last executing test programs: 21.966769823s ago: executing program 4 (id=1760): unshare(0x24020400) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @private}}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0xfd92, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100b11b700000feffff1a00000018000180140002"], 0x2c}}, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r4, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8000000060a09040000000000000000020000010900020073797a32000000000900010073797a30000000002400048020000180080001006c6f670014000280070002405c270000060001400000000040000480100001800c0001006e6f747261636b002c0001800b0001006e756d67656e00001c00028008000240000000060800034000000001080001"], 0x120}, 0x1, 0x0, 0x0, 0x4048000}, 0x8800) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_wait(r4, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x10000000002, 0x10000000000006, 0x12, 0x8, 0x7ffffffe, 0x9}, 0x0, 0x0, 0x0, 0x0) 20.636536547s ago: executing program 4 (id=1765): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x21, 0x7, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x110, 0xd}}], 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c40007"], 0x558}}, 0x40) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'net'}, {0x2b, 'net'}, {0x2d, 'cpuacct'}, {0x2b, 'net_cls'}, {0x2b, 'cpuset'}, {0x2d, 'rlimit'}, {0x2d, 'cpuacct'}, {0x2b, 'rdma'}, {0x2d, 'freezer'}, {0x2d, 'freezer'}]}, 0x4d) (async) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'net'}, {0x2b, 'net'}, {0x2d, 'cpuacct'}, {0x2b, 'net_cls'}, {0x2b, 'cpuset'}, {0x2d, 'rlimit'}, {0x2d, 'cpuacct'}, {0x2b, 'rdma'}, {0x2d, 'freezer'}, {0x2d, 'freezer'}]}, 0x4d) 20.413328887s ago: executing program 4 (id=1768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "17c1b7df60c70000"}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000001, 0xb, 0x3}}}}]}, 0x40}}, 0x0) 20.273720669s ago: executing program 4 (id=1771): ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) (async, rerun: 32) r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (rerun: 32) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) (async) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x7b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x60}}, 0x94) (async, rerun: 64) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x140d, 0x20, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getnetconf={0x14, 0x52, 0x404, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000880) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000500)={r5, 0x4, 0x5, 0x8000000000000000}) (rerun: 64) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='mm_compaction_try_to_compact_pages\x00', r6, 0x0, 0x100000000}, 0x18) (async, rerun: 64) r8 = accept4$bt_l2cap(r6, &(0x7f0000000580), &(0x7f00000005c0)=0xe, 0x0) (rerun: 64) sendmmsg(r8, &(0x7f00000009c0)=[{{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @multicast2}, 0x2, 0x2, 0x1, 0x4}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000680)="cbfa23ea767b5bc3fb26dc5bc3d84baf18399911254b", 0x16}], 0x1, &(0x7f0000000700)=[{0xd0, 0x88, 0x8, "4cdcb6f294a1b5f3b78514c983fbe583ddae4b9bf9cb578d8ca1fb0fb1d806d2e3f3ee44824c7f00abc5337c401f999aa69e42c64cdd5447619433511d85862916d3fdee9741d074a112873c03e69f887eb41e337ea56efe405412f1a0a6a2da4f43b9496aec01f0cb52a77b34081066591882caab4067b29ccb14fdf3b71971c47ff4d75f899f1445ae6a26d41d4ea1c97a980f1fa2e6dad0ad4aeb40e201b3d52d9ec8dd2f8faf80b204928c6be22aa814f3a1219eb984e8f81d9bc4ae2872"}, {0x20, 0x0, 0x2, "c850b4f0fef5fb2b0314"}, {0xc0, 0x11, 0x6, "091baefe52adb89722b6d3223a12285a472594557bac5c0e0676addd244a8dea2dbccbf5a0991f539cb938b3b7e79fd97057617af55b8b2e71d923a22bc1a8a25b63a7c73cdce805dfbfa33223e8bbc030b47993138ce2cdddb99627cb1e93e0980cfe1015a507438330809d32191cb66b1d967087a60dcb33efecae5dc2c1a7e3fd0c56271a96c49be5d5b1328039cfefcdbe9f4ff2ec8ae9512bd22b42ed4c9efa5ab563f168593a816f81"}, {0xc0, 0x113, 0xb, "8774af81ab242b1d71059ef441d9c2a6ecb04bbbf375d9a118892123defcf6b451cb6609bebb686427fa1c4b7639b83d6d58162e3320385a7e4b286f97f3063019598914129ce9dcbf2a9b6283eab0dab647cc11b4da64fea5259dcd379624bf25398bec8ef85903a473b807f0b23ce815fec45bceef2c68568a75f142350375c26cd128c121fa37c431d37a9cc01111fc76f4155b7cf4d4fafed0449f706573f4bd401b2f39b3b5e41a2bf4ee"}, {0x48, 0x101, 0x3, "cd7aa93149c3fbb021aba3990a19fe159077b7f94d631b47c2bfea750078e1bea62ac0ac58f120e6ed522786d1c0e4593fa2d3c0ace3d2"}], 0x2b8}}], 0x1, 0x4000) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00)={r6}, 0x8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x8c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x150}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) connect$802154_dgram(r9, &(0x7f0000000bc0)={0x24, @short={0x2, 0x3}}, 0x14) (async) r10 = socket(0x1f, 0x6, 0x3b) (async) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000c00)=0x100000, 0x4) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) (async) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000000d40)={0x10, 0x0, "7fd5afaa4be77f8a364999fee5614fbe"}) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000d80)={0x0, 0x6}, &(0x7f0000000dc0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000e00)={r12, @in={{0x2, 0x4e21, @multicast1}}, 0x8001, 0x5, 0x6, 0xfffffffc, 0x0, 0x49b}, &(0x7f0000000ec0)=0x9c) setsockopt$inet6_tcp_int(r10, 0x6, 0x3, &(0x7f0000000f00)=0x9, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001b00)={'syztnl2\x00', &(0x7f0000001a00)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x400, 0x8000, {{0x2b, 0x4, 0x2, 0x24, 0xac, 0x66, 0x0, 0x40, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x83, 0xa, "12c340884839cb52"}, @lsrr={0x83, 0x1b, 0x7b, [@dev={0xac, 0x14, 0x14, 0x20}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @empty]}, @generic={0x86, 0x10, "fc75f50ec9a80881b281d27bd0d6"}, @ra={0x94, 0x4}, @generic={0x44, 0x8, "c6bb8165c94f"}, @cipso={0x86, 0x2d, 0x3, [{0x7, 0xf, "5c0ea3b92cc03698d01eb25e9a"}, {0x2, 0x8, "41369485b0d8"}, {0x0, 0x9, "5b9f5abb95262a"}, {0x1, 0x7, "0adf11ded2"}]}, @generic={0x83, 0x4, "6580"}, @lsrr={0x83, 0x23, 0xa3, [@local, @multicast2, @rand_addr=0x64010100, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001c40)={'sit0\x00', &(0x7f0000001b40)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x7, 0x1, {{0x2a, 0x4, 0x0, 0x1a, 0xa8, 0x65, 0x0, 0x9, 0x4, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0x2c, 0x23, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0xe}, {@multicast2, 0x67}]}, @timestamp_addr={0x44, 0x4c, 0xd, 0x1, 0x1, [{@remote, 0x1}, {@multicast2, 0x7c9}, {@rand_addr=0x64010100, 0x9}, {@local, 0x57cc}, {@broadcast, 0x8}, {@local, 0x10001}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1}, {@remote, 0x159}]}, @lsrr={0x83, 0x1b, 0xfc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @rand_addr=0x64010100, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f0000000f40)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000f80)="266187614b963a0f50c6b82781af740a3601bdabd7429d4b9e1b372504de0ae8ebef0dc65e66612f40b5b3f924a80cc2b2265d3c1c4fb8035e984c96ed67f90178b4cd1fc72ea22b9f622332a91bf5d9a4a68b65eea54c5dee7ca751", 0x5c}, {&(0x7f0000001000)="ad0b7b20846f349de3349c0f604a0b49e8af205e813fc973ae5750da81ba5f6b204738bf8d10dfe7d4cd70ef9ad05ac8fb95834ed77a1fd3adf88b2e26af4977c80c4a7fca87d2ad453489d6c38887f73f2973aad4a1f88325ab782e3a444d994c187c6d6caf8d3046868e85e61e5b1492e2b79250ca31102854e845b4e52615fc0980602277e263683ee177680b0214c5b1a0904f4da16c42492fc41b3a0c449712fcf84080834bd91e0b1e58685027ff0414ab41fd2d23dbd1704ad2", 0xbd}, {&(0x7f00000010c0)="5c3f10268359cc9c46051abfc0192045de21b18f29eb7f2244ad2302ae8c09febb053619af2b3e8901bf4e988aacfc2a3f4117407ae4d6", 0x37}, {&(0x7f0000001100)="20b911fb5c60d6b0622ba67c6883833cd4deb39a4e43d97b654ef3ce3f25e734a6da71d46f", 0x25}, {&(0x7f0000001140)="2e9c12229e55c326f5c6efbd22455e7593dec4a804c09aec34741bd6ecd7ae08cacdc71e7a61bc39ce22031682e8a9009914964a5d8157911b0861fad220f5258ac368232524ae27db664ada484edb8eff46ec4c901fba7ce8e0570ae67ef554227c2a2f602ca59b15e613d8729c49b620988de32c97d2", 0x77}, {&(0x7f00000011c0)="b1d79f82761e8fd38adb905551d22f98800a3844279ff95409f92c90644c0cfcbb1024a3f5b0bd14f1718d250cf88865c8eb0b6b5fb4d95d410647dd", 0x3c}], 0x6, &(0x7f0000001280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdc}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@generic={0x7, 0xa, "b36adc4892ce1080"}, @lsrr={0x83, 0xf, 0x80, [@private=0xa010102, @remote, @multicast2]}, @cipso={0x86, 0x34, 0x3, [{0x5, 0xc, "c9882bad59306f659ce7"}, {0x5, 0xb, "d56ab962dba1b45c72"}, {0x1, 0x6, "43b2a5f3"}, {0x7, 0x11, "36ccc57c549430bb6d6ad85038e020"}]}, @rr={0x7, 0x2b, 0x23, [@remote, @multicast2, @remote, @remote, @empty, @multicast2, @local, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}]}, @ra={0x94, 0x4, 0x1}]}}}], 0xd8}}, {{&(0x7f0000001380)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001940)=[{&(0x7f00000013c0)="79a2f9f649020d2531ca3c965d4f3ba99335eb", 0x13}, {&(0x7f0000001400)="72cb5cb189c538cfdface9c96375835fb500c90069dccea4855ca30c6604972a7216f2d2f21a1725b786ad420ede2281b57af53d3c4aef000875e014fbd5236aaf1c08a1dc584a78fde3391931cd7aebce5980677e0ed597e94a145c385b3cf08d89e767ea3660a7bb5c654b0a76b934f9b7c898b0788ef8cca6a8fef267cf8560b93d5d331304d68358df58b1162d7b74", 0x91}, {&(0x7f00000014c0)="952c08189c362aff8495f7ecdc6102f4fd37b080f665d553bd977cfad25580b621627a97a276df803bac24f1ed14251794ba8482adab597314ecc2f0cf745cce1150c2ae0332feb3972fa1875afa71c5f21a42efa4de29f212355b8ccd52219e87599d8981ebdd476a1870abbf46f353cd531845f83c42a7cb357ce1e803e76513839858c50436ad31869aa70ddddb2f4b44241d7f145ceaf9b295b6e5eeff", 0x9f}, {&(0x7f0000001580)="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", 0xfc}, {&(0x7f0000001680)="f4898db39362e940c5e5faa30f5a8284dbcfe3a894aea220b7404c74581bcc71af64f835ddf4819701717485993c6c0b8a83d679d9e5d683276d13d006a1f2f4b62ecd766295aa6efd5dfae248ab88", 0x4f}, {&(0x7f0000001700)="128a4bae285860fdb959362f7c78509c8d7038957bdb63635ec8b42c08e1f11149", 0x21}, {&(0x7f0000001740)="6d2cab1c72964d80fe6c3e81678b455d6762f51ad6ebaf8dde076525ae6536e239c49903af1a", 0x26}, {&(0x7f0000001780)="407fda9e87d778d75451a8269150e9bb33fffde31491cee59b4eea914ede0bf228d643ce29cee98cfe65e6e7a53eab693428c9c7cc820bdf73140052e06d8183ea3654c8d9e556bbba27c9705d210fbcce0e8fd4f39291724ced87ed31f3aab5b47a2eca86268f207250ec776893d1d15392e42e6cdc86751e9c51b34cc4ade2db216550ce86dc19ba9162ff9368ace81f8af45c357785c0b714e259786dfe4fefa4e348dbb086175d1ecf7af0ac36ec3619d3ade1d34c8e5d03b442e9e21bd58500cf3c1d33761b6597b0250ae912819136dce64b06b0375add1da1e9abfa7fbcd9be", 0xe3}, {&(0x7f0000001880)="b8ca7a897b59131e656888b45840f0d0aec49aeac26fb08094afda636ac31a80b020b5c77944a05a471a7fc47a331f06ddb8d003fe54b0bdda90547f356def4ff0ff163f8bb7a9ce3c73dba71774ce58d4a2b548c7ae0d990fb0e727319a5efcd0ebad2977527313347266bc178342bed2d8de80ffdcfce5400ae22eca414b2617b2e1681fdd598eef78e1e6", 0x8c}], 0x9, &(0x7f0000001c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x15}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @private=0xa010100, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x56}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x108}}], 0x2, 0x50) 20.049169266s ago: executing program 0 (id=1773): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r2, 0x0) (async) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0xb4807000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r5 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r6, 0x2f, 0x2, 0x7f, 0x3, 0x63, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8010, 0x40, 0x6, 0x8af}}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, 0x453, 0x100, 0x70bd2d, 0x25dfdbff, "003791f889c48d7abd06bd74f100fb4f44"}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) (async) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, 0x453, 0x100, 0x70bd2d, 0x25dfdbff, "003791f889c48d7abd06bd74f100fb4f44"}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) 19.897045613s ago: executing program 0 (id=1777): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000001000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x683c6, 0x75498}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xffff}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) ioctl(r12, 0x8b1b, &(0x7f0000000040)) (fail_nth: 3) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010900020073797a3100000000140000001100010000000000000000000000000a00"/152], 0x98}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x30, 0x26, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0x7, 0x6}, {0xc, 0xfff2}, {0xfff1, 0x1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r4, 0x890f, &(0x7f0000000580)="d899164b4576") close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYRES64=r11, @ANYRES32=r0, @ANYRESHEX=r7], &(0x7f0000000080)='GPL\x00', 0x9, 0xff7, &(0x7f0000002cc0)=""/4087, 0x152dec09fedc2220, 0x87, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) 19.879439658s ago: executing program 2 (id=1778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ipvlan1\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "8952162f32e0f0bb06ba3a01c95c4a17f4c1a66810a04a050de96553c9a038f8", "cd1c8b6760deaacca0daf39d51b016f9e4d1721c729c39175dcba370ab8d0b6d", "54334977ed8dba0871df6e6affa2419672851721f94c943c072a4f46cb49d794", "c1f868e3c9e68c1edf5d35bf8199a279ea0598ea3d88727d5a616083dc407768", "f54f4fcc712a5d820279482adfff4f58e285fbcb1f85f4f0749e6dc4e285ffde", "b17084959cbe7778c38a86e4", 0x7fffffff, 0x5, 0x9, 0x1, 0x3}}) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040) 19.873842273s ago: executing program 4 (id=1779): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010126bd7000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="050034"], 0x34}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) close(0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001014000806bd7000fddbdf2508004c0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4044088}, 0x4000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x90) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc) bind$qrtr(r5, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) close(r6) socket$kcm(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) 19.425745937s ago: executing program 2 (id=1781): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) poll(&(0x7f00000000c0)=[{r2}, {r0, 0x4004}, {r0, 0x10}, {r1, 0x1021}, {r0, 0x2061}, {r0, 0xc8}], 0x6, 0xfffffffd) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, 0x453, 0x1, 0x70bd2a, 0x25dfdbfc, "10b431ecdfb629bc417ea8e54c664f2d683ae663f79e14c5b8217a4ebe8f8f95709982100b0552ff944c3a9df61c00213f880b59464e48ec3c645e9259941dc6e09cbcdb177016f84dbac7d29ddd733e98804e616e0cefa780459b14d378e137175b99b84b95fd7e7ffa8a442788d4a7e8b97356d6e3f52b40fbd9f9d19e832c6e7d63486b1cfd421a4e6be3e50ee0ca98fda31bedcf7a056a7aec4fbbc4ef8bc95717101d599a0522f22806401df37bfa7f2f2ba11920454ab6f0", ["", "", "", "", "", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) epoll_create(0x1) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='freezer.state\x00', 0x0, 0x0) ioctl$FIONCLEX(r3, 0x5450) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x27}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "07b9c732624bae812c0a2836efbff304"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000004c0)={0x0, 0x40, "a1069c91ecaa09055f3f7efb4bbdc8bb828d032730dab7f0b39ac136a14b154ddb41d466d34c0ac83df315beb5fd12e621c512660dde43c59aa57b60bf69c777"}, &(0x7f0000000540)=0x48) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={r5, 0x27, "a52455b11fb0b6635af17f93df683e2faca8139525bcdf407d85aa9ada86a43c2590d90ca4fd6f"}, &(0x7f00000005c0)=0x2f) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000600)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000680), &(0x7f00000006c0)=0x14) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000700)={0x7, 0x8, 0x6, 0x8, 0x7ce}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000740)={'TPROXY\x00'}, &(0x7f0000000780)=0x1e) recvmmsg$unix(r1, &(0x7f00000084c0)=[{{&(0x7f00000007c0), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000840)=""/180, 0xb4}], 0x1, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000ac0)=""/46, 0x2e}, {&(0x7f0000000b00)=""/54, 0x36}, {&(0x7f0000000b40)=""/12, 0xc}, {&(0x7f0000000b80)=""/43, 0x2b}, {&(0x7f0000000bc0)=""/83, 0x53}, {&(0x7f0000000c40)=""/153, 0x99}, {&(0x7f0000000d00)=""/140, 0x8c}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000001f40)=""/21, 0x15}, {&(0x7f0000001f80)=""/135, 0x87}, {&(0x7f0000002040)=""/170, 0xaa}, {&(0x7f0000002100)=""/142, 0x8e}, {&(0x7f00000021c0)=""/39, 0x27}, {&(0x7f0000002200)=""/17, 0x11}, {&(0x7f0000002240)=""/114, 0x72}, {&(0x7f00000022c0)=""/207, 0xcf}], 0x8, &(0x7f0000002440)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000002640)=""/14, 0xe}, {&(0x7f0000002680)=""/47, 0x2f}, {&(0x7f00000026c0)=""/216, 0xd8}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/126, 0x7e}, {&(0x7f00000038c0)=""/147, 0x93}, {&(0x7f0000003980)=""/164, 0xa4}, {&(0x7f0000003a40)=""/154, 0x9a}], 0x9, &(0x7f0000003bc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000003c40)=@abs, 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003cc0)=""/221, 0xdd}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/131, 0x83}], 0x3}}, {{&(0x7f0000004ec0), 0x6e, &(0x7f0000007240)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/123, 0x7b}, {&(0x7f0000006fc0)=""/89, 0x59}, {&(0x7f0000007040)=""/59, 0x3b}, {&(0x7f0000007080)=""/200, 0xc8}, {&(0x7f0000007180)=""/177, 0xb1}], 0x7, &(0x7f00000072c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000007340), 0x6e, &(0x7f0000007600)=[{&(0x7f00000073c0)=""/190, 0xbe}, {&(0x7f0000007480)=""/93, 0x5d}, {&(0x7f0000007500)=""/202, 0xca}], 0x3, &(0x7f0000007640)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000007680)=@abs, 0x6e, &(0x7f0000007d00)=[{&(0x7f0000007700)=""/93, 0x5d}, {&(0x7f0000007780)=""/58, 0x3a}, {&(0x7f00000077c0)=""/163, 0xa3}, {&(0x7f0000007880)=""/253, 0xfd}, {&(0x7f0000007980)=""/1, 0x1}, {&(0x7f00000079c0)=""/114, 0x72}, {&(0x7f0000007a40)=""/74, 0x4a}, {&(0x7f0000007ac0)=""/247, 0xf7}, {&(0x7f0000007bc0)=""/222, 0xde}, {&(0x7f0000007cc0)}], 0xa, &(0x7f0000007dc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000007e00), 0x6e, &(0x7f0000008280)=[{&(0x7f0000007e80)=""/247, 0xf7}, {&(0x7f0000007f80)=""/208, 0xd0}, {&(0x7f0000008080)=""/68, 0x44}, {&(0x7f0000008100)=""/148, 0x94}, {&(0x7f00000081c0)=""/176, 0xb0}], 0x5, &(0x7f0000008300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000008340), 0x6e, &(0x7f0000008440)=[{&(0x7f00000083c0)=""/106, 0x6a}], 0x1, &(0x7f0000008480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0xa, 0x122, &(0x7f0000008740)={0x77359400}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r12, 0x6, 0x9, &(0x7f0000008780)=0x649b, 0x4) socket$netlink(0x10, 0x3, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008880)={&(0x7f00000087c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @var={0xd, 0x0, 0x0, 0xe, 0x5, 0x4b806b138a191f21}]}, {0x0, [0x0, 0x0, 0x2e, 0x30]}}, &(0x7f0000008840)=""/46, 0x46, 0x2e, 0x0, 0x7140, 0x10000, @value=r10}, 0x28) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000088c0)={0x3a, 0xa, '\x00', [@ra={0x5, 0x2, 0xc}, @generic={0x8, 0x4f, "98efa9af28b955f45d6e2ba3bbb2db16abd499e3473fd88e1665a62a223033fbc6e58934c3a1e86868fe414e9050fa10eff0a695064565907893c627a7579234738cd0ecc6ecbe3df3067fe2f41bdf"}]}, 0x60) accept$phonet_pipe(r8, &(0x7f0000008940), &(0x7f0000008980)=0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000008f00)={&(0x7f00000089c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000008ec0)={&(0x7f0000008a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x144, 0x14, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0x104, 0x8, "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"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x2d8, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x81, 0x6, "492310910c10275d07e4e30fe0965ac39fb42e7f5b5c09f4390b9836f4c4f0a1321c61a95f5c7839a4998f12b438cce6a241d75ef9cc760f4f314eeff8d076a5e55e8324a8df9c2ffb11204cbc67d306a721f5ea162f22918689cdf5056e3dc6d22d5408dea8699e14eb0792056e7e9da31b9cc7ed360bb4545af5745f"}, @NFTA_TABLE_USERDATA={0xd7, 0x6, "bd899d638204eb1e6722c3ae8c12369558c3ab28d627dfcc8146222fd56c45a69589df294f0c3705f2c1ff07c9667de1c8b279dc684ceea27c592e8d9994ee96d59f6de1029b721567360a9a78bac6eb1f2675ccc14fdc032c8cd2efbe5d00ea19033dbba7845d88ce8ea166d8eed2fe2e3025160ac1e7acef933831a4cc966e922bd383108f361f0dcca75425c9dc4891227468a8a7142e04093152c11fba371c5abbf9507a25327e94d68027e6440ad972e98f9735a9d61ef4662d77515d5c112207754c2ee11b826f3594d0feb0c9bd72d2"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xf7, 0x6, "65e7ffca882a0b23914ccf2ccdfae18d14a5cde2f45595057b666abe41e295c53e411beb9139d4ec70e9c265c30dce0ab6f06f1759cb917537992565c767804903cf4fd3611f33455a44610be4753c85a37ae0d4b23f8de57f1a0935c8fb42c6469e4c36688781746def0074808a64b804538a857222c01e22e40141b7361b153d5cfdb40aac01f266badd7c668bb6b8709fa5e03c2806eeee72a9a277d0572f35a5bd189c6e4fca9db49ec91ac534682c4b73a9acb0bd208187f37993a5196390844a75b7b449c2cfd2ae49ddfd8d6b5e8f983b173057bcde84caad014a3c75b8bda7e818f63f47a6a2ab95d84af4169d9972"}, @NFTA_TABLE_USERDATA={0x43, 0x6, "d9e4cfda23a1fceff4444e5dd0d12e166aa87b9c3441c55aabf06bba476cccf1a94865729470a0c8de9ac997966c647432e1ce9113e4b43712929177975810"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x4b8}, 0x1, 0x0, 0x0, 0x4}, 0xd26ea4e400adee73) sendto$inet6(r7, &(0x7f0000008f40)="25227edf1c46d1b2ffeba636033e6072530bab1c60a67e93827d43256a840ba0ad684554f4f666bd111c65761249ade9d6ec048482eaf32c1d39a1ef1e29bb0cb4efc40c0b2422a750df1abdc3d6b639cd7e19e9da2a36aa661aca4d49942921e04e4d788137cf00f826960f7c8b084b7026a2cc175a7344ee827093a18b77a66492d7fca73e46bfbc45c740e8f4c975963a561abff50037a6472761754821ce8b9b9d53ac2e4e40fe1660c0afa795fed52c71a0dc5634", 0xb7, 0x400c0, &(0x7f0000009000)={0xa, 0x4e20, 0x5e42, @loopback, 0x8}, 0x1c) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000009040)=0x1) socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000009080)) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000009540)={&(0x7f0000009480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000009500)={&(0x7f00000094c0)={0x24, 0x1, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c001}, 0x20004085) 19.277236144s ago: executing program 1 (id=1782): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x1e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020207025"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000418000000", @ANYRES32, @ANYBLOB="00000000000000049500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000b400000095000000000000008052ff82b83aa18fe866be39a8a18f72333c10ec1721146af14b7e499333a4c3e0bb653d6cfc0006af9ad3fbfa1bf695b76e91124c026efcfe65e075bdfa3d1970e97b00bb8a273cd06faa163855903da3781d03c23a66c7cb5adec9d4afe55d0092cce519beb6e1f63e79fa1ada02e1b14c79a034e55cf174828dc749e254f78d4380021f71d1f39fed50"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7fffffe, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x20040054) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x7}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x1, 0x371, 0xa, 0x1b, 0x11}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) 19.224241745s ago: executing program 3 (id=1783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc1, 0xc1, 0x4, [@typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x2}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @enum64={0xa, 0x4, 0x0, 0x13, 0x1, 0x2, [{0xb, 0xfff, 0x81c}, {0xf, 0x7, 0xac0}, {0xf, 0x3827b6df, 0x9}, {0xa, 0xfff, 0x1}]}, @datasec={0x7, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x200, 0xc}, {0x3, 0x5, 0xfffffffc}, {0x3, 