1ed9ac190c896e2ff697f36548116a807572dc78108cc6697dd55cf4d2e450d7349b4bda523302258e69785245e8ec847d748b88515292494576aacf26047568dfdd60cc5651aa5f2c97c17ab0d397efe005f8b4f6c0d2ff09d60573210a470e130667ed14bef7cd2e940000ad80d3c54596411535f578fb33983af7a7882aafe12291ea105a879d192259a161afb7f19f3ac5b7b9f4a1fd21afa9bbcbe99d78eeec2f41ccd5ab19fc762448a849463c02b3accd6f6e09b10b5c033814b0308f505ab12afc601a08f88d640dc3d9a472fad62f69677849a2fc52d8d0cf709cc03d3ec91ddb0d7e6babea5173f6e3190b7cd5e4c2763b14cd3ef707489ba20d665f20e5378f560eedee288eb8d735248aaca74bbed946e9816b388e03a921954598e9ec4b0e9d182b6d99397366d5e579a37dacf043daf9c295ff134fb9b61a5f4b28ad018172d85536a4671db0613843f3a7033e5a0eb4a8315e1365fe74bd36cf4060cbe37d84f411277b35b820aa8760a24e734d0e8b283083178cea60539f0d0c2683d0dc211007ab54a9fcbfaf4b92b8255416fc996de6ef60a800c3380d9d6eba141fabb5a046d1f7e7e6d675b96b660d54f873f3cebd0c748a4a1cb1012563665ecdf9c7319ded7f6dcaa338cd9befbb04b7c45048ec384e60da522442a59451a5c248253d81bfe76f654c1408edfa0ace1d3426417bbda54937a88c04e9961f538bc37a24c3f15d5d1f88a999891e74a3b33ce52b00d38f1c5bd469f5d92ae1b7197b65ea445943b10c4d3078f0e705f22dbcae9bc5a6b8739eac3d97d44e3deb7742e4b8e8c8e1a0dac7813ddd8ee0ac2c61d921438bf7215af1ac561c9fc110c7c83dab4024c35c7769f532a8acb97057aae701ca6d1c4e1908f8de23ab7ca0a64f331a91a9d65c74d7e4d113999578d662256787b27a7bad72288f29f3857ca5c05cc605a76a117b98b319129623b1d5f2abbe774c4518f22de489bfd2532212f0412162be0c210a1ee2f79767799b5446f5fbc9d7e526f6f55319f02ddacc5e3e626a6b45dab0109144c37d6b4c0a99634646ed2b7bb25803c502f41d3bd7a3c94d23b79f054e937de58fb895648fc194748581c629720d4f17faf43a487104ce45deb964e052f6004663cb0994492f631e613d1c2a1321a90d6eb6b905e000ab2859861619ae57b7b7ba6cb811b3268b0f22afef117c43e72ee05ec3c570033a4ec84ad143ce567e7c58fe685e9a56b14aa8e4cf276c7e0cae8e1c94f7c70e6fd5549b03e18223fe829b5ccf9cc07ba012c919a5f88f138e362ff9c19a16ebaeb85c0beecf2bdce6b61b372c32df8a5a688d24190d688638ce83597361072e59e7bce6f281fd399db5442b0d46a0309d1871a5794af6825ebdef03beeb49787556fca61e80e1e5a541e6d21581f1c8f8ac4859cbeeda73489ee131377f6cb64e048d18e4136189cebc30690271344a96970b2f2c2a506b447e0af21ff4318989c612730033f416461db3eab03fff355416311708c5baa51a42ecf81cae569254a1a021248b8f5f36b1fb69c187221527eda3172b605056e4bca0518c0b9c76a0b0d2140d4d3004ed81b7fed26778ade8664f9cd9ed9fa3c0735683e01f7816bb9b8e02278034b9ae849e7521872484bd0b9afa53777f2e619657ea99ba13025f59fa91fb45d35794cb14beda6dc678c5d0fbe8030f291d883cd3bbf83cfaa8c705a9b2e77584d27b6b772f12e4b9b1165bb22a02409b06317bd8efa8adecf064b8a91b7bd6becd672fd1899836c1ac9edcddaf219a2e540d356ad9579226b125bfb1efc3dd69732761b17855e9545e620d7bda5efd058f6d577c03bd2483258bb8fac93c4d356e4d3b16716bbb48777e848fea582729e96a5f0de1c57c9e3d97be8277f1b8d54ce9ddbf57442748bad99b8ecb9cd7e4932538a618a5982bec634aa5431d7af4ce3c737436b51bcd31eb2631993e805b801ce776f246436b47f2c71fb37c2ce49fe9243f5f17294fdc341cd8ab2c3ba2ddc71d3a587a0287d0ac1791b11401cf36e51b020ffb4ce19e128208eaa37789bb85752ad7834a7101c78d1acd2cd166a899e13a3c1a9393abf270e978d954f3918009880b27daf329866bf7b50b85639a89ccd7a78b68298c022dd14f140aea4d0497299223af226f64fbe8cb7e4d76140a296c970c371c811ab2e4cafd2c63a242aabb25d95d18ae461ff36d5b5b37a244b1838a495e55213dfd5d741432d0932c3d3fd55db533becd7b2bae6b3a0dcf2a50312362b64596eadf184d65cc2c1debcb0ff7d6b0de96bf67b373defe60b35055a2a889d9e2c1846f7ad16d6ee5394d4666932ae7a556f7fd9932cc3296a19dcfd227314679bf5e23de277837d1fee2d51c5c0e6ebca47dd43dfd37bc9bd88fc286fbe09d18aebe4f2fbd126558b3f2866d8e1b98c3814fe5961638d37c763c3d73fc3efcf75a671629f4bbcb75261cef651a5c93a94e46817311f90e0da2151f7faa924c5eb03421654a2d8bb3c530e0b771629f6a88e5fdbfcc95e7627f1918550300ea27e74060e3ebdba76aff51dee464d406dfe486c464cc4081ffde0eb9d9ce09920e2e0af849f6aef762681e1ca12b37364ebad9e718d94ad20037c3fdc6d80c1e61d29bab2a4d489a8e1b04952a89b589686a569bcfdb2bce3f537f9c4365e02b0f40a33a411170e48dce0acd595fcd0dff6d7a7e39b61ea2dc337464b8d14e735e24db87e8f25af61c0100aab097a3cf83107de09bd0df4e83bbdba12d61845629953f0c9fdad51b50c01135db2c930b897bf963924c380634942767bc22aae9caaea7817ed4979354985eb330ba40a944ea2186c9a6209f6b5e4b5c4f7d44ab6fdd6b1f2c9f4c9bebd4c05077f9ad1a1c0bc7c6d27a4cfcc199e132f0b3be433d7c0aeee762441ea2e8f443efd94e71ecef745b2e0fbd425003e18c1afff767b1d254703c3e2033127fe896c400a9fcbc959901ae557b1291eb35f6c42d9361c350e8ab362de4351f04cfec90ea872e8ec6cd8476a89abfaf9944702d36c0d20a831d3a66cc088e7181fd3bc11dc2f8da555f96a89d6da887d17f8e57a2bd222e3c6bd8f24de9ef360971b43a158682322c9f0736532c67c6465132ce134de9666ef0962e009c0b6b6e86eb99031162ede8fdf37f7ed835cea116b4de650676cd0eeb743400ba1e3f82db8dfbe7094f3fc2ac41b34b062e34f16830da6100b969a20e00ae42ddf29d4d3467b85deb014fedb2a91d645ce8747b97474c5796c5c9db5af684e4dfa5b0b4204ec10c4b81c58d61a0051f36c094df25673f2ed645cb54059e4fe9db32686cf346a77692a1b6f854c882354d2dd6289f6740574c08adf1b6ff4cdbe02fd7c1cbec6826ccfee9a84ea777cb1546b4381d24f090d5af15ce27b070525004bf007829d5013ca0b691478206a64e076d7f3ad709cbafd027e44ea98c5694cf10a6ed21b98fd80cdc072484b13d1fea26f906378c4633e854cdd7ca547feebb82cadc7bbb839cb654bd09bf7259cfdc5eeb0aca507a2f21a290223e05f0626503d96e6f13ab7205e4478c242a53a39751b4e6945f495b68731b4a95330e41232f359c19c77e3184cae782a9d08d9060ae79ef61c83db415978ff95183f27fada886b17373e0632041c33eed43bceb143ad81bdd716bf516306d0ee0759db38b59f292552180d71a30eddbcf4470894691b4c842c3eb21017e21188168ced1390296781661ee72691374b7897999d8a2c9b8f4bca0266a0a7bf397350abceab82ea87b0cfe3e01c19e8a2955bf2e94a108a08c9228cc69ee730b0283c127da61875616ffd8b2c76c65c1e5fdfe086825bb469cb24f4df09c5dc4b25bb196723feef6e696221375c2ae21524e73ee3e9d55c73b09b27b55a73972f8708c7ae7405e5c26cce7127209770227cbdb7298e9378367c512d1cea0414f207f711442d9a0c36820a9e6cc8d95132280e96075076980676a2c156898f2ba7db0a96c99fcce34658965da9fa1fd948278cf5b274e4ebf3a8fd87956302e2c3772edfedb2a96166516c57bbb35d8ddaec22b7ccbe87cc2236db7213941bc3eed891122632794c61b81a0afed71ee31ca35e5c4b745b49addc56ef8b33c446d6b3c6e593e8957e906b5c8eba82f97dc949d55417c7e975410bb3ad484cd15a329793e9a60fd0dfbe73308bb6d20e6c7d384b90e54b18926bd565725ba755d1cc031d9df373fe7873304d81b4cd945ab6c2a26c6dc26770c1ad727f7c38b90d5d2c2a1c4f3fe9dcdf0100bee1c0c3980f5ff16da8255bf99342f9797e39aeec5abb4217042a88f25a52154ebddaaa866d4d2bc91fe69d3a7faf467ddce215b6dde7600d71cf8d246fc23eec9ccbc55fb79ef097849f8e8d8ffb50395fb423220d2876832c12b27bc2f4e3a4b7e3b78bb5062c690952cdf7caac56020e32e502272e2d06d9ffa1d19dbebebe9a603283ee7bd16a28211a18328e4be54c48400e8824e2764725fcc650d50a5d118f4ff835baef8596e796172c77721bd01d89ca6bd093a09ccd6712aaa323b12eeb4baf0726eeac8e1f2b1d63eab1f2abcec42ff483b538a485747023d1e45c98fceea15a63acbb18200f8db43d32b4326c7ccdce177e6117e0bcff318191529b96115ba2b92f03665fb9e2a6019dd75dd8f173c04b726f13c0aabd5980de25f03495bd3c2aabc8996feef2cd7f46e44873a6f5bc185682fd0ed5fba3d1d08dc9f7d43adbc52653f7471bf0e50ae9e4471052f4d6c066af1b8a7540ea5e6c8769e724559ebaefa001cf9ae8e82411f08ecc08b983ac277086a35f0479d54ac2dae794272a35b434575097b85840800538198bda6ee902ab09f5046060c8ebf5ef6c218836052aa4fb2c01e06f4e6cafb02472036f649add384048fc7898cf3dcf2dab54b68e88506f14998959862547554abf2a77a84904def75b9cd57de5a0c9cab1d0d342e000ad0fcf125c7ab16f805d33c55511494093ad9eaff910cbfd372bea4607a37b86390165fdfaf53ed99f6ce053f336a2c513473f7865e69d44b95c356ebc1bdc67ba2c530682cf0329dd460651b059c89f3c97d852231b010ba1ecce6dc85e84c445648f97a916414cb67305315705d16583d123fb01f5c9dbb51ab86244d82e0ed467840893e3d7dab108c38f00d0d1e3da9ac1e54afd72dfcb394265f6af75376723eddeb3c04317b4e09e620e9a3335f3e474f78a873d2cc10d7943795f80973a8872945bc0f23baa128e2eb0bc9856b7ada7d4d542e3248377a037199bcd942006381398ceaacd60b43fd282e395524000e637380834bfa787ce9da659127135e90f8e1b216331f919d93a05b5b92726a9c61ff756c7d2fed05579704496e02829c4cb176b3c9c0ab0f64616ab540853a01410912ea66dc4eb1bf78ae1d320e44e64935317e949138d8c29f2714480ed2e9c86e8771b9c16bbf750b56d04d0cf4c158c8f55cf33682eba9c7536cf9cb4f253b1293a78dcd2d7dea7ea761947c54db3d9fc9fcd17a4a69e88bdc73741cf7f24ed996219c81f46b60fb9aca97b43b99d8f6481e1cb53723efe7e4d2262363d2f81a0845e1"}], 0x2020}, 0x4000) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) 437.755583ms ago: executing program 6 (id=1603): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e22, 0x80000, @mcast2, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0x20040091) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x7ff, [{0xb, 0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x7ff, 0x0, @void, @value}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000002d000000000000004000000000003a2d00000000200002000a00000000000000fc0100000000000000000000000000007e14e67c818809e97564703a7369e03ecaef6f187fb25fbe014a2ed452357d3ac57bdf3ef8cf09b7f09dcef868bb2a5dbe21e3dcbfa761ba484e7332f1109d719c0a5f8676f310d10f910d5c17933ff5a4db21debd6782d2677fb30930e78ef7", @ANYRES16=r3], 0x6c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 158.214333ms ago: executing program 7 (id=1604): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x1) (async) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) listen(r2, 0xc) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x100) (async) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x8, 0x9, 0xd5}, 0x14) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) (async) sendto$packet(r8, &(0x7f0000000200)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x4006, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_proto_private(r8, 0x89e1, &(0x7f0000000380)="325afb9a6ae2f04683693589b53f4a93a6aeda73667ffef69235f74350b45c1e3ed56430368d38eb22d97aaf4ee8bfb1407db4bc7815d664fadd25348f1a23d63c6d70781b1374aa1b3d01d17b7e611649466e5678388d45f6204430a40bf73f1210f5a5769302b40971ce687aa0262f549321c6e294dfebe5d4f77190") (async, rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xfffffffffffffdd0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000c00000a20000000000a03000000005ee53e5329f503f9000900010073797a300000000068000000090a0400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001004155dd4954000000140000001000010000000000000000000000000a", @ANYRESHEX], 0xb0}}, 0x0) (rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 99.144683ms ago: executing program 6 (id=1605): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x9b, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "abb99279fd89da307583e654afb42af2dc91b30b60e83d50", "66eb64f2e8a3742962ae5b2fb03f495701288cf603c82fce6302900c99be5aab"}}}}}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x28000600) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendto$inet(r3, &(0x7f0000000000)="af186a7f0272491f21", 0x9, 0x4001, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r6 = socket$inet(0x2, 0x3, 0x6) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bind$bt_l2cap(r5, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x2}, 0xe) connect$netrom(r0, &(0x7f0000000440)={{0x6, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 48.195528ms ago: executing program 7 (id=1606): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fe000000181100", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x88}}, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="34930052", @ANYRES16=0x0, @ANYBLOB="0100fdffffff00000000010000002000018006000100020000000c00070004000000000000000800080000000000"], 0x34}}, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c"], 0x114}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x8c, r5, 0x205, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb5}, @void, @val={0x6, 0x2, 0xe}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0xc9, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0xb}}, @val={0x76, 0x6, {0x4, 0x2, 0x7, 0x5}}}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}}, 0x24000080) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) write(r6, &(0x7f0000000240)="94", 0x1) vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0xa, 0xfffffffe) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 19.489501ms ago: executing program 6 (id=1607): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000010205000000000000000000020000002c00028014000180080001"], 0x40}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) unshare(0x22020400) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="540000003800010326bd7002fadbdf2509000000"], 0x14}}, 0x20004814) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x7b, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x700, 0x3, 0x9}}) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000980)=@bridge_getneigh={0x378, 0x1e, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x2, 0x30801}, [@IFLA_IFALIASn={0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x52a0}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "78e04b68d20efc621645f2b440f4612fe7"}, @IFLA_TXQLEN={0x8, 0xd, 0x81}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}, @IFLA_VFINFO_LIST={0x2b4, 0x16, 0x0, 0x1, [{0x98, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x234, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0xb, 0x2, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0xdba, 0x1}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xa, 0x724, 0x6, 0x8100}}, {0x14, 0x1, {0x8, 0x4d5, 0xd84, 0x88a8}}, {0x14, 0x1, {0x8, 0x19b, 0x1, 0x8100}}, {0x14, 0x1, {0x6, 0xc7d, 0x8, 0x88a8}}, {0x14, 0x1, {0x9, 0xec7, 0xa9cf, 0x88a8}}]}]}, {0x1b0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x181, 0x8, 0x88a8}}, {0x14, 0x1, {0xb80, 0xe3a, 0x7, 0x88a8}}, {0x14, 0x1, {0x7, 0x9d6, 0xfff, 0x8100}}, {0x14, 0x1, {0x7ff, 0x31e, 0x8, 0x88a8}}, {0x14, 0x1, {0x7, 0xc03, 0x5bf, 0x8100}}, {0x14, 0x1, {0x100, 0x5f5, 0x4, 0x88a8}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @multicast}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0xa90, 0x6}}, {0x14, 0x1, {0x7, 0x36c, 0x0, 0x8100}}, {0x14, 0x1, {0xffff, 0x28a, 0xc, 0x8100}}, {0x14, 0x1, {0x1, 0xc8e, 0x2, 0xccfc}}, {0x14, 0x1, {0x9, 0x781, 0xffffffff, 0x8100}}, {0x14, 0x1, {0xd53, 0x13c, 0x8, 0x8100}}, {0x14, 0x1, {0xe8, 0x43c, 0x6, 0x88a8}}, {0x14, 0x1, {0x1, 0x81c, 0x5, 0x88a8}}, {0x14, 0x1, {0x4, 0x204, 0x8001, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x807, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @remote}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x10}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xc}}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0xfffffffc}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x81, 0xb}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0x800}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x99}}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xfa}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_TTL={0x5, 0x8, 0x7}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xff4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x378}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 0s ago: executing program 4 (id=1093): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={0x0, 0x81, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000980)={r1, 0x8001, 0x7}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x50, 0x8, {r4, r5/1000+10000}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "82de965d148a9fb2"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x48801) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) kernel console output (not intermixed with test programs): pe 2 family 0 port 6081 - 0 [ 182.777532][ T9982] lo speed is unknown, defaulting to 1000 [ 182.843591][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.868145][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.962137][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.974830][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.054080][T10005] Cannot find set identified by id 0 to match [ 183.090408][T10013] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1181'. [ 183.588577][T10037] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1189'. [ 183.624145][ T3462] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.876599][ T3462] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.025045][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 184.047412][ T3462] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.110474][T10046] pimreg3: entered allmulticast mode [ 184.137380][T10045] pimreg3: left allmulticast mode [ 184.227555][T10053] pimreg: entered allmulticast mode [ 184.243050][T10053] pimreg: left allmulticast mode [ 184.294331][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.304182][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.326327][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.336971][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.352773][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.439976][ T3462] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.558427][T10056] lo speed is unknown, defaulting to 1000 [ 184.764201][T10073] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'. [ 