last executing test programs: 5.197622775s ago: executing program 2 (id=345): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x0, 0x0, 0x9}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001a00010027bd700003dcdf250220200100000000002075d3672ba21fce000008cd645bf49a582f5e714c963bf3e0d9138185fc8ec35193c144997112c722f57fbb7a25a6dccbb7f8e9bd3f1a6bfbf777d40714b63aa76080e0f4f90a7d731b0e92f4376b4688632b6a6f5398f5b868db321ac4658efd7cfc2d4b0271f9beea1d0956c5cfe12d57b262feaa61dad5cf68b080429f15fddaf7d7cdbdc90e21f1c7ffcf35892b130557169b93f7"], 0x24}}, 0x4040000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81a0}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@d}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b874386d1929ebfd66cc265d21bc", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket(0xb, 0x2, 0xb) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) shutdown(r4, 0x1) listen(r3, 0x80c) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) 4.018310388s ago: executing program 2 (id=353): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x5, 0xc8b, 0x0, {0x0, 0x2710}, {r2, r3/1000+10000}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x3, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x11040e2, 0x4) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'netdevsim0\x00', 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x88, 0x4, 0x80000001, 0x1, 0x968, 0x800, 0x9}, &(0x7f0000000180)={0x2, 0x8e, 0x7, 0x4, 0x8, 0x44a, 0x9, 0x6}, &(0x7f0000000200)={0x8, 0xfffffffffffffffb, 0xffffffffffffffff, 0x3, 0x200, 0x9, 0x8d84, 0x81}, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 3.759517685s ago: executing program 0 (id=357): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r0}, 0x18) unshare(0x6a040000) 3.759062631s ago: executing program 2 (id=358): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {0x0, 0x0, 0x6}, {}, 0x0, 0x3502, 0xa}}, 0xf0}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100000001, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061193800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000080)="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") 3.456516645s ago: executing program 2 (id=360): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18dfff000086b305106504e3a5ef0ce49682000000000000020000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6}, 0x8) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000024000000040000000005000000000000fb24bf92f0e9ea86f1", @ANYRES32=r3, @ANYBLOB="0300fcbb3700"/20, @ANYRES32=0x0, @ANYBLOB="04000000050000000300"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_ext={0x1c, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x77, &(0x7f00000008c0)=""/119, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1ab0f, r6, 0x2, &(0x7f0000000540)=[r4, r4, r7], &(0x7f0000000940)=[{0x0, 0x4, 0xc, 0x1}, {0x4, 0x1, 0x5, 0x2}], 0x10, 0xc}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES8=r7], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e20, 0x0, @remote}, 0x1c) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850055cfae0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 2.551794068s ago: executing program 4 (id=367): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@rr={0x7, 0x3, 0xfd}, @ra={0x94, 0x4, 0x1000}]}}, @address_reply={0xd}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0xfffffffffffffd3a) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000000b00), 0x10000000000000f6}}], 0x1, 0x4004804) sendmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001180)="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", 0xc41}], 0x1}}], 0x1, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102e9ff000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf"], 0xfc}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000000)="e6a6e20a73ec1f43fe907fbf3fb6c6a1f73e0072c31282ca804068129f9658cc72c2fdb61f4f", &(0x7f0000000100)=""/90, &(0x7f0000000180)="5558f0ccc12bc58730a5327d8b", &(0x7f0000000200)="b27aa3fe34e082ca605aa0b84937cf11cee69bc0896d836440964adcf6fe0f967fbc57bc06abf2538f481ae54767bc9148ba4e62baae2cd0a33f08176c5857504636b1b5d68805257fc92fd8cd88f0ead4e07dbff1c0ef4ee9fec9cf9fc432ba4279c83168a617a2c010ee886556f65eede2e449693dcf8c8f60c55920984146d1bd7cb61b9211435e1313119390b2f51b0c5c09984ef7b805b758337feb435c4df46db2237e6e7c1acde20310812a2ef888e604a6224fde5b2256e9a79df8ce9f793f60e307fb06395174f3a0867b68c74a8282dcfeb52db4493efc263ef7e3bcb882983ffd4ba4a14a4095bba06651660e", 0x2, r2}, 0x38) 2.32417321s ago: executing program 3 (id=370): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) 2.323471363s ago: executing program 1 (id=371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x28}}, 0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x1, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x40001, 0x120}}, 0x20}}, 0x8000) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000400)) 2.322643574s ago: executing program 0 (id=372): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x882}], 0x1, 0x8) recvmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) (async) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x13, &(0x7f00000006c0)=@raw=[@tail_call, @ringbuf_query, @ldst={0x2, 0x2, 0x2, 0xb, 0x5, 0x8, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) (async) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f0000000200)) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async, rerun: 64) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 32) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async, rerun: 32) setsockopt$sock_int(r6, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02742e8680d85ff9782762f86dd", 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r8, 0x54d2b226a8e856d5, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x700, 0x7230, 0xd5, {{0x31, 0x4, 0x0, 0x1, 0xc4, 0x66, 0x0, 0xe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x1b, 0x50, [@loopback, @remote, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_addr={0x44, 0x4c, 0x38, 0x1, 0x3, [{@empty}, {@multicast2, 0x2}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x1ff}, {@multicast2, 0x2}, {@rand_addr=0x64010102, 0xcc4}, {@loopback, 0x6}, {@broadcast, 0xffffffff}, {@remote}]}, @cipso={0x86, 0x22, 0x3, [{0x7, 0x10, "4feaaa0c76c17ddc1a268f949b20"}, {0x6, 0xc, "8761847dd037ca32448d"}]}, @lsrr={0x83, 0x1b, 0x8e, [@dev={0xac, 0x14, 0x14, 0x17}, @local, @broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0xc, 0x34, 0x1, 0x0, [{@local, 0x1}]}]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x1, 0x0, {{0x2e, 0x4, 0x3, 0x24, 0xb8, 0x65, 0x0, 0xfd, 0x2f, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x2c, 0xf5, 0x1, 0x7, [{@local}, {@empty, 0x7}, {@broadcast, 0xe}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x40}]}, @timestamp={0x44, 0x8, 0x27, 0x0, 0x9, [0x8]}, @timestamp={0x44, 0x28, 0x8c, 0x0, 0x8, [0x7, 0x1, 0x3, 0x6, 0x4, 0x4, 0x8, 0xfff, 0x3b7]}, @rr={0x7, 0x23, 0x52, [@dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x2, 0x10, "f291c0fd19221554445464f476de"}, {0x5, 0xa, "b7404adb97465aba"}]}]}}}}}) (rerun: 64) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) 2.2576091s ago: executing program 3 (id=373): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fc0100002100010007000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000080011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000073500000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000b40000000000000000022b030000043500000a0002000a010102000000000000000000000000fc000000000000000000000000000000fe8000000000000000000000000000bbffffffff0000000000000000000000006c010000000000000a000a00ac"], 0x1fc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.22330534s ago: executing program 2 (id=374): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5690}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3300, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xff, 0xfd, 0x5, 0x4, 0x2, 0x4, 0x28, 0x1, 0x3, [0x1, 0x6, 0x2, 0x200, 0x81, 0x8001, 0x5]}}) 2.115430454s ago: executing program 0 (id=375): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x5678, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x10, '\x00', r1, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x440, 0x0, 0x1d0, 0xffffffff, 0x1d0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, &(0x7f0000000300), {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0xd}, 0xffffffff, 0xff000000, 'team0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x39}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @private=0x7, @multicast2, @gre_key=0x4413, @port=0x4e22}}}}, {{@ip={@remote, @local, 0xffffffff, 0x0, 'lo\x00', 'vxcan1\x00', {}, {0x7f}, 0x11, 0x3}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0xff, 0x5], 0x1}}, @common=@addrtype={{0x30}, {0xae0, 0x9ac, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast2, @rand_addr=0x64010101, @icmp_id=0x65, @gre_key=0x1}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x3}}, @common=@ah={{0x30}, {[0x0, 0xffff]}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xe, @rand_addr=0x64010102, @remote, @port=0x4e23, @gre_key=0x7}}}}, {{@ip={@private=0xa010102, @empty, 0xff, 0xff000000, 'veth1_macvtap\x00', 'vcan0\x00', {}, {}, 0xde, 0x0, 0x28}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0xfff]}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @gre_key=0x1000, @gre_key=0x800}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) (async) sendmsg$xdp(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000840)="a509706fd982ff351ef3e9ea370794552570b36681a4a429d2b826ec604e20feda60ac4bf5ff8a7289f94d73f2931dcc75fb5b16efa55f3ddd81e161efced2e5cc557f55e651b7b53fd06015f5c1b472c783c9bc786e2190b7406fb1f2cc3829591c39787d724142eadc7b0497c369dd84ab65e1315689ad496089310c393ea90c529f987b401c66a56d1966e12ecffe6e41acb2c5a87282a7b1ea4bdd35783e4b7951964c21de35bd1cd931843b6d21b885bbb19e2a91ca42a4ff1adad99914e2c35618fba1624b30b4bc55f5f6eeaffdbcd274c43e5eccf5024be1895d", 0xde}, {&(0x7f0000000940)="8264f0b40ed07f02a90ae4624861770e9e978c3272732045c3398db090511c4b2c091d8953afacbc9fcdef674eae41a3b6dbaffb132de5092e27e598f60ddc801b116963c9d3e6beb09c6a8a5bbd96ea15d1749ff95e94e32697d67320ce8fa0", 0x60}, {&(0x7f00000009c0)="9316849d5a6bc3f3ecc00318ccca2d0701c97b794ba17210867671e0b483792caedca2", 0x23}, {&(0x7f0000000a00)="b363412499d5701b5f8cee043a174a6d15b30b345691786de111a8906ab180327ed1e0f5e28b415cf9ef167304c499aa628f4efeddaaa5f3c418c5abe646adbcfae77bdd92cdc265149d0faa7970139f76920448959bd8b1e3219ffc420a665b09b9cfd79f1985a9ccde8155959ddf527ca719c91887cd99d28a6df82b84053b43b67053c8ee887b8b5aaddd61c38bf8f39c4bb16f0adc493c205a17ee61a95fa1e799892b3948a24b5843ef2b709a652935ffa3b9516c005ba00b2bd8dbd54593f97921364b305c2274d40ce123c922afb079cdb87a9571db6d4f8e57be75a82c8a4535974945fab0", 0xe9}, {&(0x7f0000000b00)="23e961dc8933f0e59ea8223d39068a00ff996d348ca9171acc975067e9fad1530574e9a4d514b2612274", 0x2a}, {&(0x7f0000000b40)="558c7976c31097e007462900cb8cd484d1b708cd473262946d9fb3daafe1c1b2df40cd294495f9bf57510271a52d6faf3c87e63b9d871d6eecb4b306ebeafcdd911050ec634c8fa30e556e2619463e93157828a98b6bf08c15f30e81ab6c2442471f9dbc3a0a", 0x66}, {&(0x7f0000000bc0)="d5e8c887c97a4b9733df7ad336f08721ece8911468d912d87b8b121fe0642977d8b9d2289097fadb4bece13105a8797bc0329e0dfd9fba47faa63a5b2556ba1e2cee52b60e3e741fde69f8cdde20261c56474896ce944dd683a48ce3cd", 0x5d}, {&(0x7f0000000c40)="f8da45c6192cfe0ddfc3af9c81ae36dd1a", 0x11}], 0x8, 0x0, 0x0, 0x80c0}, 0x5) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000dc0)={'erspan0\x00', &(0x7f0000000d40)={'ip_vti0\x00', r1, 0x0, 0x40, 0x9, 0x315d, {{0x14, 0x4, 0x3, 0x7, 0x50, 0x65, 0x0, 0x10, 0x2f, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x1f, 0xa8, [@empty, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x1c, 0x61, 0x1, 0x1, [{@loopback, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@multicast2, 0x8}]}]}}}}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000001a40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000e40)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1000}, [{{0x254, 