last executing test programs: 5m50.288358911s ago: executing program 4 (id=271): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0xffffffff], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [0x0, 0xffffffff], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x97, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r2, 0x0, 0x4}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r5, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r0, r5, 0x2f, 0x2000, 0x4, @value=r4}, 0x20) 5m49.937220411s ago: executing program 4 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000040)={0x0, 0xfffffed1, 0x0}, 0x4000800) ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}}, 0x0) 5m48.774439425s ago: executing program 4 (id=280): r0 = socket$inet6(0xa, 0x3, 0x4) shutdown(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x0, 0x6, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @local}}}}) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) 5m48.771070019s ago: executing program 4 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000180)={r5, r6/1000+60000}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) bind$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7fffffff, 0x80000000000000}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x2, 0xe, 0x5, 0x2802, r2, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x6, @void, @value, @void, @value}, 0x50) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x5}, 0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000007887000c41000000030014"], 0x30}}, 0x0) 3m36.874413951s ago: executing program 4 (id=293): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x803, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000900000008000000020000000000000052be5d0539b6e6bae913cffef61d822754d2bb65fc93858d7d5cc08fba719ef08c51f642c4d3d7aab897f7cf93bc1d3d040db520e6d6ea358d0f08d5ff8aabe2c3c1f38f02efc8cb1a8eeefe7ac4d3b43a198cf9b3d0364303107090a834dfc6050b1ef416727a083e2379b1768cc54f5e155305cf1584708d8b0c05efec29bbbb27c14bb23402c1e731d850bb288543aadd9ce28e7d36d043", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400ddffb7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='sched_wake_idle_without_ipi\x00', r7}, 0x18) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x7fff, 0x4, 0x2, 0x1}}) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000140)={0x2a, 0x1, 0xfffe}, 0xc) connect$qrtr(r9, &(0x7f0000000040), 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e978a097458e95b66457542bbf920800000000000000"], 0x1c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'vlan0\x00', 0x1000}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}], 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRES64=r10, @ANYRES16=r8, @ANYRESDEC=r5, @ANYRESHEX=r10, @ANYRES16=r8], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r12}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x4, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYBLOB="00000000000000006608000000000000180000008a4fec1bed8060d654c30000000000000000000000009500000000000000360a020000000000180100002020782500000000202020207b1af8ff00000000bfa100000000000005010000f8ffff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff7ffffd, @void, @value}, 0x94) socket$inet(0x2, 0x4000000805, 0x0) 3m36.834491764s ago: executing program 4 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) socket$kcm(0x29, 0xa, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r4, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000002900000004", @ANYRESDEC=0x0], 0x18}}], 0x1, 0x20000880) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 3m21.619624692s ago: executing program 32 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) socket$kcm(0x29, 0xa, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r4, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000002900000004", @ANYRESDEC=0x0], 0x18}}], 0x1, 0x20000880) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2m40.150644224s ago: executing program 2 (id=863): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32, @ANYBLOB="2c002f80"], 0x48}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x20004010) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32, @ANYBLOB="2c002f80"], 0x48}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x20004010) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x10) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_cmd={0x9, 0x7, 0x7, 0x0, 0x14, 0x3, 0x2, 0x3, 0xfc, 0x5, 0x7ff, 0x59c, 0x401, 0xee, 0x1c, 0x7, [0x4, 0x1]}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m39.516538629s ago: executing program 2 (id=866): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r0, 0x0, 0x0, 0x20004000, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4, 0x0, @loopback, 0x5}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000000000000000ac1e0001ac1414aa130490781200183f2500ddff00680000000100007f0000037f00000100186371ae9b1c0300"/70], 0x0) unshare(0x6020400) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000440)={0x23, 0x4, 0xc6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4c986fa18b5676f1, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000000010000000000000001000851000000600000018000000", @ANYRES16=r4, @ANYBLOB="00000000000000116608000000000000180000004000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000000000", @ANYRES64=r3, @ANYBLOB="dc72f4bfd6458930b1e3c598c9ab22a34b33342150cd3b535931b8401104b83b1b1ca249da9035f206d5498410a434be5632e781b942ed63da972cf107f051a5406830126c2dff669cbda6dd0a40062526e8acc5460cc3165d417afde8c0b2053ccc68d25d2a75ce2345f0d0d69ab7ce4c912e4a47d772aedee32d9957c100c8aaa3ec895bded77a9a32504b3a59ed6e327810a7eae2021f12e81518374573357abc9173e7143ddbe413dc320c17e022a207"], &(0x7f0000000100)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r7 = accept4$netrom(0xffffffffffffffff, &(0x7f00000005c0)={{0x3, @default}, [@null, @rose, @remote, @null, @null, @default, @netrom, @rose]}, &(0x7f0000000300)=0x7c, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000680)={'wg1\x00'}) r8 = gettid() r9 = socket$key(0xf, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r9}, 0x8) write$cgroup_pid(r6, &(0x7f0000000140)=r8, 0x12) 2m39.161596184s ago: executing program 2 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="080004000001"], 0x4c}}, 0x0) 2m38.880328286s ago: executing program 2 (id=872): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9e}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000101401002cbd7000fedbdf65080003000400000008000180"], 0x20}, 0x1, 0x0, 0x0, 0x24044836}, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) read(r3, &(0x7f0000000240)=""/224, 0xe0) write$tun(r1, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0xc, 0xfc0, 0x66, 0x0, 0x8b, 0x29, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x1}]}}, "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"}}, 0xfce) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x3, 0x1ff, 0x8, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x1ffe1, 0x7, 0x2}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3ec, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x12, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x38}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:* rmr'], 0xa) 2m37.278546962s ago: executing program 2 (id=884): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000005e00250a00000000fe000000000004000008800c000100"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}, 0x10) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000040)=@generic={0x5, "5825f5a6b59fc35e195dfd0c05240a29706a59241193f7c681df8ac239100b9d20e26d218749f935e19c127e1c53d99859f4cc841031f34c4658f9297f1de10d84b37edb6caf9fdd631bc041b8f6f0cbeb96df624336d10f0e01484292206cb0bbc2c0f986c88a36d18b9c2e8e19e087da53fd94c2c93a3752518550b33f"}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000240)="d8907aadfa8993bab673ee3447def66de949d7d0f96368443f80f8664b259e5e5f89cc7139d9f595231a9cc7d92823fcf416f9125de02bd671f7ad67ffe338cd540a23991bb44fdb431c28e412efd069e5105243d2ff55fa68562603b2ea7e566124b508e3dc3231587ab407327e9dcd1366f170255ac40fd2a6583e8e64264202f3b952d7f4d92ec857b14c6475e0", 0x8f}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f00000000c0)="a01f16b2bd56f16075593bee65442e98025c24254a8c161ab7f96b7c", 0x1c}, {&(0x7f0000000180)="9c0d504c34e10c1d3ce0", 0xa}, {&(0x7f00000019c0)="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", 0xfc}, {&(0x7f0000000400)="d6d2abaeefb0cbf30151f263a5ce6200cf253ade46e595a7ddb09733d92b860a9a41bce78a565268a584f01124af609db527ba40705a083aff36ae43e186e2d7647f8e9d2c24b3968f1e52f4855b5802110f3c26ca35b9d20ff93ca11a0dbe739ec35fb22d97bffcc9078ffbd28aa554c4d72a05ae7cfda89af3df214ed1217ebda60ed1ca8dca7f597dab15dd8a1350933a96430558e708eeb861313c52780a653ff3ee6051d8e8334e92b4f678661fa95ddfc164e8566348e3d337ac5c57a2fbc065705395120c0bf2bc9b361c4feb2bd591b983f4bb8819e33607989f272fea7d8f6ce2f9", 0xe6}, {&(0x7f0000001600)="4baae022384af375d554c9f1143e757a3fdc1ebf30376012748ff57707c9700f238f862c1d499dc02dd83027fbc9ab60161115cee724428d256d4a43b94fce0ee6bd68fdde3925ade070d987aa6c0425fb7551867deb4e03f9555343cd7e2d848c4cc9fbdbf25ee31b892aaa7c70e8779b3c8ed5653a54fb04a4c2c2c5b4f5caf232ef5776db4b572ac89f26183c12a9155733d48321b4d573bbba9cccbf48bbaa7c6f4474b2f6c1f473c6caebd6d84188b329d02e14aa0ccd480b94a884df1d3d3f67bb9f89c2562a14f480f129fe2df0a62e216a09e7", 0xd7}, {&(0x7f0000000500)="63548fca3fc098fb8ee3da166a5279c0fce88a2b59df01ced9a83c188aa423d0c2411b072cdeeceb9397dd60ee9c82b3dd6985eabc0580bfbe76f11f4d494773c5", 0x41}], 0x9bbf33, &(0x7f0000001780)=[{0x68, 0x10d, 0x7, "2ae9c8cb8a25d599206cce1cf70a7d16a4c74404e57837dd6a82c296f61f4e26b0653550fef98e130beee894afa624146c7e6aa5c81c752bf61bdaf07aaa26a8d9ba6ae0ad20a70672b74584c2c1c8308eca79da766f"}, {0xf8, 0x10f, 0x5d, "eaa8586d91a561260c1add81768d131253f57980e1969a267ce33420d6dc90b42b14a406be7e6aee5ef5264b17755091a0ea7d8166f6947c3884283125ba49f313404e7a94d85ade597579122886b6dc418b3fedf305bdeb78b9c7bfcdbfe65df0e051386532a0b9495f0458d410604b8b8ab20985d78b16ac63bb8cacc53b67d61b2924f6e53f1e27e510e7c52e9071142f426d1d0a9834b636dd10c8aa2809d7adf2ba6efbca0ebee070e21b17bc9a3d5edd9630c855bca3ea6be33552a75d4a38c06d911a14721b61bd2509ccb61d472f8cb4d0dabeeb1020dfa21bf968356f7fe4"}, {0xc0, 0x16, 0x6, "1e2fca96f9e362cd6082f609bff174a422d0884b80ceca827af42fe78027a3f7267c7862ca23ea53032e57fded99fe627ea6dd0cebadf9ce8223d031e4f7f893d28b4bcb33e939e7852f33ff7b3c1c5a66f9013323519ebf7c2c2a5e0cb6d9f54345870b4953d051c56a534e55035ac85296085df1bffcdb7b95407aa0fabc9f9af30fae0ffdbe12fb1ac884271576608b4b0d8ab5e7da7766997a0e47fb7ea008423324a7d9c66fd2"}, {0x20, 0x0, 0x4, "b0c656213fc5cc21eb8c5e6778"}], 0x240}, 0x41000) 2m35.91998621s ago: executing program 2 (id=888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)={0x158, 0x21, 0x701, 0xfffffffc, 0xff7ffffe, {0x6}, [@generic="9d391b028139ef8080e9691e52d3bc9ed24c6bb6efae67154a2964b03ed94d00835e269ba0aa3b1f071f90794ad4687d794f8983b4896179c180a2036f319eeeb979d5c5971460ddad4b7ede75257e6ce8a66dc16793180e39390dcbba58408392199cc36e2517ad788b4314e9d55b1d194787c84c7427b4eab1a03b94a6da3d0018f5b3c25738420674655eee77d123b8a94eeec0371dd66f89c6eacd72", @typed={0xa4, 0x27, 0x0, 0x0, @binary="d0dbac31d2bec8428911fe8b35101214554870baca8ce9f8ad220bf718ba24289185fc776cec2ebf6c6195a04e6256d154a7073c10efacf35a015c3b0dc628540c0b8ea04f368797a0ce6fb13e532198dae2b9c7bf37805d97351867115b532cee97212737f4957fb92799af0174696d6652a6a2d2e3e8bcf4b2f6eda0fa0565b33016bd0020a6a86180553474c8e19879544809d5a431f0e03f1fa3eb4a95eb"}]}, 0x158}}, 0x0) socket$inet6(0xa, 0x2, 0xf938) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r5, &(0x7f00000005c0)="4ae7253ec5eaaf4108971f234958cc10ca4402a4f2f827c393c1d08ea101e88ef14b6d0420b86512c18f3a6d3569eb7f5cda6804732cb9c07b0eb73381eb71d12561fd525189e6b418c0c80d7b2c76d8423bef24dd80cb71026e4407e0ff4b766aff35371a4bebbe982a8d2ff96f5d5c13ed3392232b79bd46c0036aaf6b5220ddd6da036c76574038efbd4a4dabcc69847115748ba416c7a7d9ece5372b0423eb04776bb79eb20ad307e19dc82315cf22c405a9abefd0f951da2afb56d74f90ca40deefe25cf755703d670bd0921729b0f157b240e0e3edb45473b14f32b33379d986639ee9b8494df0a89964a1afb1f08a06fb7c345f908ac9e46f57422d4ad05aba166044b5aac4fd140699cfbe36d9d237e84e451fc8ff1573a1ea02464a7aebb5606ad4f14494b2c253d5dea1de274d179147311aa99d8266c8458c7eb7fc0cba77da5fc85506e11b2291b055c4b70f8d64788a822459cd114e09b2d1e70c7284f13a2b86b13b15760ac367de286353cf12478b1b92b8ad7ec823a67b001059bfb848a8a34138d77757623a520c6a746da34e639962a9b4c6bb44c2161e220dc74e1168bb2e1a59ba09c7cdb7a2fff02b747b9048e357978d658e0213c61953a0fc655c4220e09613e574d9f6696b193bb3c6c88b44c5b3999835495b4d7bb0780133704894469b418b02d6a95a11e65cc415a14a7af2f8dfcea35265f3e424caa8fc248e0d342091dc59baf504adfa86ec22e662acfafa1a238115802f9bb135ff02a85f521f1af75624bd609576916f8a30e71c5f0c6eb9f4d7ed487b7e10f6dd55dc0183f714081c6a98ee556c5fd8688204fe55b6b2a5d4272876a0abdd4e534f27cc8abc79f05aa7d5c39b2c0e1677e961ee19730ba3170cabf5d073d057f0caad9edc21f31bb3310f25d8db785d32e402691f50ef0bf943d30c786d67c7be2c3518b12271c241e8ba9b59591232a4cfdddabe9d5f619a08134422a2352745c0664ee10ee4c687d4eb5e27b34ce5c427de1a89e0e400c350c7f9d33f451ca72a1e08c43482fee74301b2dfbe902403a64937f06d328078b607fa955e89521463c7ac1d81d496a8f2b92187b8eace7598cd1ee0e75f1be8b3a94bbf458be969491a3cd3e96106ebb5993f3021f36475dfe69513a792cb4788d7f0d96ffdf50d74e831694fb4081e95869f3906840c7211b56d8c4ddc845f5e97e2bfb0277538ac38aec353cab83fa3e55e5072e2c69c986ff0cba02f1adb5ded1f3d86e26f814bdba683cb355f79f5ad8a1c1e8b629f21e5563b5f87bb6140b0c722e495f03892ad586f016b129ca99898c488fbcc3f49af5a727e33bfccf4b9a2a7cbde036cd0568f15d313692402e73ba77672476fd1dcf9078f8cade92d50ec6e8072052e6dcb1f5260583b63fda3d36447ade86a0ac380b178fa3e42a95a20d5ed86df366b6178514a283c48466eaafa8589fecea5abab03b40e3924ab057f3bdb59e633d2daedfe77fa4490c2a912b6d8803fb031d45f028683f93b3411e6bae199f498e6287adcafe91ece1e313102c0cbc20aafbe6323622f82ab70fa7a845dd12d0897a0c2a2acdfb8dd19539c8fb93613981f0ee4a8bd6eee3a542414fa02a8e2c945f8c20fe597853f98bd8296cff66d9f69683bb2f2842936673e29082d1568b77c23684e5067a325fa2e063381bdfd733c91030e22a63f39c5203844a1d64e1b66153916eb6f8e67a1b755cfb6e255edcebf6f0221762a76d0f7b7ae78cd62121c70b91afaaa40dff85228c7e7dda5ea30d6ea70426c517e360a1b40cb0e6c15a02274a2233a3c27fd45b37ae81f2baf14462015b0abc2445b8a904c2fadcfbf34f38cb9e87a950e0f092c3288c11d0e12ed64cee278be9557bc7c52fbf42869ce39989385846a3d3de7f1a54b059d9be11e19e80e3062d4d618c6908b12e025d15bdce4f8f8d775649282326e2c47c5d5b681a901c8c76b866513e21ba39f5cb25be1ce0ac459a4d4935436ed671ec2afda0b69a2b1df0e168997f193c404e2889ad28a66faa2bfbd0777308d3987796ce9afb62ad4c702bdddedb65af6f6a9abeb5457d8dbe5e31e2471ab276773e78b57e0d946064beb54c1f4dcb12564a1c874423b3780f020235b14d63ada6d83f773ac18a1b50c808fc0740d5cd81637988846ebdb5408fa17cfcea43b984db5c4fa95f3d6e30630e1a0ec7f59eb8cfc05a35bf3291ad0c52c963206be771ca19b2dfb1b459564c35efb78aca58def8ad93240c5261edbbc382b20c400e45f332c4feb118dc4c714975ebddf2c2a3c09fd5a6f63104a78a94380124c1a89e185d07c5f91f3311c827ae4cd5e8b556019a0c2b4f8a446598a15991beb625b53d031125d685104ff8eb5bb4e35d0e2ff04eb2ab6bb53c080fd3f488c57bd56ceb4a0ebbe34b9e9a613b9378bd501bb411f192e8b5b95e2b1e156596da7ed6e8f15b8909311c5c7153a07331e74530a30b8df4d66c671cc45e4a9d758c4d31fc5cd09032735bf61b7575f4d6341eba291e9a760c1fc8045db07af95f3f6ca5a4b52c89b9768911b8ece1b4f136f7b8ab4b4cafe108063654aa8e7376fa262afd85abb75a57c6a5490a0bde345aad4218a39125548f5c686745d1587c2608a4a782061c3a28231789c12c6546becd36cf9ff56a0f10e4cc9ebc5594bd8a5ff57d9504f1d6f200ed38fd333d3cd42faea4915795c35470b893f2b8ca616551fa96372070591977062dbb14692eb16e08bc4220acaa5e3edbc413d76a761993b6d7de1220412c5ebb595561606d8176a9e7ba0107dd0b62c915e0ba63c6afa01488117d59bd78d235d4e3846693b884a8cca42719a5e9ed61f6beace5c690cdb71cce093ebb7097851da5c6d40c9ec88d7014d68db8e8d2f6220755fd77df17b731cfed35617ebd0474798e49c4c4eedc004f73d1cf3704377feadf28cfa3bd7ef723f0babd85786ae519f6adc1321c8c650a1cefeb0dcfd5a75b4fcd1ba7f8542a582acbe6deaabd306041d8a941f39a08210a9a7ae7ed73a72b3e194f8a7852121bef9eb94c8f153f9cc6546ca31908b53def3ab10993bde98bb6a66da8cb9178be44374787bdd704c9e270552bce30f333ca547cab7b54b1e13dc6756ebfa40bef071f5db33a7b5d0d99b33868dc377777b3b92672310635ed8d72953f2a14b244b1d6f0ec3e74913d9ef739af550616222da8a937cd37ce763d161559ee39e5dfc54cf03b0a2d5ae21a51c9139eedb76b70a4aa70ac9f84f1aa4f9988742578ba23926104877d576daaceaac7eacbd92362c5eb1adcd82289df2514339bd7cd6bd87d12eb83759b206e010004d4508a7528c72724a23cc92fa76c3a0e6408d945aa5f533703eb5b2d4015f13a522172b4ce26dbaed2f86dab59a11805e7984f34aab4010409966088e03f50474323ad5ecbd0a6bf72d3bfce103d5e82ce069e50f5398277aedcc7f559fb011aead44509d3a8b6a3e0151cd6225e965dd075b2f950048cafc2f525de56747532a58f43f1591630327fd927a2a2574d885e49dc8c698abb375f7a03792aca46b4edcea619ea852b71a4d2775a07f05c9ba9eb3d469276b2203deaf2d2ef5bd78352aa8c168c6fab2f06de41324c806b6cca76cbd98bc1d1092c05f4f65217d110325bdf89b1f09dc3dd9d6e01c1716e5aec72ed468d104ecd50a1bba6f072eda8ec688be4857e66f04d8a24380624a1cdcbf12e83b3e447cea9cfd28003a40af29bd41dbfc36338362d25f2a11ac7f518e183e15fea2fa598b35771fbe52e6606d1f7e7c30679eb053b89813fb1bfd30db63a479e1989661f2a57eda66bd17f6b1f3310bb40d047525d462807b27593096f052c6fd5ca77515120855ebecb9099f7d896bd93caec6a237a2063e7960efd84b7ab33900252bf57bf75fe070f0a56911387cbb71a944ee548f5ca2f98630256568cfa51321", 0xaf6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r6, 0xaf5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r6, &(0x7f0000000040)={'a', ' *:* ', 'wm\x00'}, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)={0x158, 0x21, 0x701, 0xfffffffc, 0xff7ffffe, {0x6}, [@generic="9d391b028139ef8080e9691e52d3bc9ed24c6bb6efae67154a2964b03ed94d00835e269ba0aa3b1f071f90794ad4687d794f8983b4896179c180a2036f319eeeb979d5c5971460ddad4b7ede75257e6ce8a66dc16793180e39390dcbba58408392199cc36e2517ad788b4314e9d55b1d194787c84c7427b4eab1a03b94a6da3d0018f5b3c25738420674655eee77d123b8a94eeec0371dd66f89c6eacd72", @typed={0xa4, 0x27, 0x0, 0x0, @binary="d0dbac31d2bec8428911fe8b35101214554870baca8ce9f8ad220bf718ba24289185fc776cec2ebf6c6195a04e6256d154a7073c10efacf35a015c3b0dc628540c0b8ea04f368797a0ce6fb13e532198dae2b9c7bf37805d97351867115b532cee97212737f4957fb92799af0174696d6652a6a2d2e3e8bcf4b2f6eda0fa0565b33016bd0020a6a86180553474c8e19879544809d5a431f0e03f1fa3eb4a95eb"}]}, 0x158}}, 0x0) (async) socket$inet6(0xa, 0x2, 0xf938) (async) pipe(&(0x7f0000000140)) (async) write$ppp(r5, &(0x7f00000005c0)="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", 0xaf6) (async) pipe(&(0x7f00000000c0)) (async) tee(r4, r6, 0xaf5, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) write$cgroup_devices(r6, &(0x7f0000000040)={'a', ' *:* ', 'wm\x00'}, 0x9) (async) 2m20.816370887s ago: executing program 33 (id=888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)={0x158, 0x21, 0x701, 0xfffffffc, 0xff7ffffe, {0x6}, [@generic="9d391b028139ef8080e9691e52d3bc9ed24c6bb6efae67154a2964b03ed94d00835e269ba0aa3b1f071f90794ad4687d794f8983b4896179c180a2036f319eeeb979d5c5971460ddad4b7ede75257e6ce8a66dc16793180e39390dcbba58408392199cc36e2517ad788b4314e9d55b1d194787c84c7427b4eab1a03b94a6da3d0018f5b3c25738420674655eee77d123b8a94eeec0371dd66f89c6eacd72", @typed={0xa4, 0x27, 0x0, 0x0, @binary="d0dbac31d2bec8428911fe8b35101214554870baca8ce9f8ad220bf718ba24289185fc776cec2ebf6c6195a04e6256d154a7073c10efacf35a015c3b0dc628540c0b8ea04f368797a0ce6fb13e532198dae2b9c7bf37805d97351867115b532cee97212737f4957fb92799af0174696d6652a6a2d2e3e8bcf4b2f6eda0fa0565b33016bd0020a6a86180553474c8e19879544809d5a431f0e03f1fa3eb4a95eb"}]}, 0x158}}, 0x0) socket$inet6(0xa, 0x2, 0xf938) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r5, &(0x7f00000005c0)="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", 0xaf6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r6, 0xaf5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r6, &(0x7f0000000040)={'a', ' *:* ', 'wm\x00'}, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)={0x158, 0x21, 0x701, 0xfffffffc, 0xff7ffffe, {0x6}, [@generic="9d391b028139ef8080e9691e52d3bc9ed24c6bb6efae67154a2964b03ed94d00835e269ba0aa3b1f071f90794ad4687d794f8983b4896179c180a2036f319eeeb979d5c5971460ddad4b7ede75257e6ce8a66dc16793180e39390dcbba58408392199cc36e2517ad788b4314e9d55b1d194787c84c7427b4eab1a03b94a6da3d0018f5b3c25738420674655eee77d123b8a94eeec0371dd66f89c6eacd72", @typed={0xa4, 0x27, 0x0, 0x0, @binary="d0dbac31d2bec8428911fe8b35101214554870baca8ce9f8ad220bf718ba24289185fc776cec2ebf6c6195a04e6256d154a7073c10efacf35a015c3b0dc628540c0b8ea04f368797a0ce6fb13e532198dae2b9c7bf37805d97351867115b532cee97212737f4957fb92799af0174696d6652a6a2d2e3e8bcf4b2f6eda0fa0565b33016bd0020a6a86180553474c8e19879544809d5a431f0e03f1fa3eb4a95eb"}]}, 0x158}}, 0x0) (async) socket$inet6(0xa, 0x2, 