0x80000000, 0x4}, {0x2, 0x9, 0x40}, {0x3, 0x4, 0x4}], "84"}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}, @fwd={0x3}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000380)=""/122, 0xe0, 0x7a, 0x0, 0x8}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) poll(&(0x7f0000000280)=[{r1, 0x4}, {r2, 0x408}, {r2}], 0x3, 0x7fffffff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x3ff, 0x12) (async) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.223722717s ago: executing program 0 (id=1784): unshare(0x22020400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) readv(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x0, &(0x7f0000000080), &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r2, 0x2f, 0x1, 0x2, 0x4, 0x4, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x40}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000cb0bef7ab4b168560018110000", @ANYRES32=r4, @ANYRESHEX=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000050000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket(0x29, 0x5, 0xffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000080), &(0x7f0000000180)=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000200), &(0x7f0000000280)=r9}, 0x32) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r11, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c001}, 0x40) getsockopt$llc_int(r10, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000280)=0x4) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x200, 0xfbfffffd, 0x2, {0x0, 0x0, 0x0, r13, {0x1}, {0xfff0, 0xffe1}, {0x6, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x99, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008002}, 0x2000401c) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) 19.125480132s ago: executing program 0 (id=1785): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000005000000040000001200000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000002393243f5012b012413eea9c8759b6dd00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@fwd={0x6}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x59, 0x0, 0x6b, 0x7}, @var={0xc, 0x0, 0x0, 0xe, 0x3, 0x1}, @union={0x5, 0x1, 0x0, 0x5, 0x1, 0x2, [{0x2, 0x2, 0x5b6}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000940)=""/169, 0x60, 0xa9, 0x0, 0x7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000de12b30c9bdd0b7e0cba51b2887f17b797b32899e7e8f9a35b48cd17f4b02cba3e25fb380e8fd68ae84f4cba8682044f70c0071c4724283d815a697842bb8158d938e2efe8ee0828e3b65b9534dd3fe1d6530cf1501234af2c806495d889250b49d20c9b3a0aba78a9a94de7618a42fffb5bd39236d0120103c665a2f4f44b8162779715b9aaedf3eff529e61b4b9c2dc60f38f383f023236cb2d59a01b288fc2a75e6e91f4abc5d87004276519c1fff25223c2eafd573d198f1393429092cec4a1e2ec864ec11f6185a60c817273032866b4c06c7366d", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0x4, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xd, 0xffff}, {0x0, 0xffff}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x100}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xdf, 0x1}, {0x278e, 0x81}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 18.542312281s ago: executing program 1 (id=1786): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000005bf989bfb7ffff95d80000000000000000000000f900000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) unshare(0x10000000) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000240)={0x1, 'veth1_vlan\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbcbbbbbbbbb4aa468739b8508060001080006040001da82ce4f59beaaaaaaaaaaaa0a01010057330377"], 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0207000012000000000022000000000005000500000000000a004e200000000400000000000000000000000000000000e40d00000000000008001200000001000000000000000000060000000000000000000000000000000000000000e4fa3e9965026a674a0000000000000000000000fc020000000900000000000000000000030006000000000002000000e00000"], 0x90}}, 0x0) unshare(0x68040200) writev(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x0) close(0x3) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x2, 0xfffffffa, 0x4, 0x4, 0x8}) 18.373323336s ago: executing program 2 (id=1787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {@in=@loopback, 0x4d5, 0x3c}, @in=@remote, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xaf}, {}, {}, 0x0, 0x3, 0xa}, [@algo_auth={0x48, 0x1, {{'cryptd(sha256-ce)\x00'}}}]}, 0x138}}, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x84, r2, 0x813, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x67}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x84}}, 0x0) 18.334351877s ago: executing program 3 (id=1788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, r2, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x700}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 18.258412728s ago: executing program 2 (id=1789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="010000000000000000000e00000017000e001c0401009d070406070101000000050301463e00"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000fc0), 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000001f000100000000000000000004000000"], 0x14}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) sendto$inet6(r4, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback, 0xffffffff}, 0x1c) socket$netlink(0x10, 0x3, 0x9) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r7, @ANYRES64=r4, @ANYRES16, @ANYRESOCT, @ANYRES64=r5, @ANYRES8=r2, @ANYRESOCT=r3, @ANYRES8=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)="1cea97d166", &(0x7f00000003c0)="eb61ff48c9cdab115dc6a5dda3a160613358b716cb73b194fb6b5522fea35d3640296b2da836cb57151ade309ef46fa4c888e302e7f7c0099886ae22e991f1a3", 0xce, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r9}, 0x10) recvmmsg(r6, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x832b, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r10 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r10, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r10, 0x0, 0x0, 0x0, 0x0, 0x0) 17.24525112s ago: executing program 0 (id=1790): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x6e24, @empty}}, 0x24) listen(r8, 0x0) close(r8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9], 0x3c}}, 0x0) 17.241735537s ago: executing program 3 (id=1791): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x3f6, 0x200, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x44080) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x6, 0x9}, {0x0, 0x9}, {0x9, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x94) 17.21458969s ago: executing program 2 (id=1792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) unshare(0x20000400) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f80080001"], 0x88}}, 0x4008000) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000340), 0x2, 0x0) write$cgroup_type(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x50) socket$inet(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0xb4, r7, 0x0, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x98, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x9, 0x6, 0x3}, {0xfffe, 0x0, 0x7}, {0x0, 0x0, 0x5, 0xf6}, {0xc9e, 0x9, 0x7, 0x6}]}}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404005400ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b70000000000000095000000000000003f0c54cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752688300000000dbc2777df150b7cdd77b85b941092314fd085f1b1b2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c830fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28179f09943b1b0452d1b72183aacf4a84f9130b701b81675dd4e9e3070756f97ad791fa99dac06c37479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fd80f553876acb45821d0c48fb657c29b309c73f0977e7cde65a89d9458aac2795b2b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d2665016ac59dd20fde0745db06753a7ac7fe13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2084bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a3894696082417304fff0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bdb539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572ac45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af00200f900cd1d0000002000000001c800000000000000000048cea769470424d28804c024ab81921f01280b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee78ebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408816eae08cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb7819441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005391577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e710d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd129db069364c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d4ac534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f0300000000000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321e10b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fde46ad265983eb1b1c6adb1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f617396c18cc7130000fc000000210000006e00002000000000000027c9a46157a3ffff6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4472b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd000000000072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2b3a113e47edf76f7d116d2b0976cf2ec447c0309316d1dd315003b7a6a543340715f99e99ec4b227eda2e63a1c31a2c2bd48a80500e92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949c68b7a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273061fc5c0e0a33db7f2d43ea8086cf059f40fa2645944cd9e7f2e6ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858e13e8f0ba9d1dec469dc71e998d99ebf7cfda638d7ce859acfec3f14ec2aa98b53cd68a0d99d62a5620b7c0f61dc386c449664a94bca09859a35760b7b818087347697c239990daec8384a12d973d5470efe5dae887be689c6b1551f4c5a649d9dc563d7049c91453facecbee789a1d5a4896b2b7bec3ec5e60c4916e5561888502a12f4985f9c7dab41cbf31c26cd12d5116de95b521a57408adbbac278be82fef3f9d8a51385b376b57810be83e7b27460729a626250ccd8d82eba588f86195e15119eca569bebba8514e5bfcbe51f1a628793b4ed4424c95a731628fa38e167b79affcd50b561d3a9cb4bea872d9e5a06a4201fd09eecfe283854837a65ecf8cd6cdaad4bf223db323de9d4854d66d324a0d125e3ebe2ed3c78e47392962860de6bb86759406e74335443407d9ee7d4a4430b60b6ef369604e127391dcd8b6fe95d882b0c1aa8d4b18e8db32a0eeaaabc7f7b5c49bd88cfe860f69f5510179d867970f975169591908282cd4367f82e62e3fa37876f30934c23dc2d02a0c25839f008ec099503c8d1b3169aa9c5a7db7f0116d203ac6503596c3a5b063c28f84c9eb42"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 16.850656252s ago: executing program 3 (id=1793): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000001000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x683c6, 0x75498}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xffff}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) ioctl(r12, 0x8b1b, &(0x7f0000000040)) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010900020073797a3100000000140000001100010000000000000000000000000a00"/152], 0x98}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x30, 0x26, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r15, {0x7, 0x6}, {0xc, 0xfff2}, {0xfff1, 0x1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r4, 0x890f, &(0x7f0000000580)="d899164b4576") close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYRES64=r11, @ANYRES32=r0, @ANYRESHEX=r7], &(0x7f0000000080)='GPL\x00', 0x9, 0xff7, &(0x7f0000002cc0)=""/4087, 0x152dec09fedc2220, 0x87, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) 16.76527315s ago: executing program 2 (id=1794): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x4508, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) write$tun(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000001540), &(0x7f0000001580)=0xc) recvmmsg(r8, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/142, 0x8e}, {0x0}], 0x2}, 0xa1}], 0x1, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc2, 0xff, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket$kcm(0x29, 0x5, 0x0) 16.688949032s ago: executing program 0 (id=1795): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000001000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x683c6, 0x75498}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xffff}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) ioctl(r12, 0x8b1b, &(0x7f0000000040)) (fail_nth: 4) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010900020073797a3100000000140000001100010000000000000000000000000a00"/152], 0x98}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x30, 0x26, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0x7, 0x6}, {0xc, 0xfff2}, {0xfff1, 0x1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r4, 0x890f, &(0x7f0000000580)="d899164b4576") close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYRES64=r11, @ANYRES32=r0, @ANYRESHEX=r7], &(0x7f0000000080)='GPL\x00', 0x9, 0xff7, &(0x7f0000002cc0)=""/4087, 0x152dec09fedc2220, 0x87, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) 16.648881839s ago: executing program 4 (id=1796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2045c3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000081000000040000000080000016000000", @ANYRES32], 0x48) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="c33e7b61aeff3704ac55c71bafb9ac2df22889fc574b1a6eefd87305815cb1012e5d775f0962ec03331d6ffd4489b4", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b70200000000ed00850000008600000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000feff0000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x80, 0x700, 0x7ffffffb, 0xa, {{0x5, 0x4, 0x0, 0x2, 0x14, 0xffff, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x1, 0x1, 0x4, {0xa, 0x4e21, 0x80, @loopback, 0x7}}}, 0x32) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCGL2TPSTATS(r9, 0x8004745a, &(0x7f0000005280)) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x3}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x503f00, 0x0) 16.589127039s ago: executing program 3 (id=1797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000f8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x43, &(0x7f0000000040), 0x3b) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004300)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x60420, 0x20403}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 16.080414974s ago: executing program 3 (id=1798): r0 = socket(0x1e, 0x4, 0xfffffffd) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$can_j1939(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x1d, r4, 0x2, {0x1, 0x0, 0x3}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f00000002c0)="9fe0f11638248ae587d3041dcdc8797705f5ecb7c4804868c04bda9db29b21bd6a6e4cad56fc2e971bc66f3a7baa338bbb1f87f16e5ad1d6d2ef1639f3", 0x3d}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008054) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="fb12ca2f33d63308000000000000000079100c00a70000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) write(r6, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r6, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r5) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a", 0x3}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fcdbdf25010005000000000007410000004c00180000000762726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000000), 0x8000000000000000) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf257300000008000300", @ANYRES32=r11, @ANYBLOB="087e5320420239f20500ee00ff0000000500ee00000000000500ee000d00000031259f5f702a13dfcb69e24549089d7b9b52caaee31431a48eb00d0cba7bcdb903784718796bfa6fbcc81be4e8e9c78244760d6c9bb165ec853ba71387658533b9abeb6f25cef1f98ac31c6e55"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc040) r12 = socket$inet6(0xa, 0x80003, 0xff) r13 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r13, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x3) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)}}], 0x2, 0x0, 0x0) 15.697097517s ago: executing program 1 (id=1799): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="2705020029ff14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600004000000000805db18f", 0x4b}, {&(0x7f0000000380)="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", 0xff04}], 0x2}, 0x20008010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x48) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x40}}, 0x40080) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f0000000300)={r5, 0x10, 0x4}, 0x8) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r1, &(0x7f0000000040), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001640)='n', 0x1}], 0x1}, 0x4000001) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r8, &(0x7f0000001280)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) sendmsg$inet(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000012c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0xd, 0x1000, 0x200, 0x80, r1, 0x7, '\x00', 0x0, r9, 0x4, 0x1, 0x3, 0x5}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000014c80020850000000400000018110000", @ANYRESDEC=r1, @ANYRESOCT=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x20, 0x1404, 0x800, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x20800) recvmsg(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x11102) r11 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r11, &(0x7f0000000440)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="a0005bf8", 0x4}, {&(0x7f00000001c0)="3969ac0b", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa556cc2fabc7b233, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000002070250000000000202020631af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r7) 15.545248024s ago: executing program 1 (id=1800): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast1, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) (async) unshare(0x62040200) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, 0x0, 0x0) (async) syz_80211_inject_frame(0x0, &(0x7f0000000200)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @random="573edc7f226f"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x4d}, @void, @void, @void}, 0x32) (async) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) (async) recvmmsg(r6, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000580)=ANY=[], 0x27) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) 15.528668721s ago: executing program 1 (id=1801): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket(0x28, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x7, {{0xa, 0x0, 0x8, @mcast1, 0x2}}}, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x9, 0x4) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000280), &(0x7f0000000340)=0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r3, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0xffffff9a}], 0x1, 0x100, 0x0) unshare(0x6a060000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480c70007"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 15.214792943s ago: executing program 1 (id=1802): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)={0x198, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2ad}, {0x6, 0x16, 0x8a}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x39c7}, {0x6, 0x16, 0x9}, {0x5}, {0x6}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xa98}, {0x6, 0x16, 0xfffd}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x780a}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xb89}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1e9d}, {0x8, 0xb, 0xffffffff}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000081}, 0x48001) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r5, 0x8e834ab5546fe5cb, 0x70bd2b, 0x25dfdbfa, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044030}, 0x80) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000a40)={&(0x7f0000000640), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}}, 0x44) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x40, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x4800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x584c, '\x00', 0x0, r0, 0x5, 0x3, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)={@map=r14, r13, 0x5}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x6, 0x5004, 0x80000007, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESHEX=r16, @ANYRES32=r15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008805}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1803000000000020000000000007000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000000c0), 0x4) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020000000619ad7c2c0000009298130c", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0100000001000000030000c00a0200001f6b54e7af740b5b1b2378043f622c88f617ca34cf09628107a2c926ec6461a0873dd05d495244427efe57df8bc73134994e6c780f4473ce5c507e0d4f39b344"], 0x80}, 0x1, 0x0, 0x0, 0x4004020}, 0x200688c1) 1.63922717s ago: executing program 32 (id=1795): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000001000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x683c6, 0x75498}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xffff}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008091) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) ioctl(r12, 0x8b1b, &(0x7f0000000040)) (fail_nth: 4) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010900020073797a3100000000140000001100010000000000000000000000000a00"/152], 0x98}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x30, 0x26, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0x7, 0x6}, {0xc, 0xfff2}, {0xfff1, 0x1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r4, 0x890f, &(0x7f0000000580)="d899164b4576") close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYRES64=r11, @ANYRES32=r0, @ANYRESHEX=r7], &(0x7f0000000080)='GPL\x00', 0x9, 0xff7, &(0x7f0000002cc0)=""/4087, 0x152dec09fedc2220, 0x87, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) 1.593246198s ago: executing program 33 (id=1794): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x4508, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) write$tun(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000001540), &(0x7f0000001580)=0xc) recvmmsg(r8, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/142, 0x8e}, {0x0}], 0x2}, 0xa1}], 0x1, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc2, 0xff, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket$kcm(0x29, 0x5, 0x0) 1.107396863s ago: executing program 34 (id=1796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2045c3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000081000000040000000080000016000000", @ANYRES32], 0x48) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="c33e7b61aeff3704ac55c71bafb9ac2df22889fc574b1a6eefd87305815cb1012e5d775f0962ec03331d6ffd4489b4", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b70200000000ed00850000008600000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000feff0000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x80, 0x700, 0x7ffffffb, 0xa, {{0x5, 0x4, 0x0, 0x2, 0x14, 0xffff, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x1, 0x1, 0x4, {0xa, 0x4e21, 0x80, @loopback, 0x7}}}, 0x32) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCGL2TPSTATS(r9, 0x8004745a, &(0x7f0000005280)) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x3}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x503f00, 0x0) 73.789811ms ago: executing program 35 (id=1802): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)={0x198, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2ad}, {0x6, 0x16, 0x8a}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x39c7}, {0x6, 0x16, 0x9}, {0x5}, {0x6}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xa98}, {0x6, 0x16, 0xfffd}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x780a}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xb89}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1e9d}, {0x8, 