last executing test programs: 3m22.296833349s ago: executing program 4 (id=1918): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="2706000000000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = socket$inet6(0xa, 0x6, 0x20005) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4021}}, 0x20}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r11, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @local, 0x7}, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffc00}, 0xffffffffffffffff, {[0x401, 0xffffd7fb, 0xf, 0x1, 0x3, 0x200, 0x8001, 0x2]}}, 0x5c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}}, 0x20004054) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r12, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4093) 3m21.733724892s ago: executing program 4 (id=1926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = socket(0x40000000015, 0x5, 0x0) sendto$l2tp6(r2, 0x0, 0x0, 0x4000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) close(r3) (async) listen(r6, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 3m21.614973376s ago: executing program 4 (id=1928): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003440)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/211, 0xd3}, {&(0x7f0000001300)=""/99, 0x63}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/38, 0x26}], 0x6, &(0x7f0000002440)=""/4096, 0x1000}, 0xffff}], 0x1, 0x40010140, &(0x7f0000003480)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000034c0)={'lo\x00', 0x8000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x45, 0x1, 0x1, 0x80000001}, {0x35, 0x0, 0xe, 0xfffffffe}, {0x6, 0x0, 0x0, 0x868}, {0x10, 0x7, 0x3, 0x5}]}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}}, 0x0, 0x2000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) 3m21.45952754s ago: executing program 4 (id=1931): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000040a00afd997ddffff14000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000300"/28], 0x50) 3m21.404878256s ago: executing program 4 (id=1932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c00000000010104000000000000000002000000240001748a67aed9e3eca100e000000208000200ac1414000c0002800500010000010000241502801400018008000100e000000108000200e00000020c000280050001000000ffff080007400000000028000d8008000200ffffffff14000380060001", @ANYRES32=r0, @ANYRESOCT=r0], 0x8c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300) 3m20.79615501s ago: executing program 4 (id=1935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) (async) socketpair(0x2, 0xa, 0xfffffeff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3m5.757033799s ago: executing program 32 (id=1935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) (async) socketpair(0x2, 0xa, 0xfffffeff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m31.280383047s ago: executing program 3 (id=2350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000044c00000400000009"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910be00000000007f0a0000000000000d00000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) socket$alg(0x26, 0x5, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r2}, 0xc) 2m31.08304929s ago: executing program 3 (id=2352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c00000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000020c000280050001000000ffff080007400000000028000d8008000200ffffffff14000380060001"], 0x8c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x3000000, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300) 2m30.301670404s ago: executing program 3 (id=2358): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000001880)=ANY=[@ANYBLOB="05000000000000007111b300000000008510000002000000850000002a00000095000000000000009500a50500000000360a9cccfb9478c261b5c3b41073a3c5951cffd486dbfc5863eda0a308002821e87dd5047cfe03dd3e61ab9c8527468de274b6980b56996297e75cd01b5f06d615c5cb38fc4b87b6c92a01959029df3ba719cc4f81bb69ae1d0dbb481b8698d6cb29534c7e9af0b77b74d56834b37ee130ee00"/178], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bind$inet6(r0, 0x0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000080)=0x9, 0x3f) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000000c0)={0x7, {{0xa, 0x4e24, 0xdbf0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e24, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1}}}, 0x108) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000440)=""/190, 0xbe, 0x0, &(0x7f0000000500)=""/184, 0xb8}}, 0x10) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000ff03ebffffffff0007ffffff8520000003000000"], &(0x7f0000000640)='GPL\x00', 0x7d, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xd, 0xf, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000740)=[{0x4, 0x4, 0x8, 0x3}], 0x10, 0x53}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x6}, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0004"], 0x168) pipe(0xfffffffffffffffe) 2m30.072047207s ago: executing program 3 (id=2361): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x602042, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3d02e000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r2, 0x58, &(0x7f00000010c0)}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80000) recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x8, 0x30, 0xf, 0x6}, {0x8000, 0x6, 0xb, 0x4}, {0x3ff, 0xe, 0xc3, 0x5}]}) r7 = socket(0x840000000002, 0x3, 0xfa) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r10, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x80000001}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x4c}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f8, 0x110, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="161b88a0abe1", @rand_addr=0x64010100, @rand_addr=0x64010100, 0xb}}}, {{@arp={@broadcast, @local, 0xff000000, 0xffffff00, 0x9, 0x1, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0xc9b, 0x8000, 0x73b9, 0x83, 0xffff, 0x1, 'netdevsim0\x00', 'team_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xffff, 0x8}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "98f9252159f91356764c2d19396f335ff4bbca1dd61c29883424a806a651"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0xff00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r13 = epoll_create1(0x0) epoll_wait(r13, &(0x7f0000000480)=[{}], 0x1, 0x10000200) 2m29.164237543s ago: executing program 3 (id=2371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000003840)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x8000000, 0x0, {[{{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x2, 0x8, {@mac=@random="a0423ecebbbc", {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff]}}, 0x8, 0x800, 0x5, 0x4, 0x7, 0x10, 'erspan0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0x70d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @multicast1, 0xff000000, 0x0, 0x1, 0x0, {@mac, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x7, 0xfffb, 0x1, 0x3, 0x5, 0x6, 'pim6reg1\x00', 'ipvlan0\x00', {}, {0xff}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="59a2f242dbf9", @mac=@random="6480059adaaa", @multicast1, @multicast2, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xde4, 0xd, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x801) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r3, &(0x7f0000000000)="397e3fefb3e3a8a26f616d915ef669", 0xf) ioctl$sock_netdev_private(r3, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000240)={@none, 0xe497, 0x7fff, 0xfffe, 0x391, 0x8, "059a2e6be0003059c065ea2bcf753ec153cc2551d50e60f87e62ab7b3d3665144eb716d5fec10d373df39d74bb6ffee18dcd11d3a4d525d90f6750a06be1040709af1736127fc68dd7db10e41eeb0f0b8e97267518a71f14303c0899fc9f324df9275a2aa2fb2e1c76c606d1bd0c4d27847d56a7e18697b5eb7c9611a47923dd"}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000020000000800001103000037c6000000000000000000000200000000000000000000000300000000030000000200000000040000000061"], 0x0, 0x50}, 0x28) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xfff2, 0x4}, {}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 2m29.024518954s ago: executing program 3 (id=2372): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f000000c440)=[{{0x0, 0x1b, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x7}], 0x1, 0x10000, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r1 = socket(0x8, 0x2, 0x65) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x50, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_MPU={0x8, 0xe, 0x102}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x800000}, @TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_INGRESS={0xfffffead, 0xf, 0x1}]}}]}, 0x80}}, 0x4090) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x300080, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0x6}, 0x18) sendmsg$nl_generic(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x64, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000050}, 0x8041) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x10}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003dc0)={'syztnl1\x00', &(0x7f0000003d40)={'syztnl1\x00', r4, 0x4, 0x9, 0x5, 0x7, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x4}}) sendmmsg$inet6(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="015076c563ce2058be9a6fa35ff2412f539bbe85ced94a8d1bbfd5b7f42cf9230fd7fffe68f91bffeff0d54290ec7fa574df3a86f2d66cf571d2763dee19563a1caea75c28087ee6996f30ae0f4fe3192cb239e5955545d0f1bd82c351a8d57d6b20315b742fa575b8f0dbd6f70a62f4008a63a88a0d37ceb8b9f3f2f8bd624d61f69289a3077f5e6b45becf3c1d6ef8a41c3371db8ddc49f7f50580de4e522395b0e430dd945414a0d9bdac8f997206c83561b24432800f0188b1d9f4298b818575bd7338296a51a50bb51954768c35bf", 0xd1}, {&(0x7f00000005c0)="6251286be31fe678ac767b48f5d9a61328c5f743320450aa2947e98cb79227ed2b354bef6a1b92e55c0e1ac5564ede52fb14799e9c1dc7aa7f21488fc0a6c6c03131b605a1a2ad1bc566250ddf50e88b6a4f5ef1b794edde124e114b8cb9e18457604aaf5aeee9b8c839484c9a9057ef6b158c8decdd4f6926bda4f67ca18137b6d112707342482d1682824755e44fb036d1a80d3e21cb9da3b8e942396230a26c7f9deb03", 0xa5}], 0x2, &(0x7f00000048c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x6cfdfadf}}, @dstopts={{0x40, 0x29, 0x37, {0x4, 0x4, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x9, [0xa97, 0x4]}}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x88, 0x4, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x90}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x5, @mcast1, 0xff}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000780)="697788604b862420bebfe2671004633312b29116107c39fecf457e60e055598faa693e281dafcb075b4009ea17bd59ea6a780b66d7", 0x35}, {&(0x7f00000008c0)="b99e70941b00aa38cb74877238cace889ed973efa3207c02517837751970521b4b9b8eea93736cc77657b1b1f0e4d2c082dee9638fa646f266e505d72ad10be3e5a82057b2d6e3146a1e89805fc3cc13d9bfca9ddcf9193861989b887e8cdbd9ba6912bee238b7ae7826b91c413804f8b4c9634c40af5adbecb3ef7815af8318635d967969677aa9ddb85e58b4d699413556af4580bf967d643ae48c22f95566f932fa7a5ac9ee45139946e13278c80f5a120c9aea0e85c5917b8b5907b33a0effeaec09977eaa2c0c56c608e95a442735ececc182d9d64f66470cdd74ec5fe2cd4d58556ed93ac4e657e411251204", 0xef}, {&(0x7f0000000ac0)="6f0ae166cb1703e292a87ac2ba8020b0b6951fd69a6290ccc934d2ba2cea676515ebdd10da504cf33a7fb56bce1e33c7215d7b5ab3a4f07cae8365848be501a8aaa9b0e9c24b1a716b2a508d02996b02ff32f2504c0db39817bcddcb73b9feab0e45649127cc9fd46ee7721658baf2eb0ddbe868b3fbbdb9f8e538d87bc59183a25b0a7dc90e9de33b46a92d165361da870743bd51dc13a38501e989f1cc4679e018c0be4cca5913890766f2f864dfd90f9887b921c620d1b9817725712e8d386fbe52cd", 0xc4}, {&(0x7f0000000800)="c3e50c13b4efa3584f19a0461f9e10ab8baba16def688854953a27d20776cc361f3aabe4a8cc492e", 0x28}, {&(0x7f0000005a40)="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", 0x1000}, {&(0x7f0000000bc0)="bbf7069d7b959d16f6c9dc8aa3b813bf288204bf6230adb3c21c9833e6de062c1ec50a16b266114c2a62bddd73cb847c6b728f200aaf634e89f1ae6e41d3a5b2fc3b81a8d6c2a2b9e813f5a33045973cd7f219722f10810c34fab93d943606353b50ac8a515cad57a90ef9782b64a325530916940488086a8503cf61a61f6ddcaa7940c98d450a85eda796f394a3190c4cb0eb628157b85ac104131cfedc65c9d07571634d327bdb01a92965efe75693d2da57559f341a0f1d9ab355bda49d4a01c2e534720c43db43327a86e466eeefa5d6876b2c35a354467a5d199e724cdd1158c2750ce750002f6d2cc66a60057f86aa66e8949c", 0xf6}, {&(0x7f0000000840)="527ef2b40db597787922aa0d05fb76731cb3f85b30e8026fdbdc1f51843f075aac33e277a6393503ed026c8e79581da953cab56aa6", 0x35}, {&(0x7f00000009c0)="4c85c8a3d9b9807f45d68487152db8bfc959f606a2f787afb1305f43a9b6e0e0a59b806e47db592f1cfd436de019c26de610a6ab259c3084e7dcc8e3a56e5dd15649aaea2c9c53c8da7eae450aebde9903886f6e534fc483c94fa0315aafdff2cfa45c1529545163f7d698a3b202286737665e946227187fa73e6913c1f8edc96a88cbd5a215", 0x86}, {&(0x7f0000004980)="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", 0x1000}, {&(0x7f0000000cc0)="503e1c903ed29a62d8a058b636cefc66fbbcf6dffe18ea3f5461bf07b4dd78a30438266447d346356d9aaefd6ac6571403eb3a6381ed3e7887fa42e1b1ac602ecc8ef187e85ba72cceee25d16e042b668db8bb", 0x53}], 0xa, &(0x7f0000000e00)=[@tclass={{0x14, 0x29, 0x43, 0x7041}}, @dstopts={{0x20, 0x29, 0x37, {0x6c, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x38, 0x29, 0x37, {0x32, 0x4, '\x00', [@generic={0xf9, 0x18, "d989ee21cbb8e5bcba9a15ebe2bdc4c9b965acba2abac0d8"}, @jumbo={0xc2, 0x4, 0x7fffffff}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x222b}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2d}, r4}}}], 0xc8}}, {{&(0x7f0000000f00)={0xa, 0x4e22, 0xca5, @mcast2, 0x812}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000f40)="e9ee590c43c44a2ec45b59a52b28f35b80a230414243e80b42bb95f5c8745834e805c6f4d7281f35a9457c745b85546a7adcb49eda8a48a798b0e4bdc53f7fe6d73edb5dc0c354f0cd23a3a7a6b13a9962a5c5864820779661e30e59ceb8f930097d4bde0a1be76c8e8c613b062df81457cdf7826ca18521b3938ff8215157db2ddf0602e230a4fa212c6819225a92de1b5b370450e1359fc7a4ee00e6fe542840a16c9966aa53f1707d53967220df", 0xaf}, {&(0x7f0000000680)="4e961b439988e1306a5aa63ca404e6e5f1167bdc133578b09809c60efc8e710db9b02f6986b745b94fd93b4394", 0x2d}, {&(0x7f0000001040)="d42b4ac7509bcbb710aea9cfe178e728d70b53900cf8013e5c2f369cc0ce893aacee8592e7cb67ce551beb903d5533f65e44d2addf0126104c050b00cfe347c9918258271dd42329dfbab245d2053dec9ea7d3a908d3e14c71ce874a9f0f96699a68362fce15f7bbdb8fa14a7162fe531fddd9ddf977ebb90d0a717c488a2f821d278dc0acd349b4134ef6a0eace714a469e3332ee90a35db078628ddad702d29f5f2dbaf7ffa0b83be349606de719007969db83885b31ef29cf14df5171dd33467758b2a03d54a51c92051e25b96f14e7a1060158515c36d4689a5e5b439b", 0xdf}, {&(0x7f0000001140)="1e15857a3a8e919827352e2cec428c1de56902e5a37cdcfe977ecafbb1aa45df2cb25bfadcfcc7dbfb32bd4d863b006b347ed7a1e82d2086d5f9b461c88b41b09541b2d7b0e7fb16c94b88a28c4e046654324d118627a761c9b1f93fbe852b37f6211bef1b408a26b63e4346b6b4464e15318603f1e752130e9efda104b8dc47423ea6ca87c0d760bcdd7e1c60641cb7913151831095c6287bd2f95b50576062a1240bbdd3455e383364d8c92c5fc45f6a76cbee8edfaadcc34ed4d2d3373f1dc7526898d520d2", 0xc7}, {&(0x7f0000001240)="f755b4b67179e9756190af84760022c9474526f45e3a2d3073567ed497cf804e78b317a2b98e97d049022063feeb4bfe4f2e36bbf2f2bced6ee6debd72db959372b21092d6d868a337380eca87b3ea7e105c0bf3456f4d8a6423120c96fe59295ce557e9ae96c06252229ecbfcadda4f5afeeff2d46715886f471f3cc493a7b4131a8f17225df42fca94081a42a1536e4f6f887d647f426867c5c21e316d70c6406b4d77355ba07cd960a96b19c5694b2fe5268adf90", 0xb6}], 0x5, &(0x7f0000001380)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dstopts={{0x118, 0x29, 0x37, {0xbf, 0x1f, '\x00', [@pad1, @pad1, @generic={0x0, 0x81, "2531cd1f4b693902482093bde21c86874aef186e9a5d22965411be72df12c7cf2549e446ee5a569dc68ebe4e1fa8a9b88b594c8a14184a942b459945d1381726a75f0f8cdf094cc9d8a73534c9474f43a493b733b2f48b35ccc0787d592524ab7d11448e35d468706b7585aff2049260a3d8f14aadd1135866295c855d21f2d6e5"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xc, 0x5, [0x1000, 0x1, 0x0, 0x6, 0xd]}}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x9, 0x3d, [0x2dff, 0x1, 0x1, 0x5, 0x9]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000001}}, @hoplimit={{0x14, 0x29, 0x34, 0x100}}], 0x160}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003580)="851f38565b73a7d3978a84e0f9c77a63b3f8e6b27de692542b704171584601a77c48ffd4d90cf74d0d8b3cd76a81a8fc1f3759ca9bba22516e99ad09bca7aa37d4b927f2da06b0dafa3c9bef12b38fea44ef7c9df9a8735c23", 0x59}, {&(0x7f0000003600)="6dc4126e24930507f99334bd1b323372611075435f07a0f8b79a20788c445331179a338b60c51f2cf729dc79f4f0525c674acf9a5b9e8c1ebbbf8a51662c646aab0b5dfa565eb1dcd22bf7d89164c00ac6a6a9001c2d3f8504c951c8d655b789f0cf3af264b5084245d447e5aab2b8ceaa4e9de8e7dda530f784e9d34e695f18d99d77f2481f18dbc42917c4601f1580591e2164522588a8f58e0b9c7e3526f2436f2f20", 0xa4}], 0x2}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003700)="883b1e2f01d1a54f27a9f4a7b5badab50f3a5d4ca212663740a31e455de8d8870e2d8b1aac8b1db04cd7626f89b46a225d1a60463d6d666598120301358eca92718716a291f9caa427e3dc1034457b5129d7b38f01a0c46c481272412c392cb9f48255b29aefd7fd14b74527c2e9161abc080a4aa10cbe320c9771c613d8ca62ef", 0x81}], 0x1, &(0x7f0000003800)=[@rthdr_2292={{0x78, 0x29, 0x39, {0xbd, 0xc, 0x1, 0xe8, 0x0, [@empty, @private2, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, @empty]}}}, @rthdr={{0x98, 0x29, 0x39, {0x4, 0x10, 0x0, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x13}, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x41}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1, @loopback, @loopback]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x3c, 0x10, 0x0, 0xd5, 0x0, [@empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x24}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x12}, @private1, @dev={0xfe, 0x80, '\x00', 0x19}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0xe12f}}], 0xfffffffffffffed9}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a00)="b32429461b326ba7ec4ee9b35b9388c81a271f40f825be13cb80e565c3c70ae1f17f7a5db61901cee163284745e1b423b5bb5143f13b61cefa1bd0894bdfe540caa8c58979e05e74fc79cdd2a13d4f90006ada53433e317b6350fa957469aab55b237dbad8048d79dbd7966db0977c0432ff91e66ed55d5700a37a409919b1dff15097707c0731e111c35c97da", 0x8d}, {&(0x7f0000003ac0)="4b15bd93dc2ff6eb1869dced1e4d28a7517fd17f3e5e0ae133a403dd2412ae77875b074fada23c288e99cdd02dd3a3e9d194c6e620fb65b11cb986aeeb0eeb18512464ae67179d413ad81263bc", 0x4d}, {&(0x7f0000003b40)="37cd9a921a70f802cb0f47a39b6341a9150468fc6d3579248b64f7448ac12391f5f965afcae907754471773bc76f774cdcdbcd1deed1ed465dfb894600fea5ef005bcb3e86550d979adaad707f705228913d57dccc40cd6bf03e7e888d834f1b884dcd554526ca2c606ca3e62cddd9afe4f28ca299ae25d9c626518061a2dd14fd487c4c946f785d", 