0xf938) (async) pipe(&(0x7f0000000140)) (async) write$ppp(r5, &(0x7f00000005c0)="4ae7253ec5eaaf4108971f234958cc10ca4402a4f2f827c393c1d08ea101e88ef14b6d0420b86512c18f3a6d3569eb7f5cda6804732cb9c07b0eb73381eb71d12561fd525189e6b418c0c80d7b2c76d8423bef24dd80cb71026e4407e0ff4b766aff35371a4bebbe982a8d2ff96f5d5c13ed3392232b79bd46c0036aaf6b5220ddd6da036c76574038efbd4a4dabcc69847115748ba416c7a7d9ece5372b0423eb04776bb79eb20ad307e19dc82315cf22c405a9abefd0f951da2afb56d74f90ca40deefe25cf755703d670bd0921729b0f157b240e0e3edb45473b14f32b33379d986639ee9b8494df0a89964a1afb1f08a06fb7c345f908ac9e46f57422d4ad05aba166044b5aac4fd140699cfbe36d9d237e84e451fc8ff1573a1ea02464a7aebb5606ad4f14494b2c253d5dea1de274d179147311aa99d8266c8458c7eb7fc0cba77da5fc85506e11b2291b055c4b70f8d64788a822459cd114e09b2d1e70c7284f13a2b86b13b15760ac367de286353cf12478b1b92b8ad7ec823a67b001059bfb848a8a34138d77757623a520c6a746da34e639962a9b4c6bb44c2161e220dc74e1168bb2e1a59ba09c7cdb7a2fff02b747b9048e357978d658e0213c61953a0fc655c4220e09613e574d9f6696b193bb3c6c88b44c5b3999835495b4d7bb0780133704894469b418b02d6a95a11e65cc415a14a7af2f8dfcea35265f3e424caa8fc248e0d342091dc59baf504adfa86ec22e662acfafa1a238115802f9bb135ff02a85f521f1af75624bd609576916f8a30e71c5f0c6eb9f4d7ed487b7e10f6dd55dc0183f714081c6a98ee556c5fd8688204fe55b6b2a5d4272876a0abdd4e534f27cc8abc79f05aa7d5c39b2c0e1677e961ee19730ba3170cabf5d073d057f0caad9edc21f31bb3310f25d8db785d32e402691f50ef0bf943d30c786d67c7be2c3518b12271c241e8ba9b59591232a4cfdddabe9d5f619a08134422a2352745c0664ee10ee4c687d4eb5e27b34ce5c427de1a89e0e400c350c7f9d33f451ca72a1e08c43482fee74301b2dfbe902403a64937f06d328078b607fa955e89521463c7ac1d81d496a8f2b92187b8eace7598cd1ee0e75f1be8b3a94bbf458be969491a3cd3e96106ebb5993f3021f36475dfe69513a792cb4788d7f0d96ffdf50d74e831694fb4081e95869f3906840c7211b56d8c4ddc845f5e97e2bfb0277538ac38aec353cab83fa3e55e5072e2c69c986ff0cba02f1adb5ded1f3d86e26f814bdba683cb355f79f5ad8a1c1e8b629f21e5563b5f87bb6140b0c722e495f03892ad586f016b129ca99898c488fbcc3f49af5a727e33bfccf4b9a2a7cbde036cd0568f15d313692402e73ba77672476fd1dcf9078f8cade92d50ec6e8072052e6dcb1f5260583b63fda3d36447ade86a0ac380b178fa3e42a95a20d5ed86df366b6178514a283c48466eaafa8589fecea5abab03b40e3924ab057f3bdb59e633d2daedfe77fa4490c2a912b6d8803fb031d45f028683f93b3411e6bae199f498e6287adcafe91ece1e313102c0cbc20aafbe6323622f82ab70fa7a845dd12d0897a0c2a2acdfb8dd19539c8fb93613981f0ee4a8bd6eee3a542414fa02a8e2c945f8c20fe597853f98bd8296cff66d9f69683bb2f2842936673e29082d1568b77c23684e5067a325fa2e063381bdfd733c91030e22a63f39c5203844a1d64e1b66153916eb6f8e67a1b755cfb6e255edcebf6f0221762a76d0f7b7ae78cd62121c70b91afaaa40dff85228c7e7dda5ea30d6ea70426c517e360a1b40cb0e6c15a02274a2233a3c27fd45b37ae81f2baf14462015b0abc2445b8a904c2fadcfbf34f38cb9e87a950e0f092c3288c11d0e12ed64cee278be9557bc7c52fbf42869ce39989385846a3d3de7f1a54b059d9be11e19e80e3062d4d618c6908b12e025d15bdce4f8f8d775649282326e2c47c5d5b681a901c8c76b866513e21ba39f5cb25be1ce0ac459a4d4935436ed671ec2afda0b69a2b1df0e168997f193c404e2889ad28a66faa2bfbd0777308d3987796ce9afb62ad4c702bdddedb65af6f6a9abeb5457d8dbe5e31e2471ab276773e78b57e0d946064beb54c1f4dcb12564a1c874423b3780f020235b14d63ada6d83f773ac18a1b50c808fc0740d5cd81637988846ebdb5408fa17cfcea43b984db5c4fa95f3d6e30630e1a0ec7f59eb8cfc05a35bf3291ad0c52c963206be771ca19b2dfb1b459564c35efb78aca58def8ad93240c5261edbbc382b20c400e45f332c4feb118dc4c714975ebddf2c2a3c09fd5a6f63104a78a94380124c1a89e185d07c5f91f3311c827ae4cd5e8b556019a0c2b4f8a446598a15991beb625b53d031125d685104ff8eb5bb4e35d0e2ff04eb2ab6bb53c080fd3f488c57bd56ceb4a0ebbe34b9e9a613b9378bd501bb411f192e8b5b95e2b1e156596da7ed6e8f15b8909311c5c7153a07331e74530a30b8df4d66c671cc45e4a9d758c4d31fc5cd09032735bf61b7575f4d6341eba291e9a760c1fc8045db07af95f3f6ca5a4b52c89b9768911b8ece1b4f136f7b8ab4b4cafe108063654aa8e7376fa262afd85abb75a57c6a5490a0bde345aad4218a39125548f5c686745d1587c2608a4a782061c3a28231789c12c6546becd36cf9ff56a0f10e4cc9ebc5594bd8a5ff57d9504f1d6f200ed38fd333d3cd42faea4915795c35470b893f2b8ca616551fa96372070591977062dbb14692eb16e08bc4220acaa5e3edbc413d76a761993b6d7de1220412c5ebb595561606d8176a9e7ba0107dd0b62c915e0ba63c6afa01488117d59bd78d235d4e3846693b884a8cca42719a5e9ed61f6beace5c690cdb71cce093ebb7097851da5c6d40c9ec88d7014d68db8e8d2f6220755fd77df17b731cfed35617ebd0474798e49c4c4eedc004f73d1cf3704377feadf28cfa3bd7ef723f0babd85786ae519f6adc1321c8c650a1cefeb0dcfd5a75b4fcd1ba7f8542a582acbe6deaabd306041d8a941f39a08210a9a7ae7ed73a72b3e194f8a7852121bef9eb94c8f153f9cc6546ca31908b53def3ab10993bde98bb6a66da8cb9178be44374787bdd704c9e270552bce30f333ca547cab7b54b1e13dc6756ebfa40bef071f5db33a7b5d0d99b33868dc377777b3b92672310635ed8d72953f2a14b244b1d6f0ec3e74913d9ef739af550616222da8a937cd37ce763d161559ee39e5dfc54cf03b0a2d5ae21a51c9139eedb76b70a4aa70ac9f84f1aa4f9988742578ba23926104877d576daaceaac7eacbd92362c5eb1adcd82289df2514339bd7cd6bd87d12eb83759b206e010004d4508a7528c72724a23cc92fa76c3a0e6408d945aa5f533703eb5b2d4015f13a522172b4ce26dbaed2f86dab59a11805e7984f34aab4010409966088e03f50474323ad5ecbd0a6bf72d3bfce103d5e82ce069e50f5398277aedcc7f559fb011aead44509d3a8b6a3e0151cd6225e965dd075b2f950048cafc2f525de56747532a58f43f1591630327fd927a2a2574d885e49dc8c698abb375f7a03792aca46b4edcea619ea852b71a4d2775a07f05c9ba9eb3d469276b2203deaf2d2ef5bd78352aa8c168c6fab2f06de41324c806b6cca76cbd98bc1d1092c05f4f65217d110325bdf89b1f09dc3dd9d6e01c1716e5aec72ed468d104ecd50a1bba6f072eda8ec688be4857e66f04d8a24380624a1cdcbf12e83b3e447cea9cfd28003a40af29bd41dbfc36338362d25f2a11ac7f518e183e15fea2fa598b35771fbe52e6606d1f7e7c30679eb053b89813fb1bfd30db63a479e1989661f2a57eda66bd17f6b1f3310bb40d047525d462807b27593096f052c6fd5ca77515120855ebecb9099f7d896bd93caec6a237a2063e7960efd84b7ab33900252bf57bf75fe070f0a56911387cbb71a944ee548f5ca2f98630256568cfa51321", 0xaf6) (async) pipe(&(0x7f00000000c0)) (async) tee(r4, r6, 0xaf5, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) write$cgroup_devices(r6, &(0x7f0000000040)={'a', ' *:* ', 'wm\x00'}, 0x9) (async) 1m17.122540796s ago: executing program 3 (id=758): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0x30) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x41) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 1m4.563023887s ago: executing program 3 (id=758): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0x30) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x41) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 48.84466934s ago: executing program 3 (id=758): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0x30) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x41) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 35.705971641s ago: executing program 3 (id=758): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0x30) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x41) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 24.91614904s ago: executing program 3 (id=758): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0x30) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x41) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 12.199123735s ago: executing program 3 (id=758): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0x30) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x41) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 3.159204726s ago: executing program 0 (id=1959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fd5bdf253900000008000300441b39e2e5e6ca422360151619f33b02b0a86f56f8a320fbe66086d105699140dc4a71c2719095603d0733eb3e413e888e6e3f9bbfcd92d103862cb5c39dd3b65fd7d0", @ANYRES32=r2, @ANYBLOB="18005a801400018005000100300000000500020000000000"], 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@remote, @remote, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@loopback, @in=@local, 0x4e23, 0x0, 0x4e22, 0x7, 0x2, 0x80, 0x80, 0x16, r5, 0xffffffffffffffff}, {0xb, 0x7fffffffffffffff, 0x3, 0x5f80, 0x8000, 0x1, 0x8, 0xc28f}, {0x100000001, 0x9, 0x5, 0x4}, 0x9d, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@empty, 0x4d5, 0x3c}, 0x2, @in6=@private0, 0x3500, 0x0, 0x0, 0x1, 0xb, 0x7ff}}, 0xe8) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet(r4, &(0x7f00000002c0)="4208e24918f54976b907bfb4e93237c8b39737aa70037b951faabc96cbf647c58f162d3f9852a6cf2b4a323c535e270308a25a", 0x33, 0x4080, 0x0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000180)=0x3, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x4850, 0x0, 0x0) 3.068639038s ago: executing program 0 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37, 0x38, 0x0, 0x0, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x24}}, 0x40000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xcd934f5a79a7a329}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x600}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x440c0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x4, 0x0, 0x2, 0x300, 0x0, 0x4, 0x111}, 0x0, &(0x7f0000000440)={0x6, 0xfff, 0x0, 0xa, 0xfffffffffffffffd}, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote, r5}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) close(0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) (async) unshare(0x68000200) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r9, &(0x7f00000000c0), 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x14, r8, 0x400, 0x0, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20008086}, 0xc0) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008814}, 0x4040) 2.99009715s ago: executing program 0 (id=1963): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000300)=0x59cc, 0x4) ppoll(&(0x7f0000000700)=[{r1, 0x80}], 0x1, &(0x7f0000000780), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f0000000040)=0x84) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x5, 0x3, 0xe}]}}}], 0x18}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500"/23], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbb, &(0x7f0000000700)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.67875741s ago: executing program 6 (id=1966): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)=""/72, 0x48}], 0x1, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x100) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x5218, 0x29cc, 0x80, 0x9, 0xfffffb48, 0x1, 0x6}, 0x1c) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001400)=@newqdisc={0x18c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xff, 0xa00, 0x8001, 0x1, 0x4b4, 0xa}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x4, 0x2f, 0x9, 0x0, 0x0, 0xc, 0x4}}, {0xc, 0x2, [0x3, 0x80, 0x1, 0xc]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x1ff, 0x2, 0x8001, 0x3, 0x9}}, {0x16, 0x2, [0x3, 0xff, 0xcc9d, 0xbe59, 0x2, 0x3, 0xc, 0x4, 0x200]}}, {{0x1c, 0x1, {0x2b, 0xeb, 0x1000, 0x8, 0x0, 0x9, 0x7, 0x5}}, {0xe, 0x2, [0x101, 0xfe01, 0x2f45, 0x6, 0xa2]}}, {{0x1c, 0x1, {0x4, 0x8, 0x2, 0x9, 0x3, 0xe5, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xe9, 0x8, 0x90a, 0x9, 0x0, 0x0, 0x100, 0x5}}, {0xe, 0x2, [0x1000, 0x7, 0x9, 0x7e6d, 0xf5]}}, {{0x1c, 0x1, {0x7, 0x2, 0x8001, 0x7, 0x2, 0x1, 0x8, 0x7}}, {0x12}}, {{0x1c, 0x1, {0x81, 0x1, 0x0, 0x0, 0x1, 0x8, 0x9, 0x5}}, {0x4, 0x2, [0x9, 0x1, 0x1, 0x800, 0xa]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x18c}}, 0x40010) recvmsg$unix(r0, &(0x7f0000000400)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/79, 0x4f}], 0x2}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071116400000000008510000002000000850000003200000095000000000000009500dcd882352b7374cde9a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2.538926664s ago: executing program 0 (id=1968): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xfffffffc, 0x0, 0x3, 0x0, &(0x7f0000000480)="a42880", 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="dd079dc1d5e076af9815df7c2774f1e7c13aa88b3d570b506e50807a280169d1b4bcaa9dd7428bd6b2ca21b807a1f9b86e8be3100e57c06ee46035942d6ee601e4a65b41f75662338eb9b81b4d2cbaedbabdfb25b05cfbf0398778f45893c14bf0744fb3c194889affa2ca38feb1b08903a985c45a3a8ce5280347061390f10a4cef5dc9c6fd4688887b639193a78069ae46ddbf9ae7a7d0118395a53b82d6fdd6697f3c9e81b6bde45b53b8a2c6cfde42cec6ef018c994f03a9"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f00000001c0)=""/234, &(0x7f0000000100)=0xea) r5 = socket(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r6, 0x104, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x4}, {}, {0x1c}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40090}, 0x24000000) r8 = socket(0x22, 0x2, 0x3) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000406000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "6d8e4cd65e92969a", "426d7ff696e7cebfa5c39a3074ecb2ae", "7a1919b6", "ca6e7fd8c8050e79"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "c72e9326653eb9fc", "0779d4a5a5ad911f5516ca1e649bead88a3a8781d11adb285a53375e8636ee82", "1a121fef", "0200000000008100"}, 0x38) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r11, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="726177000000000000000000000000000000000800000000000000000000000003000000c14f444cccd08a000000000000000000000000000000000000ff00"/95], 0x58) 2.433298033s ago: executing program 6 (id=1970): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}}, 0x4084) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 2.224953269s ago: executing program 6 (id=1973): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$qrtr(r5, &(0x7f0000000940)={&(0x7f0000000140)={0x2a, 0x2}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000280)="0de74b057a0f795576452af59c07933a5b1c4276573f8dc4643410f964b78349e3348ffeb6b3714cab74905101955afc6446834840dbb861444542ae763d89334ae6e1647547cf41f1de82292da34092f9a76cd1c3a96d98b98ca65587cf8639012dfcf86c7b9db7cc486ad650", 0x6d}, {&(0x7f0000000300)="35cc9ec59e991e87d8ffd79ae7d13d5069cb92d02258c6a1881ac67042561ebb987ffc9e62272792bce6f8b3a544d364fa05056c36883d2f85612f2dc2cc7ccec9372d663b267df00c504d05796d6f0521fe664dd6f215a6e2d56e1495de166b79c48075c87076df61fd68b68730d772dd68e6f1da0a5102502efc219c36c652eb1483486a3f8bae266194a9087a8d9d22a840f7e20226d809a181c3746f656075787615b03c7bb67a73a3a7d0d7f75cee85abb4c72efae0640988eddffaa11df5", 0xc1}, {&(0x7f0000000400)="b23cde68e456f13d7e3616d5fb5c345cf014547406eeb6ef7982ebe6ffe7c368abf132b4d52127dfa49f05d18ef897acf3ed53bc33b818795a9f86b9771ef501965ed8fe02f6490a5a072068a37e75ff7fff3277e457ada639a6b1097aebd7dbcc64d3ba04807bfe92e6a0694e0613bd74f8", 0x72}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4b8, 0x20040000}, 0x38) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x5}, 0x8) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r9, 0x0, &(0x7f0000001780)=""/4096}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000006800100071e0000e4"}}}]}, 0x48}}, 0x0) 2.140904478s ago: executing program 1 (id=1975): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000240)={@any, 0x7, 0x81, 0x100, 0x8, 0x1aa2, "9bcd4a00905fa5c4dd863e55b5ca9724025e190a4a388559e4b6335033c8769354b6f8e8250c8db25f8f203f05eaacf5587d571e1d5bead89fbd09462c433643c1c94a5be949ef8cfe2a213ef2750935d4cfb39410a634c2ebbfb8284afd3b997d0913178f8a88bc4f0484ff644f75a299a5f36180fc7a49ad0629f990522643"}) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x5d0, 0x3e8, 0x160, 0xffffffff, 0x2c8, 0x160, 0x500, 0x500, 0xffffffff, 0x500, 0x500, 0x5, &(0x7f0000000300), {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xff, 0x0, 0xff, 0xff], [0xff000000, 0x0, 0x0, 0xff], 'ip6_vti0\x00', 'team_slave_0\x00', {}, {}, 0x3b, 0x3, 0x0, 0x22}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hbh={{0x48}, {0x2, 0x6, 0x1, [0x0, 0x8, 0x2, 0x8, 0x8, 0x590, 0xaf, 0x4, 0x6, 0x9, 0x8, 0x0, 0xe, 0x0, 0x0, 0x9], 0x9}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}, @ipv6=@mcast1, @icmp_id=0x65, @icmp_id=0x68}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff, 0xff000000, 0xffffff], [0xff, 0xff, 0xff000000, 0xffffffff], 'ip6gre0\x00', 'wlan0\x00', {0xff}, {0xff}, 0x3c, 0x3, 0x1, 0x50}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x8001, 0xbe], 0xfd, 0x3, 0x1}}, @common=@hbh={{0x48}, {0x524, 0x3, 0x0, [0x0, 0x3, 0x987, 0x3ff, 0x5, 0x8001, 0x3, 0x7, 0x8, 0x3, 0xd3f1, 0x9, 0xe89e, 0x0, 0x4, 0x3], 0xe}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x18, @ipv6=@private1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @port=0x4e20, @gre_key=0x2}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x1, 0x0, 0x7f, 0x2, 0x3, 0x400, 0x2000}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xf, @ipv4=@dev={0xac, 0x14, 0x14, 0x24}, @ipv4=@remote, @gre_key=0x8, @port=0x4e24}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x8, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xd, @ipv4=@empty, @ipv4=@loopback, @icmp_id=0x64, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x38}}, 0x4000084) 1.313283216s ago: executing program 6 (id=1981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x2, 'vlan0\x00', {}, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x1, 0x2, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x804d}, 0x20004804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010000000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3fe8a6c6dfd3877bc2dd8780", @ANYRES32=r6, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) socket(0x1, 0x803, 0x0) 1.213825216s ago: executing program 1 (id=1982): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x6, 0x0, 0x8000, 0x18e88, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @value, @void, @value=r3}, 0x50) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1.12924403s ago: executing program 5 (id=1983): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000073528405000000003b810000850000006d000000850000000700000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x14, r3, 0xc4fc9e906872338b, 0x20, 0x4, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="540100000a0a03000000000000000000020000000900010073797a3000", @ANYBLOB="8f14feee4334"], 0x154}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a006da800000000000000001c14000000000008"], 0x24}}, 0x0) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f0000000080)={@bcast, @null, 0x2, 0x54}) 1.08402031s ago: executing program 6 (id=1984): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) (async) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) (async) socketpair(0x28, 0x2, 0x7f, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0, r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r6, @ANYBLOB="0a00340002020202020200000c00490005ac0000000000001ea3f3cb16e4fe9ca467d1c967f24ff7509496c87d6162305144eee1e1821d10b1a0c910566cceaac3220be418f2"], 0x34}}, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r1, &(0x7f0000000380)}, 0x20) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@printk={@s}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x72}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000680)='syzkaller\x00', 0x100009, 0xff, &(0x7f0000000340)=""/255, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800080007005c0000031400000045f000610000e8"], 0xfdef) (async) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_int(r9, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) (async) getsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000001500)=""/16, &(0x7f0000000240)=0x10) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 926.401626ms ago: executing program 6 (id=1985): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf254a0000000e8001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf254a0000000e8001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 805.485469ms ago: executing program 5 (id=1986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000001bfff00000000000018000000000000000000000000a10000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc2, &(0x7f0000000280)=""/194, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc, @void, @value}, 0x94) 793.596235ms ago: executing program 1 (id=1987): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040801}}], 0x1, 0x4000) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x28, 0x0, 0x511, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000201050000000000000007000000000508000340000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4c000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) 733.992166ms ago: executing program 5 (id=1988): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000c40dab06de1079876747e1760a573ea22199d163d34a944cb7bdaec4935e58ff925e5a341eb67dcc8df8309944503bca42aa2fc64f5fdfac5af4a91257eb3abf88a2b485bf888cb8c6fed839a96b00dbe6dbb311f382a43e2a920b5e32e1f8798431f9e646c8e80cd9e46e20b893bcc5311c053932508814acf4939e420e39d2c4c9ca72a8ae02d8849d82cb321db7ab4bd631ee", @ANYRES16=r1, @ANYBLOB="010000000000000000000b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000000000b0000000000"], 0x3c}}, 0x0) 664.628616ms ago: executing program 1 (id=1989): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180100001f00010000000000000096000601008014000300fc010000000000000000000000000000140001"], 0x118}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x3, 0x9) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x38000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000100)={r3, 0xe6, "7c544591190c7b1330e818983a8605ec171de80d07a81f0f56ae2eae591a7ce6c476f61cd9a2229ce04dfd16df60b90083ce08f52bef4bd261e48f44c97961c923500577f1bee9c0da0dc0f30bb58b6df309b091bacbb024f42a56b26caa7e6c148dfe58e8df51f1358bdb3864cc3b6c3f842adaa8572a7278b83d1bff965a501650bd6d334234c60944f1b89034c7d67622eedafb45e764efe662b87ce3be35b4b35e31b8a3fecb042bdcba13176a8a732661f9e3d3080051d414f6337ebc07bde43ca6a83cb2646813f5bcb7b80926346f0e18fd474e10d5c05cfb96f71a4ea2798f03c6af"}, &(0x7f0000000200)=0xee) 