0xb, 0xffffffff}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000081}, 0x48001) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r5, 0x8e834ab5546fe5cb, 0x70bd2b, 0x25dfdbfa, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044030}, 0x80) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000a40)={&(0x7f0000000640), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}}, 0x44) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x40, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x4800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x584c, '\x00', 0x0, r0, 0x5, 0x3, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)={@map=r14, r13, 0x5}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x6, 0x5004, 0x80000007, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESHEX=r16, @ANYRES32=r15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008805}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1803000000000020000000000007000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000000c0), 0x4) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020000000619ad7c2c0000009298130c", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0100000001000000030000c00a0200001f6b54e7af740b5b1b2378043f622c88f617ca34cf09628107a2c926ec6461a0873dd05d495244427efe57df8bc73134994e6c780f4473ce5c507e0d4f39b344"], 0x80}, 0x1, 0x0, 0x0, 0x4004020}, 0x200688c1) 0s ago: executing program 36 (id=1798): r0 = socket(0x1e, 0x4, 0xfffffffd) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$can_j1939(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x1d, r4, 0x2, {0x1, 0x0, 0x3}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f00000002c0)="9fe0f11638248ae587d3041dcdc8797705f5ecb7c4804868c04bda9db29b21bd6a6e4cad56fc2e971bc66f3a7baa338bbb1f87f16e5ad1d6d2ef1639f3", 0x3d}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008054) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="fb12ca2f33d63308000000000000000079100c00a70000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) write(r6, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r6, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r5) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a", 0x3}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fcdbdf25010005000000000007410000004c00180000000762726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000000), 0x8000000000000000) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf257300000008000300", @ANYRES32=r11, @ANYBLOB="087e5320420239f20500ee00ff0000000500ee00000000000500ee000d00000031259f5f702a13dfcb69e24549089d7b9b52caaee31431a48eb00d0cba7bcdb903784718796bfa6fbcc81be4e8e9c78244760d6c9bb165ec853ba71387658533b9abeb6f25cef1f98ac31c6e55"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc040) r12 = socket$inet6(0xa, 0x80003, 0xff) r13 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r13, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x3) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)}}], 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): m0 [ 232.248651][T10012] batman_adv: batadv0: Removing interface: team0 [ 232.256230][T10012] bridge0: port 1(team0) entered blocking state [ 232.262823][T10012] bridge0: port 1(team0) entered disabled state [ 232.269235][T10012] team0: entered allmulticast mode [ 232.425983][T10034] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 232.436270][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'. [ 232.691312][T10046] netlink: 32 bytes leftover after parsing attributes in process `syz.1.974'. [ 232.712872][T10046] netem: unknown loss type 13 [ 232.718947][T10046] netem: change failed [ 232.822893][T10049] sctp: [Deprecated]: syz.0.975 (pid 10049) Use of int in max_burst socket option. [ 232.822893][T10049] Use struct sctp_assoc_value instead [ 232.851179][T10046] netlink: 'syz.1.974': attribute type 5 has an invalid length. [ 232.914205][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.976'. [ 233.860608][T10097] netem: unknown loss type 13 [ 233.866646][T10097] netem: change failed [ 234.053390][T10097] netlink: 'syz.4.987': attribute type 5 has an invalid length. [ 234.979357][T10161] Bluetooth: MGMT ver 1.23 [ 235.010432][T10163] netem: unknown loss type 13 [ 235.015762][T10163] netem: change failed [ 235.088870][T10163] netlink: 'syz.2.1002': attribute type 5 has an invalid length. [ 235.202273][T10169] lo speed is unknown, defaulting to 1000 [ 235.274901][T10178] netlink: 'syz.3.1005': attribute type 13 has an invalid length. [ 235.287487][T10178] netlink: 'syz.3.1005': attribute type 17 has an invalid length. [ 235.465948][T10185] __nla_validate_parse: 4 callbacks suppressed [ 235.465969][T10185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1005'. [ 235.501966][T10178] dummy0: left allmulticast mode [ 235.583657][T10178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.679957][T10188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1004'. [ 235.733782][T10172] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1004'. [ 235.774415][T10179] lo speed is unknown, defaulting to 1000 [ 236.182450][T10198] netlink: 'syz.0.1011': attribute type 16 has an invalid length. [ 236.190846][T10198] netlink: 'syz.0.1011': attribute type 17 has an invalid length. [ 236.255916][T10198] ip6gretap0: entered promiscuous mode [ 236.275279][T10198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.290658][T10198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.466485][ T5847] Bluetooth: hci4: command 0x0401 tx timeout [ 236.559289][T10210] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1013'. [ 236.593052][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 236.804348][T10209] tipc: Resetting bearer [ 236.867423][ T5847] block nbd1: Receive control failed (result -104) [ 237.028725][T10228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1019'. [ 237.277109][T10234] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1021'. [ 237.330876][T10234] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1021'. [ 237.636938][T10253] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1026'. [ 237.742145][T10258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1027'. [ 239.547210][T10354] lo speed is unknown, defaulting to 1000 [ 239.809358][T10367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.067817][T10369] netlink: 'syz.4.1054': attribute type 16 has an invalid length. [ 240.076086][T10369] netlink: 'syz.4.1054': attribute type 17 has an invalid length. [ 240.100122][T10369] tipc: Resetting bearer [ 240.108010][T10369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.986526][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.993263][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 284.687354][T10395] netlink: 'syz.2.1057': attribute type 16 has an invalid length. [ 284.695381][T10395] netlink: 'syz.2.1057': attribute type 17 has an invalid length. [ 284.762932][T10395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.890121][T10399] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 284.917352][T10399] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 284.943226][T10399] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.030605][T10406] __nla_validate_parse: 9 callbacks suppressed [ 285.030625][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 285.054654][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 285.067583][T10406] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 285.077006][T10406] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1062'. [ 285.281902][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 285.366706][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 285.422919][T10413] bridge_slave_1: left allmulticast mode [ 285.435555][T10413] bridge_slave_1: left promiscuous mode [ 285.458568][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.471814][T10418] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1067'. [ 285.494135][T10413] bridge_slave_0: left allmulticast mode [ 285.500851][T10413] bridge_slave_0: left promiscuous mode [ 285.508316][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1069'. [ 285.518858][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.567692][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 285.581327][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 285.617529][T10428] netlink: 'syz.2.1067': attribute type 12 has an invalid length. [ 285.632414][T10428] netlink: 'syz.2.1067': attribute type 11 has an invalid length. [ 285.698204][T10431] tipc: Enabled bearer , priority 0 [ 285.727215][T10434] syzkaller0: entered promiscuous mode [ 285.742887][T10434] syzkaller0: entered allmulticast mode [ 285.839991][T10422] tipc: Resetting bearer [ 285.863639][T10419] tipc: Resetting bearer [ 285.907643][T10419] tipc: Disabling bearer [ 285.920899][T10445] netlink: 'syz.1.1072': attribute type 10 has an invalid length. [ 285.990794][T10439] tipc: New replicast peer: 255.255.255.255 [ 285.999226][T10439] tipc: Enabled bearer , priority 10 [ 286.056391][T10445] veth0_vlan: left promiscuous mode [ 286.084196][T10445] veth0_vlan: entered promiscuous mode [ 286.101622][T10445] team0: Device veth0_vlan failed to register rx_handler [ 286.210096][T10445] syz.1.1072 (10445) used greatest stack depth: 19400 bytes left [ 286.278187][T10444] lo speed is unknown, defaulting to 1000 [ 286.861477][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 286.895240][T10468] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 286.908640][T10468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.955818][T10468] team0: Unable to change to the same mode the team is in [ 287.052080][ T981] IPVS: starting estimator thread 0... [ 287.066411][T10468] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.113028][ T981] tipc: Node number set to 3568884147 [ 287.146769][T10475] IPVS: using max 25 ests per chain, 60000 per kthread [ 287.991337][T10506] netlink: 'syz.2.1091': attribute type 178 has an invalid length. [ 288.203863][T10521] netlink: 'syz.3.1096': attribute type 21 has an invalid length. [ 289.115832][T10565] netlink: 'syz.0.1109': attribute type 30 has an invalid length. [ 289.137908][T10565] netlink: 'syz.0.1109': attribute type 30 has an invalid length. [ 289.237021][T10544] syz.3.1101 (10544) used greatest stack depth: 17864 bytes left [ 289.497413][T10576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.505041][T10576] IPv6: NLM_F_CREATE should be set when creating new route [ 289.543895][T10583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.001426][T10608] validate_nla: 1 callbacks suppressed [ 290.001445][T10608] netlink: 'syz.2.1119': attribute type 4 has an invalid length. [ 290.121678][T10614] lo speed is unknown, defaulting to 1000 [ 290.485996][T10630] __nla_validate_parse: 11 callbacks suppressed [ 290.486020][T10630] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1125'. [ 290.512499][T10631] netlink: 'syz.3.1126': attribute type 1 has an invalid length. [ 290.521243][T10631] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1126'. [ 290.542796][T10630] netlink: zone id is out of range [ 290.551262][T10630] netlink: zone id is out of range [ 290.581606][T10630] netlink: zone id is out of range [ 290.594688][T10630] netlink: zone id is out of range [ 290.623675][T10630] netlink: zone id is out of range [ 290.640954][T10630] netlink: zone id is out of range [ 290.651425][T10630] netlink: zone id is out of range [ 290.660882][T10630] netlink: zone id is out of range [ 290.666673][T10630] netlink: zone id is out of range [ 290.672207][T10630] netlink: zone id is out of range [ 291.267113][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 293.600337][T10720] tipc: Enabling of bearer rejected, failed to enable media [ 293.669117][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1150'. [ 293.803299][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 293.900047][T10729] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20004 [ 294.069711][T10738] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1156'. [ 294.295228][T10745] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 294.315820][T10747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1159'. [ 294.333214][T10745] team0: left allmulticast mode [ 294.338412][T10745] team_slave_0: left allmulticast mode [ 294.344828][T10745] team_slave_1: left allmulticast mode [ 294.350839][T10745] bridge0: port 4(team0) entered disabled state [ 294.368652][T10745] dummy0: left allmulticast mode [ 294.375166][T10745] bridge0: port 3(dummy0) entered disabled state [ 294.393681][T10745] bridge_slave_0: left allmulticast mode [ 294.407128][T10745] bridge_slave_0: left promiscuous mode [ 294.413599][T10745] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.427842][T10745] bridge_slave_1: left allmulticast mode [ 294.434943][T10745] bridge_slave_1: left promiscuous mode [ 294.442057][T10745] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.457366][T10752] netlink: 'syz.2.1158': attribute type 10 has an invalid length. [ 294.458625][T10745] team_slave_0: left promiscuous mode [ 294.477391][T10745] team0: Port device team_slave_0 removed [ 294.485410][T10745] team_slave_1: left promiscuous mode [ 294.497317][T10745] team0: Port device team_slave_1 removed [ 294.516752][T10745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.528586][T10745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.576050][T10751] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) ! [ 294.595424][T10752] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 294.703135][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 294.713878][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 294.919957][T10761] netlink: 'syz.2.1161': attribute type 1 has an invalid length. [ 294.941444][T10761] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1161'. [ 295.478501][T10773] netlink: 'syz.1.1164': attribute type 1 has an invalid length. [ 295.889358][T10780] netlink: 'syz.1.1164': attribute type 10 has an invalid length. [ 296.016363][T10774] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 296.056636][T10779] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.076595][ T2966] net_ratelimit: 3 callbacks suppressed [ 296.076619][ T2966] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 296.282040][T10773] veth7: entered promiscuous mode [ 296.295875][ T72] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 296.338117][T10773] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 296.546617][T10792] lo speed is unknown, defaulting to 1000 [ 296.602987][T10795] tipc: Cannot configure node identity twice [ 296.784822][T10800] pim6reg: entered allmulticast mode [ 296.825122][T10800] pim6reg: left allmulticast mode [ 296.931573][T10804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'. [ 297.381748][T10811] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.590842][T10811] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.766032][T10811] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.830996][T10820] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1174'. [ 297.868714][T10811] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.032096][T10822] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 298.082491][T10822] netlink: 'syz.1.1176': attribute type 7 has an invalid length. [ 298.270770][ T2966] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.286446][ T2966] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.321474][ T2966] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.447857][ T2966] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.531616][T10833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.624425][T10833] syzkaller0: entered promiscuous mode [ 298.631472][T10833] syzkaller0: entered allmulticast mode [ 298.639714][T10831] lo speed is unknown, defaulting to 1000 [ 298.721966][T10832] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1178'. [ 298.862835][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 301.040029][T10838] lo speed is unknown, defaulting to 1000 [ 301.342893][T10874] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1184'. [ 302.047868][T10897] erspan0: entered promiscuous mode [ 302.124443][T10834] lo speed is unknown, defaulting to 1000 [ 302.245223][T10903] pim6reg1: entered promiscuous mode [ 302.250876][T10903] pim6reg1: entered allmulticast mode [ 302.701529][T10921] netlink: 564 bytes leftover after parsing attributes in process `syz.0.1194'. [ 302.753985][T10921] netlink: 171 bytes leftover after parsing attributes in process `syz.0.1194'. [ 302.772853][T10921] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1194'. [ 302.781863][T10921] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1194'. [ 302.793257][T10921] netlink: 102 bytes leftover after parsing attributes in process `syz.0.1194'. [ 302.802336][T10921] netlink: 4728 bytes leftover after parsing attributes in process `syz.0.1194'. [ 302.837836][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 302.943673][T10926] veth1_macvtap: left promiscuous mode [ 302.956436][T10926] macsec0: entered allmulticast mode [ 302.971535][T10923] netlink: 'syz.0.1194': attribute type 2 has an invalid length. [ 303.008023][T10929] veth1_macvtap: entered promiscuous mode [ 303.022982][T10929] veth1_macvtap: entered allmulticast mode [ 303.029015][T10929] macsec0: left allmulticast mode [ 303.049011][T10929] veth1_macvtap: left allmulticast mode [ 303.095855][T10931] netlink: 'syz.4.1195': attribute type 5 has an invalid length. [ 303.295918][T10923] þ: entered promiscuous mode [ 303.417173][T10937] netlink: 'syz.0.1198': attribute type 10 has an invalid length. [ 303.431315][T10935] netlink: 'syz.4.1197': attribute type 1 has an invalid length. [ 303.616224][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 303.666952][T10942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1199'. [ 303.913894][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 303.971430][T10953] lo speed is unknown, defaulting to 1000 [ 304.301513][T10969] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 304.309838][T10974] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 304.425133][T10969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.850147][T10988] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 304.891764][T10989] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 306.046637][T11056] ieee802154 phy0 wpan0: encryption failed: -90 [ 306.074868][T11056] lo speed is unknown, defaulting to 1000 [ 307.210413][T11094] smc: net device bond0 applied user defined pnetid SYZ2 [ 307.232485][T11094] smc: net device bond0 erased user defined pnetid SYZ2 [ 307.947584][T11138] ip6gre1: entered allmulticast mode [ 308.254674][T11162] __nla_validate_parse: 10 callbacks suppressed [ 308.254696][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 308.447615][T11169] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 308.456745][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 308.877359][T11193] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1273'. [ 309.111680][T11202] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20004 [ 309.122202][T11199] syzkaller0: entered promiscuous mode [ 309.130685][T11199] syzkaller0: entered allmulticast mode [ 309.548848][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 313.713386][T11206] tipc: Enabled bearer , priority 0 [ 313.841975][T11206] tipc: Disabling bearer [ 313.903327][T11236] tap0: tun_chr_ioctl cmd 1074025675 [ 313.908708][T11236] tap0: persist disabled [ 313.972042][T11247] netem: incorrect ge model size [ 313.983223][T11247] netem: change failed [ 314.099771][T11252] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20004 [ 314.766832][T11275] lo speed is unknown, defaulting to 1000 [ 315.098121][T11297] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1302'. [ 315.226839][T11302] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20004 [ 315.472161][T11308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1305'. [ 315.488377][T11309] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1306'. [ 315.499444][T11309] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1306'. [ 315.509456][T11309] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1306'. [ 315.604966][T11313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1306'. [ 315.711689][T11318] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1307'. [ 316.458127][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1311'. [ 316.678179][T11343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1313'. [ 316.729055][T11344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1313'. [ 316.852436][T11349] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 316.978174][T11356] netlink: 'syz.0.1317': attribute type 10 has an invalid length. [ 317.056118][T11362] lo speed is unknown, defaulting to 1000 [ 317.450070][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.457619][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.769847][T11374] dummy0: entered allmulticast mode [ 317.777364][T11371] dummy0: left allmulticast mode [ 317.930907][ T981] IPVS: starting estimator thread 0... [ 318.023579][T11382] IPVS: using max 23 ests per chain, 55200 per kthread [ 318.087974][T11387] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 318.095985][T11386] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 318.124783][T11386] nbd: must specify at least one socket [ 318.146337][T11387] nbd: must specify at least one socket [ 318.539166][T11411] tipc: Enabled bearer , priority 0 [ 318.574811][T11411] syzkaller0: entered promiscuous mode [ 318.593944][T11411] syzkaller0: entered allmulticast mode [ 318.669368][T11411] tipc: Resetting bearer [ 318.713208][T11410] tipc: Resetting bearer [ 318.770306][T11410] tipc: Disabling bearer [ 318.915263][T11436] netlink: 'syz.2.1342': attribute type 10 has an invalid length. [ 319.185446][T11452] lo speed is unknown, defaulting to 1000 [ 319.203686][T11452] lo speed is unknown, defaulting to 1000 [ 319.227116][T11452] lo speed is unknown, defaulting to 1000 [ 319.306476][T11452] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 319.333837][T11452] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 319.388875][T11452] lo speed is unknown, defaulting to 1000 [ 319.399145][T11452] lo speed is unknown, defaulting to 1000 [ 319.411284][T11452] lo speed is unknown, defaulting to 1000 [ 319.421697][T11452] lo speed is unknown, defaulting to 1000 [ 319.435378][T11452] lo speed is unknown, defaulting to 1000 [ 319.531037][T11469] netlink: 'syz.0.1351': attribute type 4 has an invalid length. [ 319.886819][T11494] sctp: [Deprecated]: syz.3.1358 (pid 11494) Use of int in maxseg socket option. [ 319.886819][T11494] Use struct sctp_assoc_value instead [ 319.901767][T11495] sctp: [Deprecated]: syz.3.1358 (pid 11495) Use of int in maxseg socket option. [ 319.901767][T11495] Use struct sctp_assoc_value instead [ 320.109915][T11504] __nla_validate_parse: 18 callbacks suppressed [ 320.109936][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 320.226887][T11515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1361'. [ 320.242055][T11514] lo speed is unknown, defaulting to 1000 [ 320.271655][T11515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1361'. [ 320.311912][T11515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1361'. [ 320.321499][T11515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1361'. [ 320.468644][T11521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1365'. [ 320.667072][T11528] xfrm1: entered allmulticast mode [ 320.880389][T11533] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1367'. [ 