last executing test programs: 43.317042313s ago: executing program 2 (id=851): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030102000000fefffffffbff7fff10080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000209500000000000800"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000500)="5ec1556b82ebd06224c2c24221853ce20af2e99faacac1a63f8d6ddf7c2f0b99e34b8321775218f4ec3387c1d7c304679531229cdb9a78fa579e8ce0a58c04d5cda42cfb9b00db14e5f79e550d45f01a004c220eb63e858c42563c8c44223099c1c3ea7b732a2bb68cdf0b214c4eaaa043cb71744cba639ec37c3fdcc7a3c04f5a1af7c684a731f387b96b1b91f570ccb62ae06c27a4a9f9b19dbcb0b8e223e5825cb221a607220ad8130a07442d69b99682406f7f6e3f9801e65c812e623a183390b82ef22bbb7a", 0xc8}, {&(0x7f00000002c0)="45ea84ea585441f1dfeef1cabff7902da9b2a9f85c9bda6e3da3678a00527ed5341e594553728e32400148bb0822a2598dfc8318092aa7c5cb77ae0ad3fff5a3e088379dd85f55357b95e1de53e7800f08bd42e3e5d333e5b41875a976a4dc84b70ec0e10c5fd860f567936e7f5756517c976dba54e9761e7da904ff", 0x7c}, {&(0x7f00000003c0)="42a7670a2f38165abb5ee6d351c01c7e2f5e59e0d0f192d6e0e9de739ef90908d553d80dd547c5214d101d4ee6c97ce69f220c1310e3efe3b52e500e9c0517d8192437a1b656b7b2f1363f869ea2b0d7e8d2c26064d0a9eec376dc5ca75116079030080cf0b4", 0x66}, {&(0x7f0000000600)="fdb0083fce462bde43e8d00398072bc9621a1aa38b58c3cdb0769f29196ae746382652262e29b9d64b1da659f86a20ba4ed18c699a69161e08b6ff3b38a5668768f4170d2300cba37de76bf3e85dee66d676874b793805d45c6a5baa043f2852613bd6036b36c908bd50882fdd2837115b647c0a1d83d1430ebbd966df554f32b084d7295386b2e7185c61b2fe6629350f984b54d0d651a169a78779476811203945b42b25d0e6a36d2422d28ef96cc53d49b6357583dec051e496c2dbe47b758ab39f1ade87", 0xc6}, {&(0x7f0000000700)="82e4a7b9924843c5633642d3fd03a877e5107ba615128090c9c908f4a3a4b8bfb13c7784fbe4ad8d361b9b839a4f2cf517b27b641ccbfc79b461e9e9a85293d45238a5b277de033a28dcbfcbae514d2a92", 0x51}, {&(0x7f0000000780)="6478a0161c7eb8670898a0955337ee833461aecadf5745ade894d567418e730f234a8ce2f27b851a3825c6d6ebdae4bd9457872e701621e6360bd3e7ab51258a6a9e5de545b5", 0x46}, {&(0x7f0000000800)="958702bea573dd94f856448df650179db20ff2413be0831f1a17004d2e3c01aeb07af6b8b43601b9c38cd5170fd77cd25ce70672a2b5248c996a36585353767230de9eedc091a4ee2ddc98e750872a1a74c72ca5c1fa31e42fe85a1f280a1cf6", 0x60}, {&(0x7f0000000fc0)="93c77b960ec9308eff5d16beba0b2ff61263f00692f23eaa58d1b59a2a4f8040e59f65651d348f2995c9ac2d5ae64c20c9e0748ddeb743946088dbb702caad86d5e7a30d3bfcb5daed525bf3f27da56be228806bd3c5ef21890ea53cb24e74593ea276602a19a7f024b983d03f22bcd7360a8ea6362697ed517dfaf685d0", 0x7e}], 0x8}, 0x2004c004) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0xfffe}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x3}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x20008000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"/332], 0x14c}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 42.518544955s ago: executing program 2 (id=868): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x513, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22301, 0x11000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 42.315928829s ago: executing program 2 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x81000) recvmmsg$unix(r4, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000180)=""/144, 0x90}], 0x100001d5}}], 0x1, 0x2001, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, 0x0}, 0x0) close(r4) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x60, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}, {0x8}}}]}}]}, 0x60}}, 0x24040840) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x6, 0xb}, {0x7, 0x4}, {0x5, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x10, 0xfe}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0xffd1}]}, 0x44}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001580)={r10, 0xe76}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00O\b\x00\x00\x00\x00'], 0x20}}, 0x0) 37.987887676s ago: executing program 2 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x81000) recvmmsg$unix(r4, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000180)=""/144, 0x90}], 0x100001d5}}], 0x1, 0x2001, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, 0x0}, 0x0) close(r4) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x60, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}, {0x8}}}]}}]}, 0x60}}, 0x24040840) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x6, 0xb}, {0x7, 0x4}, {0x5, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x10, 0xfe}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0xffd1}]}, 0x44}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001580)={r10, 0xe76}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00O\b\x00\x00\x00\x00'], 0x20}}, 0x0) 29.98096919s ago: executing program 2 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x81000) recvmmsg$unix(r4, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000180)=""/144, 0x90}], 0x100001d5}}], 0x1, 0x2001, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, 0x0}, 0x0) close(r4) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x60, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}, {0x8}}}]}}]}, 0x60}}, 0x24040840) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x6, 0xb}, {0x7, 0x4}, {0x5, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x10, 0xfe}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0xffd1}]}, 0x44}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001580)={r10, 0xe76}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00O\b\x00\x00\x00\x00'], 0x20}}, 0x0) 21.309766531s ago: executing program 2 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x81000) recvmmsg$unix(r4, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000180)=""/144, 0x90}], 0x100001d5}}], 0x1, 0x2001, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, 0x0}, 0x0) close(r4) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x60, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}, {0x8}}}]}}]}, 0x60}}, 0x24040840) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x6, 0xb}, {0x7, 0x4}, {0x5, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x10, 0xfe}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0xffd1}]}, 0x44}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001580)={r10, 0xe76}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00O\b\x00\x00\x00\x00'], 0x20}}, 0x0) 18.320595526s ago: executing program 1 (id=1150): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x800001, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0xd, 0x6, 0x8, 0x42, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x8, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x8000, 0x80e}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xda2}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_PHYS_PORT_ID={0x11, 0x22, "31f6ad794db3eb144ec805f3cc"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x80047441, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x20, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7947, 0x2}}]}, 0x20}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYRESDEC=r6], 0x24}}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffa, '\x00', r6, r4, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r5}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r10}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) write$cgroup_int(r12, 0x0, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x678d, 0x0, 0xffffffffffffffff, 0x3, '\x00', r6, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x12, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x4e}, @cb_func={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000580)=""/185, 0x41000, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000640)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x9, 0x9, 0xbd4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r8, r9, r12, r13], &(0x7f00000008c0)=[{0x0, 0x5, 0xb, 0x2}, {0x4, 0x1, 0x0, 0x2}], 0x10, 0x3, @void, @value}, 0x94) 18.188760056s ago: executing program 0 (id=1151): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000072012b000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xec, 0x1000, &(0x7f0000000180)="2d1d0104d0a1cb8ac099024f8fa6ac2dc52e062c9fc631bf3b8db001c5d3ccabd0ea15beef092256fa770186e118260d8c485b0e5e1e7612c15616e6c6b8a1e83a3a65698cb7e1dded103895957e72f05ace9dd7a3988217ce0b9e41bf14c298a466faeeabc7b74dd998f7b3d0a052ccf7d74565fb2d865d5924f9b463fe22020a165c86309b6d3ea8ae2b0cca939f8b4963df7a391aaa15582382381f89bcb4e579793d2f8daac4a7797497d6296ee26fc9af591a2472e8dc89a5eb142c5377a6e63265646b6f3ea185b7c85a8e39bb1c0fc8023a39b34810a4449355520c87d5996025da1f9d7416ef459e", &(0x7f0000000a40)=""/4096, 0x0, 0x0, 0x1000, 0x12, &(0x7f0000001a40)="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", &(0x7f0000000000)="02644e2f5a8f7970a81158397498ca0f6241"}, 0x50) 18.181175803s ago: executing program 0 (id=1152): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)={@val={0x0, 0x80f3}, @void, @eth={@link_local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x2000, 0x1, 0x6, 0x0, @loopback, @broadcast}}}}}}, 0x2a) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff80) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x0, @remote, 0x4e23, 0x3, 'nq\x00', 0x1, 0x8, 0x71}, {@loopback, 0x8, 0x2000, 0x8, 0x1d, 0xfd}}, 0x44) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061107f000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 18.136720895s ago: executing program 1 (id=1153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x26, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername$inet6(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x3}}}]}]}]}}]}, 0x64}}, 0x20040054) socket$unix(0x1, 0x2, 0x0) 17.916749353s ago: executing program 1 (id=1155): r0 = epoll_create(0x200008) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newtaction={0x64, 0x30, 0x216822a75a8bdd29, 0x70bd28, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x30000000}) 17.829816042s ago: executing program 0 (id=1158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036677265000020000280060010004e20000014000700fe8000000000000000000000000000aa08020a00", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6d) bind$unix(r6, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r9, 0x6}, 0x8) r10 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e617400000000000000000000000000000000000000000000000000000000000000ffffffff00"/520]}, 0x280) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000980)="e1", 0x1}], 0x2}, 0x20044054) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x40) 17.733420065s ago: executing program 1 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140f5ffff040800084000000001"], 0x98}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x40, 0x40, 0x75, @dev={0xfe, 0x80, '\x00', 0x22}, @loopback, 0x10, 0x20, 0x6, 0x8}}) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x608, 0x2c, 0x104, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0xd769dc62e3e8d2ea}, {0xb, 0x8}, {0x0, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x5bc, 0x2, [@TCA_FW_ACT={0x150, 0x4, [@m_nat={0x14c, 0x16, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x1, 0x1, 0x800}, @private=0xa010102, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x2, 0xffffffffffffffff, 0x6, 0x400}, @multicast2, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x100, 0x6, 0xe42, 0x9}, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x3, 0x2, 0x7fff, 0x7}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x0, 0x20000000, 0xb, 0x8001}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x1, 0x14, 0x4cf}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x101, 0x0, 0x0, 0x5}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}]}, {0xc, 0x6, "86ae5013c4f0588f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'caif0\x00'}, @TCA_FW_ACT={0x438, 0x4, [@m_ct={0x48, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x1f, 0x6, "d686177620ad20af82ae9b6442993f3472989174ef55742b121845"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xa4, 0xb, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'ip6gre0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xf4, 0x0, 0x9, 0x8}}, @TCA_DEF_DATA={0x6, 0x3, '!\x00'}]}, {0x4a, 0x6, "50b40e9908a0645fe7b70ec7fef83fdc8dd1675d60e7d50b7aaaeaa7ccbd8aaf5a6c4ca1b08aefd7abe97fa5a98ed6f4b5e42ddd9c7d1ac767e2eeadbaf15bbada56edbd7521"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xf0, 0x20, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x2, 0xffffffffffffffff, 0x1d76, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x7b6, 0x7, 0x9}}]}, {0x88, 0x6, "0fa7e256ff895fdd660b4296efd98502226c2993f39ddfb1ada0dacb6f9cfbbbf144cc26dc4468e3e4b844da02f729ca49518d554eaa84e05c6c28d2841084674452cd46e86e66eace13e046a4e385e34fc0b96b86a786831ba1e1f05cb9cbbdaf97244d359af0242639a6166a4966b818e1a897ab716b83891d65ca543b801cec5eb53d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x80, 0x1b, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4a, 0x6, "b656e982677ce021efb5df56686718a7e95506741fb82a64762463f38084d2bb4a4ea5b0b03e1492277f110758c3e5da7a82c023a09dfadcefc6fe476eff1d86fb7ad7dd176e"}, {0xc}, {0xc}}}, @m_mpls={0xc4, 0x17, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0xbf05, 0x0, 0x1ec7, 0x2}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x10}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfb5b0}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8906}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x200, 0x39ca400, 0x6, 0x6, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x30, 0x6, "8f809f9b05e133d885a77ac5afc85454ff8c6ecd190f254bb828a403a473c237ba78dc735578c533b4ace5ae"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xa8, 0x13, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xe, 0xc, 0x1, 0x1, 0x8001}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2fdc}]}, {0x32, 0x6, "97ef95e08dd66a04d4e64ecd6c1a85b9b93d7a2d885b0a9a4359f3c92e6b11fc7bc4c396fe1ad3d46a2fe0349c6a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x6c, 0xe, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x4, 0x4, 0x288}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xad, 0x10, 0x20000000, 0x29f21f51, 0xfffffffe}, 0x444}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x10}}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xff000000}]}}, @TCA_RATE={0x6, 0x5, {0x29, 0x2}}]}, 0x608}}, 0x0) 17.648610676s ago: executing program 1 (id=1161): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffff000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00401362a0dd897daee66cd800000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x1d, 0x2, 0x6) getsockopt$bt_BT_SECURITY(r2, 0x6a, 0x3, 0x0, 0x20000000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x17}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x40, 0x2c, 0xd27, 0x40000, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x0, 0xd}, {0x8, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x14, 0x1}}]}}]}, 0x40}}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', r6, 0x2f, 0x2, 0x3, 0xffffffc0, 0x41, @loopback, @empty, 0x8, 0x8, 0x2, 0x9}}) 17.543504964s ago: executing program 4 (id=1163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}}, 0xc74045e627af13fc) (async) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000140001ed13bd7000000000000a84"], 0x58}}, 0x0) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4000000, &(0x7f0000001500)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x81}, 0x1c) (async) sendmmsg(r2, &(0x7f0000002cc0), 0x1a3, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 17.460683654s ago: executing program 4 (id=1164): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x7, 0x8, 0xf823, 0xfffffff8, {{0x11, 0x4, 0x1, 0x8, 0x44, 0x65, 0x0, 0xd4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x85, 0x1, 0x5, [{@empty, 0x8}]}, @timestamp_prespec={0x44, 0x24, 0x8a, 0x3, 0x9, [{@local, 0x7}, {@rand_addr=0x64010102, 0x7f}, {@multicast1, 0x800}, {@rand_addr=0x64010102}]}]}}}}}) r1 = socket$inet(0xa, 0x801, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x32d) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r0, 0x40, 0x40, 0x67c6, 0x0, {{0xc, 0x4, 0x0, 0xb, 0x30, 0x64, 0x0, 0x2, 0x29, 0x0, @remote, @multicast1, {[@rr={0x7, 0x7, 0xa3, [@private=0xa010101]}, @generic={0x112, 0x7, "b37a48e879"}, @rr={0x7, 0xb, 0x39, [@rand_addr=0x64010101, @loopback]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000000900000030000380050008000200000008000300000000001400020076657468b0f100005f626f6e4600000008000100"], 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket(0x10, 0x3, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x2, &(0x7f0000000040), &(0x7f0000001880)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r10, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x24008080) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000074c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0c4}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000002400)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0xc, 0x85, 0x0, 0x73, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2={0xff, 0x5}, 0x0, 0x7, 0x0, 0xa}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c000780180001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 17.400000951s ago: executing program 0 (id=1166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'macvtap0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000380)={@rand_addr, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x258, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x1d8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '.%]$:\"##\'[.@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9694}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x97, 0x5, "2f59293d2a18c3f5b97bbc091a4b5eb2c821a1fb90587996c7b965ae186db6183aa39f4a894e886e0917c49a620afad0cd5f5de86fad9f9d49b7f6e5f9c630d907665fb701ea0d8f1d2e31319a2ee3c60a49cdf38f42fd0f3315577a2e50c665bad8dcba5b92267118881ee1091ff8054c811712126e4b7a0d6ed7347e49665e3308879ea949ac0bca16483d54dd60708061d8"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x101}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x4004011}, 0x8000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7001fe9b3b04270d95370000ca000800030000c43b3253970370", @ANYRES32=0x0, @ANYBLOB="08000300020000000400018004000180"], 0x38}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r7, 0xee5a8000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000000c0)=0x7a, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r8 = socket(0x6, 0xa, 0x6) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f00000005c0), 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab93", 0xc9}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000cc0)="24e266f311bfc34d205676161ea41ddaadf890793efca7f44791a16cdbaac927fd152b30e1a0844903ed80c4455d5241cde9c46460964a6832700b1d9d8a5c8c0300865cc19dd948865c6280a0f3cb250dd3d97756dae4517286691e19487618d9223b395789ce9ca001e71c19b11800b5015550ee7b1528ae37fbe2ae56936ce5dc700d29780e33c4acfa135d893b3e22", 0x91}, {&(0x7f0000000e80)}, {&(0x7f0000000d80)="9f217da8c62d67c931918e15d750e2ee056b6edf476f24e100ab4875420c8b60f1ae43b9f09f771ca7a24598e134964a919d0962d9d52c335d423ac06240fd04f1b62fb8060cdd11cc1bee1d173bf786c08f74daeb18754fec112daaef0334724f1a13551be845ed7128", 0x6a}, {&(0x7f0000000c40)="1b0b22b9c6385ada7a573f7fed5032", 0xf}], 0x4}}], 0x4, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 17.332665395s ago: executing program 1 (id=1167): unshare(0x62040200) unshare(0x4a000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000400000090000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ecff0000000000000000000000000000080000000000f800000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1000}, 0x4) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.306391184s ago: executing program 3 (id=1169): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040008000c00018006000600800a0000100002800c000c"], 0x38}}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213", @ANYRES32=r2, @ANYBLOB="96747bdb718e5c4a737cd4eb22ce4dccb9b6b731dc30e19de353b0c28557506d1c1b02138542a335c1e948e9672b37cd39f12936fe32ea6cf99d2e8c659ae06bf023aaf2010fa4eff567cd296e3f388b1a0848fbc30d28ec63758b9874e4071b585c2810a58c0eb32364d0bf165f6bc81b21e5c5c32d8e6305ccff1305c7dbb28dbd46eb77968345b9deb3fddf36", @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xfff7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) bind$inet6(r5, &(0x7f0000000740)={0xa, 0x4e21, 0x400, @mcast1, 0x1}, 0x1c) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000340760000fedbdf250db2f2de279c0597ce0000000500350002fff2000000050037000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="180000002c0001007e8200000000fe000400008004003c59b7683605f52d6066120010f7090ebce3bdbe0f6f80810a8c4af15179e6f924fdd7e5fb3c84806ed7fbec4335007a4f7ccc1f34dfcf7d7c501064dd3e859ba2d485a16dda236d8a6c3aac9a692db1e3a44d0031bd4d5d07a9d0dddd5bd67de5df4f051f15110d08655b5272a9a4ea692281df02a1789568324166febf7e125ebf7426afca039ba4e92888cded95877b7b6cc1"], 0x18}], 0x1}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r9, 0x0, 0x8000000000fffe}, 0x18) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000340)="41000000010001", 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000080)={&(0x7f0000001fc0)={0xa, 0x2, 0x8, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="91f6eae20000000029001000370000003a000000000000001400000000000000290000000b0000000000000800000000e5f63aa6c97698e91078b0ec09cd80bf0092ddf1940d", @ANYRESHEX=r1], 0x30}, 0x2000) syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 17.036380805s ago: executing program 4 (id=1170): r0 = epoll_create(0x200008) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newtaction={0x64, 0x30, 0x216822a75a8bdd29, 0x70bd28, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x30000000}) 16.954149119s ago: executing program 3 (id=1171): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x18, r9, 0x0, r4}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x35, r7}, 0x10) (async, rerun: 64) sendmsg$alg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001b40)=""/99, 0x63}], 0x1}, 0x20) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000180)={0x28, r10, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x733}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp={0x8, 0x300}, @timestamp, @timestamp, @timestamp], 0x20000149) (rerun: 32) 16.821265009s ago: executing program 4 (id=1172): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) 