569.29546ms ago: executing program 5 (id=1990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async) bind$inet6(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x4}}}, 0xb8}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) 489.81683ms ago: executing program 1 (id=1991): socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000b1420042cbd7000fddbdf2508003f00050000000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4044045) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003540)=""/103, 0x67}, {&(0x7f00000024c0)=""/4056, 0xfd8}, {&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f00000035c0)=""/4091, 0xffb}, {&(0x7f0000000240)=""/175, 0xaf}], 0x5}, 0x12000) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) listen(r2, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x100}}, @func={0xb, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x5f, 0x30, 0x30]}}, &(0x7f0000000480)=""/250, 0x52, 0xfa, 0x1, 0xc12a, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x1c, &(0x7f0000000840)=ANY=[@ANYRESHEX=r6, @ANYRES16, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005001000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffff740200001d00000018290000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x7fe, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000006, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1f0000000c000000070000000500000040320000", @ANYRES32=0x1, @ANYBLOB="c5714a4a55f199418b45d46deefed3b63c390700", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000928300060000000000000000f86f59732af22c6915147a46126313dd307f56e3766e31238d00005e5a002000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x24, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x0, 0x8, 0x3, 0x2, 0x57, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x9, 0xa, 0xfffffffffffffffc, 0x1}, @exit]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0xe1, &(0x7f0000000300)=""/225, 0x40f00, 0x2, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r6, 0xffffffffffffffff, r7], &(0x7f00000006c0)=[{0x4, 0x1, 0xe, 0x7}, {0x5, 0x1, 0xa}, {0x5, 0x3, 0xd, 0x5}], 0x10, 0x3, @void, @value}, 0x94) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400"], 0x48) socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) 246.362182ms ago: executing program 1 (id=1992): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r6 = socket(0x200000000000011, 0x3, 0x2) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x67, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 193.203216ms ago: executing program 5 (id=1993): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) listen(r3, 0x8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000240)={'erspan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000000201040000000000000000020000002400028014000180080001000000000008000a00ac1e00010c00008005000100000000002c00038014000180080001000000000008000200ac1e80010c000280050001000000000006000340000000000400"], 0x68}}, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="18000040fe9b00000000000000", @ANYRESOCT=0x0, @ANYRESDEC=r9, @ANYRES16=r2, @ANYRES16=r2, @ANYRESDEC=r4, @ANYRES16=r11, @ANYRES32=r6, @ANYBLOB="383516bc1597c31a13327fb06d00217698fdd75fcddd0d7dd9581b0ee544fe128e3b249fc7bb7ff726f06d9255dce118bc4890ab2655dd23528fee28ced64024c577a0c44eff40750121c9f8105a0146a812bf588661568f6dd45fb74bd9ce6f760412ed20b5b9e17b3cbb36e65459f0bbf6842a2756dd6396488d1332f5e165edbf9059ca04b31dac7aa91d7e3f959ecb5839975ffe0a5c428853bc936ad56de6ef29418bd408e12fb41901409c15906f1246091a174257bff964ad098cfc61d2ae", @ANYRES64, @ANYRES32=r3, @ANYRES32=r6, @ANYRES16=r0], 0x18}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/39, 0x27}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x2, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x10000) socket$inet6(0xa, 0x1, 0xfffffffd) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r12) write$cgroup_subtree(r12, &(0x7f0000000480)=ANY=[@ANYBLOB='-devices -mem_ry -memory -memory -rdma \x00cpuset +io \x00rlimit '], 0x3b) 184.830921ms ago: executing program 0 (id=1994): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10, 0x800) r5 = accept$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) setsockopt$inet_int(r5, 0x0, 0x35, &(0x7f00000000c0)=0xb416, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x4e24, @private=0xa010101}}) 50.126243ms ago: executing program 0 (id=1995): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e02, @private=0xa010100}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x12) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a0012000a002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="60367d409b53bfd2476ddeb14b204ec6ca16e9eb3608f561aaa987e871923a4cd81ba31ac63ce67d37ea790fb004fc56ac765fa2c4d76b231daff68733e9260705ec94d9e9471d00e9deb161a49d422bc7d889b0d5c85e16de22e9c08928be060189e207b07b04838087cd8b8d6680117d0667da29ce43c88ac8446be77020790c2631e8e451e6cc34ca99281768fd390bfba1b3d5269e7ebd213786d18f65b70febd646c0ad2f180ef211cc39a947ea6fbda46749d182e28cb955e4109039adfc81d67d8b0fae7d8bc0928db271da020e12031ae0c52b4bf6933f21bc79", @ANYRES16=r1, @ANYRES8=r0], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x5, 0xf, 0x0, &(0x7f0000000300)="42a169c1e0af56c3bcfb0799309067", 0x0, 0xcff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) socket$unix(0x1, 0x3, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) preadv(r7, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1, 0x4, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000340)={0x5, 0x8, 0xc, 0x43, 0x8, 0x5, 0x7, 0xfe1}, 0x20) sendto$inet(r0, &(0x7f0000000080)="f941ac66e93c9d56d498db2710b81a7de65eed978512e061b7d4c8e4d495", 0x1e, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) shutdown(r0, 0x1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r12, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r10, 0x3bce}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x10448) 0s ago: executing program 5 (id=1996): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000), 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r1], 0xb8}, 0x1, 0x0, 0x0, 0x2000800d}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000faffffffffffffff000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000001000000000000"], 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0x78, 0x0, 0x8}, {0x6, 0x0, 0x10, 0x400000}]}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206030000000000ddffffffffffffff05000400030000000900020073797a31000000000500040000000000050005000a00000005000100060000000c0007800800080000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="0d9b80ffffffffff180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018180000", @ANYRES32=0x1, @ANYBLOB="000000000000010018410000f9ffffff0000000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x4, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000480)=[{0x0, 0x2, 0xb, 0x6}, {0x1, 0x5, 0x0, 0x8}, {0x3, 0x2, 0x10, 0xc}, {0x3, 0x4, 0x6, 0xa}, {0x3, 0x1, 0x8, 0xb}, {0x0, 0x3, 0x10}], 0x10, 0x4e14, @void, @value}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x106, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001300)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000010c0)={0x0, r4}, 0x10) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000)=0x100) r8 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)={0x60000005}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0xa, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=@getchain={0x5c, 0x66, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xfff2, 0xb}, {0x6, 0xfff2}, {0x4, 0x5}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0xa4, 0x2c, 0xd27, 0x30bd29, 0x25cfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0x6}, {0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xd}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xf}, @filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x2, 0x2b9}}, @TCA_U32_INDEV={0x14, 0x8, 'sit0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0x8000}, @TCA_U32_MARK={0x10, 0xa, {0xc2fc, 0x6}}, @TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x66, 0x7}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) kernel console output (not intermixed with test programs): rmance. Setting the MTU to 1560 would solve the problem. [ 342.999631][T10021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.212984][T10119] netlink: 'syz.5.1130': attribute type 12 has an invalid length. [ 343.254759][T10021] hsr_slave_0: entered promiscuous mode [ 343.275880][T10021] hsr_slave_1: entered promiscuous mode [ 343.291686][T10021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.302910][T10021] Cannot create hsr debugfs directory [ 343.312869][T10119] netlink: 'syz.5.1130': attribute type 1 has an invalid length. [ 344.190506][T10021] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.214543][T10021] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.233861][T10021] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.252719][T10021] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.433605][T10021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.489444][T10021] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.511762][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.518938][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.549925][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.557128][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.590481][T10185] macvlan3: entered allmulticast mode [ 344.599461][T10185] bond0: entered allmulticast mode [ 344.614177][T10185] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 344.627678][T10185] team0: Port device macvlan3 added [ 344.855693][ T7018] Bluetooth: hci6: command tx timeout [ 344.856975][T10195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1148'. [ 345.051065][T10204] netlink: 'syz.1.1151': attribute type 1 has an invalid length. [ 345.146789][T10021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.183969][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1152'. [ 345.232632][T10208] netlink: 2716 bytes leftover after parsing attributes in process `syz.1.1153'. [ 345.289079][T10206] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.356986][T10021] veth0_vlan: entered promiscuous mode [ 345.410036][T10021] veth1_vlan: entered promiscuous mode [ 345.509544][T10021] veth0_macvtap: entered promiscuous mode [ 345.525210][T10216] netlink: 'syz.1.1154': attribute type 10 has an invalid length. [ 345.539821][T10021] veth1_macvtap: entered promiscuous mode [ 345.573892][T10216] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 345.740685][T10216] erspan0: left allmulticast mode [ 345.849306][T10216] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 345.978030][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.022986][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.063657][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.099189][T10237] netlink: 'syz.6.1158': attribute type 1 has an invalid length. [ 346.101664][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.135297][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.155203][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.176981][T10021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.234818][T10238] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 346.282420][T10238] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 346.309785][T10238] bond1: (slave vcan1): making interface the new active one [ 346.318835][T10238] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 346.337243][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.387776][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.423766][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.454754][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.475456][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.505320][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.526797][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.551591][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.564221][T10021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.603381][T10236] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 346.630234][T10236] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 346.648443][T10237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.670575][T10021] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.693925][T10251] siw: device registration error -23 [ 346.706351][T10021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.726812][T10021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.737140][T10021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.750482][T10250] lo speed is unknown, defaulting to 1000 [ 346.809987][T10250] lo speed is unknown, defaulting to 1000 [ 346.874292][T10250] lo speed is unknown, defaulting to 1000 [ 346.881224][ T6082] bond1: (slave erspan0): link status definitely down, disabling slave [ 346.901636][T10250] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 346.926954][ T6082] bond1: now running without any active interface! [ 346.936316][ T7018] Bluetooth: hci6: command 0x0405 tx timeout [ 346.976703][T10258] netlink: 'syz.6.1163': attribute type 10 has an invalid length. [ 346.986849][T10250] lo speed is unknown, defaulting to 1000 [ 347.014620][T10250] lo speed is unknown, defaulting to 1000 [ 347.040142][ T6082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.058642][ T6082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.068151][T10250] lo speed is unknown, defaulting to 1000 [ 347.094042][T10250] lo speed is unknown, defaulting to 1000 [ 347.109149][T10263] netlink: 'syz.5.1165': attribute type 9 has an invalid length. [ 347.117316][T10263] netlink: 204732 bytes leftover after parsing attributes in process `syz.5.1165'. [ 347.128608][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.142539][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.154318][T10250] lo speed is unknown, defaulting to 1000 [ 347.166437][T10263] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1165'. [ 347.176655][T10263] netlink: 'syz.5.1165': attribute type 1 has an invalid length. [ 347.178579][T10250] lo speed is unknown, defaulting to 1000 [ 347.184371][T10263] netlink: 'syz.5.1165': attribute type 2 has an invalid length. [ 347.184408][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1165'. [ 347.218573][T10250] lo speed is unknown, defaulting to 1000 [ 347.291679][T10250] lo speed is unknown, defaulting to 1000 [ 347.606795][T10280] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1171'. [ 348.148593][T10290] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1173'. [ 348.231263][ T3432] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.414008][ T3432] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.506264][ T3432] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.556653][ T3432] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.698471][ T3432] bridge_slave_1: left allmulticast mode [ 348.704166][ T3432] bridge_slave_1: left promiscuous mode [ 348.710253][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.719531][ T3432] bridge_slave_0: left allmulticast mode [ 348.725994][ T3432] bridge_slave_0: left promiscuous mode [ 348.731946][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.134779][T10311] Bluetooth: MGMT ver 1.23 [ 349.569091][ T3432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.679298][ T3432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.773701][ T3432] bond0 (unregistering): Released all slaves [ 349.781449][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 349.791335][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 349.811856][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 349.841192][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 349.849333][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.073943][T10333] xt_ecn: cannot match TCP bits for non-tcp packets [ 350.104885][T10335] xt_ecn: cannot match TCP bits for non-tcp packets [ 350.228704][T10341] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 350.259448][T10327] lo speed is unknown, defaulting to 1000 [ 350.783632][T10318] lo speed is unknown, defaulting to 1000 [ 351.176006][ T5843] Bluetooth: hci0: command 0x0401 tx timeout [ 351.193074][ T5840] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 351.225452][T10327] chnl_net:caif_netlink_parms(): no params data found [ 351.324011][ T3432] hsr_slave_0: left promiscuous mode [ 351.346855][ T3432] hsr_slave_1: left promiscuous mode [ 351.360913][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.384734][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.435637][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.443148][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.476965][ T3432] veth1_macvtap: left promiscuous mode [ 351.482655][ T3432] veth0_macvtap: left promiscuous mode [ 351.488779][ T3432] veth1_vlan: left promiscuous mode [ 351.494233][ T3432] veth0_vlan: left promiscuous mode [ 351.895288][ T5840] Bluetooth: hci6: command tx timeout [ 352.318797][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 352.418849][ T3432] team0 (unregistering): Port device team_slave_0 removed [ 353.364734][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 353.436820][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'. [ 353.918649][T10327] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.927359][T10327] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.940999][T10327] bridge_slave_0: entered allmulticast mode [ 353.959365][T10327] bridge_slave_0: entered promiscuous mode [ 353.971530][T10394] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1194'. [ 353.985941][ T5840] Bluetooth: hci6: command tx timeout [ 354.047000][T10327] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.054513][T10327] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.102143][T10327] bridge_slave_1: entered allmulticast mode [ 354.136020][T10327] bridge_slave_1: entered promiscuous mode [ 354.487552][T10327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.522502][T10327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.629278][T10327] team0: Port device team_slave_0 added [ 354.656778][T10327] team0: Port device team_slave_1 added [ 354.729239][T10327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.744185][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.770972][T10327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.784044][T10327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.792804][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.833493][T10327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.978503][T10327] hsr_slave_0: entered promiscuous mode [ 354.979353][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 355.008224][T10327] hsr_slave_1: entered promiscuous mode [ 355.030384][T10327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.040746][T10327] Cannot create hsr debugfs directory [ 355.102029][T10362] Set syz1 is full, maxelem 65536 reached [ 355.276224][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1199'. [ 355.384126][T10426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1202'. [ 355.401265][T10426] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 355.511479][T10426] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 355.592675][T10426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1202'. [ 355.634192][T10437] netlink: 'syz.1.1206': attribute type 5 has an invalid length. [ 355.739324][T10442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1207'. [ 356.057890][ T5840] Bluetooth: hci6: command tx timeout [ 356.159796][T10327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.198149][T10327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.228768][T10327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.265229][T10437] lo speed is unknown, defaulting to 1000 [ 356.271389][T10327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.612772][T10437] tipc: can't start tipc receive workqueue [ 356.632175][T10453] lo speed is unknown, defaulting to 1000 [ 356.843769][T10480] pim6reg1: entered promiscuous mode [ 356.849528][T10480] pim6reg1: entered allmulticast mode [ 356.937811][T10327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.964091][T10327] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.118851][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.126065][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.190309][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.197535][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.616472][T10496] netlink: 'syz.0.1218': attribute type 8 has an invalid length. [ 357.708251][T10327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.836404][T10327] veth0_vlan: entered promiscuous mode [ 357.874238][T10327] veth1_vlan: entered promiscuous mode [ 357.980945][T10327] veth0_macvtap: entered promiscuous mode [ 358.018245][T10327] veth1_macvtap: entered promiscuous mode [ 358.097046][T10485] lo speed is unknown, defaulting to 1000 [ 358.103883][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.138378][ T5840] Bluetooth: hci6: command tx timeout [ 358.143968][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.165339][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.185120][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.196090][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.212147][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.223695][T10327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.248093][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.262694][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.293626][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.333132][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.343077][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.361670][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.386412][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.415205][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.434855][T10327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.493419][T10327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.625129][T10327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.633880][T10327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.652936][T10327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.941597][T10513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1222'. [ 358.956454][T10513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1222'. [ 359.146789][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.176044][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.241225][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.269771][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.367284][T10519] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1224'. [ 359.530207][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 359.543525][T10514] netlink: 416 bytes leftover after parsing attributes in process `syz.0.1222'. [ 359.563471][T10522] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 359.607159][T10522] 8021q: adding VLAN 0 to HW filter on device bond8 [ 359.752095][T10513] lo speed is unknown, defaulting to 1000 [ 359.802275][T10501] lo speed is unknown, defaulting to 1000 [ 360.131425][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.214736][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.315259][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.534857][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.723986][ T64] bridge_slave_1: left allmulticast mode [ 360.729925][ T64] bridge_slave_1: left promiscuous mode [ 360.735841][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.744833][ T64] bridge_slave_0: left allmulticast mode [ 360.752010][ T64] bridge_slave_0: left promiscuous mode [ 360.758144][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.304674][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.322348][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.334408][ T64] bond0 (unregistering): Released all slaves [ 361.357976][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.368543][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.381289][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.392026][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.399808][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.728369][T10550] syz.5.1231 uses old SIOCAX25GETINFO [ 361.766093][T10548] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1230'. [ 361.851988][T10548] netlink: 'syz.1.1230': attribute type 1 has an invalid length. [ 361.996682][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 362.022241][T10544] lo speed is unknown, defaulting to 1000 [ 362.599428][T10578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.634080][T10578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.723585][T10578] veth1_vlan: left allmulticast mode [ 362.745553][T10578] vlan0: left promiscuous mode [ 362.861533][T10578] geneve2: left promiscuous mode [ 362.875063][T10578] geneve2: left allmulticast mode [ 362.882734][T10578] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.906208][T10578] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.914586][T10578] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.945206][T10578] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.995721][T10578] geneve3: left promiscuous mode [ 363.013058][T10578] geneve3: left allmulticast mode [ 363.060782][T10578] veth3: left promiscuous mode [ 363.109284][T10578] bond3: left promiscuous mode [ 363.133970][T10578] batadv1: left promiscuous mode [ 363.177636][T10578] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.185475][T10586] sctp: [Deprecated]: syz.5.1239 (pid 10586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.185475][T10586] Use struct sctp_sack_info instead [ 363.186447][T10578] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.211629][T10578] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.220586][T10578] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.266804][T10578] bond6: left promiscuous mode [ 363.283920][T10578] batadv2: left promiscuous mode [ 363.291390][T10578] batadv2: left allmulticast mode [ 363.344525][ T64] hsr_slave_0: left promiscuous mode [ 363.361945][ T64] hsr_slave_1: left promiscuous mode [ 363.374230][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.391901][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.413973][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.423197][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.484468][ T64] veth1_macvtap: left promiscuous mode [ 363.495670][ T64] veth0_macvtap: left promiscuous mode [ 363.495951][ T5840] Bluetooth: hci6: command tx timeout [ 363.501328][ T64] veth1_vlan: left promiscuous mode [ 363.518514][ T64] veth0_vlan: left promiscuous mode [ 364.002775][ T64] team0 (unregistering): Port device team_slave_1 removed [ 364.040871][ T64] team0 (unregistering): Port device team_slave_0 removed [ 364.394282][T10590] tipc: Started in network mode [ 364.405180][T10590] tipc: Node identity , cluster identity 4711 [ 364.842129][T10582] lo speed is unknown, defaulting to 1000 [ 364.954281][T10544] chnl_net:caif_netlink_parms(): no params data found [ 365.576081][ T5840] Bluetooth: hci6: command tx timeout [ 365.626748][T10637] !: renamed from dummy0 [ 365.638048][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.646548][T10544] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.666026][T10544] bridge_slave_0: entered allmulticast mode [ 365.673616][T10544] bridge_slave_0: entered promiscuous mode [ 365.725357][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.732512][T10544] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.960388][T10544] bridge_slave_1: entered allmulticast mode [ 365.988095][T10544] bridge_slave_1: entered promiscuous mode [ 365.998154][T10648] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 366.156756][T10544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.188985][T10544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.321642][T10544] team0: Port device team_slave_0 added [ 366.358502][T10544] team0: Port device team_slave_1 added [ 366.402117][T10659] netlink: 'syz.6.1257': attribute type 21 has an invalid length. [ 366.443580][T10659] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1257'. [ 366.496023][T10663] netlink: 'syz.6.1257': attribute type 9 has an invalid length. [ 366.558530][T10544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.581075][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.609905][T10544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.624071][T10659] netlink: 'syz.6.1257': attribute type 5 has an invalid length. [ 366.632006][T10659] netlink: 'syz.6.1257': attribute type 6 has an invalid length. [ 366.664257][T10659] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1257'. [ 366.760454][T10544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.776060][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.804419][T10544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.935449][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1258'. [ 366.954743][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1258'. [ 366.977868][T10544] hsr_slave_0: entered promiscuous mode [ 366.984618][T10544] hsr_slave_1: entered promiscuous mode [ 367.001775][T10544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.014323][T10544] Cannot create hsr debugfs directory [ 367.655817][ T5840] Bluetooth: hci6: command tx timeout [ 367.704391][T10688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1264'. [ 367.904315][T10697] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1268'. [ 367.928618][T10697] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1268'. [ 368.300895][T10544] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 368.362332][T10544] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 368.422771][T10544] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 368.459653][T10544] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.769683][T10544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.836390][T10544] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.886442][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.893608][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.023817][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.031015][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.157303][T10544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.210667][T10544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.736017][ T5840] Bluetooth: hci6: command tx timeout [ 369.963821][T10766] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1285'. [ 369.984288][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1285'. [ 370.028525][T10544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.090918][T10746] lo speed is unknown, defaulting to 1000 [ 370.235682][T10544] veth0_vlan: entered promiscuous mode [ 370.491065][T10544] veth1_vlan: entered promiscuous mode [ 370.625173][T10544] veth0_macvtap: entered promiscuous mode [ 370.654745][T10544] veth1_macvtap: entered promiscuous mode [ 370.854004][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.898333][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.921851][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.945120][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.975960][T10544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.992796][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.003629][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.013675][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.058199][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.068443][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.084523][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.098999][T10544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.120911][T10799] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1296'. [ 371.166541][T10544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.182091][T10544] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.191885][T10544] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.204223][T10544] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.381601][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.416632][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.509503][ T6073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.543984][ T6073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.682494][T10813] __nla_validate_parse: 3 callbacks suppressed [ 371.682510][T10813] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1300'. [ 372.021446][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1307'. [ 372.168125][ T3531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.407602][ T3531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.524466][ T3531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.937988][T10841] lo speed is unknown, defaulting to 1000 [ 373.012992][ T3531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.178767][ T3531] bridge_slave_1: left allmulticast mode [ 373.184466][ T3531] bridge_slave_1: left promiscuous mode [ 373.231941][ T3531] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.252371][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 373.280254][ T3531] bridge_slave_0: left allmulticast mode [ 373.298810][ T3531] bridge_slave_0: left promiscuous mode [ 373.310197][ T3531] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.663520][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 373.672971][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 373.681648][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 373.690180][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 373.700892][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 373.798610][ T3531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.813941][ T3531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.825353][ T3531] bond0 (unregistering): Released all slaves [ 374.604836][T10863] lo speed is unknown, defaulting to 1000 [ 375.175495][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 375.325245][ T3531] hsr_slave_0: left promiscuous mode [ 375.343178][ T3531] hsr_slave_1: left promiscuous mode [ 375.363286][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.455201][ T3531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.496810][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.504252][ T3531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.613681][ T3531] veth1_macvtap: left promiscuous mode [ 375.672615][ T3531] veth0_macvtap: left promiscuous mode [ 375.685219][ T3531] veth1_vlan: left promiscuous mode [ 375.702451][ T3531] veth0_vlan: left promiscuous mode [ 375.735669][ T5840] Bluetooth: hci6: command tx timeout [ 376.300476][ T3531] team0 (unregistering): Port device team_slave_1 removed [ 376.340955][ T3531] team0 (unregistering): Port device team_slave_0 removed [ 376.706712][T10902] smc: net device bond0 applied user defined pnetid SYZ2 [ 376.719112][T10902] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 376.736124][T10898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1323'. [ 376.737920][T10889] lo speed is unknown, defaulting to 1000 [ 376.940779][T10863] chnl_net:caif_netlink_parms(): no params data found [ 377.185658][T10929] FAULT_INJECTION: forcing a failure. [ 377.185658][T10929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.220127][T10929] CPU: 0 UID: 0 PID: 10929 Comm: syz.1.1330 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 377.220152][T10929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.220163][T10929] Call Trace: [ 377.220171][T10929] [ 377.220178][T10929] dump_stack_lvl+0x189/0x250 [ 377.220206][T10929] ? __lock_acquire+0xaac/0xd20 [ 377.220232][T10929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.220256][T10929] ? __pfx__printk+0x10/0x10 [ 377.220271][T10929] ? __might_fault+0xb0/0x130 [ 377.220303][T10929] should_fail_ex+0x414/0x560 [ 377.220324][T10929] _copy_from_user+0x2d/0xb0 [ 377.220348][T10929] __sys_bpf+0x1ed/0x860 [ 377.220372][T10929] ? __pfx___sys_bpf+0x10/0x10 [ 377.220404][T10929] ? ksys_write+0x1f0/0x250 [ 377.220422][T10929] ? rcu_is_watching+0x15/0xb0 [ 377.220457][T10929] __x64_sys_bpf+0x7c/0x90 [ 377.220477][T10929] do_syscall_64+0xf6/0x210 [ 377.220495][T10929] ? clear_bhb_loop+0x45/0xa0 [ 377.220516][T10929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.220544][T10929] RIP: 0033:0x7ff41798e969 [ 377.220560][T10929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.220574][T10929] RSP: 002b:00007ff418881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.220592][T10929] RAX: ffffffffffffffda RBX: 00007ff417bb5fa0 RCX: 00007ff41798e969 [ 377.220604][T10929] RDX: 000000000000000c RSI: 0000200000000300 RDI: 000000000000000a [ 377.220615][T10929] RBP: 00007ff418881090 R08: 0000000000000000 R09: 0000000000000000 [ 377.220625][T10929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.220635][T10929] R13: 0000000000000000 R14: 00007ff417bb5fa0 R15: 00007ffcaca75428 [ 377.220661][T10929] [ 377.594261][T10943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1334'. [ 377.829280][ T5840] Bluetooth: hci6: command tx timeout [ 377.875208][T10939] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 377.972844][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.983745][T10863] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.998692][T10863] bridge_slave_0: entered allmulticast mode [ 378.006929][T10863] bridge_slave_0: entered promiscuous mode [ 378.044548][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.059417][T10863] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.104055][T10863] bridge_slave_1: entered allmulticast mode [ 378.123082][T10863] bridge_slave_1: entered promiscuous mode [ 378.173953][T10965] netlink: 'syz.5.1339': attribute type 22 has an invalid length. [ 378.188591][T10863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.188815][T10965] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1339'. [ 378.208586][T10863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.243780][T10964] x_tables: duplicate underflow at hook 1 [ 378.278877][T10863] team0: Port device team_slave_0 added [ 378.289309][T10959] syzkaller1: entered promiscuous mode [ 378.294856][T10959] syzkaller1: entered allmulticast mode [ 378.308164][T10863] team0: Port device team_slave_1 added [ 378.412875][T10863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.421896][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.459502][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.482218][T10863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.508826][T10968] netlink: 'syz.6.1341': attribute type 1 has an invalid length. [ 378.543480][T10863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.550616][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.578126][T10863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.646016][T10863] hsr_slave_0: entered promiscuous mode [ 378.652645][T10863] hsr_slave_1: entered promiscuous mode [ 378.668615][T10863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.677503][T10863] Cannot create hsr debugfs directory [ 378.726152][T10975] FAULT_INJECTION: forcing a failure. [ 378.726152][T10975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.740936][T10975] CPU: 1 UID: 0 PID: 10975 Comm: syz.0.1344 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 378.740960][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.740972][T10975] Call Trace: [ 378.740979][T10975] [ 378.740986][T10975] dump_stack_lvl+0x189/0x250 [ 378.741021][T10975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.741048][T10975] ? __pfx__printk+0x10/0x10 [ 378.741078][T10975] should_fail_ex+0x414/0x560 [ 378.741101][T10975] _copy_to_user+0x31/0xb0 [ 378.741127][T10975] bpf_prog_test_run_raw_tp+0x503/0x6a0 [ 378.741155][T10975] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 378.741178][T10975] ? __fget_files+0x2a/0x420 [ 378.741206][T10975] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 378.741228][T10975] bpf_prog_test_run+0x2a9/0x340 [ 378.741257][T10975] __sys_bpf+0x4a4/0x860 [ 378.741281][T10975] ? __pfx___sys_bpf+0x10/0x10 [ 378.741316][T10975] ? ksys_write+0x1f0/0x250 [ 378.741334][T10975] ? rcu_is_watching+0x15/0xb0 [ 378.741372][T10975] __x64_sys_bpf+0x7c/0x90 [ 378.741392][T10975] do_syscall_64+0xf6/0x210 [ 378.741420][T10975] ? clear_bhb_loop+0x45/0xa0 [ 378.741442][T10975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.741459][T10975] RIP: 0033:0x7f21b218e969 [ 378.741474][T10975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.741490][T10975] RSP: 002b:00007f21b2f19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.741509][T10975] RAX: ffffffffffffffda RBX: 00007f21b23b5fa0 RCX: 00007f21b218e969 [ 378.741522][T10975] RDX: 000000000000000c RSI: 0000200000000300 RDI: 000000000000000a [ 378.741534][T10975] RBP: 00007f21b2f19090 R08: 0000000000000000 R09: 0000000000000000 [ 378.741545][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.741555][T10975] R13: 0000000000000000 R14: 00007f21b23b5fa0 R15: 00007ffe3d9850b8 [ 378.741583][T10975] [ 379.043133][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1346'. [ 379.567296][T11008] FAULT_INJECTION: forcing a failure. [ 379.567296][T11008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.640860][T10863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.656786][T11008] CPU: 0 UID: 0 PID: 11008 Comm: syz.1.1355 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 379.656814][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.656827][T11008] Call Trace: [ 379.656835][T11008] [ 379.656844][T11008] dump_stack_lvl+0x189/0x250 [ 379.656882][T11008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.656912][T11008] ? __pfx__printk+0x10/0x10 [ 379.656946][T11008] should_fail_ex+0x414/0x560 [ 379.656972][T11008] _copy_to_user+0x31/0xb0 [ 379.657004][T11008] simple_read_from_buffer+0xe1/0x170 [ 379.657034][T11008] proc_fail_nth_read+0x1df/0x250 [ 379.657067][T11008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.657112][T11008] ? rw_verify_area+0x258/0x650 [ 379.657133][T11008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.657164][T11008] vfs_read+0x1fd/0x980 [ 379.657192][T11008] ? __pfx___mutex_lock+0x10/0x10 [ 379.657213][T11008] ? __pfx_vfs_read+0x10/0x10 [ 379.657237][T11008] ? __fget_files+0x2a/0x420 [ 379.657268][T11008] ? __fget_files+0x3a0/0x420 [ 379.657292][T11008] ? __fget_files+0x2a/0x420 [ 379.657334][T11008] ksys_read+0x145/0x250 [ 379.657355][T11008] ? rcu_is_watching+0x15/0xb0 [ 379.657387][T11008] ? __pfx_ksys_read+0x10/0x10 [ 379.657412][T11008] ? do_syscall_64+0xba/0x210 [ 379.657437][T11008] do_syscall_64+0xf6/0x210 [ 379.657458][T11008] ? clear_bhb_loop+0x45/0xa0 [ 379.657484][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.657503][T11008] RIP: 0033:0x7ff41798d37c [ 379.657520][T11008] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 379.657537][T11008] RSP: 002b:00007ff418881030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.657557][T11008] RAX: ffffffffffffffda RBX: 00007ff417bb5fa0 RCX: 00007ff41798d37c [ 379.657571][T11008] RDX: 000000000000000f RSI: 00007ff4188810a0 RDI: 0000000000000005 [ 379.657583][T11008] RBP: 00007ff418881090 R08: 0000000000000000 R09: 0000000000000000 [ 379.657594][T11008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.657606][T11008] R13: 0000000000000000 R14: 00007ff417bb5fa0 R15: 00007ffcaca75428 [ 379.657636][T11008] [ 379.688490][T11011] netlink: 'syz.6.1356': attribute type 1 has an invalid length. [ 379.899905][ T5840] Bluetooth: hci6: command tx timeout [ 379.952436][T11011] bond2: entered promiscuous mode [ 379.958302][T11011] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.971609][T10863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.988656][T11000] lo speed is unknown, defaulting to 1000 [ 380.004582][T10863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.019377][T10863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.094576][T11022] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 380.370107][T11035] ipvlan2: entered allmulticast mode [ 380.379633][T11035] macsec0: entered allmulticast mode [ 380.398388][T11042] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1366'. [ 380.417125][T11040] veth1_macvtap: left promiscuous mode [ 380.463137][T11045] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1366'. [ 380.488462][T11047] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 380.525989][T11047] netlink: 'syz.1.1364': attribute type 2 has an invalid length. [ 380.635831][T10863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.891495][T10863] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.916241][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.923486][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.957424][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.964547][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.105370][T11065] netlink: 'syz.1.1371': attribute type 1 has an invalid length. [ 381.149990][T11065] bond10: entered promiscuous mode [ 381.155850][T11065] 8021q: adding VLAN 0 to HW filter on device bond10 [ 381.175396][T11066] hsr0: entered promiscuous mode [ 381.192713][T11066] hsr0: entered allmulticast mode [ 381.202488][T11066] hsr_slave_0: entered allmulticast mode [ 381.212904][T11066] hsr_slave_1: entered allmulticast mode [ 381.279980][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1373'. [ 381.707021][T10863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.727582][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1378'. [ 381.852477][T10863] veth0_vlan: entered promiscuous mode [ 381.879923][T10863] veth1_vlan: entered promiscuous mode [ 381.951646][T10863] veth0_macvtap: entered promiscuous mode [ 381.993554][ T5840] Bluetooth: hci6: command tx timeout [ 382.024963][T10863] veth1_macvtap: entered promiscuous mode [ 382.043763][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1380'. [ 382.089362][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.115200][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.135374][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.163136][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.177015][T10863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.238255][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.263278][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.283049][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.306377][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.322825][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.334813][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.346667][T10863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.433839][T10863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.453608][T11151] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 382.474178][T10863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.479476][T11151] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1385'. [ 382.505247][T10863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.521605][T10863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.748175][T11126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.791180][T11126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.268233][ T6080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.283044][ T6080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.331524][T11181] batadv_slave_0: entered promiscuous mode [ 383.365237][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1392'. [ 383.532306][T11176] batadv_slave_0: left promiscuous mode [ 383.646668][T11192] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1398'. [ 383.658124][T11192] block nbd0: must specify backend [ 383.790211][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 383.809369][T11199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 383.853563][T11199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.886230][T11199] macsec1: entered allmulticast mode [ 383.886584][T11201] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1401'. [ 383.904273][T11199] dummy0: entered allmulticast mode [ 383.928683][T11199] dummy0: left allmulticast mode [ 384.001538][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1402'. [ 384.087016][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.177413][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.315783][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.371536][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.656757][ T13] bridge_slave_1: left allmulticast mode [ 384.662456][ T13] bridge_slave_1: left promiscuous mode [ 384.668676][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.678873][ T13] bridge_slave_0: left allmulticast mode [ 384.684626][ T13] bridge_slave_0: left promiscuous mode [ 384.691775][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.976320][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.986996][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.997339][ T13] bond0 (unregistering): Released all slaves [ 385.206523][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 385.334466][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 385.493224][T11234] netlink: 'syz.6.1408': attribute type 1 has an invalid length. [ 385.517448][T11234] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1408'. [ 385.656579][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 386.065623][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 386.075263][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 386.083655][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.091702][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.099811][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 386.212288][ T13] hsr_slave_0: left promiscuous mode [ 386.251196][ T13] hsr_slave_1: left promiscuous mode [ 386.276971][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.311951][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.332153][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.350127][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.428860][ T13] veth1_macvtap: left promiscuous mode [ 386.438741][ T13] veth0_macvtap: left promiscuous mode [ 386.444626][ T13] veth1_vlan: left promiscuous mode [ 386.450343][ T13] veth0_vlan: left promiscuous mode [ 386.898616][ T13] team0 (unregistering): Port device team_slave_1 removed [ 386.932392][ T13] team0 (unregistering): Port device team_slave_0 removed [ 387.258656][ T5840] Bluetooth: hci0: command 0x0401 tx timeout [ 387.324174][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 387.334140][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.389558][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 387.399667][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.839941][T11279] ipvlan2: left allmulticast mode [ 387.847459][T11279] macsec0: left allmulticast mode [ 387.874569][T11279] bond10: left promiscuous mode [ 387.942721][T11263] lo speed is unknown, defaulting to 1000 [ 388.133855][T11290] __nla_validate_parse: 2 callbacks suppressed [ 388.133872][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 388.215554][ T5840] Bluetooth: hci6: command tx timeout [ 388.431467][T11246] lo speed is unknown, defaulting to 1000 [ 388.620341][T11310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1429'. [ 388.793908][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1431'. [ 388.825085][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1431'. [ 388.866405][T11317] netlink: 'syz.5.1431': attribute type 10 has an invalid length. [ 388.900370][T11315] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.909232][T11315] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.918327][T11315] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.926838][T11315] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.030295][T11317] veth0_vlan: left promiscuous mode [ 389.055882][T11317] veth0_vlan: entered promiscuous mode [ 389.086655][T11317] team0: Device veth0_vlan failed to register rx_handler [ 389.310051][T11329] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1435'. [ 389.347177][T11326] netlink: 'syz.5.1434': attribute type 1 has an invalid length. [ 389.481359][T11246] chnl_net:caif_netlink_parms(): no params data found [ 389.486235][T11331] xt_hashlimit: max too large, truncated to 1048576 [ 389.693739][T11344] xt_hashlimit: size too large, truncated to 1048576 [ 389.795905][T11349] netlink: 'syz.1.1437': attribute type 8 has an invalid length. [ 390.063157][T11361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1440'. [ 390.097424][T11364] ipip0: entered promiscuous mode [ 390.110804][T11364] ipip0: entered allmulticast mode [ 390.162326][T11246] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.176248][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.183577][T11246] bridge_slave_0: entered allmulticast mode [ 390.196371][T11246] bridge_slave_0: entered promiscuous mode [ 390.213457][T11246] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.228311][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.235757][T11246] bridge_slave_1: entered allmulticast mode [ 390.244783][T11246] bridge_slave_1: entered promiscuous mode [ 390.283257][T11340] lo speed is unknown, defaulting to 1000 [ 390.295203][ T5840] Bluetooth: hci6: command tx timeout [ 390.371020][T11246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.430179][T11246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.479005][T11378] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1443'. [ 390.526208][T11246] team0: Port device team_slave_0 added [ 390.549451][T11246] team0: Port device team_slave_1 added [ 390.673291][T11246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.703157][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.777901][T11246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.793386][T11395] netlink: 'syz.0.1448': attribute type 4 has an invalid length. [ 390.796267][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 390.804909][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 390.812347][T11246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.826642][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 390.834473][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.871109][T11246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.210289][T11246] hsr_slave_0: entered promiscuous mode [ 391.218020][T11405] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 391.236709][T11246] hsr_slave_1: entered promiscuous mode [ 391.242856][T11246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.250607][T11246] Cannot create hsr debugfs directory [ 391.328830][T11405] nbd: socks must be embedded in a SOCK_ITEM attr [ 391.529250][T11413] netlink: 'syz.6.1456': attribute type 21 has an invalid length. [ 391.548555][T11409] syzkaller0: entered promiscuous mode [ 391.556174][T11409] syzkaller0: entered allmulticast mode [ 391.579692][T11413] netlink: 'syz.6.1456': attribute type 5 has an invalid length. [ 391.636729][T11416] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 392.074564][T11441] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 392.139038][T11442] netlink: 'syz.5.1464': attribute type 1 has an invalid length. [ 392.153713][T11443] netlink: 'syz.5.1464': attribute type 1 has an invalid length. [ 392.385406][ T5843] Bluetooth: hci6: command tx timeout [ 393.272359][T11450] __nla_validate_parse: 5 callbacks suppressed [ 393.272376][T11450] netlink: 604 bytes leftover after parsing attributes in process `syz.1.1467'. [ 393.302932][T11450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1467'. [ 393.501925][T11246] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 393.515458][T11246] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 393.538427][T11246] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 393.566349][T11246] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 393.603282][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1471'. [ 393.627537][T11416] lo speed is unknown, defaulting to 1000 [ 393.637488][T11466] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1470'. [ 393.922362][T11246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.080464][T11246] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.141209][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.148422][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.240853][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.248093][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.441598][T11246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.456209][ T5843] Bluetooth: hci6: command 0x0419 tx timeout [ 394.485628][T11246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.879371][T11246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.888501][T11500] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 394.958665][T11246] veth0_vlan: entered promiscuous mode [ 394.973928][T11246] veth1_vlan: entered promiscuous mode [ 395.031773][T11246] veth0_macvtap: entered promiscuous mode [ 395.044247][T11246] veth1_macvtap: entered promiscuous mode [ 395.067248][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.086489][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.119431][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.133854][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.145916][T11246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.155239][T11504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1482'. [ 395.164911][T11504] tipc: Invalid UDP bearer configuration [ 395.164957][T11504] tipc: Enabling of bearer rejected, failed to enable media [ 395.246591][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.271040][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.295339][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.305802][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.325031][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.336325][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.348035][T11246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.364449][T11246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.385844][T11246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.398475][T11246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.407788][T11246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.540577][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.552926][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.598926][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1483'. [ 395.612914][T11126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.628678][T11126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.881729][T11518] geneve4: entered promiscuous mode [ 396.824955][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.960382][T11509] lo speed is unknown, defaulting to 1000 [ 397.067375][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.413947][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.661871][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.763510][ T13] bridge_slave_1: left allmulticast mode [ 397.769562][ T13] bridge_slave_1: left promiscuous mode [ 397.775710][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.784946][ T13] bridge_slave_0: left allmulticast mode [ 397.790801][ T13] bridge_slave_0: left promiscuous mode [ 397.796850][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.129991][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.146482][T11552] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1496'. [ 398.167311][T11550] xt_TCPMSS: Only works on TCP SYN packets [ 398.168205][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 398.213507][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 398.245594][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.278225][ T13] bond0 (unregistering): Released all slaves [ 398.374151][T11551] pim6reg: entered allmulticast mode [ 398.937012][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 398.946167][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 398.954312][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 398.962276][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 398.969903][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 398.981689][T11575] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 399.006921][T11575] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1504'. [ 399.104477][T11581] syzkaller1: entered promiscuous mode [ 399.110757][T11581] syzkaller1: entered allmulticast mode [ 399.212792][T11573] syzkaller0: entered promiscuous mode [ 399.218514][T11573] syzkaller0: entered allmulticast mode [ 399.506532][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1513'. [ 399.528261][T11606] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1513'. [ 400.923025][T11607] macvtap1: entered promiscuous mode [ 400.929948][T11607] vlan0: entered promiscuous mode [ 400.935864][T11607] macvtap1: entered allmulticast mode [ 400.941356][T11607] vlan0: entered allmulticast mode [ 400.946698][T11607] @ÿ: entered allmulticast mode [ 400.966529][T11607] vlan0: left allmulticast mode [ 400.971909][T11607] @ÿ: left allmulticast mode [ 400.976795][T11607] vlan0: left promiscuous mode [ 401.016059][ T5843] Bluetooth: hci6: command tx timeout [ 401.029696][T11576] lo speed is unknown, defaulting to 1000 [ 401.075782][T11616] netlink: 'syz.6.1514': attribute type 39 has an invalid length. [ 401.454141][ T13] hsr_slave_0: left promiscuous mode [ 401.482966][ T13] hsr_slave_1: left promiscuous mode [ 401.509409][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.537951][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.575979][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.596060][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.659924][ T13] veth1_macvtap: left promiscuous mode [ 401.675218][ T13] veth0_macvtap: left promiscuous mode [ 401.685178][ T13] veth1_vlan: left promiscuous mode [ 401.690556][ T13] veth0_vlan: left promiscuous mode [ 402.251895][ T13] team0 (unregistering): Port device team_slave_1 removed [ 402.290908][ T13] team0 (unregistering): Port device team_slave_0 removed [ 402.725167][T11604] lo speed is unknown, defaulting to 1000 [ 402.725923][T11643] 8021q: VLANs not supported on ip6gre0 [ 402.865323][T11653] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3940 [ 403.037720][T11661] xt_ecn: cannot match TCP bits for non-tcp packets [ 403.096559][ T5843] Bluetooth: hci6: command tx timeout [ 404.700365][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1527'. [ 404.709503][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1527'. [ 404.776032][T11576] chnl_net:caif_netlink_parms(): no params data found [ 