0x88}], 0x3}}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003c40)="81b36fdac2e19beea39497e0a1b752a33b363e9702ac82ad28baf0415169333922d0c2a385f4ea53d1b4a6c8abd4b8518be2afdc5ecbaf1feac2c962a1290f96ddff7852ce132405235d6e2128f818cf69a86629e4f5698267", 0x59}, {&(0x7f0000003cc0)}], 0x2, &(0x7f0000003e00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfff}}, @hoplimit={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r8}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x6c, 0xa, '\x00', [@pad1, @generic={0x9, 0x52, "e9b2687d04128cd26b8dd30d38a7d405551128afdaad14e96bf83b1c897571538243de1abd961651f04a012dcd91dbe269cf07bdde25836c7658f68782883e0e50a8438b798d304f7304cb964c1d66525f4f"}]}}}], 0xc8}}, {{&(0x7f0000003f00)={0xa, 0x4e20, 0xf8ae, @private2, 0x8b43}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003f40)="01693a4c97b953c1820a91cc79cf1c5383b8b8ed6ea853ba4272765b", 0x1c}], 0x1, &(0x7f0000003fc0)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @enc_lim, @jumbo={0xc2, 0x4, 0x7fffffff}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x40}}, {{&(0x7f0000004000)={0xa, 0x4e22, 0x2004f6, @mcast2, 0x6}, 0x1c, &(0x7f0000004480)=[{&(0x7f0000004040)="96d7ee8fc567a975d72d5b05cb61ec5dca1dbb152e6073f64fdb0479d16a61d468c6c1faf49ab37af8a6659119d9864cfadc452d0f8c413f21dd3500a9d1c72d23e0b8cb82041f4769a12b2779c24bb20db2f5daabbad86b54075a10ca7fea1d1e8b8b3d0669798188580a9ad1a94e5a0d85456ca8d287ffa6c4dcc7ae093ab014e772a56a0afe58f65738e5cb8c2c25769c02da0bc638459a7309978f155a60da0e0ca6e664557762db3f14c6c1443378db95932563b05240003cf919677b7b724ce235ac093f24465c3ee158fb246ee83a212fd539ea1f845896", 0xdb}, {&(0x7f0000004140)="c94088823611c0dae6ff1dcfa2ecbe80f80f4d8ba11ab130a28b3121807c89aad70c8bc29f417ba602b0a74c5a2f0b4ae4729fd8e0407e4fce23bc4ba244997016a4585c139c6d815e7650a9f7cf497d2fd519dc154c66363648b16a2c985d8c23a152d41d3dd36852356632fb05a768ad186dc798355da6b8e8f40755efd29cb4560a6582dcc66b3b1adeb268cc6fd4d7683c7e1ce4476a5cb8e9ab3c6afc913f325bb0d3ae1bf1fbff85dc84a61a98bba32d18f9ff78d598d2662fff0dea209e54d4", 0xc3}, {&(0x7f0000004240)="c377bf746224e87aea1159397a98a423f8d6af56a52f", 0x16}, {&(0x7f0000004280)="30904bf0570019ff9bbca7dac2887b086910bf07ecd913841f0e0aba9279a533b84b6fef61a30a541d8be0dc877833a3294505fee75941e484cce67c4ffa768d5c61f303285e618fcd320bc57eb83ad04a2de29e573c6f5dce29bb6994bb0382c58c56e9fbf5c89eba244a5b969a4623172e3639400d57a56d26dc4b294372a4fc5d984d3b75768449012fe438895409538d068b29dc32d86293adef7465163b004443f05b575e9d061b8f164f0d2051bff97e73c67ab03d3a618af5e32b3a37d0a9402ffd79107ffbe4555e4e3c564483de3a0ea1dde33b5d301cdcbadd2e77e1c5df84e6e47c03971d0173915678cf35d3ab07ca2bf5", 0xf7}, {&(0x7f0000004380)="137bbd34b3f9d52f77c406d5ab8d725737afafc93ec4458a9ed036c3a8ec869a636bb68a3784421a24a77992431e83780462f27745315fddc10cf13bafd08c632653e51e0748fe8a20130a8e3fa639fc2ec2bb64c137d290d9ce99bc83c54020720c0277d2a14cc6a02e818de8789df26f18a77614fea73375910a2bcb0288d9a9a3f13d9909ed58b6b86f51cd328b6d43acee1601f29c0baa24ee5526a727d5325065b412ffe06019c92a6a57d8db123bfa4aa370601f73e41cd09cd5ad6b2ad8dbb894a691686451db8762e8319cb1b134ecb275b866a5c21d444adf47b64396bf", 0xe2}], 0x5, &(0x7f0000004500)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7ff0}}, @hopopts={{0x58, 0x29, 0x36, {0x5e, 0x7, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @pad1, @pad1, @jumbo, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0xf}, @jumbo={0xc2, 0x4, 0x100}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x24000000}}], 0xa0}}], 0x9, 0x4004044) 2m13.93176344s ago: executing program 33 (id=2372): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f000000c440)=[{{0x0, 0x1b, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x7}], 0x1, 0x10000, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r1 = socket(0x8, 0x2, 0x65) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x50, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_MPU={0x8, 0xe, 0x102}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x800000}, @TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_INGRESS={0xfffffead, 0xf, 0x1}]}}]}, 0x80}}, 0x4090) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x300080, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0x6}, 0x18) sendmsg$nl_generic(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x64, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000050}, 0x8041) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x10}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003dc0)={'syztnl1\x00', &(0x7f0000003d40)={'syztnl1\x00', r4, 0x4, 0x9, 0x5, 0x7, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x4}}) sendmmsg$inet6(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="015076c563ce2058be9a6fa35ff2412f539bbe85ced94a8d1bbfd5b7f42cf9230fd7fffe68f91bffeff0d54290ec7fa574df3a86f2d66cf571d2763dee19563a1caea75c28087ee6996f30ae0f4fe3192cb239e5955545d0f1bd82c351a8d57d6b20315b742fa575b8f0dbd6f70a62f4008a63a88a0d37ceb8b9f3f2f8bd624d61f69289a3077f5e6b45becf3c1d6ef8a41c3371db8ddc49f7f50580de4e522395b0e430dd945414a0d9bdac8f997206c83561b24432800f0188b1d9f4298b818575bd7338296a51a50bb51954768c35bf", 0xd1}, {&(0x7f00000005c0)="6251286be31fe678ac767b48f5d9a61328c5f743320450aa2947e98cb79227ed2b354bef6a1b92e55c0e1ac5564ede52fb14799e9c1dc7aa7f21488fc0a6c6c03131b605a1a2ad1bc566250ddf50e88b6a4f5ef1b794edde124e114b8cb9e18457604aaf5aeee9b8c839484c9a9057ef6b158c8decdd4f6926bda4f67ca18137b6d112707342482d1682824755e44fb036d1a80d3e21cb9da3b8e942396230a26c7f9deb03", 0xa5}], 0x2, &(0x7f00000048c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x6cfdfadf}}, @dstopts={{0x40, 0x29, 0x37, {0x4, 0x4, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x9, [0xa97, 0x4]}}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x88, 0x4, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x90}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x5, @mcast1, 0xff}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000780)="697788604b862420bebfe2671004633312b29116107c39fecf457e60e055598faa693e281dafcb075b4009ea17bd59ea6a780b66d7", 0x35}, {&(0x7f00000008c0)="b99e70941b00aa38cb74877238cace889ed973efa3207c02517837751970521b4b9b8eea93736cc77657b1b1f0e4d2c082dee9638fa646f266e505d72ad10be3e5a82057b2d6e3146a1e89805fc3cc13d9bfca9ddcf9193861989b887e8cdbd9ba6912bee238b7ae7826b91c413804f8b4c9634c40af5adbecb3ef7815af8318635d967969677aa9ddb85e58b4d699413556af4580bf967d643ae48c22f95566f932fa7a5ac9ee45139946e13278c80f5a120c9aea0e85c5917b8b5907b33a0effeaec09977eaa2c0c56c608e95a442735ececc182d9d64f66470cdd74ec5fe2cd4d58556ed93ac4e657e411251204", 0xef}, {&(0x7f0000000ac0)="6f0ae166cb1703e292a87ac2ba8020b0b6951fd69a6290ccc934d2ba2cea676515ebdd10da504cf33a7fb56bce1e33c7215d7b5ab3a4f07cae8365848be501a8aaa9b0e9c24b1a716b2a508d02996b02ff32f2504c0db39817bcddcb73b9feab0e45649127cc9fd46ee7721658baf2eb0ddbe868b3fbbdb9f8e538d87bc59183a25b0a7dc90e9de33b46a92d165361da870743bd51dc13a38501e989f1cc4679e018c0be4cca5913890766f2f864dfd90f9887b921c620d1b9817725712e8d386fbe52cd", 0xc4}, {&(0x7f0000000800)="c3e50c13b4efa3584f19a0461f9e10ab8baba16def688854953a27d20776cc361f3aabe4a8cc492e", 0x28}, {&(0x7f0000005a40)="37cfe29c054df44d43000e9ad2e6b221b94f4449fd90bba421417a1f390e601c98146ea29bdd8bda9dcaf26850bc4f90231871159bbc6c2c83f36f3b88d7c55911484643c8d4538605da8b8cdd152f3162de8dc5568192bf009e825b2a80088afe0a786db4589a88d91b955ed974ec16ef4b3ab686bfffeecae1ba2d586e3f29460fcaf2412746a7b2409ff79466dbb1fc656b0474f42e12568bf4c760206d35cf77453f664f942c2a7bed98324b3d16ad8aafb8c1197bafd2f46cd67466d192efa4d2b6e9e294e9ca3306d123a976ec92a1f2835ebc5a380e53fe2c97a0f752f70a7b3347e2df264417ada36dbc9c5950a1fb8ac49a04c150f007cce5eb0ea48f4cb053849578ee827dea01a0ddea70ffce4d47d7e9d91646996708cdcd600ceba79457e34372ed1cea51d43146a94b2b1dd9001e2736928dd7d8f2523cc6e70ece457d6c61c45687c81ba42874994732e798ac8ad4b2c87265bd59da356a9d0b9ca2731c3b93b8d205885a1f998aeaf0ca217c504600144b949cb50f8f0a0bed89adca8250f3d1a9f7cb22936d5a1d3a205f16e67ca6fc12815fd2beb5c4560caf095b8122789397e270f66f0ac91e1e92c25fb1d179e5ba2d15599a327d3066fa986350d9d5587b46ad6b8182ac36241670728a57ca06ff23edf9bc31845f55459caf3c57a29211891890af39fc01d0c0191916832889545a6b0f7ef5c3df16a17d0e2d499ced4a41bc4e46c603cf62db1709660e9ddee17ae1c9daaf76722a21946d19916b503cb7c8f4413c8cb3daa6c8bd1bc85085a20b8ea9244ae6ef6ac92d848cc9c8a382f65f2d888d6498ee849a7c9ca60da8fe5311494917b4d11615849df97e21f6c881008f3f8d5624ec4fe6a004d7dfb5fa4c24c26880b623fe5f6dbd59db209edf3dfced725e1f2e245f9e4886ef7d77c5183253fa58c66c65806428eb3a02acd79e0e3ce8eee72735997460dd14e27832193d9a767895c82897ff76b74c5953014f8beece87496d7ba1b01e224fc7a039357405d9c1acf245ef08b299d1ff7c479f1a815f98e280c4c04910a46b6af81e055079b01d6fcb7815007f68abaf520542f39d5abc0b7169c6593f28a9f96fe2b61831b41758f374359100ecfaf76811e74b0472519c08131ca4f32a73c979a43ae45f95388f83bd56da109ffbef949d4faffc66c0a436906554f21f908a189489c245189631f4e59fd81f1215948f25e855b2263488b49f645c5b87d39567902f89cd5da09a42cb81a7c9e377c5fba04b21550812cbe140d8608be5906eae76b8304f2938452efc69dc0aaa4b45043fe0bc5ac8939ff954fe2deffc9e03741194f8e872538bf2c3d80d919b70cdb57dbb735d34006286924a134fbcb861a5e79d059a7ed89237f6286c336f162170970458077334dee613a405ef2e40cd12fea771d93724eeee2fce1bcb331cff01da8efbc084793c8d5d3b74b250e2916a801a9b8dd0d8ec726c022aaa18fe0174b6902199b3614d7d09e4a81c57b701f78bffe10835f6b0f14db0cbe14bcc05da03bdcb9499923a5f44d76ff193c78544ef085e2ef1299fbbd80e74823bbb7ed55a51d7080b1c6694cffca93e2daff3750907b130629ca6b2d534d176edf224d11f5824ca0ae95474e8943ec29233fd67072ff545a0ef0136ab6e5dec55ad34f0a5d6e5b8dd8ed034b397e679b1b8f34357512a06727d64b60ed89c276d1e95ccf611233776c9777842aa7812697a26c701a27ddcddea2361e5ff086d2bdd5740e2e48b77f99e07b7969571f322ec8ee689ca58525f39a0446777cdf12a30eca4b00ce35ac71e4b2488a42ef8df1695311b182972381a4264255db12cfeaa3592b90b096a14194568141c204cfae09e3aaa2a95fb5b6053926c129642ed57344996a68140a0187775b197c1704cb5c424e054377bb1095eb3754556d89c431a8a86e2a6b9eafd9b0982324e9c2b352b608c72828c1f640fdac961fc95392417055d550c2381fea5bacf7928fbe9b66cc80c04b8ba03996d12cac2a4ddbe82c89ab7b72b5b054525929b00607c7de0c6c87a671bfe4f0e82b5d38bb6f88e4547192cad04503afa31041a6b3423fa038625fb80de81d8100b42fae9735c892e76c71322f785eea9cc643a468bedfd9a8ccdf81334b4af3fcc0420729f1c3e68f0cdc6452420e5ff33f5429466ca902da5fe38a9f556ad53110ffd9636ca69accb13ec8e755d729ba0d4af38ac6de45f4f1d30bea68742a7503c90804f90631b51363e023109303a4666377201c582ba6932f0087fb8658f07a743cd62f58c4cb79fb2dc14bcf5ee96bceeeaf7a6ba2ead9aa522707692d76f070bacdd669a2ca9e1f0ae0c36ed6ce119bf727d544c3a1ba2053e5d411a32eff26b9b5b73c8ef907085d798524c3df9b2e93ab438a543c6b8a316e51d85a500fea110839c38fcb5211a5270271bb5a251b27ccae3a782ba5121dedd66ede1ad0639ece121161ed4a67e204be86b2d85f4d738ac059087967ef609689875f0df78d39732e09b328a31a3decb11438073809b06ec51d532ac481ff04c979d4ab641cddebcd4e825f99b0f5ce16b1f24cc53b975a89f449074cdb5696b524896fd86d4b8a5d84b3c9f3201bb369f254a5ee7d10274727cf101da0096549143d17eaede04642cf56f5f1a3ed46247d7b0b48f4c72c6410b227dd2b7dc4e4dd63753bb199f16f551efc067a6ae8c8590d83f84242cf8d7473867540b86a9689641ff4e2b56b46aab8083b149877efe5a92a7a18a2c0ba8298d1371c4bd524a5baaf06ff73f12507bbfce4d9b49d0d01a21ae8230efacaed1635c41939cdf8f8c2b906cb3ae120307be8818a72d015f64939c7d8061e8cbd783e6e0aa36da4e82d83f50b77b166a8858214d3522656ddd9b837b783314b0c162fa0598bfdd1b1fc536470c51fe7a961d4cd8f523418692ce4fd0ac0202b6d76e4bf51beeddb97c2a67c63c2dd232cebb5788efadef5afc14fb37cc60a5a372d70998453670e6dff24e7f59711fb3da6dbfc82024b73a9076c6c14344cef4599b6d98c3342a109be9bfb125823c30eed6356a612d3ac0e8760c02f4c60dfb55a10cf0264c36cf2de115d00474bc5cf2986fa6563d8fdaa2dda836c02d1b372514b374b9c93fe38d6139ea6eec2198f4e02cc64dd8794738f266df59efe6cc7f2959736f0cc062a88a29ba2e0d5647db7b454defa0d2ccfc6e4450de30035f3d23608d56046f1c9154860719dcd4b0ba68f36cb84388278c7c8b298a6bb3bbae4e11c4641b40eb12dd99258bfbcf4dac7683145808e6f9d1c217e8c4d635a6fd516e6db6d38a2f683fd588bd8e2318d4ac14c91667d748e6011f3effe83262b964394e915745654bdc8ccecfff4141d5fd08ac771147b3665273ea8646c2f4e587b6deb96cbc548447b794a0ff19b61a53377df5a4a04a35683c7827ce2180c062a4ead4cc808257e6fde0ba9a9e5837f5d30eab5cec5c198cc8e6d379e6394df4736f3dabcfd2ac208c863a245911a6842ff2481c10179442f0855c342e2dba72b2e4a29b264f7f8bae7f7e6fe538bc3f900022fc91513be70e4ee727e59d7f43cf51d39908690efbbc70a6929aaee0c1d4a914d503c9ae38f510342484fd3dcedab7290a8de4d17ceb82699dbc2f7a7c9bac0e34eb5b0dc160ca1438aaa0b109b716b137987224612eca97d6da3d648569159ab832eec204bd55e9a559fb9bbb8cbf00f1b559212651d6ba1553bbbbdbb26f71f7c52200ce580501e3af02a3d002a16b542d67799d9a7f3c85c05811325fab02fbf34e23d4176497a2b6f0256548536bd35e1c749c2e79a5f901ef3c18ea9497c4277c97531ec941603d102f408d19441b42cc4f680b2258f22cc1a70cbd9394f4e5604973e2cfcb0919b2ac141df226732cac0053f3160798651c04f0dc1312dc5c0ec68b8ea2468b6b3ad9c92fb64c59cbbf3250b813c2a483d736efe9258f6374aa47b6327c9dc2cabfc393368e7354b9912ae82263fd56bd78de69942790a252c6d6385b44714f6a3b58d4ef0bb8cf9794e6377c8fd76b7f861bf656a7b7840495e069b10dfb9b351760c513bf1a09d4c342490cd631be5514648f284402891841d5ac4fdc416ed10109cca0168ab1e3d80099f4e300d1305c7826e55ba9524dfe2990855e56712bbeaa809f167e8c2b5b8df85cd5f3bbbb8a9c3a2f5eba421c451e94db2e61d85cbb5375677cebdc2972592421edc982a1130e38ed042b8ccfa91ec25292681ae711485dea760050486aa7000782cfe4bf3306e3911297c6bd61143dcc1ae52919267ea8dab0e0925fb4f5c36c493ce4e4a32fadd7db1339b5e54bfb378b8ca8ddd0cca95e26d05e3620cbd33d6ca1f7d37044f2857faa836c4dd31b6d7f982b8377ea904e37c2b6f2d15284b8dab45688267ae9d412074a21d27bf58563b7bd09ffc9eb472940bfed12919dda58a0954a15d9356f28941dd383fb375941fbb6bc92e23e47514f906deabec12fb879fe9d4c7da579af4a760df09a6063091cab72e165303d969242c57260585b1d3530af8f4313963aceb17bee604b4e467a4cb6574629f930506f9c3d6b706a9544b593179706e5d973b1ff2941b12923d0788445e311d9595958f34846b9428e182973f844a808ed72f39e6c3ebf659f2585d5e5994e36fce5f5e332fd43b67213e719553e693c7274080ff607138dada97af513e4bdc71cf75605044e571d8f7eb86a84dd893cf21ab6be7f93ada20975baaa7f8462e5abf2d6306da1c6327518fd488767c6a460131ec5b95ce027fe65209161f0aaa0216bd2095323340847073a943feeb210d68cb46a35c9c31a781a6a550da910c3e27d4daffe6b1e9b5697b82e9afc7665d8f4a25644231a05a108e339f6216db0327ee10af32716f03b749b318ed8bbd8f41b96d8a6dc126656b86b480f5557d3b044a374be376c218004d0601be66e6efcb968b171eabb4cac0415b69de4371c6f8b5689ffc335942af501d5fd6bc96c83aba6571dd8cc17990043e71e78e3be877a9d4f2c649b94585ae00f7220c8adf03f023a01c6d971174b6fa36dcba6e5284f9d7a681a2800562f4b8e034cd1c2f2a8c60024c7a0e986aa65cab2e2c8003d426320667f9b3071ed35eeb06315747c72b03744aa6de0189f3123c72f427785f373d2bb7dc92a64e34ac3c10fc886b35b21b8544f5abf95f0e50b61e84cd9e135c3d535080730bb6feddb9a002e8f6d66e99b821ad99d34821b30192b4bad288ee773a8c9dbf4baf8900ab4dff680b77c9fb486e8ad79a7f87d9bfb7920e518b409a96943b66a06ec02812244c47f67ce17276ff690ad1c36c062425a2dc0be8c27536f321a74c6aaa26234425ee666e598472360273eb1d567e33b2ea960fec57019b77534ea4dcaafd32b310f1e8d38f58baf77b3e10ea51037569b1af8fd60db40a671316fb5cddf873a73b07f59d94ec6bb19444cd1cfb4907215252a1b4b9c0f46dd0a2f01af1e5e0e5aeab57231e0cf5f25e53a55f6c31b87ff99125a7255e2358760e0f400b88762306cb4eb8d026adace0a76d3ded85da77ed6e47e0a602506ac6dea3e4e5a6ae8ea253ff398f44268e3aa10a676196d5ffce6da824496573c484c4fb632cba298e0d0abc14754a0d089f0da5ada89f2fa5e8017eb8a86f3d7baf1f481e28dbc89ae8af672cd1e3e732c5d2f857142102a3207a6fdb57d15938e91e745d4655a5fb9c005b560e36c768938bc7caae39883a2f2906547f08b6f3a5162b349872c87203ccb0362da1c1ed486951f6a2f221d7ca237b8c8708bdbcf98387cbc7d3d4bd99c09a37b837fee5ade4819fb0a8d62bbf86e8d4051286d9ba17c67eeb6f477a042b9e552b1bfcc02c256d7b3461e4bb396808b0a9f79d67f09aa0a241513e4e50b4cb5bc9b4f236dde4d6f05612b51576f4f2e", 0x1000}, {&(0x7f0000000bc0)="bbf7069d7b959d16f6c9dc8aa3b813bf288204bf6230adb3c21c9833e6de062c1ec50a16b266114c2a62bddd73cb847c6b728f200aaf634e89f1ae6e41d3a5b2fc3b81a8d6c2a2b9e813f5a33045973cd7f219722f10810c34fab93d943606353b50ac8a515cad57a90ef9782b64a325530916940488086a8503cf61a61f6ddcaa7940c98d450a85eda796f394a3190c4cb0eb628157b85ac104131cfedc65c9d07571634d327bdb01a92965efe75693d2da57559f341a0f1d9ab355bda49d4a01c2e534720c43db43327a86e466eeefa5d6876b2c35a354467a5d199e724cdd1158c2750ce750002f6d2cc66a60057f86aa66e8949c", 0xf6}, {&(0x7f0000000840)="527ef2b40db597787922aa0d05fb76731cb3f85b30e8026fdbdc1f51843f075aac33e277a6393503ed026c8e79581da953cab56aa6", 0x35}, {&(0x7f00000009c0)="4c85c8a3d9b9807f45d68487152db8bfc959f606a2f787afb1305f43a9b6e0e0a59b806e47db592f1cfd436de019c26de610a6ab259c3084e7dcc8e3a56e5dd15649aaea2c9c53c8da7eae450aebde9903886f6e534fc483c94fa0315aafdff2cfa45c1529545163f7d698a3b202286737665e946227187fa73e6913c1f8edc96a88cbd5a215", 0x86}, {&(0x7f0000004980)="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", 0x1000}, {&(0x7f0000000cc0)="503e1c903ed29a62d8a058b636cefc66fbbcf6dffe18ea3f5461bf07b4dd78a30438266447d346356d9aaefd6ac6571403eb3a6381ed3e7887fa42e1b1ac602ecc8ef187e85ba72cceee25d16e042b668db8bb", 0x53}], 0xa, &(0x7f0000000e00)=[@tclass={{0x14, 0x29, 0x43, 0x7041}}, @dstopts={{0x20, 0x29, 0x37, {0x6c, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x38, 0x29, 0x37, {0x32, 0x4, '\x00', [@generic={0xf9, 0x18, "d989ee21cbb8e5bcba9a15ebe2bdc4c9b965acba2abac0d8"}, @jumbo={0xc2, 0x4, 0x7fffffff}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x222b}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2d}, r4}}}], 0xc8}}, {{&(0x7f0000000f00)={0xa, 0x4e22, 0xca5, @mcast2, 0x812}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000f40)="e9ee590c43c44a2ec45b59a52b28f35b80a230414243e80b42bb95f5c8745834e805c6f4d7281f35a9457c745b85546a7adcb49eda8a48a798b0e4bdc53f7fe6d73edb5dc0c354f0cd23a3a7a6b13a9962a5c5864820779661e30e59ceb8f930097d4bde0a1be76c8e8c613b062df81457cdf7826ca18521b3938ff8215157db2ddf0602e230a4fa212c6819225a92de1b5b370450e1359fc7a4ee00e6fe542840a16c9966aa53f1707d53967220df", 0xaf}, {&(0x7f0000000680)="4e961b439988e1306a5aa63ca404e6e5f1167bdc133578b09809c60efc8e710db9b02f6986b745b94fd93b4394", 0x2d}, {&(0x7f0000001040)="d42b4ac7509bcbb710aea9cfe178e728d70b53900cf8013e5c2f369cc0ce893aacee8592e7cb67ce551beb903d5533f65e44d2addf0126104c050b00cfe347c9918258271dd42329dfbab245d2053dec9ea7d3a908d3e14c71ce874a9f0f96699a68362fce15f7bbdb8fa14a7162fe531fddd9ddf977ebb90d0a717c488a2f821d278dc0acd349b4134ef6a0eace714a469e3332ee90a35db078628ddad702d29f5f2dbaf7ffa0b83be349606de719007969db83885b31ef29cf14df5171dd33467758b2a03d54a51c92051e25b96f14e7a1060158515c36d4689a5e5b439b", 