0x1, {{0x1, 0x1000}, 0xb3, 0xff, 0x2, 0x9, 0x7, 'syz1\x00', "dbc07152c368e52110554d5824ce2458fc2396cf6645d09a84c1a75c29e82b71", "ca943af09242ba9df860f393ba4e5b8d9246d67127a9d4d7a559a5c803e6d436", [{0x4, 0xd, {0x2, 0x4}}, {0x4, 0x6, {0x0, 0x7fff}}, {0x7, 0x18, {0x1}}, {0x81, 0x3, {0x3, 0x8001}}, {0xfff9, 0x10, {0x2, 0x3}}, {0x6, 0x7, {0x0, 0x7}}, {0x3, 0xf8, {0x1, 0x5}}, {0x7, 0x5, {0x2, 0x5}}, {0x5, 0x0, {0x0, 0x1}}, {0x8, 0x3, {0x2, 0x7fff}}, {0xe2, 0x5, {0x2, 0x554}}, {0x3, 0x5, {0x3, 0x5}}, {0xfff8, 0x6, {0x1, 0x9}}, {0xe5bc, 0x8000, {0x3, 0x469}}, {0x8b4f, 0x2, {0x2, 0x5}}, {0x6, 0xfffc, {0x1, 0x9}}, {0x1, 0x0, {0x3, 0x8}}, {0x4, 0x1, {0x2, 0xffffff00}}, {0x8001, 0x13, {0x2, 0x4}}, {0xff, 0x4ea1, {0x1, 0x7}}, {0x8001, 0xffcb, {0x0, 0xe}}, {0x1ff, 0x8d7d, {0x3, 0x8}}, {0x2, 0xa, {0x0, 0x2}}, {0xc, 0x3, {0x2, 0x9}}, {0x4, 0x1, {0x2, 0x3}}, {0x2, 0x5, {0x0, 0x100}}, {0x0, 0x4}, {0xd, 0x6, {0x1, 0x8000}}, {0x5, 0x1, {0x2, 0x5}}, {0x3ff, 0x20, {0x3, 0x7}}, {0x7, 0x1, {0x0, 0x80000000}}, {0x5, 0x9, {0x1, 0x263}}, {0xc890, 0x9, {0x0, 0xe00}}, {0x2, 0x3, {0x0, 0x7ff}}, {0x3, 0x8, {0x2, 0x2}}, {0x19a, 0x7, {0x2, 0x7}}, {0x401, 0x6, {0x3, 0x5}}, {0x6, 0x6, {0x0, 0x800}}, {0x368, 0xb2fe, {0x2, 0x97a}}, {0x1, 0x3, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x101}, 0x4, 0x0, 0x200, 0x1, 0x19, 'syz0\x00', "b5ed1f0a5fe6e7b0659d95138f643b54302e2b53a9d6d4ef0640062da0e3102f", "306d94f83c878bc74f9d9570c5b67eeb565cd9904e3b2391ac4ad5d4099f01a1", [{0x101, 0x4, {0x3, 0x3}}, {0x5, 0x1, {0x2, 0x4}}, {0x10, 0x7, {0x3, 0x7}}, {0x0, 0x8, {0x3, 0x4}}, {0x8, 0x1d, {0x0, 0x72}}, {0x0, 0xb3, {0x2, 0x8}}, {0x9, 0xe, {0x3, 0x5}}, {0xf, 0x7, {0x3, 0x8}}, {0x2, 0xf4f, {0x3, 0xff}}, {0x66, 0x0, {0x1, 0x8001}}, {0x1, 0x8, {0x2, 0x2}}, {0x9, 0x7, {0x0, 0xf}}, {0x100, 0xe, {0x5, 0x9}}, {0xff80, 0x0, {0x2, 0x5}}, {0x1, 0x400, {0x3, 0x5}}, {0x1f8a, 0x7, {0x1, 0x800}}, {0x6, 0xa90a, {0x2}}, {0x6, 0x1, {0x0, 0x3}}, {0xe, 0x6, {0x1, 0x7}}, {0x5, 0x8000, {0x3, 0x7}}, {0x28, 0x27, {0x3, 0x8}}, {0x5, 0x7, {0x3, 0x80}}, {0x0, 0x3, {0x0, 0x18000000}}, {0x80, 0x7fff, {0x3, 0x6}}, {0x4, 0x4, {0x1, 0x7f}}, {0x1, 0x7, {0x1, 0x80}}, {0x2, 0x2, {0x2, 0x2}}, {0x1, 0x0, {0x0, 0x6}}, {0x8001, 0xa142, {0x6, 0x4}}, {0x3, 0x7ff, {0x3, 0x3}}, {0x5, 0x0, {0x2, 0xae}}, {0x8, 0xb, {0x2, 0x400}}, {0x91, 0x9, {0x3, 0x10001}}, {0xa, 0x4000, {0x3, 0x200}}, {0x8, 0x5, {0x1, 0x9}}, {0x3, 0x401, {0x2, 0x80000001}}, {0xd57, 0x5, {0x0, 0x1}}, {0x1, 0x8, {0x2, 0x5}}, {0x0, 0x75e, {0x2, 0x6}}, {0x3ba6, 0xff, {0x1, 0x9e5200}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0xfd, 0x3d, 0xeb66, 0x7fff, 0x22, 'syz0\x00', "55886d39e083128b6ad74e072f85abacecc0080f49ffe9635d9369236c114fb7", "85fe034d494aa7cdf5e80c1f2285072e55a8b6782c924fa718135d4536d07426", [{0x1, 0x800, {0x1, 0x522a}}, {0x8001, 0x9, {0x2, 0x13}}, {0x3, 0x5, {0x1, 0x8}}, {0x6, 0x10, {0x1, 0x987}}, {0x7, 0x8, {0x0, 0x33e1}}, {0xa40, 0xb, {0x2, 0xe}}, {0x200, 0x0, {0x3, 0x1}}, {0xd3c, 0x0, {0x3, 0x23}}, {0xa944, 0xd, {0x0, 0x80000000}}, {0x6, 0x3, {0x0, 0x1}}, {0x10, 0x9, {0x2, 0x3}}, {0xf83, 0xb, {0x2, 0x800}}, {0xd, 0x7ff, {0x0, 0x2e}}, {0xa, 0xfcd9, {0x0, 0x2}}, {0x3ff, 0x5, {0x3, 0xa}}, {0x8, 0x2, {0x3, 0x5}}, {0xcb09, 0x8001, {0x0, 0x10}}, {0x80, 0x9, {0x1, 0x34}}, {0x10, 0xff00}, {0x2, 0x0, {0x0, 0x816c}}, {0x8, 0x0, {0x1, 0x2}}, {0x2, 0xa27, {0x1, 0x879}}, {0x9, 0x6, {0x1, 0x4}}, {0xa5, 0x5aff, {0x0, 0x8}}, {0x3c0, 0x8, {0x1, 0x4}}, {0x8000, 0x1, {0x0, 0x9}}, {0x8, 0x10, {0x2, 0x5}}, {0x7, 0x400, {0x0, 0x10001}}, {0x2, 0x5, {0x1, 0x8}}, {0xca, 0x7, {0x1, 0x10001}}, {0x0, 0x5, {0x1, 0xfffffffe}}, {0x200, 0xa5f3, {0x2, 0x3}}, {0x7ff, 0x6, {0x0, 0x8}}, {0xd9d, 0x2, {0x0, 0x9}}, {0x8000, 0x100, {0x2, 0x5}}, {0xfffc, 0x0, {0x3}}, {0x0, 0x5, {0x2, 0x6}}, {0x9, 0x1000, {0x3, 0x1}}, {0x1000, 0x9, {0x0, 0xffff}}, {0x8, 0x5d3, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0xd7}, 0x5, 0x81, 0x5, 0xffff, 0x1a, 'syz0\x00', "2249417d35afa00dc3c321b1caecaa471d0fd54fad93195ff37d4dad3a0f6490", "69208ba60754ba488465da1b27d2c51ea2be35701b7bd447a15f98c985cdbda6", [{0x4d2, 0xcc, {0x1, 0x6}}, {0xa23, 0x3, {0x3, 0x101}}, {0x9, 0x3, {0x0, 0x7}}, {0x6, 0x3, {0x3, 0x2}}, {0x7, 0x1, {0x1}}, {0x10b2, 0x3, {0x2, 0x5}}, {0x4, 0xfff, {0x2, 0x85}}, {0x5, 0x80, {0x3, 0x9}}, {0x7, 0xe54, {0x1, 0xdc}}, {0xdd81, 0x8000, {0x2, 0x1}}, {0x101, 0x8000, {0x0, 0x3}}, {0xbe69, 0x3, {0x1, 0xd11f}}, {0x8, 0xc, {0x2, 0x7fffffff}}, {0x927d, 0x7, {0x2, 0x400}}, {0x5, 0x8000, {0x0, 0x555face2}}, {0x17, 0x151, {0x2, 0x8000}}, {0xa89, 0x1, {0x3, 0x9}}, {0x80, 0x1, {0x3, 0xb}}, {0x7ff, 0x5}, {0xfff, 0x8000, {0x3, 0xfffffffd}}, {0x7fff, 0xfff, {0x2, 0x4}}, {0x8, 0x9, {0x0, 0xfffffffc}}, {0x1, 0xb, {0x2, 0x238}}, {0xdb, 0x8001, {0x0, 0x81}}, {0x10, 0x0, {0x2, 0x3}}, {0x1, 0x1, {0x0, 0x1}}, {0xfffc, 0x7, {0x0, 0x1}}, {0x6, 0x2, {0x3, 0xaf5}}, {0x101, 0x7, {0x1}}, {0x5, 0x9, {0x0, 0xffffffff}}, {0x8, 0x6, {0x0, 0x9}}, {0xf, 0x0, {0x2, 0x675}}, {0xe, 0x0, {0x0, 0xfffffffa}}, {0x1, 0xfff, {0x2, 0x81}}, {0xa, 0x2, {0x2, 0x10001}}, {0xa5, 0xef1, {0x3, 0x5}}, {0xa3f4, 0x7f, {0x2, 0x5}}, {0x1, 0x8, {0x3, 0x81}}, {0x6, 0x7}, {0xaee, 0x1, {0x0, 0x6d}}]}}}, {{0x254, 0x1, {{0x1, 0xfe00000}, 0x7, 0xc, 0x800, 0x3, 0x24, 'syz0\x00', "f43d69e9caa32220256a72042300bbb57494f07f595cee5a7f5ea96f5a6909c1", "876efe4876a3cf2c5b093fcd74bc835d4e12bf354aa462085ed305269913abb4", [{0x1365, 0x401, {0x1, 0x8}}, {0xc0ad, 0x7, {0x3, 0x1}}, {0x9, 0x2, {0x1, 0x81}}, {0x8, 0x8, {0x2, 0xb}}, {0x9, 0x7, {0x3, 0xd}}, {0xff, 0x6d78, {0x1, 0x3}}, {0x9, 0x5, {0x1, 0x6}}, {0xbe27, 0xffff, {0x3, 0x6}}, {0x8000, 0x3ff, {0x1, 0xb9ee}}, {0x5, 0x5, {0x3, 0x4}}, {0x7, 0x8, {0x0, 0x2}}, {0x1, 0x2, {0x2, 0xf}}, {0x4e3, 0x4, {0x1, 0x1}}, {0x2, 0x1, {0x0, 0x1}}, {0x9, 0x1, {0x3, 0xfffffffd}}, {0x101, 0x0, {0x3, 0x4}}, {0x7ff, 0x1, {0x1, 0xffffff86}}, {0x200, 0xb, {0x1, 0x63}}, {0x8, 0x0, {0x1, 0xffff}}, {0x2, 0x8, {0x0, 0x5}}, {0xfe00, 0xd552, {0x1, 0x4a}}, {0x0, 0x7, {0x2}}, {0x0, 0x2, {0x2, 0x40}}, {0x4, 0x4, {0x1, 0x1}}, {0x80, 0xfffb, {0x1}}, {0xfd, 0x7, {0x0, 0x8}}, {0x6, 0x9}, {0x1, 0x81, {0x1, 0xffffffff}}, {0xde6, 0x8, {0x2, 0x7}}, {0x0, 0x4, {0x2, 0x2}}, {0x53d, 0x2, {0x1, 0x7fff}}, {0x9, 0xb, {0x0, 0x2}}, {0x2, 0xc, {0x1, 0x1}}, {0x262c, 0x8, {0x2, 0x2}}, {0x0, 0x1, {0x2, 0x9}}, {0x3b78, 0x0, {0x3, 0x485}}, {0x4, 0x8000, {0x1, 0x1}}, {0x401, 0x8, {0x3, 0x65a45d32}}, {0x0, 0x2f7, {0x2, 0x5}}, {0x8001, 0x80, {0x0, 0x7ff}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001ac0), r4) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x58, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4054}, 0x48880) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c40), r4) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x3c, r11, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff41c6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d80)=@RTM_NEWMDB={0xd8, 0x54, 0x800, 0x70bd2d, 0x25dfdbfe, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x3d}, 0x400}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x1, 0x1, {@in6_addr=@private2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x0, {@in6_addr=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x3, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x0, {@in6_addr=@local, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x2, 0x4, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0xc00}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x4050080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x2, 0x8, &(0x7f0000001f00)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x5, 0x5, 0x3, 0xffff, 0x253}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000001f40)='syzkaller\x00', 0x5, 0x9b, &(0x7f0000001f80)=""/155, 0x41000, 0x2b, '\x00', r7, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002040)={0x3, 0x5, 0x9, 0xdf}, 0x10, 0x0, r4}, 0x94) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000021c0)={{r4, 0xffffffffffffffff}, &(0x7f0000002140), &(0x7f0000002180)=r4}, 0x20) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002200)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, r12, 0x3, '\x00', 0x0, r4, 0x3, 0x2, 0x4}, 0x50) (async) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x48, 0xe, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x48001) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002400), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000002540)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002500)={&(0x7f0000002440)={0x94, r14, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6e}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000002580)={r13, 0x9, 0x1, 0xcaff}) (rerun: 64) sendmsg$nl_route(r15, &(0x7f0000002740)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x168120}, 0xc, &(0x7f0000002700)={&(0x7f0000002600)=@ipv6_delroute={0xe8, 0x19, 0x4, 0x70bd25, 0x25dfdbfc, {0xa, 0x10, 0x0, 0xff, 0x665f40b52386cbad, 0x0, 0xfe, 0x7, 0x200}, [@RTA_METRICS={0xca, 0x8, 0x0, 0x1, "8833b905c54a9f2c4512344e3177fed092efe8bd2f3a52de4c1a94159f3587bc2ce2ebd7a1d6055d875a4460e3ebdd7aabb77ef992153128f4a2b1c7b99e2dd6c4a8b75d3477778b374c912c8d7a18111221339a5251d0c78672db48a69b061cebc309661ba214b5178d0543c8b2ab96c9f8f13a6e505f73f64addd414a7f8f770d49c27daca33333e6dd499b81c2574aced4c09ae3e3b48a99cccd814eedd7a0d4e1c037f07c6237b4b189e181a74f9995a365735669931ac5abc03ff6a55365a0fcd45b789"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4008040}, 0x1) (async) ioctl$EXT4_IOC_SWAP_BOOT(r15, 0x6611) 2.09791762s ago: executing program 3 (id=376): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000006d00673c24bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="008202000008000008001c009e47f36904c381f9e24a4b11f64688e196c30b61d5a69f075b5555428b2f4adf8a97121b55395fd17a24f8fb916b95ff697388e5d46dfec20d0645709eb4261950f164e9480a345fe41662c7000000ffff945c8100", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.966250821s ago: executing program 0 (id=377): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x20, r1, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="120000007a000106000000000000000007"], 0x18}], 0x1}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@ipv6_getnexthop={0x0, 0x6a, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_GROUPS, @NHA_OIF={0x0, 0x5, r7}, @NHA_FDB, @NHA_GROUPS]}, 0xd0}, 0x1, 0x0, 0x0, 0x11}, 0x24004840) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x120, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xd4, 0x8, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0xffffffffffffffce}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) accept4(r3, 0x0, &(0x7f0000000080), 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21700, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0x5) r13 = accept4(r12, 0x0, 0x0, 0x80800) sendmmsg$alg(r13, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280", 0x13}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) 1.908005931s ago: executing program 1 (id=378): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000080)=@raw=[@exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0xb, 0x7, 0x7, 0xfffffffffffffff0, 0xfffffffffffffff0}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.906043697s ago: executing program 2 (id=379): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d61637365630000", @ANYRES32, @ANYBLOB="0a000100aaaaaaaaaabbf5ff090002"], 0x54}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r11, 0x0, 0x5}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) 1.821946437s ago: executing program 3 (id=380): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) pipe(0x0) pipe(0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x2, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3, 0x10}, 0xc) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) socket$inet6(0xa, 0x80000, 0xff) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r5, 0x2f}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000400)) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x111}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3a}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) 1.744385224s ago: executing program 