405.058099][T11576] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.073573][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.080986][T11576] bridge_slave_0: entered allmulticast mode [ 405.123662][T11576] bridge_slave_0: entered promiscuous mode [ 405.145305][T11576] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.152644][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.169741][T11576] bridge_slave_1: entered allmulticast mode [ 405.176334][ T5843] Bluetooth: hci6: command tx timeout [ 405.194718][T11576] bridge_slave_1: entered promiscuous mode [ 405.258576][T11576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.282605][T11576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.378517][T11576] team0: Port device team_slave_0 added [ 405.386151][T11672] lo speed is unknown, defaulting to 1000 [ 405.400015][T11576] team0: Port device team_slave_1 added [ 405.523760][T11698] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1533'. [ 405.541761][T11576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.562038][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.604689][T11576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.639121][T11576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.663792][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.720624][T11576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.790699][T11697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1533'. [ 405.803402][T11697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1533'. [ 406.053348][T11667] lo speed is unknown, defaulting to 1000 [ 406.075480][T11576] hsr_slave_0: entered promiscuous mode [ 406.082125][T11576] hsr_slave_1: entered promiscuous mode [ 406.089677][T11576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.107086][T11576] Cannot create hsr debugfs directory [ 406.719452][T11721] tipc: Enabling of bearer rejected, failed to enable media [ 406.937007][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1539'. [ 406.982398][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1539'. [ 407.038710][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 407.047946][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 407.075412][T11727] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1540'. [ 407.101138][T11727] nbd: socks must be embedded in a SOCK_ITEM attr [ 407.247952][T11733] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.255494][ T5843] Bluetooth: hci6: command tx timeout [ 407.278030][T11733] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.288067][T11733] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.302855][T11733] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.311585][T11733] geneve2: entered promiscuous mode [ 407.318593][T11733] geneve2: entered allmulticast mode [ 407.343277][T11576] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.452308][T11576] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.498903][T11576] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.548252][T11736] tipc: Enabling of bearer rejected, already enabled [ 407.579342][T11745] gretap0: entered promiscuous mode [ 407.605462][T11745] macsec0: entered allmulticast mode [ 407.610996][T11745] gretap0: entered allmulticast mode [ 407.636095][T11745] gretap0: left allmulticast mode [ 407.641269][T11745] gretap0: left promiscuous mode [ 407.688007][T11576] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 407.718494][T11737] tipc: Disabling bearer [ 407.830294][T11754] x_tables: duplicate underflow at hook 3 [ 407.844311][T11756] vlan2: entered allmulticast mode [ 408.024162][T11763] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 408.100939][T11576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.162261][T11576] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.196211][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.203381][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.253679][T11131] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.260857][T11131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.431476][T11788] netlink: 'syz.0.1557': attribute type 29 has an invalid length. [ 408.577013][T11791] syzkaller0: entered promiscuous mode [ 408.588533][T11791] syzkaller0: entered allmulticast mode [ 409.131468][T11809] netlink: 'syz.0.1563': attribute type 1 has an invalid length. [ 410.300097][T11810] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 410.380359][T11811] veth5: entered promiscuous mode [ 410.395308][T11815] __nla_validate_parse: 12 callbacks suppressed [ 410.395323][T11815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1564'. [ 410.417385][T11811] bond0: (slave veth5): Enslaving as an active interface with an up link [ 410.592074][T11576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.725368][T11576] veth0_vlan: entered promiscuous mode [ 410.751669][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 410.770366][T11576] veth1_vlan: entered promiscuous mode [ 410.818149][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 410.864952][T11845] xfrm1: entered promiscuous mode [ 410.886411][T11845] xfrm1: entered allmulticast mode [ 410.897765][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 410.929320][T11576] veth0_macvtap: entered promiscuous mode [ 410.973966][T11576] veth1_macvtap: entered promiscuous mode [ 411.023907][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.037951][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.048756][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.059653][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.081849][T11576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.112333][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.123507][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.134713][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.146771][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.156989][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.169939][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.182263][T11576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.193439][T11576] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.202329][T11576] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.211822][T11576] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.221730][T11576] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.285287][T11860] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 411.293610][T11859] sock: sock_timestamping_bind_phc: sock not bind to device [ 411.320409][T11860] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1577'. [ 411.449938][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.465862][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.524386][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.543282][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.728870][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'. [ 412.080947][T11886] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1584'. [ 412.090192][T11886] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1584'. [ 412.105216][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1583'. [ 412.131196][T11887] nbd: must specify at least one socket [ 412.312547][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 412.333485][ T6082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.443746][ T6082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.646685][T11885] lo speed is unknown, defaulting to 1000 [ 412.703669][ T6082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.764725][ T6082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.147235][ T6082] bridge_slave_1: left allmulticast mode [ 413.152908][ T6082] bridge_slave_1: left promiscuous mode [ 413.160687][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.170391][ T6082] bridge_slave_0: left allmulticast mode [ 413.176636][ T6082] bridge_slave_0: left promiscuous mode [ 413.183783][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.453711][ T6082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.464336][ T6082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.474548][ T6082] bond0 (unregistering): Released all slaves [ 413.676615][T11908] batadv1: entered promiscuous mode [ 413.754306][T11910] batadv1: entered promiscuous mode [ 413.999727][T11927] delete_channel: no stack [ 414.211675][T11935] syzkaller1: entered promiscuous mode [ 414.271140][T11935] syzkaller1: entered allmulticast mode [ 414.354933][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 414.365277][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 414.373361][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 414.409173][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 414.425610][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 415.541085][T11937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.555196][T11937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.617365][T11937] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.627358][T11937] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.637547][T11937] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.646485][T11937] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.731027][ T6082] hsr_slave_0: left promiscuous mode [ 415.741169][ T6082] hsr_slave_1: left promiscuous mode [ 415.747601][ T6082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.755302][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.763223][ T6082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.771584][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.809763][ T6082] veth1_macvtap: left promiscuous mode [ 415.815963][ T6082] veth0_macvtap: left promiscuous mode [ 415.822241][ T6082] veth1_vlan: left promiscuous mode [ 415.827755][ T6082] veth0_vlan: left promiscuous mode [ 416.237444][T11977] __nla_validate_parse: 2 callbacks suppressed [ 416.237460][T11977] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1603'. [ 416.339191][ T6082] team0 (unregistering): Port device team_slave_1 removed [ 416.372613][ T6082] team0 (unregistering): Port device team_slave_0 removed [ 416.536382][ T5843] Bluetooth: hci6: command tx timeout [ 417.026554][T11986] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1605'. [ 417.254510][T11992] netlink: 'syz.5.1608': attribute type 11 has an invalid length. [ 417.275145][T11992] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1608'. [ 417.292220][T11965] lo speed is unknown, defaulting to 1000 [ 417.294008][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1608'. [ 417.708177][T11943] lo speed is unknown, defaulting to 1000 [ 417.890696][T12014] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1614'. [ 418.186385][T12031] netlink: 'syz.5.1617': attribute type 1 has an invalid length. [ 418.194172][T12031] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1617'. [ 418.451716][T12034] unknown channel width for channel at 909000KHz? [ 418.462106][T12034] unknown channel width for channel at 909000KHz? [ 418.481546][T12034] unknown channel width for channel at 909000KHz? [ 418.485426][T11943] chnl_net:caif_netlink_parms(): no params data found [ 418.616550][ T5843] Bluetooth: hci6: command tx timeout [ 418.715088][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1625'. [ 419.051814][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1628'. [ 419.242744][T12063] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1628'. [ 419.244623][T12061] can: request_module (can-proto-4) failed. [ 419.313289][T11943] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.355234][T11943] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.362519][T11943] bridge_slave_0: entered allmulticast mode [ 419.383807][T11943] bridge_slave_0: entered promiscuous mode [ 419.495563][T11943] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.496021][T12068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1630'. [ 419.502711][T11943] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.551959][T11943] bridge_slave_1: entered allmulticast mode [ 419.586860][T11943] bridge_slave_1: entered promiscuous mode [ 419.616429][T12072] vlan2: entered promiscuous mode [ 419.636684][T12072] bond0: entered promiscuous mode [ 419.656296][T12072] bond_slave_0: entered promiscuous mode [ 419.674557][T12072] bond_slave_1: entered promiscuous mode [ 419.804535][T12079] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 419.830264][T11943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.860298][T11943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.919534][T12079] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 419.969240][T12081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 419.976958][T11943] team0: Port device team_slave_0 added [ 420.024296][T11943] team0: Port device team_slave_1 added [ 420.037593][T12079] tap0: tun_chr_ioctl cmd 2148553947 [ 420.164035][T12082] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9 [ 420.188154][T11943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.201861][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.241801][T11943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.258215][T11943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.276538][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.343126][T11943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.578183][T11943] hsr_slave_0: entered promiscuous mode [ 420.592938][T11943] hsr_slave_1: entered promiscuous mode [ 420.605101][T11943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.620889][T11943] Cannot create hsr debugfs directory [ 420.696727][ T5843] Bluetooth: hci6: command tx timeout [ 421.019769][T12131] xt_ecn: cannot match TCP bits for non-tcp packets [ 421.679433][T11943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.737067][T11943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.763626][T11943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.813952][T11943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.092831][T11943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.123000][T12190] __nla_validate_parse: 1 callbacks suppressed [ 422.123016][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1659'. [ 422.236254][T11943] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.259588][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.266848][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.297330][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.304510][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.576399][T12165] lo speed is unknown, defaulting to 1000 [ 422.778109][ T5840] Bluetooth: hci6: command tx timeout [ 422.972710][T11943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.047169][T11943] veth0_vlan: entered promiscuous mode [ 423.059920][T11943] veth1_vlan: entered promiscuous mode [ 423.084064][T12218] netlink: 'syz.0.1665': attribute type 58 has an invalid length. [ 423.102938][T11943] veth0_macvtap: entered promiscuous mode [ 423.108920][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1665'. [ 423.156221][T11943] veth1_macvtap: entered promiscuous mode [ 423.197559][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.215017][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.236349][T11943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.430460][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1669'. [ 423.437437][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.475025][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.484890][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.515076][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.546660][T11943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.606765][T11943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.637709][T11943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.665105][T11943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.673823][T11943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.879180][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1674'. [ 424.102812][ T6082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.144835][ T6082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.273097][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.294602][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.395588][T12269] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1679'. [ 424.450349][T12269] netlink: 'syz.6.1679': attribute type 4 has an invalid length. [ 424.622853][T12282] netlink: 'syz.5.1683': attribute type 9 has an invalid length. [ 424.644577][T12282] netlink: 212160 bytes leftover after parsing attributes in process `syz.5.1683'. [ 424.664497][T12283] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1684'. [ 424.686930][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'. [ 424.696792][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1684'. [ 424.732648][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1684'. [ 424.747570][T12285] bond0: entered promiscuous mode [ 424.752975][T12285] ip6gretap2: entered promiscuous mode [ 424.782641][T12285] bond0: entered allmulticast mode [ 424.790384][T12285] ip6gretap2: entered allmulticast mode [ 424.796370][T12285] veth5: entered allmulticast mode [ 424.808764][T12285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.896209][T12297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.959472][T12297] bridge0: entered promiscuous mode [ 424.992713][T12297] bridge0: entered allmulticast mode [ 425.028885][T12297] team0: Port device bridge0 added [ 425.415470][T12321] veth0: entered promiscuous mode [ 425.514862][T12322] veth0 (unregistering): left promiscuous mode [ 425.603869][T11131] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.995173][T11131] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.059952][T11131] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.128199][T11131] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.234266][T11131] bridge_slave_1: left allmulticast mode [ 426.240058][T11131] bridge_slave_1: left promiscuous mode [ 426.245911][T11131] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.254771][T11131] bridge_slave_0: left allmulticast mode [ 426.260898][T11131] bridge_slave_0: left promiscuous mode [ 426.266686][T11131] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.547713][T11131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.559209][T11131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.569230][T11131] bond0 (unregistering): Released all slaves [ 426.888046][T12333] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 427.303531][T11131] hsr_slave_0: left promiscuous mode [ 427.315900][T11131] hsr_slave_1: left promiscuous mode [ 427.321945][T11131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.365035][T11131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.386011][T11131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.393434][T11131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.450265][T12357] __nla_validate_parse: 4 callbacks suppressed [ 427.450281][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'. [ 427.501789][T11131] veth1_macvtap: left promiscuous mode [ 427.515677][T11131] veth0_macvtap: left promiscuous mode [ 427.541739][T11131] veth1_vlan: left promiscuous mode [ 427.563640][T11131] veth0_vlan: left promiscuous mode [ 427.760144][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 427.769200][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 427.777023][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 427.786498][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 427.794658][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 428.096266][T11131] team0 (unregistering): Port device team_slave_1 removed [ 428.133889][T11131] team0 (unregistering): Port device team_slave_0 removed [ 428.240801][T12372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1708'. [ 428.928309][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1715'. [ 428.954710][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 428.985499][T12394] netlink: 'syz.6.1715': attribute type 5 has an invalid length. [ 428.993271][T12394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1715'. [ 429.124573][T12394] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 429.195211][T12394] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 429.210897][T12394] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 429.232970][T12394] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 429.259555][T12394] geneve2: entered promiscuous mode [ 429.264804][T12394] geneve2: entered allmulticast mode [ 429.308867][T12418] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1717'. [ 429.328561][T12412] netlink: 'syz.5.1717': attribute type 29 has an invalid length. [ 429.378189][T12415] netlink: 'syz.5.1717': attribute type 29 has an invalid length. [ 429.398112][T12369] lo speed is unknown, defaulting to 1000 [ 429.513297][T12420] 8021q: adding VLAN 0 to HW filter on device bond3 [ 429.525855][T12420] bond3: entered promiscuous