0xdf}, {&(0x7f0000001140)="1e15857a3a8e919827352e2cec428c1de56902e5a37cdcfe977ecafbb1aa45df2cb25bfadcfcc7dbfb32bd4d863b006b347ed7a1e82d2086d5f9b461c88b41b09541b2d7b0e7fb16c94b88a28c4e046654324d118627a761c9b1f93fbe852b37f6211bef1b408a26b63e4346b6b4464e15318603f1e752130e9efda104b8dc47423ea6ca87c0d760bcdd7e1c60641cb7913151831095c6287bd2f95b50576062a1240bbdd3455e383364d8c92c5fc45f6a76cbee8edfaadcc34ed4d2d3373f1dc7526898d520d2", 0xc7}, {&(0x7f0000001240)="f755b4b67179e9756190af84760022c9474526f45e3a2d3073567ed497cf804e78b317a2b98e97d049022063feeb4bfe4f2e36bbf2f2bced6ee6debd72db959372b21092d6d868a337380eca87b3ea7e105c0bf3456f4d8a6423120c96fe59295ce557e9ae96c06252229ecbfcadda4f5afeeff2d46715886f471f3cc493a7b4131a8f17225df42fca94081a42a1536e4f6f887d647f426867c5c21e316d70c6406b4d77355ba07cd960a96b19c5694b2fe5268adf90", 0xb6}], 0x5, &(0x7f0000001380)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dstopts={{0x118, 0x29, 0x37, {0xbf, 0x1f, '\x00', [@pad1, @pad1, @generic={0x0, 0x81, "2531cd1f4b693902482093bde21c86874aef186e9a5d22965411be72df12c7cf2549e446ee5a569dc68ebe4e1fa8a9b88b594c8a14184a942b459945d1381726a75f0f8cdf094cc9d8a73534c9474f43a493b733b2f48b35ccc0787d592524ab7d11448e35d468706b7585aff2049260a3d8f14aadd1135866295c855d21f2d6e5"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xc, 0x5, [0x1000, 0x1, 0x0, 0x6, 0xd]}}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x9, 0x3d, [0x2dff, 0x1, 0x1, 0x5, 0x9]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000001}}, @hoplimit={{0x14, 0x29, 0x34, 0x100}}], 0x160}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003580)="851f38565b73a7d3978a84e0f9c77a63b3f8e6b27de692542b704171584601a77c48ffd4d90cf74d0d8b3cd76a81a8fc1f3759ca9bba22516e99ad09bca7aa37d4b927f2da06b0dafa3c9bef12b38fea44ef7c9df9a8735c23", 0x59}, {&(0x7f0000003600)="6dc4126e24930507f99334bd1b323372611075435f07a0f8b79a20788c445331179a338b60c51f2cf729dc79f4f0525c674acf9a5b9e8c1ebbbf8a51662c646aab0b5dfa565eb1dcd22bf7d89164c00ac6a6a9001c2d3f8504c951c8d655b789f0cf3af264b5084245d447e5aab2b8ceaa4e9de8e7dda530f784e9d34e695f18d99d77f2481f18dbc42917c4601f1580591e2164522588a8f58e0b9c7e3526f2436f2f20", 0xa4}], 0x2}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003700)="883b1e2f01d1a54f27a9f4a7b5badab50f3a5d4ca212663740a31e455de8d8870e2d8b1aac8b1db04cd7626f89b46a225d1a60463d6d666598120301358eca92718716a291f9caa427e3dc1034457b5129d7b38f01a0c46c481272412c392cb9f48255b29aefd7fd14b74527c2e9161abc080a4aa10cbe320c9771c613d8ca62ef", 0x81}], 0x1, &(0x7f0000003800)=[@rthdr_2292={{0x78, 0x29, 0x39, {0xbd, 0xc, 0x1, 0xe8, 0x0, [@empty, @private2, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, @empty]}}}, @rthdr={{0x98, 0x29, 0x39, {0x4, 0x10, 0x0, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x13}, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x41}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1, @loopback, @loopback]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x3c, 0x10, 0x0, 0xd5, 0x0, [@empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x24}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x12}, @private1, @dev={0xfe, 0x80, '\x00', 0x19}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0xe12f}}], 0xfffffffffffffed9}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a00)="b32429461b326ba7ec4ee9b35b9388c81a271f40f825be13cb80e565c3c70ae1f17f7a5db61901cee163284745e1b423b5bb5143f13b61cefa1bd0894bdfe540caa8c58979e05e74fc79cdd2a13d4f90006ada53433e317b6350fa957469aab55b237dbad8048d79dbd7966db0977c0432ff91e66ed55d5700a37a409919b1dff15097707c0731e111c35c97da", 0x8d}, {&(0x7f0000003ac0)="4b15bd93dc2ff6eb1869dced1e4d28a7517fd17f3e5e0ae133a403dd2412ae77875b074fada23c288e99cdd02dd3a3e9d194c6e620fb65b11cb986aeeb0eeb18512464ae67179d413ad81263bc", 0x4d}, {&(0x7f0000003b40)="37cd9a921a70f802cb0f47a39b6341a9150468fc6d3579248b64f7448ac12391f5f965afcae907754471773bc76f774cdcdbcd1deed1ed465dfb894600fea5ef005bcb3e86550d979adaad707f705228913d57dccc40cd6bf03e7e888d834f1b884dcd554526ca2c606ca3e62cddd9afe4f28ca299ae25d9c626518061a2dd14fd487c4c946f785d", 0x88}], 0x3}}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003c40)="81b36fdac2e19beea39497e0a1b752a33b363e9702ac82ad28baf0415169333922d0c2a385f4ea53d1b4a6c8abd4b8518be2afdc5ecbaf1feac2c962a1290f96ddff7852ce132405235d6e2128f818cf69a86629e4f5698267", 0x59}, {&(0x7f0000003cc0)}], 0x2, &(0x7f0000003e00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfff}}, @hoplimit={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r8}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x6c, 0xa, '\x00', [@pad1, @generic={0x9, 0x52, "e9b2687d04128cd26b8dd30d38a7d405551128afdaad14e96bf83b1c897571538243de1abd961651f04a012dcd91dbe269cf07bdde25836c7658f68782883e0e50a8438b798d304f7304cb964c1d66525f4f"}]}}}], 0xc8}}, {{&(0x7f0000003f00)={0xa, 0x4e20, 0xf8ae, @private2, 0x8b43}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003f40)="01693a4c97b953c1820a91cc79cf1c5383b8b8ed6ea853ba4272765b", 0x1c}], 0x1, &(0x7f0000003fc0)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @enc_lim, @jumbo={0xc2, 0x4, 0x7fffffff}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x40}}, {{&(0x7f0000004000)={0xa, 0x4e22, 0x2004f6, @mcast2, 0x6}, 0x1c, &(0x7f0000004480)=[{&(0x7f0000004040)="96d7ee8fc567a975d72d5b05cb61ec5dca1dbb152e6073f64fdb0479d16a61d468c6c1faf49ab37af8a6659119d9864cfadc452d0f8c413f21dd3500a9d1c72d23e0b8cb82041f4769a12b2779c24bb20db2f5daabbad86b54075a10ca7fea1d1e8b8b3d0669798188580a9ad1a94e5a0d85456ca8d287ffa6c4dcc7ae093ab014e772a56a0afe58f65738e5cb8c2c25769c02da0bc638459a7309978f155a60da0e0ca6e664557762db3f14c6c1443378db95932563b05240003cf919677b7b724ce235ac093f24465c3ee158fb246ee83a212fd539ea1f845896", 0xdb}, {&(0x7f0000004140)="c94088823611c0dae6ff1dcfa2ecbe80f80f4d8ba11ab130a28b3121807c89aad70c8bc29f417ba602b0a74c5a2f0b4ae4729fd8e0407e4fce23bc4ba244997016a4585c139c6d815e7650a9f7cf497d2fd519dc154c66363648b16a2c985d8c23a152d41d3dd36852356632fb05a768ad186dc798355da6b8e8f40755efd29cb4560a6582dcc66b3b1adeb268cc6fd4d7683c7e1ce4476a5cb8e9ab3c6afc913f325bb0d3ae1bf1fbff85dc84a61a98bba32d18f9ff78d598d2662fff0dea209e54d4", 0xc3}, {&(0x7f0000004240)="c377bf746224e87aea1159397a98a423f8d6af56a52f", 0x16}, {&(0x7f0000004280)="30904bf0570019ff9bbca7dac2887b086910bf07ecd913841f0e0aba9279a533b84b6fef61a30a541d8be0dc877833a3294505fee75941e484cce67c4ffa768d5c61f303285e618fcd320bc57eb83ad04a2de29e573c6f5dce29bb6994bb0382c58c56e9fbf5c89eba244a5b969a4623172e3639400d57a56d26dc4b294372a4fc5d984d3b75768449012fe438895409538d068b29dc32d86293adef7465163b004443f05b575e9d061b8f164f0d2051bff97e73c67ab03d3a618af5e32b3a37d0a9402ffd79107ffbe4555e4e3c564483de3a0ea1dde33b5d301cdcbadd2e77e1c5df84e6e47c03971d0173915678cf35d3ab07ca2bf5", 0xf7}, {&(0x7f0000004380)="137bbd34b3f9d52f77c406d5ab8d725737afafc93ec4458a9ed036c3a8ec869a636bb68a3784421a24a77992431e83780462f27745315fddc10cf13bafd08c632653e51e0748fe8a20130a8e3fa639fc2ec2bb64c137d290d9ce99bc83c54020720c0277d2a14cc6a02e818de8789df26f18a77614fea73375910a2bcb0288d9a9a3f13d9909ed58b6b86f51cd328b6d43acee1601f29c0baa24ee5526a727d5325065b412ffe06019c92a6a57d8db123bfa4aa370601f73e41cd09cd5ad6b2ad8dbb894a691686451db8762e8319cb1b134ecb275b866a5c21d444adf47b64396bf", 0xe2}], 0x5, &(0x7f0000004500)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7ff0}}, @hopopts={{0x58, 0x29, 0x36, {0x5e, 0x7, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @pad1, @pad1, @jumbo, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0xf}, @jumbo={0xc2, 0x4, 0x100}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x24000000}}], 0xa0}}], 0x9, 0x4004044) 1m19.15867802s ago: executing program 0 (id=2360): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@bridge_setlink={0x160, 0x13, 0x200, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x44200, 0x802}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_VFINFO_LIST={0x130, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0xd}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0xfffffff8}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x8000000000000001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x18000, 0x6}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xa6b, 0x401}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0xa}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xa1e, 0x6}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x479}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xffffffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x3ff, 0x5}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffff800, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7e, 0x35cd49fb}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x9d37}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000860}, 0x240400d0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(0xffffffffffffffff, 0xfffffffe) (async) listen(0xffffffffffffffff, 0xfffffffe) r4 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x0) (async) accept4$tipc(r2, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1m5.699899622s ago: executing program 0 (id=2360): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@bridge_setlink={0x160, 0x13, 0x200, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x44200, 0x802}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_VFINFO_LIST={0x130, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0xd}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0xfffffff8}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x8000000000000001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x18000, 0x6}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xa6b, 0x401}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0xa}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xa1e, 0x6}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x479}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xffffffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x3ff, 0x5}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffff800, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7e, 0x35cd49fb}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x9d37}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000860}, 0x240400d0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(0xffffffffffffffff, 0xfffffffe) (async) listen(0xffffffffffffffff, 0xfffffffe) r4 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x0) (async) accept4$tipc(r2, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 51.790533126s ago: executing program 0 (id=2360): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@bridge_setlink={0x160, 0x13, 0x200, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x44200, 0x802}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_VFINFO_LIST={0x130, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0xd}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0xfffffff8}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x8000000000000001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x18000, 0x6}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xa6b, 0x401}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0xa}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xa1e, 0x6}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x479}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xffffffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x3ff, 0x5}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffff800, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7e, 0x35cd49fb}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x9d37}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000860}, 0x240400d0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(0xffffffffffffffff, 0xfffffffe) (async) listen(0xffffffffffffffff, 0xfffffffe) r4 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x0) (async) accept4$tipc(r2, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 40.367020313s ago: executing program 0 (id=2360): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@bridge_setlink={0x160, 0x13, 0x200, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x44200, 0x802}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_VFINFO_LIST={0x130, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0xd}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0xfffffff8}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x8000000000000001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x18000, 0x6}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xa6b, 0x401}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0xa}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xa1e, 0x6}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x479}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xffffffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x3ff, 0x5}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffff800, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7e, 0x35cd49fb}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x9d37}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000860}, 0x240400d0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(0xffffffffffffffff, 0xfffffffe) (async) listen(0xffffffffffffffff, 0xfffffffe) r4 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x0) (async) accept4$tipc(r2, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 26.061221555s ago: executing program 0 (id=2360): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@bridge_setlink={0x160, 0x13, 0x200, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x44200, 0x802}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_VFINFO_LIST={0x130, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0xd}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0xfffffff8}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x8000000000000001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x18000, 0x6}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xa6b, 0x401}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0xa}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xa1e, 0x6}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x479}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xffffffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x3ff, 0x5}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffff800, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7e, 0x35cd49fb}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x9d37}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000860}, 0x240400d0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(0xffffffffffffffff, 0xfffffffe) (async) listen(0xffffffffffffffff, 0xfffffffe) r4 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x0) (async) accept4$tipc(r2, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 13.020085235s ago: executing program 0 (id=2360): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@bridge_setlink={0x160, 0x13, 0x200, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x44200, 0x802}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_VFINFO_LIST={0x130, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0xd}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0xfffffff8}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x8000000000000001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x18000, 0x6}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xa6b, 0x401}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0xa}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xa1e, 0x6}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x479}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xffffffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x3ff, 0x5}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffff800, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7e, 0x35cd49fb}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x9d37}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000860}, 0x240400d0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(0xffffffffffffffff, 0xfffffffe) (async) listen(0xffffffffffffffff, 0xfffffffe) r4 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x0) (async) accept4$tipc(r2, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 5.839620422s ago: executing program 6 (id=3172): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000006c0)={0x0, 0xffffffffffffff7f, 0x0, [0x7, 0x5, 0x3, 0x20002], [0x3, 0x80000001, 0x7, 0x0, 0x6, 0x6, 0x82, 0x2, 0xfffffffffffff3ca, 0x3, 0x200, 0x2, 0x6, 0x200, 0x1, 0x8b, 0xd, 0x3dd, 0x3ff, 0x2, 0x1, 0x3e0d, 0x7fffffffffffffff, 0xffffffffffff0c49, 0x3, 0x8, 0x7fffffff, 0x8000, 0x4, 0xfffffffffffffffb, 0x9, 0x3514, 0x401, 0x9, 0xffffffffffffff7f, 0x8, 0x4, 0x7, 0x9, 0x89, 0xffff, 0x9, 0x1000, 0xb0a, 0x3ff, 0xffffffffffffccbf, 0x6976c184, 0x9, 0x2000000, 0x7c9, 0x9, 0x7, 0x3, 0x8, 0x6, 0x1, 0x7, 0x179, 0x3, 0x5, 0x8000000000000001, 0x1, 0x81a, 0x5, 0x8, 0x8, 0x4, 0x8, 0x5, 0x2, 0x3228, 0x9, 0xfffffffffffffff8, 0x2, 0x40, 0x8, 0x80000000, 0x4, 0x9, 0xd1, 0xe, 0x6e, 0xaf, 0x3, 0x20d9, 0xfffffffffffffffc, 0x200, 0x9, 0x4, 0x7, 0x1, 0x1, 0xfffffffffffff217, 0x5, 0x3, 0xffffffffffff115c, 0x9, 0x7ce, 0x1, 0x9, 0x101, 0xfb5c, 0x1ff, 0x8, 0x4, 0x1, 0xe0, 0x1, 0x0, 0x6, 0xf, 0xe04, 0x5, 0x5, 0x4, 0x1, 0x6, 0x1, 0x0, 0xf, 0x1]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000b00)={r1, 0x0, 0x1, [0x10, 0x6, 0x8, 0x1, 0x80000000000], [0xffffffff, 0x3, 0x4, 0x6, 0x0, 0xd9, 0x2, 0x0, 0x3, 0x4, 0x3, 0x6, 0x4c, 0x2, 0x4, 0x8, 0x9, 0x6, 0x7, 0x9, 0xc, 0x400, 0x64dc, 0xd2, 0x9, 0x1, 0x1, 0x1, 0x5, 0xfffffffffffffffb, 0x9, 0x71, 0xc, 0x0, 0x7ff, 0x6, 0x4, 0x7, 0x7, 0x9, 0x4, 0x1, 0x0, 0x200, 0xffffffff, 0x28, 0xf97, 0x0, 0x1, 0x7fffffffffffffff, 0xfffffffffffffff9, 0x2bb2, 0x2, 0x1, 0x6, 0xfffffffffffffffe, 0x200, 0x2, 0xa0, 0x7ff, 0x1, 0x9, 0xc, 0x2, 0x5, 0x1, 0x100000000, 0x7, 0x64, 0x10, 0x3, 0xcaf, 0x0, 0x5, 0x5, 0x5137, 0xffffffffffff045b, 0xe50b, 0x41, 0x0, 0x5, 0x5, 0x40, 0x1, 0x6, 0x1, 0x5, 0x9, 0xe2, 0x3, 0xb5b, 0x1, 0x1, 0x2, 0x1, 0x2, 0x3b, 0x3, 0x1000000000000, 0x43f, 0x3, 0x5fce, 0x8001, 0x5, 0x5, 0x8000000000000000, 0x2e09c1a, 0xaf02, 0x2d, 0x19f, 0x460, 0x67, 0xffffffffffffffff, 0x6d, 0x0, 0x401, 0x2, 0xfffffffffffffff3, 0x4, 0x4, 0x6]}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001400010000000000000000c90300008008000280"], 0x1c}], 0x1}, 0x0) 5.743330084s ago: executing program 6 (id=3174): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x103e, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 