last executing test programs: 4m5.242927488s ago: executing program 4 (id=266): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000a80)={0x9, @remote}, &(0x7f0000000ac0)=0x12, 0x800) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x110, 0x1f, 0x1, 0x800000, 0x0, "", [@nested={0xfd, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x110}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000003897706825a6aa00"/35], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000b00)=0x7, 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x1, 0x0, @loopback, 0x7ffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000b40)=@ccm_128={{0x304}, "8259a79aeb40f4a3", "dc84b7bf98f53b492a4c496ce9886805", "e22c6ab4", "bb1f03af56c1e3fe"}, 0x28) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0xe}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(r4, &(0x7f0000000700)="bb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x13}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0xd0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'tunl0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'bridge_slave_0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'ip_vti0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001200010a00000000000000000a"], 0x26}}, 0x0) sendmsg(r0, &(0x7f0000000a40)={&(0x7f0000000200)=@can={0x1d, r6}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)="06e3ec448bb2b8826072721c6bd5c28aab3d3ba62d1d9a78cc042d1fdc93e2351858eabd5e5274d16a9784aa46b91f95a1ef5145ea1276b4d2cc6bf62ecaffbfa4bc149f28167e0efd3d82f69cec250f553c0e810ebf8d479b6cec51653872b260f734cf90a84daf378f84e2a96084594fd827967e3fc98a21327e20efe5377510313f9aef8c5e6988e107a23a9b2a168e03355a25c58dddecd6", 0x9a}, {&(0x7f0000000340)="0d7a4fe017fe81ee9f64310a9e9e66b691a2e6ac282e0505ee906e2e43ecf799f216f9b77a48ae0e45b54ec90b1fa36d10c4079ef7c737b0f582a471e840d91a1c5bf55349e3a05968ac5a412a50d33b010aeecbf2feff163cbac186742408ff8b1cbc680dc7e9ddc10e122c0c07960c9228dfac48a2ac19c2d05bb67739264310fdb32a8cce14a3f32a681b", 0x8c}, {&(0x7f0000000400)="1465bb18cc3a82ab1e01caf50384d01e04358c99c220264d7e59321bbb0449f034b1ebaa8ad12e82261e904d48ebf10fa7421272cfb121074a9b23f2d810844c33d2b11434a001300abfb58ad9135b46784931e91dd1af6d4fceb235dc335dfe74d8bf0b42352bb856d040330464164ad76d2f", 0x73}, {&(0x7f0000000480)="b184cb8e3c77226b1ece83b492dfcadc88f5aaa2e2a82e2e55eadf34dff0e04d3c8fc4136b6ce6e65161a900932330cd43dad09befc617d8bc9f5d13d5fc8c1b5b6e51477d3a813d2e9ea12d16b96dca000812fdbbf420c4be75b5c5f80ce04857e363d899fe899f77a33d11eed90566ce0736cec74a6d18ca0b034ed3de3b84fd84969cc0c826d35ab8e63e1976e30aba0ad091b263430b05a31b8fc7d84b890395ed61be433b06583d1eff44df6408fa4a2abf0741424cbd47e79f4bf18e7715b935dea0f1c0ba075ce46acdbdaf0a584e25e513eff6063061df1507ca6c1e5e5f837e", 0xe4}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x4c0}, 0x0) 4m5.132321656s ago: executing program 4 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x20044001) socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x2, @empty, 0x0, 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe3", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0100000000000000240012000c"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r3], 0x85}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r3], 0x85}, 0x1, 0x0, 0x0, 0x4000}, 0x0) accept4(r4, &(0x7f00000004c0)=@can, &(0x7f0000000080)=0x80, 0x0) (async) r5 = accept4(r4, &(0x7f00000004c0)=@can, &(0x7f0000000080)=0x80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f0000001e80)) (async) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f0000001e80)) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @local}, 0x3, 0x1, 0x0, 0x2}}, 0x2e) (async) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @local}, 0x3, 0x1, 0x0, 0x2}}, 0x2e) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 4m5.015409889s ago: executing program 4 (id=270): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x10101, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000006c0)={'netdevsim0\x00', 0x1000}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x1e000000, &(0x7f0000000780)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000b040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x92, &(0x7f0000000840)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x1d, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x20, 0x32, 0x0, 0x1, [0x4, 0x6, 0x2, 0x0, 0xffffffd1, 0x2f, 0x200]}, @ssrr={0x89, 0x65, 0x70, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @local]}, @rr={0x7, 0xb, 0x74, [@empty, @empty]}, @ssrr={0x89, 0x1b, 0xb0, [@private=0xa010100, @multicast1, @multicast1, @remote, @local, @private=0xa010100]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x1, 0x100, @val=0x80}}}}}}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async, rerun: 64) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x6, 0xfffffffb, 0xfff, 0x8, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0xe, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c00000004000000ad0000000100000010010000", @ANYRES32=0x1, @ANYBLOB="904e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000072a60000000000000499ccb1287300000000a971000000000000324cdbb70000"], 0x50) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000300)='syzkaller\x00', 0x100, 0x2a, &(0x7f0000000340)=""/42, 0x40f00, 0x13, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), 0x10, 0x1, @void, @value}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r8) 4m4.666924924s ago: executing program 4 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b405000000000000611081000000000005000000000000009500000000000000b8547d39d17d8517c35f314d5d78aa2d3ba0666035439b9fce31cc739f18a20953ec537a53e8737ee2a44c2dae1b54d23ba985f52a2ad84af6619698fd1b345d9a95cdec7ba1a77cdbf969419c666540b02f42f91c70335768a3fb5cfc8e78f15dcc1792487a45cb9dd2c775b8e255e1228f64209ad00a9857e80be63ae77923c3ac00e367cc919c70f6f4f967ad2eb6a8f8d81dd74c4ed083e310941882c6c5bfbfcf9b34729e2f3d08ef8520955b5dcef4eee464669f7eb692a4e18d63cb188351c00800000000000000000000000015c419cfb6250e663ba65f30f065fc10847cf1c04654d859a85d9082ae941afd854cbdcf9282e9f196a0aa9bfda0816daf455fc7e770ecfd3e1e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdea, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) 4m4.360641992s ago: executing program 4 (id=281): sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x28}}, 0x20000000) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x98, 0xff, 0x2, 0xff, 0xb, 0x1600}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x44}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) 4m4.099043484s ago: executing program 4 (id=285): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}}, 0x18) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) (async) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="fda6d9e382f94c4d86f2c69618200b95b45f938c65fa58", 0x17}], 0x1}, 0x0) (async, rerun: 32) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="93efc77e603cf233c2fd52e3be378bd6fac50f3b1bdd7d2fbeb1ab869207d91d1c71394da4fdae07e8fe9812664d2361a82051fba9b2d24c845dcf95516139eb4ba08174d616a8b8fe90806d0e7e4edac06ff0476bc1363d90adf0387dd15bc6d906db3232e2c37d4074ed5bc48e9bfe06264899aaf24b2a277cd3c000fcc63685398d98f8f63ce3bbd3849c6dc9fc0e7571c4ee5aa011a07a5bfa4a58b67e1c33725c7047e7bcf1905262348a5a81d654669997e304d072b98da3c133fc1f32ef9da74a3a6c2ec26c1d3978d379ab66ea99bb7312fb4937", @ANYBLOB="68c2d1006a7f2caa0c55c69413d5597b6c5c0311911d9c6b6cd8790a7970decfc5b964c340a03d7fa2c309524c364df90a01728d51fef74eef6252db0bb9f2fcd717925a166175d81de8aaf3b310ac14b19cac1a6660d8174afa79863fe125f167eaabcb3c4d164e11cdeb9a4ff2007e2a5aeeb861ef49", @ANYRES64=r1, @ANYRESHEX=0x0, @ANYRES8, @ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000008c0)={0x0, 0x1, 0x1}, &(0x7f0000000900)=0x8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)="6a927331212ec08b850a5644c8e1fffb5bc8c32d3ed8d63acfbc5d2eb166290cf9c92a08a0607778", 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (rerun: 32) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000880)=0x6eee934b, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x3, @loopback, 0x6}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000040)={r8}, 0x8) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0x6e, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000000280)}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000300)=""/40, 0x28}], 0x5, &(0x7f00000006c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x121) 3m48.362645419s ago: executing program 32 (id=285): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}}, 0x18) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) (async) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="fda6d9e382f94c4d86f2c69618200b95b45f938c65fa58", 0x17}], 0x1}, 0x0) (async, rerun: 32) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="93efc77e603cf233c2fd52e3be378bd6fac50f3b1bdd7d2fbeb1ab869207d91d1c71394da4fdae07e8fe9812664d2361a82051fba9b2d24c845dcf95516139eb4ba08174d616a8b8fe90806d0e7e4edac06ff0476bc1363d90adf0387dd15bc6d906db3232e2c37d4074ed5bc48e9bfe06264899aaf24b2a277cd3c000fcc63685398d98f8f63ce3bbd3849c6dc9fc0e7571c4ee5aa011a07a5bfa4a58b67e1c33725c7047e7bcf1905262348a5a81d654669997e304d072b98da3c133fc1f32ef9da74a3a6c2ec26c1d3978d379ab66ea99bb7312fb4937", @ANYBLOB="68c2d1006a7f2caa0c55c69413d5597b6c5c0311911d9c6b6cd8790a7970decfc5b964c340a03d7fa2c309524c364df90a01728d51fef74eef6252db0bb9f2fcd717925a166175d81de8aaf3b310ac14b19cac1a6660d8174afa79863fe125f167eaabcb3c4d164e11cdeb9a4ff2007e2a5aeeb861ef49", @ANYRES64=r1, @ANYRESHEX=0x0, @ANYRES8, @ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000008c0)={0x0, 0x1, 0x1}, &(0x7f0000000900)=0x8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)="6a927331212ec08b850a5644c8e1fffb5bc8c32d3ed8d63acfbc5d2eb166290cf9c92a08a0607778", 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (rerun: 32) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000880)=0x6eee934b, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x3, @loopback, 0x6}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000040)={r8}, 0x8) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0x6e, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000000280)}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000300)=""/40, 0x28}], 0x5, &(0x7f00000006c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x121) 1m0.197250614s ago: executing program 3 (id=849): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x6}, @fwd={0x6}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f00000001c0)=""/140, 0x3c, 0x8c, 0x0, 0x1, 0x10000, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) pipe(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r5, r6]}}], 0x20, 0x840}, 0x840) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r18, @ANYBLOB="080004000001"], 0x44}}, 0x0) 58.748259827s ago: executing program 5 (id=674): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2, 0x0, 0x0, @void, @value}, 0x1a) sendto$inet6(r0, &(0x7f0000000140)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_emit_ethernet(0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000088a83e00810023008848e9401c9446478b7ef241c4bc4feda1e9caeba045759cadafff525e82de588bf46c51173bf432cd20eba0abb64237529656c65630ebd49561f32e8feffca55f347fa2dd10547adf4da5fa00a09935804fd8440998c9b9a7fb39c3a88c3803ffe57252a261ff7b233816deb153356a"], 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x8) 48.974169914s ago: executing program 3 (id=849): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x6}, @fwd={0x6}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f00000001c0)=""/140, 0x3c, 0x8c, 0x0, 0x1, 0x10000, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) pipe(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r5, r6]}}], 0x20, 0x840}, 0x840) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r18, @ANYBLOB="080004000001"], 0x44}}, 0x0) 47.241992291s ago: executing program 5 (id=674): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2, 0x0, 0x0, @void, @value}, 0x1a) sendto$inet6(r0, &(0x7f0000000140)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_emit_ethernet(0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000088a83e00810023008848e9401c9446478b7ef241c4bc4feda1e9caeba045759cadafff525e82de588bf46c51173bf432cd20eba0abb64237529656c65630ebd49561f32e8feffca55f347fa2dd10547adf4da5fa00a09935804fd8440998c9b9a7fb39c3a88c3803ffe57252a261ff7b233816deb153356a"], 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x8) 36.418043128s ago: executing program 3 (id=849): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x6}, @fwd={0x6}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f00000001c0)=""/140, 0x3c, 0x8c, 0x0, 0x1, 0x10000, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) pipe(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r5, r6]}}], 0x20, 0x840}, 0x840) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r18, @ANYBLOB="080004000001"], 0x44}}, 0x0) 34.966714433s ago: executing program 5 (id=674): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2, 0x0, 0x0, @void, @value}, 0x1a) sendto$inet6(r0, &(0x7f0000000140)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_emit_ethernet(0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000088a83e00810023008848e9401c9446478b7ef241c4bc4feda1e9caeba045759cadafff525e82de588bf46c51173bf432cd20eba0abb64237529656c65630ebd49561f32e8feffca55f347fa2dd10547adf4da5fa00a09935804fd8440998c9b9a7fb39c3a88c3803ffe57252a261ff7b233816deb153356a"], 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x8) 24.818764743s ago: executing program 3 (id=849): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x6}, @fwd={0x6}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f00000001c0)=""/140, 0x3c, 0x8c, 0x0, 0x1, 0x10000, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) pipe(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r5, r6]}}], 0x20, 0x840}, 0x840) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r18, @ANYBLOB="080004000001"], 0x44}}, 0x0) 23.4516915s ago: executing program 5 (id=674): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2, 0x0, 0x0, @void, @value}, 0x1a) sendto$inet6(r0, &(0x7f0000000140)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_emit_ethernet(0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000088a83e00810023008848e9401c9446478b7ef241c4bc4feda1e9caeba045759cadafff525e82de588bf46c51173bf432cd20eba0abb64237529656c65630ebd49561f32e8feffca55f347fa2dd10547adf4da5fa00a09935804fd8440998c9b9a7fb39c3a88c3803ffe57252a261ff7b233816deb153356a"], 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x8) 12.919660523s ago: executing program 3 (id=849): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x6}, @fwd={0x6}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f00000001c0)=""/140, 0x3c, 0x8c, 0x0, 0x1, 0x10000, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) pipe(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r5, r6]}}], 0x20, 0x840}, 0x840) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r18, @ANYBLOB="080004000001"], 0x44}}, 0x0) 12.246155222s ago: executing program 2 (id=2120): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000080)=0xb, 0x4) sendmmsg$inet6(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='R', 0x1}], 0x1}}], 0x2, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x4) shutdown(r1, 0x2) listen(r1, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000200000000000720131d9260901009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000200000000000720131d9260901009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x0, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000140)=0xf, 0x4) 12.245117943s ago: executing program 5 (id=674): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2, 0x0, 0x0, @void, @value}, 0x1a) sendto$inet6(r0, &(0x7f0000000140)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_emit_ethernet(0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000088a83e00810023008848e9401c9446478b7ef241c4bc4feda1e9caeba045759cadafff525e82de588bf46c51173bf432cd20eba0abb64237529656c65630ebd49561f32e8feffca55f347fa2dd10547adf4da5fa00a09935804fd8440998c9b9a7fb39c3a88c3803ffe57252a261ff7b233816deb153356a"], 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x8) 10.633947089s ago: executing program 2 (id=2123): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r0, 0x3, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0}, 0x9c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a0000000500010007"], 0x50}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000600000008000100000000000c000d"], 0x28}}, 0x0) r5 = socket$inet6(0xa, 0x4, 0xffff0000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd5b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1382000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x48802) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x398, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x120, 0x190, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x9], 0xfffff788, 0xb, 0x3}}, @common=@dst={{0x48}, {0x7, 0x6, 0x1, [0xab5, 0x0, 0x2, 0x5, 0xff, 0x4, 0x2, 0x5, 0x1ff, 0x6, 0x1, 0x4, 0x3, 0x3, 0xa0, 0x80], 0xb}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x200, 0x400, 0x8, 0x1, 0x0, "0d5968a76b29da2f786eb7e48e3246e67116c56cf1134be15571c691148d74ec3c3cd27d3f94fb3c4a7b065f6a0d13b05f73d567e65110c521fff5cbeedb9963"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, @private0, [0x0, 0xff, 0xffffff00, 0xffffffff], [0xff000000, 0xff, 0xff000000], 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x7, 0x3, 0x48}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0xc, 0x8, 0x8, 0x4, 0x6f86, 0x5, 0x8]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 10.410837521s ago: executing program 2 (id=2125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f4b3fdecf00000000000000380000003819a94fcc000000040000000000000c0400ad0000000000000000000b00000000000000000100000d000000004000000001000000000000000000000d00000000000000004f"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1000000, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000915507a786efd0d29e0000000000000000000000000000000000000000000000000000000000000000000000feff99010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000cc1dbf6c8a543a9e5711e6381833ea5c0e7a2c0b598410ec1f40b2b469aef871e0e90c7673af8336774191233b0c26afb6de002f481cdaed5c1bf17e1af1f21c99739e471c08ff360e59"]}, 0x15b) unshare(0x20000400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x2) (async) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r3, 0x0, 0x2) (async) pwrite64(r3, &(0x7f00000001c0)="c934fb", 0x3, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000280)={0xc023}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000f3ffffff0000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x8d, &(0x7f00000003c0)}, 