mode [ 429.535113][T12420] bond0: (slave bond3): Enslaving as an active interface with an up link [ 429.896715][ T5843] Bluetooth: hci6: command tx timeout [ 430.051460][T12441] netlink: 'syz.1.1728': attribute type 15 has an invalid length. [ 430.060016][T12441] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1728'. [ 430.145104][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1732'. [ 430.157392][T12369] chnl_net:caif_netlink_parms(): no params data found [ 430.331187][T12467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.338483][T12467] IPv6: NLM_F_CREATE should be set when creating new route [ 430.345763][T12467] IPv6: NLM_F_CREATE should be set when creating new route [ 430.503075][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.525919][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.560178][T12369] bridge_slave_0: entered allmulticast mode [ 430.570389][T12369] bridge_slave_0: entered promiscuous mode [ 430.593249][T12482] sctp: [Deprecated]: syz.6.1737 (pid 12482) Use of int in maxseg socket option. [ 430.593249][T12482] Use struct sctp_assoc_value instead [ 430.603292][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.632525][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.646014][T12369] bridge_slave_1: entered allmulticast mode [ 430.653870][T12369] bridge_slave_1: entered promiscuous mode [ 430.733650][T12369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.770235][T12369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.810939][T12490] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 430.920047][T12369] team0: Port device team_slave_0 added [ 430.947711][T12369] team0: Port device team_slave_1 added [ 430.980405][T12503] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1743'. [ 431.047711][T12369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.054704][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.138213][T12369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.171023][T12369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.192909][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.220813][T12369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.316946][T12369] hsr_slave_0: entered promiscuous mode [ 431.329676][T12369] hsr_slave_1: entered promiscuous mode [ 431.343146][T12369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.350926][T12369] Cannot create hsr debugfs directory [ 431.726215][T12538] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1754'. [ 431.989036][ T5843] Bluetooth: hci6: command tx timeout [ 432.276880][T12369] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.300193][T12369] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.342267][T12531] lo speed is unknown, defaulting to 1000 [ 432.342715][T12369] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.429651][T12369] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.486935][T12565] sctp: [Deprecated]: syz.5.1762 (pid 12565) Use of int in max_burst socket option. [ 432.486935][T12565] Use struct sctp_assoc_value instead [ 432.772639][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1763'. [ 432.944340][T12369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.012884][T12369] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.041104][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.048305][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.187735][T11126] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.194991][T11126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.321030][T12369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.673990][T12598] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1770'. [ 434.049770][T12621] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1777'. [ 434.053124][T12369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.075026][ T5843] Bluetooth: hci6: command tx timeout [ 434.102977][T12625] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1777'. [ 434.191187][T12369] veth0_vlan: entered promiscuous mode [ 434.231292][T12369] veth1_vlan: entered promiscuous mode [ 434.258404][T12631] bond1: (slave erspan0): Releasing active interface [ 434.290825][T12631] bond0: (slave bond_slave_0): Releasing backup interface [ 434.315452][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1783'. [ 434.332407][T12631] bond0: (slave bond_slave_1): Releasing backup interface [ 434.350052][T12631] team0: Port device team_slave_0 removed [ 434.367944][T12631] team0: Port device team_slave_1 removed [ 434.384482][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1784'. [ 434.386975][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1783'. [ 434.401472][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1784'. [ 434.404144][T12631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.427699][T12643] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1784'. [ 434.438488][T12631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.451965][T12631] team0: Port device geneve0 removed [ 434.459121][T12631] bond0: (slave wlan1): Releasing backup interface [ 434.469662][T12631] bond1: (slave veth3): Releasing active interface [ 434.482557][T12631] bond3: (slave batadv1): Releasing backup interface [ 434.495710][T12631] bond4: (slave gretap1): Releasing active interface [ 434.504315][T12631] bond6: (slave batadv2): Releasing active interface [ 434.603415][T12369] veth0_macvtap: entered promiscuous mode [ 434.752865][T12369] veth1_macvtap: entered promiscuous mode [ 434.804508][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.820776][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.833245][T12369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.932208][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.960990][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.978667][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.991116][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.016277][T12369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.054596][T12676] batadv_slave_0: entered promiscuous mode [ 435.061470][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'. [ 435.083311][T12369] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.132612][T12369] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.151582][T12369] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.164171][T12369] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.188336][T12671] batadv_slave_0: left promiscuous mode [ 435.350295][T11126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.373123][T11126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.410500][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.420776][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.609241][T12695] netlink: 'syz.0.1800': attribute type 10 has an invalid length. [ 435.617916][T12695] veth0_vlan: left promiscuous mode [ 435.623217][T12695] veth0_vlan: entered promiscuous mode [ 435.628911][T12695] veth0_vlan: entered allmulticast mode [ 435.638042][T12695] bridge0: port 2(veth0_vlan) entered blocking state [ 435.646853][T12695] bridge0: port 2(veth0_vlan) entered disabled state [ 435.658468][T12695] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 435.892326][T12707] netlink: 'syz.0.1802': attribute type 9 has an invalid length. [ 436.238750][ T6080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.343832][ T6080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.438989][ T6080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.504487][ T6080] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.638429][ T6080] bridge_slave_1: left allmulticast mode [ 436.644100][ T6080] bridge_slave_1: left promiscuous mode [ 436.650440][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.660654][ T6080] bridge_slave_0: left allmulticast mode [ 436.666619][ T6080] bridge_slave_0: left promiscuous mode [ 436.672297][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.958479][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.973029][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.983173][ T6080] bond0 (unregistering): Released all slaves [ 437.351342][ T6080] hsr_slave_0: left promiscuous mode [ 437.372151][ T6080] hsr_slave_1: left promiscuous mode [ 437.378107][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.386006][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.393725][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.401173][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.426268][ T6080] veth1_macvtap: left promiscuous mode [ 437.431775][ T6080] veth0_macvtap: left promiscuous mode [ 437.437747][ T6080] veth1_vlan: left promiscuous mode [ 437.443030][ T6080] veth0_vlan: left promiscuous mode [ 438.328541][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 438.339451][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 438.349605][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 438.359478][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 438.388946][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 438.480750][ T6080] team0 (unregistering): Port device team_slave_1 removed [ 438.528222][ T6080] team0 (unregistering): Port device team_slave_0 removed [ 438.962980][T12762] __nla_validate_parse: 7 callbacks suppressed [ 438.962998][T12762] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1812'. [ 439.002252][T12763] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551612) [ 439.018459][T12763] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 439.293920][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1816'. [ 439.373104][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1816'. [ 439.897386][T12756] lo speed is unknown, defaulting to 1000 [ 440.068747][T12802] batadv_slave_0: entered promiscuous mode [ 440.082288][T12802] netlink: 'syz.6.1823': attribute type 3 has an invalid length. [ 440.455214][ T5843] Bluetooth: hci6: command tx timeout [ 440.576910][T12826] netlink: 'syz.6.1829': attribute type 317 has an invalid length. [ 440.620971][T12756] chnl_net:caif_netlink_parms(): no params data found [ 440.666309][T12829] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.719912][T12785] lo speed is unknown, defaulting to 1000 [ 441.116183][T12756] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.155752][T12756] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.192020][T12756] bridge_slave_0: entered allmulticast mode [ 441.217327][T12756] bridge_slave_0: entered promiscuous mode [ 441.258824][T12756] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.306989][T12756] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.314208][T12756] bridge_slave_1: entered allmulticast mode [ 441.363177][T12756] bridge_slave_1: entered promiscuous mode [ 441.592665][T12829] lo speed is unknown, defaulting to 1000 [ 441.603297][T12862] pimreg: left allmulticast mode [ 441.976365][T12756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.076963][T12756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.213532][T12756] team0: Port device team_slave_0 added [ 442.274529][T12756] team0: Port device team_slave_1 added [ 442.445356][T12756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.454815][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.515565][T12756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.535299][ T5843] Bluetooth: hci6: command tx timeout [ 442.541790][T12756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.552360][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 442.561596][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.603942][T12875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1835'. [ 442.608876][T12756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.693546][ T53] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 442.709079][ T53] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 442.717287][ T5930] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 442.733617][T12856] lo speed is unknown, defaulting to 1000 [ 442.875568][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1837'. [ 442.885169][ T975] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 442.959771][T12756] hsr_slave_0: entered promiscuous mode [ 442.977307][T12756] hsr_slave_1: entered promiscuous mode [ 442.983469][T12756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.008316][T12756] Cannot create hsr debugfs directory [ 443.306016][ T975] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 443.385306][T12895] nbd: nbd0 already in use [ 443.417681][T12894] dvmrp0: entered allmulticast mode [ 443.435082][T12895] dvmrp0: left allmulticast mode [ 443.620596][T12847] lo speed is unknown, defaulting to 1000 [ 444.155741][T12907] syzkaller1: entered promiscuous mode [ 444.161504][T12907] syzkaller1: entered allmulticast mode [ 444.486970][T12921] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 444.505952][T12921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1849'. [ 444.615736][ T5843] Bluetooth: hci6: command tx timeout [ 444.625190][T12924] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1850'. [ 444.711637][T12924] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1850'. [ 444.763571][T12756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 444.774317][T12756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 444.814952][T12756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.827681][T12939] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1853'. [ 444.868806][T12756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 445.218868][T12953] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 445.225384][T12756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.309497][T12756] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.360320][T11131] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.367513][T11131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.398148][T12961] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 445.411032][T12961] netlink: 15155 bytes leftover after parsing attributes in process `syz.1.1861'. [ 445.427310][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.434483][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.434888][T12961] netlink: 'syz.1.1861': attribute type 3 has an invalid length. [ 445.814198][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 445.826844][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.834684][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.248194][T12990] lo speed is unknown, defaulting to 1000 [ 446.705881][ T5843] Bluetooth: hci6: command tx timeout [ 446.867903][T13019] netlink: 'syz.5.1873': attribute type 4 has an invalid length. [ 446.917529][T13020] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1872'. [ 446.922722][T12756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.935293][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 447.038630][T13023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1874'. [ 447.082051][T12756] veth0_vlan: entered promiscuous mode [ 447.123567][T12756] veth1_vlan: entered promiscuous mode [ 447.283856][T12756] veth0_macvtap: entered promiscuous mode [ 447.350243][T12756] veth1_macvtap: entered promiscuous mode [ 447.368962][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1878'. [ 447.414693][T13033] netlink: 'syz.0.1877': attribute type 39 has an invalid length. [ 447.487762][T13032] netlink: 'syz.0.1877': attribute type 39 has an invalid length. [ 447.649445][T12756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.681112][T12756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.693698][T12756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.846844][T12756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.885045][T12756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.897643][T12756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.908706][T12756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.920276][T12756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.933430][T12756] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.943751][T12756] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.952665][T12756] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.962900][T12756] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.991877][T13051] batadv1: entered promiscuous mode [ 448.016599][T13055] pim6reg1: entered promiscuous mode [ 448.022161][T13055] pim6reg1: entered allmulticast mode [ 448.189516][T13062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1885'. [ 448.313644][T11101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.346256][T11101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.423698][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.451355][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.911515][T13098] x_tables: duplicate underflow at hook 3 [ 448.956768][ T3531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.092419][ T3531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.214251][ T3531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.510388][ T3531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.641455][ T3531] bridge_slave_1: left allmulticast mode [ 449.647411][ T3531] bridge_slave_1: left promiscuous mode [ 449.653214][ T3531] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.662673][ T3531] bridge_slave_0: left allmulticast mode [ 449.668752][ T3531] bridge_slave_0: left promiscuous mode [ 449.674432][ T3531] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.958130][ T3531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.970242][ T3531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.981846][ T3531] bond0 (unregistering): Released all slaves [ 450.391481][ T3531] hsr_slave_0: left promiscuous mode [ 450.397756][ T3531] hsr_slave_1: left promiscuous mode [ 450.403704][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.418357][ T3531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.427739][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.435209][ T3531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.466528][ T3531] veth1_macvtap: left promiscuous mode [ 450.472090][ T3531] veth0_macvtap: left promiscuous mode [ 450.486017][ T3531] veth1_vlan: left promiscuous mode [ 450.491825][ T3531] veth0_vlan: left promiscuous mode [ 451.170909][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 451.179863][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 451.188399][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 451.205589][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 451.214355][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.437222][ T3531] team0 (unregistering): Port device team_slave_1 removed [ 451.477007][ T3531] team0 (unregistering): Port device team_slave_0 removed [ 452.081624][T13135] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.090480][T13135] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.099241][T13135] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.107691][T13135] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.126175][T13136] __nla_validate_parse: 2 callbacks suppressed [ 452.126190][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 452.285938][T13140] netlink: 4488 bytes leftover after parsing attributes in process `syz.6.1910'. [ 452.315315][T13142] xt_hashlimit: max too large, truncated to 1048576 [ 452.339884][T13142] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 452.421671][T13146] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1912'. [ 452.444598][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1911'. [ 452.538093][T13131] lo speed is unknown, defaulting to 1000 [ 452.827557][T13158] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1915'. [ 452.869833][T13158] batadv_slave_0: left promiscuous mode [ 452.908436][T13158] hsr0: left promiscuous mode [ 452.955346][T13158] hsr0: left allmulticast mode [ 452.960163][T13158] hsr_slave_1: left allmulticast mode [ 453.006960][T13158] macvtap0: left promiscuous mode [ 453.044896][T13158] bond2: left promiscuous mode [ 453.084763][T13158] bridge0: left promiscuous mode [ 453.106132][T13158] bridge0: left allmulticast mode [ 453.126310][T13158] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 453.142861][T13158] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 453.152318][T13158] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 453.169509][T13158] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 453.182330][T13158] geneve2: left promiscuous mode [ 453.193265][T13158] geneve2: left allmulticast mode [ 453.213094][T13125] lo speed is unknown, defaulting to 1000 [ 453.255861][ T5843] Bluetooth: hci6: command tx timeout [ 453.405813][T13162] macsec0: entered promiscuous mode [ 453.411311][T13162] veth0_to_bridge: entered promiscuous mode [ 453.422450][T13162] macsec0: entered allmulticast mode [ 453.435031][T13162] veth0_to_bridge: entered allmulticast mode [ 453.491999][T13162] veth0_to_bridge: left allmulticast mode [ 453.501515][T13162] veth0_to_bridge: left promiscuous mode [ 