184.849654][T10077] xt_hashlimit: size too large, truncated to 1048576 [ 184.894045][ T3462] bridge_slave_1: left allmulticast mode [ 184.915757][ T3462] bridge_slave_1: left promiscuous mode [ 184.922789][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.967899][ T3462] bridge_slave_0: left allmulticast mode [ 184.973591][ T3462] bridge_slave_0: left promiscuous mode [ 184.998630][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.001077][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 185.429035][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'. [ 185.763318][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.774662][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.785366][ T3462] bond0 (unregistering): Released all slaves [ 185.798895][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1209'. [ 185.809448][T10112] openvswitch: netlink: Missing key (keys=40, expected=80) [ 186.008948][T10109] lo speed is unknown, defaulting to 1000 [ 186.323569][T10130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1213'. [ 186.436197][ T51] Bluetooth: hci0: command tx timeout [ 186.583342][T10056] chnl_net:caif_netlink_parms(): no params data found [ 186.707224][ T3462] hsr_slave_0: left promiscuous mode [ 186.723073][ T3462] hsr_slave_1: left promiscuous mode [ 186.736492][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.744130][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.754855][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.779893][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.850238][ T3462] veth1_macvtap: left promiscuous mode [ 186.880560][ T3462] veth0_macvtap: left promiscuous mode [ 186.905730][ T3462] veth1_vlan: left promiscuous mode [ 186.911254][ T3462] veth0_vlan: left promiscuous mode [ 187.182412][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.192299][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.202053][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.210636][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.218690][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.290031][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1220'. [ 187.349023][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1220'. [ 187.617205][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 187.656755][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 188.220724][T10056] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.229484][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.236899][T10056] bridge_slave_0: entered allmulticast mode [ 188.245572][T10056] bridge_slave_0: entered promiscuous mode [ 188.263306][T10056] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.286302][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.306600][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 188.315735][T10056] bridge_slave_1: entered allmulticast mode [ 188.317727][T10056] bridge_slave_1: entered promiscuous mode [ 188.342047][T10164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.358860][T10164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.377967][T10153] lo speed is unknown, defaulting to 1000 [ 188.412321][T10166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.492850][T10056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.506328][ T5156] Bluetooth: hci0: command tx timeout [ 188.544482][T10056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.591037][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 188.606598][T10179] netlink: 'syz.0.1223': attribute type 33 has an invalid length. [ 188.730340][T10056] team0: Port device team_slave_0 added [ 188.763929][T10056] team0: Port device team_slave_1 added [ 188.903443][T10195] netlink: zone id is out of range [ 188.911462][T10195] netlink: zone id is out of range [ 188.948421][T10195] netlink: zone id is out of range [ 188.953610][T10195] netlink: zone id is out of range [ 188.965745][T10195] netlink: zone id is out of range [ 188.970900][T10195] netlink: zone id is out of range [ 188.981780][T10195] netlink: zone id is out of range [ 188.994744][ T3462] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.995456][T10195] netlink: zone id is out of range [ 189.011948][T10195] netlink: zone id is out of range [ 189.017192][T10195] netlink: zone id is out of range [ 189.058678][T10056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.083834][T10056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.120409][T10056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.306069][ T51] Bluetooth: hci3: command tx timeout [ 189.447753][T10056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.455067][T10056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.485680][T10056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.557263][ T3462] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.702936][T10218] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.710699][T10218] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.942654][T10218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.970250][T10218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.264515][ T43] lo speed is unknown, defaulting to 1000 [ 190.272895][ T43] syz2: Port: 1 Link DOWN [ 190.291002][ T3462] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.306674][ T3551] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.366252][T10240] __nla_validate_parse: 1 callbacks suppressed [ 190.366271][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1238'. [ 190.408605][ T3551] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.418862][ T3551] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.451005][ T3462] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.526666][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1240'. [ 190.567262][T10056] hsr_slave_0: entered promiscuous mode [ 190.579946][T10056] hsr_slave_1: entered promiscuous mode [ 190.585732][ T51] Bluetooth: hci0: command tx timeout [ 190.601032][T10056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.609133][T10056] Cannot create hsr debugfs directory [ 190.614732][ T3551] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.640923][T10249] vlan0: left promiscuous mode [ 190.649731][T10249] macvlan2: left allmulticast mode [ 190.658215][T10249] vlan3: left promiscuous mode [ 190.663210][T10249] vlan3: left allmulticast mode [ 190.677863][T10249] hsr_slave_1: left allmulticast mode [ 190.749038][T10153] chnl_net:caif_netlink_parms(): no params data found [ 191.178098][ T3462] bridge_slave_0: left allmulticast mode [ 191.183804][ T3462] bridge_slave_0: left promiscuous mode [ 191.189929][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.387012][ T51] Bluetooth: hci3: command tx timeout [ 192.056398][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.067957][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.077860][ T3462] bond0 (unregistering): (slave team0): Releasing backup interface [ 192.093039][ T3462] bond0 (unregistering): Released all slaves [ 192.204160][ T3462] bond1 (unregistering): Released all slaves [ 192.218972][ T3462] bond2 (unregistering): Released all slaves [ 192.266180][T10295] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 192.273433][T10295] vlan2: left allmulticast mode [ 192.279271][T10295] veth1: left allmulticast mode [ 192.337164][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.361741][T10153] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.378125][T10153] bridge_slave_0: entered allmulticast mode [ 192.410509][T10153] bridge_slave_0: entered promiscuous mode [ 192.449868][T10153] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.463244][T10153] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.491700][T10153] bridge_slave_1: entered allmulticast mode [ 192.517589][T10153] bridge_slave_1: entered promiscuous mode [ 192.582668][ T3462] : left promiscuous mode [ 192.644865][T10312] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1256'. [ 192.675941][ T51] Bluetooth: hci0: command tx timeout [ 192.688914][T10153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.838168][T10153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.962646][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 192.980857][T10319] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 193.032026][T10153] team0: Port device team_slave_0 added [ 193.044334][T10153] team0: Port device team_slave_1 added [ 193.144767][T10153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.153590][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.179841][T10153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.205270][ T3462] hsr_slave_0: left promiscuous mode [ 193.222208][ T3462] hsr_slave_1: left promiscuous mode [ 193.233821][ T3462] batman_adv: batadv0: Removing interface: dummy0 [ 193.247624][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.260676][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.466122][ T51] Bluetooth: hci3: command tx timeout [ 193.759993][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1265'. [ 193.784465][T10339] netlink: 'syz.5.1266': attribute type 7 has an invalid length. [ 193.799370][T10339] netlink: 'syz.5.1266': attribute type 8 has an invalid length. [ 193.808939][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 193.821722][T10339] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1266'. [ 193.859787][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 194.228142][T10153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.235269][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.280387][T10153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.429781][T10348] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1268'. [ 194.482383][T10153] hsr_slave_0: entered promiscuous mode [ 194.490412][T10153] hsr_slave_1: entered promiscuous mode [ 194.498455][T10153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.506464][T10153] Cannot create hsr debugfs directory [ 194.619633][T10056] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.641767][T10056] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.748157][T10056] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.787212][T10056] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.813186][T10359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1272'. [ 194.814039][ T3462] IPVS: stop unused estimator thread 0... [ 194.844514][T10359] netlink: 'syz.5.1272': attribute type 1 has an invalid length. [ 194.857277][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1272'. [ 195.126491][T10381] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 195.173536][T10056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.183302][T10379] netlink: 'syz.6.1277': attribute type 1 has an invalid length. [ 195.198031][T10379] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1277'. [ 195.284685][T10056] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.378946][T10387] lo speed is unknown, defaulting to 1000 [ 195.409836][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.417042][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.440067][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.447254][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.502184][T10391] pimreg3: entered allmulticast mode [ 195.525777][T10385] lo speed is unknown, defaulting to 1000 [ 195.552585][T10390] pimreg3: left allmulticast mode [ 195.559483][ T5841] Bluetooth: hci3: command tx timeout [ 195.712380][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1279'. [ 195.880803][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1282'. [ 195.897516][T10395] netlink: 'syz.6.1282': attribute type 1 has an invalid length. [ 195.911375][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1282'. [ 196.022231][T10056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.146943][T10403] netlink: 'syz.6.1284': attribute type 10 has an invalid length. [ 196.163572][T10153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.200026][T10403] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.249483][T10403] bond0: (slave team0): Enslaving as an active interface with an up link [ 196.278725][T10153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.336667][T10153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.346015][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 196.352073][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 196.380892][T10153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.457755][T10410] ipt_ECN: cannot use operation on non-tcp rule [ 196.665094][T10424] netlink: 'syz.0.1289': attribute type 30 has an invalid length. [ 196.696181][T10056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.947421][T10437] net_ratelimit: 47 callbacks suppressed [ 196.947440][T10437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.061722][T10153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.164693][T10153] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.181521][T10444] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1292'. [ 197.205529][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.212732][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.231358][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.238584][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.263750][T10427] lo speed is unknown, defaulting to 1000 [ 197.309712][T10448] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.1292'. [ 197.685262][T10459] Cannot find set identified by id 0 to match [ 197.832493][T10463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1296'. [ 197.876491][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1297'. [ 197.959625][T10454] bridge0: port 3(batadv0) entered disabled state [ 197.966543][T10454] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.974205][T10454] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.311015][T10454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.327584][T10454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.502157][T10454] vlan2: left promiscuous mode [ 198.507692][T10454] bond0: left promiscuous mode [ 198.529749][T10454] bond_slave_0: left promiscuous mode [ 198.535835][T10454] bond_slave_1: left promiscuous mode [ 198.541877][T10454] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 198.552725][T10454] vlan2: left allmulticast mode [ 198.557751][T10454] bond0: left allmulticast mode [ 198.562775][T10454] bond_slave_0: left allmulticast mode [ 198.568575][T10454] bond_slave_1: left allmulticast mode [ 198.574239][T10454] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 198.582268][T10454] gtp0: left promiscuous mode [ 198.587895][T10454] gtp0: left allmulticast mode [ 198.601250][T10454] bridge1: left promiscuous mode [ 198.611202][T10454] bridge1: left allmulticast mode [ 198.669333][T10487] bond0: (slave team0): Releasing backup interface [ 198.689946][T10487] bridge_slave_0: left allmulticast mode [ 198.697173][T10487] bridge_slave_0: left promiscuous mode [ 198.702970][T10487] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.722463][T10487] bridge_slave_1: left allmulticast mode [ 198.728467][T10487] bridge_slave_1: left promiscuous mode [ 198.734157][T10487] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.744567][T10487] bond0: (slave bond_slave_0): Releasing backup interface [ 198.755896][T10487] bond0: (slave bond_slave_1): Releasing backup interface [ 198.767020][T10487] team0: Port device team_slave_0 removed [ 198.776435][T10487] team0: Port device team_slave_1 removed [ 198.783204][T10487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.792120][T10487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.802200][T10487] team0: Port device geneve0 removed [ 198.808765][T10487] bond1: (slave gretap1): Releasing backup interface [ 198.817983][ T3462] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.829020][T10493] team0: Mode changed to "broadcast" [ 198.842412][T10491] netlink: 'syz.6.1302': attribute type 3 has an invalid length. [ 198.848535][T10056] veth0_vlan: entered promiscuous mode [ 198.851580][T10491] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1302'. [ 198.873750][T10495] vlan0: entered promiscuous mode [ 198.881621][ T3462] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.904532][T10056] veth1_vlan: entered promiscuous mode [ 198.919868][ T3462] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.936402][ T3551] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.994676][T10153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.093767][T10056] veth0_macvtap: entered promiscuous mode [ 199.140247][T10056] veth1_macvtap: entered promiscuous mode [ 199.217033][T10153] veth0_vlan: entered promiscuous mode [ 199.233449][T10056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.251022][T10153] veth1_vlan: entered