1 (id=381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) openat$ppp(0xffffffffffffff9c, 0x0, 0x121c02, 0x0) write$tun(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="000000f60204050008"], 0x124a) 1.604158741s ago: executing program 4 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffb3abbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'rose0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104000004020000000000000000", @ANYRES32=0x0, @ANYBLOB="03000600000000002d4b8f86f8162e027e48983e99b8034744b78d72d22aea39a440d6e14c6707f2fcb641"], 0x20}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.084571211s ago: executing program 4 (id=383): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="050000000000000000", @ANYRES32, @ANYBLOB="2d2a81661eff0f0000fad47f"], 0x46) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="050000000000000000", @ANYRES32, @ANYBLOB="2d2a81661eff0f0000fad47f"], 0x46) accept(r0, 0x0, 0x0) 1.027129267s ago: executing program 1 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000700003f0000000000000000000500"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x4d40}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1a}]}]}, 0x34}}, 0x4008000) 861.165649ms ago: executing program 4 (id=385): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000020000001000000000000000002001006ff00000000081500000001004a010101"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48850) 856.05902ms ago: executing program 0 (id=386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fc0100002100013507000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000080011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000073500000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000b40000000000000000022b030000043500000a0002000a010102000000000000000000000000fc000000000000000000000000000000fe8000000000000000000000000000bbffffffff0000000000000000000000006c010000000000000a000a00ac"], 0x1fc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 720.132695ms ago: executing program 4 (id=387): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x3, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) (async, rerun: 64) r5 = socket(0x1, 0x2, 0x0) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r5, 0x2}, 0x20) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010000000000000000000800030001000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c040) (async) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000004c0)=""/189, 0xbd, 0x0, &(0x7f0000000580)=""/222, 0xde}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x3, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xa4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}], &(0x7f0000000140)='syzkaller\x00', 0x80, 0x8c, &(0x7f0000000200)=""/140, 0x41100, 0x52, '\x00', r8, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x9, 0x7, 0x5}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r3, r10, r4], &(0x7f00000007c0), 0x10, 0x3}, 0x94) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x1e, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xec}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x7, 0x6, 0x0, 0x30, 0xfffffffffffffff0}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x680, 0x40, &(0x7f0000000800)=""/64, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x4, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x2, 0x5, 0x9, 0x7}], 0x10, 0x19}, 0x94) (async, rerun: 64) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0xa3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (async, rerun: 64) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x401, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) (async) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x12, 0x2, 0x2, 0x3, 0x20262, 0xffffffffffffffff, 0x507f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) (async) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xb, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xd2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x1, 0x1, 0x7, 0xb, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x1000, 0xf2, &(0x7f0000000240)=""/242, 0x40f00, 0x10, '\x00', r8, @fallback=0x1b, r11, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r12, r13, 0x6, &(0x7f0000000c40)=[r14, r15, r16, r17, r18], &(0x7f0000000c80)=[{0x3, 0x3, 0x6, 0xa}, {0x4, 0x1, 0x7, 0x2}, {0x2, 0x5, 0xf, 0x1}, {0x2, 0x5, 0x1, 0x8}, {0x5, 0x4, 0xf, 0xb}, {0x3, 0x3, 0xb, 0x9}], 0x10, 0x2}, 0x94) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000007c00)={0x0, 0x0, &(0x7f0000007bc0)={&(0x7f0000006b00)={0x14, 0x14, 0x1, 0x70bd2a, 0x25dfdbfc, {0x10, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) 714.698681ms ago: executing program 1 (id=388): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) unshare(0x6020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r5, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r6}, 0x90) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x14, r9, 0x21, 0x8d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) sendmsg$nl_route_sched(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0xffffff0f, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0x0, 0x3, @random="3c6b2e5fda24"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x9, 0x20000005, 0x9, 0x1}, 0x1}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) r10 = accept$ax25(r7, &(0x7f00000011c0)={{0x3, @rose}, [@bcast, @default, @bcast, @remote, @rose, @bcast, @null, @null]}, &(0x7f0000000040)=0x48) recvfrom(r4, &(0x7f0000000380)=""/245, 0xf5, 0x2003, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x108, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x2100, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r1, 0xf7dc9000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) 611.089764ms ago: executing program 0 (id=389): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x420, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x75}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x67d67861a4332b96}, 0x4008010) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000028c00028008000140e0004001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket(0x2, 0x80805, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000006240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) clock_gettime(0x0, &(0x7f0000000340)) 531.996983ms ago: executing program 3 (id=390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00'}, 0x80) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000ff000000000000000000711048000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 311.606688ms ago: executing program 1 (id=391): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@un=@abs={0x0, 0x0, 0x4e20}, {&(0x7f0000000000)=""/164, 0xa4}, &(0x7f00000000c0), 0x14}, 0xa0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x776f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) 210.257701ms ago: executing program 4 (id=392): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000003500)=""/4090, 0xffa}, {&(0x7f0000000ac0)=""/169, 0xa9}, {&(0x7f0000000340)=""/150, 0x96}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000c80)=""/271, 0x10f}, {&(0x7f0000000100)=""/95, 0x5f}], 0x9}, 0x2}], 0x1, 0x2102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x25a5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x30, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 0s ago: executing program 3 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r1], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)="524239eddfc9156fbbf353be0331d0dd0ebd29a15d3931f0801db9ee00000000393863a36e14340c74f26429ac460007af3783070000000f0d7061eb84fac8aa4e60ab56f8afc9350eab4aa5f7aec2fd18476fb45a010069bdf58ea400e10b04ef0c318ee045a7cb92555292b600", &(0x7f0000000740)="61edf07b466bbdb092679fcb75f47df9daafa7c0661a29b86c185abfe674231ccb878a05c6b8f3acb4295d378ab3d2ae0574ec2e0d7e273af5ec396d6b1a57a27b16ac5eb9a21d0bcd5116344dd8d71a76d64940531d1769a74203c4c433c00ab7956217000000000000160454531f96acac7b76203a846fdf6f19559db378e57bc786beb3679e7fb6e943b6", 0x8c, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r5}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="200000003e000100fcff0700ac4a000001000000040000000800018004001080"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'caif0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000d24e", @ANYRES16=0x0, @ANYBLOB="010029bd7000000000002a0000000c0001800800030005000000"], 0x20}}, 0x0) listen(r3, 0xe9c) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYRES16=r9, @ANYBLOB="010000000000fcdbdf250e00000008000300", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0xc}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000000206010200000000000000000300000014000780080006400000000308000840000000300500040000000000050005000500000005000400020000000900020073797a31000000000500040003000000005ac074bc2235b8d8e78c23"], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 72.355883][ T5850] cgroup: Unknown subsys name 'net' [ 72.468786][ T5850] cgroup: Unknown subsys name 'cpuset' [ 72.478077][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.911554][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.012472][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.045702][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.058369][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.066305][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.074718][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.082506][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.084115][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.091389][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.106088][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.106284][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.114427][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.121645][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.130080][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.137485][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.142967][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.154517][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.183771][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.191856][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.200538][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.218765][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.223382][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.236950][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.252533][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.260993][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.268978][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.760986][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 78.907725][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 79.042745][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 79.072286][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 79.171054][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 79.210587][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.218325][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.226437][ T5860] bridge_slave_0: entered allmulticast mode [ 79.233727][ T5860] bridge_slave_0: entered promiscuous mode [ 79.275517][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.282734][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.290155][ T5860] bridge_slave_1: entered allmulticast mode [ 79.297579][ T5860] bridge_slave_1: entered promiscuous mode [ 79.313922][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.322287][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.329614][ T5869] bridge_slave_0: entered allmulticast mode [ 79.336673][ T5869] bridge_slave_0: entered promiscuous mode [ 79.373850][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.381283][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.388803][ T5869] bridge_slave_1: entered allmulticast mode [ 79.396173][ T5869] bridge_slave_1: entered promiscuous mode [ 