0x22) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0706000000000000000000000000080005000000000008000400ac14140008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002000002"], 0x40}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r5) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xd7}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004830}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000000903000000000000000000000000000c00048008000140000000000900010073797a30000000003c0002002c00018014000300000000000000000000000000e300000014000400fe8000000000000000000000000000aa0c0002800500010000000000"], 0x68}}, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r5) write$ppp(r3, &(0x7f0000000800)="b34e99d63d2ed184876541131c4d060fc6f18019ad736cd8c5bd57fe625360eba01669684eddae190e8549c897f020c26d5bf69ccfd7b5bdd6058c6db17398bc93fe4b1b545fe89ebc65fbdaeb17c96c8898bd2ec201cf762b751a82a0d9bb9f67bbb76610ebd5bfe77ce74a2e3a95eec9bdac843f0444298aaff95075249dd3d5ed65dd77796b63ba5d359e88125d18f307baf57dfa3f0699a6937672ede008e883f1eb6d5e069c7f3b49e1430f2898596f91a194d033e25938b079ededd16d", 0xc0) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000140)=0x1) 10.128804484s ago: executing program 2 (id=2129): r0 = socket$inet6(0xa, 0x3, 0x3d) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0xfdb7) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7f00, 0x700, 0x34, 0x8000, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@rr={0x7, 0x17, 0x71, [@empty, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x33}]}, @lsrr={0x83, 0x17, 0xd7, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @broadcast]}]}}}}}) r1 = socket$inet6(0xa, 0x3, 0x20) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000020000"], 0x28}}], 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) sendto$inet6(r1, &(0x7f0000000180)="d224374523e974769c99b50e1a9caeb18c5c0318cac5625ed6f510232cd9d7300ae7e286c7c07515afec96d73d7ee3719b03296aca3df50dd528eebc714597014f0abc513f28a368cc2d61ac7216499e3fff52e9b91f0ed3f4421482685a1f0f725fdd0004ca9f488f3677cf07b85de050960c633124175e099ca62aa8d59b5239830b7c9d7231ef07e2d1527101a9c9cab049c89c999b58de43946a08c17476054db24dde551896d16bd2448243166f5ed733f3188065bc013526f30ed6a69dabae4d2ad7ace900cfa6db9e3bb2bd78c97f0ac7344783fbbb", 0xd9, 0x4091, &(0x7f0000000280)={0xa, 0x4e24, 0x5, @private1, 0x9}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="150500000000ffdbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="240102803800010024cf01006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000180ffff40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400a265764c1cfaae3816928a7286f07f9fd0f0f51fb97ab878400192fb7c86a9d9c7cec644504758f7e13b7303794458cb6ce69c433493a45d858cf84b12c2eb89d4015ba1b78167ad8673", @ANYRES32=r5, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040084e3a63f38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004008bffffff"], 0x140}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4010744d, &(0x7f0000000080)=0x1fffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="02"], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="0694f1b4ddd8aa8886b5b4233bd86211eabc5af23ca0d5537c873c0d6f056d0a9bfea1c48036864a678aa65580297fd5ffbc950082b85715102c1284417c66670fea9e4df8d2dfa97a928de1d98cadd6c3babf418fd12636f5b143ec3d4061763e72f827ca5ec0eba4eaf372314a2e0c91301f011d822ff1ac4651bf45c2b8d5ab6783b154f4afc0adc9d23ee32c35189d76d764e1cee4da2f3312d668ce943402b0436acfaedac8ddb0c31c6ba3ac8ac8fd10ea32ed8212a00622a84da5fc7e4ee40d27d1a6d3b545de944523d1ee2c9c5ddb99aa7d410ef05933c3fe81e65146", @ANYBLOB="462df3c2038ec72f7277a1a5ff90fb61dc835d5393ab5cb7e2025664c389d4f1d0e55086081c8c36186c33a25e6f3892d0fa982e850b940d8b27ee5f4ce90b34c561d81a7666fcb3a909bb7c2438ac5250dd3a9e152cec052b7639a301d994c60a6a9adedcd0a228342d133ea48ece10e8fbfc4973b7889ab7027a69480951c1909a8e78751e55acb86aa20ee855bb9766c9b1aaa4c4f8c666745eb174eb502e747c6030f576e69a4e7c", @ANYRES8=r2, @ANYRES64=0x0], 0x10) 8.798880967s ago: executing program 2 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet(0xa, 0x801, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x7, 0x1, 0x4, 0x9, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x9b, 0x1, 0xb, [{@private=0xa010101, 0x400000}, {@empty, 0x7fff}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x2}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000001e00)={'vlan1\x00', 0x0}) setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f00000006c0)={r15, 0x3, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f0000000080)={r15, 0x1, 0x6, @random="a98bbd319954"}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000740)={'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f0000000000)={r15, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', r11, 0x29, 0x6, 0x1, 0x2, 0x35, @remote, @empty, 0x8000, 0x10, 0x1, 0x8}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf8, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004010}, 0x20044000) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r17, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r18, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r19, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 8.570010356s ago: executing program 2 (id=2137): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000400)={0x1f, @none}, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbf9, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.887051431s ago: executing program 1 (id=2179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x890b, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x3) preadv(r0, &(0x7f0000002700)=[{&(0x7f0000002b00)=""/4087, 0xff7}, {&(0x7f00000015c0)=""/237, 0xed}, {&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000001580)=""/25, 0x19}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/166, 0xa6}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000002640)=""/171, 0xab}], 0xa, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0x10, 0xffff}}}, 0x24}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r3, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@empty, @local, @void, {@canfd={0xd, {{0x2}, 0x8e, 0x2, 0x0, 0x0, "613cfc805098024d30192c69eb13ca3754021eb7c686636da3c4ef3568e2019a0f7c4185428d0d02b88894df36a19ee84bf21ac7010b3365323a6d9292c639ed"}}}}, &(0x7f0000000000)={0x1, 0x1, [0x3e9, 0xcc7, 0x281, 0x148]}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$kcm(r4, &(0x7f0000002ac0)={&(0x7f00000002c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000004c0)="38fb6a541c08ad0ee0aa12fb5dd39b106ec56890a53771916eb21f2eea74e849bdae784564b336f263b4f26916fb6ce1c2d01e3951ca694ac1e12696b1aa492eaef90c8ae715086766ee07e8b44b", 0x4e}], 0x1, &(0x7f0000002800)=[{0x98, 0x3a, 0x3, "12ab044be499c71d5e1e00a19bb1a2448844eb1fe844f26e46d81abb8e4c5c2f077122bc4199c284dd0a8d6f72710de862db741625cad9d3eebd72be6bd1fc6ba62ab7664c53d65e77b4a327a6ea87318a74ce016549ced30a30003583c8d1c49b06558140ad66504e32888b5ade3586fdeb2f4895281a4b4dd4796f2e7093544d"}, {0x110, 0xf969a108835a2605, 0xdbb, "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"}, {0x60, 0x10f, 0x0, "c4e5fa62527b8d1962529be1aa1f82ec79b36e3dff60ab8986ca4bd1380e23d9426bad62002dcf044de71fe4ecb5f947180d33ad8ff10d8cedfb4bea454be0ab34fab6446c04050f50225060c3"}, {0x90, 0x109, 0x0, "1d3cb834ea320d9b619fc0331d909a8d3383c25143ba55055235414de5701ca4c046d0822834590e5ab2c6fe278e8811369de76139c8246824b97c934f342e0b662553f8440e56431d62b34a2b576b795b00c1468bd949d93d0c6c6a187b24ea0cd3a3fb74ef8558472b1cfcbd046efc9ab66886853b89290b5d8ed78dbcb90c"}], 0x298}, 0x48005) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000400000280600fe880000000000000000000000000101fe801c000000000000000000000000aa4e240080", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000003907800001312d4c466b340e28b05c93a0725282307180000"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800090000000000080008f2ffffffff130001"], 0x64}}, 0x4000) 2.782946894s ago: executing program 0 (id=2180): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) listen(r5, 0x100101) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}}, 0x0) (async) r8 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0xe8) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x30000000}, 0x811) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 2.674406519s ago: executing program 1 (id=2181): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 2.615902895s ago: executing program 0 (id=2182): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x7, 0xfffffffffffffffd, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630121000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 2.371161094s ago: executing program 0 (id=2183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b9380cc0767909000000000000000000950200000e918618db562e08550cf4d46f39befdac983d06bc9d128c6561cc9882aabbdb4fcf453df8f9dda80805a8386cfae150ed45f6d011b228f579295ded4b6208f2c9ba282401097540df381fc13d07b24f6d3818299e76958ad7545a86f361f4b2e77e47d430c4344581e3cc868cb9e7d18942760d60f034112cd2afd14aec023935cbc9229aaba32ca4ec697e7828bf4822a78cacd1ebb177c8b7d2852b748f23174ecbb5e6"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.320508047s ago: executing program 1 (id=2184): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x11e, 0x1, &(0x7f0000000100)=@ccm_128={{}, "00000100000100", "2742cd9e1a7dee0a5709ec9c6e67af34", "2a715cd7", "bc0876e56d217c57"}, 0x28) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x98) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) 2.261961505s ago: executing program 0 (id=2185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xf909}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061135e0000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x3, 'team0\x00', {0x4a}, 0x8}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.12711015s ago: executing program 1 (id=2186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) 2.071028835s ago: executing program 0 (id=2187): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "14322ea682cbc8329b7329da4035c420b0fbabebb1a74f522d460495b2bb4f95b5e808a07fd1c7e99c936d5139ab642dfc6e13fa610ff2f0e31c62faab7147876f9fbb9ef32253a0b6ddca5ad7dc407172dd9c018767e97d0dd319b78f75d21802eff51f1ef9303d82d6a2b563c501ad69af9eff2fb053ec0767a7b6cf492323e2313f5646ee4770509f069414be844e783766bba7b8d400bc24c07bf2c3d5080af1256b645a170bd68fb19d32726083d7581f2ff407ef5b8513c9140aef6a3bee99ac11e5717f29536d1d92c4c30e97506b84b21338b1f9e6e1db27fb3cf2a93bd0ca45236fddd8ca01cb99b39b9bdc1324dad0516513a63867559662a6e325"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xfffff7ce}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r14, @ANYBLOB="60a402000800000036001a801800058014000492080002000c000000080056107159cd8eda7990461ebf775f1ecc0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r16 = socket(0x2a, 0x2, 0x0) getsockname$packet(r16, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r17, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xe}}]}}]}, 0x40}}, 0x20004084) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="08002cbd7000fbdbdf25170000001c000180080003000400000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="5400018008000100", @ANYRES32=r11, @ANYBLOB="1400020074756e6c30000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="1400020070696d36726567300000000000000000080003000100000008000100", @ANYRES32=r17, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x240080c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) 1.93457268s ago: executing program 1 (id=2188): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r1, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000011c0)=0x1c) (async) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001200)={0x7, [0x0, 0x8, 0x6, 0x2, 0xfff8, 0x44b5, 0x6]}, 0x12) (async) r2 = socket$caif_stream(0x25, 0x1, 0x3) sendmsg$inet(r2, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x4000095) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8d4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 1.926258533s ago: executing program 3 (id=849): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x6}, @fwd={0x6}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f00000001c0)=""/140, 0x3c, 0x8c, 0x0, 0x1, 0x10000, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) pipe(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r5, r6]}}], 0x20, 0x840}, 0x840) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r18, @ANYBLOB="080004000001"], 0x44}}, 0x0) 125.163359ms ago: executing program 0 (id=2189): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xd5, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex=r1, r0, 0x1f, 0x2008, 0x0, @value=r2}, 0x20) (async) preadv(r0, &(0x7f00000003c0), 0x0, 0x1, 0xc00) (async) read(r2, &(0x7f0000000400)=""/76, 0x4c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0xfc, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async, rerun: 64) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000780)) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async, rerun: 64) socketpair(0x2d, 0x1b1988a9de19295b, 0x3, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) getsockname$qrtr(r5, &(0x7f0000000840), &(0x7f0000000880)=0xc) (async) r6 = accept4(r4, &(0x7f00000008c0)=@x25, &(0x7f0000000940)=0x80, 0x80800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x0, 0x204, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb, 0x54}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) socketpair(0x1, 0x3, 0x6, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b00)={0x20c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x1b0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x130, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa34e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x39a6c04b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff014}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4d3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbf7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9c0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff524}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d737cb7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) (async) socket$inet6(0xa, 0x5, 0x800) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) (async) socket$netlink(0x10, 0x3, 0xf) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000e40)={0x0, 0x1000, "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"}, &(0x7f0000001e80)=0x1008) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000001ec0)=@assoc_value={r9, 0x4e800}, &(0x7f0000001f00)=0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002040)={@cgroup=r3, 0x1e, 0x0, 0x7, &(0x7f0000001f40)=[0x0], 0x1, 0x0, &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001fc0)=[0x0], &(0x7f0000002000)=[0x0]}, 0x40) getsockopt$netlink(r6, 0x10e, 0x4, &(0x7f0000002080)=""/204, &(0x7f0000002180)=0xcc) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2002c000}, 0x0) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002300), r6) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000002440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0x94, r11, 0x10, 0x70bd2a, 0xca0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x7f, 0xa8, @random="2b78138e903c077b84a5d908b00dd22a92a12ab16b112e53bc33a5bea8478e13166d7ae726c53eef9a266e962e89924b88f093a76f64875dd2f896c1df5b5b546c9f1451c60db67761f8ddbabacb00483716879486fa6494977fb73e69b5e4dba72c4516e21db48bce08aa074d3a15b9eb314109d57ad6fc1659bf"}]}, 0x94}, 0x1, 0x0, 0x0, 0x40001}, 0xc040) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x1d}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc1}, 0x4800) 121.920555ms ago: executing program 1 (id=2190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000640)={0x0, 0x5d, &(0x7f00000000c0)={&(0x7f0000000680)={0x3c, r2, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 5 (id=674): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2, 0x0, 0x0, @void, @value}, 0x1a) sendto$inet6(r0, &(0x7f0000000140)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_emit_ethernet(0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000088a83e00810023008848e9401c9446478b7ef241c4bc4feda1e9caeba045759cadafff525e82de588bf46c51173bf432cd20eba0abb64237529656c65630ebd49561f32e8feffca55f347fa2dd10547adf4da5fa00a09935804fd8440998c9b9a7fb39c3a88c3803ffe57252a261ff7b233816deb153356a"], 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x8) kernel console output (not intermixed with test programs): red disabled state [ 257.213916][ T35] bridge_slave_0: left allmulticast mode [ 257.220731][ T35] bridge_slave_0: left promiscuous mode [ 257.227497][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.641570][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.652307][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.662502][ T35] bond0 (unregistering): Released all slaves [ 257.679450][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.686564][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.704572][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.711766][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.019110][T12979] __nla_validate_parse: 30 callbacks suppressed [ 258.019130][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 258.198618][ T5838] Bluetooth: hci3: command tx timeout [ 258.472066][T12778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.645857][T12778] veth0_vlan: entered promiscuous mode [ 258.728740][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1649'. [ 258.749507][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 258.761143][ T35] hsr_slave_0: left promiscuous mode [ 258.767635][T13006] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1649'. [ 258.768423][ T35] hsr_slave_1: left promiscuous mode [ 258.799073][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.806681][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.833107][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.855812][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.894522][ T35] veth1_macvtap: left promiscuous mode [ 258.900150][ T35] veth0_macvtap: left promiscuous mode [ 258.905781][ T35] veth1_vlan: left promiscuous mode [ 258.911370][ T35] veth0_vlan: left promiscuous mode [ 259.080296][ T5838] Bluetooth: hci2: command tx timeout [ 259.423240][ T35] team0 (unregistering): Port device team_slave_1 removed [ 259.470855][ T35] team0 (unregistering): Port device team_slave_0 removed [ 259.920976][T13015] macsec0: entered promiscuous mode [ 259.946643][T13016] macsec0: left promiscuous mode [ 260.003022][T12778] veth1_vlan: entered promiscuous mode [ 260.047577][T12778] veth0_macvtap: entered promiscuous mode [ 260.105789][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 260.118576][T12806] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 260.161297][T12806] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 260.195205][T12778] veth1_macvtap: entered promiscuous mode [ 