promiscuous mode [ 199.270795][T10056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.319545][ T1138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.337591][ T1138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.358682][ T1138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.368346][T10513] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1309'. [ 199.378772][ T1138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.460442][T10153] veth0_macvtap: entered promiscuous mode [ 199.504715][T10153] veth1_macvtap: entered promiscuous mode [ 199.580454][T10153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.599964][T10521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.625321][T10153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.672553][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.699827][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.720917][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.729899][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.740655][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1313'. [ 199.754167][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.801589][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.822148][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.834928][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.892807][T10526] lo speed is unknown, defaulting to 1000 [ 200.093455][ T9059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.120526][ T9059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.479574][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.578298][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.607556][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.620752][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.812984][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.051201][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.212253][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.247213][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.255973][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.264436][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.277617][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.414487][T10558] lo speed is unknown, defaulting to 1000 [ 201.625065][T10562] lo speed is unknown, defaulting to 1000 [ 201.661381][ T60] bridge_slave_1: left allmulticast mode [ 201.674866][ T60] bridge_slave_1: left promiscuous mode [ 201.692746][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.732952][ T60] bridge_slave_0: left allmulticast mode [ 201.741301][ T60] bridge_slave_0: left promiscuous mode [ 201.756338][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.460926][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.480566][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.489053][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.497212][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.507627][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.878369][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.915116][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.929129][ T60] bond0 (unregistering): Released all slaves [ 203.209021][T10578] lo speed is unknown, defaulting to 1000 [ 203.309680][ T51] Bluetooth: hci0: command tx timeout [ 203.394194][T10596] delete_channel: no stack [ 203.405192][T10596] __nla_validate_parse: 2 callbacks suppressed [ 203.405210][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1333'. [ 203.662586][ T60] hsr_slave_0: left promiscuous mode [ 203.674721][ T60] hsr_slave_1: left promiscuous mode [ 203.680850][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.694973][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.723718][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.736917][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.772853][ T60] veth1_macvtap: left promiscuous mode [ 203.780655][ T60] veth0_macvtap: left promiscuous mode [ 203.792979][ T60] veth1_vlan: left promiscuous mode [ 203.800003][ T60] veth0_vlan: left promiscuous mode [ 204.313876][ T60] team0 (unregistering): Port device team_slave_1 removed [ 204.357967][ T60] team0 (unregistering): Port device team_slave_0 removed [ 204.587296][ T51] Bluetooth: hci3: command tx timeout [ 204.960714][T10558] chnl_net:caif_netlink_parms(): no params data found [ 205.360724][T10635] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1341'. [ 205.386669][T10635] netlink: 'syz.5.1341': attribute type 1 has an invalid length. [ 205.390679][ T51] Bluetooth: hci0: command tx timeout [ 205.456263][T10631] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1341'. [ 205.471225][T10558] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.489603][T10558] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.500773][T10558] bridge_slave_0: entered allmulticast mode [ 205.511131][T10558] bridge_slave_0: entered promiscuous mode [ 205.524528][T10558] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.534784][T10558] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.542373][T10558] bridge_slave_1: entered allmulticast mode [ 205.552019][T10558] bridge_slave_1: entered promiscuous mode [ 205.571939][T10578] chnl_net:caif_netlink_parms(): no params data found [ 205.584871][T10639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1344'. [ 205.670933][T10558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.698301][T10558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.769907][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 205.830763][T10644] vlan4: entered promiscuous mode [ 205.841684][T10644] bridge0: entered promiscuous mode [ 205.992412][T10558] team0: Port device team_slave_0 added [ 206.014637][T10558] team0: Port device team_slave_1 added [ 206.019116][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1351'. [ 206.024781][T10578] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.037338][T10578] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.045150][T10578] bridge_slave_0: entered allmulticast mode [ 206.068085][T10578] bridge_slave_0: entered promiscuous mode [ 206.070910][T10659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1351'. [ 206.086058][T10578] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.101680][T10578] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.118945][T10578] bridge_slave_1: entered allmulticast mode [ 206.129654][T10578] bridge_slave_1: entered promiscuous mode [ 206.334289][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.364930][T10558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.372346][T10558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.405865][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1355'. [ 206.414842][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1355'. [ 206.445604][T10558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.467679][T10558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.474645][T10558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.513098][T10558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.537042][T10578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.607752][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.638074][T10681] netlink: 'syz.6.1355': attribute type 4 has an invalid length. [ 206.650518][ T43] IPVS: starting estimator thread 0... [ 206.668974][ T51] Bluetooth: hci3: command tx timeout [ 206.691107][T10578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.701746][T10674] netlink: 'syz.6.1355': attribute type 4 has an invalid length. [ 206.758145][T10683] IPVS: using max 29 ests per chain, 69600 per kthread [ 206.823196][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.884470][ T5899] lo speed is unknown, defaulting to 1000 [ 206.886110][T10684] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 206.900579][ T5899] syz2: Port: 1 Link ACTIVE [ 206.912792][T10578] team0: Port device team_slave_0 added [ 206.954735][T10558] hsr_slave_0: entered promiscuous mode [ 206.963851][T10558] hsr_slave_1: entered promiscuous mode [ 206.971643][T10558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.980081][T10558] Cannot create hsr debugfs directory [ 207.002148][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.022510][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1358'. [ 207.022529][T10578] team0: Port device team_slave_1 added [ 207.222334][T10689] team0 (unregistering): Port device team_slave_0 removed [ 207.231847][T10689] team0 (unregistering): Port device team_slave_1 removed [ 207.442263][T10578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.466667][ T51] Bluetooth: hci0: command tx timeout [ 207.472278][T10578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.513179][T10578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.549993][T10578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.561498][T10578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.591224][T10578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.821591][T10578] hsr_slave_0: entered promiscuous mode [ 207.834483][T10578] hsr_slave_1: entered promiscuous mode [ 207.841361][T10578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.847571][T10723] netlink: 'syz.6.1367': attribute type 4 has an invalid length. [ 207.858680][T10578] Cannot create hsr debugfs directory [ 207.864474][T10722] netlink: 'syz.6.1367': attribute type 4 has an invalid length. [ 208.031902][T10717] lo speed is unknown, defaulting to 1000 [ 208.171098][ T60] bridge_slave_1: left allmulticast mode [ 208.177257][ T60] bridge_slave_1: left promiscuous mode [ 208.183901][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.206984][ T60] bridge_slave_0: left allmulticast mode [ 208.212967][ T60] bridge_slave_0: left promiscuous mode [ 208.219692][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.652237][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.663143][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.673448][ T60] bond0 (unregistering): Released all slaves [ 208.745750][ T51] Bluetooth: hci3: command tx timeout [ 208.753885][T10751] tun0: tun_chr_ioctl cmd 1074025673 [ 209.128468][T10769] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 209.157712][T10771] __nla_validate_parse: 3 callbacks suppressed [ 209.157730][T10771] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1378'. [ 209.368908][ T60] hsr_slave_0: left promiscuous mode [ 209.384132][ T60] hsr_slave_1: left promiscuous mode [ 209.396889][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.405371][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.424336][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.432277][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.454085][ T60] veth1_macvtap: left promiscuous mode [ 209.461189][ T60] veth0_macvtap: left promiscuous mode [ 209.467503][ T60] veth1_vlan: left promiscuous mode [ 209.472790][ T60] veth0_vlan: left promiscuous mode [ 209.545752][ T51] Bluetooth: hci0: command tx timeout [ 209.908246][ T60] team0 (unregistering): Port device team_slave_1 removed [ 209.949034][ T60] team0 (unregistering): Port device team_slave_0 removed [ 210.638375][T10792] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1381'. [ 210.659241][T10792] pimreg3: entered allmulticast mode [ 210.681571][T10791] lo speed is unknown, defaulting to 1000 [ 210.825623][ T51] Bluetooth: hci3: command tx timeout [ 210.910005][T10558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.922465][T10558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.935228][T10558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.949186][T10558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.047947][T10578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.069288][T10578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.088251][T10578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.098012][T10791] siw: device registration error -23 [ 211.106621][T10578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.324487][T10558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.395050][T10809] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.408726][T10786] pimreg3: left allmulticast mode [ 211.491224][T10558] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.521589][T10578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.553012][T10815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1386'. [ 211.575401][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.582624][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.601517][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1386'. [ 211.617714][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.624857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.637709][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1386'. [ 211.663042][T10558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.678677][T10558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.707933][T10812] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1385'. [ 211.745142][T10578] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.804171][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.811419][ T9059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.857146][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.864342][ T9059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.121142][T10838] netlink: 'syz.0.1388': attribute type 142 has an invalid length. [ 212.210191][T10558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.370584][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1392'. [ 212.461680][T10578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.542421][T10578] veth0_vlan: entered promiscuous mode [ 212.561451][T10578] veth1_vlan: entered promiscuous mode [ 212.626717][T10578] veth0_macvtap: entered promiscuous mode [ 212.647244][T10578] veth1_macvtap: entered promiscuous mode [ 212.691693][T10578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.720306][T10578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.792932][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.824690][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.856693][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.931054][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.024351][T10558] veth0_vlan: entered promiscuous mode [ 213.099639][T10558] veth1_vlan: entered promiscuous mode [ 213.153953][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.179022][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.203940][T10558] veth0_macvtap: entered promiscuous mode [ 213.248365][T10558] veth1_macvtap: entered promiscuous mode [ 213.279368][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.300093][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.313804][T10558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.367040][T10558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.415256][ T3462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.432781][ T3462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.502591][ T3462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.512447][ T3462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.554065][T10879] lo speed is unknown, defaulting to 1000 [ 213.591187][T10878] lo speed is unknown, defaulting to 1000 [ 213.671738][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.689804][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.769912][T10882] lo speed is unknown, defaulting to 1000 [ 213.774112][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.791083][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.351909][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.599654][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.609667][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.617920][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.626217][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.633882][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.682367][T10897] lo speed is unknown, defaulting to 1000 [ 214.843212][T10897] chnl_net:caif_netlink_parms(): no params data found [ 214.897619][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.960966][T10897] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.968206][T10897] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.975392][T10897] bridge_slave_0: entered allmulticast mode [ 214.983908][T10897] bridge_slave_0: entered promiscuous mode [ 214.992602][T10897] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.999987][T10897] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.007459][T10897] bridge_slave_1: entered allmulticast mode [ 215.014567][T10897] bridge_slave_1: entered promiscuous mode [ 215.047902][T10897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.060845][T10897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.106395][T10897] team0: Port device team_slave_0 added [ 215.116291][T10897] team0: Port device team_slave_1 added [ 215.199486][T10897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.215601][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.266101][T10897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.298573][T10897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.318851][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.395843][T10897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.498406][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.552865][T10914] lo speed is unknown, defaulting to 1000 [ 215.623668][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.635232][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.652654][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.661243][T10897] hsr_slave_0: entered promiscuous mode [ 215.666834][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.667484][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.684597][T10897] hsr_slave_1: entered promiscuous mode [ 215.693064][T10897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.701330][T10897] Cannot create hsr debugfs directory [ 215.767411][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.863340][T10924] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1408'. [ 215.916140][T10919] lo speed is unknown, defaulting to 1000 [ 216.030409][T10924] lo speed is unknown, defaulting to 1000 [ 216.169751][ T13] bridge_slave_1: left allmulticast mode [ 216.175441][ T13] bridge_slave_1: left promiscuous mode [ 216.185103][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.196894][ T13] bridge_slave_0: left allmulticast mode [ 216.202574][ T13] bridge_slave_0: left promiscuous mode [ 216.209322][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.551190][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.562334][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.572667][ T13] bond0 (unregistering): Released all slaves [ 216.667580][ T51] Bluetooth: hci0: command tx timeout [ 217.086388][T10919] chnl_net:caif_netlink_parms(): no params data found [ 217.131781][T10897] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.174085][ T13] hsr_slave_0: left promiscuous mode [ 217.196448][ T13] hsr_slave_1: left promiscuous mode [ 217.203754][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.216947][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.236835][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.244303][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.272313][ T13] veth1_macvtap: left promiscuous mode [ 217.278258][ T13] veth0_macvtap: left promiscuous mode [ 217.284048][ T13] veth1_vlan: left promiscuous mode [ 217.289758][ T13] veth0_vlan: left promiscuous mode [ 217.682274][T10952] netlink: 'syz.6.1418': attribute type 4 has an invalid length. [ 217.695849][T10952] netlink: 'syz.6.1418': attribute type 4 has an invalid length. [ 217.720094][ T51] Bluetooth: hci3: command tx timeout [ 217.885211][ T13] team0 (unregistering): Port device team_slave_1 removed [ 217.930561][ T13] team0 (unregistering): Port device team_slave_0 removed [ 218.357558][T10897] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.372359][T10897] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.471973][T10897] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.514039][T10958] netlink: 'syz.0.1419': attribute type 7 has an invalid length. [ 218.525728][T10958] netlink: 'syz.0.1419': attribute type 8 has an invalid length. [ 218.533840][T10958] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1419'. [ 218.600536][T10966] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1420'. [ 218.610189][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1420'. [ 218.620164][T10966] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1420'. [ 218.620826][T10957] lo speed is unknown, defaulting to 1000 [ 218.629255][T10966] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1420'. [ 218.720721][T10919] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.728676][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.736126][T10919] bridge_slave_0: entered allmulticast mode [ 218.747158][T10919] bridge_slave_0: entered promiscuous mode [ 218.748011][ T51] Bluetooth: hci0: command tx timeout [ 218.788757][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.796262][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.803510][T10919] bridge_slave_1: entered allmulticast mode [ 218.812720][T10919] bridge_slave_1: entered promiscuous mode [ 218.861781][T10919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.884546][T10919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.921935][T10972] bridge2: entered promiscuous mode [ 218.928069][T10972] bridge2: entered allmulticast mode [ 218.940292][T10972] team0: Port device bridge2 added [ 218.988716][T10919] team0: Port device team_slave_0 added [ 219.005050][T10919] team0: Port device team_slave_1 added [ 219.061143][T10919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.068574][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.095205][T10919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.109919][T10919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.121788][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.153871][T10919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.174658][T10978] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1423'. [ 219.252299][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1424'. [ 219.274724][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.297686][T10919] hsr_slave_0: entered promiscuous mode [ 219.304744][T10919] hsr_slave_1: entered promiscuous mode [ 219.311601][T10919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.319261][T10919] Cannot create hsr debugfs directory [ 219.347102][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.382439][T10980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.476863][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.611817][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.733476][T10990] x_tables: duplicate underflow at hook 4 [ 219.776478][T10897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.786646][ T51] Bluetooth: hci3: command tx timeout [ 219.798699][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1426'. [ 219.807766][T10996] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1426'. [ 219.915686][ T13] bridge_slave_1: left allmulticast mode [ 219.921371][ T13] bridge_slave_1: left promiscuous mode [ 219.929592][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.940967][ T13] bridge_slave_0: left allmulticast mode [ 219.954565][ T13] bridge_slave_0: left promiscuous mode [ 219.961255][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.180872][T11002] netlink: 'syz.0.1428': attribute type 5 has an invalid length. [ 220.440985][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.451718][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.463366][ T13] bond0 (unregistering): Released all slaves [ 220.567531][T10897] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.612649][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.619866][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.664672][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.671851][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.825919][ T51] Bluetooth: hci0: command tx timeout [ 220.877408][T10897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.963092][T11010] netlink: 'syz.6.1431': attribute type 7 has an invalid length. [ 220.992348][T11010] netlink: 'syz.6.1431': attribute type 8 has an invalid length. [ 221.014412][T11010] __nla_validate_parse: 2 callbacks suppressed [ 221.014429][T11010] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1431'. [ 221.033401][ T13] hsr_slave_0: left promiscuous mode [ 221.044549][ T13] hsr_slave_1: left promiscuous mode [ 221.054612][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.071285][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.080040][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.087871][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.111256][ T13] veth1_macvtap: left promiscuous mode [ 221.116966][ T13] veth0_macvtap: left promiscuous mode [ 221.123532][ T13] veth1_vlan: left promiscuous mode [ 221.128933][ T13] veth0_vlan: left promiscuous mode [ 221.605443][ T13] team0 (unregistering): Port device team_slave_1 removed [ 221.649912][ T13] team0 (unregistering): Port device team_slave_0 removed [ 221.866394][ T51] Bluetooth: hci3: command tx timeout [ 222.534780][T10919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.581099][T10919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.589690][T11029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.622351][T11029] netlink: 'syz.6.1435': attribute type 10 has an invalid length. [ 222.626294][T10919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.640682][T11029] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 222.660548][T10919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.694780][T10897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.851876][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.882404][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.898450][T10897] veth0_vlan: entered promiscuous mode [ 222.916261][ T51] Bluetooth: hci0: command tx timeout [ 222.947881][T10897] veth1_vlan: entered promiscuous mode [ 223.033639][T10919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.048043][T10897] veth0_macvtap: entered promiscuous mode [ 223.063742][T10897] veth1_macvtap: entered promiscuous mode [ 223.104969][T10919] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.121038][T10897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.143036][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.150238][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.167361][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.174586][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.214274][T10897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.254064][ T5156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.263932][ T5156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.272987][ T5156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.282116][ T5156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.290374][ T5156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 223.317050][ T1138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.326323][ T1138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.357515][ T1138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.396690][ T1138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.422312][T11045] lo speed is unknown, defaulting to 1000 [ 223.510817][T11052] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.524279][T11053] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.678834][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.687276][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.901550][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.909804][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.919893][T11045] chnl_net:caif_netlink_parms(): no params data found [ 223.947448][ T5156] Bluetooth: hci3: command tx timeout [ 224.118337][T10919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.284886][T11045] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.292914][T11045] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.301909][T11045] bridge_slave_0: entered allmulticast mode [ 224.310724][T11045] bridge_slave_0: entered promiscuous mode [ 224.320783][T11045] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.328261][T11045] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.338677][T11045] bridge_slave_1: entered allmulticast mode [ 224.361417][T11045] bridge_slave_1: entered promiscuous mode [ 224.603449][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.802823][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.905052][T11045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.018359][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.062842][T11045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.134884][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.195451][T11045] team0: Port device team_slave_0 added [ 225.204964][T11045] team0: Port device team_slave_1 added [ 225.244443][T11045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.252047][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.278386][T11045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.292230][T11045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.300122][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.327296][T11045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.386407][ T5156] Bluetooth: hci7: command tx timeout [ 225.403889][T11045] hsr_slave_0: entered promiscuous mode [ 225.411004][T11045] hsr_slave_1: entered promiscuous mode [ 225.418045][T11045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.426219][T11045] Cannot create hsr debugfs directory [ 225.499205][T11087] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1449'. [ 225.721164][T10919] veth0_vlan: entered promiscuous mode [ 225.782737][T10919] veth1_vlan: entered promiscuous mode [ 225.814839][ T13] bridge_slave_1: left allmulticast mode [ 225.824518][ T13] bridge_slave_1: left promiscuous mode [ 225.833593][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.883010][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.893085][ T13] bridge_slave_0: left allmulticast mode [ 225.902657][ T13] bridge_slave_0: left promiscuous mode [ 225.902761][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.916548][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.927825][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.943183][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.953852][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.969394][T11105] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1453'. [ 226.374495][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.385320][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.395422][ T13] bond0 (unregistering): Released all slaves [ 226.534093][T10919] veth0_macvtap: entered promiscuous mode [ 226.614632][T11098] lo speed is unknown, defaulting to 1000 [ 226.659853][T11115] netlink: 'syz.6.1457': attribute type 5 has an invalid length. [ 226.675465][T10919] veth1_macvtap: entered promiscuous mode [ 226.904274][T11123] netlink: 'syz.6.1458': attribute type 9 has an invalid length. [ 226.925676][T11123] netlink: 'syz.6.1458': attribute type 6 has an invalid length. [ 226.958191][T11123] netlink: 'syz.6.1458': attribute type 7 has an invalid length. [ 226.970465][T11123] netlink: 'syz.6.1458': attribute type 8 has an invalid length. [ 227.001068][ T13] hsr_slave_0: left promiscuous mode [ 227.009631][ T13] hsr_slave_1: left promiscuous mode [ 227.022122][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.033507][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.069896][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.084638][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.123928][ T13] veth1_macvtap: left promiscuous mode [ 227.130202][ T13] veth0_macvtap: left promiscuous mode [ 227.136943][ T13] veth1_vlan: left promiscuous mode [ 227.142380][ T13] veth0_vlan: left promiscuous mode [ 227.467980][ T51] Bluetooth: hci7: command tx timeout [ 227.717715][ T13] team0 (unregistering): Port device team_slave_1 removed [ 227.762762][ T13] team0 (unregistering): Port device team_slave_0 removed [ 228.025981][ T51] Bluetooth: hci0: command tx timeout [ 228.204359][T11134] tipc: Started in network mode [ 228.211643][T11134] tipc: Node identity eacac99e646d, cluster identity 4711 [ 228.219142][T11134] tipc: Enabled bearer , priority 0 [ 228.229538][T11135] syzkaller0: entered promiscuous mode [ 228.235041][T11135] syzkaller0: entered allmulticast mode [ 228.269941][T11139] tipc: Resetting bearer [ 228.280023][T10919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.332958][T11133] tipc: Resetting bearer [ 228.360821][T11133] tipc: Disabling bearer [ 228.376300][T10919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.409811][T11045] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 228.441064][T11045] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 228.495236][ T3540] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.530667][ T3540] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.551510][T11045] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 228.570896][T11045] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 228.695363][ T3540] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.755886][ T3540] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.883200][T11098] chnl_net:caif_netlink_parms(): no params data found [ 228.994731][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.003496][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.060919][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.069261][T11098] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.085836][T11098] bridge_slave_0: entered allmulticast mode [ 229.093679][T11098] bridge_slave_0: entered promiscuous mode [ 229.122272][T11098] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.132976][T11098] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.141564][T11098] bridge_slave_1: entered allmulticast mode [ 229.151734][T11098] bridge_slave_1: entered promiscuous mode [ 229.222342][T11098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.243526][ T9059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.268290][T11098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.278456][ T9059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.349574][T11098] team0: Port device team_slave_0 added [ 229.366963][T11098] team0: Port device team_slave_1 added [ 229.441094][T11098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.448640][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.478278][T11098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.514862][T11098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.529658][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.556442][T11098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.568340][ T51] Bluetooth: hci7: command tx timeout [ 229.586876][T11045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.705187][T11098] hsr_slave_0: entered promiscuous mode [ 229.729475][T11098] hsr_slave_1: entered promiscuous mode [ 229.737081][T11098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.744672][T11098] Cannot create hsr debugfs directory [ 229.770580][T11045] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.785190][T11182] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1473'. [ 229.892688][ T9059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.954705][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.961926][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.033976][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.041172][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.099806][ T9059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.116048][ T51] Bluetooth: hci0: command tx timeout [ 230.212231][ T9059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.331479][T11189] netlink: 'syz.6.1475': attribute type 7 has an invalid length. [ 230.342255][ T9059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.355735][T11189] netlink: 'syz.6.1475': attribute type 8 has an invalid length. [ 230.363495][T11189] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1475'. [ 230.434119][T11045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.466605][T11045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.842236][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.856145][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.866992][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.877572][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.888298][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.888885][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.903104][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.912225][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.919983][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.920410][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.983849][ T9059] bridge_slave_1: left allmulticast mode [ 230.994754][ T9059] bridge_slave_1: left promiscuous mode [ 231.006096][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.037224][ T9059] bridge_slave_0: left allmulticast mode [ 231.045719][ T9059] bridge_slave_0: left promiscuous mode [ 231.051515][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.089907][T11203] delete_channel: no stack [ 231.464824][ T9059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.477126][ T9059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.489120][ T9059] bond0 (unregistering): Released all slaves [ 231.581074][T11200] lo speed is unknown, defaulting to 1000 [ 231.626490][ T5844] Bluetooth: hci7: command tx timeout [ 231.645670][T11198] lo speed is unknown, defaulting to 1000 [ 231.732491][T11214] macsec1: entered promiscuous mode [ 231.739761][T11214] bond0: entered promiscuous mode [ 231.746623][T11214] bond0: left promiscuous mode [ 231.845882][T11045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.069048][ T9059] hsr_slave_0: left promiscuous mode [ 232.090899][ T9059] hsr_slave_1: left promiscuous mode [ 232.100060][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.130810][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.138962][T11225] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1481'. [ 232.160343][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.174165][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.185710][ T5844] Bluetooth: hci0: command tx timeout [ 232.206463][ T9059] veth1_macvtap: left promiscuous mode [ 232.212091][ T9059] veth0_macvtap: left promiscuous mode [ 232.219812][ T9059] veth1_vlan: left promiscuous mode [ 232.225116][ T9059] veth0_vlan: left promiscuous mode [ 232.686722][ T9059] team0 (unregistering): Port device team_slave_1 removed [ 232.740579][ T9059] team0 (unregistering): Port device team_slave_0 removed [ 232.990521][ T51] Bluetooth: hci3: command tx timeout [ 232.995667][ T5844] Bluetooth: hci2: command tx timeout [ 233.381867][T11098] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 233.417388][T11098] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 233.433108][T11098] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.536416][T11098] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.665175][T11198] chnl_net:caif_netlink_parms(): no params data found [ 233.762928][T11200] chnl_net:caif_netlink_parms(): no params data found [ 233.983391][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.006316][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.013544][T11198] bridge_slave_0: entered allmulticast mode [ 234.027635][T11198] bridge_slave_0: entered promiscuous mode [ 234.034855][T11255] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1484'. [ 234.059578][T11045] veth0_vlan: entered promiscuous mode [ 234.068928][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.077305][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.084571][T11198] bridge_slave_1: entered allmulticast mode [ 234.092640][T11198] bridge_slave_1: entered promiscuous mode [ 234.116822][T11045] veth1_vlan: entered promiscuous mode [ 234.151760][T11259] netlink: 'syz.6.1485': attribute type 7 has an invalid length. [ 234.164282][T11259] netlink: 'syz.6.1485': attribute type 8 has an invalid length. [ 234.174727][T11259] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1485'. [ 234.227978][T11198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.266604][ T5844] Bluetooth: hci0: command tx timeout [ 234.298697][T11198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.351227][T11200] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.358604][T11200] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.366546][T11200] bridge_slave_0: entered allmulticast mode [ 234.373739][T11200] bridge_slave_0: entered promiscuous mode [ 234.389491][T11198] team0: Port device team_slave_0 added [ 234.400203][T11198] team0: Port device team_slave_1 added [ 234.447846][T11200] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.454998][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.476649][T11200] bridge_slave_1: entered allmulticast mode [ 234.483697][T11200] bridge_slave_1: entered promiscuous mode [ 234.577576][T11200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.594155][T11198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.613778][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.630780][T11264] xt_bpf: check failed: parse error [ 234.651533][ T30] audit: type=1804 audit(1750730457.610:4): pid=11264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1486" name="/newroot/234/cgroup.controllers" dev="tmpfs" ino=1208 res=1 errno=0 [ 234.674701][T11198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.685330][ T30] audit: type=1800 audit(1750730457.610:5): pid=11264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1486" name="cgroup.controllers" dev="tmpfs" ino=1208 res=0 errno=0 [ 234.691997][T11198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.715715][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.742016][T11198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.757145][T11200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.814658][T11045] veth0_macvtap: entered promiscuous mode [ 234.893739][T11045] veth1_macvtap: entered promiscuous mode [ 234.901880][T11267] netlink: 'syz.6.1487': attribute type 29 has an invalid length. [ 234.929419][T11200] team0: Port device team_slave_0 added [ 234.947413][T11200] team0: Port device team_slave_1 added [ 235.005191][T11045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.020437][T11198] hsr_slave_0: entered promiscuous mode [ 235.028183][T11198] hsr_slave_1: entered promiscuous mode [ 235.034689][T11198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.042566][T11198] Cannot create hsr debugfs directory [ 235.066625][ T51] Bluetooth: hci2: command tx timeout [ 235.072097][ T5844] Bluetooth: hci3: command tx timeout [ 235.103318][T11200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.110473][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.137679][T11200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.164418][T11098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.184754][T11200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.194918][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.223411][T11200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.401519][T11274] netlink: 'syz.6.1489': attribute type 1 has an invalid length. [ 235.411644][T11274] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1489'. [ 235.520842][ T9059] dvmrp1 (unregistering): left allmulticast mode [ 235.741890][ T9059] team0: Port device bridge2 removed [ 235.884296][ T9059] bond0 (unregistering): Released all slaves [ 235.897634][ T9059] bond1 (unregistering): Released all slaves [ 235.911098][T11045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.019976][ T9059] IPVS: stopping backup sync thread 9648 ... [ 236.081160][T11200] hsr_slave_0: entered promiscuous mode [ 236.087700][T11200] hsr_slave_1: entered promiscuous mode [ 236.093904][T11200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.101677][T11200] Cannot create hsr debugfs directory [ 236.119925][T11098] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.135548][ T1138] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.144327][ T1138] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.212024][ T1138] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.224014][ T1138] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.262036][T11276] lo speed is unknown, defaulting to 1000 [ 236.302204][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.309367][ T9057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.411715][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.418895][ T9057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.494421][ T9057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.510645][ T9057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.534340][ T9059] hsr_slave_0: left promiscuous mode [ 236.542851][ T9059] hsr_slave_1: left promiscuous mode [ 237.146460][ T5844] Bluetooth: hci3: command tx timeout [ 237.151917][ T5844] Bluetooth: hci2: command tx timeout [ 237.537015][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.571762][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.631268][T11098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.847077][T11198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.978705][T11198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.992847][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1491'. [ 238.149743][T11280] lo speed is unknown, defaulting to 1000 [ 238.176891][T11198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.199708][T11198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 238.280620][ T9059] IPVS: stop unused estimator thread 0... [ 238.332043][T11098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.389268][T11301] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1493'. [ 238.501994][T11303] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1494'. [ 238.513210][T11303] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1494'. [ 238.567680][T11098] veth0_vlan: entered promiscuous mode [ 238.612114][T11098] veth1_vlan: entered promiscuous mode [ 238.661538][T11306] netlink: 'syz.6.1495': attribute type 7 has an invalid length. [ 238.667183][T11200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.677114][T11306] netlink: 'syz.6.1495': attribute type 8 has an invalid length. [ 238.684908][T11306] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1495'. [ 238.707175][T11198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.715736][T11200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.738851][T11200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 238.751241][T11200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 238.770369][T11198] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.792411][T11098] veth0_macvtap: entered promiscuous mode [ 238.814133][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.821339][ T9059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.841800][T11098] veth1_macvtap: entered promiscuous mode [ 238.918934][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.926130][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.978834][T11098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.043656][T11098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.153460][T11318] netlink: 'syz.6.1496': attribute type 39 has an invalid length. [ 239.166596][ T9059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.175371][ T9059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.202410][ T9059] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.225926][ T5844] Bluetooth: hci2: command tx timeout [ 239.228552][ T51] Bluetooth: hci3: command tx timeout [ 239.237350][ T9059] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.448177][T11200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.592146][T11200] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.683136][ T9059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.705292][ T9059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.738227][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.745467][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.780761][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.787962][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.895756][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.909769][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.923956][T11198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.192597][T11198] veth0_vlan: entered promiscuous mode [ 240.227589][T11198] veth1_vlan: entered promiscuous mode [ 240.306018][T11198] veth0_macvtap: entered promiscuous mode [ 240.431796][ T1138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.493226][T11198] veth1_macvtap: entered promiscuous mode [ 240.589655][ T1138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.758809][ T1138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.796260][T11198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.847691][T11198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.909597][ T1138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.943690][T11200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.979843][ T3540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.021510][ T3540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.039420][ T3540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.060099][ T3540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.229202][ T1138] bridge_slave_1: left allmulticast mode [ 241.234906][ T1138] bridge_slave_1: left promiscuous mode [ 241.241203][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.251877][ T1138] bridge_slave_0: left allmulticast mode [ 241.257958][ T1138] bridge_slave_0: left promiscuous mode [ 241.263656][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.595948][T11363] netlink: 