79.474628][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.514150][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.523564][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.530983][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.538852][ T5876] bridge_slave_0: entered allmulticast mode [ 79.546265][ T5876] bridge_slave_0: entered promiscuous mode [ 79.553329][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.560595][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.567967][ T5873] bridge_slave_0: entered allmulticast mode [ 79.574908][ T5873] bridge_slave_0: entered promiscuous mode [ 79.584598][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.601735][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.622256][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.629615][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.636838][ T5876] bridge_slave_1: entered allmulticast mode [ 79.643765][ T5876] bridge_slave_1: entered promiscuous mode [ 79.650728][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.657992][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.665322][ T5873] bridge_slave_1: entered allmulticast mode [ 79.672416][ T5873] bridge_slave_1: entered promiscuous mode [ 79.774256][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.782007][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.789917][ T5864] bridge_slave_0: entered allmulticast mode [ 79.797142][ T5864] bridge_slave_0: entered promiscuous mode [ 79.805953][ T5869] team0: Port device team_slave_0 added [ 79.825996][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.837079][ T5860] team0: Port device team_slave_0 added [ 79.845021][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.854525][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.862378][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.869710][ T5864] bridge_slave_1: entered allmulticast mode [ 79.876801][ T5864] bridge_slave_1: entered promiscuous mode [ 79.884828][ T5869] team0: Port device team_slave_1 added [ 79.894433][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.906178][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.917145][ T5860] team0: Port device team_slave_1 added [ 80.014205][ T5873] team0: Port device team_slave_0 added [ 80.058223][ T5876] team0: Port device team_slave_0 added [ 80.065690][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.072834][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.098862][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.112473][ T5873] team0: Port device team_slave_1 added [ 80.121276][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.133912][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.144011][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.151038][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.177301][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.190238][ T5876] team0: Port device team_slave_1 added [ 80.197004][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.203936][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.230080][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.241583][ T5868] Bluetooth: hci1: command tx timeout [ 80.245299][ T5872] Bluetooth: hci0: command tx timeout [ 80.247486][ T5862] Bluetooth: hci2: command tx timeout [ 80.283500][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.290612][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.316848][ T5868] Bluetooth: hci3: command tx timeout [ 80.317159][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.333031][ T5868] Bluetooth: hci4: command tx timeout [ 80.364996][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.372056][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.398129][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.437048][ T5864] team0: Port device team_slave_0 added [ 80.445992][ T5864] team0: Port device team_slave_1 added [ 80.452722][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.459907][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.486542][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.498672][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.505765][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.532203][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.599622][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.606983][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.633114][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.667130][ T5860] hsr_slave_0: entered promiscuous mode [ 80.673621][ T5860] hsr_slave_1: entered promiscuous mode [ 80.693792][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.701260][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.727522][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.782030][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.790910][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.820041][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.841416][ T5869] hsr_slave_0: entered promiscuous mode [ 80.849486][ T5869] hsr_slave_1: entered promiscuous mode [ 80.857362][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 80.863994][ T5869] Cannot create hsr debugfs directory [ 80.885773][ T5876] hsr_slave_0: entered promiscuous mode [ 80.892690][ T5876] hsr_slave_1: entered promiscuous mode [ 80.900250][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 80.908078][ T5876] Cannot create hsr debugfs directory [ 81.004403][ T5873] hsr_slave_0: entered promiscuous mode [ 81.015824][ T5873] hsr_slave_1: entered promiscuous mode [ 81.023437][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 81.030382][ T5873] Cannot create hsr debugfs directory [ 81.130923][ T5864] hsr_slave_0: entered promiscuous mode [ 81.139156][ T5864] hsr_slave_1: entered promiscuous mode [ 81.147761][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 81.156320][ T5864] Cannot create hsr debugfs directory [ 81.627572][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.640659][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.666036][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.692579][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.768390][ T5876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.783026][ T5876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.794465][ T5876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.828869][ T5876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.913909][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.959282][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.998372][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.025529][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.139131][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.185605][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.225113][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.238877][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.266911][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.316252][ T5868] Bluetooth: hci1: command tx timeout [ 82.321789][ T5868] Bluetooth: hci0: command tx timeout [ 82.328056][ T5862] Bluetooth: hci2: command tx timeout [ 82.363367][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.377597][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.388359][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.395808][ T5868] Bluetooth: hci4: command tx timeout [ 82.401343][ T5862] Bluetooth: hci3: command tx timeout [ 82.411270][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.419018][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.428194][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.439625][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.449669][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.484292][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.491623][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.559271][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.598258][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.605461][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.659856][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.674116][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.682376][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.724824][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.801811][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.826854][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.862746][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.889576][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.896797][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.907583][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.914684][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.974530][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.981753][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.003812][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.011026][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.038359][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.173926][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.202734][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.243744][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.251321][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.315691][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.322842][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.414897][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.539994][ T5860] veth0_vlan: entered promiscuous mode [ 83.591975][ T5860] veth1_vlan: entered promiscuous mode [ 83.632806][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.673119][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.788951][ T5860] veth0_macvtap: entered promiscuous mode [ 83.812175][ T5869] veth0_vlan: entered promiscuous mode [ 83.824917][ T5860] veth1_macvtap: entered promiscuous mode [ 83.854254][ T5873] veth0_vlan: entered promiscuous mode [ 83.880798][ T5869] veth1_vlan: entered promiscuous mode [ 83.924675][ T5873] veth1_vlan: entered promiscuous mode [ 83.938524][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.981896][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.018533][ T1115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.027897][ T1115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.054913][ T1115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.069828][ T5873] veth0_macvtap: entered promiscuous mode [ 84.084705][ T1115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.108747][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.119203][ T5869] veth0_macvtap: entered promiscuous mode [ 84.131119][ T5873] veth1_macvtap: entered promiscuous mode [ 84.168150][ T5869] veth1_macvtap: entered promiscuous mode [ 84.190235][ T5876] veth0_vlan: entered promiscuous mode [ 84.223121][ T5876] veth1_vlan: entered promiscuous mode [ 84.263491][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.264515][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.279318][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.284271][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.318895][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.331648][ T1115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.362794][ T1115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.372649][ T1115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.386109][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.393610][ T5864] veth0_vlan: entered promiscuous mode [ 84.400141][ T5862] Bluetooth: hci0: command tx timeout [ 84.402169][ T5868] Bluetooth: hci2: command tx timeout [ 84.407673][ T5862] Bluetooth: hci1: command tx timeout [ 84.425817][ T1115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.439175][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.448354][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.476391][ T5862] Bluetooth: hci3: command tx timeout [ 84.477041][ T5868] Bluetooth: hci4: command tx timeout [ 84.499824][ T1108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.517628][ T5864] veth1_vlan: entered promiscuous mode [ 84.540155][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.541126][ T5876] veth0_macvtap: entered promiscuous mode [ 84.564176][ T1108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.573886][ T1108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.607212][ T1108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.657324][ T5876] veth1_macvtap: entered promiscuous mode [ 84.723787][ T5864] veth0_macvtap: entered promiscuous mode [ 84.766404][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.774258][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.823147][ T5864] veth1_macvtap: entered promiscuous mode [ 84.879466][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.887614][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.962960][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.989201][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.012853][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.090065][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.113106][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.115453][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.281197][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.451680][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.501211][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.519118][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.531479][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.557518][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.631948][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.666411][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.737899][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.766367][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.103568][ T5999] Zero length message leads to an empty skb [ 86.118412][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.136603][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.229040][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.285814][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.300496][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.321258][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.438918][ T6007] netlink: 124 bytes leftover after parsing attributes in process `syz.0.9'. [ 86.455629][ T6007] netlink: 124 bytes leftover after parsing attributes in process `syz.0.9'. [ 86.476352][ T5868] Bluetooth: hci2: command tx timeout [ 86.476457][ T5862] Bluetooth: hci0: command tx timeout [ 86.482572][ T5868] Bluetooth: hci1: command tx timeout [ 86.517703][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.555948][ T5862] Bluetooth: hci3: command tx timeout [ 86.556210][ T5872] Bluetooth: hci4: command tx timeout [ 86.571167][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.696501][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 86.742296][ T6023] netlink: 428 bytes leftover after parsing attributes in process `syz.0.13'. [ 86.840572][ T6029] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 86.886488][ T9] cfg80211: failed to load regulatory.db [ 86.922230][ T6033] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 87.059864][ T6038] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15'. [ 87.072584][ T6038] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.336510][ T6041] netlink: 428 bytes leftover after parsing attributes in process `syz.4.17'. [ 87.451256][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19'. [ 87.480335][ T6046] openvswitch: netlink: Missing key (keys=40, expected=80) [ 87.494430][ T6050] sctp: [Deprecated]: syz.4.20 (pid 6050) Use of int in max_burst socket option. [ 87.494430][ T6050] Use struct sctp_assoc_value instead [ 87.538788][ T6052] warning: `syz.2.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.790972][ T5940] IPVS: starting estimator thread 0... [ 87.944390][ T6065] IPVS: using max 25 ests per chain, 60000 per kthread [ 88.883234][ T6062] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 89.171359][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.182483][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.594083][ T30] audit: type=1800 audit(1758597288.660:2): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.21" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 90.634602][ T6066] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 90.681964][ T6066] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 90.736659][ T6066] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 90.808101][ T6083] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 90.862169][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 90.908222][ T6085] netlink: 428 bytes leftover after parsing attributes in process `syz.2.30'. [ 90.926299][ T6081] delete_channel: no stack [ 91.094854][ T6095] netlink: 'syz.3.33': attribute type 6 has an invalid length. [ 91.103200][ T6091] batadv_slave_1: entered promiscuous mode [ 91.123424][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34'. [ 91.159035][ T6089] batadv_slave_1: left promiscuous mode [ 91.166462][ T6095] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 91.404263][ T6114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.477811][ T6117] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 91.754167][ T6132] __nla_validate_parse: 4 callbacks suppressed [ 91.754186][ T6132] netlink: 428 bytes leftover after parsing attributes in process `syz.0.42'. [ 91.790544][ T6131] netlink: 44 bytes leftover after parsing attributes in process `syz.3.43'. [ 91.801202][ T6131] netlink: 43 bytes leftover after parsing attributes in process `syz.3.43'. [ 91.837422][ T6131] netlink: 'syz.3.43': attribute type 6 has an invalid length. [ 91.846960][ T6131] netlink: 43 bytes leftover after parsing attributes in process `syz.3.43'. [ 92.117867][ T6145] syzkaller0: create flow: hash 3477510819 index 1 [ 92.209183][ T1168] syzkaller0: tun_net_xmit 76 [ 92.214992][ T1168] syzkaller0: tun_net_xmit 48 [ 92.245042][ T5940] syzkaller0: tun_net_xmit 76 [ 92.265113][ T6154] netlink: 44 bytes leftover after parsing attributes in process `syz.1.49'. [ 92.286439][ T5918] syzkaller0: tun_net_xmit 76 [ 92.329476][ T6138] syzkaller0: delete flow: hash 3477510819 index 1 [ 93.254250][ T6179] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.762201][ T6187] lo speed is unknown, defaulting to 1000 [ 93.778985][ T6187] lo speed is unknown, defaulting to 1000 [ 93.811940][ T6189] delete_channel: no stack [ 93.841818][ T6187] lo speed is unknown, defaulting to 1000 [ 93.951629][ T6194] syz.0.58 (6194) used greatest stack depth: 16920 bytes left [ 94.042638][ T6187] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.126710][ T6187] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 94.237643][ T6211] Bluetooth: MGMT ver 1.23 [ 94.330621][ T6187] lo speed is unknown, defaulting to 1000 [ 94.391455][ T6187] lo speed is unknown, defaulting to 1000 [ 94.418945][ T6187] lo speed is unknown, defaulting to 1000 [ 94.457087][ T6187] lo speed is unknown, defaulting to 1000 [ 94.484248][ T6187] lo speed is unknown, defaulting to 1000 [ 94.511536][ T6187] lo speed is unknown, defaulting to 1000 [ 94.664456][ T6226] netlink: 64 bytes leftover after parsing attributes in process `syz.4.66'. [ 95.029540][ T6240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.69'. [ 95.148276][ T6240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.278244][ T6240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.413833][ T6240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.628884][ T6240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.649811][ T6262] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 95.701236][ T6268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.76'. [ 95.736369][ T6266] syzkaller1: entered promiscuous mode [ 95.770643][ T6266] syzkaller1: entered allmulticast mode [ 95.821795][ T6273] netlink: 44 bytes leftover after parsing attributes in process `syz.0.80'. [ 95.960751][ T6279] netlink: 252 bytes leftover after parsing attributes in process `syz.0.83'. [ 95.970826][ T6275] lo speed is unknown, defaulting to 1000 [ 96.093903][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.112991][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.181423][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.235566][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.273421][ T6283] lo speed is unknown, defaulting to 1000 [ 96.591355][ T6299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.594573][ T6291] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 96.828062][ T6319] FAULT_INJECTION: forcing a failure. [ 96.828062][ T6319] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.857477][ T6319] CPU: 1 UID: 0 PID: 6319 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) [ 96.857501][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.857517][ T6319] Call Trace: [ 96.857524][ T6319] [ 96.857531][ T6319] dump_stack_lvl+0x189/0x250 [ 96.857558][ T6319] ? __pfx____ratelimit+0x10/0x10 [ 96.857575][ T6319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.857592][ T6319] ? __pfx__printk+0x10/0x10 [ 96.857610][ T6319] ? __might_fault+0xb0/0x130 [ 96.857639][ T6319] should_fail_ex+0x414/0x560 [ 96.857664][ T6319] _copy_from_iter+0x1de/0x1790 [ 96.857690][ T6319] ? rcu_is_watching+0x15/0xb0 [ 96.857707][ T6319] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 96.857729][ T6319] ? __pfx__copy_from_iter+0x10/0x10 [ 96.857749][ T6319] ? __build_skb_around+0x257/0x3e0 [ 96.857772][ T6319] ? netlink_sendmsg+0x642/0xb30 [ 96.857789][ T6319] ? skb_put+0x11b/0x210 [ 96.857811][ T6319] netlink_sendmsg+0x6b2/0xb30 [ 96.857838][ T6319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.857859][ T6319] ? aa_sock_msg_perm+0xf1/0x1d0 [ 96.857876][ T6319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 96.857892][ T6319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.857918][ T6319] __sock_sendmsg+0x21c/0x270 [ 96.857937][ T6319] ____sys_sendmsg+0x505/0x830 [ 96.857962][ T6319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.857991][ T6319] ? import_iovec+0x74/0xa0 [ 96.858013][ T6319] ___sys_sendmsg+0x21f/0x2a0 [ 96.858034][ T6319] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.858101][ T6319] __x64_sys_sendmsg+0x19b/0x260 [ 96.858125][ T6319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.858153][ T6319] ? __pfx_ksys_write+0x10/0x10 [ 96.858170][ T6319] ? rcu_is_watching+0x15/0xb0 [ 96.858190][ T6319] ? do_syscall_64+0xbe/0x3b0 [ 96.858211][ T6319] do_syscall_64+0xfa/0x3b0 [ 96.858225][ T6319] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.858241][ T6319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.858258][ T6319] ? clear_bhb_loop+0x60/0xb0 [ 96.858277][ T6319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.858291][ T6319] RIP: 0033:0x7faf2cd8eec9 [ 96.858314][ T6319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.858327][ T6319] RSP: 002b:00007faf2dc5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.858345][ T6319] RAX: ffffffffffffffda RBX: 00007faf2cfe5fa0 RCX: 00007faf2cd8eec9 [ 96.858357][ T6319] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 96.858368][ T6319] RBP: 00007faf2dc5c090 R08: 0000000000000000 R09: 0000000000000000 [ 96.858378][ T6319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.858387][ T6319] R13: 00007faf2cfe6038 R14: 00007faf2cfe5fa0 R15: 00007fff39291bb8 [ 96.858415][ T6319] [ 97.350200][ T6330] netlink: 44 bytes leftover after parsing attributes in process `syz.2.94'. [ 97.459707][ T6325] lo speed is unknown, defaulting to 1000 [ 97.468059][ T6331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.93'. [ 97.712641][ T6339] lo speed is unknown, defaulting to 1000 [ 97.862291][ T6356] netlink: 252 bytes leftover after parsing attributes in process `syz.1.103'. [ 98.038654][ T6362] netlink: 44 bytes leftover after parsing attributes in process `syz.2.105'. [ 98.171179][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 98.185677][ T6360] lo