5.500463783s ago: executing program 6 (id=3175): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000e5f757be5c89982b8c651e417ca32801b308c0cab7ee308b6a7bcf5218f4df1329fa571648bc1aeefba9438ee84016a07ce2c0374e50d6a69a8751804b9ff5bb8427517048e54bb42a17ce7703d390dff6c021635e9079687cb9e80ae56a0dc5866b88c3b8b1142051835e114c281f94bc483ead3fe4fde3053142adea646430b097928f13cd182a37886ee0402193fe40467c6eec786b5873cc7104fe6e4e414102c1f194cca82b19b6596279fa3c81c6bfb45099727a929d9543def65bf082ea3856146191435b010a6aa2f0b9a02056dc5b1e1e27fc9831ce054c11046177eae6b105d4317998d74569a87c225e0057abfa5204a76d4072282fb5d8ec1d3e89c32d525f8e00485b5da876f7a94bb2988433a532b05a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf25094f7be48f797a320000000008004100", @ANYRES16=r2, @ANYBLOB="e00e5aa1c84916243e32f4ac2a0da1be3520dad668280a8df199caf49a40d7a686be9a86a3915810584f3568b334a22b348e56b8c6347bb9e73dd2eb3c"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x404c014) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000002dbd7000fedbdf150800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r3}, 0x18) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="000000000097419206edf32b", @ANYRES16=r5, @ANYBLOB="00012abd7000fedbdf250b0000000c0009800800020006000000380106804300040067636d28616573290000000000000000000000000000000000000000000000001b000000ee50dc544168a73e548917d81108f81a7c567e1ee481a643d60e2900c1000300aba14c34ccfa707a0e18e0870bb0eca7cd9d8e7666e9887a69cc23dbb5390ebcd7b123165fc0386905770bd9ec5c1325158d9fc01146011b6c6bd04052a04ff42c5f3ef75c1f44858cca7b756a8a3d5f23a6e5e67c09c3856c5c76acfc944a735691ebdec46eb64b97eaac4a0e031e8035efafc9d6d73b1a488d46cd7213f3ab84056b05a55fca66d6a1bbf9acbebff53aa99590bac40c09e8a363bea88edfedbdaba2ba28bf822295348d67824039bf805046b66144a3e19277096619000000220003004a51e41d81f435861bb1a32fc3afc2dbc8614d6eae79d491014fbace6d65000006000300e7fb00000c0009800800010007000000"], 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x48040) unshare(0x64000600) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYBLOB="a80200001b0000022abd7000fc9bdf2500000000000000000000000000000000fe8800000000000000000000000001014e2100004e220fff0200802073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2a8}}, 0x810) r7 = socket$inet6(0x10, 0x2, 0x0) write(r7, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r9, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r11, 0x0, &(0x7f0000000a80)) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) 2.802076674s ago: executing program 1 (id=3187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) pipe(&(0x7f0000000140)={0xffffffffffffffff}) (rerun: 32) splice(r3, 0x0, r2, 0x0, 0xfffffffffffffffe, 0xd) (async, rerun: 64) close(r2) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0x5) (async, rerun: 32) connect$bt_rfcomm(r7, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) (rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e0000000018ef02800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200102, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000180)='./file0\x00', r10, 0x4000, r9}, 0x18) (async) close(r9) (async, rerun: 64) r11 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x40000003, 0x7, 0x6361, 0x5, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000081) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.634373431s ago: executing program 5 (id=3188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1006}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 2.417058592s ago: executing program 2 (id=3190): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30f) r5 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair(0xb, 0xa, 0x2, &(0x7f0000000000)) (async) socketpair(0xb, 0xa, 0x2, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x0, @rand_addr=0x64010100, 0x4e24, 0x4, 'lblcr\x00', 0xc, 0xfff, 0x69}, {@private=0xa010100, 0x4e20, 0x1, 0x1, 0x0, 0x5}}, 0x44) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000140)=0x8) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @broadcast}}) 2.356512242s ago: executing program 5 (id=3191): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000050000020000000f00000008000300", @ANYRES32=r4, @ANYBLOB="0500330002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) 2.252575068s ago: executing program 1 (id=3192): r0 = socket(0x10, 0x803, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000530b000000000000ff0100008500000011000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) 2.049074515s ago: executing program 5 (id=3193): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket(0x80000000000000a, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x8f23, 0x1d8, 0xa2, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0xa}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) pipe(&(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x3ff, 0x8, 0x2, 0x20, r0, 0x7, '\x00', r2, r3, 0x0, 0x3, 0x3, 0xf}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071108c000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.901491661s ago: executing program 2 (id=3194): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private2, @private=0xa010101, 0x1f, 0xd}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) 1.869165841s ago: executing program 1 (id=3195): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d00000000140002800800010001000000080002001100"], 0x74}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151", 0xc4}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb740c1efdf8db3b99ed18fb67c1f75ef7d55b3bb185f5f38665ea5e09", 0x60}, {&(0x7f0000000180)="3f82090ccda4f8ce11f43ea8b51b08afd200c6075794cdd2e0021e30a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a933", 0x46}], 0x3}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f", 0x6d}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915de1a58a32d021d9a26", 0xd5}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d96224c8fd12762ad7f2a635040cde08fb0cdfb05e646af483235ca7dab9e450a5b31688495fd42debc2814a67681106e47a6e9982aa87da6fdf5e6019ef4d4242508350aa8f1f9db96dd4d463809c82ddccaa98759e2b1a884afe3e5e554aee58ee3a0bd2e1997484626cb814b8e1d3645d36ae10c43c8da0a7a85d133bfe776e35f796b7a4320400c47dda5d4f67cac9f3c6fd9693856ba5162c3124fb2bf8ca4ead762bbfa4c62e6be779", 0x174}, {&(0x7f0000000900)="5c3eb8799e8565193cf737e01055d298a4193e91d6dd89384d12d1da97e7e88852e279071ca7a9b536c7911d618feb48b66f1e17e130b7c2f27b77e2053065d05a00ae7bd353283ee3dcaf244ff26600e520af5091696d833f34518e53327718e7e3298de86f15e6a778f6008b96661a10be65c0a44b21b4c8724f61f6ca10d927a31e0c9f", 0x85}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x3db}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.701233571s ago: executing program 2 (id=3196): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x88001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802110000011202110000000802110000000000000000000000000264000100000602020202020201088284"], 0x36) 1.699207938s ago: executing program 5 (id=3197): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) (fail_nth: 50) 1.586904044s ago: executing program 5 (id=3198): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x8, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) unshare(0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210400000000040000000100000008000100"], 0x38}}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20020000800459c00280000f97764010101ac1414aa00004e2200000001a0f031794f59fabad82a4c52751ab51053df25d14f0d11fc8d4040cef976c9da37a1639d7810d10aa734788af8cb8fcf5ffe97c444f301edb3dbff356ab5650c94e4d88ee47831d881be1de8d491ec6754f25908f41fb32ff7a4846ae2a7fc88231b21409df1013d4c5fd9c811d0bca6ccbbe77e9436fcc8204630326800e6ac881fb118a3754e108d6c991dca80b1ef757c88a0fcd3cc5f2235c616e8a92f56551ccbfbbed9d7e87f09a91cd6508d7cd19af9a7099b9633465b3566", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = socket(0x10, 0x80003, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x6, 0x5, 0x6, 0x77802, 0xffffffffffffffff, 0x7ff, '\x00', r6, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9a}}, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r1, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.300436992s ago: executing program 5 (id=3199): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x2c, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40080c1}, 0x34008098) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000180)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880004d6c9db0000db15d088bd8b7000000000d9ce9bc7e28d94000200ff01800a0000ebfc0607bdfd5910547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840", 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000026c42b2da8ef1114000000000000000071602c873ba68750cd0008004b"], 0x20}}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x0, 0x6}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) 1.004589832s ago: executing program 2 (id=3200): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4040000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000680001b44a6a9d00fdffff7f00000000000000000c00020001000000150000000400040006000300"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@remote, @bcast, @remote, @null, @remote, @default]}, &(0x7f0000000100)=0x48) accept$netrom(r5, &(0x7f0000000140)={{0x3, @null}, [@null, @bcast, @null, @default, @rose, @bcast, @remote, @netrom]}, &(0x7f00000001c0)=0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x48}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x4000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) 926.634145ms ago: executing program 6 (id=3201): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1006}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 912.660912ms ago: executing program 1 (id=3202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010020000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300002000050000000060a010400000000000000000100000008000b400000000028000480240001800b000100736f636b65740000140002800800014000000000080002400000000b0900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x21, &(0x7f00000006c0), &(0x7f0000000100)=0x1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) close(r2) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000000c0)={0x52, 0x10, [0x3ff, 0x8, 0x0, 0x3], &(0x7f0000000040)=[0x0, 0x0]}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="c347183da2fc595e0997c70025be5610af1c9e41a8553491de899fcead3faabc3c1cdb74e0c00bead9235fe71adc637c9cc22de1e0b838d700ab5431d97c7c92990c7595f8", @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000035ff040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000000) 748.00336ms ago: executing program 1 (id=3203): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYRES16=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x50800}, 0x855) listen(r1, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) 739.751429ms ago: executing program 6 (id=3204): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe903}, [@ringbuf_query, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @generic={0x8, 0x9, 0x8, 0x4, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xae, &(0x7f0000000400)=""/174, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0x7, 0xffffff00}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r2], &(0x7f00000006c0)=[{0x1, 0x1, 0xf, 0x9}, {0x5, 0x2, 0x0, 0x4}, {0x2, 0x5, 0xf, 0xb}, {0x0, 0x1, 0x1, 0x9}, {0x5, 0x5, 0xb, 0xa}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r3, 0x0, 0xb9, 0xf, &(0x7f0000000840)="7f62ca9b8f32a8fbd6955bcf93a457878c1016baeb4ab72c55f8a24b0d0824c4145a377d5ecad752cfb18a3c366a75b5d2a1a8d35fc2e9af25a601f36057ae51cdb5e1d756040288ffed357804eeef1f1e2999a266bbc831a9e2ed317a915cf3492fe43fec06edca53ec0c94aab7ac942b4604a158288caba62c829bd88255c43b54d99e2548ddbcb43765c72d5440a3fe5c391f589fc486db165266441ec63cec470426c68295f4c31d5ce34ac5d8a17c313ddcb30784bb41", &(0x7f0000000900)=""/15, 0x10001, 0x0, 0x3c, 0x32, &(0x7f0000000940)="66b9f8bf926e20f90f046dd148df58f0f333163cb0bd2fc3580631ba238380c619b24b17bfc4a4e257642c5cbe0878a5590ed024372ea04e45cbf6f5", &(0x7f0000000980)="0ec4f13613db907a90682ba85b5483b2342ebe66f20a575b912de2c9b2cbdb46f14104815d825867e5f2132ad1cc280bed0c", 0x2, 0x0, 0x10001}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) close(r5) 489.073372ms ago: executing program 1 (id=3205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20012}, [@IFLA_GROUP={0x8, 0x1b, 0x10}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x156eccba77a09d1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x0) connect$pppl2tp(r3, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @empty}, 0x2, 0x3, 0x0, 0x1}}, 0x26) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r9, &(0x7f0000000300)="3c1f4374367b7cb2b45710af", &(0x7f00000003c0)=@tcp=r10, 0x1}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x10, 0x110, 0xb}}], 0x28}, 0x0) unshare(0x24020400) sendmsg$NFT_BATCH(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x23}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000200)=""/189, 0xbd}], 0x3}, 0x0) pipe(&(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00'}) 488.770381ms ago: executing program 6 (id=3206): r0 = socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x10000}, 0x28) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0x80000018}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xa0179e08}) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r5, 0x1, 0x2, 0xffffffff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x4b, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0xd, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x58}}, 0x804) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x759e}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff9}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd8}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001040300000017ff03f3ff000a0903d4636613696ed4"], 0x1c}, 0x1, 0x0, 0x0, 0x40440}, 0x800) 80.497343ms ago: executing program 2 (id=3207): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}, 0x19}, 0x40880) 0s ago: executing program 2 (id=3208): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000100)) shutdown(r0, 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0xd0, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC, @NLBL_CIPSOV4_A_MLSLVLLOC={0xffffff61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0xff47}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0xd0}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x102, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f84ec0", 0x4, 0x2f, 0x0, @ipv4, @local, {[@srh={0x3a, 0x10, 0x4, 0x8, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @remote, @dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1]}]}}}}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a40), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a80)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdc00, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x404c000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r6, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r8, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xf}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x300}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}}, 0x4000000) splice(r2, &(0x7f0000000040)=0x3, r3, &(0x7f0000000080)=0xce5, 0x2, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r9, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4109, 0x100d}], 0x5}, 0x80000000}], 0x4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000003c0), 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) kernel console output (not intermixed with test programs): 0x10 [ 395.666422][T15152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.666473][T15152] ? down_read+0x1ad/0x2e0 [ 395.666504][T15152] genl_rcv+0x28/0x40 [ 395.666536][T15152] netlink_unicast+0x758/0x8d0 [ 395.666575][T15152] netlink_sendmsg+0x805/0xb30 [ 395.666616][T15152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.666649][T15152] ? aa_sock_msg_perm+0x94/0x160 [ 395.666679][T15152] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.666706][T15152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.666736][T15152] __sock_sendmsg+0x219/0x270 [ 395.666765][T15152] ____sys_sendmsg+0x505/0x830 [ 395.666805][T15152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.666849][T15152] ? import_iovec+0x74/0xa0 [ 395.666876][T15152] ___sys_sendmsg+0x21f/0x2a0 [ 395.666912][T15152] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.666992][T15152] ? __fget_files+0x2a/0x420 [ 395.667015][T15152] ? __fget_files+0x3a0/0x420 [ 395.667054][T15152] __x64_sys_sendmsg+0x19b/0x260 [ 395.667090][T15152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.667137][T15152] ? rcu_is_watching+0x15/0xb0 [ 395.667178][T15152] ? do_syscall_64+0xbe/0x3b0 [ 395.667217][T15152] do_syscall_64+0xfa/0x3b0 [ 395.667242][T15152] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.667267][T15152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.667289][T15152] ? clear_bhb_loop+0x60/0xb0 [ 395.667317][T15152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.667339][T15152] RIP: 0033:0x7f3bfc58e929 [ 395.667361][T15152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.667380][T15152] RSP: 002b:00007f3bfd3ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.667406][T15152] RAX: ffffffffffffffda RBX: 00007f3bfc7b5fa0 RCX: 00007f3bfc58e929 [ 395.667423][T15152] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 395.667450][T15152] RBP: 00007f3bfc610b39 R08: 0000000000000000 R09: 0000000000000000 [ 395.667465][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.667479][T15152] R13: 0000000000000000 R14: 00007f3bfc7b5fa0 R15: 00007ffe80eefcb8 [ 395.667526][T15152] [ 396.148795][T14993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.187214][T14993] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.230838][T13945] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.238068][T13945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.277829][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2672'. [ 396.361221][T15158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.452429][T13949] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.459631][T13949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.471328][T15168] openvswitch: netlink: IPv4 tun info is