321.089293][T11514] lo speed is unknown, defaulting to 1000 [ 321.704455][T11554] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20003 [ 321.923087][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 321.989183][T11565] netlink: 'syz.4.1377': attribute type 15 has an invalid length. [ 322.052507][T11569] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1375'. [ 322.244847][T11581] tipc: Enabling of bearer rejected, failed to enable media [ 322.296127][T11585] netlink: 'syz.1.1381': attribute type 4 has an invalid length. [ 322.821908][T11598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 322.837288][T11599] netlink: 'syz.1.1386': attribute type 7 has an invalid length. [ 322.896565][T11599] : entered promiscuous mode [ 322.921510][T11601] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 322.973180][T11598] macvlan2: entered promiscuous mode [ 322.987323][T11598] macvlan2: entered allmulticast mode [ 323.007307][T11601] openvswitch: netlink: Message has 4 unknown bytes. [ 323.029141][T11601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.031574][T11598] bond3: entered promiscuous mode [ 323.049969][T11606] netlink: 'syz.1.1388': attribute type 8 has an invalid length. [ 323.075333][T11598] bridge1: entered promiscuous mode [ 323.081922][T11598] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 323.095213][T11598] bond3: left promiscuous mode [ 323.114291][T11598] bridge1: left promiscuous mode [ 323.208524][T11608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.248579][T11610] lo speed is unknown, defaulting to 1000 [ 323.474287][T11623] ip6tnl1: entered promiscuous mode [ 323.493934][T11623] ip6tnl1: entered allmulticast mode [ 323.662102][ T981] lo speed is unknown, defaulting to 1000 [ 323.727732][T11610] lo speed is unknown, defaulting to 1000 [ 323.728968][T11634] bond0: option packets_per_slave: invalid value (18446744071562067968) [ 323.743751][T11634] bond0: option packets_per_slave: allowed values 0 - 65535 [ 324.297116][T11658] netlink: 'syz.4.1404': attribute type 11 has an invalid length. [ 324.311431][T11658] netlink: 'syz.4.1404': attribute type 9 has an invalid length. [ 324.706246][T11680] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 325.178966][T11706] lo speed is unknown, defaulting to 1000 [ 325.378140][T11726] __nla_validate_parse: 8 callbacks suppressed [ 325.378163][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1422'. [ 325.418467][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'. [ 325.911196][T11718] lo speed is unknown, defaulting to 1000 [ 325.918522][T11706] lo speed is unknown, defaulting to 1000 [ 326.187812][T11758] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1431'. [ 326.217200][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1431'. [ 326.250395][T11758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1431'. [ 326.270415][T11760] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1432'. [ 326.284306][T11760] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1432'. [ 326.377324][T11764] openvswitch: netlink: Flow key attr not present in new flow. [ 326.488056][T11768] netlink: 'syz.3.1435': attribute type 74 has an invalid length. [ 326.512505][T11768] netlink: 'syz.3.1435': attribute type 8 has an invalid length. [ 326.520853][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 326.611090][T11772] netlink: 'syz.2.1439': attribute type 1 has an invalid length. [ 326.643115][T11772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1439'. [ 326.652310][T11772] netlink: 'syz.2.1439': attribute type 1 has an invalid length. [ 326.697524][T11772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1439'. [ 326.730629][T11718] lo speed is unknown, defaulting to 1000 [ 326.996928][T11785] veth0_vlan: left promiscuous mode [ 327.015293][T11785] veth0_vlan: entered promiscuous mode [ 327.023993][T11785] team0: Device veth0_vlan failed to register rx_handler [ 327.170499][T11794] vlan0: entered promiscuous mode [ 327.199777][T11794] vlan0: entered allmulticast mode [ 327.208284][T11794] hsr_slave_1: entered allmulticast mode [ 327.603614][T11811] validate_nla: 87 callbacks suppressed [ 327.603638][T11811] netlink: 'syz.0.1449': attribute type 29 has an invalid length. [ 327.887342][T11828] 8021q: VLANs not supported on wg0 [ 327.923172][T11828] macsec4: entered promiscuous mode [ 328.090803][T11836] netlink: 'syz.1.1457': attribute type 10 has an invalid length. [ 328.150148][T11836] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.187120][T11836] team0: entered promiscuous mode [ 328.201796][T11836] team_slave_0: entered promiscuous mode [ 328.212277][T11836] team_slave_1: entered promiscuous mode [ 328.219042][T11836] team0: entered allmulticast mode [ 328.224534][T11836] team_slave_0: entered allmulticast mode [ 328.230480][T11836] team_slave_1: entered allmulticast mode [ 328.241525][T11836] bond0: (slave team0): Enslaving as an active interface with an up link [ 328.712311][T11866] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 328.763735][T11866] vlan0: entered promiscuous mode [ 328.777358][T11866] bridge0: entered promiscuous mode [ 328.804090][T11866] vlan0: entered allmulticast mode [ 328.810251][T11866] bridge0: entered allmulticast mode [ 329.009547][T11874] lo speed is unknown, defaulting to 1000 [ 329.245916][T11876] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 329.516263][ T6613] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.517181][T11874] lo speed is unknown, defaulting to 1000 [ 329.550914][ T6613] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.559970][ T6613] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.628385][ T6613] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.105411][T11911] tipc: Enabled bearer , priority 0 [ 330.136084][T11910] tipc: Resetting bearer [ 330.225926][T11909] tipc: Disabling bearer [ 330.888912][T11952] __nla_validate_parse: 92 callbacks suppressed [ 330.888935][T11952] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1489'. [ 331.207755][T11970] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1494'. [ 331.239951][T11967] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1491'. [ 331.479676][T11977] 8021q: adding VLAN 0 to HW filter on device bond6 [ 331.541009][T11979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 331.551872][T11979] bond6: (slave macvlan2): Enslaving as a backup interface with a down link [ 331.834487][T11988] sctp: [Deprecated]: syz.3.1499 (pid 11988) Use of int in max_burst socket option. [ 331.834487][T11988] Use struct sctp_assoc_value instead [ 331.895099][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 331.940067][T11993] netlink: 'syz.4.1498': attribute type 3 has an invalid length. [ 331.956805][T11993] netlink: 'syz.4.1498': attribute type 3 has an invalid length. [ 332.022281][T11998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1502'. [ 332.023921][T11993] netlink: 'syz.4.1498': attribute type 4 has an invalid length. [ 332.043512][T11999] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 332.066568][T11998] lo speed is unknown, defaulting to 1000 [ 332.117391][T12000] Bluetooth: MGMT ver 1.23 [ 332.407022][T12006] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1504'. [ 332.433823][T12006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.545981][T11998] lo speed is unknown, defaulting to 1000 [ 333.464393][T12035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1514'. [ 333.948159][T12048] lo speed is unknown, defaulting to 1000 [ 334.090087][T12056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1518'. [ 334.193276][T12058] tipc: Enabled bearer , priority 0 [ 334.240101][T12057] tipc: Disabling bearer [ 334.548149][T12056] lo speed is unknown, defaulting to 1000 [ 334.563893][T12048] lo speed is unknown, defaulting to 1000 [ 335.178795][T12056] lo speed is unknown, defaulting to 1000 [ 336.527637][T12111] netlink: 'syz.2.1527': attribute type 13 has an invalid length. [ 336.648374][T12118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1529'. [ 336.719548][T12118] tipc: Enabled bearer , priority 0 [ 336.735281][T12118] syzkaller0: entered promiscuous mode [ 336.744628][T12118] syzkaller0: entered allmulticast mode [ 336.796820][T12117] tipc: Resetting bearer [ 336.817132][T12117] tipc: Disabling bearer [ 337.025171][T12131] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 337.033783][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1532'. [ 337.669762][T12161] lo speed is unknown, defaulting to 1000 [ 337.686259][T12162] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20003 [ 337.984383][T12174] syzkaller1: entered promiscuous mode [ 338.000347][T12174] syzkaller1: entered allmulticast mode [ 338.026383][T12176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1546'. [ 338.039474][T12161] lo speed is unknown, defaulting to 1000 [ 338.143958][T12178] vxcan1: entered allmulticast mode [ 338.390401][T12186] netlink: 'syz.3.1549': attribute type 10 has an invalid length. [ 338.408741][T12186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1549'. [ 338.433699][T12186] dummy0: entered promiscuous mode [ 338.462351][T12186] dummy0: entered allmulticast mode [ 338.507862][T12186] bridge0: port 1(dummy0) entered blocking state [ 338.542087][T12186] bridge0: port 1(dummy0) entered disabled state [ 338.609841][T12186] bridge0: port 1(dummy0) entered blocking state [ 338.616677][T12186] bridge0: port 1(dummy0) entered forwarding state [ 339.212400][T12219] netlink: 'syz.0.1557': attribute type 1 has an invalid length. [ 339.235660][T12219] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 339.371149][T12228] netlink: del zone limit has 4 unknown bytes [ 339.534528][T12237] netlink: 'syz.0.1564': attribute type 4 has an invalid length. [ 339.564046][T12240] netlink: 'syz.0.1564': attribute type 4 has an invalid length. [ 339.800654][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 340.280635][T12268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1573'. [ 340.301675][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 340.452796][T12276] tipc: Enabled bearer , priority 0 [ 340.471749][T12276] tipc: Resetting bearer [ 340.486989][T12276] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1576'. [ 340.535796][T12275] tipc: Disabling bearer [ 340.595898][T12283] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1578'. [ 340.796132][T12285] tipc: Enabled bearer , priority 0 [ 340.830472][T12285] syzkaller0: entered promiscuous mode [ 340.862106][T12285] syzkaller0: entered allmulticast mode [ 340.957865][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 341.037287][T12285] tipc: Resetting bearer [ 341.062400][T12284] tipc: Resetting bearer [ 341.115076][T12284] tipc: Disabling bearer [ 341.669260][T12328] __nla_validate_parse: 1 callbacks suppressed [ 341.669283][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 341.689491][T12328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1589'. [ 341.800929][T12335] netlink: 'syz.4.1592': attribute type 1 has an invalid length. [ 341.811900][T12335] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1592'. [ 341.860431][T12338] netlink: 'syz.3.1590': attribute type 20 has an invalid length. [ 342.008970][T12346] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1595'. [ 342.092196][T12350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.301622][T12359] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1599'. [ 342.957096][T12371] lo speed is unknown, defaulting to 1000 [ 343.116759][T12380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.598904][T12391] : entered promiscuous mode [ 343.684548][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 343.796645][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 343.977138][T12371] lo speed is unknown, defaulting to 1000 [ 343.980201][T12374] lo speed is unknown, defaulting to 1000 [ 344.077053][T12401] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1610'. [ 344.441656][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 344.475653][T12411] tipc: Enabled bearer , priority 0 [ 344.499547][T12411] syzkaller0: entered promiscuous mode [ 344.507111][T12411] syzkaller0: entered allmulticast mode [ 344.516085][T12376] lo speed is unknown, defaulting to 1000 [ 344.553228][T12411] tipc: Resetting bearer [ 344.574610][T10878] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 344.684168][T12398] lo speed is unknown, defaulting to 1000 [ 344.838884][T12398] lo speed is unknown, defaulting to 1000 [ 344.919362][T12376] lo speed is unknown, defaulting to 1000 [ 345.070734][T12374] lo speed is unknown, defaulting to 1000 [ 345.395829][T12410] tipc: Resetting bearer [ 345.450652][T12422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1614'. [ 345.467128][T12410] tipc: Disabling bearer [ 346.037844][T12432] tipc: Enabled bearer , priority 0 [ 346.076155][T12432] syzkaller0: entered promiscuous mode [ 346.093984][T12432] syzkaller0: entered allmulticast mode [ 346.134456][T12430] tipc: Resetting bearer [ 346.230839][T12429] tipc: Resetting bearer [ 346.270064][T12429] tipc: Disabling bearer [ 346.963707][T12462] netlink: 'syz.2.1628': attribute type 10 has an invalid length. [ 346.982872][T12462] __nla_validate_parse: 3 callbacks suppressed [ 346.982893][T12462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1628'. [ 346.999296][T12462] dummy0: entered allmulticast mode [ 347.009505][T12462] bridge0: port 1(dummy0) entered blocking state [ 347.016255][T12462] bridge0: port 1(dummy0) entered disabled state [ 347.028725][T12469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 347.217572][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 347.338515][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'. [ 347.681248][T12494] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1637'. [ 347.841894][T12498] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1638'. [ 348.025308][T12498] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 348.120937][T12498] vlan0: left promiscuous mode [ 348.132818][T12498] bridge0: left promiscuous mode [ 348.424739][T12511] netlink: 'syz.1.1641': attribute type 10 has an invalid length. [ 348.490029][T12511] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1641'. [ 348.864573][T12533] tipc: Enabled bearer , priority 0 [ 348.984790][T12533] Bluetooth: MGMT ver 1.23 [ 349.004942][T12535] syzkaller0: entered promiscuous mode [ 349.010796][T12535] syzkaller0: entered allmulticast mode [ 349.049575][T12532] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.069681][T12539] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 349.103360][T12535] tipc: Resetting bearer [ 349.144993][T12532] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.203251][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 349.232094][T12542] netlink: ct family unspecified [ 349.234181][T12532] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.237606][T12542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.378713][T12544] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1649'. [ 349.387581][T12532] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.498298][T12524] tipc: Resetting bearer [ 349.570812][T12551] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 349.932962][ T5929] tipc: Node number set to 4288842528 [ 352.108572][T12524] tipc: Disabling bearer [ 352.148671][T12549] lo speed is unknown, defaulting to 1000 [ 352.284889][ T1095] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.339492][ T1095] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.362150][ T1095] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.387710][ T1095] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.584193][T12584] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 352.687250][T12593] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 352.695106][T12593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1661'. [ 352.732339][T12593] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1661'. [ 352.883698][T12549] lo speed is unknown, defaulting to 1000 [ 352.931522][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 352.960898][T12607] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 352.970845][T12607] netlink: 'syz.4.1665': attribute type 2 has an invalid length. [ 352.979336][T12607] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.1665'. [ 353.006005][T12602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1663'. [ 353.023956][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 353.243802][ T30] audit: type=1800 audit(1754387974.281:3): pid=12614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1667" name="memory.events" dev="tmpfs" ino=1598 res=0 errno=0 [ 353.502837][T12617] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 353.563236][T12617] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1668'. [ 353.580325][T12617] NCSI netlink: No device for ifindex 813332851 [ 353.717478][T12547] mpoa:mpoad_close: () going down [ 353.768646][T12606] lo speed is unknown, defaulting to 1000 [ 353.961241][T12642] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:3 [ 354.219596][T12656] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.226365][T12657] FAULT_INJECTION: forcing a failure. [ 354.226365][T12657] name failslab, interval 1, probability 0, space 0, times 1 [ 354.268154][T12657] CPU: 1 UID: 0 PID: 12657 Comm: syz.2.1680 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 354.268186][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.268199][T12657] Call Trace: [ 354.268208][T12657] [ 354.268218][T12657] dump_stack_lvl+0x189/0x250 [ 354.268247][T12657] ? __pfx____ratelimit+0x10/0x10 [ 354.268277][T12657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.268310][T12657] ? __pfx__printk+0x10/0x10 [ 354.268343][T12657] ? __pfx___might_resched+0x10/0x10 [ 354.268371][T12657] ? fs_reclaim_acquire+0x7d/0x100 [ 354.268400][T12657] should_fail_ex+0x414/0x560 [ 354.268438][T12657] should_failslab+0xa8/0x100 [ 354.268460][T12657] __kmalloc_cache_noprof+0x70/0x3d0 [ 354.268488][T12657] ? rtnl_newlink+0xed/0x1c70 [ 354.268523][T12657] rtnl_newlink+0xed/0x1c70 [ 354.268561][T12657] ? __lock_acquire+0xab9/0xd20 [ 354.268599][T12657] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.268638][T12657] ? is_bpf_text_address+0x26/0x2b0 [ 354.268678][T12657] ? __lock_acquire+0xab9/0xd20 [ 354.268720][T12657] ? __lock_acquire+0xab9/0xd20 [ 354.268772][T12657] ? is_bpf_text_address+0x26/0x2b0 [ 354.268823][T12657] ? __lock_acquire+0xab9/0xd20 [ 354.268881][T12657] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.268908][T12657] rtnetlink_rcv_msg+0x7cc/0xb70 [ 354.268935][T12657] ? __lock_acquire+0xab9/0xd20 [ 354.268963][T12657] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 354.268991][T12657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.269041][T12657] netlink_rcv_skb+0x205/0x470 [ 354.269068][T12657] ? __lock_acquire+0xab9/0xd20 [ 354.269095][T12657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.269131][T12657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.269175][T12657] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.269213][T12657] netlink_unicast+0x82c/0x9e0 [ 354.269251][T12657] ? __pfx_netlink_unicast+0x10/0x10 [ 354.269280][T12657] ? netlink_sendmsg+0x642/0xb30 [ 354.269314][T12657] ? skb_put+0x11b/0x210 [ 354.269339][T12657] netlink_sendmsg+0x805/0xb30 [ 354.269380][T12657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.269414][T12657] ? aa_sock_msg_perm+0x94/0x160 [ 354.269442][T12657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.269465][T12657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.269495][T12657] __sock_sendmsg+0x219/0x270 [ 354.269526][T12657] ____sys_sendmsg+0x505/0x830 [ 354.269554][T12657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.269587][T12657] ? import_iovec+0x74/0xa0 [ 354.269619][T12657] ___sys_sendmsg+0x21f/0x2a0 [ 354.269644][T12657] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.269712][T12657] ? __fget_files+0x2a/0x420 [ 354.269731][T12657] ? __fget_files+0x3a0/0x420 [ 354.269764][T12657] __x64_sys_sendmsg+0x19b/0x260 [ 354.269789][T12657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.269824][T12657] ? __pfx_ksys_write+0x10/0x10 [ 354.269850][T12657] ? rcu_is_watching+0x15/0xb0 [ 354.269887][T12657] ? do_syscall_64+0xbe/0x3b0 [ 354.269920][T12657] do_syscall_64+0xfa/0x3b0 [ 354.269947][T12657] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.269975][T12657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.269995][T12657] ? clear_bhb_loop+0x60/0xb0 [ 354.270020][T12657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.270040][T12657] RIP: 0033:0x7f7ab0f8eb69 [ 354.270059][T12657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.270077][T12657] RSP: 002b:00007f7ab1e52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.270101][T12657] RAX: ffffffffffffffda RBX: 00007f7ab11b5fa0 RCX: 00007f7ab0f8eb69 [ 354.270116][T12657] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 354.270129][T12657] RBP: 00007f7ab1e52090 R08: 0000000000000000 R09: 0000000000000000 [ 354.270142][T12657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.270154][T12657] R13: 0000000000000000 R14: 00007f7ab11b5fa0 R15: 00007ffe8b106eb8 [ 354.270190][T12657] [ 354.697817][T12606] lo speed is unknown, defaulting to 1000 [ 354.753546][T12661] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 354.766312][T12641] lo speed is unknown, defaulting to 1000 [ 354.911881][T12666] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 354.924823][T12666] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 355.105410][T12676] netlink: 'syz.2.1686': attribute type 10 has an invalid length. [ 355.126272][T12676] dummy0: left allmulticast mode [ 355.142186][T12676] bridge0: port 1(dummy0) entered disabled state [ 355.187513][T12676] team0: Failed to send options change via netlink (err -105) [ 355.219242][T12676] team0: Port device dummy0 added [ 355.251224][T12641] lo speed is unknown, defaulting to 1000 [ 355.448940][T12682] netlink: 'syz.2.1687': attribute type 10 has an invalid length. [ 355.459448][T12682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1687'. [ 355.485501][T12682] geneve0: entered promiscuous mode [ 355.497405][T12682] team0: Port device geneve0 added [ 355.504750][ T8568] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.575271][ T8568] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.613189][ T8576] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.642065][ T8576] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.772365][T12690] netlink: 'syz.3.1690': attribute type 11 has an invalid length. [ 355.789218][T12690] netlink: 'syz.3.1690': attribute type 11 has an invalid length. [ 355.822377][T12690] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1690'. [ 355.848108][ T8568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.859771][ T8568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.145744][T12703] FAULT_INJECTION: forcing a failure. [ 356.145744][T12703] name failslab, interval 1, probability 0, space 0, times 0 [ 356.176598][T12703] CPU: 0 UID: 0 PID: 12703 Comm: syz.4.1693 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 356.176632][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.176645][T12703] Call Trace: [ 356.176654][T12703] [ 356.176663][T12703] dump_stack_lvl+0x189/0x250 [ 356.176690][T12703] ? __pfx____ratelimit+0x10/0x10 [ 356.176721][T12703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.176742][T12703] ? __pfx__printk+0x10/0x10 [ 356.176775][T12703] ? __pfx___might_resched+0x10/0x10 [ 356.176804][T12703] ? fs_reclaim_acquire+0x7d/0x100 [ 356.176831][T12703] should_fail_ex+0x414/0x560 [ 356.176870][T12703] should_failslab+0xa8/0x100 [ 356.176892][T12703] __kmalloc_cache_noprof+0x70/0x3d0 [ 356.176921][T12703] ? rtnl_newlink+0xed/0x1c70 [ 356.176948][T12703] ? kasan_save_free_info+0x46/0x50 [ 356.176976][T12703] rtnl_newlink+0xed/0x1c70 [ 356.177004][T12703] ? netlink_sendmsg+0x805/0xb30 [ 356.177031][T12703] ? __sock_sendmsg+0x219/0x270 [ 356.177054][T12703] ? ____sys_sendmsg+0x505/0x830 [ 356.177072][T12703] ? ___sys_sendmsg+0x21f/0x2a0 [ 356.177089][T12703] ? __x64_sys_sendmsg+0x19b/0x260 [ 356.177107][T12703] ? do_syscall_64+0xfa/0x3b0 [ 356.177134][T12703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.177164][T12703] ? __pfx_rtnl_newlink+0x10/0x10 [ 356.177219][T12703] ? kasan_quarantine_put+0xdd/0x220 [ 356.177247][T12703] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.177281][T12703] ? nlmon_xmit+0xb0/0x100 [ 356.177301][T12703] ? kmem_cache_free+0x18f/0x400 [ 356.177348][T12703] ? __local_bh_enable_ip+0x12d/0x1c0 [ 356.177378][T12703] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.177406][T12703] ? __local_bh_enable_ip+0x12d/0x1c0 [ 356.177436][T12703] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 356.177470][T12703] ? __dev_queue_xmit+0x27b/0x3b50 [ 356.177509][T12703] ? __lock_acquire+0xab9/0xd20 [ 356.177566][T12703] ? __pfx_rtnl_newlink+0x10/0x10 [ 356.177595][T12703] rtnetlink_rcv_msg+0x7cc/0xb70 [ 356.177629][T12703] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 356.177657][T12703] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 356.177684][T12703] ? ref_tracker_free+0x63a/0x7d0 [ 356.177706][T12703] ? __asan_memcpy+0x40/0x70 [ 356.177729][T12703] ? __pfx_ref_tracker_free+0x10/0x10 [ 356.177764][T12703] netlink_rcv_skb+0x205/0x470 [ 356.177795][T12703] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 356.177827][T12703] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.177869][T12703] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.177908][T12703] netlink_unicast+0x82c/0x9e0 [ 356.177946][T12703] ? __pfx_netlink_unicast+0x10/0x10 [ 356.177975][T12703] ? netlink_sendmsg+0x642/0xb30 [ 356.178001][T12703] ? skb_put+0x11b/0x210 [ 356.178025][T12703] netlink_sendmsg+0x805/0xb30 [ 356.178066][T12703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.178100][T12703] ? aa_sock_msg_perm+0x94/0x160 [ 356.178149][T12703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.178171][T12703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.178200][T12703] __sock_sendmsg+0x219/0x270 [ 356.178230][T12703] ____sys_sendmsg+0x505/0x830 [ 356.178258][T12703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.178292][T12703] ? import_iovec+0x74/0xa0 [ 356.178333][T12703] ___sys_sendmsg+0x21f/0x2a0 [ 356.178359][T12703] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.178425][T12703] ? __fget_files+0x2a/0x420 [ 356.178445][T12703] ? __fget_files+0x3a0/0x420 [ 356.178475][T12703] __x64_sys_sendmsg+0x19b/0x260 [ 356.178499][T12703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.178532][T12703] ? __pfx_ksys_write+0x10/0x10 [ 356.178566][T12703] ? do_syscall_64+0xbe/0x3b0 [ 356.178599][T12703] do_syscall_64+0xfa/0x3b0 [ 356.178626][T12703] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.178653][T12703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.178673][T12703] ? clear_bhb_loop+0x60/0xb0 [ 356.178698][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.178717][T12703] RIP: 0033:0x7f972678eb69 [ 356.178736][T12703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.178754][T12703] RSP: 002b:00007f97275e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.178778][T12703] RAX: ffffffffffffffda RBX: 00007f97269b5fa0 RCX: 00007f972678eb69 [ 356.178793][T12703] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 356.178806][T12703] RBP: 00007f97275e0090 R08: 0000000000000000 R09: 0000000000000000 [ 356.178819][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.178831][T12703] R13: 0000000000000000 R14: 00007f97269b5fa0 R15: 00007ffc421bb618 [ 356.178865][T12703] [ 356.838908][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 356.858706][T12713] netlink: 'syz.3.1698': attribute type 20 has an invalid length. [ 356.867845][T12708] tipc: Enabled bearer , priority 0 [ 356.888547][T12713] netlink: 'syz.3.1698': attribute type 21 has an invalid length. [ 356.908225][T12710] dvmrp0: entered allmulticast mode [ 356.922414][T12708] syzkaller0: entered promiscuous mode [ 356.928305][T12708] syzkaller0: entered allmulticast mode [ 356.985699][T12707] tipc: Resetting bearer [ 357.104179][T12707] tipc: Disabling bearer [ 357.453601][T12748] FAULT_INJECTION: forcing a failure. [ 357.453601][T12748] name failslab, interval 1, probability 0, space 0, times 0 [ 357.472485][T12748] CPU: 0 UID: 0 PID: 12748 Comm: syz.4.1707 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 357.472519][T12748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.472545][T12748] Call Trace: [ 357.472553][T12748] [ 357.472562][T12748] dump_stack_lvl+0x189/0x250 [ 357.472588][T12748] ? __pfx____ratelimit+0x10/0x10 [ 357.472616][T12748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.472636][T12748] ? __pfx__printk+0x10/0x10 [ 357.472665][T12748] ? __pfx___might_resched+0x10/0x10 [ 357.472693][T12748] ? fs_reclaim_acquire+0x7d/0x100 [ 357.472722][T12748] should_fail_ex+0x414/0x560 [ 357.472758][T12748] should_failslab+0xa8/0x100 [ 357.472781][T12748] __kmalloc_cache_noprof+0x70/0x3d0 [ 357.472809][T12748] ? __request_module+0x2b5/0x5e0 [ 357.472843][T12748] __request_module+0x2b5/0x5e0 [ 357.472874][T12748] ? rtnl_link_ops_get+0x23/0x250 [ 357.472894][T12748] ? __pfx___request_module+0x10/0x10 [ 357.472937][T12748] ? rtnl_link_ops_get+0x23/0x250 [ 357.472953][T12748] ? rtnl_link_ops_get+0x23/0x250 [ 357.472973][T12748] ? rtnl_link_ops_get+0x215/0x250 [ 357.472996][T12748] rtnl_newlink+0x64f/0x1c70 [ 357.473023][T12748] ? netlink_sendmsg+0x805/0xb30 [ 357.473053][T12748] ? __x64_sys_sendmsg+0x19b/0x260 [ 357.473072][T12748] ? do_syscall_64+0xfa/0x3b0 [ 357.473099][T12748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.473128][T12748] ? __pfx_rtnl_newlink+0x10/0x10 [ 357.473185][T12748] ? kasan_quarantine_put+0xdd/0x220 [ 357.473212][T12748] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.473247][T12748] ? nlmon_xmit+0xb0/0x100 [ 357.473267][T12748] ? kmem_cache_free+0x18f/0x400 [ 357.473304][T12748] ? __local_bh_enable_ip+0x12d/0x1c0 [ 357.473334][T12748] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.473362][T12748] ? __local_bh_enable_ip+0x12d/0x1c0 [ 357.473391][T12748] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 357.473424][T12748] ? __dev_queue_xmit+0x27b/0x3b50 [ 357.473463][T12748] ? __lock_acquire+0xab9/0xd20 [ 357.473522][T12748] ? __pfx_rtnl_newlink+0x10/0x10 [ 357.473558][T12748] rtnetlink_rcv_msg+0x7cc/0xb70 [ 357.473592][T12748] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 357.473620][T12748] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 357.473645][T12748] ? ref_tracker_free+0x63a/0x7d0 [ 357.473667][T12748] ? __asan_memcpy+0x40/0x70 [ 357.473691][T12748] ? __pfx_ref_tracker_free+0x10/0x10 [ 357.473726][T12748] netlink_rcv_skb+0x205/0x470 [ 357.473757][T12748] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 357.473788][T12748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 357.473832][T12748] ? netlink_deliver_tap+0x2e/0x1b0 [ 357.473870][T12748] netlink_unicast+0x82c/0x9e0 [ 357.473908][T12748] ? __pfx_netlink_unicast+0x10/0x10 [ 357.473936][T12748] ? netlink_sendmsg+0x642/0xb30 [ 357.473961][T12748] ? skb_put+0x11b/0x210 [ 357.473984][T12748] netlink_sendmsg+0x805/0xb30 [ 357.474022][T12748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.474055][T12748] ? aa_sock_msg_perm+0x94/0x160 [ 357.474085][T12748] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.474107][T12748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.474137][T12748] __sock_sendmsg+0x219/0x270 [ 357.474168][T12748] ____sys_sendmsg+0x505/0x830 [ 357.474196][T12748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.474229][T12748] ? import_iovec+0x74/0xa0 [ 357.474261][T12748] ___sys_sendmsg+0x21f/0x2a0 [ 357.474285][T12748] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.474351][T12748] ? __fget_files+0x2a/0x420 [ 357.474371][T12748] ? __fget_files+0x3a0/0x420 [ 357.474404][T12748] __x64_sys_sendmsg+0x19b/0x260 [ 357.474429][T12748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.474463][T12748] ? __pfx_ksys_write+0x10/0x10 [ 357.474487][T12748] ? rcu_is_watching+0x15/0xb0 [ 357.474523][T12748] ? do_syscall_64+0xbe/0x3b0 [ 357.474563][T12748] do_syscall_64+0xfa/0x3b0 [ 357.474590][T12748] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.474616][T12748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.474636][T12748] ? clear_bhb_loop+0x60/0xb0 [ 357.474661][T12748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.474680][T12748] RIP: 0033:0x7f972678eb69 [ 357.474699][T12748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.474717][T12748] RSP: 002b:00007f97275e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.474740][T12748] RAX: ffffffffffffffda RBX: 00007f97269b5fa0 RCX: 00007f972678eb69 [ 357.474756][T12748] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 357.474769][T12748] RBP: 00007f97275e0090 R08: 0000000000000000 R09: 0000000000000000 [ 357.474782][T12748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.474794][T12748] R13: 0000000000000000 R14: 00007f97269b5fa0 R15: 00007ffc421bb618 [ 357.474829][T12748] [ 358.117352][T12759] tipc: Enabled bearer , priority 0 [ 358.151019][T12759] syzkaller0: entered promiscuous mode [ 358.169772][T12759] syzkaller0: entered allmulticast mode [ 358.194430][T12765] __nla_validate_parse: 2 callbacks suppressed [ 358.194452][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1710'. [ 358.213636][T12766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1711'. [ 358.217482][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1710'. [ 358.425130][T12775] tipc: Resetting bearer [ 358.445349][T12758] tipc: Resetting bearer [ 358.492222][T12758] tipc: Disabling bearer [ 358.779418][T12792] lo speed is unknown, defaulting to 1000 [ 358.841226][T12796] sctp: [Deprecated]: syz.4.1718 (pid 12796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.841226][T12796] Use struct sctp_sack_info instead [ 358.858117][T12798] Bluetooth: MGMT ver 1.23 [ 358.867899][T12798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1719'. [ 358.893434][T12798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1719'. [ 358.995951][T12805] FAULT_INJECTION: forcing a failure. [ 358.995951][T12805] name failslab, interval 1, probability 0, space 0, times 0 [ 359.020463][T12805] CPU: 0 UID: 0 PID: 12805 Comm: syz.0.1721 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 359.020493][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.020505][T12805] Call Trace: [ 359.020514][T12805] [ 359.020523][T12805] dump_stack_lvl+0x189/0x250 [ 359.020549][T12805] ? __pfx____ratelimit+0x10/0x10 [ 359.020590][T12805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.020611][T12805] ? __pfx__printk+0x10/0x10 [ 359.020643][T12805] ? __pfx___might_resched+0x10/0x10 [ 359.020679][T12805] should_fail_ex+0x414/0x560 [ 359.020716][T12805] should_failslab+0xa8/0x100 [ 359.020738][T12805] __kmalloc_cache_noprof+0x70/0x3d0 [ 359.020765][T12805] ? call_usermodehelper_setup+0x8e/0x270 [ 359.020791][T12805] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 359.020825][T12805] call_usermodehelper_setup+0x8e/0x270 [ 359.020870][T12805] ? __pfx_free_modprobe_argv+0x10/0x10 [ 359.020904][T12805] __request_module+0x39f/0x5e0 [ 359.020937][T12805] ? rtnl_link_ops_get+0x23/0x250 [ 359.020957][T12805] ? __pfx___request_module+0x10/0x10 [ 359.020998][T12805] ? rtnl_link_ops_get+0x23/0x250 [ 359.021015][T12805] ? rtnl_link_ops_get+0x23/0x250 [ 359.021034][T12805] ? rtnl_link_ops_get+0x215/0x250 [ 359.021058][T12805] rtnl_newlink+0x64f/0x1c70 [ 359.021102][T12805] ? __pfx_rtnl_newlink+0x10/0x10 [ 359.021140][T12805] ? is_bpf_text_address+0x26/0x2b0 [ 359.021179][T12805] ? __lock_acquire+0xab9/0xd20 [ 359.021220][T12805] ? __lock_acquire+0xab9/0xd20 [ 359.021270][T12805] ? is_bpf_text_address+0x26/0x2b0 [ 359.021319][T12805] ? __lock_acquire+0xab9/0xd20 [ 359.021375][T12805] ? __pfx_rtnl_newlink+0x10/0x10 [ 359.021402][T12805] rtnetlink_rcv_msg+0x7cc/0xb70 [ 359.021429][T12805] ? __lock_acquire+0xab9/0xd20 [ 359.021457][T12805] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 359.021484][T12805] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.021533][T12805] netlink_rcv_skb+0x205/0x470 [ 359.021559][T12805] ? __lock_acquire+0xab9/0xd20 [ 359.021594][T12805] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.021624][T12805] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.021666][T12805] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.021704][T12805] netlink_unicast+0x82c/0x9e0 [ 359.021741][T12805] ? __pfx_netlink_unicast+0x10/0x10 [ 359.021770][T12805] ? netlink_sendmsg+0x642/0xb30 [ 359.021796][T12805] ? skb_put+0x11b/0x210 [ 359.021820][T12805] netlink_sendmsg+0x805/0xb30 [ 359.021860][T12805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.021893][T12805] ? aa_sock_msg_perm+0x94/0x160 [ 359.021921][T12805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.021943][T12805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.021973][T12805] __sock_sendmsg+0x219/0x270 [ 359.022003][T12805] ____sys_sendmsg+0x505/0x830 [ 359.022032][T12805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.022064][T12805] ? import_iovec+0x74/0xa0 [ 359.022096][T12805] ___sys_sendmsg+0x21f/0x2a0 [ 359.022120][T12805] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.022185][T12805] ? __fget_files+0x2a/0x420 [ 359.022204][T12805] ? __fget_files+0x3a0/0x420 [ 359.022236][T12805] __x64_sys_sendmsg+0x19b/0x260 [ 359.022261][T12805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.022294][T12805] ? __pfx_ksys_write+0x10/0x10 [ 359.022318][T12805] ? rcu_is_watching+0x15/0xb0 [ 359.022354][T12805] ? do_syscall_64+0xbe/0x3b0 [ 359.022387][T12805] do_syscall_64+0xfa/0x3b0 [ 359.022413][T12805] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.022439][T12805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.022459][T12805] ? clear_bhb_loop+0x60/0xb0 [ 359.022485][T12805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.022503][T12805] RIP: 0033:0x7f6b3058eb69 [ 359.022521][T12805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.022543][T12805] RSP: 002b:00007f6b31413038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.022573][T12805] RAX: ffffffffffffffda RBX: 00007f6b307b5fa0 RCX: 00007f6b3058eb69 [ 359.022587][T12805] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 359.022600][T12805] RBP: 00007f6b31413090 R08: 0000000000000000 R09: 0000000000000000 [ 359.022612][T12805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.022624][T12805] R13: 0000000000000000 R14: 00007f6b307b5fa0 R15: 00007ffd4628f178 [ 359.022657][T12805] [ 359.640022][T12792] lo speed is unknown, defaulting to 1000 [ 359.640105][T12793] lo speed is unknown, defaulting to 1000 [ 359.714599][T12814] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 360.056417][T12826] sctp: [Deprecated]: syz.1.1727 (pid 12826) Use of int in max_burst socket option deprecated. [ 360.056417][T12826] Use struct sctp_assoc_value instead [ 360.160976][T12811] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1723'. [ 360.357449][T12835] netlink: 'syz.2.1729': attribute type 3 has an invalid length. [ 360.369388][T12835] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1729'. [ 360.387837][T12836] TCP: TCP_TX_DELAY enabled [ 360.570728][T12841] team0: No ports can be present during mode change [ 361.190021][T12850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.221175][T12849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.468324][T12793] lo speed is unknown, defaulting to 1000 [ 361.543900][T12859] FAULT_INJECTION: forcing a failure. [ 361.543900][T12859] name failslab, interval 1, probability 0, space 0, times 0 [ 361.590528][T12859] CPU: 1 UID: 0 PID: 12859 Comm: syz.1.1734 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 361.590559][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.590571][T12859] Call Trace: [ 361.590579][T12859] [ 361.590588][T12859] dump_stack_lvl+0x189/0x250 [ 361.590614][T12859] ? __pfx____ratelimit+0x10/0x10 [ 361.590643][T12859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.590663][T12859] ? __pfx__printk+0x10/0x10 [ 361.590694][T12859] ? __pfx___might_resched+0x10/0x10 [ 361.590729][T12859] should_fail_ex+0x414/0x560 [ 361.590765][T12859] should_failslab+0xa8/0x100 [ 361.590788][T12859] __kmalloc_cache_noprof+0x70/0x3d0 [ 361.590816][T12859] ? call_usermodehelper_setup+0x8e/0x270 [ 361.590844][T12859] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 361.590877][T12859] call_usermodehelper_setup+0x8e/0x270 [ 361.590902][T12859] ? __pfx_free_modprobe_argv+0x10/0x10 [ 361.590934][T12859] __request_module+0x39f/0x5e0 [ 361.590965][T12859] ? rtnl_link_ops_get+0x23/0x250 [ 361.590984][T12859] ? __pfx___request_module+0x10/0x10 [ 361.591021][T12859] ? rtnl_link_ops_get+0x23/0x250 [ 361.591038][T12859] ? rtnl_link_ops_get+0x23/0x250 [ 361.591058][T12859] ? rtnl_link_ops_get+0x215/0x250 [ 361.591080][T12859] rtnl_newlink+0x64f/0x1c70 [ 361.591105][T12859] ? netlink_sendmsg+0x805/0xb30 [ 361.591135][T12859] ? __x64_sys_sendmsg+0x19b/0x260 [ 361.591154][T12859] ? do_syscall_64+0xfa/0x3b0 [ 361.591181][T12859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.591209][T12859] ? __pfx_rtnl_newlink+0x10/0x10 [ 361.591266][T12859] ? kasan_quarantine_put+0xdd/0x220 [ 361.591292][T12859] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.591327][T12859] ? nlmon_xmit+0xb0/0x100 [ 361.591346][T12859] ? kmem_cache_free+0x18f/0x400 [ 361.591383][T12859] ? __local_bh_enable_ip+0x12d/0x1c0 [ 361.591413][T12859] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.591442][T12859] ? __local_bh_enable_ip+0x12d/0x1c0 [ 361.591479][T12859] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 361.591512][T12859] ? __dev_queue_xmit+0x27b/0x3b50 [ 361.591550][T12859] ? __lock_acquire+0xab9/0xd20 [ 361.591606][T12859] ? __pfx_rtnl_newlink+0x10/0x10 [ 361.591634][T12859] rtnetlink_rcv_msg+0x7cc/0xb70 [ 361.591668][T12859] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 361.591695][T12859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 361.591721][T12859] ? ref_tracker_free+0x63a/0x7d0 [ 361.591742][T12859] ? __asan_memcpy+0x40/0x70 [ 361.591766][T12859] ? __pfx_ref_tracker_free+0x10/0x10 [ 361.591799][T12859] netlink_rcv_skb+0x205/0x470 [ 361.591830][T12859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 361.591861][T12859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.591903][T12859] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.591942][T12859] netlink_unicast+0x82c/0x9e0 [ 361.591978][T12859] ? __pfx_netlink_unicast+0x10/0x10 [ 361.592007][T12859] ? netlink_sendmsg+0x642/0xb30 [ 361.592034][T12859] ? skb_put+0x11b/0x210 [ 361.592058][T12859] netlink_sendmsg+0x805/0xb30 [ 361.592099][T12859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.592131][T12859] ? aa_sock_msg_perm+0x94/0x160 [ 361.592160][T12859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.592182][T12859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.592211][T12859] __sock_sendmsg+0x219/0x270 [ 361.592241][T12859] ____sys_sendmsg+0x505/0x830 [ 361.592270][T12859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.592303][T12859] ? import_iovec+0x74/0xa0 [ 361.592335][T12859] ___sys_sendmsg+0x21f/0x2a0 [ 361.592359][T12859] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.592425][T12859] ? __fget_files+0x2a/0x420 [ 361.592444][T12859] ? __fget_files+0x3a0/0x420 [ 361.592484][T12859] __x64_sys_sendmsg+0x19b/0x260 [ 361.592510][T12859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.592548][T12859] ? __pfx_ksys_write+0x10/0x10 [ 361.592572][T12859] ? rcu_is_watching+0x15/0xb0 [ 361.592606][T12859] ? do_syscall_64+0xbe/0x3b0 [ 361.592636][T12859] do_syscall_64+0xfa/0x3b0 [ 361.592662][T12859] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.592688][T12859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.592708][T12859] ? clear_bhb_loop+0x60/0xb0 [ 361.592733][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.592752][T12859] RIP: 0033:0x7efcb2f8eb69 [ 361.592771][T12859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.592789][T12859] RSP: 002b:00007efcb3eb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.592813][T12859] RAX: ffffffffffffffda RBX: 00007efcb31b5fa0 RCX: 00007efcb2f8eb69 [ 361.592828][T12859] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 361.592842][T12859] RBP: 00007efcb3eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 361.592854][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.592867][T12859] R13: 0000000000000000 R14: 00007efcb31b5fa0 R15: 00007ffe768c02e8 [ 361.592901][T12859] [ 361.611329][T12857] lo speed is unknown, defaulting to 1000 [ 362.782002][T12884] syzkaller1: entered promiscuous mode [ 362.798152][T12884] syzkaller1: entered allmulticast mode [ 363.202675][T12857] lo speed is unknown, defaulting to 1000 [ 363.272214][T12860] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 363.319878][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 364.010013][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'. [ 364.400805][T12919] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1749'. [ 365.086673][T12946] pim6reg1: entered promiscuous mode [ 365.103542][T12946] pim6reg1: entered allmulticast mode [ 365.233825][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1756'. [ 365.291902][T12946] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1757'. [ 365.333936][T12954] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1760'. [ 365.516341][T12945] team0 (unregistering): Port device dummy0 removed [ 365.526390][T12945] geneve0: left promiscuous mode [ 365.548053][T12945] team0 (unregistering): Port device geneve0 removed [ 365.683446][T12951] 8021q: adding VLAN 0 to HW filter on device bond8 [ 365.694614][T12951] bond8: entered promiscuous mode [ 365.700001][T12951] bond8: entered allmulticast mode [ 365.706903][T12951] team0: Port device bond8 added [ 365.779197][ T1095] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.791948][ T1095] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.838644][ T1095] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.898607][ T1095] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.173159][T12972] FAULT_INJECTION: forcing a failure. [ 366.173159][T12972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.223679][T12972] CPU: 1 UID: 0 PID: 12972 Comm: syz.0.1761 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 366.223711][T12972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.223724][T12972] Call Trace: [ 366.223732][T12972] [ 366.223741][T12972] dump_stack_lvl+0x189/0x250 [ 366.223769][T12972] ? __pfx____ratelimit+0x10/0x10 [ 366.223798][T12972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.223819][T12972] ? __pfx__printk+0x10/0x10 [ 366.223860][T12972] should_fail_ex+0x414/0x560 [ 366.223911][T12972] _copy_to_user+0x31/0xb0 [ 366.223942][T12972] simple_read_from_buffer+0xe1/0x170 [ 366.223979][T12972] proc_fail_nth_read+0x1b3/0x220 [ 366.224007][T12972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 366.224035][T12972] ? rw_verify_area+0x258/0x650 [ 366.224062][T12972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 366.224087][T12972] vfs_read+0x1fd/0x980 [ 366.224114][T12972] ? fdget_pos+0x247/0x320 [ 