speed is unknown, defaulting to 1000 [ 98.216966][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 98.274402][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.282507][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.380354][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.429882][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.523478][ T6372] netlink: 44 bytes leftover after parsing attributes in process `syz.0.108'. [ 98.706923][ T6376] team0: No ports can be present during mode change [ 98.723951][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 98.824927][ T6376] team0 (unregistering): Port device team_slave_0 removed [ 98.835055][ T6376] team0 (unregistering): Port device team_slave_1 removed [ 98.852819][ T6378] tipc: Started in network mode [ 98.858006][ T6378] tipc: Node identity 6a87a7411c9f, cluster identity 4711 [ 98.867221][ T6378] tipc: Enabled bearer , priority 0 [ 98.881484][ T6379] syzkaller0: entered promiscuous mode [ 98.892461][ T6379] syzkaller0: entered allmulticast mode [ 99.049816][ T6379] tipc: Resetting bearer [ 99.074353][ T6377] tipc: Resetting bearer [ 99.100908][ T6377] tipc: Disabling bearer [ 99.310367][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 99.368990][ T5933] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0 [ 99.394283][ T5933] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0 [ 99.418169][ T5933] hid-generic 0005:15C2:5505.0001: reserved main item tag 0xe [ 99.472174][ T5933] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 99.538042][ T6399] netlink: 44 bytes leftover after parsing attributes in process `syz.4.117'. [ 99.783445][ T6403] syz.0.118 (6403) used obsolete PPPIOCDETACH ioctl [ 99.845622][ T6409] nbd0: detected capacity change from 0 to 127 [ 99.910610][ T5872] block nbd0: Receive control failed (result -104) [ 101.106745][ T6460] tipc: Started in network mode [ 101.126474][ T6460] tipc: Node identity ca2078f1f4d2, cluster identity 4711 [ 101.175552][ T6460] tipc: Enabled bearer , priority 0 [ 101.187478][ T6465] syzkaller0: entered promiscuous mode [ 101.216342][ T6465] syzkaller0: entered allmulticast mode [ 101.314536][ T6465] tipc: Resetting bearer [ 101.444147][ T6465] tipc: Disabling bearer [ 102.553714][ T6540] tipc: Enabling of bearer rejected, failed to enable media [ 102.824957][ T6558] __nla_validate_parse: 2 callbacks suppressed [ 102.824975][ T6558] netlink: 428 bytes leftover after parsing attributes in process `syz.4.146'. [ 103.077007][ T6564] netlink: 200 bytes leftover after parsing attributes in process `syz.0.148'. [ 103.130005][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 103.140220][ T6568] netlink: 'syz.1.150': attribute type 1 has an invalid length. [ 103.151406][ T6567] netlink: 92 bytes leftover after parsing attributes in process `syz.2.149'. [ 103.162788][ T6568] netlink: 224 bytes leftover after parsing attributes in process `syz.1.150'. [ 103.572698][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.157'. [ 103.624605][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.157'. [ 103.669408][ T6595] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 103.700839][ T6595] netlink: 48 bytes leftover after parsing attributes in process `syz.0.157'. [ 103.732553][ T6599] pim6reg1: entered promiscuous mode [ 103.745325][ T6599] pim6reg1: entered allmulticast mode [ 103.880551][ T6604] syzkaller0: entered promiscuous mode [ 103.892525][ T6604] syzkaller0: entered allmulticast mode [ 103.923068][ T6607] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 104.574892][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 105.697576][ T6621] lo: entered allmulticast mode [ 105.704644][ T6621] tunl0: entered allmulticast mode [ 105.710818][ T6621] gre0: entered allmulticast mode [ 105.716765][ T6621] gretap0: entered allmulticast mode [ 105.722688][ T6621] erspan0: entered allmulticast mode [ 105.729457][ T6621] ip_vti0: entered allmulticast mode [ 105.736745][ T6621] ip6_vti0: entered allmulticast mode [ 105.742838][ T6621] sit0: entered allmulticast mode [ 105.760502][ T6621] ip6tnl0: entered allmulticast mode [ 105.766856][ T6621] ip6gre0: entered allmulticast mode [ 105.773044][ T6621] syz_tun: entered allmulticast mode [ 105.779673][ T6621] ip6gretap0: entered allmulticast mode [ 105.803982][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.811956][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.820536][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.827939][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.840831][ T6621] bridge0: entered allmulticast mode [ 105.849706][ T6621] vcan0: entered allmulticast mode [ 105.857019][ T6621] bond0: entered allmulticast mode [ 105.862279][ T6621] bond_slave_0: entered allmulticast mode [ 105.868137][ T6621] bond_slave_1: entered allmulticast mode [ 105.874896][ T6621] team0: entered allmulticast mode [ 105.881795][ T6621] team_slave_0: entered allmulticast mode [ 105.890996][ T6621] team_slave_1: entered allmulticast mode [ 105.898082][ T6621] dummy0: entered allmulticast mode [ 105.904900][ T6621] nlmon0: entered allmulticast mode [ 105.911760][ T6621] caif0: entered allmulticast mode [ 105.917872][ T6621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.971104][ T6627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.999341][ T6629] bond_slave_0: entered promiscuous mode [ 106.005268][ T6629] bond_slave_1: entered promiscuous mode [ 106.012222][ T6629] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.025502][ T6629] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 106.055472][ T6630] bridge_slave_0: left allmulticast mode [ 106.061288][ T6630] bridge_slave_0: left promiscuous mode [ 106.068170][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.081768][ T6630] bridge_slave_1: left allmulticast mode [ 106.088595][ T6630] bridge_slave_1: left promiscuous mode [ 106.094413][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.107076][ T6630] bond0: (slave bond_slave_0): Releasing backup interface [ 106.117347][ T6630] bond_slave_0: left promiscuous mode [ 106.126242][ T6630] bond0: (slave bond_slave_1): Releasing backup interface [ 106.136934][ T6630] bond_slave_1: left promiscuous mode [ 106.149347][ T6630] team0: Port device team_slave_0 removed [ 106.159149][ T6630] team0: Port device team_slave_1 removed [ 106.166960][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.174466][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.182905][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.190774][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.199678][ T6630] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.220520][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 106.230954][ T5983] lo speed is unknown, defaulting to 1000 [ 106.244058][ T1168] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 106.331929][ T68] bond1: (slave macvlan2): link status definitely down, disabling slave [ 106.469825][ T6663] openvswitch: netlink: Duplicate or invalid key (type 0). [ 106.486686][ T6663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.535492][ T6667] syz_tun: entered allmulticast mode [ 106.592355][ T6667] pimreg: entered allmulticast mode [ 106.650351][ T6666] syz_tun: left allmulticast mode [ 106.870712][ T6685] !: renamed from dummy0 (while UP) [ 107.900217][ T6719] lo speed is unknown, defaulting to 1000 [ 108.266880][ T6735] lo speed is unknown, defaulting to 1000 [ 108.276178][ T6739] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 108.286601][ T6739] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 108.295702][ T6739] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 108.304968][ T6739] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 108.314126][ T6739] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 108.595780][ T6746] lo speed is unknown, defaulting to 1000 [ 108.701297][ T6750] __nla_validate_parse: 1 callbacks suppressed [ 108.701314][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 108.721625][ T6739] netlink: 'syz.2.188': attribute type 4 has an invalid length. [ 109.306849][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 109.358550][ T6781] lo: left allmulticast mode [ 109.399870][ T6781] tunl0: left allmulticast mode [ 109.433728][ T6781] gre0: left allmulticast mode [ 109.548540][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 109.593332][ T6781] gretap0: left allmulticast mode [ 109.654186][ T6781] erspan0: left allmulticast mode [ 109.679920][ T6781] ip_vti0: left allmulticast mode [ 109.703026][ T6781] ip6_vti0: left allmulticast mode [ 109.719901][ T6781] sit0: left allmulticast mode [ 109.740228][ T6781] ip6tnl0: left allmulticast mode [ 109.749524][ T6781] ip6gre0: left allmulticast mode [ 109.776377][ T6781] syz_tun: left allmulticast mode [ 109.812197][ T6781] ip6gretap0: left allmulticast mode [ 109.829600][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.836993][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.849410][ T6781] bridge0: left allmulticast mode [ 109.862142][ T6781] vcan0: left allmulticast mode [ 109.873144][ T6781] bond0: left allmulticast mode [ 109.878726][ T6781] bond_slave_0: left allmulticast mode [ 109.884465][ T6781] bond_slave_1: left allmulticast mode [ 109.904042][ T6781] team0: left allmulticast mode [ 109.909802][ T6781] team_slave_0: left allmulticast mode [ 109.918996][ T5983] IPVS: starting estimator thread 0... [ 109.927579][ T6781] team_slave_1: left allmulticast mode [ 109.947658][ T6781] dummy0: left allmulticast mode [ 109.961681][ T6781] nlmon0: left allmulticast mode [ 109.971713][ T6781] caif0: left allmulticast mode [ 109.986941][ T6797] netlink: 40 bytes leftover after parsing attributes in process `syz.3.199'. [ 110.036014][ T6807] IPVS: using max 29 ests per chain, 69600 per kthread [ 110.140185][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.158310][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.252361][ T5933] lo speed is unknown, defaulting to 1000 [ 110.259672][ T5933] syz2: Port: 1 Link DOWN [ 110.261042][ T6799] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.201'. [ 110.277455][ T6796] hsr_slave_0: left promiscuous mode [ 110.284157][ T6796] hsr_slave_1: left promiscuous mode [ 110.340462][ T1168] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.363698][ T1168] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.410193][ T6814] net_ratelimit: 3324 callbacks suppressed [ 110.410208][ T6814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.461460][ T1168] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.484143][ T6790] lo speed is unknown, defaulting to 1000 [ 110.502359][ T6806] lo speed is unknown, defaulting to 1000 [ 110.538619][ T1168] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.000678][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 111.165567][ T6835] tipc: Enabled bearer , priority 0 [ 111.227339][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.213'. [ 111.237728][ T6835] tipc: Disabling bearer [ 111.627486][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 111.701741][ T6862] veth3: entered promiscuous mode [ 111.792400][ T6870] syzkaller0: entered promiscuous mode [ 111.808540][ T6870] syzkaller0: entered allmulticast mode [ 111.967417][ T6875] netlink: 48 bytes leftover after parsing attributes in process `syz.4.224'. [ 130.396687][ T1073] block nbd0: Possible stuck request ffff888024f3e000: control (read@0,1024B). Runtime 30 seconds [ 130.407715][ T1073] block nbd0: Possible stuck request ffff888024f3e1c0: control (read@1024,1024B). Runtime 30 seconds [ 130.419192][ T1073] block nbd0: Possible stuck request ffff888024f3e380: control (read@2048,1024B). Runtime 30 seconds [ 130.430999][ T1073] block nbd0: Possible stuck request ffff888024f3e540: control (read@3072,1024B). Runtime 30 seconds [ 132.958217][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.965005][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 160.476323][ T1073] block nbd0: Possible stuck request ffff888024f3e000: control (read@0,1024B). Runtime 