not correct [ 396.552316][T15171] openvswitch: netlink: IPv4 tun info is not correct [ 396.621164][T15163] lo speed is unknown, defaulting to 1000 [ 396.672769][T15163] lo speed is unknown, defaulting to 1000 [ 397.005667][ T5832] Bluetooth: hci6: command 0x0419 tx timeout [ 397.372903][T14993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.484393][T15198] pim6reg1: entered allmulticast mode [ 397.516695][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'. [ 397.536064][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'. [ 397.949048][T14993] veth0_vlan: entered promiscuous mode [ 398.078235][T14993] veth1_vlan: entered promiscuous mode [ 398.420798][T14993] veth0_macvtap: entered promiscuous mode [ 398.504226][T15228] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2687'. [ 398.535437][T14993] veth1_macvtap: entered promiscuous mode [ 398.571987][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2687'. [ 398.603924][T14993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.661465][T14993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.694308][T15231] xt_cgroup: xt_cgroup: no path or classid specified [ 398.740920][T15231] xt_cgroup: xt_cgroup: no path or classid specified [ 398.832777][T13946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.873114][T15234] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2689'. [ 398.877905][T15237] openvswitch: netlink: IPv4 tun info is not correct [ 398.894143][T13937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.905570][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2691'. [ 398.915320][T13945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.008908][T15238] geneve2: entered promiscuous mode [ 399.018296][T15238] geneve2: entered allmulticast mode [ 399.042053][T13945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.093140][ T5835] Bluetooth: hci6: command 0x0419 tx timeout [ 399.114083][T13945] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 3072 - 0 [ 399.135586][T15244] netlink: 'syz.2.2692': attribute type 2 has an invalid length. [ 399.181401][T13945] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 3072 - 0 [ 399.201285][T13945] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 3072 - 0 [ 399.222892][T13945] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 3072 - 0 [ 399.277279][T13945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.326460][T13945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.405776][T13946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.438137][T13946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.706899][T15255] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2695'. [ 399.905215][T15264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.168249][T13945] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.270085][T13945] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.337341][T13945] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.548090][T13945] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.686242][T13945] bridge_slave_1: left allmulticast mode [ 400.692395][T13945] bridge_slave_1: left promiscuous mode [ 400.699543][T13945] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.710982][T13945] bridge_slave_0: left allmulticast mode [ 400.716749][T13945] bridge_slave_0: left promiscuous mode [ 400.722634][T13945] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.949976][T15277] netlink: 'syz.6.2704': attribute type 1 has an invalid length. [ 400.966019][T15277] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2704'. [ 401.462942][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 401.463140][T13945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.482500][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 401.496093][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 401.496157][T13945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.515598][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 401.526346][T13945] bond0 (unregistering): Released all slaves [ 401.532704][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 401.574617][T15281] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 401.599009][T15281] CPU: 1 UID: 0 PID: 15281 Comm: syz.1.2702 Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 401.599044][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.599059][T15281] Call Trace: [ 401.599069][T15281] [ 401.599081][T15281] dump_stack_lvl+0x189/0x250 [ 401.599125][T15281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.599161][T15281] ? __pfx__printk+0x10/0x10 [ 401.599186][T15281] ? kernfs_path_from_node+0x2c/0x260 [ 401.599213][T15281] ? kernfs_path_from_node+0x2c/0x260 [ 401.599236][T15281] ? kernfs_path_from_node+0x2c/0x260 [ 401.599263][T15281] ? kernfs_path_from_node+0x22c/0x260 [ 401.599287][T15281] ? kernfs_path_from_node+0x2c/0x260 [ 401.599317][T15281] sysfs_warn_dup+0x8e/0xa0 [ 401.599341][T15281] sysfs_do_create_link_sd+0xc0/0x110 [ 401.599370][T15281] device_add_class_symlinks+0x1cf/0x240 [ 401.599399][T15281] device_add+0x475/0xb50 [ 401.599428][T15281] wiphy_register+0x1ba6/0x28d0 [ 401.599476][T15281] ? __pfx_wiphy_register+0x10/0x10 [ 401.599501][T15281] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 401.599543][T15281] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 401.599580][T15281] ieee80211_register_hw+0x33e1/0x4120 [ 401.599634][T15281] ? ieee80211_register_hw+0x14a1/0x4120 [ 401.599678][T15281] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 401.599716][T15281] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 401.599749][T15281] ? __hrtimer_setup+0x187/0x210 [ 401.599781][T15281] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 401.599831][T15281] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 401.599893][T15281] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 401.599916][T15281] ? trace_kmalloc+0x1f/0xd0 [ 401.599945][T15281] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 401.599965][T15281] ? kstrndup+0xbf/0x160 [ 401.600023][T15281] hwsim_new_radio_nl+0xea4/0x1b10 [ 401.600053][T15281] ? __pfx___nla_validate_parse+0x10/0x10 [ 401.600102][T15281] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 401.600132][T15281] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 401.600176][T15281] ? __nla_parse+0x40/0x60 [ 401.600211][T15281] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 401.600254][T15281] genl_family_rcv_msg_doit+0x212/0x300 [ 401.600297][T15281] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 401.600348][T15281] ? bpf_lsm_capable+0x9/0x20 [ 401.600366][T15281] ? security_capable+0x7e/0x2e0 [ 401.600401][T15281] genl_rcv_msg+0x60e/0x790 [ 401.600442][T15281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.600475][T15281] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 401.600519][T15281] netlink_rcv_skb+0x205/0x470 [ 401.600546][T15281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.600580][T15281] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.600630][T15281] ? down_read+0x1ad/0x2e0 [ 401.600661][T15281] genl_rcv+0x28/0x40 [ 401.600690][T15281] netlink_unicast+0x758/0x8d0 [ 401.600728][T15281] netlink_sendmsg+0x805/0xb30 [ 401.600768][T15281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.600805][T15281] ? aa_sock_msg_perm+0x94/0x160 [ 401.600834][T15281] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.600861][T15281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.600889][T15281] __sock_sendmsg+0x219/0x270 [ 401.600917][T15281] ____sys_sendmsg+0x505/0x830 [ 401.600955][T15281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.600997][T15281] ? import_iovec+0x74/0xa0 [ 401.601023][T15281] ___sys_sendmsg+0x21f/0x2a0 [ 401.601056][T15281] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.601134][T15281] ? __fget_files+0x2a/0x420 [ 401.601157][T15281] ? __fget_files+0x3a0/0x420 [ 401.601194][T15281] __x64_sys_sendmsg+0x19b/0x260 [ 401.601229][T15281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.601274][T15281] ? rcu_is_watching+0x15/0xb0 [ 401.601314][T15281] ? do_syscall_64+0xbe/0x3b0 [ 401.601345][T15281] do_syscall_64+0xfa/0x3b0 [ 401.601369][T15281] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.601392][T15281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.601414][T15281] ? clear_bhb_loop+0x60/0xb0 [ 401.601442][T15281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.601463][T15281] RIP: 0033:0x7f84f938e929 [ 401.601494][T15281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.601514][T15281] RSP: 002b:00007f84f71f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.601556][T15281] RAX: ffffffffffffffda RBX: 00007f84f95b5fa0 RCX: 00007f84f938e929 [ 401.601572][T15281] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 401.601600][T15281] RBP: 00007f84f9410b39 R08: 0000000000000000 R09: 0000000000000000 [ 401.601613][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.601626][T15281] R13: 0000000000000000 R14: 00007f84f95b5fa0 R15: 00007ffd47c81ea8 [ 401.601659][T15281] [ 402.175558][T15296] lo speed is unknown, defaulting to 1000 [ 402.185287][T15296] lo speed is unknown, defaulting to 1000 [ 402.627655][T15307] macsec0: left allmulticast mode [ 402.757245][T15276] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 403.377668][T15325] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2714'. [ 403.509986][T15330] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2716'. [ 403.548571][T13945] hsr_slave_0: left promiscuous mode [ 403.560029][ T5832] Bluetooth: hci6: command tx timeout [ 403.566647][T13945] hsr_slave_1: left promiscuous mode [ 403.581007][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2716'. [ 403.591204][T13945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.607636][T13945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.627827][T13945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.648022][T13945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.679743][T13945] veth1_macvtap: left promiscuous mode [ 403.685616][T13945] veth0_macvtap: left promiscuous mode [ 403.691543][T13945] veth1_vlan: left promiscuous mode [ 403.698154][T13945] veth0_vlan: left promiscuous mode [ 403.873256][T15349] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 404.323317][T13945] team0 (unregistering): Port device team_slave_1 removed [ 404.372750][T13945] team0 (unregistering): Port device team_slave_0 removed [ 404.862601][T15336] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 404.887039][T15336] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 404.896953][T15336] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 405.046498][T15296] chnl_net:caif_netlink_parms(): no params data found [ 405.158397][T15367] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2726'. [ 405.229765][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2726'. [ 405.454505][T15381] FAULT_INJECTION: forcing a failure. [ 405.454505][T15381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 405.477193][T15376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2729'. [ 405.529084][T15381] CPU: 0 UID: 0 PID: 15381 Comm: syz.2.2731 Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 405.529117][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.529131][T15381] Call Trace: [ 405.529141][T15381] [ 405.529151][T15381] dump_stack_lvl+0x189/0x250 [ 405.529189][T15381] ? __pfx____ratelimit+0x10/0x10 [ 405.529214][T15381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.529252][T15381] ? __pfx__printk+0x10/0x10 [ 405.529277][T15381] ? fs_reclaim_acquire+0x7d/0x100 [ 405.529312][T15381] should_fail_ex+0x414/0x560 [ 405.529350][T15381] prepare_alloc_pages+0x213/0x610 [ 405.529384][T15381] __alloc_frozen_pages_noprof+0x123/0x370 [ 405.529416][T15381] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 405.529464][T15381] alloc_pages_bulk_noprof+0x560/0x710 [ 405.529497][T15381] ? alloc_pages_noprof+0xbe/0x190 [ 405.529524][T15381] kasan_populate_vmalloc+0xba/0x1a0 [ 405.529561][T15381] alloc_vmap_area+0xd51/0x1490 [ 405.529601][T15381] ? __pfx_alloc_vmap_area+0x10/0x10 [ 405.529620][T15381] ? __kasan_kmalloc+0x93/0xb0 [ 405.529641][T15381] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 405.529661][T15381] ? __sys_bpf+0x67e/0x860 [ 405.529686][T15381] ? __get_vm_area_node+0x13f/0x300 [ 405.529707][T15381] ? dev_map_alloc+0x1c9/0x540 [ 405.529738][T15381] __get_vm_area_node+0x1f8/0x300 [ 405.529767][T15381] __vmalloc_node_range_noprof+0x301/0x12f0 [ 405.529802][T15381] ? dev_map_alloc+0x1c9/0x540 [ 405.529860][T15381] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.529882][T15381] ? rcu_is_watching+0x15/0xb0 [ 405.529913][T15381] ? trace_kmalloc+0x1f/0xd0 [ 405.529940][T15381] ? __kmalloc_node_noprof+0x293/0x4e0 [ 405.529957][T15381] ? bpf_map_area_alloc+0x64/0x180 [ 405.529988][T15381] bpf_map_area_alloc+0x12d/0x180 [ 405.530017][T15381] ? dev_map_alloc+0x1c9/0x540 [ 405.530048][T15381] dev_map_alloc+0x1c9/0x540 [ 405.530082][T15381] map_create+0x900/0x1150 [ 405.530112][T15381] ? security_bpf+0x7e/0x300 [ 405.530137][T15381] __sys_bpf+0x67e/0x860 [ 405.530165][T15381] ? __pfx___sys_bpf+0x10/0x10 [ 405.530206][T15381] ? ksys_write+0x22a/0x250 [ 405.530239][T15381] ? __pfx_ksys_write+0x10/0x10 [ 405.530278][T15381] __x64_sys_bpf+0x7c/0x90 [ 405.530302][T15381] do_syscall_64+0xfa/0x3b0 [ 405.530325][T15381] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.530352][T15381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.530373][T15381] ? clear_bhb_loop+0x60/0xb0 [ 405.530415][T15381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.530436][T15381] RIP: 0033:0x7f8b9b58e929 [ 405.530455][T15381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.530475][T15381] RSP: 002b:00007f8b9c424038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.530498][T15381] RAX: ffffffffffffffda RBX: 00007f8b9b7b5fa0 RCX: 00007f8b9b58e929 [ 405.530515][T15381] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000 [ 405.530530][T15381] RBP: 00007f8b9c424090 R08: 0000000000000000 R09: 0000000000000000 [ 405.530543][T15381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.530556][T15381] R13: 0000000000000001 R14: 00007f8b9b7b5fa0 R15: 00007ffefa00bb28 [ 405.530591][T15381] [ 405.638507][ T5832] Bluetooth: hci6: command tx timeout [ 405.873870][T15296] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.897700][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.913563][T15296] bridge_slave_0: entered allmulticast mode [ 405.930067][T15296] bridge_slave_0: entered promiscuous mode [ 405.994299][T15296] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.008282][T15393] netlink: 'syz.2.2735': attribute type 1 has an invalid length. [ 406.028653][T15296] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.035979][T15296] bridge_slave_1: entered allmulticast mode [ 406.036501][T15393] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2735'. [ 406.071696][T15296] bridge_slave_1: entered promiscuous mode [ 406.134355][T15384] syzkaller1: entered promiscuous mode [ 406.144027][T15384] syzkaller1: entered allmulticast mode [ 406.170372][T15296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.185997][T15296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.375402][T15395] lo speed is unknown, defaulting to 1000 [ 406.387633][T15296] team0: Port device team_slave_0 added [ 406.405672][T15395] lo speed is unknown, defaulting to 1000 [ 406.426690][T15296] team0: Port device team_slave_1 added [ 406.501048][T15406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2738'. [ 406.542164][T15296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.555298][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.593133][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'. [ 406.605630][T15296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.656555][T15296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.664117][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.738486][T15296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.766538][T15408] lo speed is unknown, defaulting to 1000 [ 407.008088][T15408] lo speed is unknown, defaulting to 1000 [ 407.076896][T15296] hsr_slave_0: entered promiscuous mode [ 407.084169][T15296] hsr_slave_1: entered promiscuous mode [ 407.091090][T15296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.099441][T15296] Cannot create hsr debugfs directory [ 407.479802][T15418] lo speed is unknown, defaulting to 1000 [ 407.605855][T15419] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2741'. [ 407.663263][T15418] lo speed is unknown, defaulting to 1000 [ 407.749047][T15424] Bluetooth: MGMT ver 1.23 [ 407.837292][T13948] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 407.878438][ T5832] Bluetooth: hci6: command tx timeout [ 408.242836][T15421] lo speed is unknown, defaulting to 1000 [ 408.383088][T15421] lo speed is unknown, defaulting to 1000 [ 408.645462][T15433] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 408.845638][T15296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 409.263625][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2745'. [ 409.285357][T15435] veth3: entered promiscuous mode [ 409.301091][T15296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 409.320503][T15442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.332316][T15442] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2747'. [ 409.433734][T15296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.460664][T15296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 409.696089][T15452] lo speed is unknown, defaulting to 1000 [ 409.750658][T15452] lo speed is unknown, defaulting to 1000 [ 409.917707][T15296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.959801][ T5832] Bluetooth: hci6: command tx timeout [ 409.973363][T15296] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.091248][T13937] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.098509][T13937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.125932][T13937] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.133171][T13937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.160715][T15463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2752'. [ 410.317236][T15467] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2753'. [ 410.724418][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2755'. [ 