16.722411089s ago: executing program 3 (id=1173): socket$nl_route(0x10, 0x3, 0x0) 16.55442854s ago: executing program 3 (id=1174): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f00000043c0)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}], 0x1, 0x0, 0x0) (async) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x40000) 16.551321225s ago: executing program 4 (id=1175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000200004000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x42d154fb95422d86}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb4, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x72d}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private, 0x4e24, 0x0, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, r7}, {0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0xffffffffffffff6e}, 0xfffffffd, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x418, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x8804) (async) getpeername(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x40521}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1d}}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x20004084) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x20, 0x0, 0x1}}, 0xb8}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16.518038113s ago: executing program 0 (id=1176): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.kill\x00', 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYRES8=r1], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$xdp(r3, &(0x7f0000000840)={&(0x7f0000000040)={0x2c, 0x0, r4, 0x1}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000080)="aaf870a6ebc19dcd6748f607e4ca4ee9144ad0a0080c34df881921fe81ef7870c3f7ca95555c2294091e055258b6f76296cdd5f40211583a8e277af84dc30e91ee61f6836a968164040e00aa48ffd56a549c992647918aba0e95c92d02", 0x5d}, {&(0x7f0000000100)="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", 0xfb}, {&(0x7f00000003c0)="80d4d5c6999b09941f082a1c2e4a5e77671e126919f430715719e2c31bdad9fd4232d6e51633f72e77bc901f77887d61e150a2d88b02678a32043994f3cf584118a7ea2014c6dc3d2dbbd91af811075c19ea9e75a23633f74c46cea39a5a6a84d166a6cf67508440af6956031a34cba487f5c74d035f65cc02157af9e444c16fcf97441d96a107", 0x87}, {&(0x7f0000000200)="8c5d1a289695fda4c3ba5a9d400407e7685380313b9f266899085f13688a27ec311162a81aa4c5b71465c37ae9b90fa496d02cf105e1742b50ba4bc3383b62f546d1f5cc06bd451af646651034bb390667", 0x51}, {&(0x7f0000000480)="8aa1c7a47b327bcc0c738c58e79e29846c5b973b364a3971ec57bd8dc76cee037f5c907306c2e2b9160f10a6a101bb36518671951ea567a1a83e74a8224c1aaf3ad6e72a15ddff6e5053056138e8157390d160d9ffabda19444f6906e40a17c54b8cf3d0b1995bf699e8ef36123a3f3bce2eac6d4483475c5767f73b51a347fa1dfe58e95db02eed638330284fe4330e1ee1c86230f2716a112598afc4542cf7486e7117943afddce97f83929e3e53d1c70dc0cfbeda5c1dc0b35718c20b4f3271a08169ca6e026439e0003befe32a5dbf60e65ef0b1c488d9146338991f13f5f74ac61f0057ee6fb4a4b752710f37e95091c55caecef3", 0xf7}, {&(0x7f0000000580)="07b5f1890930e042e63b4de64846d1c92393a540edc10f8aca579d2f4d393c2cd6cd9e3906e0c321e3a0799e4a18c5dccb1b9c6e560fde1b50e8a3b9301cf09312c0fbaa86f2b4fc8eff33b4491c49cf6ae1d0d686c01dc2400d17cf3f12c12f28d63151680696370092f71e60cb9ebc679a2b237769f8139b450c7fedcd39d740faeb64c077c24f028134dd1f50f0776f22577feda672851c6b5376a45e5ebb9d12eb6abe0d0c60139f484725689989e129ce3cddaa59", 0xb7}, {&(0x7f00000002c0)="f0203c64671b83bc27910dac12e0b4aaf0d3a1", 0x13}, {&(0x7f0000000640)="6f3133ba1d568e8a8b20df6da5355b8526cfde8a3e94e291c78c2d570249c9897eb93bb454df997e408d6d03b7543cb6b9314b5553f95820280a794570faec110994130cb2a0c6dde6aaf5a784884bd8b18be72671296136f2635ffc43b6c3641908de01e2208588d8f7053d1933d2d58161ebc85f5bf15346a0a2ef7d695853895891f1778daff917844599c57ed883d6d25b32ce1062e466bc3f929c4b864d8810755ad5d5622d7337dc318f4d235c4a2e061926f6c68986a208ee3903dc497ee2fba69a11fe33e521279c7fc78f651f916e712f277c5ab0324853e5f5b1641cd5fa01de4fde6c39134a2260", 0xed}, {&(0x7f0000000300)="8fc6", 0x2}, {&(0x7f0000000740)='(6', 0x2}], 0xa, 0x0, 0x0, 0x801}, 0x40c4) 16.374712584s ago: executing program 0 (id=1177): socket$inet(0x2b, 0x801, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000000000880000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x20, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES16=r0, @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r5 = accept4(r1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept$ax25(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r9, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r9, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/58, 0x3a}, 0x7ff}], 0x1, 0x60010020, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) close(r8) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r10, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x0, &(0x7f0000000040)}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0xb8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xa4, 0x1, [@m_ife={0xa0, 0x1, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffd}}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_TYPE={0x6, 0x5, 0xff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb8}}, 0x0) 16.302690366s ago: executing program 4 (id=1178): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x480c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trm\nD'], 0xa) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000440)='%pi6 \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r7, &(0x7f0000000840)="158d6c063b01391b3a5969548bb7a11abbd45ec26ecad3e604d6d6499aa23c606507ba19ef51169584ae4e83cc8b5a7ce078f7e4bc262031cf72f4f54ec911fc6d9899bbc885aca3c3d211d122c90b45496bc40d5e20d09472d3523a382a1cd0d5d850dfc0a75d46dc48b04e7a20520ffa7dd8566e4c34b9a243a76a970aa536e0d3a6f1f8f489357ea3f2761953b8d4a51d6c0c2322169ab13076012ba8e985db16b95313bfe6d5f3d4b236d9897907f68d13cfb04d9f6a48267b4e776d277b000000000000"}, 0x20) 16.289872008s ago: executing program 3 (id=1179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r3, &(0x7f0000000940)={&(0x7f0000000040)={0x2c, 0x2, 0x0, 0x1a}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)="25f31bd67de6862afacbbcb22293beb5dec670134ff3b6f1afa1549b8a71197fdf9b80e4affe1c5d93fbb7471d9b26b84396d099ace801f21ea6a58663d15619b4d25d2056462eb22ed4b7f054509272473e0e5b1b40c2682134383a25706eb0552d41db2f65229c6a2ff4f3a377fc8e5d6b4fe818b8", 0x76}, {&(0x7f0000000540)="ce5eb0dbd9ffe0428d7fca4d0110db946c8bd913e77e6bc38c4067995afce403ff99e906da41daa3d454a05ba51d0bfcd467c366ff028d4b1dcbbdfa58b9658ed77837b45906257889a04a06d70e9912d389b3ef", 0x54}, {&(0x7f00000005c0)="d7391752b365ad55cc48420c2c5fe4ebe8adb59b57cc28a64c3a6e0f6e4d91558e1631f1375449367308cf59b27bafec3bed24749ff7346ca132acd3930938004f26892f1c11d60d01e716d8a938d3deb616e7a0293c22b6191409415af0b6b69f376643b13702fd0477b6eb597c958f6a177de721e0f4cd07ed66d36ae62dcd9bed3a4621011f8b36efc2505c", 0x8d}, {&(0x7f0000000840)="dc7db97d7a24fc9eba3e3407df1a0ff8519e6f61f22acacac0b4114725d734254a1cca2864b765f616043004c73654a903fb06402cbd40c326ea1ff0b36dbd7d0bd74f9bd71ea52cdb2984161191f9da4904dc16beabe009dc2228eb45a5ae01f9c11f2be76b2f645a483a47551a3c172195eb6700da65a93456dd99aade6286f03c1b00034198813c97449a87a928e3fad6c4be84988132d860d8cae9a02075a834c5237bcc8ec1ae9077cc3cc3113eadc2fcec0a0c7dbe4b53a7d28b5d37e228f2a05f3eeb8bea9bffb724e1581f70f7b927ddc2d7", 0xd6}], 0x4, 0x0, 0x0, 0x800}, 0x14) socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x100, 0x1000}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045000078000000019078ac1e0090"], 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@empty, @in6=@mcast1, 0x15, 0x14, 0x4}]}, 0x38}}, 0x0) sendto$unix(r5, &(0x7f0000000080), 0xffffff9d, 0x700, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000f3d, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 15.419610703s ago: executing program 3 (id=1180): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000d71000010000000000000000000000000a2c000000060a000000000000000000000000000018000480140001800b0001007470726f7879000004000280140000001100010000000000000000000000000a"], 0x54}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r2, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x8001) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)=ANY=[@ANYBLOB="200000002c00010007"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a40)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r9, 0x0) sendmsg$inet(r9, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0xc000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0x15, &(0x7f0000000340)={@remote, @multicast1, 0x0, "499b0aa0c254f989733b921064eea6ea27f9286a7647df3bd148f288f12ddda9"}, 0x3c) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r5, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xa, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x59}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x94, &(0x7f0000000280)=""/148, 0x40f00, 0x20, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x7, 0x5, 0x81}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r5, r11, r12, r5], &(0x7f0000000780)=[{0x2, 0x1, 0x9, 0x1}, {0x3, 0x2, 0xb, 0xb}, {0x1, 0x1, 0x2, 0xd}, {0x4, 0x4, 0x6, 0x1}, {0x3, 0x5, 0x0, 0x7}, {0x4, 0x3, 0x6, 0x9}, {0x1, 0x4, 0x5, 0x7}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r6, 0x58, &(0x7f00000003c0)}, 0x10) socket(0x10, 0x3, 0x0) 2.249115068s ago: executing program 32 (id=1167): unshare(0x62040200) unshare(0x4a000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000400000090000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ecff0000000000000000000000000000080000000000f800000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1000}, 0x4) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.07820414s ago: executing program 33 (id=1177): socket$inet(0x2b, 0x801, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000000000880000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x20, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES16=r0, @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r5 = accept4(r1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept$ax25(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r9, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r9, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/58, 0x3a}, 0x7ff}], 0x1, 0x60010020, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) close(r8) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r10, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x0, &(0x7f0000000040)}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0xb8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xa4, 0x1, [@m_ife={0xa0, 0x1, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffd}}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_TYPE={0x6, 0x5, 0xff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb8}}, 0x0) 1.034245925s ago: executing program 34 (id=1178): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x480c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trm\nD'], 0xa) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000440)='%pi6 \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r7, &(0x7f0000000840)="158d6c063b01391b3a5969548bb7a11abbd45ec26ecad3e604d6d6499aa23c606507ba19ef51169584ae4e83cc8b5a7ce078f7e4bc262031cf72f4f54ec911fc6d9899bbc885aca3c3d211d122c90b45496bc40d5e20d09472d3523a382a1cd0d5d850dfc0a75d46dc48b04e7a20520ffa7dd8566e4c34b9a243a76a970aa536e0d3a6f1f8f489357ea3f2761953b8d4a51d6c0c2322169ab13076012ba8e985db16b95313bfe6d5f3d4b236d9897907f68d13cfb04d9f6a48267b4e776d277b000000000000"}, 0x20) 0s ago: executing program 35 (id=1180): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000d71000010000000000000000000000000a2c000000060a000000000000000000000000000018000480140001800b0001007470726f7879000004000280140000001100010000000000000000000000000a"], 0x54}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r2, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x8001) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)=ANY=[@ANYBLOB="200000002c00010007"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a40)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r9, 0x0) sendmsg$inet(r9, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0xc000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0x15, &(0x7f0000000340)={@remote, @multicast1, 0x0, "499b0aa0c254f989733b921064eea6ea27f9286a7647df3bd148f288f12ddda9"}, 0x3c) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r5, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xa, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x59}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x94, &(0x7f0000000280)=""/148, 0x40f00, 0x20, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x7, 0x5, 0x81}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r5, r11, r12, r5], &(0x7f0000000780)=[{0x2, 0x1, 0x9, 0x1}, {0x3, 0x2, 0xb, 0xb}, {0x1, 0x1, 0x2, 0xd}, {0x4, 0x4, 0x6, 0x1}, {0x3, 0x5, 0x0, 0x7}, {0x4, 0x3, 0x6, 0x9}, {0x1, 0x4, 0x5, 0x7}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r6, 0x58, &(0x7f00000003c0)}, 0x10) socket(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 54.490944][ T5817] cgroup: Unknown subsys name 'net' [ 54.634352][ T5817] cgroup: Unknown subsys name 'cpuset' [ 54.641221][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.713704][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.406130][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.413417][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.420612][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.422580][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.428143][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.441648][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.447778][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.449419][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.462855][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.472544][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.482733][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.491788][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.492761][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.506477][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.513768][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.513836][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.528441][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.536186][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.564018][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.570979][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.582992][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.583109][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.590624][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.604254][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.605024][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.619953][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.620134][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.634466][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.635026][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.642640][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.902961][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 57.932981][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 57.967692][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 57.976779][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 58.020920][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 58.083861][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.090990][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.098602][ T5835] bridge_slave_0: entered allmulticast mode [ 58.105274][ T5835] bridge_slave_0: entered promiscuous mode [ 58.142676][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.149767][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.156923][ T5835] bridge_slave_1: entered allmulticast mode [ 58.163433][ T5835] bridge_slave_1: entered promiscuous mode [ 58.174009][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.181072][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.188234][ T5827] bridge_slave_0: entered allmulticast mode [ 58.194644][ T5827] bridge_slave_0: entered promiscuous mode [ 58.201343][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.208547][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.215653][ T5827] bridge_slave_1: entered allmulticast mode [ 58.221931][ T5827] bridge_slave_1: entered promiscuous mode [ 58.260233][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.267412][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.274792][ T5840] bridge_slave_0: entered allmulticast mode [ 58.281120][ T5840] bridge_slave_0: entered promiscuous mode [ 58.305038][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.312141][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.319651][ T5840] bridge_slave_1: entered allmulticast mode [ 58.326278][ T5840] bridge_slave_1: entered promiscuous mode [ 58.339919][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.349154][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.356527][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.363760][ T5839] bridge_slave_0: entered allmulticast mode [ 58.370082][ T5839] bridge_slave_0: entered promiscuous mode [ 58.384472][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.399354][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.413702][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.420788][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.428044][ T5839] bridge_slave_1: entered allmulticast mode [ 58.434458][ T5839] bridge_slave_1: entered promiscuous mode [ 58.447387][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.457888][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.472691][ T5835] team0: Port device team_slave_0 added [ 58.479371][ T5835] team0: Port device team_slave_1 added [ 58.490143][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.497417][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.504756][ T5831] bridge_slave_0: entered allmulticast mode [ 58.511070][ T5831] bridge_slave_0: entered promiscuous mode [ 58.529819][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.554064][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.561129][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.568582][ T5831] bridge_slave_1: entered allmulticast mode [ 58.575037][ T5831] bridge_slave_1: entered promiscuous mode [ 58.581933][ T5827] team0: Port device team_slave_0 added [ 58.589334][ T5827] team0: Port device team_slave_1 added [ 58.600410][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.607492][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.633976][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.645419][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.652349][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.678691][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.691022][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.701967][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.747118][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.757607][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.767449][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.774633][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.800710][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.812604][ T5840] team0: Port device team_slave_0 added [ 58.819977][ T5840] team0: Port device team_slave_1 added [ 58.836822][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.843845][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.869777][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.889640][ T5839] team0: Port device team_slave_0 added [ 58.924003][ T5839] team0: Port device team_slave_1 added [ 58.930415][ T5831] team0: Port device team_slave_0 added [ 58.942795][ T5827] hsr_slave_0: entered promiscuous mode [ 58.948760][ T5827] hsr_slave_1: entered promiscuous mode [ 58.957356][ T5835] hsr_slave_0: entered promiscuous mode [ 58.963650][ T5835] hsr_slave_1: entered promiscuous mode [ 58.969441][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.977335][ T5835] Cannot create hsr debugfs directory [ 58.984418][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.991358][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.017541][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.041885][ T5831] team0: Port device team_slave_1 added [ 59.057184][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.064200][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.090279][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.101401][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.108529][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.134587][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.152075][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.159077][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.184979][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.201511][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.208719][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.234679][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.250239][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.257234][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.283189][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.366459][ T5839] hsr_slave_0: entered promiscuous mode [ 59.372638][ T5839] hsr_slave_1: entered promiscuous mode [ 59.378511][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.386106][ T5839] Cannot create hsr debugfs directory [ 59.393785][ T5840] hsr_slave_0: entered promiscuous mode [ 59.399844][ T5840] hsr_slave_1: entered promiscuous mode [ 59.405919][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.413485][ T5840] Cannot create hsr debugfs directory [ 59.456755][ T5831] hsr_slave_0: entered promiscuous mode [ 59.462855][ T5831] hsr_slave_1: entered promiscuous mode [ 59.468634][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.476462][ T5831] Cannot create hsr debugfs directory [ 59.482561][ T5144] Bluetooth: hci0: command tx timeout [ 59.572712][ T5834] Bluetooth: hci2: command tx timeout [ 59.576709][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.578180][ T5144] Bluetooth: hci1: command tx timeout [ 