596 bytes leftover after parsing attributes in process `syz.6.1505'. [ 241.773566][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.784895][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.795419][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.804245][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.813246][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.813380][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.831753][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.832466][ T1138] bond0 (unregistering): Released all slaves [ 241.863253][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.879713][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.904210][T11361] netlink: 'syz.6.1505': attribute type 29 has an invalid length. [ 241.941591][T11362] netlink: 'syz.6.1505': attribute type 29 has an invalid length. [ 242.153057][T11364] lo speed is unknown, defaulting to 1000 [ 242.171674][ T9057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.261678][ T9057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.346069][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 242.409989][T11378] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1510'. [ 242.419204][T11378] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1510'. [ 242.451484][T11378] dummy0: entered promiscuous mode [ 242.462493][T11378] team0: entered promiscuous mode [ 242.469130][T11378] team_slave_0: entered promiscuous mode [ 242.477207][T11378] team_slave_1: entered promiscuous mode [ 242.483997][T11378] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 242.491654][T11378] Cannot create hsr debugfs directory [ 242.560331][T11382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.567614][T11382] IPv6: NLM_F_CREATE should be set when creating new route [ 242.574897][T11382] IPv6: NLM_F_CREATE should be set when creating new route [ 242.582238][T11383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.602278][ T1138] hsr_slave_0: left promiscuous mode [ 242.609712][ T1138] hsr_slave_1: left promiscuous mode [ 242.622187][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.627645][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1512'. [ 242.631017][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.647370][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.654950][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.685147][ T1138] veth1_macvtap: left promiscuous mode [ 242.694590][ T1138] veth0_macvtap: left promiscuous mode [ 242.702336][ T1138] veth1_vlan: left promiscuous mode [ 242.704888][T11387] netlink: 'syz.7.1513': attribute type 1 has an invalid length. [ 242.708283][ T1138] veth0_vlan: left promiscuous mode [ 243.193659][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 243.243044][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 243.742906][T11391] vxcan2: entered promiscuous mode [ 243.776285][T11200] veth0_vlan: entered promiscuous mode [ 243.867005][ T51] Bluetooth: hci0: command tx timeout [ 243.904806][T11200] veth1_vlan: entered promiscuous mode [ 244.101246][T11200] veth0_macvtap: entered promiscuous mode [ 244.170537][T11200] veth1_macvtap: entered promiscuous mode [ 244.228464][T11400] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1516'. [ 244.316719][T11200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.356752][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1516'. [ 244.431898][ T1138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.476845][T11200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.484498][T11364] chnl_net:caif_netlink_parms(): no params data found [ 244.564499][ T1138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.577379][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.587695][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.605012][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.614491][ T3551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.617418][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.632219][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.636435][ T3551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.663119][T11415] Bluetooth: MGMT ver 1.23 [ 244.719984][ T1138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.734609][ T3551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.747997][ T9057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.776096][T11418] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1519'. [ 244.889500][ T1138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.903628][T11417] netlink: 536 bytes leftover after parsing attributes in process `syz.7.1519'. [ 244.949019][T11418] lo speed is unknown, defaulting to 1000 [ 245.069604][T11411] lo speed is unknown, defaulting to 1000 [ 245.084752][T11364] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.092675][T11364] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.105980][T11364] bridge_slave_0: entered allmulticast mode [ 245.113099][T11364] bridge_slave_0: entered promiscuous mode [ 245.155927][T11364] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.163531][T11364] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.186830][T11364] bridge_slave_1: entered allmulticast mode [ 245.194052][T11364] bridge_slave_1: entered promiscuous mode [ 245.303131][T11364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.331497][T11364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.479021][T11364] team0: Port device team_slave_0 added [ 245.485267][T11427] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1521'. [ 245.504031][T11364] team0: Port device team_slave_1 added [ 245.619966][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.651581][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.675438][T11364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.682845][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.712112][T11364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.725367][T11364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.732637][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.759189][T11364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.775202][T11437] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1523'. [ 245.791845][ T1138] bridge_slave_1: left allmulticast mode [ 245.797744][ T1138] bridge_slave_1: left promiscuous mode [ 245.803502][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.813187][ T1138] bridge_slave_0: left allmulticast mode [ 245.819993][ T1138] bridge_slave_0: left promiscuous mode [ 245.835649][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.949544][ T5844] Bluetooth: hci0: command tx timeout [ 246.241877][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.252979][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.267132][ T1138] bond0 (unregistering): Released all slaves [ 246.617590][T11364] hsr_slave_0: entered promiscuous mode [ 246.624406][T11364] hsr_slave_1: entered promiscuous mode [ 246.642746][T11364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.651717][T11364] Cannot create hsr debugfs directory [ 246.662547][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.676172][ T5844] Bluetooth: hci2: command tx timeout [ 246.712619][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.752112][T11453] netlink: 'syz.7.1529': attribute type 7 has an invalid length. [ 246.761117][T11453] netlink: 'syz.7.1529': attribute type 8 has an invalid length. [ 246.783211][T11411] chnl_net:caif_netlink_parms(): no params data found [ 246.788202][T11453] __nla_validate_parse: 1 callbacks suppressed [ 246.788221][T11453] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1529'. [ 246.915123][ T1138] hsr_slave_0: left promiscuous mode [ 246.931449][ T1138] hsr_slave_1: left promiscuous mode [ 246.939388][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.940818][T11457] FAULT_INJECTION: forcing a failure. [ 246.940818][T11457] name failslab, interval 1, probability 0, space 0, times 0 [ 246.947257][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.967651][T11457] CPU: 0 UID: 0 PID: 11457 Comm: syz.6.1530 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 246.967678][T11457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.967689][T11457] Call Trace: [ 246.967697][T11457] [ 246.967706][T11457] dump_stack_lvl+0x189/0x250 [ 246.967751][T11457] ? __pfx____ratelimit+0x10/0x10 [ 246.967769][T11457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.967792][T11457] ? __pfx__printk+0x10/0x10 [ 246.967816][T11457] ? __pfx___might_resched+0x10/0x10 [ 246.967844][T11457] should_fail_ex+0x414/0x560 [ 246.967869][T11457] should_failslab+0xa8/0x100 [ 246.967890][T11457] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 246.967908][T11457] ? __alloc_skb+0x112/0x2d0 [ 246.967934][T11457] __alloc_skb+0x112/0x2d0 [ 246.967958][T11457] netlink_sendmsg+0x5c6/0xb30 [ 246.967989][T11457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.968013][T11457] ? aa_sock_msg_perm+0x94/0x160 [ 246.968034][T11457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.968053][T11457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.968073][T11457] __sock_sendmsg+0x219/0x270 [ 246.968096][T11457] ____sys_sendmsg+0x505/0x830 [ 246.968124][T11457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.968154][T11457] ? import_iovec+0x74/0xa0 [ 246.968172][T11457] ___sys_sendmsg+0x21f/0x2a0 [ 246.968196][T11457] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.968252][T11457] ? __fget_files+0x2a/0x420 [ 246.968267][T11457] ? __fget_files+0x3a0/0x420 [ 246.968292][T11457] __x64_sys_sendmsg+0x19b/0x260 [ 246.968315][T11457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.968343][T11457] ? __pfx_ksys_write+0x10/0x10 [ 246.968353][T11457] ? rcu_is_watching+0x15/0xb0 [ 246.968379][T11457] ? do_syscall_64+0xbe/0x3b0 [ 246.968399][T11457] do_syscall_64+0xfa/0x3b0 [ 246.968413][T11457] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.968427][T11457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.968439][T11457] ? clear_bhb_loop+0x60/0xb0 [ 246.968455][T11457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.968469][T11457] RIP: 0033:0x7efc1b78e929 [ 246.968490][T11457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.968503][T11457] RSP: 002b:00007efc195f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.968523][T11457] RAX: ffffffffffffffda RBX: 00007efc1b9b5fa0 RCX: 00007efc1b78e929 [ 246.968534][T11457] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 000000000000000a [ 246.968543][T11457] RBP: 00007efc195f6090 R08: 0000000000000000 R09: 0000000000000000 [ 246.968552][T11457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.968562][T11457] R13: 0000000000000000 R14: 00007efc1b9b5fa0 R15: 00007fff71779668 [ 246.968586][T11457] [ 246.978004][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.257092][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.290654][ T1138] veth1_macvtap: left promiscuous mode [ 247.300122][ T1138] veth0_macvtap: left promiscuous mode [ 247.308670][ T1138] veth1_vlan: left promiscuous mode [ 247.314028][ T1138] veth0_vlan: left promiscuous mode [ 247.319992][T11464] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1532'. [ 247.337418][T11463] netlink: 'syz.6.1532': attribute type 1 has an invalid length. [ 247.978377][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 248.021962][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 248.039646][ T5844] Bluetooth: hci0: command tx timeout [ 248.649294][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1535'. [ 248.745896][ T5844] Bluetooth: hci2: command tx timeout [ 248.811558][T11411] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.845933][T11411] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.853239][T11411] bridge_slave_0: entered allmulticast mode [ 248.889826][T11411] bridge_slave_0: entered promiscuous mode [ 248.919807][T11411] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.929062][T11411] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.939083][T11411] bridge_slave_1: entered allmulticast mode [ 248.948366][T11411] bridge_slave_1: entered promiscuous mode [ 248.955731][T11487] SET target dimension over the limit! [ 249.060696][T11411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.082875][T11411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.157164][T11411] team0: Port device team_slave_0 added [ 249.191527][ T1138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.210075][T11411] team0: Port device team_slave_1 added [ 249.267137][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.282456][T11411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.290318][T11411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.318526][T11411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.332560][T11411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.340602][T11411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.366991][T11411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.393292][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.443306][T11411] hsr_slave_0: entered promiscuous mode [ 249.450837][T11411] hsr_slave_1: entered promiscuous mode [ 249.461386][T11411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.470215][T11411] Cannot create hsr debugfs directory [ 249.489722][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.708576][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1538'. [ 249.718931][T11492] netlink: 'syz.7.1538': attribute type 21 has an invalid length. [ 249.726956][T11492] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1538'. [ 249.793334][T11496] lo speed is unknown, defaulting to 1000 [ 250.057952][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.067306][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.081200][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.094262][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.102313][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.109404][ T5841] Bluetooth: hci0: command tx timeout [ 250.142725][T11364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.185253][T11364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.200178][T11364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.245165][ T1138] bridge_slave_1: left allmulticast mode [ 250.253184][ T1138] bridge_slave_1: left promiscuous mode [ 250.262892][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.282052][ T1138] bridge_slave_0: left allmulticast mode [ 250.292286][ T1138] bridge_slave_0: left promiscuous mode [ 250.300546][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.702217][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.714697][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.727941][ T1138] bond0 (unregistering): Released all slaves [ 250.769365][T11364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.827943][ T5844] Bluetooth: hci2: command tx timeout [ 250.886909][T11500] lo speed is unknown, defaulting to 1000 [ 251.251484][T11522] netlink: 'syz.7.1543': attribute type 7 has an invalid length. [ 251.262689][T11522] netlink: 'syz.7.1543': attribute type 8 has an invalid length. [ 251.275196][ T1138] hsr_slave_0: left promiscuous mode [ 251.284204][T11522] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1543'. [ 251.294666][ T1138] hsr_slave_1: left promiscuous mode [ 251.301872][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.310729][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.319890][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.327579][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.351978][ T1138] veth1_macvtap: left promiscuous mode [ 251.358693][ T1138] veth0_macvtap: left promiscuous mode [ 251.364390][ T1138] veth1_vlan: left promiscuous mode [ 251.370335][ T1138] veth0_vlan: left promiscuous mode [ 251.838199][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 251.887788][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 252.185974][ T5844] Bluetooth: hci3: command tx timeout [ 252.405164][T11533] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1545'. [ 252.527943][T11364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.559227][T11538] netlink: 'syz.6.1546': attribute type 1 has an invalid length. [ 252.602719][T11538] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1546'. [ 252.634262][T11364] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.701443][T11411] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.761481][T11411] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.788480][T11411] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.824996][T11500] chnl_net:caif_netlink_parms(): no params data found [ 252.851209][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.858466][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.881524][T11411] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.906079][ T5844] Bluetooth: hci2: command tx timeout [ 252.969806][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.976999][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.989942][T11533] lo speed is unknown, defaulting to 1000 [ 253.176587][T11500] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.183770][T11500] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.198494][T11500] bridge_slave_0: entered allmulticast mode [ 253.209676][T11500] bridge_slave_0: entered promiscuous mode [ 253.221033][T11500] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.228854][T11500] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.236781][T11500] bridge_slave_1: entered allmulticast mode [ 253.244622][T11500] bridge_slave_1: entered promiscuous mode [ 253.516766][T11500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.529881][T11500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.650387][T11500] team0: Port device team_slave_0 added [ 253.730270][T11500] team0: Port device team_slave_1 added [ 253.963951][T11500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.985826][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.037009][T11500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.072499][T11500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.081282][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.110569][T11500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.181795][T11584] netlink: 'syz.6.1555': attribute type 7 has an invalid length. [ 254.202249][T11584] netlink: 'syz.6.1555': attribute type 8 has an invalid length. [ 254.225830][T11584] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1555'. [ 254.267559][ T5844] Bluetooth: hci3: command tx timeout [ 254.288991][T11500] hsr_slave_0: entered promiscuous mode [ 254.295386][T11500] hsr_slave_1: entered promiscuous mode [ 254.301552][T11500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.309162][T11500] Cannot create hsr debugfs directory [ 254.320195][T11364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.518607][ T43] lo speed is unknown, defaulting to 1000 [ 254.524383][ T43] syz2: Port: 1 Link DOWN [ 254.530063][T11411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.585136][T11592] syzkaller0: entered promiscuous mode [ 254.593589][T11592] syzkaller0: entered allmulticast mode [ 254.648853][T11589] lo speed is unknown, defaulting to 1000 [ 254.785149][T11411] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.896368][T11601] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1559'. [ 254.905228][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.912530][ T9059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.950669][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.957866][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.981272][T11604] netlink: 'syz.6.1560': attribute type 1 has an invalid length. [ 254.995848][T11604] netlink: 'syz.6.1560': attribute type 1 has an invalid length. [ 255.012240][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1560'. [ 255.021855][T11364] veth0_vlan: entered promiscuous mode [ 255.053320][T11364] veth1_vlan: entered promiscuous mode [ 256.349963][ T5156] Bluetooth: hci3: command tx timeout [ 256.600112][T11411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.690812][T11364] veth0_macvtap: entered promiscuous mode [ 256.841581][T11364] veth1_macvtap: entered promiscuous mode [ 256.955864][T11619] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1565'. [ 257.034422][T11364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.077673][T11411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.090779][T11364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.158532][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.215023][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.233199][ T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.249457][T11500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.262056][ T44] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.287968][T11500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.341275][T11500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.429050][T11626] lo speed is unknown, defaulting to 1000 [ 257.484732][T11500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.559012][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.568412][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.600219][T11411] veth0_vlan: entered promiscuous mode [ 257.637735][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.646403][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.697695][T11411] veth1_vlan: entered promiscuous mode [ 257.785880][ T5156] Bluetooth: hci6: command 0x0405 tx timeout [ 257.797774][ T5156] Bluetooth: hci5: command 0x0406 tx timeout [ 257.899381][T11411] veth0_macvtap: entered promiscuous mode [ 257.974967][T11411] veth1_macvtap: entered promiscuous mode [ 257.999001][T11651] netlink: 'syz.6.1572': attribute type 7 has an invalid length. [ 258.011138][T11651] netlink: 'syz.6.1572': attribute type 8 has an invalid length. [ 258.019856][T11651] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1572'. [ 258.030620][T11411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.072999][T11411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.131749][T11500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.156901][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.172940][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.220217][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.237054][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.317972][ T3462] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.410478][ T3462] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.425639][ T51] Bluetooth: hci3: command 0x0419 tx timeout [ 258.448856][T11500] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.500152][ T3462] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.527664][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.534801][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.554049][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.561275][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.599627][ T3462] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.621244][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.629598][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.675401][ T9059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.690151][ T9059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.926591][ T3462] bridge_slave_1: left allmulticast mode [ 258.932284][ T3462] bridge_slave_1: left promiscuous mode [ 258.942392][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.952786][ T3462] bridge_slave_0: left allmulticast mode [ 258.959065][ T3462] bridge_slave_0: left promiscuous mode [ 258.964885][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.004609][T11660] netlink: 'syz.6.1573': attribute type 7 has an invalid length. [ 259.028634][T11660] netlink: 'syz.6.1573': attribute type 8 has an invalid length. [ 259.047033][T11660] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1573'. [ 259.134091][ T978] IPVS: starting estimator thread 0... [ 259.245891][T11666] IPVS: using max 32 ests per chain, 76800 per kthread [ 259.514789][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.524583][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.535036][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.547845][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.557282][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.787518][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.806583][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.830496][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.858700][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.874659][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.882909][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.904543][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.918672][ T3462] bond0 (unregistering): Released all slaves [ 259.933556][T11665] netlink: 'syz.7.1575': attribute type 12 has an invalid length. [ 259.997140][T11673] lo speed is unknown, defaulting to 1000 [ 260.138950][T11675] lo speed is unknown, defaulting to 1000 [ 260.278017][T11500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.505600][ T5844] Bluetooth: hci3: command 0x0419 tx timeout [ 260.559186][ T3462] hsr_slave_0: left promiscuous mode [ 260.581118][ T3462] hsr_slave_1: left promiscuous mode [ 260.593715][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.626483][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.634699][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.655738][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.694526][ T3462] veth1_macvtap: left promiscuous mode [ 260.702098][ T3462] veth0_macvtap: left promiscuous mode [ 260.707836][ T3462] veth1_vlan: left promiscuous mode [ 260.713184][ T3462] veth0_vlan: left promiscuous mode [ 261.403539][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 261.451580][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 261.628586][ T5844] Bluetooth: hci0: command tx timeout [ 261.954235][ T5844] Bluetooth: hci2: command tx timeout [ 262.390457][T11673] chnl_net:caif_netlink_parms(): no params data found [ 262.528691][T11675] chnl_net:caif_netlink_parms(): no params data found [ 262.611052][T11710] netlink: 14200 bytes leftover after parsing attributes in process `syz.6.1582'. [ 262.626966][T11500] veth0_vlan: entered promiscuous mode [ 262.714362][T11500] veth1_vlan: entered promiscuous mode [ 262.762609][T11673] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.770428][T11673] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.777912][T11673] bridge_slave_0: entered allmulticast mode [ 262.785985][T11673] bridge_slave_0: entered promiscuous mode [ 262.835189][T11673] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.858533][T11673] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.930752][T11673] bridge_slave_1: entered allmulticast mode [ 262.949589][T11673] bridge_slave_1: entered promiscuous mode [ 262.951253][T11718] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20001 [ 263.042071][T11718] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1583'. [ 263.074706][T11720] x_tables: duplicate underflow at hook 2 [ 263.106041][T11718] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20001 [ 263.112352][T11720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.129505][T11720] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1584'. [ 263.141090][T11673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.155316][T11673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.184016][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.204446][T11675] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.212524][T11675] bridge_slave_0: entered allmulticast mode [ 263.221237][T11675] bridge_slave_0: entered promiscuous mode [ 263.290184][ T3462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.356054][T11675] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.363209][T11675] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.371856][T11675] bridge_slave_1: entered allmulticast mode [ 263.381941][T11675] bridge_slave_1: entered promiscuous mode [ 263.405357][T11673] team0: Port device team_slave_0 added [ 263.435420][ T3462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.504848][T11673] team0: Port device team_slave_1 added [ 263.547551][T11500] veth0_macvtap: entered promiscuous mode [ 263.583678][ T3462] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.651154][T11675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.695783][T11673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.702889][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1588'. [ 263.712177][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.716265][ T5844] Bluetooth: hci0: command tx timeout [ 263.745829][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1588'. [ 263.775141][T11673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.833694][ T3462] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.866094][T11675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.876123][T11673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.883091][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.911034][T11673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.922545][T11500] veth1_macvtap: entered promiscuous mode [ 263.943813][T11728] lo speed is unknown, defaulting to 1000 [ 263.987676][T11675] team0: Port device team_slave_0 added [ 264.026376][ T5844] Bluetooth: hci2: command tx timeout [ 264.053699][T11675] team0: Port device team_slave_1 added [ 264.080643][T11673] hsr_slave_0: entered promiscuous mode [ 264.088196][T11673] hsr_slave_1: entered promiscuous mode [ 264.094333][T11673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.102601][T11673] Cannot create hsr debugfs directory [ 264.214059][T11675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.224635][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.251326][T11675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.277242][T11500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.309459][T11675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.316840][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.345113][T11675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.470073][T11500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.533006][T11742] tipc: Can't bind to reserved service type 2 [ 264.559716][ T3462] bridge_slave_1: left allmulticast mode [ 264.568750][ T3462] bridge_slave_1: left promiscuous mode [ 264.574463][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.585047][ T3462] bridge_slave_0: left allmulticast mode [ 264.594296][ T3462] bridge_slave_0: left promiscuous mode [ 264.604425][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.002866][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.013986][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.025060][ T3462] bond0 (unregistering): Released all slaves [ 265.111922][T11675] hsr_slave_0: entered promiscuous mode [ 265.120819][T11675] hsr_slave_1: entered promiscuous mode [ 265.147996][T11675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.158300][T11675] Cannot create hsr debugfs directory [ 265.213084][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.222481][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.287291][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.296385][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.436115][T11763] FAULT_INJECTION: forcing a failure. [ 265.436115][T11763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.449417][T11763] CPU: 1 UID: 0 PID: 11763 Comm: syz.7.1597 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 265.449461][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.449483][T11763] Call Trace: [ 265.449498][T11763] [ 265.449513][T11763] dump_stack_lvl+0x189/0x250 [ 265.449558][T11763] ? __pfx____ratelimit+0x10/0x10 [ 265.449576][T11763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.449599][T11763] ? __pfx__printk+0x10/0x10 [ 265.449632][T11763] should_fail_ex+0x414/0x560 [ 265.449658][T11763] _copy_from_user+0x2d/0xb0 [ 265.449676][T11763] sctp_setsockopt+0x19f/0x1200 [ 265.449698][T11763] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 265.449720][T11763] do_sock_setsockopt+0x25a/0x3e0 [ 265.449746][T11763] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 265.449773][T11763] ? __fget_files+0x2a/0x420 [ 265.449797][T11763] __x64_sys_setsockopt+0x18b/0x220 [ 265.449825][T11763] do_syscall_64+0xfa/0x3b0 [ 265.449842][T11763] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.449858][T11763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.449875][T11763] ? clear_bhb_loop+0x60/0xb0 [ 265.449895][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.449911][T11763] RIP: 0033:0x7f540738e929 [ 265.449927][T11763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.449942][T11763] RSP: 002b:00007f54081b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.449961][T11763] RAX: ffffffffffffffda RBX: 00007f54075b5fa0 RCX: 00007f540738e929 [ 265.449974][T11763] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 265.449984][T11763] RBP: 00007f54081b2090 R08: 0000000000000008 R09: 0000000000000000 [ 265.449995][T11763] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 265.450005][T11763] R13: 0000000000000000 R14: 00007f54075b5fa0 R15: 00007ffe72df3ff8 [ 265.450034][T11763] [ 265.785707][ T5844] Bluetooth: hci0: command tx timeout [ 265.828815][T11769] can: request_module (can-proto-3) failed. [ 266.109551][ T5844] Bluetooth: hci2: command tx timeout [ 267.696795][ T3462] hsr_slave_0: left promiscuous mode [ 267.703383][ T3462] hsr_slave_1: left promiscuous mode [ 267.715803][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.737509][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.760309][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.775974][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.813583][ T3462] veth1_macvtap: left promiscuous mode [ 267.822167][ T3462] veth0_macvtap: left promiscuous mode [ 267.828397][ T3462] veth1_vlan: left promiscuous mode [ 267.833758][ T3462] veth0_vlan: left promiscuous mode [ 267.866258][ T5844] Bluetooth: hci0: command tx timeout [ 268.111286][T11781] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1601'. [ 268.186338][ T5844] Bluetooth: hci2: command tx timeout [ 268.384714][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 268.430456][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 268.882062][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.897976][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.907188][T11775] unknown channel width for channel at 909000KHz? [ 269.098781][ T9059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.118592][ T9059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.155907][T11783] pimreg: entered allmulticast mode [ 269.165250][T11783] pimreg: left allmulticast mode [ 269.235072][T11785] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1603'. [ 269.296854][T11786] IPVS: Scheduler module ip_vs_sip not found [ 269.491214][T11796] netlink: 'syz.7.1606': attribute type 7 has an invalid length. [ 269.520122][T11796] netlink: 'syz.7.1606': attribute type 8 has an invalid length. [ 269.535456][T11796] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1606'. [ 269.545743][T11673] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 269.552065][T11798] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1607'. [ 269.582266][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1607'. [ 269.656194][ T3462] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.675038][T11673] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 269.777634][ T3462] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.800902][ T31] INFO: task syz.1.452:7527 blocked for more than 143 seconds. [ 269.815815][ T31] Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 [ 269.823490][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.841023][ T31] task:syz.1.452 state:D stack:25352 pid:7527 tgid:7526 ppid:5833 task_flags:0x400140 flags:0x00004004 [ 269.853145][ T31] Call Trace: [ 269.860630][ T31] [ 269.863579][ T31] __schedule+0x16f5/0x4d00 [ 269.868442][ T31] ? __lock_acquire+0xab9/0xd20 [ 269.873291][ T31] ? schedule+0x165/0x360 [ 269.877823][ T31] ? __pfx___schedule+0x10/0x10 [ 269.882691][ T31] ? schedule+0x91/0x360 [ 269.887134][ T31] schedule+0x165/0x360 [ 269.891455][ T31] schedule_preempt_disabled+0x13/0x30 [ 269.896952][ T31] __mutex_lock+0x724/0xe80 [ 269.901473][ T31] ? __mutex_lock+0x51b/0xe80 [ 269.906211][ T31] ? nfsd_nl_listener_set_doit+0x12a/0x1650 [ 269.912116][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 269.917212][ T31] ? __asan_memset+0x22/0x50 [ 269.921813][ T31] ? ____sys_sendmsg+0x505/0x830 [ 269.926799][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 269.931644][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 269.936883][ T31] nfsd_nl_listener_set_doit+0x12a/0x1650 [ 269.943135][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 269.949462][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 269.956223][ T31] ? __nla_parse+0x40/0x60 [ 269.960666][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 269.967038][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 269.972587][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 269.978829][ T31] ? bpf_lsm_capable+0x9/0x20 [ 269.983508][ T31] ? security_capable+0x7e/0x2e0 [ 269.988814][ T31] genl_rcv_msg+0x60e/0x790 [ 269.993331][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.998419][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 270.004593][ T31] netlink_rcv_skb+0x208/0x470 [ 270.009456][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.014485][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.019799][ T31] ? down_read+0x1ad/0x2e0 [ 270.024205][ T31] genl_rcv+0x28/0x40 [ 270.028272][ T31] netlink_unicast+0x75b/0x8d0 [ 270.033052][ T31] netlink_sendmsg+0x805/0xb30 [ 270.037834][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.043594][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 270.048677][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.053971][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.059342][ T31] __sock_sendmsg+0x219/0x270 [ 270.064046][ T31] ____sys_sendmsg+0x505/0x830 [ 270.068919][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.074219][ T31] ? import_iovec+0x74/0xa0 [ 270.078745][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 270.083411][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.088734][ T31] ? __fget_files+0x2a/0x420 [ 270.093325][ T31] ? __fget_files+0x3a0/0x420 [ 270.098118][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 270.103047][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.110122][ T31] ? rcu_is_watching+0x15/0xb0 [ 270.114917][ T31] ? do_syscall_64+0xbe/0x3b0 [ 270.119638][ T31] do_syscall_64+0xfa/0x3b0 [ 270.124128][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.129459][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.135561][ T31] ? clear_bhb_loop+0x60/0xb0 [ 270.140242][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.146845][ T31] RIP: 0033:0x7f594158e929 [ 270.151275][ T31] RSP: 002b:00007f5942314038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.159715][ T31] RAX: ffffffffffffffda RBX: 00007f59417b5fa0 RCX: 00007f594158e929 [ 270.167856][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 270.175905][ T31] RBP: 00007f5941610b39 R08: 0000000000000000 R09: 0000000000000000 [ 270.183904][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.192301][ T31] R13: 0000000000000000 R14: 00007f59417b5fa0 R15: 00007fff946bb4a8 [ 270.200404][ T31] [ 270.203528][ T31] [ 270.203528][ T31] Showing all locks held in the system: [ 270.203879][T11673] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.212728][ T31] 1 lock held by khungtaskd/31: [ 270.223436][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 270.233428][ T31] 3 locks held by kworker/u8:5/1138: [ 270.238909][ T31] #0: ffff88814bdf3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 270.251228][ T31] #1: ffffc90003a0fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 270.264684][ T31] #2: ffffffff8f512b88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 270.279934][ T31] 6 locks held by kworker/u8:7/3462: [ 270.285243][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 270.296374][ T31] #1: ffffc9000caa7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 270.307012][ T31] #2: ffffffff8f505ed0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 270.316591][ T31] #3: ffff8880245090e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 270.326656][ T31] #4: ffff888049127250 (&devlink->lock_key#21){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 270.337685][ T31] #5: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 270.348406][ T31] 2 locks held by getty/5598: [ 270.353108][ T31] #0: ffff88803508a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 270.362975][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 270.373117][ T31] 2 locks held by syz.2.406/7380: [ 270.378209][ T31] #0: ffffffff8f5777f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 270.386485][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 270.396775][ T31] 2 locks held by syz.1.452/7527: [ 270.401796][ T31] #0: ffffffff8f5777f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 270.410020][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 270.420330][ T31] 3 locks held by kworker/u8:11/9059: [ 270.426332][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 270.438051][ T31] #1: ffffc900044dfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 270.449073][ T31] #2: ffffffff8f512b88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 270.458795][ T31] 2 locks held by syz.5.1365/10720: [ 270.464011][ T31] #0: ffffffff8f5777f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 270.472303][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 270.482556][ T31] 3 locks held by syz-executor/11673: [ 270.487940][ T31] #0: ffffffff8f512b88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 270.497029][ T31] #1: ffff88802a3fcd20 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 270.507301][ T31] #2: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 270.518205][ T31] 7 locks held by syz-executor/11675: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 270.523575][ T31] #0: ffff888023ee4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 270.532508][ T31] #1: ffff88804eb51c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 270.542467][ T31] #2: ffff888147a9c0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 270.599225][ T31] #3: ffffffff8edad5e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 270.652228][ T31] #4: ffff88802627d0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 270.671080][ T31] #5: ffff8880517ec250 (&devlink->lock_key#20){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 270.695704][ T31] #6: ffffffff8f512b88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 270.705185][ T31] 1 lock held by syz-executor/11801: [ 270.740093][ T31] [ 270.742469][ T31] ============================================= [ 270.742469][ T31] [ 270.783087][ T31] NMI backtrace for cpu 0 [ 270.783108][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 270.783126][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.783135][ T31] Call Trace: [ 270.783141][ T31] [ 270.783148][ T31] dump_stack_lvl+0x189/0x250 [ 270.783172][ T31] ? __wake_up_klogd+0xd9/0x110 [ 270.783191][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.783211][ T31] ? __pfx__printk+0x10/0x10 [ 270.783245][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 270.783269][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 270.783285][ T31] ? _printk+0xcf/0x120 [ 270.783304][ T31] ? __pfx__printk+0x10/0x10 [ 270.783322][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 270.783343][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 270.783365][ T31] watchdog+0xfee/0x1030 [ 270.783386][ T31] ? watchdog+0x1de/0x1030 [ 270.783411][ T31] kthread+0x70e/0x8a0 [ 270.783431][ T31] ? __pfx_watchdog+0x10/0x10 [ 270.783448][ T31] ? __pfx_kthread+0x10/0x10 [ 270.783466][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.783486][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.783499][ T31] ? __pfx_kthread+0x10/0x10 [ 270.783516][ T31] ret_from_fork+0x3f9/0x770 [ 270.783537][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 270.783562][ T31] ? __switch_to_asm+0x39/0x70 [ 270.783575][ T31] ? __switch_to_asm+0x33/0x70 [ 270.783588][ T31] ? __pfx_kthread+0x10/0x10 [ 270.783605][ T31] ret_from_fork_asm+0x1a/0x30 [ 270.783633][ T31] [ 270.783639][ T31] Sending NMI from CPU 0 to CPUs 1: [ 270.949974][ C1] NMI backtrace for cpu 1 [ 270.949992][ C1] CPU: 1 UID: 0 PID: 8013 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 270.950011][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.950021][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 270.950045][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b dd fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 270.950058][ C1] RSP: 0018:ffffc90003b4f438 EFLAGS: 00000206 [ 270.950072][ C1] RAX: b5cc02e46589be00 RBX: 0000000000000000 RCX: b5cc02e46589be00 [ 270.950084][ C1] RDX: 0000000000000001 RSI: ffffffff8db71adc RDI: ffffffff8be28b80 [ 270.950094][ C1] RBP: ffffffff81729af5 R08: 0000000000000000 R09: ffffffff81729af5 [ 270.950105][ C1] R10: ffffc90003b4f608 R11: fffff52000769ecd R12: 0000000000000002 [ 270.950115][ C1] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000246 [ 270.950125][ C1] FS: 0000000000000000(0000) GS:ffff888125d4f000(0000) knlGS:0000000000000000 [ 270.950138][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.950148][ C1] CR2: 00007f54080e7d60 CR3: 000000007f2e6000 CR4: 00000000003526f0 [ 270.950162][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 270.950171][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 270.950180][ C1] Call Trace: [ 270.950186][ C1] [ 270.950197][ C1] ? __unwind_start+0xf8/0x760 [ 270.950217][ C1] ? unwind_next_frame+0xa5/0x2390 [ 270.950236][ C1] unwind_next_frame+0xc2/0x2390 [ 270.950254][ C1] ? unwind_next_frame+0xa5/0x2390 [ 270.950275][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 270.950295][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 270.950317][ C1] __unwind_start+0x5b9/0x760 [ 270.950337][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 270.950354][ C1] arch_stack_walk+0xe4/0x150 [ 270.950371][ C1] ? __unwind_start+0xf8/0x760 [ 270.950391][ C1] stack_trace_save+0x9c/0xe0 [ 270.950406][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 270.950425][ C1] save_stack+0xf5/0x1f0 [ 270.950441][ C1] ? __pfx_save_stack+0x10/0x10 [ 270.950461][ C1] ? page_ext_put+0x97/0xc0 [ 270.950477][ C1] __reset_page_owner+0x71/0x1f0 [ 270.950492][ C1] __free_frozen_pages+0xc71/0xe70 [ 270.950512][ C1] vfree+0x25a/0x400 [ 270.950527][ C1] ? __pfx_kcov_close+0x10/0x10 [ 270.950544][ C1] kcov_close+0x28/0x50 [ 270.950559][ C1] __fput+0x44c/0xa70 [ 270.950581][ C1] task_work_run+0x1d1/0x260 [ 270.950599][ C1] ? __pfx_task_work_run+0x10/0x10 [ 270.950617][ C1] ? kmem_cache_free+0x18f/0x400 [ 270.950633][ C1] do_exit+0x6ad/0x22e0 [ 270.950652][ C1] ? do_raw_spin_lock+0x121/0x290 [ 270.950669][ C1] ? __pfx_do_exit+0x10/0x10 [ 270.950692][ C1] do_group_exit+0x21c/0x2d0 [ 270.950708][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.950724][ C1] get_signal+0x1286/0x1340 [ 270.950752][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 270.950770][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 270.950788][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 270.950813][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 270.950832][ C1] exit_to_user_mode_loop+0x75/0x110 [ 270.950850][ C1] do_syscall_64+0x2bd/0x3b0 [ 270.950864][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.950878][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.950892][ C1] ? clear_bhb_loop+0x60/0xb0 [ 270.950908][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.950921][ C1] RIP: 0033:0x7efc1b784b53 [ 270.950933][ C1] Code: Unable to access opcode bytes at 0x7efc1b784b29. [ 270.950941][ C1] RSP: 002b:00007fff71779bb8 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 270.950955][ C1] RAX: fffffffffffffe00 RBX: 0000000000001f62 RCX: 00007efc1b784b53 [ 270.950973][ C1] RDX: 0000000040000000 RSI: 00007fff71779bcc RDI: 00000000ffffffff [ 270.950983][ C1] RBP: 00007fff71779bcc R08: 0000000000000000 R09: 0000000000000000 [ 270.950992][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 270.951002][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 270.951019][ C1] [ 271.421897][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 271.428882][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 271.440701][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.450769][ T31] Call Trace: [ 271.454058][ T31] [ 271.456998][ T31] dump_stack_lvl+0x99/0x250 [ 271.461605][ T31] ? __asan_memcpy+0x40/0x70 [ 271.466222][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.471436][ T31] ? __pfx__printk+0x10/0x10 [ 271.476035][ T31] panic+0x2db/0x790 [ 271.479989][ T31] ? __pfx_panic+0x10/0x10 [ 271.484418][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 271.490300][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 271.495780][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 271.501959][ T31] watchdog+0x102d/0x1030 [ 271.506314][ T31] ? watchdog+0x1de/0x1030 [ 271.510742][ T31] kthread+0x70e/0x8a0 [ 271.514833][ T31] ? __pfx_watchdog+0x10/0x10 [ 271.519523][ T31] ? __pfx_kthread+0x10/0x10 [ 271.524104][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.529298][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.534486][ T31] ? __pfx_kthread+0x10/0x10 [ 271.539094][ T31] ret_from_fork+0x3f9/0x770 [ 271.543676][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 271.548780][ T31] ? __switch_to_asm+0x39/0x70 [ 271.553540][ T31] ? __switch_to_asm+0x33/0x70 [ 271.558310][ T31] ? __pfx_kthread+0x10/0x10 [ 271.562901][ T31] ret_from_fork_asm+0x1a/0x30 [ 271.567669][ T31] [ 271.570921][ T31] Kernel Offset: disabled [ 271.575239][ T31] Rebooting in 86400 seconds..