411.018209][ T5897] lo speed is unknown, defaulting to 1000 [ 411.043119][ T5897] syz0: Port: 1 Link DOWN [ 411.128062][T15478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.155766][ T5897] lo speed is unknown, defaulting to 1000 [ 411.231402][T15296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.345424][T15488] bridge0: port 2(veth0_to_bridge) entered blocking state [ 411.359840][T15488] bridge0: port 2(veth0_to_bridge) entered disabled state [ 411.367292][T15488] veth0_to_bridge: entered allmulticast mode [ 411.377619][T15488] veth0_to_bridge: entered promiscuous mode [ 411.467540][T15487] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 411.498851][T15487] CPU: 0 UID: 0 PID: 15487 Comm: syz.2.2757 Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 411.498887][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.498901][T15487] Call Trace: [ 411.498913][T15487] [ 411.498924][T15487] dump_stack_lvl+0x189/0x250 [ 411.498970][T15487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.499006][T15487] ? __pfx__printk+0x10/0x10 [ 411.499032][T15487] ? kernfs_path_from_node+0x2c/0x260 [ 411.499059][T15487] ? kernfs_path_from_node+0x2c/0x260 [ 411.499084][T15487] ? kernfs_path_from_node+0x2c/0x260 [ 411.499113][T15487] ? kernfs_path_from_node+0x22c/0x260 [ 411.499137][T15487] ? kernfs_path_from_node+0x2c/0x260 [ 411.499168][T15487] sysfs_warn_dup+0x8e/0xa0 [ 411.499194][T15487] sysfs_do_create_link_sd+0xc0/0x110 [ 411.499223][T15487] device_add_class_symlinks+0x1cf/0x240 [ 411.499253][T15487] device_add+0x475/0xb50 [ 411.499282][T15487] wiphy_register+0x1ba6/0x28d0 [ 411.499331][T15487] ? __pfx_wiphy_register+0x10/0x10 [ 411.499357][T15487] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 411.499399][T15487] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 411.499437][T15487] ieee80211_register_hw+0x33e1/0x4120 [ 411.499501][T15487] ? ieee80211_register_hw+0x14a1/0x4120 [ 411.499547][T15487] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 411.499587][T15487] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 411.499621][T15487] ? __hrtimer_setup+0x187/0x210 [ 411.499654][T15487] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 411.499688][T15487] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 411.499752][T15487] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 411.499777][T15487] ? trace_kmalloc+0x1f/0xd0 [ 411.499808][T15487] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 411.499836][T15487] ? kstrndup+0xbf/0x160 [ 411.499876][T15487] hwsim_new_radio_nl+0xea4/0x1b10 [ 411.499908][T15487] ? __pfx___nla_validate_parse+0x10/0x10 [ 411.499958][T15487] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 411.499989][T15487] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 411.500035][T15487] ? __nla_parse+0x40/0x60 [ 411.500071][T15487] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 411.500118][T15487] genl_family_rcv_msg_doit+0x212/0x300 [ 411.500162][T15487] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 411.500213][T15487] ? bpf_lsm_capable+0x9/0x20 [ 411.500232][T15487] ? security_capable+0x7e/0x2e0 [ 411.500268][T15487] genl_rcv_msg+0x60e/0x790 [ 411.500311][T15487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.500344][T15487] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 411.500389][T15487] netlink_rcv_skb+0x205/0x470 [ 411.500418][T15487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.500454][T15487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.500513][T15487] ? down_read+0x1ad/0x2e0 [ 411.500546][T15487] genl_rcv+0x28/0x40 [ 411.500577][T15487] netlink_unicast+0x758/0x8d0 [ 411.500616][T15487] netlink_sendmsg+0x805/0xb30 [ 411.500657][T15487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.500690][T15487] ? aa_sock_msg_perm+0x94/0x160 [ 411.500720][T15487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.500748][T15487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.500777][T15487] __sock_sendmsg+0x219/0x270 [ 411.500806][T15487] ____sys_sendmsg+0x505/0x830 [ 411.500847][T15487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.500891][T15487] ? import_iovec+0x74/0xa0 [ 411.500917][T15487] ___sys_sendmsg+0x21f/0x2a0 [ 411.500953][T15487] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.501033][T15487] ? __fget_files+0x2a/0x420 [ 411.501056][T15487] ? __fget_files+0x3a0/0x420 [ 411.501095][T15487] __x64_sys_sendmsg+0x19b/0x260 [ 411.501131][T15487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.501178][T15487] ? rcu_is_watching+0x15/0xb0 [ 411.501219][T15487] ? do_syscall_64+0xbe/0x3b0 [ 411.501251][T15487] do_syscall_64+0xfa/0x3b0 [ 411.501276][T15487] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.501301][T15487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.501323][T15487] ? clear_bhb_loop+0x60/0xb0 [ 411.501351][T15487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.501373][T15487] RIP: 0033:0x7f8b9b58e929 [ 411.501395][T15487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.501416][T15487] RSP: 002b:00007f8b9c424038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.501441][T15487] RAX: ffffffffffffffda RBX: 00007f8b9b7b5fa0 RCX: 00007f8b9b58e929 [ 411.501459][T15487] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 411.501480][T15487] RBP: 00007f8b9b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 411.501495][T15487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.501509][T15487] R13: 0000000000000000 R14: 00007f8b9b7b5fa0 R15: 00007ffefa00bb28 [ 411.501547][T15487] [ 412.064922][T15296] veth0_vlan: entered promiscuous mode [ 412.078204][T15296] veth1_vlan: entered promiscuous mode [ 412.114762][T15296] veth0_macvtap: entered promiscuous mode [ 412.125429][T15296] veth1_macvtap: entered promiscuous mode [ 412.154768][T15296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.166944][T15296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.190798][ T6698] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.274454][ T6698] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.313777][T15493] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2761'. [ 412.330992][ T6698] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.367395][T15497] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2762'. [ 412.407686][T15493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2761'. [ 412.426125][ T6698] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.596086][ T6698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.648811][ T6698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.719092][T13937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.741793][T13937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.316745][T15517] syzkaller0: entered promiscuous mode [ 413.334063][T15517] syzkaller0: entered allmulticast mode [ 413.729758][T15539] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2770'. [ 415.237724][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 415.263504][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 415.277766][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 415.297983][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 415.306451][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 415.667795][T15538] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 415.689349][T15538] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 415.749290][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2775'. [ 415.877540][ T1903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.956559][T15549] lo speed is unknown, defaulting to 1000 [ 415.994456][ T1903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.018047][T15568] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2779'. [ 416.064182][T15549] lo speed is unknown, defaulting to 1000 [ 416.090098][T15572] netlink: 'syz.5.2781': attribute type 1 has an invalid length. [ 416.196742][T15572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.294865][T15575] ipvlan0: entered allmulticast mode [ 416.308848][T15575] bond0: entered allmulticast mode [ 416.402495][T15579] bond0: (slave gretap2): making interface the new active one [ 416.429014][T15579] gretap2: entered allmulticast mode [ 416.455142][T15579] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 416.526125][ T1903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.644385][T15592] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2785'. [ 416.665060][ T1903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.889951][T15599] lo speed is unknown, defaulting to 1000 [ 416.899062][T15599] lo speed is unknown, defaulting to 1000 [ 417.173157][ T1903] bridge_slave_1: left allmulticast mode [ 417.190052][ T1903] bridge_slave_1: left promiscuous mode [ 417.195906][ T1903] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.217807][ T1903] bridge_slave_0: left allmulticast mode [ 417.226832][ T1903] bridge_slave_0: left promiscuous mode [ 417.246824][ T1903] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.283936][T15610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2789'. [ 417.415068][ T5832] Bluetooth: hci6: command tx timeout [ 417.538272][T15616] openvswitch: netlink: IPv4 tun info is not correct [ 417.904303][ T1903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.918498][ T1903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.931999][ T1903] bond0 (unregistering): Released all slaves [ 417.955500][T15549] chnl_net:caif_netlink_parms(): no params data found [ 418.660765][T15549] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.697603][T15549] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.719054][T15549] bridge_slave_0: entered allmulticast mode [ 418.755387][T15549] bridge_slave_0: entered promiscuous mode [ 418.808637][T15630] lo speed is unknown, defaulting to 1000 [ 418.831920][T15549] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.858677][T15549] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.865984][T15549] bridge_slave_1: entered allmulticast mode [ 418.952231][T15549] bridge_slave_1: entered promiscuous mode [ 419.133606][T15630] lo speed is unknown, defaulting to 1000 [ 419.242821][T15549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.257461][T15549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.258064][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2799'. [ 419.386799][T15549] team0: Port device team_slave_0 added [ 419.399852][T15549] team0: Port device team_slave_1 added [ 419.475653][T15549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.483392][ T5832] Bluetooth: hci6: command 0x041b tx timeout [ 419.508529][T15549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.536379][T15549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.558989][T15549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.565977][T15549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.592379][T15549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.755697][T15635] lo speed is unknown, defaulting to 1000 [ 419.865474][T15635] lo speed is unknown, defaulting to 1000 [ 419.893443][T15549] hsr_slave_0: entered promiscuous mode [ 419.926023][T15549] hsr_slave_1: entered promiscuous mode [ 419.947523][T15549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.960613][T15549] Cannot create hsr debugfs directory [ 420.027227][T15659] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2803'. [ 420.043953][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2803'. [ 420.057052][T15659] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2803'. [ 420.141560][T15657] lo speed is unknown, defaulting to 1000 [ 420.186990][ T1903] hsr_slave_0: left promiscuous mode [ 420.201765][ T1903] hsr_slave_1: left promiscuous mode [ 420.220022][ T1903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.227925][ T1903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.259307][ T1903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.266773][ T1903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.331262][ T1903] veth1_macvtap: left promiscuous mode [ 420.336934][ T1903] veth0_macvtap: left promiscuous mode [ 420.343222][ T1903] veth1_vlan: left promiscuous mode [ 420.359594][ T1903] veth0_vlan: left promiscuous mode [ 420.903170][ T1903] team0 (unregistering): Port device team_slave_1 removed [ 420.944076][ T1903] team0 (unregistering): Port device team_slave_0 removed [ 421.423588][T15657] lo speed is unknown, defaulting to 1000 [ 421.456400][T15672] netlink: 'syz.5.2806': attribute type 1 has an invalid length. [ 421.465240][T15672] netlink: 'syz.5.2806': attribute type 10 has an invalid length. [ 421.478376][T15672] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2806'. [ 421.558628][ T5835] Bluetooth: hci6: command 0x041b tx timeout [ 422.489966][T15549] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 422.515261][T15549] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 422.552201][T15549] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 422.589865][T15549] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 422.798781][T15688] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2809'. [ 422.825119][T15687] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2809'. [ 422.840705][T15688] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2809'. [ 422.884808][T15692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2810'. [ 422.968175][T15549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.053198][T15549] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.102241][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.109597][T13946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.147930][T15700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2813'. [ 423.206818][ T1903] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.214618][ T1903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.261815][T15701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.332261][T15698] lo speed is unknown, defaulting to 1000 [ 423.368715][T15698] lo speed is unknown, defaulting to 1000 [ 423.369118][T15695] lo speed is unknown, defaulting to 1000 [ 423.533842][T15710] netlink: 600 bytes leftover after parsing attributes in process `syz.2.2816'. [ 423.638773][ T5835] Bluetooth: hci6: command 0x041b tx timeout [ 423.675270][T15718] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2817'. [ 423.941573][T15549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.110953][T15549] veth0_vlan: entered promiscuous mode [ 424.170634][T15549] veth1_vlan: entered promiscuous mode [ 424.237456][T15733] netlink: 'syz.6.2822': attribute type 1 has an invalid length. [ 424.313106][T15733] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2822'. [ 424.314421][T15549] veth0_macvtap: entered promiscuous mode [ 424.408415][T15549] veth1_macvtap: entered promiscuous mode [ 424.507696][T15549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.592162][T15549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.716115][T13948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.752012][T13948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.817226][T15695] lo speed is unknown, defaulting to 1000 [ 424.892799][T13948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.940417][T13948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.595646][T15746] openvswitch: netlink: IPv4 tun info is not correct [ 425.731398][ T5835] Bluetooth: hci6: command 0x041b tx timeout [ 426.031897][T13937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.054510][T13937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.460784][ T1903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.482904][ T1903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.655077][T15758] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2829'. [ 426.728721][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2830'. [ 426.744578][T15760] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2830'. [ 426.807683][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2829'. [ 427.057360][T15769] netlink: 'syz.2.2833': attribute type 1 has an invalid length. [ 427.065698][T15769] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2833'. [ 427.121902][T15767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 acpid: input device has been disconnected, fd 3 [ 427.533374][T13937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.889538][T13937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.957395][T13937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.010896][T13937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.125583][T13937] bridge_slave_1: left allmulticast mode [ 428.132083][T13937] bridge_slave_1: left promiscuous mode [ 428.137829][T13937] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.148642][T13937] bridge_slave_0: left allmulticast mode [ 428.154325][T13937] bridge_slave_0: left promiscuous mode [ 428.160407][T13937] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.719687][T15790] openvswitch: netlink: IPv4 tun info is not correct [ 428.738893][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2838'. [ 428.814065][T13937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.836214][T13937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.849922][T13937] bond0 (unregistering): Released all slaves [ 429.100556][T15787] lo speed is unknown, defaulting to 1000 [ 429.137386][T15787] lo speed is unknown, defaulting to 1000 [ 429.147548][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 429.160150][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 429.169269][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 429.178175][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 429.196349][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 429.332580][T15801] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2841'. [ 429.415428][T15798] lo speed is unknown, defaulting to 1000 [ 429.443620][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2842'. [ 429.477403][T15808] lo speed is unknown, defaulting to 1000 [ 429.907845][T15798] lo speed is unknown, defaulting to 1000 [ 430.435048][T15808] lo speed is unknown, defaulting to 1000 [ 430.593252][T15837] syzkaller0: entered promiscuous mode [ 430.606095][T15837] syzkaller0: entered allmulticast mode [ 430.753669][T15837] can: request_module (can-proto-0) failed. [ 431.252632][ T5832] Bluetooth: hci6: command tx timeout [ 432.276367][T15825] lo speed is unknown, defaulting to 1000 [ 432.320761][T15825] lo speed is unknown, defaulting to 1000 [ 432.463764][T15798] chnl_net:caif_netlink_parms(): no params data found [ 432.513184][T15845] openvswitch: netlink: IPv4 tun info is not correct [ 432.696623][T15798] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.718556][T15798] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.737597][T15798] bridge_slave_0: entered allmulticast mode [ 432.750393][T15798] bridge_slave_0: entered promiscuous mode [ 432.759654][T15798] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.766952][T15798] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.774431][T15798] bridge_slave_1: entered allmulticast mode [ 432.791660][T15798] bridge_slave_1: entered promiscuous mode [ 433.204812][T15798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.274689][T15798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.293514][T13937] hsr_slave_0: left promiscuous mode [ 433.301886][T13937] hsr_slave_1: left promiscuous mode [ 433.308176][T13937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.317073][T13937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.324306][ T5832] Bluetooth: hci6: command 0x041b tx timeout [ 433.331968][T13937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.340582][T13937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.370096][T13937] veth1_macvtap: left promiscuous mode [ 433.375686][T13937] veth0_macvtap: left promiscuous mode [ 433.381805][T13937] veth1_vlan: left promiscuous mode [ 433.387170][T13937] veth0_vlan: left promiscuous mode [ 433.981845][T13937] team0 (unregistering): Port device team_slave_1 removed [ 434.041933][T13937] team0 (unregistering): Port device team_slave_0 removed [ 434.731707][T15798] team0: Port device team_slave_0 added [ 434.768103][T15798] team0: Port device team_slave_1 added [ 434.856205][T15882] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2860'. [ 434.938659][T15798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.945659][T15798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.007402][T15798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.071123][T15798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.088691][T15798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.152657][T15798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.274492][T15884] lo speed is unknown, defaulting to 1000 [ 435.302231][T15884] lo speed is unknown, defaulting to 1000 [ 435.335848][T15798] hsr_slave_0: entered promiscuous mode [ 435.351168][T15798] hsr_slave_1: entered promiscuous mode [ 435.375658][T15798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.395249][T15798] Cannot create hsr debugfs directory [ 435.400954][ T5835] Bluetooth: hci6: command 0x041b tx timeout [ 436.212294][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2871'. [ 436.288048][T15920] x_tables: duplicate underflow at hook 1 [ 436.445240][T15925] netlink: 'syz.5.2873': attribute type 10 has an invalid length. [ 436.468510][T15925] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2873'. [ 436.479813][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2872'. [ 436.505262][T15925] bridge0: port 3(dummy0) entered blocking state [ 436.514019][T15925] bridge0: port 3(dummy0) entered disabled state [ 436.528952][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2873'. [ 436.574440][T15925] dummy0: entered allmulticast mode [ 436.601606][T15925] dummy0: entered promiscuous mode [ 436.628266][T15925] bridge0: port 3(dummy0) entered blocking state [ 436.634866][T15925] bridge0: port 3(dummy0) entered forwarding state [ 436.907316][T15928] lo speed is unknown, defaulting to 1000 [ 436.927322][T15928] lo speed is unknown, defaulting to 1000 [ 436.935625][T15938] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 436.955105][T15938] CPU: 1 UID: 0 PID: 15938 Comm: syz.5.2875 Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 436.955139][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.955159][T15938] Call Trace: [ 436.955169][T15938] [ 436.955180][T15938] dump_stack_lvl+0x189/0x250 [ 436.955225][T15938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.955261][T15938] ? __pfx__printk+0x10/0x10 [ 436.955286][T15938] ? kernfs_path_from_node+0x2c/0x260 [ 436.955314][T15938] ? kernfs_path_from_node+0x2c/0x260 [ 436.955337][T15938] ? kernfs_path_from_node+0x2c/0x260 [ 436.955365][T15938] ? kernfs_path_from_node+0x22c/0x260 [ 436.955389][T15938] ? kernfs_path_from_node+0x2c/0x260 [ 436.955420][T15938] sysfs_warn_dup+0x8e/0xa0 [ 436.955446][T15938] sysfs_do_create_link_sd+0xc0/0x110 [ 436.955475][T15938] device_add_class_symlinks+0x1cf/0x240 [ 436.955504][T15938] device_add+0x475/0xb50 [ 436.955534][T15938] wiphy_register+0x1ba6/0x28d0 [ 436.955583][T15938] ? __pfx_wiphy_register+0x10/0x10 [ 436.955610][T15938] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 436.955651][T15938] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 436.955690][T15938] ieee80211_register_hw+0x33e1/0x4120 [ 436.955752][T15938] ? ieee80211_register_hw+0x14a1/0x4120 [ 436.955797][T15938] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 436.955837][T15938] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 436.955871][T15938] ? __hrtimer_setup+0x187/0x210 [ 436.955903][T15938] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 436.955937][T15938] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 436.956002][T15938] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 436.956027][T15938] ? trace_kmalloc+0x1f/0xd0 [ 436.956058][T15938] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 436.956080][T15938] ? kstrndup+0xbf/0x160 [ 436.956119][T15938] hwsim_new_radio_nl+0xea4/0x1b10 [ 436.956150][T15938] ? __pfx___nla_validate_parse+0x10/0x10 [ 436.956201][T15938] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 436.956245][T15938] ? __nla_parse+0x40/0x60 [ 436.956281][T15938] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 436.956326][T15938] genl_family_rcv_msg_doit+0x212/0x300 [ 436.956371][T15938] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 436.956424][T15938] ? bpf_lsm_capable+0x9/0x20 [ 436.956443][T15938] ? security_capable+0x7e/0x2e0 [ 436.956480][T15938] genl_rcv_msg+0x60e/0x790 [ 436.956523][T15938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.956555][T15938] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 436.956600][T15938] netlink_rcv_skb+0x205/0x470 [ 436.956629][T15938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.956665][T15938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.956715][T15938] ? down_read+0x1ad/0x2e0 [ 436.956755][T15938] genl_rcv+0x28/0x40 [ 436.956787][T15938] netlink_unicast+0x758/0x8d0 [ 436.956827][T15938] netlink_sendmsg+0x805/0xb30 [ 436.956869][T15938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.956903][T15938] ? aa_sock_msg_perm+0x94/0x160 [ 436.956934][T15938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.956961][T15938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.956990][T15938] __sock_sendmsg+0x219/0x270 [ 436.957021][T15938] ____sys_sendmsg+0x505/0x830 [ 436.957061][T15938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.957107][T15938] ? import_iovec+0x74/0xa0 [ 436.957134][T15938] ___sys_sendmsg+0x21f/0x2a0 [ 436.957170][T15938] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.957250][T15938] ? __fget_files+0x2a/0x420 [ 436.957274][T15938] ? __fget_files+0x3a0/0x420 [ 436.957313][T15938] __x64_sys_sendmsg+0x19b/0x260 [ 436.957350][T15938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.957396][T15938] ? rcu_is_watching+0x15/0xb0 [ 436.957436][T15938] ? do_syscall_64+0xbe/0x3b0 [ 436.957469][T15938] do_syscall_64+0xfa/0x3b0 [ 436.957493][T15938] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.957518][T15938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.957540][T15938] ? clear_bhb_loop+0x60/0xb0 [ 436.957568][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.957597][T15938] RIP: 0033:0x7fe80898e929 [ 436.957619][T15938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.957639][T15938] RSP: 002b:00007fe80987f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.957664][T15938] RAX: ffffffffffffffda RBX: 00007fe808bb5fa0 RCX: 00007fe80898e929 [ 436.957681][T15938] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 436.957696][T15938] RBP: 00007fe808a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 436.957711][T15938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.957724][T15938] R13: 0000000000000000 R14: 00007fe808bb5fa0 R15: 00007ffecba4e948 [ 436.957769][T15938] [ 437.478502][ T5835] Bluetooth: hci6: command 0x041b tx timeout [ 437.779920][T15943] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20003 [ 438.003377][T15798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 438.026103][T15798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.049070][T15798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 438.087163][T15798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.465612][T15798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.520540][T15798] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.544240][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.551514][T13946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.580408][T13946] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.587628][T13946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.659383][T15969] openvswitch: netlink: IPv4 tun info is not correct [ 438.875787][T13937] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.156036][T15986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2888'. [ 439.182703][T15798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.184114][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 439.340873][T15995] netlink: 'syz.5.2889': attribute type 3 has an invalid length. [ 439.356101][T15995] netlink: 'syz.5.2889': attribute type 1 has an invalid length. [ 439.364786][T15995] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2889'. [ 439.506023][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2892'. [ 439.568526][ T5835] Bluetooth: hci6: command 0x041b tx timeout [ 439.577527][T16004] netlink: 'syz.2.2893': attribute type 11 has an invalid length. [ 439.633837][T15798] veth0_vlan: entered promiscuous mode [ 439.673127][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2895'. [ 439.712458][T15798] veth1_vlan: entered promiscuous mode [ 439.869625][T16017] openvswitch: netlink: IPv4 tun info is not correct [ 439.874105][T15798] veth0_macvtap: entered promiscuous mode [ 439.913296][T15798] veth1_macvtap: entered promiscuous mode [ 439.987481][T15798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.009989][T15798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.032209][T13948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.064517][T13948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.102144][T13948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.115152][T13948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.235333][T13948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.260165][T13948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.356603][T13947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.374259][T13947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.728678][T16030] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.745090][T16030] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 3072 - 0 [ 440.886883][T16042] __nla_validate_parse: 3 callbacks suppressed [ 440.886907][T16042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2903'. [ 440.937390][T16044] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2905'. [ 440.973349][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2905'. [ 441.098216][T16030] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.163501][T16030] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 3072 - 0 [ 441.500179][T13948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.610909][T16030] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.622050][T16030] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 3072 - 0 [ 441.665374][T13948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.706833][T16030] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.717563][T16030] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 3072 - 0 [ 441.758810][T13948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.841885][T13948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.872122][T13937] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 3072 - 0 [ 441.881345][T13937] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.905395][T13945] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 3072 - 0 [ 441.914860][T13945] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.933508][T13945] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 3072 - 0 [ 441.943196][T13945] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.962429][T13946] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 3072 - 0 [ 441.973608][T13946] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 442.134544][T13948] bridge_slave_1: left allmulticast mode [ 442.141721][T13948] bridge_slave_1: left promiscuous mode [ 442.147550][T13948] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.164071][T13948] bridge_slave_0: left allmulticast mode [ 442.176424][T13948] bridge_slave_0: left promiscuous mode [ 442.182742][T13948] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.505913][T16058] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2911'. [ 442.514569][T16063] openvswitch: netlink: IPv4 tun info is not correct [ 442.562587][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2910'. [ 442.625145][T16066] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2909'. [ 442.971013][T13948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.998100][T13948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.020881][T13948] bond0 (unregistering): Released all slaves [ 443.253456][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 443.272470][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 443.279833][T16088] netlink: 'syz.2.2917': attribute type 10 has an invalid length. [ 443.289632][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 443.303478][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 443.311487][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 443.406871][T16083] lo speed is unknown, defaulting to 1000 [ 443.421404][T16083] lo speed is unknown, defaulting to 1000 [ 443.744496][T16098] lo speed is unknown, defaulting to 1000 [ 443.768747][T16098] lo speed is unknown, defaulting to 1000 [ 443.858583][T16105] geneve3: entered allmulticast mode [ 444.107349][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2923'. [ 444.274298][T13948] hsr_slave_0: left promiscuous mode [ 444.293164][T13948] hsr_slave_1: left promiscuous mode [ 444.314334][T13948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.331171][T13948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.350186][T13948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.374235][T13948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.438678][T16116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2925'. [ 444.459027][T13948] veth1_macvtap: left promiscuous mode [ 444.466947][T13948] veth0_macvtap: left promiscuous mode [ 444.473095][T13948] veth1_vlan: left promiscuous mode [ 444.481912][T13948] veth0_vlan: left promiscuous mode [ 444.511083][T16125] openvswitch: netlink: Message has 20 unknown bytes. [ 444.517898][T16125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.013857][T13948] team0 (unregistering): Port device team_slave_1 removed [ 445.062435][T13948] team0 (unregistering): Port device team_slave_0 removed [ 445.398787][ T5835] Bluetooth: hci6: command tx timeout [ 445.536031][T16114] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 445.547657][T16114] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 445.689119][T16083] chnl_net:caif_netlink_parms(): no params data found [ 445.789206][T16128] openvswitch: netlink: IPv4 tun info is not correct [ 445.905508][T16132] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2929'. [ 445.944718][T16135] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2930'. [ 446.012215][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2930'. [ 446.256653][T16083] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.276532][T16083] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.296588][T16083] bridge_slave_0: entered allmulticast mode [ 446.314022][T16083] bridge_slave_0: entered promiscuous mode [ 446.327691][T16083] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.338150][T16083] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.369237][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 446.374568][T16083] bridge_slave_1: entered allmulticast mode [ 446.400240][T16083] bridge_slave_1: entered promiscuous mode [ 446.465417][T16145] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2932'. [ 446.475142][T16145] netlink: 'syz.6.2932': attribute type 6 has an invalid length. [ 446.487507][T16145] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2932'. [ 446.611164][T16148] IPv6: sit4: Disabled Multicast RS [ 446.628098][T16083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.644687][T16153] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2934'. [ 446.651953][T16083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.782381][T16083] team0: Port device team_slave_0 added [ 446.812402][T16083] team0: Port device team_slave_1 added [ 446.921882][T16083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.945230][T16083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.990866][T16083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.039283][T16156] lo speed is unknown, defaulting to 1000 [ 447.051643][T16083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.072423][T16083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.099575][T16083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.112969][T16156] lo speed is unknown, defaulting to 1000 [ 447.249489][T16171] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 447.257360][T16171] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2938'. [ 