59.613635][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.635039][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.646582][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.697540][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.715209][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.722606][ T5834] Bluetooth: hci4: command tx timeout [ 59.728450][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.729904][ T5144] Bluetooth: hci3: command tx timeout [ 59.744535][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.753648][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.762185][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.780413][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.789017][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.819338][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.827970][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.839250][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.852338][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.880741][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.891460][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.908915][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.919250][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.951133][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.005725][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.028144][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.047704][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.054790][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.064487][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.071544][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.102321][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.120065][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.141791][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.158764][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.165863][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.175489][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.182585][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.196286][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.207545][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.214658][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.235433][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.245895][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.252987][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.267374][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.279788][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.286908][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.314645][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.321747][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.373087][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.392202][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.403846][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.419257][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.426367][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.458825][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.465942][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.510891][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.535629][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.635908][ T5835] veth0_vlan: entered promiscuous mode [ 60.662348][ T5827] veth0_vlan: entered promiscuous mode [ 60.681841][ T5827] veth1_vlan: entered promiscuous mode [ 60.693562][ T5835] veth1_vlan: entered promiscuous mode [ 60.727499][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.738691][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.751826][ T5835] veth0_macvtap: entered promiscuous mode [ 60.778301][ T5835] veth1_macvtap: entered promiscuous mode [ 60.796195][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.812272][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.824652][ T5827] veth0_macvtap: entered promiscuous mode [ 60.848435][ T5827] veth1_macvtap: entered promiscuous mode [ 60.861821][ T5839] veth0_vlan: entered promiscuous mode [ 60.869199][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.891050][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.900731][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.909809][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.918650][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.939363][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.951413][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.962275][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.973043][ T5840] veth0_vlan: entered promiscuous mode [ 60.983696][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.994387][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.006570][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.015586][ T5839] veth1_vlan: entered promiscuous mode [ 61.028880][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.037698][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.046739][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.056515][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.077388][ T5840] veth1_vlan: entered promiscuous mode [ 61.124755][ T5839] veth0_macvtap: entered promiscuous mode [ 61.148248][ T5831] veth0_vlan: entered promiscuous mode [ 61.156208][ T5839] veth1_macvtap: entered promiscuous mode [ 61.169408][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.177668][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.188195][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.188244][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.215467][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.225882][ T5831] veth1_vlan: entered promiscuous mode [ 61.232843][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.245742][ T5840] veth0_macvtap: entered promiscuous mode [ 61.270087][ T5840] veth1_macvtap: entered promiscuous mode [ 61.287604][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.295342][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.313361][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.315556][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.321420][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.333060][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.350670][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.362038][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.379450][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.391160][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.401943][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.412723][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.437110][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.448323][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.464077][ T5906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.465782][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.485379][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.496344][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.511883][ T5908] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6'. [ 61.513278][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.533037][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.543955][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.556127][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.566101][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.574985][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.583882][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.593417][ T5144] Bluetooth: hci0: command tx timeout [ 61.597809][ T5831] veth0_macvtap: entered promiscuous mode [ 61.608646][ T5831] veth1_macvtap: entered promiscuous mode [ 61.621145][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.626708][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 61.631650][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.650075][ T5144] Bluetooth: hci1: command tx timeout [ 61.650102][ T5144] Bluetooth: hci2: command tx timeout [ 61.660876][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.671420][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.681691][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.684431][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 61.692121][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.710558][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.721086][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.731865][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.741853][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.752508][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.762314][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.773096][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.783069][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.793514][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.803483][ T5834] Bluetooth: hci3: command tx timeout [ 61.803511][ T5834] Bluetooth: hci4: command tx timeout [ 61.815130][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.836311][ T5914] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.848424][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.858953][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.881140][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.893941][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.904437][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.917269][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.927284][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.937889][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.948409][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.958105][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.967308][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.976803][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.986150][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.018055][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.038881][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.048199][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.058816][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.161251][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.191220][ T5927] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 62.199856][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.208407][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.218023][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.245209][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.258767][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.266949][ T5929] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9'. [ 62.316762][ T5920] Zero length message leads to an empty skb [ 62.335487][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.348663][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.375438][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.379602][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.383293][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.398904][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.560338][ T5946] Illegal XDP return value 2993130732 on prog (id 8) dev N/A, expect packet loss! [ 62.631131][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.674476][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.755123][ T5966] netlink: 'syz.2.15': attribute type 12 has an invalid length. [ 62.813133][ T5965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'. [ 62.824629][ T5969] warning: `syz.4.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.857266][ T5969] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 63.176092][ T5978] xt_CT: No such helper "snmp" [ 63.355534][ T6002] sctp: [Deprecated]: syz.1.22 (pid 6002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.355534][ T6002] Use struct sctp_sack_info instead [ 63.462903][ T6010] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 63.577778][ T6010] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 63.614292][ T6016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.28'. [ 63.637818][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 63.646994][ T5144] Bluetooth: hci0: command tx timeout [ 63.664560][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 63.680548][ T5990] netlink: 'syz.1.22': attribute type 11 has an invalid length. [ 63.724442][ T5144] Bluetooth: hci2: command tx timeout [ 63.729946][ T5144] Bluetooth: hci1: command tx timeout [ 63.773666][ T6034] IPv6: addrconf: prefix option has invalid lifetime [ 63.824312][ T6036] xt_CT: No such helper "netbios-ns" [ 63.883471][ T5144] Bluetooth: hci4: command tx timeout [ 63.888974][ T5834] Bluetooth: hci3: command tx timeout [ 64.059872][ T6072] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 64.550163][ T6112] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.699228][ T6042] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 65.017656][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.266468][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.569977][ T6215] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 65.594430][ T6217] netlink: 'syz.2.72': attribute type 5 has an invalid length. [ 65.722716][ T5144] Bluetooth: hci0: command tx timeout [ 65.804259][ T5144] Bluetooth: hci1: command tx timeout [ 65.809710][ T5834] Bluetooth: hci2: command tx timeout [ 65.964429][ T5144] Bluetooth: hci4: command tx timeout [ 65.969893][ T5834] Bluetooth: hci3: command tx timeout [ 66.166720][ T6266] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 66.369501][ T6209] delete_channel: no stack [ 66.805450][ T6313] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 66.888858][ T6319] __nla_validate_parse: 16 callbacks suppressed [ 66.888877][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 66.976140][ T6322] netlink: 200 bytes leftover after parsing attributes in process `syz.3.97'. [ 67.023961][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 67.161201][ T6335] netlink: 'syz.3.99': attribute type 4 has an invalid length. [ 67.189274][ T6335] netlink: 'syz.3.99': attribute type 2 has an invalid length. [ 67.803119][ T5144] Bluetooth: hci0: command 0x0401 tx timeout [ 68.032253][ T6400] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 68.213260][ T6413] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 68.263948][ T6413] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 68.288292][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.123'. [ 68.482102][ T6438] ebt_among: src integrity fail: 100 [ 68.487630][ T6441] tipc: Enabling of bearer rejected, failed to enable media [ 68.615890][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 68.664742][ T6448] netlink: 'syz.0.132': attribute type 12 has an invalid length. [ 68.808155][ T6468] dccp_invalid_packet: invalid packet type [ 68.816366][ T6468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.138'. [ 68.984004][ T6476] xt_CT: No such helper "snmp" [ 69.186175][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 69.468809][ T6523] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 69.476551][ T6523] netlink: 224 bytes leftover after parsing attributes in process `syz.3.147'. [ 70.144423][ T6569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.157'. [ 70.197393][ T6569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.221631][ T6579] netlink: 'syz.4.157': attribute type 1 has an invalid length. [ 70.310531][ T6581] netlink: 'syz.2.161': attribute type 12 has an invalid length. [ 70.384606][ T6585] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 70.386179][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 70.444795][ T6585] bond1 (unregistering): Released all slaves [ 70.569654][ T6605] netlink: 'syz.1.164': attribute type 11 has an invalid length. [ 70.686979][ T6610] team0: Device macvtap1 failed to register rx_handler [ 70.909884][ T6626] xt_CT: No such helper "snmp" [ 71.039562][ T6636] xt_cgroup: invalid path, errno=-2 [ 71.369492][ T6664] bond1: entered promiscuous mode [ 71.376414][ T6664] bond1: entered allmulticast mode [ 71.413494][ T6664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.566603][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.574868][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.781247][ T6725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.918705][ T6725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.928711][ T6725] bond0 (unregistering): Released all slaves [ 73.157347][ T6750] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 73.171676][ T6750] __nla_validate_parse: 6 callbacks suppressed [ 73.171692][ T6750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.193'. [ 73.189315][ T6750] bridge0: port 3(macvlan1) entered blocking state [ 73.196148][ T6750] bridge0: port 3(macvlan1) entered disabled state [ 73.204665][ T6750] macvlan1: entered allmulticast mode [ 73.210057][ T6750] veth1_vlan: entered allmulticast mode [ 73.217170][ T6750] macvlan1: entered promiscuous mode [ 73.249975][ T6750] bridge0: port 3(macvlan1) entered blocking state [ 73.256615][ T6750] bridge0: port 3(macvlan1) entered forwarding state [ 73.342306][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 73.392465][ T6757] netlink: 31 bytes leftover after parsing attributes in process `syz.1.195'. [ 73.412154][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 73.428443][ T6757] netlink: 'syz.1.195': attribute type 3 has an invalid length. [ 73.441270][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 73.473646][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.197'. [ 73.482743][ T6757] netlink: 'syz.1.195': attribute type 2 has an invalid length. [ 73.482759][ T6757] netlink: 31 bytes leftover after parsing attributes in process `syz.1.195'. [ 73.545151][ T6772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.614434][ T6782] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 73.631723][ T6782] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 73.634532][ T6772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.757309][ T6795] netlink: 'syz.3.203': attribute type 11 has an invalid length. [ 73.762133][ T6793] openvswitch: netlink: Message has 1 unknown bytes. [ 73.778410][ T6772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.850165][ T6796] netlink: 'syz.3.203': attribute type 11 has an invalid length. [ 73.870828][ T6772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.883596][ T6793] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 73.912523][ T6793] netlink: 76 bytes leftover after parsing attributes in process `syz.2.205'. [ 74.231727][ T6772] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.462119][ T6772] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.671036][ T6772] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.481545][ T6772] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.883748][ T6833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.920601][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.210'. [ 75.989512][ T6848] netlink: 'syz.4.219': attribute type 10 has an invalid length. [ 75.998202][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.012083][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 76.031906][ T6848] bridge_slave_1: left allmulticast mode [ 76.038215][ T6848] bridge_slave_1: left promiscuous mode [ 76.053395][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.078837][ T6848] bridge_slave_0: left allmulticast mode [ 76.085816][ T6848] bridge_slave_0: left promiscuous mode [ 76.091588][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.300043][ T6876] x_tables: duplicate underflow at hook 2 [ 76.624474][ T6903] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 76.704095][ T52] cfg80211: failed to load regulatory.db [ 76.830710][ T6910] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 76.903128][ T6915] batman_adv: batadv0: Adding interface: ip6gretap1 [ 76.909914][ T6915] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.936418][ T6915] batman_adv: batadv0: Interface activated: ip6gretap1 [ 76.967236][ T6909] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 77.238502][ T6934] xt_TPROXY: Can be used only with -p tcp or -p udp [ 77.428082][ T6950] bridge_slave_0: left allmulticast mode [ 77.434428][ T6950] bridge_slave_0: left promiscuous mode [ 77.440454][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.453507][ T6950] bridge_slave_1: left allmulticast mode [ 77.459285][ T6950] bridge_slave_1: left promiscuous mode [ 77.465326][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.476757][ T6950] bond0: (slave bond_slave_0): Releasing backup interface [ 77.487305][ T6950] bond0: (slave bond_slave_1): Releasing backup interface [ 77.500778][ T6950] team0: Port device team_slave_0 removed [ 77.510612][ T6950] team0: Port device team_slave_1 removed [ 77.517749][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.525613][ T6950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.536147][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.544398][ T6950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.557874][ T6950] macvlan1: left allmulticast mode [ 77.563827][ T6950] veth1_vlan: left allmulticast mode [ 77.569259][ T6950] macvlan1: left promiscuous mode [ 77.575116][ T6950] bridge0: port 3(macvlan1) entered disabled state [ 77.680520][ T6970] veth0_to_bridge: entered promiscuous mode [ 77.763632][ T6969] veth0_to_bridge: left promiscuous mode [ 77.897393][ T6974] Bluetooth: MGMT ver 1.23 [ 78.094633][ T6990] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.121531][ T6998] tipc: Started in network mode [ 78.157014][ T6998] tipc: Node identity a2f3007645d7, cluster identity 4711 [ 78.180700][ T6998] tipc: Enabled bearer , priority 0 [ 78.191537][ T7006] xt_hashlimit: size too large, truncated to 1048576 [ 78.289306][ T7007] syzkaller0: entered promiscuous mode [ 78.312761][ T7007] syzkaller0: entered allmulticast mode [ 78.366542][ T7007] tipc: Resetting bearer [ 78.383150][ T7012] tipc: Started in network mode [ 78.390456][ T7012] tipc: Node identity , cluster identity 4711 [ 78.412442][ T7012] tipc: Failed to obtain node identity [ 78.417938][ T7012] tipc: Enabling of bearer rejected, failed to enable media [ 78.450524][ T7019] pimreg: entered allmulticast mode [ 78.489165][ T7037] __nla_validate_parse: 9 callbacks suppressed [ 78.489183][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.272'. [ 78.506673][ T6997] tipc: Resetting