366.224139][T12972] ? __pfx___mutex_lock+0x10/0x10 [ 366.224169][T12972] ? __pfx_vfs_read+0x10/0x10 [ 366.224206][T12972] ? __fget_files+0x2a/0x420 [ 366.224231][T12972] ? __fget_files+0x3a0/0x420 [ 366.224248][T12972] ? __fget_files+0x2a/0x420 [ 366.224279][T12972] ksys_read+0x145/0x250 [ 366.224310][T12972] ? __pfx_ksys_read+0x10/0x10 [ 366.224334][T12972] ? rcu_is_watching+0x15/0xb0 [ 366.224370][T12972] ? do_syscall_64+0xbe/0x3b0 [ 366.224404][T12972] do_syscall_64+0xfa/0x3b0 [ 366.224430][T12972] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.224456][T12972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.224475][T12972] ? clear_bhb_loop+0x60/0xb0 [ 366.224501][T12972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.224519][T12972] RIP: 0033:0x7f6b3058d57c [ 366.224538][T12972] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 366.224556][T12972] RSP: 002b:00007f6b31413030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.224578][T12972] RAX: ffffffffffffffda RBX: 00007f6b307b5fa0 RCX: 00007f6b3058d57c [ 366.224593][T12972] RDX: 000000000000000f RSI: 00007f6b314130a0 RDI: 0000000000000005 [ 366.224606][T12972] RBP: 00007f6b31413090 R08: 0000000000000000 R09: 0000000000000000 [ 366.224618][T12972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.224631][T12972] R13: 0000000000000000 R14: 00007f6b307b5fa0 R15: 00007ffd4628f178 [ 366.224673][T12972] [ 366.553148][T12993] netlink: 996 bytes leftover after parsing attributes in process `syz.4.1765'. [ 366.651800][T12997] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1766'. [ 366.730246][T12997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1766'. [ 366.909045][T13011] netlink: 4288 bytes leftover after parsing attributes in process `syz.2.1770'. [ 366.961078][T13009] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 367.017593][T13019] gretap0: entered promiscuous mode [ 367.141584][T13028] netlink: 'syz.2.1774': attribute type 20 has an invalid length. [ 367.316381][T13037] FAULT_INJECTION: forcing a failure. [ 367.316381][T13037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.337836][T13037] CPU: 0 UID: 0 PID: 13037 Comm: syz.0.1777 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 367.337866][T13037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.337877][T13037] Call Trace: [ 367.337885][T13037] [ 367.337894][T13037] dump_stack_lvl+0x189/0x250 [ 367.337921][T13037] ? __pfx____ratelimit+0x10/0x10 [ 367.337949][T13037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.337969][T13037] ? __pfx__printk+0x10/0x10 [ 367.338021][T13037] ? __might_fault+0xb0/0x130 [ 367.338063][T13037] should_fail_ex+0x414/0x560 [ 367.338101][T13037] _copy_from_user+0x2d/0xb0 [ 367.338129][T13037] wext_handle_ioctl+0xba/0x1c0 [ 367.338164][T13037] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 367.338191][T13037] ? __lock_acquire+0xab9/0xd20 [ 367.338237][T13037] sock_ioctl+0x15f/0x790 [ 367.338266][T13037] ? __pfx_sock_ioctl+0x10/0x10 [ 367.338290][T13037] ? __fget_files+0x2a/0x420 [ 367.338308][T13037] ? __fget_files+0x3a0/0x420 [ 367.338326][T13037] ? __fget_files+0x2a/0x420 [ 367.338349][T13037] ? bpf_lsm_file_ioctl+0x9/0x20 [ 367.338373][T13037] ? __pfx_sock_ioctl+0x10/0x10 [ 367.338405][T13037] __se_sys_ioctl+0xf9/0x170 [ 367.338433][T13037] do_syscall_64+0xfa/0x3b0 [ 367.338459][T13037] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.338485][T13037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.338505][T13037] ? clear_bhb_loop+0x60/0xb0 [ 367.338529][T13037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.338547][T13037] RIP: 0033:0x7f6b3058eb69 [ 367.338566][T13037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.338584][T13037] RSP: 002b:00007f6b31413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.338605][T13037] RAX: ffffffffffffffda RBX: 00007f6b307b5fa0 RCX: 00007f6b3058eb69 [ 367.338620][T13037] RDX: 0000200000000040 RSI: 0000000000008b1b RDI: 000000000000000c [ 367.338631][T13037] RBP: 00007f6b31413090 R08: 0000000000000000 R09: 0000000000000000 [ 367.338644][T13037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.338655][T13037] R13: 0000000000000000 R14: 00007f6b307b5fa0 R15: 00007ffd4628f178 [ 367.338689][T13037] [ 367.608725][T13049] lo speed is unknown, defaulting to 1000 [ 368.161001][T13049] lo speed is unknown, defaulting to 1000 [ 368.684568][T13072] lo speed is unknown, defaulting to 1000 [ 368.755664][T13075] __nla_validate_parse: 4 callbacks suppressed [ 368.755684][T13075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1787'. [ 369.137019][T13072] lo speed is unknown, defaulting to 1000 [ 369.279035][T13073] lo speed is unknown, defaulting to 1000 [ 369.911469][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 369.916384][T13092] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 369.987666][T13096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1792'. [ 370.137001][T13092] 8021q: adding VLAN 0 to HW filter on device bond9 [ 370.152304][T13092] bond8: (slave bond9): making interface the new active one [ 370.164563][T13102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1790'. [ 370.193012][T13092] bond8: (slave bond9): Enslaving as an active interface with an up link [ 370.275636][T13102] 8021q: adding VLAN 0 to HW filter on device bond8 [ 370.430591][T13073] lo speed is unknown, defaulting to 1000 [ 370.447653][T13111] v: renamed from ip6_vti0 [ 370.486243][T13111] nbd: nbd2 already in use [ 370.491180][T13111] block nbd2: NBD_DISCONNECT [ 370.496409][T13111] block nbd2: Send disconnect failed -22 [ 370.502411][T13111] block nbd2: Disconnected due to user request. [ 370.541477][T13111] block nbd2: shutting down sockets [ 370.570604][T13116] sock: sock_set_timeout: `syz.3.1797' (pid 13116) tries to set negative timeout [ 370.638982][T13120] FAULT_INJECTION: forcing a failure. [ 370.638982][T13120] name failslab, interval 1, probability 0, space 0, times 0 [ 370.677563][T13120] CPU: 1 UID: 0 PID: 13120 Comm: syz.0.1795 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 370.677596][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.677608][T13120] Call Trace: [ 370.677616][T13120] [ 370.677626][T13120] dump_stack_lvl+0x189/0x250 [ 370.677653][T13120] ? __pfx____ratelimit+0x10/0x10 [ 370.677683][T13120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.677704][T13120] ? __pfx__printk+0x10/0x10 [ 370.677737][T13120] ? __pfx___might_resched+0x10/0x10 [ 370.677765][T13120] ? fs_reclaim_acquire+0x7d/0x100 [ 370.677793][T13120] should_fail_ex+0x414/0x560 [ 370.677833][T13120] should_failslab+0xa8/0x100 [ 370.677855][T13120] __kmalloc_noprof+0xcb/0x4f0 [ 370.677882][T13120] ? ioctl_standard_iw_point+0x4d5/0xd40 [ 370.677901][T13120] ? rcu_is_watching+0x15/0xb0 [ 370.677936][T13120] ioctl_standard_iw_point+0x4d5/0xd40 [ 370.678000][T13120] ? __pfx_cfg80211_wext_giwessid+0x10/0x10 [ 370.678028][T13120] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 370.678050][T13120] ? __pfx___mutex_lock+0x10/0x10 [ 370.678087][T13120] ? full_name_hash+0x92/0xe0 [ 370.678111][T13120] ? __pfx_cfg80211_wext_giwessid+0x10/0x10 [ 370.678147][T13120] ioctl_standard_call+0xaf/0x1b0 [ 370.678182][T13120] ? __pfx_cfg80211_wext_giwessid+0x10/0x10 [ 370.678207][T13120] wext_ioctl_dispatch+0xee/0x410 [ 370.678234][T13120] ? __pfx_ioctl_standard_call+0x10/0x10 [ 370.678269][T13120] wext_handle_ioctl+0x100/0x1c0 [ 370.678303][T13120] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 370.678330][T13120] ? __lock_acquire+0xab9/0xd20 [ 370.678377][T13120] sock_ioctl+0x15f/0x790 [ 370.678406][T13120] ? __pfx_sock_ioctl+0x10/0x10 [ 370.678431][T13120] ? __fget_files+0x2a/0x420 [ 370.678449][T13120] ? __fget_files+0x3a0/0x420 [ 370.678467][T13120] ? __fget_files+0x2a/0x420 [ 370.678490][T13120] ? bpf_lsm_file_ioctl+0x9/0x20 [ 370.678516][T13120] ? __pfx_sock_ioctl+0x10/0x10 [ 370.678539][T13120] __se_sys_ioctl+0xf9/0x170 [ 370.678569][T13120] do_syscall_64+0xfa/0x3b0 [ 370.678596][T13120] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.678623][T13120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.678643][T13120] ? clear_bhb_loop+0x60/0xb0 [ 370.678669][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.678688][T13120] RIP: 0033:0x7f6b3058eb69 [ 370.678706][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.678733][T13120] RSP: 002b:00007f6b313f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.678756][T13120] RAX: ffffffffffffffda RBX: 00007f6b307b6080 RCX: 00007f6b3058eb69 [ 370.678771][T13120] RDX: 0000200000000040 RSI: 0000000000008b1b RDI: 000000000000000d [ 370.678784][T13120] RBP: 00007f6b313f2090 R08: 0000000000000000 R09: 0000000000000000 [ 370.678796][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.678808][T13120] R13: 0000000000000000 R14: 00007f6b307b6080 R15: 00007ffd4628f178 [ 370.678844][T13120] [ 371.650436][T13142] lo speed is unknown, defaulting to 1000 [ 371.688727][T13144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.809968][T13142] lo speed is unknown, defaulting to 1000 [ 378.867056][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.873630][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.857524][ T5160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.867177][ T5160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.876467][ T5160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.885054][ T5160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.894728][ T5160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.896474][ T5852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 385.917466][ T5852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 385.926918][ T5852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 385.939184][ T5852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 385.943619][T13153] lo speed is unknown, defaulting to 1000 [ 385.947820][ T5852] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 386.257309][T13155] lo speed is unknown, defaulting to 1000 [ 386.265171][T13153] lo speed is unknown, defaulting to 1000 [ 386.437996][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 386.452971][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 386.461452][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 386.471199][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 386.479309][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 386.647564][T13155] lo speed is unknown, defaulting to 1000 [ 386.648098][T13153] chnl_net:caif_netlink_parms(): no params data found [ 386.671970][T13158] lo speed is unknown, defaulting to 1000 [ 386.911976][T13153] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.920440][T13153] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.933326][T13153] bridge_slave_0: entered allmulticast mode [ 386.942037][T13153] bridge_slave_0: entered promiscuous mode [ 386.964711][T13153] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.972409][T13153] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.980899][T13158] lo speed is unknown, defaulting to 1000 [ 386.981472][T13153] bridge_slave_1: entered allmulticast mode [ 386.995766][T13153] bridge_slave_1: entered promiscuous mode [ 387.289962][T13153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.379822][T13153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.568225][T13155] chnl_net:caif_netlink_parms(): no params data found [ 387.603767][ T5852] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 387.620155][ T5852] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 387.629210][ T5852] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 387.631399][T13153] team0: Port device team_slave_0 added [ 387.646452][ T5852] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 387.661318][ T5160] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 387.669471][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 387.680295][T13153] team0: Port device team_slave_1 added [ 387.685922][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 387.687502][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 387.712643][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 387.722486][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 387.785087][T13153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.792183][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.819587][T13153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.863474][T13153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.870476][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.901645][T13153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.983057][ T5852] Bluetooth: hci5: command tx timeout [ 388.010400][T13174] lo speed is unknown, defaulting to 1000 [ 388.063307][ T5852] Bluetooth: hci6: command tx timeout [ 388.183336][T13153] hsr_slave_0: entered promiscuous mode [ 388.190506][T13153] hsr_slave_1: entered promiscuous mode [ 388.214121][T13153] debugfs: 'hsr0' already exists in 'hsr' [ 388.220277][T13153] Cannot create hsr debugfs directory [ 388.233072][T13155] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.244229][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.251682][T13155] bridge_slave_0: entered allmulticast mode [ 388.269301][T13155] bridge_slave_0: entered promiscuous mode [ 388.287794][T13158] chnl_net:caif_netlink_parms(): no params data found [ 388.303828][T13174] lo speed is unknown, defaulting to 1000 [ 388.320847][T13155] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.328217][T13155] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.336258][T13155] bridge_slave_1: entered allmulticast mode [ 388.343887][T13155] bridge_slave_1: entered promiscuous mode [ 388.367689][T13172] lo speed is unknown, defaulting to 1000 [ 388.525841][T13155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.540421][T13155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.548147][ T5852] Bluetooth: hci7: command tx timeout [ 388.726250][T13155] team0: Port device team_slave_0 added [ 388.733169][T13172] lo speed is unknown, defaulting to 1000 [ 388.737077][T13155] team0: Port device team_slave_1 added [ 388.790429][T13158] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.797823][T13158] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.805470][T13158] bridge_slave_0: entered allmulticast mode [ 388.813946][T13158] bridge_slave_0: entered promiscuous mode [ 388.886973][T13158] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.895101][T13158] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.902463][T13158] bridge_slave_1: entered allmulticast mode [ 388.909886][T13158] bridge_slave_1: entered promiscuous mode [ 388.947765][T13155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.955217][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.981976][T13155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.995913][T13155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.004082][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.031186][T13155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.081135][T13158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.128334][T13158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.230030][T13155] hsr_slave_0: entered promiscuous mode [ 389.236714][T13155] hsr_slave_1: entered promiscuous mode [ 389.244312][T13155] debugfs: 'hsr0' already exists in 'hsr' [ 389.250077][T13155] Cannot create hsr debugfs directory [ 389.258189][T13158] team0: Port device team_slave_0 added [ 389.268466][T13158] team0: Port device team_slave_1 added [ 389.347616][T13158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.355193][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.382090][T13158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.400427][T13158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.407737][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.434237][T13158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.667706][T13158] hsr_slave_0: entered promiscuous mode [ 389.675082][T13158] hsr_slave_1: entered promiscuous mode [ 389.681532][T13158] debugfs: 'hsr0' already exists in 'hsr' [ 389.688963][T13158] Cannot create hsr debugfs directory [ 389.743061][ T5852] Bluetooth: hci8: command tx timeout [ 389.764958][T13174] chnl_net:caif_netlink_parms(): no params data found [ 389.823266][ T5852] Bluetooth: hci9: command tx timeout [ 390.064156][ T5852] Bluetooth: hci5: command tx timeout [ 390.088999][T13172] chnl_net:caif_netlink_parms(): no params data found [ 390.126360][T13174] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.133816][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.141281][T13174] bridge_slave_0: entered allmulticast mode [ 390.143404][ T5852] Bluetooth: hci6: command tx timeout [ 390.154738][T13174] bridge_slave_0: entered promiscuous mode [ 390.209495][T13174] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.217460][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.226004][T13174] bridge_slave_1: entered allmulticast mode [ 390.233512][T13174] bridge_slave_1: entered promiscuous mode [ 390.340442][T13174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.380948][T13174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.426185][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.433697][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.440920][T13172] bridge_slave_0: entered allmulticast mode [ 390.448906][T13172] bridge_slave_0: entered promiscuous mode [ 390.487085][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.498873][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.507532][T13172] bridge_slave_1: entered allmulticast mode [ 390.515407][T13172] bridge_slave_1: entered promiscuous mode [ 390.525456][T13174] team0: Port device team_slave_0 added [ 390.567539][T13174] team0: Port device team_slave_1 added [ 390.598095][T13172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.612085][T13172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.623213][ T5852] Bluetooth: hci7: command tx timeout [ 390.684183][T13174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.691178][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.722048][T13174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.735502][T13174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.742478][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.769557][T13174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.832280][T13172] team0: Port device team_slave_0 added [ 390.842522][T13172] team0: Port device team_slave_1 added [ 390.907620][T13172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.914927][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.943618][T13172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.973250][T13172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.980948][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.008970][T13172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.039349][T13174] hsr_slave_0: entered promiscuous mode [ 391.047177][T13174] hsr_slave_1: entered promiscuous mode [ 391.054604][T13174] debugfs: 'hsr0' already exists in 'hsr' [ 391.060558][T13174] Cannot create hsr debugfs directory [ 391.148124][T13172] hsr_slave_0: entered promiscuous mode [ 391.155287][T13172] hsr_slave_1: entered promiscuous mode [ 391.161705][T13172] debugfs: 'hsr0' already exists in 'hsr' [ 391.167894][T13172] Cannot create hsr debugfs directory [ 391.823085][ T5852] Bluetooth: hci8: command tx timeout [ 391.905421][ T5852] Bluetooth: hci9: command tx timeout [ 392.143502][ T5852] Bluetooth: hci5: command tx timeout [ 392.223207][ T5852] Bluetooth: hci6: command tx timeout [ 392.702777][ T5852] Bluetooth: hci7: command tx timeout [ 393.903069][ T5852] Bluetooth: hci8: command tx timeout [ 393.993548][ T5852] Bluetooth: hci9: command tx timeout [ 394.223703][ T5852] Bluetooth: hci5: command tx timeout [ 394.304198][ T5852] Bluetooth: hci6: command tx timeout [ 394.792956][ T5852] Bluetooth: hci7: command tx timeout [ 395.982983][ T5852] Bluetooth: hci8: command tx timeout [ 396.063712][ T5852] Bluetooth: hci9: command tx timeout [ 440.306070][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.313375][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.936504][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 445.951499][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 445.963330][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 445.973572][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 445.981647][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 446.021738][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 446.031951][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 446.036693][T13198] lo speed is unknown, defaulting to 1000 [ 446.046880][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 446.065281][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 446.079548][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 446.246401][T13198] lo speed is unknown, defaulting to 1000 [ 446.247578][T13200] lo speed is unknown, defaulting to 1000 [ 446.536118][T13200] lo speed is unknown, defaulting to 1000 [ 446.616605][T13198] chnl_net:caif_netlink_parms(): no params data found [ 447.000707][T13200] chnl_net:caif_netlink_parms(): no params data found [ 447.027344][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.045870][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.061450][T13198] bridge_slave_0: entered allmulticast mode [ 447.068599][ T5852] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 447.072109][T13198] bridge_slave_0: entered promiscuous mode [ 447.078640][ T5852] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 447.090842][ T5852] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 447.094682][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.099224][ T5852] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 447.114640][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.115439][ T5852] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 447.122244][T13198] bridge_slave_1: entered allmulticast mode [ 447.145680][T13198] bridge_slave_1: entered promiscuous mode [ 447.223674][T13198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.245837][T13198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.338953][T13198] team0: Port device team_slave_0 added [ 447.349281][T13198] team0: Port device team_slave_1 added [ 447.356172][T13200] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.364013][T13200] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.371368][T13200] bridge_slave_0: entered allmulticast mode [ 447.378971][T13200] bridge_slave_0: entered promiscuous mode [ 447.413761][T13200] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.421102][T13200] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.428927][T13200] bridge_slave_1: entered allmulticast mode [ 447.437279][T13200] bridge_slave_1: entered promiscuous mode [ 447.462491][T13212] lo speed is unknown, defaulting to 1000 [ 447.526648][T13200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.572111][T13200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.624217][T13198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.631232][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.702686][T13198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.725515][T13198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.742648][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.832616][T13198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.967465][T13200] team0: Port device team_slave_0 added [ 447.983283][T13212] lo speed is unknown, defaulting to 1000 [ 448.018279][T13200] team0: Port device team_slave_1 added [ 448.062829][ T51] Bluetooth: hci10: command