60 seconds [ 160.487571][ T1073] block nbd0: Possible stuck request ffff888024f3e1c0: control (read@1024,1024B). Runtime 60 seconds [ 160.498498][ T1073] block nbd0: Possible stuck request ffff888024f3e380: control (read@2048,1024B). Runtime 60 seconds [ 160.509648][ T1073] block nbd0: Possible stuck request ffff888024f3e540: control (read@3072,1024B). Runtime 60 seconds [ 162.139114][ T5233] udevd[5233]: worker [6011] /devices/virtual/block/nbd0 is taking a long time [ 190.557741][ T1073] block nbd0: Possible stuck request ffff888024f3e000: control (read@0,1024B). Runtime 90 seconds [ 190.570515][ T1073] block nbd0: Possible stuck request ffff888024f3e1c0: control (read@1024,1024B). Runtime 90 seconds [ 190.581522][ T1073] block nbd0: Possible stuck request ffff888024f3e380: control (read@2048,1024B). Runtime 90 seconds [ 190.592403][ T1073] block nbd0: Possible stuck request ffff888024f3e540: control (read@3072,1024B). Runtime 90 seconds [ 194.398001][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.404323][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.598724][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 201.601511][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 201.606770][ T5866] Bluetooth: hci0: command 0x0406 tx timeout [ 201.611494][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 220.636407][ T1073] block nbd0: Possible stuck request ffff888024f3e000: control (read@0,1024B). Runtime 120 seconds [ 220.647375][ T1073] block nbd0: Possible stuck request ffff888024f3e1c0: control (read@1024,1024B). Runtime 120 seconds [ 220.658437][ T1073] block nbd0: Possible stuck request ffff888024f3e380: control (read@2048,1024B). Runtime 120 seconds [ 220.669413][ T1073] block nbd0: Possible stuck request ffff888024f3e540: control (read@3072,1024B). Runtime 120 seconds [ 224.282628][ T6917] trusted_key: syz.0.225 sent an empty control message without MSG_MORE. [ 224.328274][ T6919] netlink: 'syz.3.230': attribute type 11 has an invalid length. [ 224.350105][ T6919] netlink: 'syz.3.230': attribute type 11 has an invalid length. [ 224.360250][ T6919] netlink: 224 bytes leftover after parsing attributes in process `syz.3.230'. [ 224.403783][ T6923] netlink: 44 bytes leftover after parsing attributes in process `syz.4.231'. [ 224.621811][ T6935] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 224.650206][ T6935] netlink: 144 bytes leftover after parsing attributes in process `syz.3.234'. [ 224.701812][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.234'. [ 224.769830][ T6935] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 224.787955][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.236'. [ 224.840832][ T6936] openvswitch: netlink: Key type 29 is not supported [ 225.093425][ T6955] netlink: 'syz.2.238': attribute type 10 has an invalid length. [ 225.130927][ T6958] sctp: [Deprecated]: syz.1.240 (pid 6958) Use of int in max_burst socket option. [ 225.130927][ T6958] Use struct sctp_assoc_value instead [ 225.142169][ T6953] lo speed is unknown, defaulting to 1000 [ 225.213333][ T6959] netlink: 'syz.2.238': attribute type 10 has an invalid length. [ 225.221287][ T6959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.238'. [ 225.264930][ T6963] netlink: 'syz.4.244': attribute type 10 has an invalid length. [ 225.279554][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.309087][ T6955] batadv0: entered promiscuous mode [ 225.315945][ T6955] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 225.326973][ T6959] batadv0: entered allmulticast mode [ 225.337743][ T6959] bond0: (slave batadv0): Releasing backup interface [ 225.358644][ T6959] bridge0: port 1(batadv0) entered blocking state [ 225.366346][ T6959] bridge0: port 1(batadv0) entered disabled state [ 225.416631][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.240'. [ 225.488410][ T6969] bridge1: entered promiscuous mode [ 225.500396][ T6969] bridge1: entered allmulticast mode [ 225.823743][ T6964] lo speed is unknown, defaulting to 1000 [ 225.845455][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 225.855820][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 225.917109][ T6963] tipc: Started in network mode [ 225.922560][ T6963] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 225.933451][ T6963] tipc: Enabling of bearer rejected, failed to enable media [ 226.451111][ T6984] lo speed is unknown, defaulting to 1000 [ 226.592745][ T6986] lo speed is unknown, defaulting to 1000 [ 226.914204][ T6979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.170232][ T7010] netlink: 19 bytes leftover after parsing attributes in process `syz.2.251'. [ 227.221558][ T6996] lo speed is unknown, defaulting to 1000 [ 227.246158][ T7010] netlink: 19 bytes leftover after parsing attributes in process `syz.2.251'. [ 228.585381][ T7070] netlink: 'syz.4.256': attribute type 1 has an invalid length. [ 228.634512][ T7071] netlink: 'syz.4.256': attribute type 1 has an invalid length. [ 228.703744][ T7072] tipc: Enabled bearer , priority 0 [ 228.754651][ T7070] bond1: entered promiscuous mode [ 228.761368][ T7070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.772414][ T7073] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 228.999898][ T7074] syzkaller0: entered promiscuous mode [ 229.031797][ T7074] syzkaller0: entered allmulticast mode [ 229.079194][ T7068] tipc: Resetting bearer [ 229.138959][ T7068] tipc: Disabling bearer [ 229.163633][ T7092] netlink: 'syz.1.257': attribute type 13 has an invalid length. [ 229.217660][ T7093] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.259'. [ 229.242381][ T7092] netlink: 'syz.1.257': attribute type 17 has an invalid length. [ 229.336932][ T7098] bridge0: entered promiscuous mode [ 229.342499][ T7098] macsec1: entered promiscuous mode [ 229.387715][ T7098] bridge0: port 3(macsec1) entered blocking state [ 229.408754][ T7098] bridge0: port 3(macsec1) entered disabled state [ 229.429082][ T7098] macsec1: entered allmulticast mode [ 229.439847][ T7098] bridge0: entered allmulticast mode [ 229.468343][ T7098] macsec1: left allmulticast mode [ 229.474267][ T7098] bridge0: left allmulticast mode [ 229.488207][ T7098] bridge0: left promiscuous mode [ 229.523546][ T7100] bridge0: entered promiscuous mode [ 229.537202][ T7100] macsec1: entered promiscuous mode [ 229.545623][ T7100] bridge0: port 3(macsec1) entered blocking state [ 229.550684][ T7086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.552358][ T7100] bridge0: port 3(macsec1) entered disabled state [ 229.571154][ T7100] macsec1: entered allmulticast mode [ 229.581932][ T7100] bridge0: entered allmulticast mode [ 229.591398][ T7100] macsec1: left allmulticast mode [ 229.597040][ T7100] bridge0: left allmulticast mode [ 229.607717][ T7100] bridge0: left promiscuous mode [ 229.623997][ T7086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.695979][ T7086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.849139][ T7092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.141309][ T7127] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 230.227293][ T7137] delete_channel: no stack [ 231.313993][ T7094] lo speed is unknown, defaulting to 1000 [ 231.318840][ T7130] IPv6: sit1: Disabled Multicast RS [ 231.327204][ T7130] sit1: entered allmulticast mode [ 231.586844][ T7152] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 231.896237][ T7166] __nla_validate_parse: 1 callbacks suppressed [ 231.896254][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 232.255289][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.281'. [ 232.353657][ T7178] caif0: Master is either lo or non-ether device [ 232.456823][ T7198] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 232.518741][ T7198] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 232.520801][ T7197] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 232.709685][ T7208] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 233.840014][ T7272] IPVS: length: 209 != 24 [ 234.126120][ T7284] lo speed is unknown, defaulting to 1000 [ 234.131949][ T7284] lo speed is unknown, defaulting to 1000 [ 234.246296][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.306'. [ 234.268005][ T7284] lo speed is unknown, defaulting to 1000 [ 234.326129][ T7284] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 234.364251][ T7300] netlink: 240 bytes leftover after parsing attributes in process `syz.2.307'. [ 234.463716][ T7284] lo speed is unknown, defaulting to 1000 [ 234.506393][ T7284] lo speed is unknown, defaulting to 1000 [ 234.559904][ T5976] IPVS: starting estimator thread 0... [ 234.585567][ T7284] lo speed is unknown, defaulting to 1000 [ 234.593163][ T7284] lo speed is unknown, defaulting to 1000 [ 234.612195][ T7284] lo speed is unknown, defaulting to 1000 [ 234.665552][ T7309] IPVS: using max 35 ests per chain, 84000 per kthread [ 234.949596][ T7322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.312'. [ 235.231128][ T7329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.315'. [ 235.654799][ T7329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.315'. [ 235.903285][ T7361] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20000 [ 235.981255][ T7359] lo speed is unknown, defaulting to 1000 [ 236.040952][ T7359] lo speed is unknown, defaulting to 1000 [ 236.198892][ T7371] bond0: (slave gretap0): Opening slave failed [ 236.435628][ T7384] lo speed is unknown, defaulting to 1000 [ 236.449243][ T7384] lo speed is unknown, defaulting to 1000 [ 236.672507][ T7397] can: request_module (can-proto-0) failed. [ 236.879583][ T7416] syzkaller1: entered promiscuous mode [ 236.885463][ T7416] syzkaller1: entered allmulticast mode [ 237.438161][ T7438] syz_tun: entered allmulticast mode [ 237.457236][ T7440] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 237.487126][ T5933] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 237.544516][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 237.563159][ T7439] netlink: 'syz.1.334': attribute type 23 has an invalid length. [ 237.641979][ T7438] lo speed is unknown, defaulting to 1000 [ 237.762047][ T7459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.339'. [ 237.774120][ T7443] lo speed is unknown, defaulting to 1000 [ 237.805433][ T7438] lo speed is unknown, defaulting to 1000 [ 237.815606][ T7449] netlink: 'syz.1.334': attribute type 23 has an invalid length. [ 237.941613][ T7443] lo speed is unknown, defaulting to 1000 [ 237.960765][ T7457] syzkaller0: entered promiscuous mode [ 237.984611][ T7457] syzkaller0: entered allmulticast mode [ 238.118568][ T7467] netlink: 56 bytes leftover after parsing attributes in process `syz.2.341'. [ 238.142812][ T7467] netlink: 19 bytes leftover after parsing attributes in process `syz.2.341'. [ 238.166378][ T7467] netlink: 19 bytes leftover after parsing attributes in process `syz.2.341'. [ 238.290880][ T7474] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.341'. [ 238.331485][ T7436] syz_tun: left allmulticast mode [ 238.349023][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 238.413310][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.344'. [ 238.527242][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 238.577431][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 238.715192][ T7058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.756314][ T7058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.802023][ T7058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.865541][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.343'. [ 239.016510][ T7497] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 239.124423][ T7497] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 239.175586][ T7058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.628016][ T7527] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 240.085376][ T7548] lo speed is unknown, defaulting to 1000 [ 240.103299][ T7548] lo speed is unknown, defaulting to 1000 [ 240.764542][ T7577] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 241.036633][ T7591] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 241.223707][ T7598] delete_channel: no stack [ 241.531543][ T7610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.785792][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.835138][ T7686] batadv_slave_0: entered promiscuous mode [ 242.906424][ T7692] __nla_validate_parse: 11 callbacks suppressed [ 242.906442][ T7692] netlink: 44 bytes leftover after parsing attributes in process `syz.0.386'. [ 243.100516][ T7694] netlink: 92 bytes leftover after parsing attributes in process `syz.1.388'. [ 243.259352][ T7706] lo speed is unknown, defaulting to 1000 [ 243.270806][ T7706] lo speed is unknown, defaulting to 1000 [ 243.771956][ T6391] ================================================================== [ 243.780071][ T6391] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350 [ 243.787640][ T6391] Read of size 8 at addr ffff88807d0b40a0 by task khidpd_15c25505/6391 [ 243.795875][ T6391] [ 243.798208][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: khidpd_15c25505 Not tainted syzkaller #0 PREEMPT(full) [ 243.798231][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.798246][ T6391] Call Trace: [ 243.798253][ T6391] [ 243.798262][ T6391] dump_stack_lvl+0x189/0x250 [ 243.798284][ T6391] ? __kasan_check_byte+0x12/0x40 [ 243.798306][ T6391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.798324][ T6391] ? lock_release+0x4b/0x3e0 [ 243.798348][ T6391] ? __virt_addr_valid+0x4a5/0x5c0 [ 243.798369][ T6391] print_report+0xca/0x240 [ 243.798386][ T6391] ? __mutex_lock+0x801/0x1350 [ 243.798402][ T6391] kasan_report+0x118/0x150 [ 243.798424][ T6391] ? __mutex_lock+0x801/0x1350 [ 243.798444][ T6391] __mutex_lock+0x801/0x1350 [ 243.798464][ T6391] ? __mutex_lock+0x5bb/0x1350 [ 243.798482][ T6391] ? l2cap_unregister_user+0x6a/0x1b0 [ 243.798502][ T6391] ? __pfx___mutex_lock+0x10/0x10 [ 243.798520][ T6391] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 243.798548][ T6391] l2cap_unregister_user+0x6a/0x1b0 [ 243.798567][ T6391] hidp_session_thread+0x3c9/0x410 [ 243.798588][ T6391] ? __pfx_hidp_session_thread+0x10/0x10 [ 243.798604][ T6391] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 243.798626][ T6391] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 243.798647][ T6391] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 243.798665][ T6391] ? __kthread_parkme+0x7b/0x200 [ 243.798690][ T6391] ? __kthread_parkme+0x1a1/0x200 [ 243.798710][ T6391] kthread+0x70e/0x8a0 [ 243.798730][ T6391] ? __pfx_hidp_session_thread+0x10/0x10 [ 243.798747][ T6391] ? __pfx_kthread+0x10/0x10 [ 243.798766][ T6391] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.798788][ T6391] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.798809][ T6391] ? __pfx_kthread+0x10/0x10 [ 243.798828][ T6391] ret_from_fork+0x439/0x7d0 [ 243.798846][ T6391] ? __pfx_ret_from_fork+0x10/0x10 [ 243.798865][ T6391] ? __switch_to_asm+0x39/0x70 [ 243.798883][ T6391] ? __switch_to_asm+0x33/0x70 [ 243.798901][ T6391] ? __pfx_kthread+0x10/0x10 [ 243.798920][ T6391] ret_from_fork_asm+0x1a/0x30 [ 243.798946][ T6391] [ 243.798952][ T6391] [ 244.000239][ T6391] Allocated by task 5876: [ 244.004541][ T6391] kasan_save_track+0x3e/0x80 [ 244.009299][ T6391] __kasan_kmalloc+0x93/0xb0 [ 244.013867][ T6391] __kmalloc_noprof+0x27a/0x4f0 [ 244.018693][ T6391] hci_alloc_dev_priv+0x28/0x2060 [ 244.023700][ T6391] vhci_create_device+0x120/0x650 [ 244.028729][ T6391] vhci_write+0x3ce/0x4a0 [ 244.033046][ T6391] vfs_write+0x5c9/0xb30 [ 244.037306][ T6391] ksys_write+0x145/0x250 [ 244.041725][ T6391] do_syscall_64+0xfa/0x3b0 [ 244.046588][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.052502][ T6391] [ 244.054814][ T6391] Freed by task 7717: [ 244.058798][ T6391] kasan_save_track+0x3e/0x80 [ 244.063455][ T6391] kasan_save_free_info+0x46/0x50 [ 244.068472][ T6391] __kasan_slab_free+0x5b/0x80 [ 244.073251][ T6391] kfree+0x18e/0x440 [ 244.077139][ T6391] bt_host_release+0x82/0x90 [ 244.082226][ T6391] device_release+0x9c/0x1c0 [ 244.086796][ T6391] kobject_put+0x22b/0x480 [ 244.091188][ T6391] vhci_release+0x15a/0x1a0 [ 244.095689][ T6391] __fput+0x44c/0xa70 [ 244.100104][ T6391] task_work_run+0x1d1/0x260 [ 244.104677][ T6391] do_exit+0x6b5/0x2300 [ 244.108896][ T6391] do_group_exit+0x21c/0x2d0 [ 244.113468][ T6391] get_signal+0x1286/0x1340 [ 244.118033][ T6391] arch_do_signal_or_restart+0x9a/0x750 [ 244.123668][ T6391] exit_to_user_mode_loop+0x75/0x110 [ 244.128934][ T6391] do_syscall_64+0x2bd/0x3b0 [ 244.133519][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.139481][ T6391] [ 244.141783][ T6391] Last potentially related work creation: [ 244.147470][ T6391] kasan_save_stack+0x3e/0x60 [ 244.152125][ T6391] kasan_record_aux_stack+0xbd/0xd0 [ 244.157297][ T6391] insert_work+0x3d/0x330 [ 244.161620][ T6391] __queue_work+0xbaf/0xfb0 [ 244.166184][ T6391] queue_work_on+0x181/0x270 [ 244.170746][ T6391] hci_cmd_sync_submit+0x285/0x2b0 [ 244.175832][ T6391] process_scheduled_works+0xae1/0x17b0 [ 244.181348][ T6391] worker_thread+0x8a0/0xda0 [ 244.185912][ T6391] kthread+0x70e/0x8a0 [ 244.190043][ T6391] ret_from_fork+0x439/0x7d0 [ 244.194619][ T6391] ret_from_fork_asm+0x1a/0x30 [ 244.199361][ T6391] [ 244.201682][ T6391] Second to last potentially related work creation: [ 244.208236][ T6391] kasan_save_stack+0x3e/0x60 [ 244.212892][ T6391] kasan_record_aux_stack+0xbd/0xd0 [ 244.218066][ T6391] insert_work+0x3d/0x330 [ 244.222393][ T6391] __queue_work+0xbaf/0xfb0 [ 244.226882][ T6391] queue_work_on+0x181/0x270 [ 244.231471][ T6391] hci_abort_conn+0x1e4/0x330 [ 244.236457][ T6391] process_scheduled_works+0xae1/0x17b0 [ 244.242366][ T6391] worker_thread+0x8a0/0xda0 [ 244.246951][ T6391] kthread+0x70e/0x8a0 [ 244.251058][ T6391] ret_from_fork+0x439/0x7d0 [ 244.255737][ T6391] ret_from_fork_asm+0x1a/0x30 [ 244.260698][ T6391] [ 244.263033][ T6391] The buggy address belongs to the object at ffff88807d0b4000 [ 244.263033][ T6391] which belongs to the cache kmalloc-8k of size 8192 [ 244.277066][ T6391] The buggy address is located 160 bytes inside of [ 244.277066][ T6391] freed 8192-byte region [ffff88807d0b4000, ffff88807d0b6000) [ 244.291021][ T6391] [ 244.293328][ T6391] The buggy address belongs to the physical page: [ 244.299724][ T6391] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d0b0 [ 244.308464][ T6391] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 244.316941][ T6391] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 244.324474][ T6391] page_type: f5(slab) [ 244.328444][ T6391] raw: 00fff00000000040 ffff88801a442280 ffffea0001615e00 0000000000000006 [ 244.337107][ T6391] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 244.345771][ T6391] head: 00fff00000000040 ffff88801a442280 ffffea0001615e00 0000000000000006 [ 244.354463][ T6391] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 244.363134][ T6391] head: 00fff00000000003 ffffea0001f42c01 00000000ffffffff 00000000ffffffff [ 244.371791][ T6391] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 244.380441][ T6391] page dumped because: kasan: bad access detected [ 244.386845][ T6391] page_owner tracks the page as allocated [ 244.392544][ T6391] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5232, tgid 5232 (S10udev), ts 27208536775, free_ts 24580124707 [ 244.412663][ T6391] post_alloc_hook+0x240/0x2a0 [ 244.417419][ T6391] get_page_from_freelist+0x21e4/0x22c0 [ 244.422948][ T6391] __alloc_frozen_pages_noprof+0x181/0x370 [ 244.428735][ T6391] alloc_pages_mpol+0x232/0x4a0 [ 244.433657][ T6391] allocate_slab+0x8a/0x370 [ 244.438240][ T6391] ___slab_alloc+0xbeb/0x1420 [ 244.442899][ T6391] __kmalloc_cache_noprof+0x296/0x3d0 [ 244.448352][ T6391] tomoyo_init_log+0x111f/0x1f70 [ 244.453265][ T6391] tomoyo_supervisor+0x340/0x1480 [ 244.458265][ T6391] tomoyo_env_perm+0x149/0x1e0 [ 244.463006][ T6391] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 244.468613][ T6391] tomoyo_bprm_check_security+0x11c/0x180 [ 244.474321][ T6391] security_bprm_check+0x89/0x270 [ 244.479322][ T6391] bprm_execve+0x8ee/0x1450 [ 244.483807][ T6391] do_execveat_common+0x510/0x6a0 [ 244.488807][ T6391] __x64_sys_execve+0x94/0xb0 [ 244.493563][ T6391] page last free pid 1 tgid 1 stack trace: [ 244.499432][ T6391] __free_frozen_pages+0xbc4/0xd30 [ 244.504615][ T6391] free_contig_range+0x1bd/0x4a0 [ 244.509554][ T6391] destroy_args+0x69/0x660 [ 244.513958][ T6391] debug_vm_pgtable+0x39f/0x3b0 [ 244.518786][ T6391] do_one_initcall+0x233/0x820 [ 244.523545][ T6391] do_initcall_level+0x104/0x190 [ 244.528465][ T6391] do_initcalls+0x59/0xa0 [ 244.532861][ T6391] kernel_init_freeable+0x334/0x4b0 [ 244.538046][ T6391] kernel_init+0x1d/0x1d0 [ 244.542382][ T6391] ret_from_fork+0x439/0x7d0 [ 244.546950][ T6391] ret_from_fork_asm+0x1a/0x30 [ 244.551699][ T6391] [ 244.553998][ T6391] Memory state around the buggy address: [ 244.559600][ T6391] ffff88807d0b3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 244.567705][ T6391] ffff88807d0b4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.575743][ T6391] >ffff88807d0b4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.583781][ T6391] ^ [ 244.588869][ T6391] ffff88807d0b4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.596923][ T6391] ffff88807d0b4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.604974][ T6391] ================================================================== [ 244.614185][ T6391] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 244.621401][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: khidpd_15c25505 Not tainted syzkaller #0 PREEMPT(full) [ 244.631103][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.641234][ T6391] Call Trace: [ 244.644506][ T6391] [ 244.647433][ T6391] dump_stack_lvl+0x99/0x250 [ 244.652013][ T6391] ? __asan_memcpy+0x40/0x70 [ 244.656585][ T6391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.661768][ T6391] ? __pfx__printk+0x10/0x10 [ 244.666348][ T6391] vpanic+0x281/0x750 [ 244.670316][ T6391] ? __pfx_vpanic+0x10/0x10 [ 244.674800][ T6391] ? irqentry_exit+0x74/0x90 [ 244.679377][ T6391] panic+0xb9/0xc0 [ 244.683083][ T6391] ? __pfx_panic+0x10/0x10 [ 244.687481][ T6391] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 244.693449][ T6391] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 244.699336][ T6391] ? __mutex_lock+0x801/0x1350 [ 244.704089][ T6391] check_panic_on_warn+0x89/0xb0 [ 244.709019][ T6391] ? __mutex_lock+0x801/0x1350 [ 244.713764][ T6391] end_report+0x78/0x160 [ 244.717994][ T6391] kasan_report+0x129/0x150 [ 244.722483][ T6391] ? __mutex_lock+0x801/0x1350 [ 244.727234][ T6391] __mutex_lock+0x801/0x1350 [ 244.731810][ T6391] ? __mutex_lock+0x5bb/0x1350 [ 244.736559][ T6391] ? l2cap_unregister_user+0x6a/0x1b0 [ 244.741916][ T6391] ? __pfx___mutex_lock+0x10/0x10 [ 244.746926][ T6391] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 244.753205][ T6391] l2cap_unregister_user+0x6a/0x1b0 [ 244.758388][ T6391] hidp_session_thread+0x3c9/0x410 [ 244.763501][ T6391] ? __pfx_hidp_session_thread+0x10/0x10 [ 244.769118][ T6391] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 244.774997][ T6391] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 244.781220][ T6391] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 244.787445][ T6391] ? __kthread_parkme+0x7b/0x200 [ 244.792365][ T6391] ? __kthread_parkme+0x1a1/0x200 [ 244.797373][ T6391] kthread+0x70e/0x8a0 [ 244.801430][ T6391] ? __pfx_hidp_session_thread+0x10/0x10 [ 244.807045][ T6391] ? __pfx_kthread+0x10/0x10 [ 244.811633][ T6391] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.816837][ T6391] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.822030][ T6391] ? __pfx_kthread+0x10/0x10 [ 244.826615][ T6391] ret_from_fork+0x439/0x7d0 [ 244.831278][ T6391] ? __pfx_ret_from_fork+0x10/0x10 [ 244.836374][ T6391] ? __switch_to_asm+0x39/0x70 [ 244.841125][ T6391] ? __switch_to_asm+0x33/0x70 [ 244.845873][ T6391] ? __pfx_kthread+0x10/0x10 [ 244.850457][ T6391] ret_from_fork_asm+0x1a/0x30 [ 244.855304][ T6391] [ 244.858707][ T6391] Kernel Offset: disabled [ 244.863070][ T6391] Rebooting in 86400 seconds..