260.270415][T12806] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 260.279731][ T5838] Bluetooth: hci3: command tx timeout [ 260.305186][T12806] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.432467][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 260.471560][T12778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.516094][T12778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.631848][T12778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.641333][T12778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.660769][T12778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.674994][T12778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.713188][T13050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1659'. [ 260.722401][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1659'. [ 260.724603][T12806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.740228][T13050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1659'. [ 260.753284][T13051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1661'. [ 260.821977][T12806] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.863851][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.871042][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.928139][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.935281][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.011244][T13063] x_tables: duplicate underflow at hook 3 [ 261.054908][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.071000][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.143377][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.173079][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.397303][T13081] nbd: must specify a size in bytes for the device [ 261.597330][T13090] sctp: [Deprecated]: syz.1.1674 (pid 13090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.597330][T13090] Use struct sctp_sack_info instead [ 261.647901][T12806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.663213][T13090] sctp: [Deprecated]: syz.1.1674 (pid 13090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.663213][T13090] Use struct sctp_sack_info instead [ 262.027983][T13103] lo speed is unknown, defaulting to 1000 [ 262.050065][T13103] lo speed is unknown, defaulting to 1000 [ 262.062572][T13111] validate_nla: 26 callbacks suppressed [ 262.062593][T13111] netlink: 'syz.0.1678': attribute type 10 has an invalid length. [ 262.197127][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.238094][T13120] TCP: TCP_TX_DELAY enabled [ 262.244599][T13120] sctp: [Deprecated]: syz.2.1679 (pid 13120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.244599][T13120] Use struct sctp_sack_info instead [ 262.278817][T13103] wlan0 speed is unknown, defaulting to 1000 [ 262.304999][T13111] syz_tun: entered promiscuous mode [ 262.321530][T13111] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 262.382222][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.491039][T12806] veth0_vlan: entered promiscuous mode [ 262.525619][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.544303][T12806] veth1_vlan: entered promiscuous mode [ 262.586099][T12806] veth0_macvtap: entered promiscuous mode [ 262.640205][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.672570][T12806] veth1_macvtap: entered promiscuous mode [ 262.696198][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.707904][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.725017][T12806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.745419][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.758259][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.773890][T12806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.795707][T12806] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.805186][T12806] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.814731][T12806] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.823587][T12806] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.919218][ T66] bridge_slave_1: left allmulticast mode [ 262.925330][ T66] bridge_slave_1: left promiscuous mode [ 262.931790][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.942295][ T66] bridge_slave_0: left allmulticast mode [ 262.948143][ T66] bridge_slave_0: left promiscuous mode [ 262.963974][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.459082][T13128] netlink: 'syz.0.1680': attribute type 1 has an invalid length. [ 263.478622][T13128] __nla_validate_parse: 14 callbacks suppressed [ 263.478640][T13128] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1680'. [ 263.509089][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.551163][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.564597][ T66] bond0 (unregistering): Released all slaves [ 263.596406][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.628673][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.684541][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.702983][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.756465][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.773757][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.789053][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.800791][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.810019][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 263.813782][T13139] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1685'. [ 263.821932][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.834400][T13143] netlink: 'syz.1.1686': attribute type 21 has an invalid length. [ 263.846689][T13143] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1686'. [ 263.923152][T13140] lo speed is unknown, defaulting to 1000 [ 263.938283][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 264.027195][T13140] lo speed is unknown, defaulting to 1000 [ 264.038137][T13140] wlan0 speed is unknown, defaulting to 1000 [ 264.511914][ T66] hsr_slave_0: left promiscuous mode [ 264.517828][ T66] hsr_slave_1: left promiscuous mode [ 264.528607][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1692'. [ 264.539041][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.547458][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.558246][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.566156][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.619761][ T66] veth1_macvtap: left promiscuous mode [ 264.625474][ T66] veth0_macvtap: left promiscuous mode [ 264.631367][ T66] veth1_vlan: left promiscuous mode [ 264.636705][ T66] veth0_vlan: left promiscuous mode [ 265.114261][ T66] team0 (unregistering): Port device team_slave_1 removed [ 265.166148][ T66] team0 (unregistering): Port device team_slave_0 removed [ 265.741802][T13140] chnl_net:caif_netlink_parms(): no params data found [ 265.861458][T13182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1695'. [ 265.881915][ T5838] Bluetooth: hci2: command tx timeout [ 265.975327][T13140] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.006634][T13140] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.021401][T13140] bridge_slave_0: entered allmulticast mode [ 266.063291][T13140] bridge_slave_0: entered promiscuous mode [ 266.079284][T13140] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.096778][T13140] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.107032][T13140] bridge_slave_1: entered allmulticast mode [ 266.125270][T13140] bridge_slave_1: entered promiscuous mode [ 266.318287][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.320024][T13140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.343662][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.354273][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.366242][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.368035][T13140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.387365][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 266.406050][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.594225][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.618800][T13207] lo speed is unknown, defaulting to 1000 [ 266.639555][T13140] team0: Port device team_slave_0 added [ 266.645959][T13214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'. [ 266.661067][T13202] lo speed is unknown, defaulting to 1000 [ 266.666951][T13207] lo speed is unknown, defaulting to 1000 [ 266.676478][T13140] team0: Port device team_slave_1 added [ 266.684750][T13213] netlink: 'syz.0.1703': attribute type 8 has an invalid length. [ 266.744691][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.773380][T13207] wlan0 speed is unknown, defaulting to 1000 [ 266.779722][T13202] lo speed is unknown, defaulting to 1000 [ 266.864093][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.903785][T13140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.913404][T13140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.949754][T13140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.974169][T13211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1702'. [ 266.995084][T13220] lo speed is unknown, defaulting to 1000 [ 267.040421][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.061964][T13140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.074705][T13140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.120233][T13140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.175171][T13202] wlan0 speed is unknown, defaulting to 1000 [ 267.198506][T13220] lo speed is unknown, defaulting to 1000 [ 267.299819][T13217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1704'. [ 267.344222][T13229] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1706'. [ 267.349076][T13140] hsr_slave_0: entered promiscuous mode [ 267.360301][T13140] hsr_slave_1: entered promiscuous mode [ 267.366516][T13140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.389002][T13140] Cannot create hsr debugfs directory [ 267.406127][T13220] wlan0 speed is unknown, defaulting to 1000 [ 267.523881][T13231] netlink: 'syz.0.1707': attribute type 10 has an invalid length. [ 267.586026][T13231] hsr0: entered promiscuous mode [ 267.593755][T13231] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 267.604159][T13231] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 267.620927][T13231] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 267.706549][ T52] bridge_slave_1: left allmulticast mode [ 267.717623][ T52] bridge_slave_1: left promiscuous mode [ 267.723686][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.723688][T13241] netlink: 'syz.0.1710': attribute type 8 has an invalid length. [ 267.743800][ T52] bridge_slave_0: left allmulticast mode [ 267.749977][ T52] bridge_slave_0: left promiscuous mode [ 267.755670][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.960029][ T5838] Bluetooth: hci2: command tx timeout [ 268.162790][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.174247][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.187246][ T52] bond0 (unregistering): Released all slaves [ 268.384048][T13253] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 268.438749][ T5838] Bluetooth: hci3: command tx timeout [ 268.594369][T13262] __nla_validate_parse: 2 callbacks suppressed [ 268.594390][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 268.708663][T13202] chnl_net:caif_netlink_parms(): no params data found [ 268.912030][ T52] hsr_slave_0: left promiscuous mode [ 268.939118][ T52] hsr_slave_1: left promiscuous mode [ 268.955256][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.978956][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.989716][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.004267][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.027108][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'. [ 269.036722][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1718'. [ 269.037154][ T52] veth1_macvtap: left promiscuous mode [ 269.057078][ T52] veth0_macvtap: left promiscuous mode [ 269.059605][T13277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1718'. [ 269.063035][ T52] veth1_vlan: left promiscuous mode [ 269.085040][ T52] veth0_vlan: left promiscuous mode [ 269.176550][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1719'. [ 269.594712][ T52] team0 (unregistering): Port device team_slave_1 removed [ 269.643058][ T52] team0 (unregistering): Port device team_slave_0 removed [ 270.041934][ T5838] Bluetooth: hci2: command tx timeout [ 270.224681][T13202] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.258563][T13202] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.271226][T13202] bridge_slave_0: entered allmulticast mode [ 270.282529][T13202] bridge_slave_0: entered promiscuous mode [ 270.314909][T13202] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.348250][T13202] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.356693][T13202] bridge_slave_1: entered allmulticast mode [ 270.376029][T13202] bridge_slave_1: entered promiscuous mode [ 270.478893][T13202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.519748][ T5838] Bluetooth: hci3: command tx timeout [ 270.534677][T13202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.640594][T13202] team0: Port device team_slave_0 added [ 270.647909][T13140] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.663420][T13302] netlink: 'syz.1.1727': attribute type 10 has an invalid length. [ 270.664194][T13202] team0: Port device team_slave_1 added [ 270.671632][T13302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1727'. [ 270.695754][T13140] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.714885][T13300] vxcan2: entered allmulticast mode [ 270.739209][T13202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.756369][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.799637][T13202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.827713][T13140] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.835589][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'. [ 270.862796][T13140] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.926786][T13202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.934098][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.971606][T13202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.138045][T13202] hsr_slave_0: entered promiscuous mode [ 271.151451][T13202] hsr_slave_1: entered promiscuous mode [ 271.242589][T13329] sock: sock_timestamping_bind_phc: sock not bind to device [ 271.261395][T13326] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 271.278572][T13326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.460468][T13140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.525208][T13140] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.572226][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.579444][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.600299][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.607485][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.674889][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 271.684086][T13344] openvswitch: netlink: Flow actions attr not present in new flow. [ 271.910260][T13202] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.930050][T13202] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.951085][T13202] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.980181][T13202] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.030799][T13140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.119834][ T5838] Bluetooth: hci2: command tx timeout [ 272.155967][T13140] veth0_vlan: entered promiscuous mode [ 272.190669][T13140] veth1_vlan: entered promiscuous mode [ 272.239453][T13202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.253889][T13368] IPVS: length: 206 != 24 [ 272.278164][T13202] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.294265][T13140] veth0_macvtap: entered promiscuous mode [ 272.310854][T13140] veth1_macvtap: entered promiscuous mode [ 272.329702][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.336881][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.373110][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.380307][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.405061][T13140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.447535][T13140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.464699][T13140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.475966][T13140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.498599][T13140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.508533][T13140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.598433][ T5838] Bluetooth: hci3: command tx timeout [ 272.664850][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.694764][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.742980][T13202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.766089][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.788842][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.946123][T13395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1750'. [ 273.145985][T13202] veth0_vlan: entered promiscuous mode [ 273.183768][T13202] veth1_vlan: entered promiscuous mode [ 273.247392][T13202] veth0_macvtap: entered promiscuous mode [ 273.266486][T13202] veth1_macvtap: entered promiscuous mode [ 273.296514][T13202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.307573][T13202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.325350][T13202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.355725][T13408] netlink: 'syz.1.1755': attribute type 30 has an invalid length. [ 273.356239][T13202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.391635][T13202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.404663][T13202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.459893][T13202] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.491889][T13202] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.509709][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 273.527267][T13202] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.542937][T13202] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.643022][T13424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1761'. [ 273.716866][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.732641][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.746212][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 273.780338][T13430] netlink: 'syz.0.1762': attribute type 1 has an invalid length. [ 273.796377][T13430] netlink: 'syz.0.1762': attribute type 1 has an invalid length. [ 273.823881][T13430] netlink: 'syz.0.1762': attribute type 10 has an invalid length. [ 273.889273][T13435] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1762'. [ 273.905199][T13430] veth0_macvtap: left promiscuous mode [ 273.978215][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.030193][ T4891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.038108][ T4891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.101717][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.330614][T13453] netlink: 4568 bytes leftover after parsing attributes in process `syz.0.1769'. [ 275.350296][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.360099][T13453] openvswitch: netlink: Flow key attr not present in new flow. [ 275.390841][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1767'. [ 275.520092][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.610917][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.620576][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.635619][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.643794][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.651894][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.661429][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.695855][T13460] lo speed is unknown, defaulting to 1000 [ 275.703511][T13460] lo speed is unknown, defaulting to 1000 [ 275.710152][T13460] wlan0 speed is unknown, defaulting to 1000 [ 275.785388][ T35] bridge_slave_1: left allmulticast mode [ 275.791151][ T35] bridge_slave_1: left promiscuous mode [ 275.796892][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.811930][ T35] bridge_slave_0: left allmulticast mode [ 275.817594][ T35] bridge_slave_0: left promiscuous mode [ 275.824507][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.161992][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.172632][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.184285][ T35] bond0 (unregistering): Released all slaves [ 276.310137][T13460] chnl_net:caif_netlink_parms(): no params data found [ 276.392084][T13460] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.400095][T13460] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.407273][T13460] bridge_slave_0: entered allmulticast mode [ 276.416553][T13460] bridge_slave_0: entered promiscuous mode [ 276.426715][T13460] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.442702][T13460] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.450265][T13460] bridge_slave_1: entered allmulticast mode [ 276.456875][T13460] bridge_slave_1: entered promiscuous mode [ 276.516924][T13460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.537900][T13460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.562533][ T35] hsr_slave_0: left promiscuous mode [ 276.568729][ T35] hsr_slave_1: left promiscuous mode [ 276.574458][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.582131][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.590254][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.597695][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.621629][ T35] veth1_macvtap: left promiscuous mode [ 276.627648][ T35] veth0_macvtap: left promiscuous mode [ 276.634020][ T35] veth1_vlan: left promiscuous mode [ 276.639410][ T35] veth0_vlan: left promiscuous mode [ 277.147495][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.171347][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.185014][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.194707][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.213067][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.220860][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.452391][ T35] team0 (unregistering): Port device team_slave_1 removed [ 277.524587][ T35] team0 (unregistering): Port device team_slave_0 removed [ 277.721993][ T5839] Bluetooth: hci2: command tx timeout [ 278.053191][T13460] team0: Port device team_slave_0 added [ 278.075497][T13483] lo speed is unknown, defaulting to 1000 [ 278.083794][T13460] team0: Port device team_slave_1 added [ 278.149846][T13483] lo speed is unknown, defaulting to 1000 [ 278.149877][T13502] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1776'. [ 278.188162][T13502] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1776'. [ 278.201995][T13460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.209178][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.249086][T13460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.270025][T13460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.292491][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.318890][T13460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.348495][T13483] wlan0 speed is unknown, defaulting to 1000 [ 278.449894][T13511] netlink: 'syz.2.1779': attribute type 21 has an invalid length. [ 278.479436][T13460] hsr_slave_0: entered promiscuous mode [ 278.486525][T13460] hsr_slave_1: entered promiscuous mode [ 278.509323][T13460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.528036][T13460] Cannot create hsr debugfs directory [ 278.546022][T13513] tipc: Enabling of bearer rejected, failed to enable media [ 278.574225][T13510] batadv_slave_1: default FDB implementation only supports local addresses [ 278.584043][T13517] x_tables: duplicate underflow at hook 3 [ 278.593480][T13518] x_tables: duplicate underflow at hook 3 [ 279.020995][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.249352][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.326991][ T5839] Bluetooth: hci3: command tx timeout [ 279.347459][T13538] lo speed is unknown, defaulting to 1000 [ 279.450438][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.512056][T13538] lo speed is unknown, defaulting to 1000 [ 279.536489][T13483] chnl_net:caif_netlink_parms(): no params data found [ 279.545029][T13543] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1788'. [ 279.612871][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.627871][T13538] wlan0 speed is unknown, defaulting to 1000 [ 279.798505][ T5839] Bluetooth: hci2: command tx timeout [ 279.874466][T13483] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.888479][T13483] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.898720][T13483] bridge_slave_0: entered allmulticast mode [ 279.916024][T13483] bridge_slave_0: entered promiscuous mode [ 279.956748][T13483] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.965726][T13483] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.976349][T13483] bridge_slave_1: entered allmulticast mode [ 279.983622][T13483] bridge_slave_1: entered promiscuous mode [ 280.044616][T13483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.069567][ T35] bridge_slave_1: left allmulticast mode [ 280.084528][ T35] bridge_slave_1: left promiscuous mode [ 280.091727][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.101656][ T35] bridge_slave_0: left allmulticast mode [ 280.107672][ T35] bridge_slave_0: left promiscuous mode [ 280.113785][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.470498][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.499694][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.514433][ T35] bond0 (unregistering): Released all slaves [ 280.535099][T13483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.546323][T13568] IPv6: sit1: Disabled Multicast RS [ 280.662287][T13570] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 280.693494][T13483] team0: Port device team_slave_0 added [ 280.704030][T13483] team0: Port device team_slave_1 added [ 280.782154][T13460] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.863682][T13460] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.904260][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1800'. [ 280.918131][T13483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.935769][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.977110][T13483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.010592][T13483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.017963][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.050272][T13483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.063460][T13460] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 281.098208][T13460] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 281.125786][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 281.216214][T13483] hsr_slave_0: entered promiscuous mode [ 281.243982][T13483] hsr_slave_1: entered promiscuous mode [ 281.293535][T13483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.302967][T13483] Cannot create hsr debugfs directory [ 281.322929][ T35] hsr_slave_0: left promiscuous mode [ 281.346201][ T35] hsr_slave_1: left promiscuous mode [ 281.352526][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.365741][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.373978][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.381993][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.405722][ T35] veth1_macvtap: left promiscuous mode [ 281.411538][ T35] veth0_macvtap: left promiscuous mode [ 281.415875][ T5839] Bluetooth: hci3: command tx timeout [ 281.417227][ T35] veth1_vlan: left promiscuous mode [ 281.427812][ T35] veth0_vlan: left promiscuous mode [ 281.878517][ T5839] Bluetooth: hci2: command tx timeout [ 281.920192][ T35] team0 (unregistering): Port device team_slave_1 removed [ 281.966039][ T35] team0 (unregistering): Port device team_slave_0 removed [ 282.742674][T13460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.751882][T13612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1807'. [ 282.791018][T13460] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.814705][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.821952][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.840146][T13615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1807'. [ 282.862725][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.869990][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.177018][T13629] bond0: (slave syz_tun): Releasing backup interface [ 283.211984][T13629] bond0: (slave bond4): Releasing backup interface [ 283.226270][T13629] bond6: (slave veth13): Releasing active interface [ 283.289021][T13483] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 283.304618][T13483] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 283.315913][T13483] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.335785][T13460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.347099][T13483] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.391323][T13640] netlink: 'syz.0.1814': attribute type 2 has an invalid length. [ 283.489428][ T5839] Bluetooth: hci3: command tx timeout [ 283.535340][T13483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.589901][T13483] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.600381][T13460] veth0_vlan: entered promiscuous mode [ 283.632770][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.639961][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.662412][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.669590][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.680078][T13460] veth1_vlan: entered promiscuous mode [ 283.760883][T13460] veth0_macvtap: entered promiscuous mode [ 283.793499][T13460] veth1_macvtap: entered promiscuous mode [ 283.824600][T13460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.855848][T13460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.873982][T13460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.886488][T13460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.896940][T13460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.908622][T13460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.921700][T13655] delete_channel: no stack [ 283.958518][ T5839] Bluetooth: hci2: command tx timeout [ 284.015921][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.033191][T13654] delete_channel: no stack [ 284.037819][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.103715][T13483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.120470][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.134298][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.186105][T13666] xt_CT: No such helper "snmp" [ 284.351576][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 284.557782][T13483] veth0_vlan: entered promiscuous mode [ 284.571443][T13682] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 284.578096][T13483] veth1_vlan: entered promiscuous mode [ 284.603188][T13684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1826'. [ 284.634798][T13483] veth0_macvtap: entered promiscuous mode [ 284.659628][T13689] FAULT_INJECTION: forcing a failure. [ 284.659628][T13689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.662430][T13483] veth1_macvtap: entered promiscuous mode [ 284.686657][T13689] CPU: 1 UID: 0 PID: 13689 Comm: syz.2.1827 Not tainted 6.14.0-rc1-syzkaller-00102-g9dfedb8dc78b #0 [ 284.686683][T13689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 284.686693][T13689] Call Trace: [ 284.686700][T13689] [ 284.686707][T13689] dump_stack_lvl+0x241/0x360 [ 284.686733][T13689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.686750][T13689] ? __pfx__printk+0x10/0x10 [ 284.686775][T13689] ? __pfx_lock_release+0x10/0x10 [ 284.686796][T13689] ? rcu_is_watching+0x15/0xb0 [ 284.686817][T13689] should_fail_ex+0x40a/0x550 [ 284.686839][T13689] _copy_from_user+0x2d/0xb0 [ 284.686867][T13689] hidp_sock_ioctl+0x277/0x870 [ 284.686886][T13689] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 284.686941][T13689] ? tomoyo_path_number_perm+0x6f9/0x860 [ 284.686959][T13689] ? __lock_acquire+0x1397/0x2100 [ 284.686979][T13689] ? tomoyo_path_number_perm+0x206/0x860 [ 284.687004][T13689] sock_do_ioctl+0x158/0x460 [ 284.687030][T13689] ? __pfx_sock_do_ioctl+0x10/0x10 [ 284.687063][T13689] sock_ioctl+0x626/0x8e0 [ 284.687084][T13689] ? __pfx_sock_ioctl+0x10/0x10 [ 284.687102][T13689] ? __fget_files+0x2a/0x410 [ 284.687122][T13689] ? __fget_files+0x2a/0x410 [ 284.687142][T13689] ? __pfx_sock_ioctl+0x10/0x10 [ 284.687160][T13689] __se_sys_ioctl+0xf5/0x170 [ 284.687182][T13689] do_syscall_64+0xf3/0x230 [ 284.687203][T13689] ? clear_bhb_loop+0x35/0x90 [ 284.687226][T13689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.687245][T13689] RIP: 0033:0x7fd2d7b8cde9 [ 284.687260][T13689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.687273][T13689] RSP: 002b:00007fd2d894e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.687291][T13689] RAX: ffffffffffffffda RBX: 00007fd2d7da5fa0 RCX: 00007fd2d7b8cde9 [ 284.687303][T13689] RDX: 0000400000000340 RSI: 00000000400448c8 RDI: 0000000000000007 [ 284.687314][T13689] RBP: 00007fd2d894e090 R08: 0000000000000000 R09: 0000000000000000 [ 284.687324][T13689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.687334][T13689] R13: 0000000000000000 R14: 00007fd2d7da5fa0 R15: 00007ffd86b73df8 [ 284.687359][T13689] [ 284.695806][T13483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.919160][T13483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.931614][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'. [ 284.937887][T13483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.951614][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'. [ 285.011243][T13483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.042765][T13483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.071646][T13483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.101630][T13483] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.128872][T13483] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.139296][T13705] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1829'. [ 285.158999][T13483] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.178001][T13483] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.256800][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.303047][T13692] tap0: tun_chr_ioctl cmd 2148553947 [ 285.312520][T13705] tap0: tun_chr_ioctl cmd 35108 [ 285.394759][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.403028][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.433370][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.443725][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.501623][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.034793][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.303719][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.400838][ T66] bridge_slave_1: left allmulticast mode [ 286.406526][ T66] bridge_slave_1: left promiscuous mode [ 286.413076][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.421736][ T66] bridge_slave_0: left allmulticast mode [ 286.427391][ T66] bridge_slave_0: left promiscuous mode [ 286.433285][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.617945][T13718] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1833'. [ 286.744471][T13721] netlink: 'syz.0.1832': attribute type 10 has an invalid length. [ 286.991292][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.010331][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.034848][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.060534][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.076281][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.083800][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.094129][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.105928][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.116593][ T66] bond0 (unregistering): Released all slaves [ 287.195553][T13727] lo speed is unknown, defaulting to 1000 [ 287.271639][T13727] lo speed is unknown, defaulting to 1000 [ 287.280132][T13727] wlan0 speed is unknown, defaulting to 1000 [ 287.489717][T13727] chnl_net:caif_netlink_parms(): no params data found [ 287.549498][ T66] hsr_slave_0: left promiscuous mode [ 287.556959][ T66] hsr_slave_1: left promiscuous mode [ 287.563327][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.570904][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.582009][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.589908][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.611683][ T66] veth1_macvtap: left promiscuous mode [ 287.617198][ T66] veth0_macvtap: left promiscuous mode [ 287.622850][ T66] veth1_vlan: left promiscuous mode [ 287.628084][ T66] veth0_vlan: left promiscuous mode [ 288.047658][ T66] team0 (unregistering): Port device team_slave_1 removed [ 288.093495][ T66] team0 (unregistering): Port device team_slave_0 removed [ 288.310443][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1836'. [ 288.334299][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1836'. [ 288.355652][T13734] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1836'. [ 288.661909][T13749] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1841'. [ 288.826821][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.843906][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.864463][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.887708][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.908813][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 288.916642][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.160847][ T5839] Bluetooth: hci2: command tx timeout [ 289.227685][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'. [ 289.266058][T13727] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.275129][T13727] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.299802][T13727] bridge_slave_0: entered allmulticast mode [ 289.324142][T13727] bridge_slave_0: entered promiscuous mode [ 289.336116][T13758] lo speed is unknown, defaulting to 1000 [ 289.344058][T13780] 8021q: VLANs not supported on lo [ 289.353793][T13727] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.376605][T13727] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.385090][T13727] bridge_slave_1: entered allmulticast mode [ 289.395106][T13727] bridge_slave_1: entered promiscuous mode [ 289.406840][T13758] lo speed is unknown, defaulting to 1000 [ 289.438678][T13758] wlan0 speed is unknown, defaulting to 1000 [ 289.514719][T13788] Bluetooth: MGMT ver 1.23 [ 289.548975][T13727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.595694][T13727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.717698][T13727] team0: Port device team_slave_0 added [ 289.756735][T13727] team0: Port device team_slave_1 added [ 289.871141][T13727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.885755][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.928555][T13727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.965339][T13727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.996126][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.029938][T13727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.056922][T13810] __nla_validate_parse: 5 callbacks suppressed [ 290.056942][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 290.072558][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1862'. [ 290.089962][T13810] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1862'. [ 290.165447][T13727] hsr_slave_0: entered promiscuous mode [ 290.176219][T13727] hsr_slave_1: entered promiscuous mode [ 290.264158][ T66] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.296964][T13823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1865'. [ 290.396001][ T66] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.534283][ T66] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.559961][T13832] FAULT_INJECTION: forcing a failure. [ 290.559961][T13832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.581969][T13758] chnl_net:caif_netlink_parms(): no params data found [ 290.594387][T13832] CPU: 1 UID: 0 PID: 13832 Comm: syz.1.1869 Not tainted 6.14.0-rc1-syzkaller-00102-g9dfedb8dc78b #0 [ 290.594415][T13832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 290.594425][T13832] Call Trace: [ 290.594430][T13832] [ 290.594437][T13832] dump_stack_lvl+0x241/0x360 [ 290.594464][T13832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.594481][T13832] ? __pfx__printk+0x10/0x10 [ 290.594507][T13832] ? __pfx_lock_release+0x10/0x10 [ 290.594529][T13832] ? __lock_acquire+0x1397/0x2100 [ 290.594556][T13832] should_fail_ex+0x40a/0x550 [ 290.594580][T13832] _copy_from_user+0x2d/0xb0 [ 290.594599][T13832] kstrtouint_from_user+0xc6/0x190 [ 290.594622][T13832] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 290.594645][T13832] ? __pfx_lock_acquire+0x10/0x10 [ 290.594675][T13832] proc_fail_nth_write+0xaa/0x2d0 [ 290.594699][T13832] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 290.594719][T13832] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.594748][T13832] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.594773][T13832] vfs_write+0x29f/0xd10 [ 290.594793][T13832] ? fdget_pos+0x254/0x320 [ 290.594808][T13832] ? __mutex_unlock_slowpath+0x227/0x800 [ 290.594833][T13832] ? __pfx_vfs_write+0x10/0x10 [ 290.594858][T13832] ? __fget_files+0x2a/0x410 [ 290.594877][T13832] ? __fget_files+0x395/0x410 [ 290.594892][T13832] ? __fget_files+0x2a/0x410 [ 290.594918][T13832] ksys_write+0x18f/0x2b0 [ 290.594940][T13832] ? __pfx_ksys_write+0x10/0x10 [ 290.594961][T13832] ? do_syscall_64+0x100/0x230 [ 290.594987][T13832] ? do_syscall_64+0xb6/0x230 [ 290.595011][T13832] do_syscall_64+0xf3/0x230 [ 290.595031][T13832] ? clear_bhb_loop+0x35/0x90 [ 290.595053][T13832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.595081][T13832] RIP: 0033:0x7f192db8b89f [ 290.595096][T13832] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 290.595108][T13832] RSP: 002b:00007f192ea6e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 290.595126][T13832] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f192db8b89f [ 290.595137][T13832] RDX: 0000000000000001 RSI: 00007f192ea6e0a0 RDI: 0000000000000006 [ 290.595148][T13832] RBP: 00007f192ea6e090 R08: 0000000000000000 R09: 0000000000000000 [ 290.595158][T13832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 290.595168][T13832] R13: 0000000000000000 R14: 00007f192dda5fa0 R15: 00007ffecbc3d028 [ 290.595195][T13832] [ 290.888851][T13833] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1870'. [ 290.951832][ T66] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.003556][ T5839] Bluetooth: hci3: command tx timeout [ 291.200412][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 291.223468][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'. [ 291.239046][ T5839] Bluetooth: hci2: command tx timeout [ 291.246717][T13849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1875'. [ 291.273184][T13758] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.286347][T13758] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.294314][T13758] bridge_slave_0: entered allmulticast mode [ 291.312298][T13758] bridge_slave_0: entered promiscuous mode [ 291.324898][T13758] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.335661][T13758] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.346054][T13758] bridge_slave_1: entered allmulticast mode [ 291.356850][T13758] bridge_slave_1: entered promiscuous mode [ 291.454369][T13857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1879'. [ 291.484880][T13758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.505071][T13758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.517528][T13860] netlink: 'syz.1.1879': attribute type 11 has an invalid length. [ 291.533249][ T66] bridge_slave_1: left allmulticast mode [ 291.548492][ T66] bridge_slave_1: left promiscuous mode [ 291.554384][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.565828][ T66] bridge_slave_0: left allmulticast mode [ 291.571990][ T66] bridge_slave_0: left promiscuous mode [ 291.577845][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.725414][T13864] netlink: 'syz.0.1880': attribute type 10 has an invalid length. [ 292.314711][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.334515][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.352597][ T66] bond0 (unregistering): Released all slaves [ 292.414744][T13862] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 292.482652][T13870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1882'. [ 292.580290][T13758] team0: Port device team_slave_0 added [ 292.676047][T13758] team0: Port device team_slave_1 added [ 292.702256][T13881] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 292.765501][T13758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.778050][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.810680][T13758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.868839][T13727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.897533][T13758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.923195][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.958889][T13758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.974405][T13727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.007749][T13727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 293.078854][ T5839] Bluetooth: hci3: command tx timeout [ 293.106885][T13727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 293.213972][ T66] hsr_slave_0: left promiscuous mode [ 293.228541][ T66] hsr_slave_1: left promiscuous mode [ 293.240245][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.252835][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.264443][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.280308][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.313158][ T66] veth1_macvtap: left promiscuous mode [ 293.319131][ T66] veth0_macvtap: left promiscuous mode [ 293.321424][ T5839] Bluetooth: hci2: command tx timeout [ 293.324890][ T66] veth1_vlan: left promiscuous mode [ 293.335820][ T66] veth0_vlan: left promiscuous mode [ 293.986929][ T66] team0 (unregistering): Port device team_slave_1 removed [ 294.076016][ T66] team0 (unregistering): Port device team_slave_0 removed [ 294.743979][T13758] hsr_slave_0: entered promiscuous mode [ 294.763973][T13758] hsr_slave_1: entered promiscuous mode [ 294.792825][T13758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.820267][T13758] Cannot create hsr debugfs directory [ 295.148543][T13727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.158980][ T5839] Bluetooth: hci3: command tx timeout [ 295.281342][T13727] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.392054][T13924] bond6 (unregistering): Released all slaves [ 295.398620][ T5839] Bluetooth: hci2: command tx timeout [ 295.498089][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.505292][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.540814][ T4891] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.548005][ T4891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.817842][T13939] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 295.843165][T13939] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 296.003887][T13727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.052427][T13946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.062288][T13758] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 296.092440][T13758] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 296.127739][T13758] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 296.160908][T13758] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 296.177074][T13727] veth0_vlan: entered promiscuous mode [ 296.216700][T13727] veth1_vlan: entered promiscuous mode [ 296.311297][T13958] __nla_validate_parse: 7 callbacks suppressed [ 296.311317][T13958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1908'. [ 296.330075][T13727] veth0_macvtap: entered promiscuous mode [ 296.354728][T13727] veth1_macvtap: entered promiscuous mode [ 296.386293][T13727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.463806][T13727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.477836][T13727] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.498654][T13968] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 296.523147][T13727] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.538345][T13727] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.547095][T13727] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.564693][T13968] veth1_macvtap: left promiscuous mode [ 296.625798][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 296.634984][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1913'. [ 296.659070][T13758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.746262][T13758] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.785077][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.792251][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.807071][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.820526][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.839546][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.846734][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.869342][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.878271][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.912885][T13758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.949595][T13758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.182869][T13758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.198204][T13999] xt_hashlimit: size too large, truncated to 1048576 [ 297.238711][ T5838] Bluetooth: hci3: command tx timeout [ 297.456737][T13758] veth0_vlan: entered promiscuous mode [ 297.497557][T13758] veth1_vlan: entered promiscuous mode [ 297.652645][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.726270][T13758] veth0_macvtap: entered promiscuous mode [ 297.744361][T13758] veth1_macvtap: entered promiscuous mode [ 297.774515][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.796719][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.815361][T13758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.836482][T13758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.852929][T13758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.865093][T13758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.883486][T13758] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.893305][T13758] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.902652][T13758] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.912366][T13758] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.999165][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.027903][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.035980][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.062189][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.071411][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.406342][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.674450][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.789921][ T1143] bridge_slave_1: left allmulticast mode [ 298.795627][ T1143] bridge_slave_1: left promiscuous mode [ 298.806475][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.816017][ T1143] bridge_slave_0: left allmulticast mode [ 298.826539][ T1143] bridge_slave_0: left promiscuous mode [ 298.833047][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.993141][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1921'. [ 299.000156][T14017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1922'. [ 299.252568][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.264072][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.274836][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.285333][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.295494][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.303013][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.443230][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.453944][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.464490][ T1143] bond0 (unregistering): Released all slaves [ 299.543076][T14023] lo speed is unknown, defaulting to 1000 [ 299.571294][T14023] lo speed is unknown, defaulting to 1000 [ 299.596982][T14023] wlan0 speed is unknown, defaulting to 1000 [ 299.807401][ T1143] hsr_slave_0: left promiscuous mode [ 299.813387][ T1143] hsr_slave_1: left promiscuous mode [ 299.823402][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.830964][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.841405][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.849059][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.870104][ T1143] veth1_macvtap: left promiscuous mode [ 299.875626][ T1143] veth0_macvtap: left promiscuous mode [ 299.881323][ T1143] veth1_vlan: left promiscuous mode [ 299.886576][ T1143] veth0_vlan: left promiscuous mode [ 300.273943][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 300.322426][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 300.537080][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1927'. [ 300.575803][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1927'. [ 300.757210][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.777058][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.786453][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.794763][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.804308][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 300.812954][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.038501][T14039] batadv_slave_0: entered promiscuous mode [ 301.044370][T14039] batadv_slave_0: entered allmulticast mode [ 301.118063][T14043] lo speed is unknown, defaulting to 1000 [ 301.135139][T14043] lo speed is unknown, defaulting to 1000 [ 301.143267][T14043] wlan0 speed is unknown, defaulting to 1000 [ 301.170707][T14023] chnl_net:caif_netlink_parms(): no params data found [ 301.339090][ T5838] Bluetooth: hci2: command tx timeout [ 301.431524][T14061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.511721][T14023] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.533811][T14023] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.554889][T14023] bridge_slave_0: entered allmulticast mode [ 301.574543][T14023] bridge_slave_0: entered promiscuous mode [ 301.595197][T14023] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.623233][T14023] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.635852][T14023] bridge_slave_1: entered allmulticast mode [ 301.649389][T14023] bridge_slave_1: entered promiscuous mode [ 301.710637][T14079] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1939'. [ 301.733238][T14023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.786262][T14023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.865948][T14023] team0: Port device team_slave_0 added [ 301.877083][T14023] team0: Port device team_slave_1 added [ 301.992937][ T1143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.132713][ T1143] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.149134][T14023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.170161][T14023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.170372][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 302.208024][T14023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.233251][T14107] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 302.250088][T14023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.257219][T14023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.287520][T14023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.318462][ T1143] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.348030][T14112] netlink: 'syz.2.1948': attribute type 12 has an invalid length. [ 302.356560][T14112] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1948'. [ 302.440685][ T1143] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.488843][T14023] hsr_slave_0: entered promiscuous mode [ 302.500614][T14023] hsr_slave_1: entered promiscuous mode [ 302.532060][T14043] chnl_net:caif_netlink_parms(): no params data found [ 302.829476][T14043] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.836628][T14043] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.845691][T14043] bridge_slave_0: entered allmulticast mode [ 302.853138][T14043] bridge_slave_0: entered promiscuous mode [ 