tx timeout [ 448.143523][ T51] Bluetooth: hci11: command tx timeout [ 448.237079][T13200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.243494][ T5852] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 448.253876][ T5852] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 448.263182][T13200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.264304][ T5852] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 448.299313][ T5852] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 448.307479][ T5852] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 448.314950][T13200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.378346][T13200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.386955][T13200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.415189][T13200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.449717][T13198] hsr_slave_0: entered promiscuous mode [ 448.457684][T13198] hsr_slave_1: entered promiscuous mode [ 448.470622][T13198] debugfs: 'hsr0' already exists in 'hsr' [ 448.477890][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 448.480361][T13198] Cannot create hsr debugfs directory [ 448.487516][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 448.499393][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 448.507790][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 448.515961][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 448.665932][T13221] lo speed is unknown, defaulting to 1000 [ 448.801364][T13200] hsr_slave_0: entered promiscuous mode [ 448.819345][T13200] hsr_slave_1: entered promiscuous mode [ 448.830247][T13200] debugfs: 'hsr0' already exists in 'hsr' [ 448.836440][T13200] Cannot create hsr debugfs directory [ 448.977323][T13221] lo speed is unknown, defaulting to 1000 [ 448.977348][T13219] lo speed is unknown, defaulting to 1000 [ 449.186154][ T51] Bluetooth: hci12: command tx timeout [ 449.365250][T13219] lo speed is unknown, defaulting to 1000 [ 449.429124][T13212] chnl_net:caif_netlink_parms(): no params data found [ 449.692741][T13212] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.699950][T13212] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.708108][T13212] bridge_slave_0: entered allmulticast mode [ 449.717626][T13212] bridge_slave_0: entered promiscuous mode [ 449.745018][T13212] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.752243][T13212] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.762045][T13212] bridge_slave_1: entered allmulticast mode [ 449.773968][T13212] bridge_slave_1: entered promiscuous mode [ 449.918845][T13212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.986258][T13212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.131831][T13212] team0: Port device team_slave_0 added [ 450.147011][ T51] Bluetooth: hci10: command tx timeout [ 450.161937][T13221] chnl_net:caif_netlink_parms(): no params data found [ 450.179754][T13212] team0: Port device team_slave_1 added [ 450.186312][T13219] chnl_net:caif_netlink_parms(): no params data found [ 450.233233][ T51] Bluetooth: hci11: command tx timeout [ 450.359798][T13212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.367842][T13212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.394834][T13212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.406398][ T51] Bluetooth: hci13: command tx timeout [ 450.412372][T13212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.420158][T13212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.446804][T13212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.543457][ T51] Bluetooth: hci14: command tx timeout [ 450.571731][T13221] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.579641][T13221] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.587604][T13221] bridge_slave_0: entered allmulticast mode [ 450.596050][T13221] bridge_slave_0: entered promiscuous mode [ 450.604723][T13221] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.611865][T13221] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.619226][T13221] bridge_slave_1: entered allmulticast mode [ 450.627961][T13221] bridge_slave_1: entered promiscuous mode [ 450.739311][T13219] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.748256][T13219] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.755717][T13219] bridge_slave_0: entered allmulticast mode [ 450.763465][T13219] bridge_slave_0: entered promiscuous mode [ 450.792363][T13221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.807196][T13219] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.814914][T13219] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.822263][T13219] bridge_slave_1: entered allmulticast mode [ 450.829920][T13219] bridge_slave_1: entered promiscuous mode [ 450.845098][T13212] hsr_slave_0: entered promiscuous mode [ 450.851926][T13212] hsr_slave_1: entered promiscuous mode [ 450.859500][T13212] debugfs: 'hsr0' already exists in 'hsr' [ 450.865695][T13212] Cannot create hsr debugfs directory [ 450.874590][T13221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.982442][T13221] team0: Port device team_slave_0 added [ 450.996180][T13219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.029399][T13221] team0: Port device team_slave_1 added [ 451.055252][T13219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.157896][T13221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.165942][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.193057][T13221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.206575][T13221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.214296][T13221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.240684][T13221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.263008][ T51] Bluetooth: hci12: command tx timeout [ 451.312243][T13219] team0: Port device team_slave_0 added [ 451.322243][T13219] team0: Port device team_slave_1 added [ 451.407210][T13219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.414962][T13219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.442674][T13219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.456350][T13219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.463590][T13219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.489971][T13219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.596666][T13221] hsr_slave_0: entered promiscuous mode [ 451.605238][T13221] hsr_slave_1: entered promiscuous mode [ 451.611930][T13221] debugfs: 'hsr0' already exists in 'hsr' [ 451.617837][T13221] Cannot create hsr debugfs directory [ 451.714215][T13219] hsr_slave_0: entered promiscuous mode [ 451.721078][T13219] hsr_slave_1: entered promiscuous mode [ 451.728016][T13219] debugfs: 'hsr0' already exists in 'hsr' [ 451.734492][T13219] Cannot create hsr debugfs directory [ 452.223283][ T51] Bluetooth: hci10: command tx timeout [ 452.303294][ T51] Bluetooth: hci11: command tx timeout [ 452.462918][ T5852] Bluetooth: hci13: command tx timeout [ 452.622859][ T51] Bluetooth: hci14: command tx timeout [ 453.342763][ T51] Bluetooth: hci12: command tx timeout [ 454.303257][ T51] Bluetooth: hci10: command tx timeout [ 454.383110][ T51] Bluetooth: hci11: command tx timeout [ 454.543057][ T51] Bluetooth: hci13: command tx timeout [ 454.703483][ T51] Bluetooth: hci14: command tx timeout [ 455.423206][ T51] Bluetooth: hci12: command tx timeout [ 456.623266][ T51] Bluetooth: hci13: command tx timeout [ 456.783578][ T51] Bluetooth: hci14: command tx timeout [ 478.223021][ T51] Bluetooth: hci4: command 0x0401 tx timeout [ 501.747440][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.754058][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.573267][ T51] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 506.583533][ T51] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 506.592239][ T51] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 506.600848][ T51] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 506.609202][ T51] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 506.650262][ T5852] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 506.660535][ T5852] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 506.669428][ T5852] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 506.680175][T13243] lo speed is unknown, defaulting to 1000 [ 506.680426][ T5852] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 506.694618][ T5852] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 506.910233][T13245] lo speed is unknown, defaulting to 1000 [ 506.910337][T13243] lo speed is unknown, defaulting to 1000 [ 507.331805][T13245] lo speed is unknown, defaulting to 1000 [ 507.415762][T13243] chnl_net:caif_netlink_parms(): no params data found [ 507.636960][T13257] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 507.646676][T13257] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 507.655779][T13257] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 507.667220][T13257] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 507.682809][T13257] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 507.775940][T13243] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.793262][T13243] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.800804][T13243] bridge_slave_0: entered allmulticast mode [ 507.822416][T13243] bridge_slave_0: entered promiscuous mode [ 507.848905][T13243] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.866749][T13243] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.882436][T13243] bridge_slave_1: entered allmulticast mode [ 507.905055][T13243] bridge_slave_1: entered promiscuous mode [ 508.073015][T13243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.111371][T13243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.122266][T13254] lo speed is unknown, defaulting to 1000 [ 508.223206][T13257] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 508.244528][T13257] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 508.264383][T13257] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 508.273768][T13257] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 508.285735][T13257] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 508.325136][T13243] team0: Port device team_slave_0 added [ 508.385795][T13243] team0: Port device team_slave_1 added [ 508.523876][T13243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.531047][T13243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.592711][T13243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.625939][T13243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.642595][T13243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.677408][T13243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.689788][T13245] chnl_net:caif_netlink_parms(): no params data found [ 508.702976][T13257] Bluetooth: hci15: command tx timeout [ 508.757434][T13254] lo speed is unknown, defaulting to 1000 [ 508.783725][T13257] Bluetooth: hci16: command tx timeout [ 508.799522][T13261] lo speed is unknown, defaulting to 1000 [ 508.934174][ T51] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 508.950360][ T5852] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 508.958705][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 508.961202][ T5160] Bluetooth: hci5: command 0x0406 tx timeout [ 508.965771][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 508.980002][ T5852] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 508.991057][ T5852] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 509.000054][ T5852] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 509.104870][T13245] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.113128][T13245] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.120579][T13245] bridge_slave_0: entered allmulticast mode [ 509.149239][T13245] bridge_slave_0: entered promiscuous mode [ 509.167911][T13245] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.182903][T13245] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.190309][T13245] bridge_slave_1: entered allmulticast mode [ 509.199051][T13245] bridge_slave_1: entered promiscuous mode [ 509.212080][T13243] hsr_slave_0: entered promiscuous mode [ 509.219424][T13243] hsr_slave_1: entered promiscuous mode [ 509.225889][T13243] debugfs: 'hsr0' already exists in 'hsr' [ 509.231625][T13243] Cannot create hsr debugfs directory [ 509.284136][T13261] lo speed is unknown, defaulting to 1000 [ 509.422266][T13245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.444568][T13245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.475325][T13267] lo speed is unknown, defaulting to 1000 [ 509.695091][T13245] team0: Port device team_slave_0 added [ 509.744039][ T5852] Bluetooth: hci17: command tx timeout [ 509.760823][T13245] team0: Port device team_slave_1 added [ 509.877828][T13267] lo speed is unknown, defaulting to 1000 [ 509.974687][T13245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.982293][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.017029][T13245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.037153][T13245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.044902][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.073041][T13245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.133442][T13254] chnl_net:caif_netlink_parms(): no params data found [ 510.270706][T13245] hsr_slave_0: entered promiscuous mode [ 510.278660][T13245] hsr_slave_1: entered promiscuous mode [ 510.285746][T13245] debugfs: 'hsr0' already exists in 'hsr' [ 510.291918][T13245] Cannot create hsr debugfs directory [ 510.383137][ T5852] Bluetooth: hci18: command tx timeout [ 510.634605][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.642056][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.650584][T13254] bridge_slave_0: entered allmulticast mode [ 510.659273][T13254] bridge_slave_0: entered promiscuous mode [ 510.672435][T13254] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.684595][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.692039][T13254] bridge_slave_1: entered allmulticast mode [ 510.705072][T13254] bridge_slave_1: entered promiscuous mode [ 510.783927][ T5852] Bluetooth: hci15: command tx timeout [ 510.863216][ T5852] Bluetooth: hci16: command tx timeout [ 510.880269][T13254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.955551][T13254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.985119][T13261] chnl_net:caif_netlink_parms(): no params data found [ 511.103738][ T5852] Bluetooth: hci19: command tx timeout [ 511.149550][T13254] team0: Port device team_slave_0 added [ 511.160139][T13254] team0: Port device team_slave_1 added [ 511.166875][T13267] chnl_net:caif_netlink_parms(): no params data found [ 511.312134][T13254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.319801][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.347476][T13254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.414071][T13254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.421365][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.456995][T13254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.566673][T13261] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.574685][T13261] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.582276][T13261] bridge_slave_0: entered allmulticast mode [ 511.597299][T13261] bridge_slave_0: entered promiscuous mode [ 511.670368][T13261] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.678963][T13261] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.687152][T13261] bridge_slave_1: entered allmulticast mode [ 511.697261][T13261] bridge_slave_1: entered promiscuous mode [ 511.728108][T13267] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.736585][T13267] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.744814][T13267] bridge_slave_0: entered allmulticast mode [ 511.752895][T13267] bridge_slave_0: entered promiscuous mode [ 511.823239][ T5852] Bluetooth: hci17: command tx timeout [ 511.838400][T13267] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.846386][T13267] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.859765][T13267] bridge_slave_1: entered allmulticast mode [ 511.868572][T13267] bridge_slave_1: entered promiscuous mode [ 511.878739][T13261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.895778][T13261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.913119][T13254] hsr_slave_0: entered promiscuous mode [ 511.921536][T13254] hsr_slave_1: entered promiscuous mode [ 511.928749][T13254] debugfs: 'hsr0' already exists in 'hsr' [ 511.934751][T13254] Cannot create hsr debugfs directory [ 512.017824][T13267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.075251][T13267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.106849][T13261] team0: Port device team_slave_0 added [ 512.117759][T13261] team0: Port device team_slave_1 added [ 512.246374][T13267] team0: Port device team_slave_0 added [ 512.259073][T13267] team0: Port device team_slave_1 added [ 512.266594][T13261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.274136][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.300672][T13261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.314327][T13261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.321450][T13261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.348128][T13261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.440862][T13267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.448063][T13267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.479901][T13270] Bluetooth: hci18: command tx timeout [ 512.479902][T13267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.517120][T13267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.524398][T13267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.551666][T13267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.670520][T13261] hsr_slave_0: entered promiscuous mode [ 512.678640][T13261] hsr_slave_1: entered promiscuous mode [ 512.686015][T13261] debugfs: 'hsr0' already exists in 'hsr' [ 512.691828][T13261] Cannot create hsr debugfs directory [ 512.863276][T13270] Bluetooth: hci15: command tx timeout [ 512.888473][T13267] hsr_slave_0: entered promiscuous mode [ 512.895942][T13267] hsr_slave_1: entered promiscuous mode [ 512.902688][T13267] debugfs: 'hsr0' already exists in 'hsr' [ 512.908525][T13267] Cannot create hsr debugfs directory [ 512.944045][T13270] Bluetooth: hci16: command tx timeout [ 513.183945][T13270] Bluetooth: hci19: command tx timeout [ 513.903946][T13270] Bluetooth: hci17: command tx timeout [ 514.065612][T13270] Bluetooth: hci8: command 0x0406 tx timeout [ 514.065618][ T5849] Bluetooth: hci9: command 0x0406 tx timeout [ 514.543300][ T5852] Bluetooth: hci18: command tx timeout [ 514.943068][ T5852] Bluetooth: hci15: command tx timeout [ 515.022867][ T5852] Bluetooth: hci16: command tx timeout [ 515.183558][ T31] INFO: task syz.2.1794:13111 blocked for more than 143 seconds. [ 515.191822][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 515.199982][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.209600][ T31] task:syz.2.1794 state:D stack:22264 pid:13111 tgid:13110 ppid:5853 task_flags:0x400140 flags:0x00004004 [ 515.222447][ T31] Call Trace: [ 515.226952][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 515.230207][ T31] __schedule+0x1737/0x4d30 [ 515.239790][ T31] ? check_path+0x21/0x40 [ 515.253052][ T31] ? schedule+0x165/0x360 [ 515.257467][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.262446][ T31] ? __pfx___schedule+0x10/0x10 [ 515.263308][ T5852] Bluetooth: hci19: command tx timeout [ 515.323111][ T31] ? schedule+0x91/0x360 [ 515.327449][ T31] schedule+0x165/0x360 [ 515.331654][ T31] schedule_timeout+0x9a/0x270 [ 515.361765][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 515.368182][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.374457][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.379767][ T31] ? wait_for_completion+0x267/0x5d0 [ 515.385252][ T31] wait_for_completion+0x2bf/0x5d0 [ 515.390596][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 515.396431][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 515.402278][ T31] ? check_flush_dependency+0x88/0x400 [ 515.408033][ T31] __flush_workqueue+0x6f7/0x14b0 [ 515.413363][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 515.419720][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 515.425364][ T31] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 515.431351][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 515.437130][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 515.442888][ T31] nbd_genl_disconnect+0x485/0x570 [ 515.448138][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 515.454069][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 515.460596][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 515.466530][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 515.473214][ T31] ? stack_trace_save+0x9c/0xe0 [ 515.478133][ T31] genl_rcv_msg+0x60e/0x790 [ 515.482839][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.487945][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 515.493979][ T31] netlink_rcv_skb+0x205/0x470 [ 515.498787][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.503838][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.508984][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.514781][ T31] ? down_read+0x1ad/0x2e0 [ 515.519257][ T31] genl_rcv+0x28/0x40 [ 515.523371][ T31] netlink_unicast+0x82c/0x9e0 [ 515.528280][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 515.533895][ T31] ? netlink_sendmsg+0x642/0xb30 [ 515.538883][ T31] ? skb_put+0x11b/0x210 [ 515.543489][ T31] netlink_sendmsg+0x805/0xb30 [ 515.548616][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.554135][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 515.559216][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 515.564762][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.571360][ T31] __sock_sendmsg+0x219/0x270 [ 515.576511][ T31] ____sys_sendmsg+0x505/0x830 [ 515.581490][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.586941][ T31] ? import_iovec+0x74/0xa0 [ 515.591675][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 515.596559][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.601894][ T31] ? __fget_files+0x2a/0x420 [ 515.606599][ T31] ? __fget_files+0x3a0/0x420 [ 515.611324][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 515.616673][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.622618][ T31] ? rcu_is_watching+0x15/0xb0 [ 515.627461][ T31] ? do_syscall_64+0xbe/0x3b0 [ 515.632197][ T31] do_syscall_64+0xfa/0x3b0 [ 515.636881][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.642344][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.648823][ T31] ? clear_bhb_loop+0x60/0xb0 [ 515.654039][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.660190][ T31] RIP: 0033:0x7f7ab0f8eb69 [ 515.665890][ T31] RSP: 002b:00007f7ab1e52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.674601][ T31] RAX: ffffffffffffffda RBX: 00007f7ab11b5fa0 RCX: 00007f7ab0f8eb69 [ 515.683112][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 515.691734][ T31] RBP: 00007f7ab1011df1 R08: 0000000000000000 R09: 0000000000000000 [ 515.700086][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.709912][ T31] R13: 0000000000000000 R14: 00007f7ab11b5fa0 R15: 00007ffe8b106eb8 [ 515.718830][ T31] [ 515.722032][ T31] INFO: task syz.2.1794:13121 blocked for more than 143 seconds. [ 515.730549][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 515.738271][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.763735][ T31] task:syz.2.1794 state:D stack:27912 pid:13121 tgid:13110 ppid:5853 task_flags:0x400140 flags:0x00004004 [ 515.776331][ T31] Call Trace: [ 515.779643][ T31] [ 515.783104][ T31] __schedule+0x1737/0x4d30 [ 515.787961][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.793140][ T31] ? schedule+0x165/0x360 [ 515.797564][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.803044][ T31] ? __pfx___schedule+0x10/0x10 [ 515.808251][ T31] ? schedule+0x91/0x360 [ 515.812874][ T31] schedule+0x165/0x360 [ 515.817335][ T31] schedule_preempt_disabled+0x13/0x30 [ 515.823923][ T31] __mutex_lock+0x7e3/0x1340 [ 515.828579][ T31] ? __mutex_lock+0x5b6/0x1340 [ 515.833499][ T31] ? genl_rcv_msg+0x10d/0x790 [ 515.838328][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 515.843948][ T31] ? stack_trace_save+0x9c/0xe0 [ 515.848921][ T31] ? radix_tree_lookup+0x240/0x290 [ 515.854256][ T31] genl_rcv_msg+0x10d/0x790 [ 515.858812][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.864240][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.869402][ T31] netlink_rcv_skb+0x205/0x470 [ 515.874371][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.879417][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.885429][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.890963][ T31] ? down_read+0x1ad/0x2e0 [ 515.895615][ T31] genl_rcv+0x28/0x40 [ 515.899641][ T31] netlink_unicast+0x82c/0x9e0 [ 515.905134][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 515.910703][ T31] ? netlink_sendmsg+0x642/0xb30 [ 515.915984][ T31] ? skb_put+0x11b/0x210 [ 515.920723][ T31] netlink_sendmsg+0x805/0xb30 [ 515.926266][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.931981][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 515.937700][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 515.943650][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.948994][ T31] __sock_sendmsg+0x219/0x270 [ 515.953973][ T31] ____sys_sendmsg+0x505/0x830 [ 515.958972][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.964969][ T31] ? import_iovec+0x74/0xa0 [ 515.969778][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 515.975089][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.980698][ T31] ? __fget_files+0x2a/0x420 [ 515.986706][ T31] ? __fget_files+0x3a0/0x420 [ 515.991447][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 515.992872][ T5852] Bluetooth: hci17: command tx timeout [ 515.997378][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.008983][ T31] ? rcu_is_watching+0x15/0xb0 [ 516.014321][ T31] ? do_syscall_64+0xbe/0x3b0 [ 516.019349][ T31] do_syscall_64+0xfa/0x3b0 [ 516.024735][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.030104][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.036453][ T31] ? clear_bhb_loop+0x60/0xb0 [ 516.041225][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.047742][ T31] RIP: 0033:0x7f7ab0f8eb69 [ 516.052690][ T31] RSP: 002b:00007f7ab1e10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.061660][ T31] RAX: ffffffffffffffda RBX: 00007f7ab11b6160 RCX: 00007f7ab0f8eb69 [ 516.070501][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 516.078920][ T31] RBP: 00007f7ab1011df1 R08: 0000000000000000 R09: 0000000000000000 [ 516.087480][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.095909][ T31] R13: 0000000000000000 R14: 00007f7ab11b6160 R15: 00007ffe8b106eb8 [ 516.105039][ T31] [ 516.108294][ T31] INFO: task syz.0.1795:13113 blocked for more than 144 seconds. [ 516.117218][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 516.125485][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.134611][ T31] task:syz.0.1795 state:D stack:25896 pid:13113 tgid:13112 ppid:5837 task_flags:0x400140 flags:0x00004004 [ 516.149110][ T31] Call Trace: [ 516.152716][ T31] [ 516.155736][ T31] __schedule+0x1737/0x4d30 [ 516.160307][ T31] ? arch_stack_walk+0xfc/0x150 [ 516.166217][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.171302][ T31] ? schedule+0x165/0x360 [ 516.176020][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.181189][ T31] ? __pfx___schedule+0x10/0x10 [ 516.186621][ T31] ? schedule+0x91/0x360 [ 516.191000][ T31] schedule+0x165/0x360 [ 516.195513][ T31] schedule_preempt_disabled+0x13/0x30 [ 516.201160][ T31] __mutex_lock+0x7e3/0x1340 [ 516.206286][ T31] ? __mutex_lock+0x5b6/0x1340 [ 516.211189][ T31] ? genl_rcv_msg+0x10d/0x790 [ 516.216842][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 516.222278][ T31] ? stack_trace_save+0x9c/0xe0 [ 516.227797][ T31] ? radix_tree_lookup+0x240/0x290 [ 516.233479][ T31] genl_rcv_msg+0x10d/0x790 [ 516.238216][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.244144][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.249336][ T31] netlink_rcv_skb+0x205/0x470 [ 516.254567][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.259569][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.265193][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.270861][ T31] ? down_read+0x1ad/0x2e0 [ 516.275402][ T31] genl_rcv+0x28/0x40 [ 516.279462][ T31] netlink_unicast+0x82c/0x9e0 [ 516.284658][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 516.290033][ T31] ? netlink_sendmsg+0x642/0xb30 [ 516.295701][ T31] ? skb_put+0x11b/0x210 [ 516.300067][ T31] netlink_sendmsg+0x805/0xb30 [ 516.305498][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.310873][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 516.316060][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.321561][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.328003][ T31] __sock_sendmsg+0x219/0x270 [ 516.332813][ T31] __sys_sendto+0x3bd/0x520 [ 516.341491][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 516.347361][ T31] ? count_memcg_event_mm+0x21/0x260 [ 516.353167][ T31] ? exc_page_fault+0x76/0xf0 [ 516.358124][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 516.364087][ T31] __x64_sys_sendto+0xde/0x100 [ 516.369895][ T31] do_syscall_64+0xfa/0x3b0 [ 516.374717][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.380835][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.387539][ T31] ? clear_bhb_loop+0x60/0xb0 [ 516.392652][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.398798][ T31] RIP: 0033:0x7f6b305909fc [ 516.403895][ T31] RSP: 002b:00007f6b31411ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 516.412367][ T31] RAX: ffffffffffffffda RBX: 00007f6b31411fc0 RCX: 00007f6b305909fc [ 516.421189][ T31] RDX: 0000000000000020 RSI: 00007f6b31412010 RDI: 0000000000000009 [ 516.429680][ T31] RBP: 0000000000000000 R08: 00007f6b31411f14 R09: 000000000000000c [ 516.438446][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 516.447564][ T31] R13: 00007f6b31411f68 R14: 00007f6b31412010 R15: 0000000000000000 [ 516.455876][ T31] [ 516.459060][ T31] INFO: task syz.4.1796:13128 blocked for more than 144 seconds. [ 516.467522][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 516.475281][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.484703][ T31] task:syz.4.1796 state:D stack:28360 pid:13128 tgid:13114 ppid:5846 task_flags:0x400040 flags:0x00004004 [ 516.496871][ T31] Call Trace: [ 516.500279][ T31] [ 516.503680][ T31] __schedule+0x1737/0x4d30 [ 516.508340][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.513676][ T31] ? schedule+0x165/0x360 [ 516.518416][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.523777][ T31] ? __pfx___schedule+0x10/0x10 [ 516.528778][ T31] ? schedule+0x91/0x360 [ 516.533241][ T31] schedule+0x165/0x360 [ 516.537465][ T31] schedule_preempt_disabled+0x13/0x30 [ 516.544063][ T31] __mutex_lock+0x7e3/0x1340 [ 516.548789][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 516.554193][ T31] ? __mutex_lock+0x5b6/0x1340 [ 516.559165][ T31] ? genl_rcv_msg+0x10d/0x790 [ 516.564353][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 516.569597][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 516.575047][ T31] ? radix_tree_lookup+0x240/0x290 [ 516.580498][ T31] genl_rcv_msg+0x10d/0x790 [ 516.585288][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.590339][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 516.595565][ T31] ? __asan_memcpy+0x40/0x70 [ 516.600207][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 516.606160][ T31] netlink_rcv_skb+0x205/0x470 [ 516.611062][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.616081][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.621222][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.631382][ T31] ? down_read+0x1ad/0x2e0 [ 516.636379][ T5852] Bluetooth: hci18: command tx timeout [ 516.643399][ T31] genl_rcv+0x28/0x40 [ 516.647783][ T31] netlink_unicast+0x82c/0x9e0 [ 516.652836][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 516.658467][ T31] ? netlink_sendmsg+0x642/0xb30 [ 516.663977][ T31] ? skb_put+0x11b/0x210 [ 516.668541][ T31] netlink_sendmsg+0x805/0xb30 [ 516.673880][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.679249][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 516.684523][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.689861][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.695544][ T31] __sock_sendmsg+0x219/0x270 [ 516.700353][ T31] __sys_sendto+0x3bd/0x520 [ 516.705216][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 516.710702][ T31] ? count_memcg_event_mm+0x21/0x260 [ 516.716703][ T31] ? rcu_is_watching+0x15/0xb0 [ 516.722011][ T31] __x64_sys_sendto+0xde/0x100 [ 516.727322][ T31] do_syscall_64+0xfa/0x3b0 [ 516.732900][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.738691][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.745084][ T31] ? clear_bhb_loop+0x60/0xb0 [ 516.750035][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.756559][ T31] RIP: 0033:0x7f97267909fc [ 516.761060][ T31] RSP: 002b:00007f972757bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 516.769693][ T31] RAX: ffffffffffffffda RBX: 00007f972757bfc0 RCX: 00007f97267909fc [ 516.778181][ T31] RDX: 0000000000000020 RSI: 00007f972757c010 RDI: 0000000000000008 [ 516.786844][ T31] RBP: 0000000000000000 R08: 00007f972757bf14 R09: 000000000000000c [ 516.795209][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 516.803735][ T31] R13: 00007f972757bf68 R14: 00007f972757c010 R15: 0000000000000000 [ 516.812077][ T31] [ 516.815862][ T31] INFO: task syz.3.1798:13130 blocked for more than 144 seconds. [ 516.824214][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 516.831668][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.840992][ T31] task:syz.3.1798 state:D stack:19760 pid:13130 tgid:13129 ppid:5842 task_flags:0x400140 flags:0x00004004 [ 516.854093][ T31] Call Trace: [ 516.857512][ T31] [ 516.860535][ T31] __schedule+0x1737/0x4d30 [ 516.865755][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.870748][ T31] ? schedule+0x165/0x360 [ 516.875211][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.880138][ T31] ? __pfx___schedule+0x10/0x10 [ 516.885151][ T31] ? schedule+0x91/0x360 [ 516.889536][ T31] schedule+0x165/0x360 [ 516.893874][ T31] schedule_preempt_disabled+0x13/0x30 [ 516.899383][ T31] __mutex_lock+0x7e3/0x1340 [ 516.904035][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 516.909272][ T31] ? __mutex_lock+0x5b6/0x1340 [ 516.914187][ T31] ? genl_rcv_msg+0x10d/0x790 [ 516.918954][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 516.924190][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 516.929486][ T31] ? radix_tree_lookup+0x240/0x290 [ 516.935119][ T31] genl_rcv_msg+0x10d/0x790 [ 516.940040][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.946000][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 516.951159][ T31] ? __asan_memcpy+0x40/0x70 [ 516.956242][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 516.962015][ T31] netlink_rcv_skb+0x205/0x470 [ 516.967068][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.972154][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.977698][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.984035][ T31] ? down_read+0x1ad/0x2e0 [ 516.988697][ T31] genl_rcv+0x28/0x40 [ 516.993406][ T31] netlink_unicast+0x82c/0x9e0 [ 516.998841][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 517.004460][ T31] ? netlink_sendmsg+0x642/0xb30 [ 517.009780][ T31] ? skb_put+0x11b/0x210 [ 517.014693][ T31] netlink_sendmsg+0x805/0xb30 [ 517.019620][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.025853][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 517.030919][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.037389][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.043682][ T31] __sock_sendmsg+0x219/0x270 [ 517.048656][ T31] __sys_sendto+0x3bd/0x520 [ 517.053696][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 517.059052][ T31] ? count_memcg_event_mm+0x21/0x260 [ 517.064736][ T31] ? exc_page_fault+0x76/0xf0 [ 517.069720][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 517.075232][ T31] __x64_sys_sendto+0xde/0x100 [ 517.080225][ T31] do_syscall_64+0xfa/0x3b0 [ 517.085212][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.090644][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.096879][ T31] ? clear_bhb_loop+0x60/0xb0 [ 517.102008][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.122618][ T31] RIP: 0033:0x7f13b01909fc [ 517.127377][ T31] RSP: 002b:00007f13b105fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 517.141174][ T31] RAX: ffffffffffffffda RBX: 00007f13b105ffc0 RCX: 00007f13b01909fc [ 517.150241][ T31] RDX: 0000000000000020 RSI: 00007f13b1060010 RDI: 000000000000000b [ 517.172869][ T31] RBP: 0000000000000000 R08: 00007f13b105ff14 R09: 000000000000000c [ 517.181271][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 517.211214][ T31] R13: 00007f13b105ff68 R14: 00007f13b1060010 R15: 0000000000000000 [ 517.223376][ T31] [ 517.226811][ T31] [ 517.226811][ T31] Showing all locks held in the system: [ 517.252241][ T31] 1 lock held by khungtaskd/31: [ 517.258052][ T31] #0: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 517.282629][ T31] 6 locks held by kworker/u8:6/1095: [ 517.287980][ T31] #0: ffff8880b8739f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 517.302454][ T31] #1: ffff8880b8724008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 517.332405][ T31] #2: ffff8880b8725918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 517.342748][ T5852] Bluetooth: hci19: command tx timeout [ 517.353445][ T31] #3: ffffffff99c59de0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 517.372852][ T31] #4: ffffffff8dfe8228 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 517.400224][ T31] #5: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x2c0 [ 517.412874][ T31] 2 locks held by getty/5607: [ 517.417788][ T31] #0: ffff888034cae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 517.443058][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 517.472814][ T31] 2 locks held by kworker/u9:4/5847: [ 517.478239][ T31] #0: ffff888025931148 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 517.511063][ T31] #1: ffffc900041afbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 517.524387][ T31] 2 locks held by kworker/u8:16/8576: [ 517.530093][ T31] 3 locks held by syz.2.1794/13111: [ 517.536011][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.544709][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.554609][ T31] #2: ffff888025875230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 517.566065][ T31] 2 locks held by syz.2.1794/13121: [ 517.571554][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.580659][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.590276][ T31] 2 locks held by syz.0.1795/13113: [ 517.595876][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.604270][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.614244][ T31] 2 locks held by syz.4.1796/13128: [ 517.620002][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.628368][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.638147][ T31] 2 locks held by syz.3.1798/13130: [ 517.643757][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.652986][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.662794][ T31] 2 locks held by syz.1.1802/13147: [ 517.670382][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.679320][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.689147][ T31] 2 locks held by syz.1.1802/13148: [ 517.694641][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.703088][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.712539][ T31] 2 locks held by syz.1.1802/13149: [ 517.718136][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.727596][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.737734][ T31] 2 locks held by syz-executor/13153: [ 517.743573][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.752182][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.761502][ T31] 2 locks held by syz-executor/13155: [ 517.767683][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.776285][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.785531][ T31] 2 locks held by syz-executor/13158: [ 517.791012][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.799366][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.808772][ T31] 2 locks held by syz-executor/13172: [ 517.814748][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.823244][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.832354][ T31] 2 locks held by syz-executor/13174: [ 517.838166][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.846872][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.856240][ T31] 2 locks held by syz-executor/13198: [ 517.861826][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.870211][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.879273][ T31] 2 locks held by syz-executor/13200: [ 517.884865][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.893511][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.903264][ T31] 2 locks held by syz-executor/13212: [ 517.908863][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.917333][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.926761][ T31] 2 locks held by syz-executor/13219: [ 517.932255][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.940707][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.951008][ T31] 2 locks held by syz-executor/13221: [ 517.956631][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.965018][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.975134][ T31] 2 locks held by syz-executor/13243: [ 517.980735][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 517.989375][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 517.998739][ T31] 2 locks held by syz-executor/13245: [ 518.004461][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.013273][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 518.023459][ T31] 2 locks held by syz-executor/13254: [ 518.028979][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.037965][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 518.047675][ T31] 2 locks held by syz-executor/13261: [ 518.053260][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.061686][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 518.073381][ T31] 2 locks held by syz-executor/13267: [ 518.078965][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.087709][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 518.096920][ T31] [ 518.099290][ T31] ============================================= [ 518.099290][ T31] [ 518.107868][ T31] NMI backtrace for cpu 0 [ 518.107887][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 518.107907][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.107917][ T31] Call Trace: [ 518.107923][ T31] [ 518.107931][ T31] dump_stack_lvl+0x189/0x250 [ 518.107955][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.107972][ T31] ? __pfx__printk+0x10/0x10 [ 518.108002][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 518.108024][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 518.108045][ T31] ? __pfx__printk+0x10/0x10 [ 518.108068][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 518.108093][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 518.108115][ T31] watchdog+0xf93/0xfe0 [ 518.108140][ T31] ? watchdog+0x1de/0xfe0 [ 518.108166][ T31] kthread+0x70e/0x8a0 [ 518.108186][ T31] ? __pfx_watchdog+0x10/0x10 [ 518.108207][ T31] ? __pfx_kthread+0x10/0x10 [ 518.108226][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 518.108246][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.108266][ T31] ? __pfx_kthread+0x10/0x10 [ 518.108284][ T31] ret_from_fork+0x3fc/0x770 [ 518.108310][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 518.108339][ T31] ? __switch_to_asm+0x39/0x70 [ 518.108355][ T31] ? __switch_to_asm+0x33/0x70 [ 518.108379][ T31] ? __pfx_kthread+0x10/0x10 [ 518.108397][ T31] ret_from_fork_asm+0x1a/0x30 [ 518.108428][ T31] [ 518.108436][ T31] Sending NMI from CPU 0 to CPUs 1: [ 518.262111][ C1] NMI backtrace for cpu 1 [ 518.262129][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 518.262148][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.262158][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 518.262186][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 6f 18 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 518.262200][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 518.262216][ C1] RAX: e2e2cc0077644e00 RBX: ffffffff81969b18 RCX: e2e2cc0077644e00 [ 518.262229][ C1] RDX: 0000000000000001 RSI: ffffffff8d9790f8 RDI: ffffffff8be30a00 [ 518.262240][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 518.262251][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa07af0 [ 518.262262][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003adab40 [ 518.262273][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 518.262287][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.262298][ C1] CR2: 000056498089a000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 518.262315][ C1] Call Trace: [ 518.262323][ C1] [ 518.262329][ C1] default_idle+0x13/0x20 [ 518.262345][ C1] default_idle_call+0x74/0xb0 [ 518.262361][ C1] do_idle+0x1e8/0x510 [ 518.262388][ C1] ? __pfx_do_idle+0x10/0x10 [ 518.262408][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.262436][ C1] cpu_startup_entry+0x44/0x60 [ 518.262459][ C1] start_secondary+0x101/0x110 [ 518.262485][ C1] common_startup_64+0x13e/0x147 [ 518.262512][ C1] [ 518.263188][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 518.263205][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 518.263227][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.263238][ T31] Call Trace: [ 518.263247][ T31] [ 518.263256][ T31] dump_stack_lvl+0x99/0x250 [ 518.263279][ T31] ? __asan_memcpy+0x40/0x70 [ 518.263303][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.263323][ T31] ? __pfx__printk+0x10/0x10 [ 518.263358][ T31] panic+0x2db/0x790 [ 518.263391][ T31] ? __pfx_panic+0x10/0x10 [ 518.263410][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 518.263440][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 518.263470][ T31] watchdog+0xfd2/0xfe0 [ 518.263501][ T31] ? watchdog+0x1de/0xfe0 [ 518.263531][ T31] kthread+0x70e/0x8a0 [ 518.263556][ T31] ? __pfx_watchdog+0x10/0x10 [ 518.263580][ T31] ? __pfx_kthread+0x10/0x10 [ 518.263603][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 518.263626][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.263649][ T31] ? __pfx_kthread+0x10/0x10 [ 518.263672][ T31] ret_from_fork+0x3fc/0x770 [ 518.263703][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 518.263736][ T31] ? __switch_to_asm+0x39/0x70 [ 518.263756][ T31] ? __switch_to_asm+0x33/0x70 [ 518.263775][ T31] ? __pfx_kthread+0x10/0x10 [ 518.263797][ T31] ret_from_fork_asm+0x1a/0x30 [ 518.263834][ T31] [ 518.586444][ T31] Kernel Offset: disabled [ 518.590858][ T31] Rebooting in 86400 seconds..