bearer [ 78.593745][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.274'. [ 78.605372][ T7046] netlink: 48 bytes leftover after parsing attributes in process `syz.3.274'. [ 78.621359][ T6997] tipc: Disabling bearer [ 78.834036][ T7070] netlink: 72 bytes leftover after parsing attributes in process `syz.2.278'. [ 78.857660][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 78.941155][ T7080] syzkaller1: entered promiscuous mode [ 78.948410][ T7080] syzkaller1: entered allmulticast mode [ 78.953234][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 78.978947][ T7083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.109113][ T7095] IPv6: Can't replace route, no match found [ 79.689113][ T7139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.828596][ T7152] xt_TCPMSS: Only works on TCP SYN packets [ 79.841897][ T7152] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 79.853164][ T7152] syz_tun: entered promiscuous mode [ 79.871270][ T7152] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 79.996510][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 80.027816][ T7164] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 80.037114][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 80.310503][ T7194] netlink: 'syz.3.305': attribute type 4 has an invalid length. [ 80.526360][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 80.556874][ T7223] netlink: 308 bytes leftover after parsing attributes in process `syz.4.311'. [ 80.657789][ T7229] netlink: 'syz.4.313': attribute type 11 has an invalid length. [ 80.808276][ T7242] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.817191][ T7242] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.826095][ T7242] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.835527][ T7242] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.031941][ T7258] IPv6: addrconf: prefix option has invalid lifetime [ 81.309963][ T7276] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 82.134553][ T7316] netlink: 'syz.1.332': attribute type 10 has an invalid length. [ 82.142325][ T7316] openvswitch: netlink: Flow key attr not present in new flow. [ 82.357456][ T7323] syz.1.334 (7323) used obsolete PPPIOCDETACH ioctl [ 82.508723][ T7349] netlink: 'syz.0.340': attribute type 7 has an invalid length. [ 82.648836][ T7361] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 82.688358][ T7361] batman_adv: batadv0: Adding interface: ip6gretap1 [ 82.695653][ T7361] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.724445][ T7361] batman_adv: batadv0: Interface activated: ip6gretap1 [ 83.516665][ T7442] __nla_validate_parse: 10 callbacks suppressed [ 83.516683][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.361'. [ 83.553554][ T7442] netlink: 'syz.3.361': attribute type 7 has an invalid length. [ 83.576124][ T7442] netlink: 'syz.3.361': attribute type 8 has an invalid length. [ 83.591296][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 83.781516][ T7458] netlink: 'syz.3.367': attribute type 2 has an invalid length. [ 83.851227][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 83.860528][ T7464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.369'. [ 84.023209][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.374'. [ 84.291902][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 84.339746][ T7499] netlink: 136 bytes leftover after parsing attributes in process `syz.4.385'. [ 84.446826][ T7519] netlink: 'syz.0.390': attribute type 2 has an invalid length. [ 84.465338][ T7519] f: entered promiscuous mode [ 84.506736][ T7498] x_tables: duplicate underflow at hook 2 [ 84.523615][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 84.648642][ T7536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.394'. [ 84.850359][ T7549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.400'. [ 84.950639][ T7562] netlink: 'syz.2.401': attribute type 10 has an invalid length. [ 85.008890][ T7562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.161330][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 85.241535][ T7581] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 85.698823][ T7609] netlink: 'syz.1.412': attribute type 5 has an invalid length. [ 86.062846][ T7662] netlink: 'syz.0.424': attribute type 7 has an invalid length. [ 86.094966][ T7663] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (536870976) [ 86.105937][ T7663] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 86.188694][ T7674] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 86.201251][ T7674] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 86.210871][ T7674] gretap1: entered promiscuous mode [ 86.220573][ T7674] gretap1: entered allmulticast mode [ 87.399688][ T7758] trusted_key: syz.2.450 sent an empty control message without MSG_MORE. [ 87.570705][ T7772] netlink: 'syz.3.454': attribute type 2 has an invalid length. [ 87.585161][ T7772] netlink: 'syz.3.454': attribute type 2 has an invalid length. [ 87.628951][ T7776] ip6gre1: entered promiscuous mode [ 87.932001][ T7795] IPVS: set_ctl: invalid protocol: 47 172.30.1.4:20004 [ 88.185682][ T7815] Bluetooth: MGMT ver 1.23 [ 88.347089][ T7820] syzkaller1: entered promiscuous mode [ 88.362834][ T7820] syzkaller1: entered allmulticast mode [ 89.039134][ T7855] __nla_validate_parse: 13 callbacks suppressed [ 89.039154][ T7855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.476'. [ 89.075855][ T7857] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.477'. [ 89.095104][ T7855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 89.115242][ T7857] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 89.123762][ T7855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.476'. [ 89.142678][ T7855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.476'. [ 89.387215][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.483'. [ 89.387378][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.403482][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.516995][ T7890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.485'. [ 89.589975][ T7874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.618506][ T7874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.785096][ T7874] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.812477][ T7874] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.821760][ T7874] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.831417][ T7874] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.900662][ T7874] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 89.921831][ T7874] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.930842][ T7874] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.940136][ T7874] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.949244][ T7874] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.969193][ T7883] tipc: Enabling of bearer rejected, failed to enable media [ 89.980973][ T7889] batadv1: entered allmulticast mode [ 90.000382][ T7882] batadv0: entered promiscuous mode [ 90.257572][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.495'. [ 90.331005][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 90.352064][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 90.366240][ T7933] pim6reg: entered allmulticast mode [ 90.418513][ C0] Unknown status report in ack skb [ 90.436036][ T7935] netlink: 'syz.3.499': attribute type 8 has an invalid length. [ 90.574928][ T7951] batman_adv: batadv0: Adding interface: gretap2 [ 90.581528][ T7951] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.610520][ T7951] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 90.655057][ T7960] tipc: Started in network mode [ 90.659954][ T7960] tipc: Node identity host1x_cn, cluster identity 8 [ 90.715670][ T7965] openvswitch: netlink: Flow key attribute not present in set flow. [ 90.863165][ T7976] tun0: tun_chr_ioctl cmd 1074025677 [ 90.877410][ T7976] tun0: linktype set to 823 [ 90.902351][ T7976] x_tables: ip_tables: ah match: only valid for protocol 51 [ 90.972171][ T7986] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 91.118177][ T7999] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 91.149422][ T7989] syzkaller0: entered promiscuous mode [ 91.155035][ T7989] syzkaller0: entered allmulticast mode [ 91.993850][ T8038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.094812][ T8058] lo speed is unknown, defaulting to 1000 [ 92.143490][ T8058] lo speed is unknown, defaulting to 1000 [ 92.178298][ T8058] lo speed is unknown, defaulting to 1000 [ 92.326232][ T8075] bridge_slave_0: left allmulticast mode [ 92.336034][ T8077] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.344336][ T8075] bridge_slave_0: left promiscuous mode [ 92.352047][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.375879][ T8075] bridge_slave_1: left allmulticast mode [ 92.413029][ T8075] bridge_slave_1: left promiscuous mode [ 92.418746][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.437331][ T8058] infiniband syz0: set active [ 92.448680][ T8058] infiniband syz0: added lo [ 92.457077][ T8075] bond0: (slave bond_slave_0): Releasing backup interface [ 92.474355][ T8075] bond0: (slave bond_slave_1): Releasing backup interface [ 92.490734][ T8075] team0: Port device team_slave_0 removed [ 92.497942][ T8058] RDS/IB: syz0: added [ 92.505496][ T8075] team0: Port device team_slave_1 removed [ 92.511870][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.512013][ T8058] smc: adding ib device syz0 with port count 1 [ 92.519557][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.533659][ T8058] smc: ib device syz0 port 1 has pnetid [ 92.545326][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.554952][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.569611][ T5875] lo speed is unknown, defaulting to 1000 [ 92.620188][ T5904] lo speed is unknown, defaulting to 1000 [ 92.629762][ T8058] lo speed is unknown, defaulting to 1000 [ 92.709142][ T8102] bond0: option mode: unable to set because the bond device is up [ 92.814424][ T8104] bond0: entered promiscuous mode [ 92.819495][ T8104] bond_slave_0: entered promiscuous mode [ 92.820035][ T8109] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.839021][ T8104] bond_slave_1: entered promiscuous mode [ 92.848383][ T8104] erspan0: entered promiscuous mode [ 92.856661][ T8104] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 92.866871][ T8104] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 92.883697][ T8058] lo speed is unknown, defaulting to 1000 [ 92.894807][ T8118] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 92.954746][ T29] audit: type=1107 audit(1737268198.117:2): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/u%ſ;/yLk' [ 93.179084][ T8058] lo speed is unknown, defaulting to 1000 [ 93.396142][ T8153] netlink: 'syz.2.560': attribute type 11 has an invalid length. [ 93.407132][ T8153] netlink: 'syz.2.560': attribute type 5 has an invalid length. [ 93.425748][ T8058] lo speed is unknown, defaulting to 1000 [ 93.555022][ T8058] lo speed is unknown, defaulting to 1000 [ 93.965512][ T5904] IPVS: starting estimator thread 0... [ 93.965520][ T8193] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 94.062461][ T8196] IPVS: using max 40 ests per chain, 96000 per kthread [ 94.097529][ T8203] lo speed is unknown, defaulting to 1000 [ 94.134951][ T8209] __nla_validate_parse: 28 callbacks suppressed [ 94.134969][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 94.205683][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'. [ 94.217123][ T8215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 94.226444][ T8215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 94.239466][ T8215] erspan0: entered promiscuous mode [ 94.245344][ T8215] batadv_slave_1: entered promiscuous mode [ 94.251536][ T8215] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 94.259768][ T8215] Cannot create hsr debugfs directory [ 94.278365][ T8217] lo speed is unknown, defaulting to 1000 [ 94.440765][ T8225] netlink: 'syz.2.579': attribute type 1 has an invalid length. [ 94.448843][ T8225] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.579'. [ 94.500867][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 94.808921][ T8238] netlink: 'syz.2.584': attribute type 10 has an invalid length. [ 94.863327][ T8238] syz_tun: entered promiscuous mode [ 94.870380][ T8238] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 94.959347][ T8256] dccp_invalid_packet: P.Data Offset(0) too small [ 94.963607][ T8258] netlink: 80 bytes leftover after parsing attributes in process `syz.2.588'. [ 94.986570][ T8261] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 95.009050][ T8254] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 95.019077][ T8252] tap0: tun_chr_ioctl cmd 1074025677 [ 95.030290][ T8252] tap0: linktype set to 769 [ 95.157769][ T8264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 95.172521][ T8264] bond3: (slave bond4): making interface the new active one [ 95.180337][ T8264] bond3: (slave bond4): Enslaving as an active interface with an up link [ 95.232979][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 95.506565][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.597'. [ 95.568483][ T8295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.600'. [ 95.583760][ T8291] lo speed is unknown, defaulting to 1000 [ 95.620929][ T8300] netlink: set zone limit has 8 unknown bytes [ 96.224756][ T8343] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 96.295868][ T8348] lo speed is unknown, defaulting to 1000 [ 96.529506][ T8373] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.658943][ T8373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.698321][ T8383] macsec1: entered allmulticast mode [ 96.714487][ T8383] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 96.727818][ T8383] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 96.747261][ T8373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.812515][ T8373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.846742][ T8390] x_tables: duplicate underflow at hook 2 [ 96.985145][ T8373] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.015919][ T8373] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.070743][ T8373] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.097031][ T8373] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.120542][ T8416] lo speed is unknown, defaulting to 1000 [ 97.597675][ T8456] macvlan1: entered promiscuous mode [ 97.650514][ T8453] macvlan1: left promiscuous mode [ 97.751791][ T8420] lo speed is unknown, defaulting to 1000 [ 97.770095][ T8420] lo speed is unknown, defaulting to 1000 [ 97.780733][ T8420] lo speed is unknown, defaulting to 1000 [ 97.840277][ T8420] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.854659][ T8420] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.886637][ T8420] lo speed is unknown, defaulting to 1000 [ 97.894508][ T8420] lo speed is unknown, defaulting to 1000 [ 97.900885][ T8420] lo speed is unknown, defaulting to 1000 [ 97.925396][ T8420] lo speed is unknown, defaulting to 1000 [ 97.946124][ T8481] infiniband syz0: set active [ 97.963857][ T8481] infiniband syz0: set active [ 98.018345][ T5875] lo speed is unknown, defaulting to 1000 [ 98.018364][ T8420] lo speed is unknown, defaulting to 1000 [ 98.024220][ T52] lo speed is unknown, defaulting to 1000 [ 98.047101][ T8420] lo speed is unknown, defaulting to 1000 [ 98.240585][ T8504] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 98.463571][ T8503] delete_channel: no stack [ 98.768267][ T8533] bond_slave_0: entered promiscuous mode [ 98.769414][ T8537] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 98.774031][ T8533] bond_slave_1: entered promiscuous mode [ 98.783803][ T8533] macsec1: entered promiscuous mode [ 98.800187][ T8533] bond0: entered promiscuous mode [ 98.819438][ T8533] bond0: left promiscuous mode [ 98.837928][ T8533] bond_slave_0: left promiscuous mode [ 98.843424][ T8533] bond_slave_1: left promiscuous mode [ 98.908468][ T8537] bridge0: port 1(macvlan1) entered blocking state [ 98.915340][ T8537] bridge0: port 1(macvlan1) entered disabled state [ 98.925826][ T8537] macvlan1: entered allmulticast mode [ 98.931308][ T8537] veth1_vlan: entered allmulticast mode [ 98.938527][ T8537] macvlan1: entered promiscuous mode [ 98.945454][ T8537] bridge0: port 1(macvlan1) entered blocking state [ 98.952062][ T8537] bridge0: port 1(macvlan1) entered forwarding state [ 98.969892][ T8545] netlink: 'syz.3.651': attribute type 2 has an invalid length. [ 99.080211][ T8559] openvswitch: netlink: Flow actions attr not present in new flow. [ 99.173474][ T8564] netlink: 'syz.1.661': attribute type 2 has an invalid length. [ 99.181157][ T8564] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 99.346438][ T8587] lo speed is unknown, defaulting to 1000 [ 99.424548][ T8600] __nla_validate_parse: 22 callbacks suppressed [ 99.424567][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 99.477554][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.671'. [ 99.502122][ T8587] lo speed is unknown, defaulting to 1000 [ 99.510815][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.671'. [ 99.520803][ T8600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.671'. [ 99.536691][ T8608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.673'. [ 99.553202][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 99.566321][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 99.575581][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 99.585804][ T8600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.671'. [ 99.608542][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.675'. [ 99.877484][ T8628] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 99.885776][ T8627] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 99.962812][ T8634] netlink: 'syz.1.681': attribute type 1 has an invalid length. [ 99.989239][ T8635] bond1: entered promiscuous mode [ 100.003087][ T8635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.080328][ T8652] macsec1: entered promiscuous mode [ 100.085760][ T8652] team0: entered promiscuous mode [ 100.091897][ T8652] team0: left promiscuous mode [ 100.148695][ T8663] nbd: must specify a size in bytes for the device [ 100.197542][ T8668] lo speed is unknown, defaulting to 1000 [ 100.270293][ T8675] batman_adv: batadv0: Adding interface: dummy0 [ 100.282497][ T8675] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.311719][ T8675] batman_adv: batadv0: Interface activated: dummy0 [ 100.351555][ T8675] batadv0: mtu less than device minimum [ 100.359090][ T8675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.370331][ T8675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.381417][ T8675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.392587][ T8675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.403713][ T8675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.414858][ T8675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.425975][ T8675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.437183][ T8675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.448302][ T8675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.466771][ T8668] lo speed is unknown, defaulting to 1000 [ 100.467573][ T8677] lo speed is unknown, defaulting to 1000 [ 100.564757][ T8699] netlink: 'syz.2.699': attribute type 2 has an invalid length. [ 100.623741][ T8677] lo speed is unknown, defaulting to 1000 [ 100.847623][ T8729] lo speed is unknown, defaulting to 1000 [ 100.988116][ T8738] syzkaller1: entered promiscuous mode [ 100.994242][ T8738] syzkaller1: entered allmulticast mode [ 101.022434][ T8738] netlink: 'syz.2.708': attribute type 10 has an invalid length. [ 101.048778][ T8738] bridge0: entered promiscuous mode [ 101.058010][ T8738] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 101.106096][ T8729] lo speed is unknown, defaulting to 1000 [ 101.254371][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.261791][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.618201][ T8780] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.833358][ T8780] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.911449][ T8800] syzkaller1: entered allmulticast mode [ 101.929548][ T8780] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.956982][ T8803] bridge_slave_1: left allmulticast mode [ 101.964125][ T8803] bridge_slave_1: left promiscuous mode [ 101.970595][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.979567][ T8803] bridge_slave_0: left allmulticast mode [ 101.986574][ T8803] bridge_slave_0: left promiscuous mode [ 101.992310][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.006214][ T8803] bond0: (slave bridge0): Releasing backup interface [ 102.013571][ T8803] bridge0 (unregistering): left promiscuous mode [ 102.069235][ T8780] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.242600][ T8780] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.261735][ T8780] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.278532][ T8780] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.292840][ T8780] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.368334][ T8817] batman_adv: batadv0: Interface deactivated: dummy0 [ 102.385793][ T8822] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 102.406235][ T8817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.417305][ T8817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.450936][ T8817] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.460559][ T8817] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.469503][ T8817] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.478394][ T8817] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.499307][ T6152] lo speed is unknown, defaulting to 1000 [ 102.711820][ T8850] lo speed is unknown, defaulting to 1000 [ 102.806961][ T8850] lo speed is unknown, defaulting to 1000 [ 102.999380][ T8850] xt_limit: Overflow, try lower: 262144/524288 [ 103.046064][ T8884] netlink: 'syz.2.747': attribute type 1 has an invalid length. [ 103.075911][ T8884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.087040][ T8887] IPv6: syztnl0: Disabled Multicast RS [ 103.097826][ T8884] vlan0: entered promiscuous mode [ 103.103553][ T8884] macvtap0: entered promiscuous mode [ 103.158047][ T8889] tipc: Enabling of bearer rejected, failed to enable media [ 103.204805][ T8895] unsupported nlmsg_type 40 [ 103.530943][ T8920] vlan0: entered allmulticast mode [ 103.536566][ T8920] xfrm0: entered allmulticast mode [ 103.664676][ T8925] vlan2: entered promiscuous mode [ 103.679921][ T8925] vlan2: entered allmulticast mode [ 103.762005][ T8928] sock: sock_timestamping_bind_phc: sock not bind to device [ 104.165621][ T8944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.334050][ T6067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.352121][ T6067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.990809][ T9002] __nla_validate_parse: 18 callbacks suppressed [ 104.990829][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 105.070307][ T9023] netlink: 'syz.3.780': attribute type 5 has an invalid length. [ 105.127822][ T9041] lo speed is unknown, defaulting to 1000 [ 105.222640][ T9041] lo speed is unknown, defaulting to 1000 [ 105.265394][ T9079] netlink: 'syz.4.782': attribute type 1 has an invalid length. [ 105.339551][ T9079] netlink: 'syz.4.782': attribute type 1 has an invalid length. [ 105.358074][ T9079] netlink: 'syz.4.782': attribute type 3 has an invalid length. [ 105.365961][ T9079] netlink: 224 bytes leftover after parsing attributes in process `syz.4.782'. [ 105.458835][ T9116] x_tables: ip_tables: udp match: only valid for protocol 17 [ 105.474240][ T9116] netlink: 3 bytes leftover after parsing attributes in process `syz.4.784'. [ 105.493059][ T9116] batadv1: entered promiscuous mode [ 105.498681][ T9116] batadv1: entered allmulticast mode [ 105.799838][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 105.846595][ T9139] netlink: 56 bytes leftover after parsing attributes in process `syz.3.788'. [ 105.886778][ T9157] netlink: 'syz.4.792': attribute type 1 has an invalid length. [ 105.916054][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.792'. [ 105.934441][ T9161] netlink: 284 bytes leftover after parsing attributes in process `syz.0.794'. [ 105.949566][ T9163] netlink: 120 bytes leftover after parsing attributes in process `syz.3.795'. [ 105.976847][ T9163] netlink: 92 bytes leftover after parsing attributes in process `syz.3.795'. [ 105.992273][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.795'. [ 105.999390][ T9168] lo speed is unknown, defaulting to 1000 [ 106.062979][ T9174] net_ratelimit: 13 callbacks suppressed [ 106.062998][ T9174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.156567][ T9181] netlink: 'syz.0.801': attribute type 12 has an invalid length. [ 106.168933][ T9182] netlink: 'syz.0.801': attribute type 12 has an invalid length. [ 106.190066][ T9192] rose4: entered allmulticast mode [ 106.255605][ T9195] macvlan2: entered allmulticast mode [ 106.263866][ T9195] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 106.291370][ T9195] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 106.351758][ T9168] lo speed is unknown, defaulting to 1000 [ 106.767306][ T9249] ax25_connect(): syz.3.818 uses autobind, please contact jreuter@yaina.de [ 106.783524][ T9253] batadv_slave_1: entered promiscuous mode [ 106.970288][ T9261] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 106.996555][ T9252] batadv_slave_1: left promiscuous mode [ 107.131483][ T9272] xt_connbytes: Forcing CT accounting to be enabled [ 107.141331][ T9280] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 107.143204][ T9277] lo speed is unknown, defaulting to 1000 [ 107.178817][ T9280] bond5: entered allmulticast mode [ 107.191430][ T9280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 107.238659][ T9287] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 107.249013][ T9286] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 107.253562][ T9280] bond5: (slave ip6gretap1): making interface the new active one [ 107.262874][ T9280] ip6gretap1: entered allmulticast mode [ 107.269054][ T9280] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 107.279938][ T9277] lo speed is unknown, defaulting to 1000 [ 107.472754][ T9316] sctp: [Deprecated]: syz.0.836 (pid 9316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.472754][ T9316] Use struct sctp_sack_info instead [ 107.489813][ T9316] sctp: [Deprecated]: syz.0.836 (pid 9316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.489813][ T9316] Use struct sctp_sack_info instead [ 107.506663][ T9316] sctp: [Deprecated]: syz.0.836 (pid 9316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.506663][ T9316] Use struct sctp_sack_info instead [ 107.523069][ T9316] sctp: [Deprecated]: syz.0.836 (pid 9316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.523069][ T9316] Use struct sctp_sack_info instead [ 107.677674][ T9326] lo speed is unknown, defaulting to 1000 [ 107.855598][ T9326] lo speed is unknown, defaulting to 1000 [ 107.923996][ T9339] bridge_slave_1: left allmulticast mode [ 107.930216][ T9339] bridge_slave_1: left promiscuous mode [ 107.936382][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.947305][ T9339] bridge_slave_0: left allmulticast mode [ 107.954593][ T9339] bridge_slave_0: left promiscuous mode [ 107.960821][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.999666][ T9352] ip6_vti0: entered promiscuous mode [ 108.143234][ T9365] netlink: 'syz.0.849': attribute type 5 has an invalid length. [ 108.358670][ T9384] syzkaller1: entered promiscuous mode [ 108.389931][ T9384] syzkaller1: entered allmulticast mode [ 108.434773][ T9399] set match dimension is over the limit! [ 108.448007][ T9401] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.612302][ T9407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.635169][ T9407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.705442][ T9407] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.743560][ T9407] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.751949][ T9407] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.816866][ T9407] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.868106][ T9407] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 108.886136][ T9407] xfrm0: left allmulticast mode [ 108.919926][ T9415] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 109.097326][ T5827] bond0: (slave syz_tun): Releasing backup interface [ 109.174733][ T5827] syz_tun (unregistering): left promiscuous mode [ 109.189228][ T9434] sctp: [Deprecated]: syz.0.869 (pid 9434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.189228][ T9434] Use struct sctp_sack_info instead [ 109.578947][ T9451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.732462][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.744861][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.769190][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.776864][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.785594][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.792876][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.818915][ T9458] lo speed is unknown, defaulting to 1000 [ 109.906016][ T9458] lo speed is unknown, defaulting to 1000 [ 110.024177][ T9491] __nla_validate_parse: 20 callbacks suppressed [ 110.024197][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 110.041469][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 110.054495][ T9458] chnl_net:caif_netlink_parms(): no params data found [ 110.079833][ T9493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.886'. [ 110.136180][ T9501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.887'. [ 110.162163][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.180302][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.189267][ T9458] bridge_slave_0: entered allmulticast mode [ 110.198401][ T9458] bridge_slave_0: entered promiscuous mode [ 110.206730][ T9508] macvlan1: entered promiscuous mode [ 110.214889][ T9458] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.222966][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.230190][ T9458] bridge_slave_1: entered allmulticast mode [ 110.238957][ T9458] bridge_slave_1: entered promiscuous mode [ 110.242983][ T9510] validate_nla: 3 callbacks suppressed [ 110.243000][ T9510] netlink: 'syz.1.890': attribute type 2 has an invalid length. [ 110.259048][ T9506] macvlan1: left promiscuous mode [ 110.267248][ T9510] f: entered promiscuous mode [ 110.294627][ T9458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.308457][ T9458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.361056][ T9458] team0: Port device team_slave_0 added [ 110.376453][ T9458] team0: Port device team_slave_1 added [ 110.389831][ T9522] bond0: entered promiscuous mode [ 110.395251][ T9522] bond_slave_0: entered promiscuous mode [ 110.401064][ T9522] bond_slave_1: entered promiscuous mode [ 110.409281][ T9522] batadv0: entered promiscuous mode [ 110.415237][ T9522] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 110.426687][ T9522] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 110.437504][ T9522] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 110.478903][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.501431][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.515288][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 110.538041][ T9458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.583722][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.597429][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.624900][ T9458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.687987][ T9458] hsr_slave_0: entered promiscuous mode [ 110.701742][ T9458] hsr_slave_1: entered promiscuous mode [ 110.708035][ T9458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.715662][ T9458] Cannot create hsr debugfs directory [ 110.716833][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 110.930458][ T9561] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.058633][ T9458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.076626][ T9458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.088097][ T9458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.104782][ T9576] pim6reg: entered allmulticast mode [ 111.116307][ T9458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.139137][ T9576] pim6reg: left allmulticast mode [ 111.238017][ T9458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.255777][ T9458] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.269508][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.276607][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.289138][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.296254][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.415877][ T9458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.448340][ T9458] veth0_vlan: entered promiscuous mode [ 111.467497][ T9458] veth1_vlan: entered promiscuous mode [ 111.497619][ T9458] veth0_macvtap: entered promiscuous mode [ 111.506663][ T9458] veth1_macvtap: entered promiscuous mode [ 111.520304][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.534248][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.547078][ T9458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.561642][ T9458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.572332][ T9458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.582014][ T9458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.591438][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 111.604552][ T9610] netlink: 'syz.3.913': attribute type 18 has an invalid length. [ 111.637100][ T6069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.655027][ T6069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.678448][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.686652][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.784972][ T9616] lo speed is unknown, defaulting to 1000 [ 111.879836][ T9620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.914'. [ 111.911980][ T9616] lo speed is unknown, defaulting to 1000 [ 111.913087][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 111.967779][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.917'. [ 112.157718][ T9616] lo speed is unknown, defaulting to 1000 [ 112.181253][ T9632] netlink: 'syz.4.920': attribute type 10 has an invalid length. [ 112.192793][ T9632] veth1_macvtap: left promiscuous mode [ 112.212830][ T9632] team0: Device veth1_macvtap failed to register rx_handler [ 112.240827][ T9632] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 112.307339][ T9628] lo speed is unknown, defaulting to 1000 [ 112.322819][ T9616] lo speed is unknown, defaulting to 1000 [ 112.439661][ T9628] lo speed is unknown, defaulting to 1000 [ 112.537804][ T9653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.619197][ T9658] lo speed is unknown, defaulting to 1000 [ 112.830567][ T9661] lo speed is unknown, defaulting to 1000 [ 112.838981][ T9658] lo speed is unknown, defaulting to 1000 [ 112.956864][ T9670] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 112.972859][ T9668] IPVS: stopping backup sync thread 9670 ... [ 113.174089][ T9661] lo speed is unknown, defaulting to 1000 [ 113.716908][ T750] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.950510][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.959873][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.967588][ T9720] netlink: 'syz.0.941': attribute type 4 has an invalid length. [ 113.967889][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.978351][ T9713] lo speed is unknown, defaulting to 1000 [ 114.001056][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.009799][ T9720] infiniband s: set down [ 114.027363][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 114.035035][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.040161][ T5876] lo speed is unknown, defaulting to 1000 [ 114.070482][ T9725] netlink: 'syz.0.941': attribute type 4 has an invalid length. [ 114.090966][ T5876] lo speed is unknown, defaulting to 1000 [ 114.091816][ T9713] lo speed is unknown, defaulting to 1000 [ 114.110915][ T9725] infiniband s: set active [ 114.141041][ T9716] lo speed is unknown, defaulting to 1000 [ 114.147642][ T9592] lo speed is unknown, defaulting to 1000 [ 114.155186][ T9592] lo speed is unknown, defaulting to 1000 [ 114.233957][ T9716] lo speed is unknown, defaulting to 1000 [ 114.293180][ T9734] lo speed is unknown, defaulting to 1000 [ 114.307267][ T9739] syzkaller1: entered promiscuous mode [ 114.317712][ T9742] netlink: 'syz.1.949': attribute type 1 has an invalid length. [ 114.330099][ T9739] syzkaller1: entered allmulticast mode [ 114.349980][ T9742] bond2: entered promiscuous mode [ 114.355323][ T9742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.421581][ T9734] lo speed is unknown, defaulting to 1000 [ 114.444267][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.450954][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.484126][ T9716] chnl_net:caif_netlink_parms(): no params data found [ 114.504992][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.526957][ T9744] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 114.606275][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.627246][ T9765] xt_hashlimit: size too large, truncated to 1048576 [ 114.678687][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.726394][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.726865][ T9716] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.740758][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.749953][ T9716] bridge_slave_0: entered allmulticast mode [ 114.756880][ T9716] bridge_slave_0: entered promiscuous mode [ 114.763662][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.764164][ T9716] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.777246][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.784493][ T9716] bridge_slave_1: entered allmulticast mode [ 114.791181][ T9716] bridge_slave_1: entered promiscuous mode [ 114.811255][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.821226][ T9716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.832748][ T9716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.851392][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.901592][ T9716] team0: Port device team_slave_0 added [ 114.913013][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.921585][ T9716] team0: Port device team_slave_1 added [ 114.931112][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.947904][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.959343][ T9777] batadv1: entered promiscuous mode [ 114.965072][ T9777] batadv1: entered allmulticast mode [ 114.973517][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 114.974150][ T9716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.987646][ T9716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.014314][ T9716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.027133][ T9744] virt_wifi0 speed is unknown, defaulting to 1000 [ 115.029524][ T9716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.045421][ T9716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.048669][ T9779] __nla_validate_parse: 9 callbacks suppressed [ 115.048684][ T9779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.955'. [ 115.072356][ T9716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.140115][ T9716] hsr_slave_0: entered promiscuous mode [ 115.149953][ T9716] hsr_slave_1: entered promiscuous mode [ 115.157579][ T9716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.175074][ T9716] Cannot create hsr debugfs directory [ 115.367462][ T9802] delete_channel: no stack [ 115.379151][ T9802] netlink: 'syz.3.958': attribute type 4 has an invalid length. [ 115.391490][ T9802] netlink: 'syz.3.958': attribute type 4 has an invalid length. [ 115.734200][ T9834] veth0_to_bridge: entered promiscuous mode [ 115.748153][ T750] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.774021][ T9834] lo speed is unknown, defaulting to 1000 [ 115.797128][ T750] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.826579][ T9838] netlink: 104 bytes leftover after parsing attributes in process `syz.0.969'. [ 115.847580][ T9843] netlink: 96 bytes leftover after parsing attributes in process `syz.1.972'. [ 115.866662][ T750] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.896149][ T9834] lo speed is unknown, defaulting to 1000 [ 115.911659][ T9834] virt_wifi0 speed is unknown, defaulting to 1000 [ 115.935579][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.974'. [ 115.943828][ T9851] netlink: 'syz.1.972': attribute type 10 has an invalid length. [ 115.961073][ T9851] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 116.018418][ T9833] veth0_to_bridge: left promiscuous mode [ 116.040280][ T750] bridge_slave_1: left allmulticast mode [ 116.048655][ T750] bridge_slave_1: left promiscuous mode [ 116.057304][ T750] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.066466][ T750] bridge_slave_0: left allmulticast mode [ 116.072184][ T750] bridge_slave_0: left promiscuous mode [ 116.079302][ T750] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.122537][ T5834] Bluetooth: hci0: command tx timeout [ 116.206055][ T9868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.980'. [ 116.276305][ T750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.286977][ T750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.296506][ T750] bond0 (unregistering): Released all slaves [ 116.307450][ T9858] netlink: 288 bytes leftover after parsing attributes in process `syz.0.977'. [ 116.332613][ T9864] lo speed is unknown, defaulting to 1000 [ 116.460694][ T9864] lo speed is unknown, defaulting to 1000 [ 116.467595][ T9864] virt_wifi0 speed is unknown, defaulting to 1000 [ 116.621314][ T9893] dvmrp5: entered allmulticast mode [ 116.638737][ T9892] dvmrp5: left allmulticast mode [ 116.748820][ T750] hsr_slave_0: left promiscuous mode [ 116.783211][ T750] hsr_slave_1: left promiscuous mode [ 116.789000][ T750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.809604][ T750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.825378][ T750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.841582][ T750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.859914][ T9909] netlink: 'syz.4.993': attribute type 10 has an invalid length. [ 116.871855][ T750] veth1_macvtap: left promiscuous mode [ 116.877743][ T750] veth0_macvtap: left promiscuous mode [ 116.883923][ T750] veth1_vlan: left promiscuous mode [ 116.889220][ T750] veth0_vlan: left promiscuous mode [ 116.989504][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.996'. [ 117.006047][ T9917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.996'. [ 117.115389][ T9935] syz.4.999[9935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.115469][ T9935] syz.4.999[9935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.142057][ T9935] syz.4.999[9935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.150095][ T9938] netlink: 'syz.0.1000': attribute type 1 has an invalid length. [ 117.180938][ T9938] netlink: 'syz.0.1000': attribute type 1 has an invalid length. [ 117.212195][ T750] team0 (unregistering): Port device team_slave_1 removed [ 117.227017][ T750] team0 (unregistering): Port device team_slave_0 removed [ 117.320449][ T9945] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 117.361301][ T7896] IPVS: starting estimator thread 0... [ 117.365848][ T9716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.388967][ T9716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.416726][ T9716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.456770][ T9716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.463773][ T9953] IPVS: using max 44 ests per chain, 105600 per kthread [ 117.565242][ T9974] batadv_slave_1: entered promiscuous mode [ 117.624193][ T9716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.676060][ T9716] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.702872][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.709995][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.719057][ T9971] batadv_slave_1: left promiscuous mode [ 117.730200][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.737341][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.201927][ T9716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.212583][ T5144] Bluetooth: hci0: command tx timeout [ 118.265815][ T9716] veth0_vlan: entered promiscuous mode [ 118.275118][ T9716] veth1_vlan: entered promiscuous mode [ 118.297922][ T9716] veth0_macvtap: entered promiscuous mode [ 118.316841][ T9716] veth1_macvtap: entered promiscuous mode [ 118.340725][ T9716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.367475][ T9716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.400706][ T9716] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.424822][ T9716] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.446595][ T9716] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.466438][ T9716] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.481295][T10013] lo speed is unknown, defaulting to 1000 [ 118.605383][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.626590][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.670120][ T6069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.691253][ T6069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.722160][T10025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1014'. [ 118.838586][T10013] lo speed is unknown, defaulting to 1000 [ 118.864676][T10013] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.873843][T10035] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1016'. [ 118.908763][T10033] lo speed is unknown, defaulting to 1000 [ 119.108014][T10033] lo speed is unknown, defaulting to 1000 [ 119.144861][T10033] virt_wifi0 speed is unknown, defaulting to 1000 [ 119.593069][T10055] lo speed is unknown, defaulting to 1000 [ 119.845012][T10055] lo speed is unknown, defaulting to 1000 [ 119.874596][T10055] virt_wifi0 speed is unknown, defaulting to 1000 [ 119.881182][T10062] lo speed is unknown, defaulting to 1000 [ 119.906027][T10075] syzkaller0: entered promiscuous mode [ 119.911640][T10075] syzkaller0: entered allmulticast mode [ 120.036601][T10062] lo speed is unknown, defaulting to 1000 [ 120.063131][T10062] virt_wifi0 speed is unknown, defaulting to 1000 [ 120.285928][ T5144] Bluetooth: hci0: command 0x040f tx timeout [ 120.461973][T10119] __nla_validate_parse: 2 callbacks suppressed [ 120.461992][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 120.714325][T10138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1044'. [ 121.279263][T10150] tipc: Enabled bearer , priority 10 [ 121.370624][T10155] netlink: 'syz.1.1050': attribute type 29 has an invalid length. [ 121.463487][ T6055] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.507855][ T6055] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.586277][ T6055] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.640576][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 121.656727][ T6055] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.660360][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 121.701499][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1054'. [ 121.758879][T10164] lo speed is unknown, defaulting to 1000 [ 121.800986][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.817348][ T6055] bridge_slave_1: left allmulticast mode [ 121.824419][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.833138][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.840678][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.850506][ T5144] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.872288][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.881596][ T6055] bridge_slave_1: left promiscuous mode [ 121.929489][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.946092][ T6055] bridge_slave_0: left allmulticast mode [ 121.951787][ T6055] bridge_slave_0: left promiscuous mode [ 121.957873][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.078407][T10193] ebt_among: dst integrity fail: 200 [ 122.116975][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 122.134852][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.145474][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.155107][ T6055] bond0 (unregistering): Released all slaves [ 122.164317][T10164] lo speed is unknown, defaulting to 1000 [ 122.177492][T10196] macsec1: entered promiscuous mode [ 122.183017][T10196] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 122.201136][T10164] virt_wifi0 speed is unknown, defaulting to 1000 [ 122.207667][T10169] lo speed is unknown, defaulting to 1000 [ 122.272632][ T8768] tipc: Node number set to 3877896310 [ 122.393359][T10169] lo speed is unknown, defaulting to 1000 [ 122.399809][T10169] virt_wifi0 speed is unknown, defaulting to 1000 [ 122.466578][T10217] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 122.470006][T10218] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1070'. [ 122.477927][T10217] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 122.563921][T10217] tipc: Enabled bearer , priority 0 [ 122.644396][T10221] "syz.0.1071" (10221) uses obsolete ecb(arc4) skcipher [ 122.658829][T10217] syzkaller0: entered promiscuous mode [ 122.664498][T10217] syzkaller0: entered allmulticast mode [ 122.670415][T10217] tipc: Resetting bearer [ 122.679762][T10169] chnl_net:caif_netlink_parms(): no params data found [ 122.699000][ T6055] hsr_slave_0: left promiscuous mode [ 122.705629][ T6055] hsr_slave_1: left promiscuous mode [ 122.711223][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.719262][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.726976][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.734497][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.743779][ T6055] veth1_macvtap: left promiscuous mode [ 122.749348][ T6055] veth0_macvtap: left promiscuous mode [ 122.755128][ T6055] veth1_vlan: left promiscuous mode [ 122.760379][ T6055] veth0_vlan: left promiscuous mode [ 122.810344][T10211] tipc: Resetting bearer [ 122.854282][T10211] tipc: Disabling bearer [ 122.961840][ T6055] team0 (unregistering): Port device team_slave_1 removed [ 122.976864][ T6055] team0 (unregistering): Port device team_slave_0 removed [ 123.026666][T10224] lo speed is unknown, defaulting to 1000 [ 123.110929][T10169] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.137864][T10169] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.152638][T10169] bridge_slave_0: entered allmulticast mode [ 123.163360][T10169] bridge_slave_0: entered promiscuous mode [ 123.196863][T10169] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.209987][T10169] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.220459][T10169] bridge_slave_1: entered allmulticast mode [ 123.227935][T10169] bridge_slave_1: entered promiscuous mode [ 123.234503][T10224] lo speed is unknown, defaulting to 1000 [ 123.241609][T10224] virt_wifi0 speed is unknown, defaulting to 1000 [ 123.277530][T10169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.287127][T10261] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1075'. [ 123.317751][T10169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.384881][T10169] team0: Port device team_slave_0 added [ 123.441870][T10169] team0: Port device team_slave_1 added [ 123.522321][T10169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.530053][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.556322][T10169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.604355][T10284] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 123.626645][T10169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.643839][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.672102][T10169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.709809][T10169] hsr_slave_0: entered promiscuous mode [ 123.716153][T10169] hsr_slave_1: entered promiscuous mode [ 123.722177][T10169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.733360][T10169] Cannot create hsr debugfs directory [ 123.745779][T10296] pimreg: entered allmulticast mode [ 123.771541][T10296] pimreg: left allmulticast mode [ 123.886332][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 123.948922][T10306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.955996][T10306] bridge0: port 2(bond3) entered blocking state [ 123.962346][T10306] bridge0: port 2(bond3) entered disabled state [ 123.962707][ T5144] Bluetooth: hci0: command tx timeout [ 123.976544][T10306] bond3: entered allmulticast mode [ 123.983582][T10306] bond3: entered promiscuous mode [ 123.988869][T10306] bridge0: port 2(bond3) entered blocking state [ 123.995188][T10306] bridge0: port 2(bond3) entered forwarding state [ 124.027772][T10309] netlink: 'syz.1.1094': attribute type 9 has an invalid length. [ 124.036069][T10309] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1094'. [ 124.239098][T10169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.247588][T10169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.255832][T10169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.265504][T10169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.284309][ T6067] bridge0: port 2(bond3) entered disabled state [ 124.331215][T10169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.346349][T10169] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.356362][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.363488][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.376097][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.383286][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.485695][T10169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.498744][T10325] netlink: 'syz.3.1097': attribute type 5 has an invalid length. [ 124.527154][T10169] veth0_vlan: entered promiscuous mode [ 124.538351][T10169] veth1_vlan: entered promiscuous mode [ 124.569135][T10169] veth0_macvtap: entered promiscuous mode [ 124.589503][T10169] veth1_macvtap: entered promiscuous mode [ 124.618122][T10169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.645352][T10169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.666507][T10169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.685754][T10169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.694592][T10169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.703362][T10169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.754974][T10336] bond7 (unregistering): Released all slaves [ 124.820650][ T6067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.846292][ T6067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.878799][ T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.894990][ T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.961760][T10346] lo speed is unknown, defaulting to 1000 [ 125.057276][T10354] netlink: 'syz.4.1106': attribute type 4 has an invalid length. [ 125.485435][T10346] lo speed is unknown, defaulting to 1000 [ 125.523155][T10346] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.616700][T10366] netlink: 'syz.1.1111': attribute type 11 has an invalid length. [ 125.763204][T10372] __nla_validate_parse: 40 callbacks suppressed [ 125.763231][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 126.193748][T10386] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 126.418719][T10385] lo speed is unknown, defaulting to 1000 [ 127.558448][T10385] lo speed is unknown, defaulting to 1000 [ 127.573814][T10385] virt_wifi0 speed is unknown, defaulting to 1000 [ 127.824191][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1124'. [ 127.846582][T10417] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1124'. [ 127.868389][T10417] tipc: Invalid UDP bearer configuration [ 127.868425][T10417] tipc: Enabling of bearer rejected, failed to enable media [ 127.893310][T10420] lo speed is unknown, defaulting to 1000 [ 128.021750][T10429] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1128'. [ 128.158636][T10433] xt_bpf: check failed: parse error [ 128.185278][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1130'. [ 128.353736][T10424] lo speed is unknown, defaulting to 1000 [ 128.370095][T10420] lo speed is unknown, defaulting to 1000 [ 128.399090][T10420] virt_wifi0 speed is unknown, defaulting to 1000 [ 128.947740][T10424] lo speed is unknown, defaulting to 1000 [ 129.014571][T10424] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.024264][T10447] batadv_slave_1: entered promiscuous mode [ 129.042325][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 129.240296][T10435] infiniband syz1: set down [ 129.249258][T10435] infiniband syz1: added bond_slave_1 [ 129.261103][T10435] syz1: rxe_create_cq: returned err = -12 [ 129.274943][T10435] infiniband syz1: Couldn't create ib_mad CQ [ 129.294325][T10435] infiniband syz1: Couldn't open port 1 [ 129.330748][T10435] RDS/IB: syz1: added [ 129.340214][T10435] smc: adding ib device syz1 with port count 1 [ 129.356732][T10435] smc: ib device syz1 port 1 has pnetid [ 129.444573][T10456] netlink: 'syz.0.1137': attribute type 4 has an invalid length. [ 129.498090][T10457] netlink: 'syz.0.1137': attribute type 4 has an invalid length. [ 130.949978][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.958287][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.966303][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.975038][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.984586][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.991824][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.805178][T10456] infiniband s: set down [ 131.811555][T10457] infiniband s: set active [ 131.827872][ T7896] lo speed is unknown, defaulting to 1000 [ 131.838195][ T9591] lo speed is unknown, defaulting to 1000 [ 131.854895][ T7896] lo speed is unknown, defaulting to 1000 [ 132.139477][T10476] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.147753][T10476] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.155957][T10476] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.164197][T10476] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.394835][T10503] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1146'. [ 132.420812][T10503] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1146'. [ 132.444613][T10503] openvswitch: netlink: IP tunnel dst address not specified [ 132.714402][T10528] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 132.739370][T10528] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 132.750406][T10462] lo speed is unknown, defaulting to 1000 [ 133.005883][ T5144] Bluetooth: hci0: command tx timeout [ 133.011735][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.029248][T10508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.045674][T10462] lo speed is unknown, defaulting to 1000 [ 133.054509][T10462] virt_wifi0 speed is unknown, defaulting to 1000 [ 133.150920][T10508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.257121][T10462] chnl_net:caif_netlink_parms(): no params data found [ 133.296621][T10508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.366050][T10462] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.374282][T10462] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.381555][T10462] bridge_slave_0: entered allmulticast mode [ 133.388516][T10462] bridge_slave_0: entered promiscuous mode [ 133.401054][T10508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.419363][T10462] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.426592][T10462] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.432031][T10552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'. [ 133.433845][T10462] bridge_slave_1: entered allmulticast mode [ 133.444569][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1153'. [ 133.449539][T10462] bridge_slave_1: entered promiscuous mode [ 133.473387][T10553] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 133.492817][T10550] geneve3: entered promiscuous mode [ 133.498164][T10550] geneve3: entered allmulticast mode [ 133.511656][T10462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.526190][T10462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.674373][T10462] team0: Port device team_slave_0 added [ 133.680371][T10508] bridge_slave_1: left allmulticast mode [ 133.686708][T10508] bridge_slave_1: left promiscuous mode [ 133.692344][T10508] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.700575][T10508] bridge_slave_0: left allmulticast mode [ 133.708037][T10508] bridge_slave_0: left promiscuous mode [ 133.714061][T10508] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.740814][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 133.747729][T10561] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1157'. [ 133.761599][T10462] team0: Port device team_slave_1 added [ 133.799660][T10572] netlink: 'syz.3.1159': attribute type 1 has an invalid length. [ 133.888507][T10508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.899093][T10508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.908700][T10508] bond0 (unregistering): Released all slaves [ 133.924620][T10561] netlink: 'syz.4.1157': attribute type 1 has an invalid length. [ 133.934308][T10561] netlink: 'syz.4.1157': attribute type 2 has an invalid length. [ 134.028209][T10462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.041439][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.073057][T10462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.109803][T10462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.122011][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.130131][T10594] netlink: 'syz.3.1165': attribute type 10 has an invalid length. [ 134.163714][T10462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.176489][T10592] IPVS: Unknown mcast interface: veth [ 134.272232][T10600] lo speed is unknown, defaulting to 1000 [ 134.312142][T10462] hsr_slave_0: entered promiscuous mode [ 134.328567][T10611] Bluetooth: MGMT ver 1.23 [ 134.336081][T10462] hsr_slave_1: entered promiscuous mode [ 134.349470][T10462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.366068][T10462] Cannot create hsr debugfs directory [ 134.745335][T10600] lo speed is unknown, defaulting to 1000 [ 134.777594][T10606] lo speed is unknown, defaulting to 1000 [ 134.846313][T10600] virt_wifi0 speed is unknown, defaulting to 1000 [ 134.901607][T10623] batadv_slave_1: entered promiscuous mode [ 135.080904][T10631] vlan2: entered promiscuous mode [ 135.086241][ T5144] Bluetooth: hci0: command 0x041b tx timeout [ 135.105915][T10631] macvtap0: entered promiscuous mode [ 137.162659][ T5144] Bluetooth: hci0: command 0x041b tx timeout [ 137.170652][ T5834] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 139.242605][ T5834] Bluetooth: hci0: command 0x041b tx timeout [ 141.322601][ T5834] Bluetooth: hci0: command 0x041b tx timeout [ 143.402531][ T5834] Bluetooth: hci0: command 0x041b tx timeout [ 149.733637][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.740971][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.751217][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.759047][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.768432][ T5144] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.775679][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.838597][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.846226][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.855603][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.864268][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.871646][ T5833] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.880803][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.888848][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.898034][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.906365][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.915825][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.928407][ T5833] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.937568][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.750139][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 151.758441][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 151.767818][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 151.776536][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 151.784998][ T5833] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 151.792210][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 151.814809][ T5834] Bluetooth: hci5: command tx timeout [ 153.002669][ T5833] Bluetooth: hci7: command tx timeout [ 153.009038][ T5834] Bluetooth: hci6: command tx timeout [ 153.882756][ T5833] Bluetooth: hci8: command tx timeout [ 153.889316][ T5834] Bluetooth: hci5: command tx timeout [ 155.082784][ T5834] Bluetooth: hci6: command tx timeout [ 155.088228][ T5834] Bluetooth: hci7: command tx timeout [ 155.964429][ T5833] Bluetooth: hci8: command tx timeout [ 155.970941][ T5834] Bluetooth: hci5: command tx timeout [ 157.176361][ T5834] Bluetooth: hci7: command tx timeout [ 157.181798][ T5834] Bluetooth: hci6: command tx timeout [ 158.046076][ T5833] Bluetooth: hci5: command tx timeout [ 158.051510][ T5833] Bluetooth: hci8: command tx timeout [ 159.242519][ T5834] Bluetooth: hci7: command tx timeout [ 159.248336][ T5833] Bluetooth: hci6: command tx timeout [ 160.122575][ T5833] Bluetooth: hci8: command tx timeout [ 167.808333][ C0] sched: DL replenish lagged too much [ 181.169473][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 181.175667][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 181.181692][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 192.428235][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 192.437302][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 192.444893][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 192.454033][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 192.461389][ T5834] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 192.470037][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 194.458192][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.522904][ T5834] Bluetooth: hci9: command tx timeout [ 196.602535][ T5834] Bluetooth: hci9: command tx timeout [ 198.682503][ T5834] Bluetooth: hci9: command tx timeout [ 200.762582][ T5834] Bluetooth: hci9: command tx timeout [ 210.989043][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 210.998276][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 211.005701][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 211.015322][ T5833] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 211.023998][ T5833] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 211.031287][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 211.747122][ T5834] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 211.760539][ T5834] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 211.793175][ T5834] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 211.826538][ T5834] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 211.846751][ T5834] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 211.870197][ T5834] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 211.903603][T10666] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 