302.874352][T14142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1954'. [ 302.915238][T14043] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.924200][T14043] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.931416][ T5838] Bluetooth: hci3: command tx timeout [ 302.938001][T14043] bridge_slave_1: entered allmulticast mode [ 302.945046][T14043] bridge_slave_1: entered promiscuous mode [ 302.951907][ T1143] bridge_slave_1: left allmulticast mode [ 302.957591][ T1143] bridge_slave_1: left promiscuous mode [ 302.977867][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.989079][ T1143] bridge_slave_0: left allmulticast mode [ 302.994773][ T1143] bridge_slave_0: left promiscuous mode [ 303.000660][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.399049][ T5838] Bluetooth: hci2: command tx timeout [ 303.461697][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.473265][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.485472][ T1143] bond0 (unregistering): Released all slaves [ 303.590289][T14043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.707594][T14043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.771173][T14043] team0: Port device team_slave_0 added [ 303.809089][T14043] team0: Port device team_slave_1 added [ 303.845713][T14160] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1963'. [ 303.922922][T14043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.939387][T14043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.008336][T14043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.055903][ T1143] hsr_slave_0: left promiscuous mode [ 304.062771][ T1143] hsr_slave_1: left promiscuous mode [ 304.068972][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.076561][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.084787][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.092462][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.144587][ T1143] veth1_macvtap: left promiscuous mode [ 304.152660][ T1143] veth0_macvtap: left promiscuous mode [ 304.163877][ T1143] veth1_vlan: left promiscuous mode [ 304.172039][ T1143] veth0_vlan: left promiscuous mode [ 304.557452][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'. [ 304.731566][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 304.745913][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 304.756228][T14190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1971'. [ 304.840286][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1972'. [ 305.001017][ T5838] Bluetooth: hci3: command tx timeout [ 305.001992][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 305.064778][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 305.481595][ T5838] Bluetooth: hci2: command tx timeout [ 305.512000][T14043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.519599][T14043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.546157][T14043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.591216][T14179] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 305.607807][T14187] dvmrp1: entered allmulticast mode [ 305.641380][T14043] hsr_slave_0: entered promiscuous mode [ 305.660255][T14043] hsr_slave_1: entered promiscuous mode [ 305.679094][T14043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.713906][T14043] Cannot create hsr debugfs directory [ 306.112937][T14023] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 306.145068][T14023] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 306.161199][T14023] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 306.201790][T14023] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.327559][T14233] lo speed is unknown, defaulting to 1000 [ 306.387359][T14233] lo speed is unknown, defaulting to 1000 [ 306.417189][T14233] wlan0 speed is unknown, defaulting to 1000 [ 306.493971][T14023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.576734][T14023] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.615404][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.622624][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.649802][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.656974][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.784192][T14043] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.830340][T14043] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.853701][T14043] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 306.890959][T14043] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 307.078587][ T5838] Bluetooth: hci3: command tx timeout [ 307.121463][T14261] __nla_validate_parse: 12 callbacks suppressed [ 307.121482][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 307.190825][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.199759][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.203236][T14233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1984'. [ 307.228259][T14043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.279645][T14023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.308226][T14043] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.380498][T14023] veth0_vlan: entered promiscuous mode [ 307.413286][T14023] veth1_vlan: entered promiscuous mode [ 307.464363][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 307.477990][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 307.487110][T14271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1995'. [ 307.529320][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.536440][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.559113][ T5838] Bluetooth: hci2: command tx timeout [ 307.667613][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.674817][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.708371][T14283] netlink: 'syz.0.2000': attribute type 21 has an invalid length. [ 307.716683][T14283] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2000'. [ 307.787114][T14023] veth0_macvtap: entered promiscuous mode [ 307.853280][T14023] veth1_macvtap: entered promiscuous mode [ 307.943496][T14023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.972007][T14023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.020916][T14023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.036292][T14023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.054636][T14023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.077373][T14023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.145712][T14307] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.216194][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.245113][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.316313][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.326764][T14043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.329398][T14320] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 308.360772][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.430896][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 308.509832][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 308.552499][T14325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2010'. [ 308.950450][T14043] veth0_vlan: entered promiscuous mode [ 308.997602][T14043] veth1_vlan: entered promiscuous mode [ 309.103307][T14043] veth0_macvtap: entered promiscuous mode [ 309.124529][T14043] veth1_macvtap: entered promiscuous mode [ 309.161680][ T5838] Bluetooth: hci3: command tx timeout [ 309.412733][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.436224][T14043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.447275][T14043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.459404][T14043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.471957][T14043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.485324][T14043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.496550][T14043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.510742][T14043] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.519913][T14043] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.528857][T14043] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.537588][T14043] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.605109][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.614776][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.634689][ T4891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.643086][ T4891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.974447][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.320008][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'. [ 310.342926][T14364] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 310.541429][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.565524][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.576178][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.584286][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.593965][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.607124][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 310.618548][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.637542][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.662041][T14370] lo speed is unknown, defaulting to 1000 [ 310.669552][T14370] lo speed is unknown, defaulting to 1000 [ 310.675866][T14370] wlan0 speed is unknown, defaulting to 1000 [ 310.744599][ T11] bridge_slave_1: left allmulticast mode [ 310.751858][ T11] bridge_slave_1: left promiscuous mode [ 310.757594][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.767387][ T11] bridge_slave_0: left allmulticast mode [ 310.776374][ T11] bridge_slave_0: left promiscuous mode [ 310.782165][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.097688][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.108168][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.118217][ T11] bond0 (unregistering): Released all slaves [ 311.261708][T14370] chnl_net:caif_netlink_parms(): no params data found [ 311.403325][T14370] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.426316][T14370] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.433751][T14370] bridge_slave_0: entered allmulticast mode [ 311.450436][T14370] bridge_slave_0: entered promiscuous mode [ 311.472638][ T11] hsr_slave_0: left promiscuous mode [ 311.483253][ T11] hsr_slave_1: left promiscuous mode [ 311.489625][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.497035][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.505165][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.512712][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.534452][ T11] veth1_macvtap: left promiscuous mode [ 311.540072][ T11] veth0_macvtap: left promiscuous mode [ 311.545858][ T11] veth1_vlan: left promiscuous mode [ 311.551256][ T11] veth0_vlan: left promiscuous mode [ 312.195693][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.217061][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.226246][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.246747][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.255607][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 312.263481][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.338153][ T11] team0 (unregistering): Port device team_slave_1 removed [ 312.353356][T14391] __nla_validate_parse: 3 callbacks suppressed [ 312.353374][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 312.369522][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'. [ 312.378611][T14391] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2023'. [ 312.414200][ T11] team0 (unregistering): Port device team_slave_0 removed [ 312.694174][ T5839] Bluetooth: hci2: command tx timeout [ 312.877059][T14370] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.888236][T14370] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.895533][T14370] bridge_slave_1: entered allmulticast mode [ 312.905232][T14370] bridge_slave_1: entered promiscuous mode [ 312.926406][T14387] macvtap1: entered promiscuous mode [ 312.936598][T14387] dummy0: entered promiscuous mode [ 312.944981][T14387] dummy0: left promiscuous mode [ 313.113922][T14370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.153223][T14370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.180204][T14388] lo speed is unknown, defaulting to 1000 [ 313.199456][T14388] lo speed is unknown, defaulting to 1000 [ 313.269470][T14388] wlan0 speed is unknown, defaulting to 1000 [ 313.350976][T14370] team0: Port device team_slave_0 added [ 313.374182][T14370] team0: Port device team_slave_1 added [ 313.525345][T14370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.551997][T14370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.581808][T14423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2033'. [ 313.597823][T14370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.610676][T14370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.617656][T14370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.630009][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2034'. [ 313.645210][T14370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.664769][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 313.680070][T14426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2034'. [ 313.694198][T14427] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 313.710270][T14427] syzkaller1: Refused to change device type [ 313.831251][T14433] netlink: 'syz.1.2036': attribute type 29 has an invalid length. [ 313.841865][T14370] hsr_slave_0: entered promiscuous mode [ 313.848612][T14370] hsr_slave_1: entered promiscuous mode [ 314.025183][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 314.067023][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.119386][T14451] netlink: 'syz.1.2041': attribute type 8 has an invalid length. [ 314.215692][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.362497][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.369324][ T5839] Bluetooth: hci3: command tx timeout [ 314.412443][T14388] chnl_net:caif_netlink_parms(): no params data found [ 314.482129][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 314.492797][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'. [ 314.595511][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.768824][ T5839] Bluetooth: hci2: command tx timeout [ 314.791716][T14388] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.814344][T14388] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.835882][T14388] bridge_slave_0: entered allmulticast mode [ 314.860127][T14388] bridge_slave_0: entered promiscuous mode [ 314.875746][T14388] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.886489][T14388] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.893997][T14388] bridge_slave_1: entered allmulticast mode [ 314.901244][T14388] bridge_slave_1: entered promiscuous mode [ 314.975798][T14388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.998218][T14388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.064193][T14497] netlink: 'syz.0.2056': attribute type 2 has an invalid length. [ 315.073979][ T11] bridge_slave_1: left allmulticast mode [ 315.092207][ T11] bridge_slave_1: left promiscuous mode [ 315.098013][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.160673][ T11] bridge_slave_0: left allmulticast mode [ 315.181451][ T11] bridge_slave_0: left promiscuous mode [ 315.187249][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.871897][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.890406][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.906439][ T11] bond0 (unregistering): Released all slaves [ 315.933866][T14388] team0: Port device team_slave_0 added [ 315.962349][T14527] bridge0: entered promiscuous mode [ 315.967689][T14527] bridge0: entered allmulticast mode [ 316.041254][T14527] team0: Port device bridge0 added [ 316.048178][T14388] team0: Port device team_slave_1 added [ 316.160768][T14388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.169471][T14388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.213553][T14388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.242742][T14388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.252484][T14388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.279734][T14388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.360802][T14370] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.439082][ T5839] Bluetooth: hci3: command tx timeout [ 316.508860][T14548] bridge0: port 1(vlan2) entered blocking state [ 316.532662][T14548] bridge0: port 1(vlan2) entered disabled state [ 316.539433][T14548] vlan2: entered allmulticast mode [ 316.546163][T14548] vlan2: left allmulticast mode [ 316.563766][T14370] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.582091][T14388] hsr_slave_0: entered promiscuous mode [ 316.589251][T14388] hsr_slave_1: entered promiscuous mode [ 316.595773][T14388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.604073][T14388] Cannot create hsr debugfs directory [ 316.613946][T14370] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.635541][T14370] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.838466][ T5839] Bluetooth: hci2: command tx timeout [ 316.880435][ T11] hsr_slave_0: left promiscuous mode [ 316.891535][ T11] hsr_slave_1: left promiscuous mode [ 316.903200][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.910997][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.919026][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.926587][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.948020][ T11] veth1_macvtap: left promiscuous mode [ 316.955574][ T11] veth0_macvtap: left promiscuous mode [ 316.961385][ T11] veth1_vlan: left promiscuous mode [ 316.966658][ T11] veth0_vlan: left promiscuous mode [ 317.384905][ T11] team0 (unregistering): Port device team_slave_1 removed [ 317.426807][ T11] team0 (unregistering): Port device team_slave_0 removed [ 317.571100][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.689473][T14582] sctp: [Deprecated]: syz.0.2082 (pid 14582) Use of int in max_burst socket option deprecated. [ 317.689473][T14582] Use struct sctp_assoc_value instead [ 318.072333][T14587] __nla_validate_parse: 12 callbacks suppressed [ 318.072352][T14587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2084'. [ 318.221452][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 318.252020][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 318.272344][T14595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2086'. [ 318.306077][T14370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.368056][T14370] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.404973][ T4891] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.412152][ T4891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.442350][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.449603][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.524263][ T5839] Bluetooth: hci3: command tx timeout [ 318.762058][T14388] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.786768][T14388] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.815534][T14388] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.846489][T14388] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.915031][T14370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.929763][ T5839] Bluetooth: hci2: command tx timeout [ 319.042267][T14627] netlink: 'syz.0.2092': attribute type 4 has an invalid length. [ 319.054009][T14370] veth0_vlan: entered promiscuous mode [ 319.066441][T14627] netlink: 'syz.0.2092': attribute type 4 has an invalid length. [ 319.082219][T14370] veth1_vlan: entered promiscuous mode [ 319.137393][T14388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.193333][T14370] veth0_macvtap: entered promiscuous mode [ 319.233979][T14388] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.268582][T14370] veth1_macvtap: entered promiscuous mode [ 319.295366][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.302581][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.326409][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.333606][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.386682][T14370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.426387][T14370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.449918][T14370] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.468613][T14370] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.477414][T14370] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.495640][T14370] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.549829][T14388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.595329][T14654] sctp: [Deprecated]: syz.1.2101 (pid 14654) Use of int in max_burst socket option. [ 319.595329][T14654] Use struct sctp_assoc_value instead [ 319.620924][T14657] delete_channel: no stack [ 319.633410][T14657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2102'. [ 319.756164][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.790886][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.823685][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.832370][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.872057][T14388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.023832][T14676] siw: device registration error -23 [ 320.049482][T14678] netlink: 'syz.0.2105': attribute type 2 has an invalid length. [ 320.061385][T14678] netlink: 'syz.0.2105': attribute type 9 has an invalid length. [ 320.069984][T14678] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2105'. [ 320.132023][T14388] veth0_vlan: entered promiscuous mode [ 320.151281][T14388] veth1_vlan: entered promiscuous mode [ 320.192758][T14388] veth0_macvtap: entered promiscuous mode [ 320.206112][T14388] veth1_macvtap: entered promiscuous mode [ 320.222209][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.235552][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.246985][T14388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.259285][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.270695][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.282135][T14388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.298564][T14388] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.307317][T14388] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.316322][T14388] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.325098][T14388] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.396230][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.406822][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.444230][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.453021][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.472399][T14687] xt_policy: output policy not valid in PREROUTING and INPUT [ 320.484873][T14687] xt_policy: output policy not valid in PREROUTING and INPUT [ 320.590558][T14692] openvswitch: netlink: nsh attribute has 65504 unknown bytes. [ 320.602463][T14692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.692992][T14694] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 320.708147][T14696] netlink: 'syz.2.2109': attribute type 1 has an invalid length. [ 320.893502][T14702] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 320.935692][T14702] No such timeout policy "syz0" [ 321.042783][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 321.052926][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 321.204155][ T770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.229546][T14719] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 321.759394][T14725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2118'. [ 321.803071][T14728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2119'. [ 321.947602][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.961272][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.976400][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.994703][ T770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.007252][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.016302][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 322.024260][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.057241][T14732] lo speed is unknown, defaulting to 1000 [ 322.064677][T14732] lo speed is unknown, defaulting to 1000 [ 322.071291][T14732] wlan0 speed is unknown, defaulting to 1000 [ 322.213813][T14732] chnl_net:caif_netlink_parms(): no params data found [ 322.255717][ T770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.310528][T14732] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.317708][T14732] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.325269][T14732] bridge_slave_0: entered allmulticast mode [ 322.333006][T14732] bridge_slave_0: entered promiscuous mode [ 322.355136][ T770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.369916][T14732] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.377089][T14732] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.384462][T14732] bridge_slave_1: entered allmulticast mode [ 322.393636][T14732] bridge_slave_1: entered promiscuous mode [ 322.422743][T14732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.434200][T14732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.471379][T14732] team0: Port device team_slave_0 added [ 322.485976][T14732] team0: Port device team_slave_1 added [ 322.524037][T14732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.535103][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.561933][T14732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.573325][ T770] bridge_slave_1: left allmulticast mode [ 322.579382][ T770] bridge_slave_1: left promiscuous mode [ 322.585165][ T770] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.599807][ T770] bridge_slave_0: left allmulticast mode [ 322.605940][ T770] bridge_slave_0: left promiscuous mode [ 322.617702][ T770] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.077496][ T770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.092729][ T770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.104023][ T770] bond0 (unregistering): Released all slaves [ 323.119512][T14732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.126506][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.174078][T14732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.276056][T14732] hsr_slave_0: entered promiscuous mode [ 323.283010][T14732] hsr_slave_1: entered promiscuous mode [ 323.293723][T14732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.301602][T14732] Cannot create hsr debugfs directory [ 323.410214][T14746] netlink: 'syz.2.2123': attribute type 13 has an invalid length. [ 323.637895][T14749] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2124'. [ 323.837419][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.847272][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.854550][ T770] hsr_slave_0: left promiscuous mode [ 323.865691][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.878101][ T770] hsr_slave_1: left promiscuous mode [ 323.884209][ T770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.893715][ T770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.901049][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.910145][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 323.918852][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.929604][ T770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.939809][ T770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.971068][ T770] veth1_macvtap: left promiscuous mode [ 323.976676][ T770] veth0_macvtap: left promiscuous mode [ 323.982556][ T770] veth1_vlan: left promiscuous mode [ 323.987867][ T770] veth0_vlan: left promiscuous mode [ 324.015511][T14769] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2129'. [ 324.030772][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2129'. [ 324.044017][T14769] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2129'. [ 324.126336][ T5838] Bluetooth: hci2: command tx timeout [ 324.465270][ T770] team0 (unregistering): Port device team_slave_1 removed [ 324.512925][ T770] team0 (unregistering): Port device team_slave_0 removed [ 325.063693][T14759] lo speed is unknown, defaulting to 1000 [ 325.145619][T14759] lo speed is unknown, defaulting to 1000 [ 325.172162][T14759] wlan0 speed is unknown, defaulting to 1000 [ 325.762984][T14759] chnl_net:caif_netlink_parms(): no params data found [ 325.781634][T14796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2140'. [ 325.968809][ T5843] Bluetooth: hci3: command tx timeout [ 325.979977][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.982414][ T770] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.002647][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.011933][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.023599][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.033014][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.041123][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.166056][ T770] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.190450][T14813] openvswitch: netlink: nsh attr 6564 is out of range max 3 [ 326.197814][T14813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.208581][ T5838] Bluetooth: hci2: command tx timeout [ 326.221613][T14759] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.233256][T14759] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.240784][T14759] bridge_slave_0: entered allmulticast mode [ 326.248904][T14759] bridge_slave_0: entered promiscuous mode [ 326.256763][T14732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.268025][T14732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.296360][ T770] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.312050][T14759] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.319458][T14759] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.326770][T14759] bridge_slave_1: entered allmulticast mode [ 326.334379][T14759] bridge_slave_1: entered promiscuous mode [ 326.366403][T14732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 326.402122][T14819] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 326.411518][T14819] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2147'. [ 326.414044][ T770] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.436528][T14759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.448553][T14732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 326.460179][T14818] delete_channel: no stack [ 326.460915][T14759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.477742][T14803] lo speed is unknown, defaulting to 1000 [ 326.520789][T14803] lo speed is unknown, defaulting to 1000 [ 326.527580][T14803] wlan0 speed is unknown, defaulting to 1000 [ 326.564508][T14759] team0: Port device team_slave_0 added [ 326.594321][T14759] team0: Port device team_slave_1 added [ 326.662252][T14759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.676895][T14759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.710035][T14759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.740418][T14759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.747432][T14759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.776235][T14759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.809556][T14827] openvswitch: netlink: Missing key (keys=40, expected=100) [ 326.856515][ T770] bridge_slave_1: left allmulticast mode [ 326.862606][ T770] bridge_slave_1: left promiscuous mode [ 326.868343][ T770] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.892657][ T770] bridge_slave_0: left allmulticast mode [ 326.899033][ T770] bridge_slave_0: left promiscuous mode [ 326.905032][ T770] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.222900][T14835] xt_hashlimit: size too large, truncated to 1048576 [ 327.327889][ T770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.341649][ T770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.352690][ T770] bond0 (unregistering): Released all slaves [ 327.500250][T14759] hsr_slave_0: entered promiscuous mode [ 327.506541][T14759] hsr_slave_1: entered promiscuous mode [ 327.541566][T14732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.867224][T14732] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.917294][T14803] chnl_net:caif_netlink_parms(): no params data found [ 327.962432][ T4891] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.969618][ T4891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.039752][ T5839] Bluetooth: hci3: command tx timeout [ 328.129006][ T5839] Bluetooth: hci1: command tx timeout [ 328.136723][T14869] netlink: 'syz.0.2160': attribute type 13 has an invalid length. [ 328.141556][T14870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2161'. [ 328.153756][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 328.163132][T14869] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2160'. [ 328.188369][ T770] hsr_slave_0: left promiscuous mode [ 328.199056][ T770] hsr_slave_1: left promiscuous mode [ 328.204968][ T770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.216027][ T770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.224415][ T770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.232035][ T770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.255362][ T770] veth1_macvtap: left promiscuous mode [ 328.261395][ T770] veth0_macvtap: left promiscuous mode [ 328.266965][ T770] veth1_vlan: left promiscuous mode [ 328.272384][ T770] veth0_vlan: left promiscuous mode [ 328.278567][ T5839] Bluetooth: hci2: command tx timeout [ 328.738255][ T770] team0 (unregistering): Port device team_slave_1 removed [ 328.793969][ T770] team0 (unregistering): Port device team_slave_0 removed [ 329.356187][T14869] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 329.383507][ T4891] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.390748][ T4891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.497171][T14879] nft_compat: unsupported protocol 0 [ 329.532330][T14879] openvswitch: netlink: Actions may not be safe on all matching packets [ 329.592779][T14803] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.656479][T14803] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.664361][T14803] bridge_slave_0: entered allmulticast mode [ 329.689640][T14803] bridge_slave_0: entered promiscuous mode [ 329.700878][T14803] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.708013][T14803] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.734261][T14803] bridge_slave_1: entered allmulticast mode [ 329.740924][T14803] bridge_slave_1: entered promiscuous mode [ 329.835285][T14803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.888608][T14803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.033495][T14803] team0: Port device team_slave_0 added [ 330.079768][T14803] team0: Port device team_slave_1 added [ 330.118574][ T5839] Bluetooth: hci3: command tx timeout [ 330.177161][T14803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.194701][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.200170][ T5839] Bluetooth: hci1: command 0x041b tx timeout [ 330.228669][T14803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.241511][T14803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.257750][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.284716][T14803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.296193][T14902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2170'. [ 330.305340][T14900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2170'. [ 330.306669][T14732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.333136][T14759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 330.352400][T14759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 330.359269][ T5838] Bluetooth: hci2: command tx timeout [ 330.374860][T14759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 330.428024][T14906] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2171'. [ 330.435189][T14759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 330.506333][T14803] hsr_slave_0: entered promiscuous mode [ 330.513069][T14803] hsr_slave_1: entered promiscuous mode [ 330.522944][T14803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.535986][T14803] Cannot create hsr debugfs directory [ 330.650166][T14732] veth0_vlan: entered promiscuous mode [ 330.707715][T14732] veth1_vlan: entered promiscuous mode [ 330.908727][T14732] veth0_macvtap: entered promiscuous mode [ 330.917621][T14732] veth1_macvtap: entered promiscuous mode [ 330.954123][T14759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.019568][T14759] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.040689][T14732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.071020][ T4891] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.078142][ T4891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.093408][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 331.135345][T14732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.155525][ T4891] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.162700][ T4891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.174129][T14732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.189248][T14732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.198004][T14732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.207156][T14732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.490562][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.524690][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.593795][ T4891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.602805][T14803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 331.615721][ T4891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.650883][T14803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 331.676525][T14803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 