453.527252][T13165] ipt_ECN: cannot use operation on non-tcp rule [ 453.653400][T13147] lo speed is unknown, defaulting to 1000 [ 453.770969][T13175] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1919'. [ 453.922030][T13177] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1920'. [ 453.941858][T13179] netlink: 'syz.6.1921': attribute type 1 has an invalid length. [ 454.018028][T13182] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1921'. [ 454.041341][T13179] bond4: entered promiscuous mode [ 454.047817][T13179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.076002][T13181] ip6gre5: entered allmulticast mode [ 454.100031][T13182] batadv1: entered promiscuous mode [ 454.116293][T13182] batadv1: entered allmulticast mode [ 454.127157][T13182] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 454.147197][T13182] bond4: (slave batadv1): making interface the new active one [ 454.158998][T13182] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 454.174677][T13187] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1921'. [ 454.547964][T13192] vti0: entered promiscuous mode [ 454.624825][T13125] chnl_net:caif_netlink_parms(): no params data found [ 454.921504][T13125] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.934244][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.941869][T13125] bridge_slave_0: entered allmulticast mode [ 454.949707][T13125] bridge_slave_0: entered promiscuous mode [ 455.006938][T13216] vlan2: entered promiscuous mode [ 455.014757][T13216] bond0: entered promiscuous mode [ 455.028311][T13216] bond0: (slave vlan2): Opening slave failed [ 455.135122][T13125] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.172312][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.195473][T13125] bridge_slave_1: entered allmulticast mode [ 455.223128][T13125] bridge_slave_1: entered promiscuous mode [ 455.255134][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 455.335418][ T5843] Bluetooth: hci6: command tx timeout [ 455.487704][T13125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.511631][T13125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.658535][T13258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1940'. [ 455.726079][T13125] team0: Port device team_slave_0 added [ 455.748444][T13125] team0: Port device team_slave_1 added [ 455.977863][T13125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.985939][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.047515][T13125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.060888][T13125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.068326][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.096091][T13125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.643296][T13269] lo speed is unknown, defaulting to 1000 [ 456.671325][T13125] hsr_slave_0: entered promiscuous mode [ 456.699747][T13125] hsr_slave_1: entered promiscuous mode [ 456.711274][T13125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.724782][T13125] Cannot create hsr debugfs directory [ 457.253068][T13310] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.285556][T13310] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.298207][T13310] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.346335][T13310] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.358724][T13310] geneve4: entered promiscuous mode [ 457.374319][T13310] geneve4: entered allmulticast mode [ 457.400190][T13310] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.415611][ T5843] Bluetooth: hci6: command tx timeout [ 457.460567][T13310] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.470918][T13310] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.479413][T13310] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.594197][T13312] __nla_validate_parse: 5 callbacks suppressed [ 457.594214][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1952'. [ 457.873268][T13336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1959'. [ 457.906860][T13339] veth1_to_team: entered promiscuous mode [ 457.925349][T13339] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 457.976387][T13339] netlink: 'syz.1.1960': attribute type 8 has an invalid length. [ 457.988011][T13339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.278136][T13125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.304391][T13125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.343976][T13356] xt_CT: No such helper "pptp" [ 458.374550][T13125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.461297][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1966'. [ 458.469300][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1965'. [ 458.479359][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1965'. [ 458.492032][T13366] netlink: 'syz.5.1965': attribute type 14 has an invalid length. [ 458.504456][T13125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.677259][T13375] No such timeout policy "syz1" [ 458.698534][T13377] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 458.846777][T13125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.881548][T13390] netlink: 'syz.5.1974': attribute type 10 has an invalid length. [ 458.918258][T13125] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.968429][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.975622][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.997824][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.005099][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.042999][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1975'. [ 459.495698][ T5843] Bluetooth: hci6: command tx timeout [ 459.503026][T13125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.558516][T13372] lo speed is unknown, defaulting to 1000 [ 459.692672][T13125] veth0_vlan: entered promiscuous mode [ 459.741282][T13415] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.1980'. [ 459.781496][T13125] veth1_vlan: entered promiscuous mode [ 459.916413][T13125] veth0_macvtap: entered promiscuous mode [ 459.950048][T13125] veth1_macvtap: entered promiscuous mode [ 460.014222][T13422] netlink: 308 bytes leftover after parsing attributes in process `syz.5.1983'. [ 460.057435][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.095494][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.124223][T13125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.151816][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.179085][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.213293][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.249661][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.273154][T13125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.324549][T13125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.344817][T13125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.364673][T13125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.395205][T13125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.433727][T13439] netlink: 'syz.1.1989': attribute type 3 has an invalid length. [ 460.462719][T13439] netlink: 'syz.1.1989': attribute type 1 has an invalid length. [ 460.480782][T13439] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1989'. [ 460.519873][T13441] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1990'. [ 460.671919][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.707542][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.818034][ T6082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.838047][ T6082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.016067][ T31] INFO: task syz.2.888:9198 blocked for more than 143 seconds. [ 461.033987][ T31] Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 [ 461.052455][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.079290][ T31] task:syz.2.888 state:D stack:26848 pid:9198 tgid:9197 ppid:5828 task_flags:0x400140 flags:0x00004004 [ 461.098463][ T31] Call Trace: [ 461.103836][ T31] [ 461.114572][ T31] __schedule+0x16e2/0x4cd0 [ 461.122062][ T31] ? __lock_acquire+0xaac/0xd20 [ 461.135206][ T31] ? schedule+0x165/0x360 [ 461.142315][ T31] ? __pfx___schedule+0x10/0x10 [ 461.154275][ T31] ? schedule+0x91/0x360 [ 461.159994][ T31] schedule+0x165/0x360 [ 461.164189][ T31] schedule_preempt_disabled+0x13/0x30 [ 461.179232][ T31] __mutex_lock+0x724/0xe80 [ 461.183885][ T31] ? __mutex_lock+0x51b/0xe80 [ 461.194018][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 461.202726][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 461.215083][ T31] ? __nlmsg_put+0xef/0x1b0 [ 461.219613][ T31] ? genlmsg_put+0x137/0x2e0 [ 461.224312][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 461.230406][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 461.238754][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 461.244163][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 461.250435][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 461.261612][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 461.271509][ T31] genl_rcv_msg+0x60e/0x790 [ 461.276222][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.281279][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 461.288815][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 461.293879][ T31] ? __copy_skb_header+0xa7/0x550 [ 461.299065][ T31] netlink_rcv_skb+0x219/0x490 [ 461.303869][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.310630][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.316006][ T31] ? down_read+0x1ad/0x2e0 [ 461.320518][ T31] genl_rcv+0x28/0x40 [ 461.324532][ T31] netlink_unicast+0x758/0x8d0 [ 461.330183][ T31] netlink_sendmsg+0x805/0xb30 [ 461.336398][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.342670][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 461.347965][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.353285][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.358605][ T31] __sock_sendmsg+0x219/0x270 [ 461.363290][ T31] ____sys_sendmsg+0x505/0x830 [ 461.368311][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.373651][ T31] ? import_iovec+0x74/0xa0 [ 461.378259][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 461.382980][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.388417][ T31] ? __fget_files+0x2a/0x420 [ 461.393300][ T31] ? __fget_files+0x3a0/0x420 [ 461.398168][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 461.403574][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.410599][ T31] ? do_syscall_64+0xba/0x210 [ 461.415415][ T31] do_syscall_64+0xf6/0x210 [ 461.419936][ T31] ? clear_bhb_loop+0x45/0xa0 [ 461.424615][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.430650][ T31] RIP: 0033:0x7fbbd818e969 [ 461.435124][ T31] RSP: 002b:00007fbbd906d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.443558][ T31] RAX: ffffffffffffffda RBX: 00007fbbd83b5fa0 RCX: 00007fbbd818e969 [ 461.451729][ T31] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004 [ 461.460697][ T31] RBP: 00007fbbd8210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 461.468939][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.480620][ T31] R13: 0000000000000000 R14: 00007fbbd83b5fa0 R15: 00007fffd49674c8 [ 461.489016][ T31] [ 461.492114][ T31] [ 461.492114][ T31] Showing all locks held in the system: [ 461.501800][ T31] 3 locks held by kworker/0:1/10: [ 461.507121][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 461.519607][ T31] #1: ffffc900000f7c60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 461.537472][ T31] #2: ffff88806b5c4240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 461.564990][ T31] 1 lock held by khungtaskd/31: [ 461.569906][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 461.589170][ T31] 3 locks held by kworker/1:1/52: [ 461.594242][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 461.606796][ T31] #1: ffffc90000bd7c60 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 461.623568][ T31] #2: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 461.633690][ T31] 2 locks held by kworker/u8:3/53: [ 461.638938][ T31] 2 locks held by getty/5591: [ 461.643680][ T31] #0: ffff8880305240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 461.653605][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 461.664057][ T31] 3 locks held by kworker/u8:17/6082: [ 461.669560][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 461.681350][ T31] #1: ffffc9000b69fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 461.692557][ T31] #2: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 461.701646][ T31] 2 locks held by syz.4.300/7024: [ 461.706765][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.715113][ T31] #1: ffffffff8e211528 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 461.726385][ T31] 2 locks held by syz.2.888/9198: [ 461.731486][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.740122][ T31] #1: ffffffff8e211528 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 461.750260][ T31] 2 locks held by kworker/u8:18/11101: [ 461.755781][ T31] 3 locks held by kworker/u8:41/11126: [ 461.761244][ T31] #0: ffff88802f7ce948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 461.772924][ T31] #1: ffffc900047bfc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 461.785830][ T31] #2: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 461.795434][ T31] 2 locks held by syz-executor/13125: [ 461.800839][ T31] #0: ffff888051c78d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 461.810830][ T31] #1: ffff888051c78078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 461.823027][ T31] 5 locks held by syz.6.1985/13429: [ 461.828384][ T31] #0: ffffffff8f2e8490 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 461.837858][ T31] #1: ffffffff8f05c910 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 461.847687][ T31] #2: ffffffff8f05cad0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 461.857670][ T31] #3: ffff88805c9c0f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 461.870132][ T31] #4: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 461.879692][ T31] 2 locks held by syz.1.1992/13451: [ 461.884993][ T31] #0: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 461.894132][ T31] #1: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 461.906081][ T31] 3 locks held by syz.0.1995/13457: [ 461.911369][ T31] #0: ffff888051a77a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 461.922428][ T31] #1: ffff8880476cc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x798/0xce0 [ 461.932257][ T31] #2: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 461.943294][ T31] 3 locks held by syz.0.1995/13467: [ 461.948524][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.956865][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 461.965925][ T31] #2: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: wg_set_device+0xf5/0x1f20 [ 461.975115][ T31] 1 lock held by syz.5.1996/13460: [ 461.980235][ T31] #0: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1d90 [ 461.989706][ T31] 1 lock held by syz.5.1996/13464: [ 461.994822][ T31] #0: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1d90 [ 462.004321][ T31] 1 lock held by syz.5.1996/13466: [ 462.009542][ T31] #0: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xeee/0x2d00 [ 462.019134][ T31] 1 lock held by syz.5.1996/13468: [ 462.025303][ T31] #0: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xeee/0x2d00 [ 462.034881][ T31] 1 lock held by syz.5.1996/13469: [ 462.040042][ T31] #0: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0xcb8/0x1b60 [ 462.049695][ T31] 1 lock held by syz.5.1996/13471: [ 462.054811][ T31] #0: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1d90 [ 462.064320][ T31] 1 lock held by syz.5.1996/13472: [ 462.069558][ T31] #0: ffffffff8f2f4fc8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1d90 [ 462.079024][ T31] [ 462.083320][ T31] ============================================= [ 462.083320][ T31] [ 462.096705][ T31] NMI backtrace for cpu 0 [ 462.096739][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 462.096759][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.096812][ T31] Call Trace: [ 462.096820][ T31] [ 462.096827][ T31] dump_stack_lvl+0x189/0x250 [ 462.096854][ T31] ? __wake_up_klogd+0xd9/0x110 [ 462.096876][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.096899][ T31] ? __pfx__printk+0x10/0x10 [ 462.096927][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 462.096954][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 462.096974][ T31] ? _printk+0xcf/0x120 [ 462.097013][ T31] ? __pfx__printk+0x10/0x10 [ 462.097034][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 462.097054][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 462.097079][ T31] watchdog+0xfee/0x1030 [ 462.097108][ T31] ? watchdog+0x1de/0x1030 [ 462.097136][ T31] kthread+0x70e/0x8a0 [ 462.097161][ T31] ? __pfx_watchdog+0x10/0x10 [ 462.097181][ T31] ? __pfx_kthread+0x10/0x10 [ 462.097202][ T31] ? __pfx_kthread+0x10/0x10 [ 462.097221][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.097246][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.097273][ T31] ? __pfx_kthread+0x10/0x10 [ 462.097292][ T31] ret_from_fork+0x4b/0x80 [ 462.097309][ T31] ? __pfx_kthread+0x10/0x10 [ 462.097329][ T31] ret_from_fork_asm+0x1a/0x30 [ 462.097360][ T31] [ 462.097366][ T31] Sending NMI from CPU 0 to CPUs 1: [ 462.247739][ C1] NMI backtrace for cpu 1 [ 462.247762][ C1] CPU: 1 UID: 0 PID: 11101 Comm: kworker/u8:18 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 462.247783][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.247795][ C1] Workqueue: bat_events batadv_nc_worker [ 462.247824][ C1] RIP: 0010:lock_release+0x63/0x3e0 [ 462.247850][ C1] Code: 00 89 c0 48 0f a3 05 bc fe e0 0d 73 16 e8 c5 c8 08 00 84 c0 75 0d f6 05 df f3 ca 0d 01 0f 84 ad 02 00 00 83 3d 7d 2d e1 0d 00 <0f> 84 44 02 00 00 65 8b 05 60 0d d8 10 85 c0 0f 85 35 02 00 00 65 [ 462.247865][ C1] RSP: 0018:ffffc9000459fa58 EFLAGS: 00000202 [ 462.247879][ C1] RAX: 0000000000000001 RBX: ffff888032a88f00 RCX: 3bfe56b8f5a56b00 [ 462.247891][ C1] RDX: 0000000000000000 RSI: ffffffff8bc1d480 RDI: ffffffff8bc1d440 [ 462.247903][ C1] RBP: fffffffffffffe38 R08: 0000000000000000 R09: 0000000000000000 [ 462.247913][ C1] R10: 0000000000000000 R11: ffffffff8b251f42 R12: dffffc0000000000 [ 462.247925][ C1] R13: ffffffff8b251f42 R14: ffffffff8df3b860 R15: 0000000000000359 [ 462.247937][ C1] FS: 0000000000000000(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 462.247950][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.247961][ C1] CR2: 00007f5e6655de9c CR3: 0000000011090000 CR4: 00000000003526f0 [ 462.247976][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 462.247985][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 462.247996][ C1] Call Trace: [ 462.248002][ C1] [ 462.248019][ C1] ? batadv_nc_worker+0xd2/0x610 [ 462.248043][ C1] batadv_nc_worker+0x28c/0x610 [ 462.248067][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 462.248095][ C1] process_scheduled_works+0xadb/0x17a0 [ 462.248135][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 462.248170][ C1] worker_thread+0x8a0/0xda0 [ 462.248199][ C1] kthread+0x70e/0x8a0 [ 462.248220][ C1] ? __pfx_worker_thread+0x10/0x10 [ 462.248234][ C1] ? __pfx_kthread+0x10/0x10 [ 462.248254][ C1] ? __pfx_kthread+0x10/0x10 [ 462.248272][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.248296][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.248334][ C1] ? __pfx_kthread+0x10/0x10 [ 462.248351][ C1] ret_from_fork+0x4b/0x80 [ 462.248367][ C1] ? __pfx_kthread+0x10/0x10 [ 462.248396][ C1] ret_from_fork_asm+0x1a/0x30 [ 462.248418][ C1] [ 462.489569][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 462.496464][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 462.508289][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.518380][ T31] Call Trace: [ 462.521668][ T31] [ 462.524601][ T31] dump_stack_lvl+0x99/0x250 [ 462.529200][ T31] ? __asan_memcpy+0x40/0x70 [ 462.533794][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.539003][ T31] ? __pfx__printk+0x10/0x10 [ 462.543608][ T31] panic+0x2db/0x790 [ 462.547526][ T31] ? __pfx_panic+0x10/0x10 [ 462.551954][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 462.557336][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 462.562714][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 462.568886][ T31] watchdog+0x102d/0x1030 [ 462.573222][ T31] ? watchdog+0x1de/0x1030 [ 462.577656][ T31] kthread+0x70e/0x8a0 [ 462.581735][ T31] ? __pfx_watchdog+0x10/0x10 [ 462.586419][ T31] ? __pfx_kthread+0x10/0x10 [ 462.591017][ T31] ? __pfx_kthread+0x10/0x10 [ 462.595622][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.600834][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.606132][ T31] ? __pfx_kthread+0x10/0x10 [ 462.610738][ T31] ret_from_fork+0x4b/0x80 [ 462.615158][ T31] ? __pfx_kthread+0x10/0x10 [ 462.619749][ T31] ret_from_fork_asm+0x1a/0x30 [ 462.624518][ T31] [ 462.627835][ T31] Kernel Offset: disabled [ 462.632159][ T31] Rebooting in 86400 seconds..