211.910882][T10666] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 211.920143][T10666] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 211.928101][T10666] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 211.937477][T10666] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 211.946352][T10666] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 212.826479][ T5833] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 212.835948][ T5833] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 212.843440][ T5833] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 212.851075][ T5833] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 212.861575][ T5833] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 212.868952][ T5833] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 213.082567][ T5833] Bluetooth: hci10: command tx timeout [ 213.962493][ T5833] Bluetooth: hci12: command tx timeout [ 213.968014][ T5833] Bluetooth: hci11: command tx timeout [ 214.922539][ T5833] Bluetooth: hci13: command tx timeout [ 215.162560][ T5833] Bluetooth: hci10: command tx timeout [ 216.042607][T10666] Bluetooth: hci12: command tx timeout [ 216.049169][ T5833] Bluetooth: hci11: command tx timeout [ 217.004386][ T5833] Bluetooth: hci13: command tx timeout [ 217.242589][ T5833] Bluetooth: hci10: command tx timeout [ 218.122550][T10666] Bluetooth: hci12: command tx timeout [ 218.128595][ T5833] Bluetooth: hci11: command tx timeout [ 219.082540][ T5833] Bluetooth: hci13: command tx timeout [ 219.323420][ T5833] Bluetooth: hci10: command tx timeout [ 220.202502][ T5833] Bluetooth: hci11: command tx timeout [ 220.208039][ T5833] Bluetooth: hci12: command tx timeout [ 221.162541][ T5833] Bluetooth: hci13: command tx timeout [ 253.559004][T10666] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 253.568727][T10666] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 253.576140][T10666] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 253.585787][T10666] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 253.594400][T10666] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 253.601667][T10666] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 255.642510][T10666] Bluetooth: hci14: command tx timeout [ 255.886688][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.722602][ T5836] Bluetooth: hci14: command tx timeout [ 257.969116][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 257.975308][ T5836] Bluetooth: hci0: command 0x041b tx timeout [ 259.802517][ T5833] Bluetooth: hci14: command tx timeout [ 261.882476][ T5833] Bluetooth: hci14: command tx timeout [ 271.103971][T10666] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 271.111313][T10666] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 271.120523][T10666] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 271.129280][T10666] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 271.138670][T10666] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 271.146314][T10666] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 271.763383][ T5836] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 271.770688][ T5836] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 271.779935][ T5836] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 271.787640][ T5836] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 271.797959][ T5836] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 271.809005][ T5836] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 272.248997][ T5144] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 272.258265][ T5144] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 272.266749][ T5144] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 272.276686][ T5144] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 272.284220][ T5144] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 272.291484][ T5144] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 273.162655][ T5144] Bluetooth: hci15: command tx timeout [ 273.327447][ T5836] Bluetooth: hci7: command 0x0406 tx timeout [ 273.333543][ T5830] Bluetooth: hci6: command 0x0406 tx timeout [ 273.339568][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 273.351033][ T5836] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 273.358498][ T5836] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 273.369528][ T5833] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 273.377293][ T5833] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 273.386696][ T5833] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 273.394032][ T5833] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 273.882771][ T5833] Bluetooth: hci16: command tx timeout [ 274.365314][ T5833] Bluetooth: hci17: command tx timeout [ 275.242584][ T5833] Bluetooth: hci15: command tx timeout [ 275.402568][ T5833] Bluetooth: hci18: command tx timeout [ 275.962753][ T5833] Bluetooth: hci16: command tx timeout [ 276.442495][ T5833] Bluetooth: hci17: command tx timeout [ 277.322480][ T5833] Bluetooth: hci15: command tx timeout [ 277.492520][ T5833] Bluetooth: hci18: command tx timeout [ 278.042766][ T5833] Bluetooth: hci16: command tx timeout [ 278.443862][ T5833] Bluetooth: hci8: command 0x0406 tx timeout [ 278.522464][ T5144] Bluetooth: hci17: command tx timeout [ 279.402527][ T5144] Bluetooth: hci15: command tx timeout [ 279.562628][ T5144] Bluetooth: hci18: command tx timeout [ 279.572686][ T30] INFO: task syz-executor:10462 blocked for more than 143 seconds. [ 279.580620][ T30] Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 279.593169][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.602063][ T30] task:syz-executor state:D stack:21520 pid:10462 tgid:10462 ppid:1 flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 279.614662][ T30] Call Trace: [ 279.622423][ T30] [ 279.625433][ T30] __schedule+0x1850/0x4c30 [ 279.629976][ T30] ? kasan_save_stack+0x3f/0x60 [ 279.661630][ T30] ? __kasan_record_aux_stack+0xac/0xc0 [ 279.752692][ T30] ? schedule+0x90/0x320 [ 279.757018][ T30] ? lock_release+0xbf/0xa30 [ 279.761630][ T30] ? __pfx___schedule+0x10/0x10 [ 279.784342][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.789414][ T30] ? rcu_is_watching+0x15/0xb0 [ 279.812768][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.818710][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 279.834607][ T30] ? schedule+0x90/0x320 [ 279.838884][ T30] schedule+0x14b/0x320 [ 279.852536][ T30] schedule_preempt_disabled+0x13/0x30 [ 279.858050][ T30] __mutex_lock+0x7e7/0xee0 [ 279.872561][ T30] ? __mutex_lock+0x5ef/0xee0 [ 279.877291][ T30] ? nsim_destroy+0xa4/0x620 [ 279.881901][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 279.914421][ T30] ? mntput_no_expire+0x2da/0x850 [ 279.919484][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 279.931262][ T30] ? _raw_spin_unlock+0x28/0x50 [ 279.962618][ T30] ? simple_release_fs+0x9c/0xd0 [ 279.967605][ T30] nsim_destroy+0xa4/0x620 [ 279.972035][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 280.020463][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 280.032620][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 280.038117][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 280.094359][ T30] nsim_drv_remove+0x58/0x160 [ 280.099102][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 280.126139][ T5144] Bluetooth: hci16: command tx timeout [ 280.131677][ T30] bus_remove_device+0x34f/0x420 [ 280.136809][ T30] device_del+0x57a/0x9b0 [ 280.141163][ T30] ? __pfx_device_del+0x10/0x10 [ 280.153934][ T30] ? kernfs_fop_write_iter+0x1ea/0x500 [ 280.159443][ T30] device_unregister+0x20/0xc0 [ 280.166426][ T30] del_device_store+0x363/0x480 [ 280.171316][ T30] ? __pfx_del_device_store+0x10/0x10 [ 280.176811][ T30] ? __virt_addr_valid+0x45f/0x530 [ 280.181941][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 280.188697][ T30] ? bus_attr_store+0x4f/0xb0 [ 280.193460][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 280.198672][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 280.206023][ T30] vfs_write+0xaeb/0xd30 [ 280.210295][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 280.216219][ T30] ? __pfx_vfs_write+0x10/0x10 [ 280.221003][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 280.227962][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 280.233302][ T30] ksys_write+0x18f/0x2b0 [ 280.237650][ T30] ? __pfx_ksys_write+0x10/0x10 [ 280.252213][ T30] ? rcu_is_watching+0x15/0xb0 [ 280.259850][ T30] ? rcu_is_watching+0x15/0xb0 [ 280.272729][ T30] do_syscall_64+0xf3/0x230 [ 280.277277][ T30] ? clear_bhb_loop+0x35/0x90 [ 280.281967][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.293629][ T30] RIP: 0033:0x7f511df847df [ 280.298085][ T30] RSP: 002b:00007ffeb73a6ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 280.307226][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f511df847df [ 280.316531][ T30] RDX: 0000000000000001 RSI: 00007ffeb73a6f40 RDI: 0000000000000005 [ 280.325299][ T30] RBP: 00007f511e002d15 R08: 0000000000000000 R09: 00007ffeb73a6d47 [ 280.334750][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 280.343549][ T30] R13: 00007ffeb73a6f40 R14: 00007f511eca4620 R15: 0000000000000003 [ 280.351554][ T30] [ 280.355918][ T30] INFO: task syz.1.1167:10600 blocked for more than 144 seconds. [ 280.364582][ T30] Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 280.372231][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.382229][ T30] task:syz.1.1167 state:D stack:25232 pid:10600 tgid:10599 ppid:5840 flags:0x00004006 [ 280.396515][ T30] Call Trace: [ 280.405349][ T30] [ 280.408309][ T30] __schedule+0x1850/0x4c30 [ 280.414794][ T30] ? schedule+0x90/0x320 [ 280.419067][ T30] ? lock_release+0xbf/0xa30 [ 280.423709][ T30] ? __pfx___schedule+0x10/0x10 [ 280.428577][ T30] ? __pfx_lock_release+0x10/0x10 [ 280.435893][ T30] ? rcu_is_watching+0x15/0xb0 [ 280.440688][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 280.446766][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.455161][ T30] ? schedule+0x90/0x320 [ 280.459436][ T30] schedule+0x14b/0x320 [ 280.463644][ T30] schedule_preempt_disabled+0x13/0x30 [ 280.469115][ T30] __mutex_lock+0x7e7/0xee0 [ 280.475670][ T30] ? __mutex_lock+0x5ef/0xee0 [ 280.480375][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 280.485662][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 280.490713][ T30] ? read_word_at_a_time+0xe/0x20 [ 280.497769][ T30] ? sized_strscpy+0x9a/0x2b0 [ 280.502546][ T30] ip_tunnel_init_net+0x20e/0x720 [ 280.507592][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 280.515407][ T30] ? rcu_is_watching+0x15/0xb0 [ 280.520206][ T30] ? trace_kmalloc+0x1f/0xd0 [ 280.524887][ T30] ? __kmalloc_noprof+0x2a5/0x4c0 [ 280.529927][ T30] ? ops_init+0x75/0x590 [ 280.536160][ T30] ops_init+0x31e/0x590 [ 280.540347][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 280.545756][ T30] setup_net+0x287/0x9e0 [ 280.550011][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 280.557605][ T30] ? __pfx_setup_net+0x10/0x10 [ 280.562466][ T30] copy_net_ns+0x33f/0x570 [ 280.566896][ T30] create_new_namespaces+0x425/0x7b0 [ 280.572214][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 280.579961][ T30] ksys_unshare+0x57d/0xa70 [ 280.584635][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 280.589676][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.598016][ T30] ? rcu_is_watching+0x15/0xb0 [ 280.602881][ T5144] Bluetooth: hci17: command tx timeout [ 280.608376][ T30] __x64_sys_unshare+0x38/0x40 [ 280.615130][ T30] do_syscall_64+0xf3/0x230 [ 280.619664][ T30] ? clear_bhb_loop+0x35/0x90 [ 280.624633][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.630551][ T30] RIP: 0033:0x7f0ffed85d29 [ 280.636962][ T30] RSP: 002b:00007f0fffc66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 280.645463][ T30] RAX: ffffffffffffffda RBX: 00007f0ffef75fa0 RCX: 00007f0ffed85d29 [ 280.655442][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 280.663557][ T30] RBP: 00007f0ffee01b08 R08: 0000000000000000 R09: 0000000000000000 [ 280.671545][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.681547][ T30] R13: 0000000000000001 R14: 00007f0ffef75fa0 R15: 00007fff858df288 [ 280.689616][ T30] [ 280.694710][ T30] INFO: task syz.1.1167:10606 blocked for more than 144 seconds. [ 280.702474][ T30] Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 280.710110][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.720725][ T30] task:syz.1.1167 state:D stack:25328 pid:10606 tgid:10599 ppid:5840 flags:0x00004006 [ 280.731099][ T30] Call Trace: [ 280.736545][ T30] [ 280.739499][ T30] __schedule+0x1850/0x4c30 [ 280.744044][ T30] ? schedule+0x90/0x320 [ 280.748306][ T30] ? lock_release+0xbf/0xa30 [ 280.754841][ T30] ? __pfx___schedule+0x10/0x10 [ 280.759717][ T30] ? __pfx_lock_release+0x10/0x10 [ 280.764821][ T30] ? rcu_is_watching+0x15/0xb0 [ 280.769603][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 280.775691][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.782038][ T30] ? schedule+0x90/0x320 [ 280.786374][ T30] schedule+0x14b/0x320 [ 280.790546][ T30] schedule_preempt_disabled+0x13/0x30 [ 280.796041][ T30] __mutex_lock+0x7e7/0xee0 [ 280.800565][ T30] ? __mutex_lock+0x5ef/0xee0 [ 280.805436][ T30] ? ib_get_eth_speed+0x153/0x800 [ 280.810487][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 280.815583][ T30] ? _raw_spin_unlock+0x28/0x50 [ 280.820448][ T30] ? ib_device_get_netdev+0x229/0x2f0 [ 280.825926][ T30] ib_get_eth_speed+0x153/0x800 [ 280.830798][ T30] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 280.836278][ T30] ? _raw_spin_unlock+0x28/0x50 [ 280.841145][ T30] siw_query_port+0x3c/0x480 [ 280.846339][ T30] ib_setup_port_attrs+0x299/0x2440 [ 280.851708][ T30] ? rcu_is_watching+0x15/0xb0 [ 280.856586][ T30] ? lock_acquire+0xe3/0x550 [ 280.861199][ T30] ? lock_release+0xbf/0xa30 [ 280.865856][ T30] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 280.871499][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.877590][ T30] ? device_add+0x460/0xbf0 [ 280.882107][ T30] add_one_compat_dev+0x51a/0x710 [ 280.887233][ T30] rdma_dev_init_net+0x1f1/0x280 [ 280.892201][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 280.897857][ T30] ? rcu_is_watching+0x15/0xb0 [ 280.902681][ T30] ? trace_kmalloc+0x1f/0xd0 [ 280.907290][ T30] ? __kmalloc_noprof+0x2a5/0x4c0 [ 280.912332][ T30] ? ops_init+0x75/0x590 [ 280.916834][ T30] ops_init+0x31e/0x590 [ 280.921009][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 280.926463][ T30] setup_net+0x287/0x9e0 [ 280.930719][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 280.936412][ T30] ? __pfx_setup_net+0x10/0x10 [ 280.941198][ T30] copy_net_ns+0x33f/0x570 [ 280.947788][ T30] create_new_namespaces+0x425/0x7b0 [ 280.953490][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 280.959233][ T30] ksys_unshare+0x57d/0xa70 [ 280.965673][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 280.970720][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.977206][ T30] ? rcu_is_watching+0x15/0xb0 [ 280.982002][ T30] __x64_sys_unshare+0x38/0x40 [ 280.999911][ T30] do_syscall_64+0xf3/0x230 [ 281.004652][ T30] ? clear_bhb_loop+0x35/0x90 [ 281.009381][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.017235][ T30] RIP: 0033:0x7f0ffed85d29 [ 281.021672][ T30] RSP: 002b:00007f0fffc45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 281.030295][ T30] RAX: ffffffffffffffda RBX: 00007f0ffef76080 RCX: 00007f0ffed85d29 [ 281.040244][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000080 [ 281.048300][ T30] RBP: 00007f0ffee01b08 R08: 0000000000000000 R09: 0000000000000000 [ 281.058235][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.066541][ T30] R13: 0000000000000001 R14: 00007f0ffef76080 R15: 00007fff858df288 [ 281.076462][ T30] [ 281.079540][ T30] INFO: task syz.0.1177:10645 blocked for more than 144 seconds. [ 281.087836][ T30] Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 281.097425][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.109839][ T30] task:syz.0.1177 state:D stack:27536 pid:10645 tgid:10639 ppid:5839 flags:0x00000004 [ 281.122087][ T30] Call Trace: [ 281.125473][ T30] [ 281.128417][ T30] __schedule+0x1850/0x4c30 [ 281.134948][ T30] ? schedule+0x90/0x320 [ 281.139217][ T30] ? lock_release+0xbf/0xa30 [ 281.143875][ T30] ? __pfx___schedule+0x10/0x10 [ 281.148744][ T30] ? __pfx_lock_release+0x10/0x10 [ 281.155931][ T30] ? rcu_is_watching+0x15/0xb0 [ 281.160733][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 281.170079][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.178592][ T30] ? schedule+0x90/0x320 [ 281.182916][ T30] schedule+0x14b/0x320 [ 281.187090][ T30] schedule_preempt_disabled+0x13/0x30 [ 281.194477][ T30] __mutex_lock+0x7e7/0xee0 [ 281.199010][ T30] ? __mutex_lock+0x5ef/0xee0 [ 281.203777][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.208909][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 281.215913][ T30] ? bpf_lsm_capable+0x9/0x10 [ 281.220613][ T30] ? security_capable+0x7e/0x2d0 [ 281.225730][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.230686][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 281.237698][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.243398][ T30] ? ref_tracker_free+0x643/0x7e0 [ 281.248445][ T30] netlink_rcv_skb+0x1e3/0x430 [ 281.255130][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.260621][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.265990][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.271212][ T30] netlink_unicast+0x7f6/0x990 [ 281.277917][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 281.283557][ T30] ? __virt_addr_valid+0x45f/0x530 [ 281.288692][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 281.295661][ T30] ? __check_object_size+0x47a/0x730 [ 281.300970][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 281.305805][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.311111][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 281.317954][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.325769][ T30] __sock_sendmsg+0x221/0x270 [ 281.330469][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 281.340867][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.346238][ T30] ? __fget_files+0x2a/0x410 [ 281.350847][ T30] ? __fget_files+0x2a/0x410 [ 281.368631][ T30] __sys_sendmsg+0x269/0x350 [ 281.373692][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.378822][ T30] ? lock_release+0xbf/0xa30 [ 281.385043][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.391389][ T30] ? rcu_is_watching+0x15/0xb0 [ 281.396809][ T30] ? rcu_is_watching+0x15/0xb0 [ 281.401597][ T30] do_syscall_64+0xf3/0x230 [ 281.408474][ T30] ? clear_bhb_loop+0x35/0x90 [ 281.413578][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.419500][ T30] RIP: 0033:0x7f8a55785d29 [ 281.425523][ T30] RSP: 002b:00007f8a564e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.434373][ T30] RAX: ffffffffffffffda RBX: 00007f8a55976080 RCX: 00007f8a55785d29 [ 281.444023][ T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000b [ 281.452011][ T30] RBP: 00007f8a55801b08 R08: 0000000000000000 R09: 0000000000000000 [ 281.460712][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.470416][ T30] R13: 0000000000000000 R14: 00007f8a55976080 R15: 00007ffdd7804d38 [ 281.478810][ T30] [ 281.481891][ T30] INFO: task syz.4.1178:10642 blocked for more than 145 seconds. [ 281.491715][ T30] Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 281.499796][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.510233][ T30] task:syz.4.1178 state:D stack:23632 pid:10642 tgid:10641 ppid:5831 flags:0x00004004 [ 281.520956][ T30] Call Trace: [ 281.525836][ T30] [ 281.528782][ T30] __schedule+0x1850/0x4c30 [ 281.533724][ T30] ? schedule+0x90/0x320 [ 281.537985][ T30] ? lock_release+0xbf/0xa30 [ 281.544176][ T30] ? __pfx___schedule+0x10/0x10 [ 281.552149][ T30] ? __pfx_lock_release+0x10/0x10 [ 281.557657][ T30] ? rcu_is_watching+0x15/0xb0 [ 281.564056][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 281.569978][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.576808][ T30] ? schedule+0x90/0x320 [ 281.581071][ T30] schedule+0x14b/0x320 [ 281.586909][ T30] schedule_preempt_disabled+0x13/0x30 [ 281.592814][ T30] __mutex_lock+0x7e7/0xee0 [ 281.597338][ T30] ? __mutex_lock+0x5ef/0xee0 [ 281.602027][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 281.609805][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 281.615283][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 281.621288][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 281.629098][ T30] wiphy_register+0x1be5/0x27b0 [ 281.634411][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 281.639635][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 281.646364][ T5144] Bluetooth: hci18: command tx timeout [ 281.651862][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 281.658391][ T30] ieee80211_register_hw+0x30fb/0x3e10 [ 281.665509][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.671864][ T30] ? ieee80211_register_hw+0x1551/0x3e10 [ 281.677919][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 281.685404][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 281.691233][ T30] ? __asan_memset+0x23/0x50 [ 281.696275][ T30] ? __hrtimer_init+0x170/0x250 [ 281.701155][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 281.708470][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 281.714996][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 281.720148][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 281.727505][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 281.733757][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 281.740120][ T30] genl_rcv_msg+0xb14/0xec0 [ 281.746197][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.751236][ T30] ? stack_trace_save+0x118/0x1d0 [ 281.756764][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 281.762158][ T30] ? stack_depot_save_flags+0x37/0x940 [ 281.769241][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 281.774755][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 281.780324][ T30] ? __pfx___might_resched+0x10/0x10 [ 281.787253][ T30] ? rcu_is_watching+0x15/0xb0 [ 281.792045][ T30] ? lock_acquire+0xe3/0x550 [ 281.797189][ T30] netlink_rcv_skb+0x1e3/0x430 [ 281.801976][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.808685][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.814455][ T30] ? lock_release+0xbf/0xa30 [ 281.819072][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 281.826129][ T30] ? net_generic+0x1f/0x240 [ 281.830656][ T30] genl_rcv+0x28/0x40 [ 281.835121][ T30] netlink_unicast+0x7f6/0x990 [ 281.839912][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 281.847119][ T30] ? __virt_addr_valid+0x45f/0x530 [ 281.852260][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 281.857827][ T30] ? __check_object_size+0x47a/0x730 [ 281.864682][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 281.869473][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.875204][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 281.880169][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.887164][ T30] __sock_sendmsg+0x221/0x270 [ 281.891863][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 281.909673][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.915078][ T30] ? __fget_files+0x2a/0x410 [ 281.919707][ T30] ? __fget_files+0x2a/0x410 [ 281.926346][ T30] __sys_sendmsg+0x269/0x350 [ 281.930966][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.936232][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.944473][ T30] ? rcu_is_watching+0x15/0xb0 [ 281.949267][ T30] ? rcu_is_watching+0x15/0xb0 [ 281.954375][ T30] do_syscall_64+0xf3/0x230 [ 281.958905][ T30] ? clear_bhb_loop+0x35/0x90 [ 281.965872][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.971797][ T30] RIP: 0033:0x7f368c785d29 [ 281.976337][ T30] RSP: 002b:00007f368d52d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.986710][ T30] RAX: ffffffffffffffda RBX: 00007f368c975fa0 RCX: 00007f368c785d29 [ 281.994847][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 282.004749][ T30] RBP: 00007f368c801b08 R08: 0000000000000000 R09: 0000000000000000 [ 282.012903][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.020894][ T30] R13: 0000000000000000 R14: 00007f368c975fa0 R15: 00007ffc75781f18 [ 282.030914][ T30] [ 282.034059][ T30] INFO: task syz.4.1178:10646 blocked for more than 145 seconds. [ 282.041791][ T30] Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 282.051581][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.060386][ T30] task:syz.4.1178 state:D stack:28128 pid:10646 tgid:10641 ppid:5831 flags:0x00000004 [ 282.072890][ T30] Call Trace: [ 282.076194][ T30] [ 282.079134][ T30] __schedule+0x1850/0x4c30 [ 282.084980][ T30] ? schedule+0x90/0x320 [ 282.089254][ T30] ? lock_release+0xbf/0xa30 [ 282.094588][ T30] ? __pfx___schedule+0x10/0x10 [ 282.099471][ T30] ? __pfx_lock_release+0x10/0x10 [ 282.105879][ T30] ? rcu_is_watching+0x15/0xb0 [ 282.110677][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 282.117274][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.125898][ T30] ? rcu_is_watching+0x15/0xb0 [ 282.130696][ T30] ? schedule+0x90/0x320 [ 282.135659][ T30] schedule+0x14b/0x320 [ 282.139838][ T30] schedule_preempt_disabled+0x13/0x30 [ 282.146610][ T30] __mutex_lock+0x7e7/0xee0 [ 282.151141][ T30] ? __mutex_lock+0x5ef/0xee0 [ 282.156602][ T30] ? genl_rcv_msg+0x121/0xec0 [ 282.161302][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 282.167673][ T30] ? 