331.701273][T14803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 331.756175][T14759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.787830][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 331.915027][T14963] netlink: 'syz.1.2186': attribute type 21 has an invalid length. [ 331.925924][T14963] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2186'. [ 331.936738][T14966] netlink: 'syz.0.2187': attribute type 1 has an invalid length. [ 331.945685][T14964] netlink: 'syz.1.2186': attribute type 21 has an invalid length. [ 331.953854][T14964] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2186'. [ 331.984154][T14966] bond7: entered promiscuous mode [ 332.000703][T14966] 8021q: adding VLAN 0 to HW filter on device bond7 [ 332.089823][T14969] 8021q: adding VLAN 0 to HW filter on device bond8 [ 332.103124][T14969] bond7: (slave bond8): making interface the new active one [ 332.110826][T14969] bond8: entered promiscuous mode [ 332.116695][T14969] bond7: (slave bond8): Enslaving as an active interface with an up link [ 332.198035][ T1095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.208729][ T5838] Bluetooth: hci3: command tx timeout [ 332.284136][ T5838] Bluetooth: hci1: command 0x041b tx timeout [ 332.344376][ T1095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.363702][T14803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.391655][T14803] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.403803][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.410961][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.426029][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.433211][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.470588][ T1095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.498152][T14759] veth0_vlan: entered promiscuous mode [ 332.515299][T14759] veth1_vlan: entered promiscuous mode [ 332.536975][T14803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.548458][T14803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.582630][ T1095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.633992][T14759] veth0_macvtap: entered promiscuous mode [ 332.644712][T14759] veth1_macvtap: entered promiscuous mode [ 332.667752][T14759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.684751][T14759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.695997][T14759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.716929][T14759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.733750][T14759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.745670][T14759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.756632][T14759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.766724][T14759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.775633][T14759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.784540][T14759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.857637][T14803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.897213][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.897674][ T1095] bridge_slave_1: left allmulticast mode [ 332.908514][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.918125][ T1095] bridge_slave_1: left promiscuous mode [ 332.925115][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.934605][ T1095] bridge_slave_0: left allmulticast mode [ 332.940589][ T1095] bridge_slave_0: left promiscuous mode [ 332.946499][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.304123][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.314664][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.328070][ T1095] bond0 (unregistering): Released all slaves [ 333.374806][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.394054][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.436224][T14803] veth0_vlan: entered promiscuous mode [ 333.501000][T14803] veth1_vlan: entered promiscuous mode [ 333.581339][T14803] veth0_macvtap: entered promiscuous mode [ 333.613405][T14803] veth1_macvtap: entered promiscuous mode [ 333.627460][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.638079][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.651309][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.661933][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.673642][T14803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.696592][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.707429][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.717986][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.728990][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.740720][T14803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.755935][T14803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.769248][T14803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.778085][T14803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.786971][T14803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.993846][ T1095] hsr_slave_0: left promiscuous mode [ 334.030072][ T1095] hsr_slave_1: left promiscuous mode [ 334.049016][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.071899][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.100431][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.107915][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.194045][ T1095] veth1_macvtap: left promiscuous mode [ 334.208455][ T1095] veth0_macvtap: left promiscuous mode [ 334.214119][ T1095] veth1_vlan: left promiscuous mode [ 334.228472][ T1095] veth0_vlan: left promiscuous mode [ 334.295890][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.306361][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.323879][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.336221][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.349916][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.357418][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.369202][ T5843] Bluetooth: hci1: command 0x041b tx timeout [ 334.747017][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 334.791023][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 335.238703][ T11] wlan1: Trigger new scan to find an IBSS to join [ 335.286174][T14992] lo speed is unknown, defaulting to 1000 [ 335.316335][T14992] lo speed is unknown, defaulting to 1000 [ 335.322262][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.335173][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.342949][T14992] wlan0 speed is unknown, defaulting to 1000 [ 335.371411][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.380321][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.540670][T14803] ================================================================== [ 335.548782][T14803] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 335.556186][T14803] Write of size 8 at addr ffff8880292e55a0 by task syz-executor/14803 [ 335.564355][T14803] [ 335.566696][T14803] CPU: 0 UID: 0 PID: 14803 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00102-g9dfedb8dc78b #0 [ 335.566716][T14803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 335.566739][T14803] Call Trace: [ 335.566745][T14803] [ 335.566752][T14803] dump_stack_lvl+0x241/0x360 [ 335.566773][T14803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.566789][T14803] ? __pfx__printk+0x10/0x10 [ 335.566811][T14803] ? _printk+0xd5/0x120 [ 335.566833][T14803] ? __virt_addr_valid+0x183/0x530 [ 335.566855][T14803] ? __virt_addr_valid+0x183/0x530 [ 335.566877][T14803] print_report+0x169/0x550 [ 335.566901][T14803] ? __virt_addr_valid+0x183/0x530 [ 335.566922][T14803] ? __virt_addr_valid+0x183/0x530 [ 335.566942][T14803] ? __virt_addr_valid+0x45f/0x530 [ 335.566963][T14803] ? __phys_addr+0xba/0x170 [ 335.566984][T14803] ? sco_conn_put+0xad/0x210 [ 335.567001][T14803] kasan_report+0x143/0x180 [ 335.567024][T14803] ? sco_conn_put+0xad/0x210 [ 335.567044][T14803] sco_conn_put+0xad/0x210 [ 335.567059][T14803] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 335.567076][T14803] hci_conn_hash_flush+0x1be/0x350 [ 335.567110][T14803] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 335.567133][T14803] ? _raw_spin_unlock_irq+0x2e/0x50 [ 335.567152][T14803] ? drain_workqueue+0x2d3/0x3a0 [ 335.567172][T14803] ? hci_inquiry_cache_flush+0x181/0x220 [ 335.567192][T14803] ? hci_discovery_set_state+0x57/0x180 [ 335.567213][T14803] hci_dev_close_sync+0xa42/0x11c0 [ 335.567235][T14803] hci_unregister_dev+0x20b/0x510 [ 335.567254][T14803] vhci_release+0x80/0xd0 [ 335.567272][T14803] ? __pfx_vhci_release+0x10/0x10 [ 335.567290][T14803] __fput+0x3e9/0x9f0 [ 335.567312][T14803] task_work_run+0x24f/0x310 [ 335.567336][T14803] ? __pfx_task_work_run+0x10/0x10 [ 335.567357][T14803] ? do_exit+0xa25/0x28e0 [ 335.567377][T14803] ? do_exit+0xa25/0x28e0 [ 335.567398][T14803] do_exit+0xa2a/0x28e0 [ 335.567420][T14803] ? __pfx_do_exit+0x10/0x10 [ 335.567439][T14803] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 335.567461][T14803] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.567485][T14803] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.567502][T14803] ? lockdep_hardirqs_on+0x99/0x150 [ 335.567522][T14803] do_group_exit+0x207/0x2c0 [ 335.567544][T14803] __x64_sys_exit_group+0x3f/0x40 [ 335.567564][T14803] x64_sys_call+0x26a8/0x26b0 [ 335.567582][T14803] do_syscall_64+0xf3/0x230 [ 335.567603][T14803] ? clear_bhb_loop+0x35/0x90 [ 335.567625][T14803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.567646][T14803] RIP: 0033:0x7ff9c418cde9 [ 335.567660][T14803] Code: Unable to access opcode bytes at 0x7ff9c418cdbf. [ 335.567669][T14803] RSP: 002b:00007ffe81e92688 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 335.567688][T14803] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff9c418cde9 [ 335.567700][T14803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 335.567709][T14803] RBP: 00007ff9c41ed8d0 R08: 00007ffe81e90427 R09: 0000000000000003 [ 335.567720][T14803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.567730][T14803] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffe81e92840 [ 335.567749][T14803] [ 335.567756][T14803] [ 335.637476][T14992] chnl_net:caif_netlink_parms(): no params data found [ 335.638599][T14803] Allocated by task 14816: [ 335.638610][T14803] kasan_save_track+0x3f/0x80 [ 335.638633][T14803] __kasan_kmalloc+0x98/0xb0 [ 335.638650][T14803] __kmalloc_noprof+0x285/0x4c0 [ 335.638664][T14803] sk_prot_alloc+0xe0/0x210 [ 335.638678][T14803] sk_alloc+0x38/0x370 [ 335.638689][T14803] bt_sock_alloc+0x3c/0x340 [ 335.638705][T14803] sco_sock_create+0xbb/0x390 [ 335.638718][T14803] bt_sock_create+0x161/0x230 [ 335.638734][T14803] __sock_create+0x4c0/0xa30 [ 335.638752][T14803] __sys_socket+0x150/0x3c0 [ 335.638768][T14803] __x64_sys_socket+0x7a/0x90 [ 335.638785][T14803] do_syscall_64+0xf3/0x230 [ 335.638804][T14803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.638823][T14803] [ 335.638827][T14803] Freed by task 14817: [ 335.638835][T14803] kasan_save_track+0x3f/0x80 [ 335.638853][T14803] kasan_save_free_info+0x40/0x50 [ 335.638869][T14803] __kasan_slab_free+0x59/0x70 [ 335.638888][T14803] kfree+0x196/0x430 [ 335.638901][T14803] __sk_destruct+0x479/0x5f0 [ 335.638914][T14803] sco_sock_release+0x25e/0x320 [ 335.638926][T14803] sock_close+0xbc/0x240 [ 335.638942][T14803] __fput+0x3e9/0x9f0 [ 335.638957][T14803] task_work_run+0x24f/0x310 [ 335.638977][T14803] get_signal+0x15f7/0x1750 [ 335.638991][T14803] arch_do_signal_or_restart+0x96/0x860 [ 335.639005][T14803] syscall_exit_to_user_mode+0xce/0x340 [ 335.639023][T14803] do_syscall_64+0x100/0x230 [ 335.639040][T14803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.639058][T14803] [ 335.639063][T14803] The buggy address belongs to the object at ffff8880292e5000 [ 335.639063][T14803] which belongs to the cache kmalloc-2k of size 2048 [ 335.639084][T14803] The buggy address is located 1440 bytes inside of [ 335.639084][T14803] freed 2048-byte region [ffff8880292e5000, ffff8880292e5800) [ 335.639099][T14803] [ 335.639103][T14803] The buggy address belongs to the physical page: [ 335.639121][T14803] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x292e0 [ 335.639137][T14803] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 335.639151][T14803] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 335.639170][T14803] page_type: f5(slab) [ 335.639184][T14803] raw: 00fff00000000040 ffff88801ac42000 dead000000000100 dead000000000122 [ 335.639199][T14803] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 335.639213][T14803] head: 00fff00000000040 ffff88801ac42000 dead000000000100 dead000000000122 [ 335.639227][T14803] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 335.639240][T14803] head: 00fff00000000003 ffffea0000a4b801 ffffffffffffffff 0000000000000000 [ 335.639253][T14803] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 335.639260][T14803] page dumped because: kasan: bad access detected [ 335.639272][T14803] page_owner tracks the page as allocated [ 335.639279][T14803] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7773, tgid 7773 (syz-executor), ts 105704516606, free_ts 105691277071 [ 335.639304][T14803] post_alloc_hook+0x1f4/0x240 [ 335.639322][T14803] get_page_from_freelist+0x365c/0x37a0 [ 336.179057][T14803] __alloc_frozen_pages_noprof+0x292/0x710 [ 336.184874][T14803] alloc_pages_mpol+0x311/0x660 [ 336.189722][T14803] allocate_slab+0x8f/0x3a0 [ 336.194307][T14803] ___slab_alloc+0xc27/0x14a0 [ 336.198973][T14803] __slab_alloc+0x58/0xa0 [ 336.203294][T14803] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 336.209696][T14803] kmalloc_reserve+0x111/0x2a0 [ 336.214455][T14803] pskb_expand_head+0x1f0/0x1380 [ 336.219382][T14803] netlink_trim+0x1d6/0x2e0 [ 336.223879][T14803] netlink_broadcast_filtered+0x76/0x12a0 [ 336.229598][T14803] nlmsg_notify+0xfb/0x1c0 [ 336.234106][T14803] register_netdevice+0x178b/0x1b10 [ 336.239321][T14803] __ip_tunnel_create+0x2b4/0x380 [ 336.244350][T14803] ip_tunnel_init_net+0x21c/0x720 [ 336.249371][T14803] page last free pid 5199 tgid 5199 stack trace: [ 336.255686][T14803] free_frozen_pages+0xe0d/0x10e0 [ 336.260704][T14803] __put_partials+0x160/0x1c0 [ 336.265391][T14803] put_cpu_partial+0x17c/0x250 [ 336.270146][T14803] __slab_free+0x290/0x380 [ 336.274556][T14803] qlist_free_all+0x9a/0x140 [ 336.279140][T14803] kasan_quarantine_reduce+0x14f/0x170 [ 336.284593][T14803] __kasan_slab_alloc+0x23/0x80 [ 336.289440][T14803] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 336.295342][T14803] __alloc_skb+0x1c3/0x440 [ 336.299752][T14803] alloc_skb_with_frags+0xc3/0x820 [ 336.304852][T14803] sock_alloc_send_pskb+0x91a/0xa60 [ 336.310037][T14803] unix_dgram_sendmsg+0x5f1/0x1df0 [ 336.315146][T14803] __sock_sendmsg+0x221/0x270 [ 336.319813][T14803] __sys_sendto+0x363/0x4c0 [ 336.324311][T14803] __x64_sys_sendto+0xde/0x100 [ 336.329072][T14803] do_syscall_64+0xf3/0x230 [ 336.333574][T14803] [ 336.335883][T14803] Memory state around the buggy address: [ 336.341591][T14803] ffff8880292e5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.349642][T14803] ffff8880292e5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.357690][T14803] >ffff8880292e5580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.365734][T14803] ^ [ 336.370831][T14803] ffff8880292e5600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.378878][T14803] ffff8880292e5680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.386934][T14803] ================================================================== [ 336.427191][T14803] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 336.434437][T14803] CPU: 1 UID: 0 PID: 14803 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00102-g9dfedb8dc78b #0 [ 336.445390][T14803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 336.455465][T14803] Call Trace: [ 336.458770][T14803] [ 336.461712][T14803] dump_stack_lvl+0x241/0x360 [ 336.466408][T14803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.471624][T14803] ? __pfx__printk+0x10/0x10 [ 336.476237][T14803] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.482238][T14803] ? vscnprintf+0x5d/0x90 [ 336.486565][T14803] panic+0x349/0x880 [ 336.490552][T14803] ? check_panic_on_warn+0x21/0xb0 [ 336.495662][T14803] ? __pfx_panic+0x10/0x10 [ 336.500079][T14803] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 336.506071][T14803] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.512395][T14803] check_panic_on_warn+0x86/0xb0 [ 336.517328][T14803] ? sco_conn_put+0xad/0x210 [ 336.521927][T14803] end_report+0x77/0x160 [ 336.526171][T14803] kasan_report+0x154/0x180 [ 336.530675][T14803] ? sco_conn_put+0xad/0x210 [ 336.535258][T14803] sco_conn_put+0xad/0x210 [ 336.539663][T14803] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 336.544944][T14803] hci_conn_hash_flush+0x1be/0x350 [ 336.550055][T14803] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 336.555682][T14803] ? _raw_spin_unlock_irq+0x2e/0x50 [ 336.560872][T14803] ? drain_workqueue+0x2d3/0x3a0 [ 336.565804][T14803] ? hci_inquiry_cache_flush+0x181/0x220 [ 336.571432][T14803] ? hci_discovery_set_state+0x57/0x180 [ 336.576978][T14803] hci_dev_close_sync+0xa42/0x11c0 [ 336.582087][T14803] hci_unregister_dev+0x20b/0x510 [ 336.587107][T14803] vhci_release+0x80/0xd0 [ 336.591437][T14803] ? __pfx_vhci_release+0x10/0x10 [ 336.596452][T14803] __fput+0x3e9/0x9f0 [ 336.600432][T14803] task_work_run+0x24f/0x310 [ 336.605022][T14803] ? __pfx_task_work_run+0x10/0x10 [ 336.610142][T14803] ? do_exit+0xa25/0x28e0 [ 336.614487][T14803] ? do_exit+0xa25/0x28e0 [ 336.618822][T14803] do_exit+0xa2a/0x28e0 [ 336.622990][T14803] ? __pfx_do_exit+0x10/0x10 [ 336.627578][T14803] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.633559][T14803] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.639886][T14803] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.645080][T14803] ? lockdep_hardirqs_on+0x99/0x150 [ 336.650279][T14803] do_group_exit+0x207/0x2c0 [ 336.654875][T14803] __x64_sys_exit_group+0x3f/0x40 [ 336.659893][T14803] x64_sys_call+0x26a8/0x26b0 [ 336.664649][T14803] do_syscall_64+0xf3/0x230 [ 336.669155][T14803] ? clear_bhb_loop+0x35/0x90 [ 336.673826][T14803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.679712][T14803] RIP: 0033:0x7ff9c418cde9 [ 336.684122][T14803] Code: Unable to access opcode bytes at 0x7ff9c418cdbf. [ 336.691130][T14803] RSP: 002b:00007ffe81e92688 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 336.699543][T14803] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff9c418cde9 [ 336.707505][T14803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 336.715467][T14803] RBP: 00007ff9c41ed8d0 R08: 00007ffe81e90427 R09: 0000000000000003 [ 336.723431][T14803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.731399][T14803] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffe81e92840 [ 336.739370][T14803] [ 336.742624][T14803] Kernel Offset: disabled [ 336.747132][T14803] Rebooting in 86400 seconds..