0xffffffffa00007c8 [ 282.171847][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 282.178729][ T30] ? kernel_text_address+0xa7/0xe0 [ 282.185383][ T30] ? __kernel_text_address+0xd/0x40 [ 282.190612][ T30] ? radix_tree_lookup+0x238/0x290 [ 282.196446][ T30] genl_rcv_msg+0x121/0xec0 [ 282.200970][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.210650][ T30] ? stack_trace_save+0x118/0x1d0 [ 282.216474][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 282.221868][ T30] ? stack_depot_save_flags+0x37/0x940 [ 282.228661][ T30] ? rcu_is_watching+0x15/0xb0 [ 282.234262][ T30] ? lock_acquire+0xe3/0x550 [ 282.238885][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 282.245330][ T30] ? __pfx___might_resched+0x10/0x10 [ 282.250634][ T30] ? rcu_is_watching+0x15/0xb0 [ 282.256106][ T30] ? lock_acquire+0xe3/0x550 [ 282.260721][ T30] netlink_rcv_skb+0x1e3/0x430 [ 282.266825][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.271873][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.277854][ T30] ? lock_release+0xbf/0xa30 [ 282.283761][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 282.289165][ T30] ? net_generic+0x1f/0x240 [ 282.294642][ T30] genl_rcv+0x28/0x40 [ 282.298648][ T30] netlink_unicast+0x7f6/0x990 [ 282.304719][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 282.310023][ T30] ? __virt_addr_valid+0x45f/0x530 [ 282.315850][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 282.320894][ T30] ? __check_object_size+0x47a/0x730 [ 282.327574][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 282.333079][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.338415][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 282.344761][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.350075][ T30] __sock_sendmsg+0x221/0x270 [ 282.355447][ T30] __sys_sendto+0x363/0x4c0 [ 282.359974][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 282.368774][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 282.374600][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.380954][ T30] ? __pfx___up_read+0x10/0x10 [ 282.387031][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.394068][ T30] ? rcu_is_watching+0x15/0xb0 [ 282.398861][ T30] __x64_sys_sendto+0xde/0x100 [ 282.405200][ T30] do_syscall_64+0xf3/0x230 [ 282.409735][ T30] ? clear_bhb_loop+0x35/0x90 [ 282.415128][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.421050][ T30] RIP: 0033:0x7f368c787bbc [ 282.426812][ T30] RSP: 002b:00007f368d50aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 282.436022][ T30] RAX: ffffffffffffffda RBX: 00007f368d50afc0 RCX: 00007f368c787bbc [ 282.445499][ T30] RDX: 0000000000000020 RSI: 00007f368d50b010 RDI: 0000000000000005 [ 282.454333][ T30] RBP: 0000000000000000 R08: 00007f368d50af14 R09: 000000000000000c [ 282.462342][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 282.470459][ T30] R13: 00007f368d50af68 R14: 00007f368d50b010 R15: 0000000000000000 [ 282.480738][ T30] [ 282.483924][ T30] INFO: task syz.3.1180:10650 blocked for more than 146 seconds. [ 282.491656][ T30] Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 282.501320][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.510057][ T30] task:syz.3.1180 state:D stack:26512 pid:10650 tgid:10649 ppid:5835 flags:0x00000004 [ 282.522486][ T30] Call Trace: [ 282.525792][ T30] [ 282.528733][ T30] __schedule+0x1850/0x4c30 [ 282.535206][ T30] ? schedule+0x90/0x320 [ 282.539477][ T30] ? lock_release+0xbf/0xa30 [ 282.544223][ T30] ? __pfx___schedule+0x10/0x10 [ 282.549097][ T30] ? __pfx_lock_release+0x10/0x10 [ 282.556054][ T30] ? rcu_is_watching+0x15/0xb0 [ 282.560847][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 282.566972][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.575280][ T30] ? rcu_is_watching+0x15/0xb0 [ 282.580075][ T30] ? schedule+0x90/0x320 [ 282.584402][ T30] schedule+0x14b/0x320 [ 282.588578][ T30] schedule_preempt_disabled+0x13/0x30 [ 282.595976][ T30] __mutex_lock+0x7e7/0xee0 [ 282.600505][ T30] ? __mutex_lock+0x5ef/0xee0 [ 282.605378][ T30] ? genl_rcv_msg+0x121/0xec0 [ 282.610071][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 282.617035][ T30] ? 0xffffffffa00007c8 [ 282.621211][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 282.627450][ T30] ? kernel_text_address+0xa7/0xe0 [ 282.634734][ T30] ? __kernel_text_address+0xd/0x40 [ 282.639957][ T30] ? radix_tree_lookup+0x238/0x290 [ 282.645163][ T30] genl_rcv_msg+0x121/0xec0 [ 282.649683][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.656688][ T30] ? stack_trace_save+0x118/0x1d0 [ 282.661738][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 282.667186][ T30] ? stack_depot_save_flags+0x37/0x940 [ 282.674695][ T30] ? rcu_is_watching+0x15/0xb0 [ 282.679486][ T30] ? lock_acquire+0xe3/0x550 [ 282.694775][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 282.699837][ T30] ? __pfx___might_resched+0x10/0x10 [ 282.708005][ T30] ? rcu_is_watching+0x15/0xb0 [ 282.714733][ T30] ? lock_acquire+0xe3/0x550 [ 282.719353][ T30] netlink_rcv_skb+0x1e3/0x430 [ 282.724239][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.729289][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.736511][ T30] ? lock_release+0xbf/0xa30 [ 282.741132][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 282.746845][ T30] ? net_generic+0x1f/0x240 [ 282.751371][ T30] genl_rcv+0x28/0x40 [ 282.757269][ T30] netlink_unicast+0x7f6/0x990 [ 282.762071][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 282.767897][ T30] ? __virt_addr_valid+0x45f/0x530 [ 282.774980][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 282.780028][ T30] ? __check_object_size+0x47a/0x730 [ 282.785489][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 282.790290][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.797506][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 282.802541][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.807859][ T30] __sock_sendmsg+0x221/0x270 [ 282.814509][ T30] __sys_sendto+0x363/0x4c0 [ 282.819038][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 282.824149][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 282.829194][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.837449][ T30] ? __pfx___up_read+0x10/0x10 [ 282.842242][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.848674][ T30] ? rcu_is_watching+0x15/0xb0 [ 282.855645][ T30] __x64_sys_sendto+0xde/0x100 [ 282.860439][ T30] do_syscall_64+0xf3/0x230 [ 282.865041][ T30] ? clear_bhb_loop+0x35/0x90 [ 282.869737][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.877612][ T30] RIP: 0033:0x7fe121987bbc [ 282.882113][ T30] RSP: 002b:00007fe1226d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 282.890647][ T30] RAX: ffffffffffffffda RBX: 00007fe1226d3fc0 RCX: 00007fe121987bbc [ 282.900696][ T30] RDX: 0000000000000024 RSI: 00007fe1226d4010 RDI: 0000000000000004 [ 282.908768][ T30] RBP: 0000000000000000 R08: 00007fe1226d3f14 R09: 000000000000000c [ 282.918770][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 282.926887][ T30] R13: 00007fe1226d3f68 R14: 00007fe1226d4010 R15: 0000000000000000 [ 282.936811][ T30] [ 282.939896][ T30] INFO: task syz.3.1180:10651 blocked for more than 146 seconds. [ 282.947660][ T30] Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 282.957236][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.966340][ T30] task:syz.3.1180 state:D stack:26064 pid:10651 tgid:10649 ppid:5835 flags:0x00000004 [ 282.978518][ T30] Call Trace: [ 282.981821][ T30] [ 283.002614][ T30] __schedule+0x1850/0x4c30 [ 283.007174][ T30] ? schedule+0x90/0x320 [ 283.011438][ T30] ? lock_release+0xbf/0xa30 [ 283.022198][ T30] ? __pfx___schedule+0x10/0x10 [ 283.027176][ T30] ? __pfx_lock_release+0x10/0x10 [ 283.032229][ T30] ? rcu_is_watching+0x15/0xb0 [ 283.038931][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 283.044925][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 283.051272][ T30] ? rcu_is_watching+0x15/0xb0 [ 283.057975][ T30] ? schedule+0x90/0x320 [ 283.062247][ T30] schedule+0x14b/0x320 [ 283.066480][ T30] schedule_preempt_disabled+0x13/0x30 [ 283.071962][ T30] __mutex_lock+0x7e7/0xee0 [ 283.078715][ T30] ? __mutex_lock+0x5ef/0xee0 [ 283.085882][ T30] ? genl_rcv_msg+0x121/0xec0 [ 283.090593][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 283.097592][ T30] ? 0xffffffffa00007c8 [ 283.101769][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 283.108093][ T30] ? kernel_text_address+0xa7/0xe0 [ 283.115253][ T30] ? __kernel_text_address+0xd/0x40 [ 283.120484][ T30] ? radix_tree_lookup+0x238/0x290 [ 283.125699][ T30] genl_rcv_msg+0x121/0xec0 [ 283.130226][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.137264][ T30] ? stack_trace_save+0x118/0x1d0 [ 283.142318][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 283.147813][ T30] ? stack_depot_save_flags+0x37/0x940 [ 283.155206][ T30] ? rcu_is_watching+0x15/0xb0 [ 283.160003][ T30] ? lock_acquire+0xe3/0x550 [ 283.165200][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 283.170265][ T30] ? __pfx___might_resched+0x10/0x10 [ 283.177487][ T30] ? rcu_is_watching+0x15/0xb0 [ 283.182289][ T30] ? lock_acquire+0xe3/0x550 [ 283.187228][ T30] netlink_rcv_skb+0x1e3/0x430 [ 283.192022][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.198978][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.204373][ T30] ? lock_release+0xbf/0xa30 [ 283.208984][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 283.219091][ T30] ? net_generic+0x1f/0x240 [ 283.223805][ T30] genl_rcv+0x28/0x40 [ 283.227893][ T30] netlink_unicast+0x7f6/0x990 [ 283.247300][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 283.253056][ T30] ? __virt_addr_valid+0x45f/0x530 [ 283.258198][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 283.266499][ T30] ? __check_object_size+0x47a/0x730 [ 283.271818][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 283.276995][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.282305][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 283.288866][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.298710][ T30] __sock_sendmsg+0x221/0x270 [ 283.305016][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 283.309809][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.315523][ T30] ? __fget_files+0x2a/0x410 [ 283.320147][ T30] ? __fget_files+0x2a/0x410 [ 283.326606][ T30] __sys_sendmsg+0x269/0x350 [ 283.331228][ T30] ? __pfx_futex_wake+0x10/0x10 [ 283.336574][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 283.341730][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 283.349732][ T30] ? rcu_is_watching+0x15/0xb0 [ 283.354938][ T30] ? rcu_is_watching+0x15/0xb0 [ 283.359733][ T30] do_syscall_64+0xf3/0x230 [ 283.365959][ T30] ? clear_bhb_loop+0x35/0x90 [ 283.370660][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.376986][ T30] RIP: 0033:0x7fe121985d29 [ 283.381417][ T30] RSP: 002b:00007fe11f7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.391440][ T30] RAX: ffffffffffffffda RBX: 00007fe121b76080 RCX: 00007fe121985d29 [ 283.399874][ T30] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 283.415486][ T30] RBP: 00007fe121a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 283.424818][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.433557][ T30] R13: 0000000000000000 R14: 00007fe121b76080 R15: 00007ffc03e3aa78 [ 283.441560][ T30] [ 283.446042][ T30] INFO: lockdep is turned off. [ 283.450828][ T30] NMI backtrace for cpu 1 [ 283.455169][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 283.465692][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 283.475758][ T30] Call Trace: [ 283.479046][ T30] [ 283.481984][ T30] dump_stack_lvl+0x241/0x360 [ 283.486678][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.491894][ T30] ? __pfx__printk+0x10/0x10 [ 283.496498][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 283.503449][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 283.508404][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 283.513872][ T30] ? _printk+0xd5/0x120 [ 283.518055][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 283.524051][ T30] ? __pfx__printk+0x10/0x10 [ 283.528656][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 283.534645][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 283.540636][ T30] watchdog+0xff6/0x1040 [ 283.544891][ T30] ? watchdog+0x1ea/0x1040 [ 283.549321][ T30] ? __pfx_watchdog+0x10/0x10 [ 283.554008][ T30] kthread+0x2f0/0x390 [ 283.558090][ T30] ? __pfx_watchdog+0x10/0x10 [ 283.562780][ T30] ? __pfx_kthread+0x10/0x10 [ 283.567378][ T30] ret_from_fork+0x4b/0x80 [ 283.571804][ T30] ? __pfx_kthread+0x10/0x10 [ 283.576402][ T30] ret_from_fork_asm+0x1a/0x30 [ 283.581181][ T30] [ 283.584657][ T30] Sending NMI from CPU 1 to CPUs 0: [ 283.589886][ C0] NMI backtrace for cpu 0 [ 283.589899][ C0] CPU: 0 UID: 0 PID: 5904 Comm: kworker/0:6 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 283.589919][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 283.589930][ C0] Workqueue: events_long defense_work_handler [ 283.589957][ C0] RIP: 0010:unwind_next_frame+0xb71/0x22d0 [ 283.589978][ C0] Code: 00 00 42 80 3c 20 00 74 08 48 89 ef e8 08 29 ba 00 48 89 6c 24 60 48 89 5c 24 40 49 8b 6d 08 49 8d 5d 10 49 89 df 49 c1 ef 03 <43> 80 3c 27 00 74 08 48 89 df e8 e0 28 ba 00 4c 8b 74 24 08 4d 8b [ 283.589991][ C0] RSP: 0018:ffffc900000076d0 EFLAGS: 00000a02 [ 283.590005][ C0] RAX: 1ffff92000000f01 RBX: ffffc90000007810 RCX: ffffffff902c9e40 [ 283.590017][ C0] RDX: ffffffff90a30024 RSI: 0000000000000002 RDI: 0000000000000001 [ 283.590028][ C0] RBP: ffffc90000000000 R08: 0000000000000005 R09: 0000000000000000 [ 283.590039][ C0] R10: ffffc90000007850 R11: fffff52000000f0c R12: dffffc0000000000 [ 283.590051][ C0] R13: ffffc90000007800 R14: ffffc90000007838 R15: 1ffff92000000f02 [ 283.590063][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 283.590077][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.590089][ C0] CR2: 00007f13d2df8580 CR3: 000000000e736000 CR4: 00000000003526f0 [ 283.590103][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.590113][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.590123][ C0] Call Trace: [ 283.590129][ C0] [ 283.590136][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 283.590154][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 283.590173][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 283.590195][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 283.590211][ C0] ? nmi_handle+0x14f/0x5a0 [ 283.590229][ C0] ? nmi_handle+0x2a/0x5a0 [ 283.590246][ C0] ? unwind_next_frame+0xb71/0x22d0 [ 283.590263][ C0] ? default_do_nmi+0x63/0x160 [ 283.590278][ C0] ? exc_nmi+0x123/0x1f0 [ 283.590293][ C0] ? end_repeat_nmi+0xf/0x53 [ 283.590319][ C0] ? unwind_next_frame+0xb71/0x22d0 [ 283.590335][ C0] ? unwind_next_frame+0xb71/0x22d0 [ 283.590353][ C0] ? unwind_next_frame+0xb71/0x22d0 [ 283.590370][ C0] [ 283.590375][ C0] [ 283.590384][ C0] ? arch_stack_walk+0xe5/0x150 [ 283.590404][ C0] __unwind_start+0x59a/0x740 [ 283.590422][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 283.590438][ C0] arch_stack_walk+0xe5/0x150 [ 283.590457][ C0] ? arch_stack_walk+0xe5/0x150 [ 283.590476][ C0] stack_trace_save+0x118/0x1d0 [ 283.590492][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 283.590507][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 283.590521][ C0] ? __pfx_lock_release+0x10/0x10 [ 283.590541][ C0] kasan_save_track+0x3f/0x80 [ 283.590575][ C0] ? kthread+0x2f0/0x390 [ 283.590592][ C0] kasan_save_free_info+0x40/0x50 [ 283.590613][ C0] __kasan_slab_free+0x59/0x70 [ 283.590628][ C0] ? dst_destroy+0x249/0x360 [ 283.590646][ C0] kmem_cache_free+0x195/0x410 [ 283.590665][ C0] ? dst_destroy+0x249/0x360 [ 283.590683][ C0] dst_destroy+0x249/0x360 [ 283.590700][ C0] ? rcu_core+0xa37/0x17a0 [ 283.590718][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 283.590736][ C0] rcu_core+0xaaa/0x17a0 [ 283.590759][ C0] ? __pfx_rcu_core+0x10/0x10 [ 283.590789][ C0] handle_softirqs+0x2d4/0x9b0 [ 283.590813][ C0] ? do_softirq+0x11b/0x1e0 [ 283.590834][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 283.590858][ C0] do_softirq+0x11b/0x1e0 [ 283.590877][ C0] [ 283.590882][ C0] [ 283.590888][ C0] ? __pfx_do_softirq+0x10/0x10 [ 283.590907][ C0] ? lock_release+0xbf/0xa30 [ 283.590923][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 283.590940][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 283.590963][ C0] ? rcu_is_watching+0x15/0xb0 [ 283.590984][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 283.591005][ C0] ? update_defense_level+0x122/0xcf0 [ 283.591023][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 283.591043][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 283.591059][ C0] ? update_defense_level+0x122/0xcf0 [ 283.591076][ C0] ? update_defense_level+0x122/0xcf0 [ 283.591094][ C0] update_defense_level+0x8ec/0xcf0 [ 283.591113][ C0] ? update_defense_level+0x122/0xcf0 [ 283.591130][ C0] ? __pfx_update_defense_level+0x10/0x10 [ 283.591151][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 283.591171][ C0] ? process_scheduled_works+0x976/0x1840 [ 283.591187][ C0] defense_work_handler+0x22/0xd0 [ 283.591205][ C0] process_scheduled_works+0xa66/0x1840 [ 283.591231][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.591248][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 283.591266][ C0] ? assign_work+0x364/0x3d0 [ 283.591282][ C0] worker_thread+0x870/0xd30 [ 283.591301][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 283.591319][ C0] ? __kthread_parkme+0x169/0x1d0 [ 283.591337][ C0] ? __pfx_worker_thread+0x10/0x10 [ 283.591352][ C0] kthread+0x2f0/0x390 [ 283.591368][ C0] ? __pfx_worker_thread+0x10/0x10 [ 283.591383][ C0] ? __pfx_kthread+0x10/0x10 [ 283.591401][ C0] ret_from_fork+0x4b/0x80 [ 283.591415][ C0] ? __pfx_kthread+0x10/0x10 [ 283.591432][ C0] ret_from_fork_asm+0x1a/0x30 [ 283.591452][ C0] [ 284.098671][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 284.105540][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 284.116056][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 284.126133][ T30] Call Trace: [ 284.129422][ T30] [ 284.132369][ T30] dump_stack_lvl+0x241/0x360 [ 284.137067][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.142284][ T30] ? __pfx__printk+0x10/0x10 [ 284.146887][ T30] ? vscnprintf+0x5d/0x90 [ 284.151228][ T30] panic+0x349/0x880 [ 284.155140][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 284.161351][ T30] ? __pfx_panic+0x10/0x10 [ 284.165788][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 284.171177][ T30] ? __irq_work_queue_local+0x137/0x410 [ 284.176733][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 284.182125][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 284.188297][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 284.194463][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 284.200634][ T30] watchdog+0x1035/0x1040 [ 284.204981][ T30] ? watchdog+0x1ea/0x1040 [ 284.209411][ T30] ? __pfx_watchdog+0x10/0x10 [ 284.214114][ T30] kthread+0x2f0/0x390 [ 284.218195][ T30] ? __pfx_watchdog+0x10/0x10 [ 284.222883][ T30] ? __pfx_kthread+0x10/0x10 [ 284.227486][ T30] ret_from_fork+0x4b/0x80 [ 284.231911][ T30] ? __pfx_kthread+0x10/0x10 [ 284.236519][ T30] ret_from_fork_asm+0x1a/0x30 [ 284.241299][ T30] [ 284.244572][ T30] Kernel Offset: disabled [ 284.248886][ T30] Rebooting in 86400 seconds..