447.344110][T16083] hsr_slave_0: entered promiscuous mode [ 447.360012][T16083] hsr_slave_1: entered promiscuous mode [ 447.367422][T16083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.388497][T16083] Cannot create hsr debugfs directory [ 447.480117][ T5832] Bluetooth: hci6: command tx timeout [ 447.767051][T16178] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 448.001139][T16184] openvswitch: netlink: IPv4 tun info is not correct [ 448.015663][T16180] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.140908][T16180] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.232524][T16180] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.353055][T16180] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.622338][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 448.740630][T13948] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.858123][T13948] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.870769][T13948] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.889977][T16202] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2946'. [ 448.906659][T13946] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.951324][T16083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 448.975445][T16083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 448.996826][T16083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.017173][T16083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.341363][T16083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.404119][T16083] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.480011][T13945] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.487229][T13945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.510174][T13945] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.517394][T13945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.559882][ T5832] Bluetooth: hci6: command 0x040f tx timeout [ 449.566541][T16227] openvswitch: netlink: IPv4 tun info is not correct [ 449.636757][T16083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.676732][T16229] netlink: 'syz.2.2954': attribute type 2 has an invalid length. [ 450.194251][T16083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.321698][T16246] lo speed is unknown, defaulting to 1000 [ 450.333064][T16249] gretap2: entered promiscuous mode [ 450.347706][T16246] lo speed is unknown, defaulting to 1000 [ 450.402415][T16083] veth0_vlan: entered promiscuous mode [ 450.441611][T16083] veth1_vlan: entered promiscuous mode [ 450.454077][T16255] IPVS: length: 24 != 10680 [ 450.590268][T16083] veth0_macvtap: entered promiscuous mode [ 450.713437][T16083] veth1_macvtap: entered promiscuous mode [ 450.764477][T16083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.791339][T16083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.805727][T13946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.945577][T13946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.967942][T13946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.985267][T13946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.056163][T16270] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.100639][T16270] __nla_validate_parse: 5 callbacks suppressed [ 451.100660][T16270] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2965'. [ 451.265193][T13947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.300883][T13947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.397423][T16275] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2967'. [ 451.423533][T13947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.460065][T13947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.639161][ T5835] Bluetooth: hci6: command 0x040f tx timeout [ 451.655959][T16282] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 451.921472][T16292] lo speed is unknown, defaulting to 1000 [ 451.940114][T16292] lo speed is unknown, defaulting to 1000 [ 452.086901][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 452.295656][T16305] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2976'. [ 452.333303][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2976'. [ 452.642625][T16317] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 452.662408][T16317] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 452.858212][T16323] lo speed is unknown, defaulting to 1000 [ 452.886458][T16322] lo speed is unknown, defaulting to 1000 [ 452.894462][T16323] lo speed is unknown, defaulting to 1000 [ 453.218580][T16322] lo speed is unknown, defaulting to 1000 [ 453.904832][T13948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.034436][T16334] xt_bpf: check failed: parse error [ 454.092585][T13948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.112028][T16336] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2983'. [ 454.280265][T13948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.296998][T16334] netlink: 'syz.1.2982': attribute type 8 has an invalid length. [ 454.406850][T13948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.704701][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 454.714269][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 454.724409][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 454.724704][T13948] bridge_slave_1: left allmulticast mode [ 454.752177][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 454.762467][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 454.771466][T16354] FAULT_INJECTION: forcing a failure. [ 454.771466][T16354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 454.794830][T16354] CPU: 0 UID: 0 PID: 16354 Comm: syz.2.2988 Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 454.794869][T16354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.794883][T16354] Call Trace: [ 454.794893][T16354] [ 454.794903][T16354] dump_stack_lvl+0x189/0x250 [ 454.794942][T16354] ? __pfx____ratelimit+0x10/0x10 [ 454.794966][T16354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.795000][T16354] ? __pfx__printk+0x10/0x10 [ 454.795025][T16354] ? fs_reclaim_acquire+0x7d/0x100 [ 454.795060][T16354] should_fail_ex+0x414/0x560 [ 454.795092][T16354] prepare_alloc_pages+0x213/0x610 [ 454.795127][T16354] __alloc_frozen_pages_noprof+0x123/0x370 [ 454.795158][T16354] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 454.795206][T16354] alloc_pages_bulk_noprof+0x560/0x710 [ 454.795240][T16354] ? alloc_pages_noprof+0xbe/0x190 [ 454.795266][T16354] kasan_populate_vmalloc+0xba/0x1a0 [ 454.795304][T16354] alloc_vmap_area+0xd51/0x1490 [ 454.795342][T16354] ? __pfx_alloc_vmap_area+0x10/0x10 [ 454.795362][T16354] ? __kasan_kmalloc+0x93/0xb0 [ 454.795383][T16354] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 454.795403][T16354] ? __sys_bpf+0x67e/0x860 [ 454.795427][T16354] ? __get_vm_area_node+0x13f/0x300 [ 454.795444][T16354] ? dev_map_alloc+0x1c9/0x540 [ 454.795475][T16354] __get_vm_area_node+0x1f8/0x300 [ 454.795500][T16354] __vmalloc_node_range_noprof+0x301/0x12f0 [ 454.795520][T16354] ? dev_map_alloc+0x1c9/0x540 [ 454.795568][T16354] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 454.795586][T16354] ? rcu_is_watching+0x15/0xb0 [ 454.795614][T16354] ? trace_kmalloc+0x1f/0xd0 [ 454.795637][T16354] ? __kmalloc_node_noprof+0x293/0x4e0 [ 454.795652][T16354] ? bpf_map_area_alloc+0x64/0x180 [ 454.795678][T16354] bpf_map_area_alloc+0x12d/0x180 [ 454.795704][T16354] ? dev_map_alloc+0x1c9/0x540 [ 454.795731][T16354] dev_map_alloc+0x1c9/0x540 [ 454.795761][T16354] map_create+0x900/0x1150 [ 454.795789][T16354] ? security_bpf+0x7e/0x300 [ 454.795814][T16354] __sys_bpf+0x67e/0x860 [ 454.795840][T16354] ? __pfx___sys_bpf+0x10/0x10 [ 454.795886][T16354] ? ksys_write+0x22a/0x250 [ 454.795922][T16354] ? __pfx_ksys_write+0x10/0x10 [ 454.795962][T16354] __x64_sys_bpf+0x7c/0x90 [ 454.795986][T16354] do_syscall_64+0xfa/0x3b0 [ 454.796009][T16354] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.796032][T16354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.796054][T16354] ? clear_bhb_loop+0x60/0xb0 [ 454.796079][T16354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.796099][T16354] RIP: 0033:0x7f8b9b58e929 [ 454.796119][T16354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.796138][T16354] RSP: 002b:00007f8b9c424038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.796160][T16354] RAX: ffffffffffffffda RBX: 00007f8b9b7b5fa0 RCX: 00007f8b9b58e929 [ 454.796176][T16354] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000 [ 454.796190][T16354] RBP: 00007f8b9c424090 R08: 0000000000000000 R09: 0000000000000000 [ 454.796203][T16354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.796215][T16354] R13: 0000000000000001 R14: 00007f8b9b7b5fa0 R15: 00007ffefa00bb28 [ 454.796248][T16354] [ 454.799433][T13948] bridge_slave_1: left promiscuous mode [ 455.059042][T16359] netlink: 'syz.2.2989': attribute type 1 has an invalid length. [ 455.186413][T13948] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.245594][T13948] bridge_slave_0: left allmulticast mode [ 455.251696][T13948] bridge_slave_0: left promiscuous mode [ 455.257588][T13948] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.279200][T16365] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2990'. [ 455.334102][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2990'. [ 456.031129][T13948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.045932][T13948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.057167][T13948] bond0 (unregistering): Released all slaves [ 456.076497][T16359] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 456.136836][T16364] geneve3: entered allmulticast mode [ 456.218002][T16370] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 456.235658][T16371] vlan1: entered allmulticast mode [ 456.256021][T16371] veth1: entered allmulticast mode [ 456.271904][T16370] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 456.296322][T16370] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 456.326117][T16372] sysfs: cannot create duplicate filename '/class/ieee80211/ž!' [ 456.337976][T16372] CPU: 1 UID: 0 PID: 16372 Comm: syz.5.2992 Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 456.338008][T16372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.338024][T16372] Call Trace: [ 456.338034][T16372] [ 456.338045][T16372] dump_stack_lvl+0x189/0x250 [ 456.338090][T16372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.338126][T16372] ? __pfx__printk+0x10/0x10 [ 456.338152][T16372] ? kernfs_path_from_node+0x2c/0x260 [ 456.338181][T16372] ? kernfs_path_from_node+0x2c/0x260 [ 456.338205][T16372] ? kernfs_path_from_node+0x2c/0x260 [ 456.338233][T16372] ? kernfs_path_from_node+0x22c/0x260 [ 456.338258][T16372] ? kernfs_path_from_node+0x2c/0x260 [ 456.338293][T16372] sysfs_warn_dup+0x8e/0xa0 [ 456.338317][T16372] sysfs_do_create_link_sd+0xc0/0x110 [ 456.338347][T16372] device_add_class_symlinks+0x1cf/0x240 [ 456.338377][T16372] device_add+0x475/0xb50 [ 456.338406][T16372] wiphy_register+0x1ba6/0x28d0 [ 456.338453][T16372] ? __pfx_wiphy_register+0x10/0x10 [ 456.338480][T16372] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 456.338524][T16372] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 456.338562][T16372] ieee80211_register_hw+0x33e1/0x4120 [ 456.338618][T16372] ? ieee80211_register_hw+0x14a1/0x4120 [ 456.338664][T16372] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 456.338701][T16372] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 456.338735][T16372] ? __hrtimer_setup+0x187/0x210 [ 456.338769][T16372] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 456.338804][T16372] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 456.338869][T16372] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 456.338901][T16372] ? trace_kmalloc+0x1f/0xd0 [ 456.338939][T16372] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 456.338963][T16372] ? kstrndup+0xbf/0x160 [ 456.339005][T16372] hwsim_new_radio_nl+0xea4/0x1b10 [ 456.339037][T16372] ? __pfx___nla_validate_parse+0x10/0x10 [ 456.339087][T16372] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 456.339131][T16372] ? __nla_parse+0x40/0x60 [ 456.339167][T16372] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 456.339213][T16372] genl_family_rcv_msg_doit+0x212/0x300 [ 456.339257][T16372] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 456.339320][T16372] ? bpf_lsm_capable+0x9/0x20 [ 456.339340][T16372] ? security_capable+0x7e/0x2e0 [ 456.339376][T16372] genl_rcv_msg+0x60e/0x790 [ 456.339418][T16372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.339452][T16372] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 456.339496][T16372] netlink_rcv_skb+0x205/0x470 [ 456.339525][T16372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.339561][T16372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.339611][T16372] ? down_read+0x1ad/0x2e0 [ 456.339644][T16372] genl_rcv+0x28/0x40 [ 456.339674][T16372] netlink_unicast+0x758/0x8d0 [ 456.339713][T16372] netlink_sendmsg+0x805/0xb30 [ 456.339754][T16372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.339787][T16372] ? aa_sock_msg_perm+0x94/0x160 [ 456.339817][T16372] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.339844][T16372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.339874][T16372] __sock_sendmsg+0x219/0x270 [ 456.339903][T16372] ____sys_sendmsg+0x505/0x830 [ 456.339950][T16372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.339996][T16372] ? import_iovec+0x74/0xa0 [ 456.340023][T16372] ___sys_sendmsg+0x21f/0x2a0 [ 456.340059][T16372] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.340141][T16372] ? __fget_files+0x2a/0x420 [ 456.340164][T16372] ? __fget_files+0x3a0/0x420 [ 456.340203][T16372] __x64_sys_sendmsg+0x19b/0x260 [ 456.340239][T16372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.340286][T16372] ? rcu_is_watching+0x15/0xb0 [ 456.340327][T16372] ? do_syscall_64+0xbe/0x3b0 [ 456.340359][T16372] do_syscall_64+0xfa/0x3b0 [ 456.340385][T16372] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.340410][T16372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.340432][T16372] ? clear_bhb_loop+0x60/0xb0 [ 456.340461][T16372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.340483][T16372] RIP: 0033:0x7fe80898e929 [ 456.340504][T16372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.340524][T16372] RSP: 002b:00007fe80985e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.340548][T16372] RAX: ffffffffffffffda RBX: 00007fe808bb6080 RCX: 00007fe80898e929 [ 456.340565][T16372] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 456.340580][T16372] RBP: 00007fe808a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 456.340594][T16372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.340608][T16372] R13: 0000000000000000 R14: 00007fe808bb6080 R15: 00007ffecba4e948 [ 456.340645][T16372] [ 456.864443][T13937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.977251][T13937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.998705][ T5835] Bluetooth: hci6: command tx timeout [ 457.015578][T13937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.100713][T13937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.120575][T16346] lo speed is unknown, defaulting to 1000 [ 457.161288][T16346] lo speed is unknown, defaulting to 1000 [ 457.393007][T16411] FAULT_INJECTION: forcing a failure. [ 457.393007][T16411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 457.413725][T16411] CPU: 1 UID: 0 PID: 16411 Comm: syz.5.2999 Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 457.413759][T16411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.413774][T16411] Call Trace: [ 457.413784][T16411] [ 457.413794][T16411] dump_stack_lvl+0x189/0x250 [ 457.413834][T16411] ? __pfx____ratelimit+0x10/0x10 [ 457.413860][T16411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.413894][T16411] ? __pfx__printk+0x10/0x10 [ 457.413921][T16411] ? fs_reclaim_acquire+0x7d/0x100 [ 457.413958][T16411] should_fail_ex+0x414/0x560 [ 457.413991][T16411] prepare_alloc_pages+0x213/0x610 [ 457.414027][T16411] __alloc_frozen_pages_noprof+0x123/0x370 [ 457.414072][T16411] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.414120][T16411] alloc_pages_bulk_noprof+0x560/0x710 [ 457.414154][T16411] ? alloc_pages_noprof+0xbe/0x190 [ 457.414180][T16411] kasan_populate_vmalloc+0xba/0x1a0 [ 457.414217][T16411] alloc_vmap_area+0xd51/0x1490 [ 457.414256][T16411] ? __pfx_alloc_vmap_area+0x10/0x10 [ 457.414276][T16411] ? __kasan_kmalloc+0x93/0xb0 [ 457.414298][T16411] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 457.414315][T16411] ? __sys_bpf+0x67e/0x860 [ 457.414335][T16411] ? __get_vm_area_node+0x13f/0x300 [ 457.414351][T16411] ? dev_map_alloc+0x1c9/0x540 [ 457.414377][T16411] __get_vm_area_node+0x1f8/0x300 [ 457.414400][T16411] __vmalloc_node_range_noprof+0x301/0x12f0 [ 457.414420][T16411] ? dev_map_alloc+0x1c9/0x540 [ 457.414469][T16411] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.414488][T16411] ? rcu_is_watching+0x15/0xb0 [ 457.414515][T16411] ? trace_kmalloc+0x1f/0xd0 [ 457.414540][T16411] ? __kmalloc_node_noprof+0x293/0x4e0 [ 457.414555][T16411] ? bpf_map_area_alloc+0x64/0x180 [ 457.414583][T16411] bpf_map_area_alloc+0x12d/0x180 [ 457.414615][T16411] ? dev_map_alloc+0x1c9/0x540 [ 457.414643][T16411] dev_map_alloc+0x1c9/0x540 [ 457.414678][T16411] map_create+0x900/0x1150 [ 457.414704][T16411] ? security_bpf+0x7e/0x300 [ 457.414726][T16411] __sys_bpf+0x67e/0x860 [ 457.414750][T16411] ? __pfx___sys_bpf+0x10/0x10 [ 457.414784][T16411] ? ksys_write+0x22a/0x250 [ 457.414813][T16411] ? __pfx_ksys_write+0x10/0x10 [ 457.414837][T16411] ? rcu_is_watching+0x15/0xb0 [ 457.414871][T16411] __x64_sys_bpf+0x7c/0x90 [ 457.414892][T16411] do_syscall_64+0xfa/0x3b0 [ 457.414912][T16411] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.414931][T16411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.414949][T16411] ? clear_bhb_loop+0x60/0xb0 [ 457.414970][T16411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.414987][T16411] RIP: 0033:0x7fe80898e929 [ 457.415003][T16411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.415019][T16411] RSP: 002b:00007fe80987f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.415038][T16411] RAX: ffffffffffffffda RBX: 00007fe808bb5fa0 RCX: 00007fe80898e929 [ 457.415051][T16411] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000 [ 457.415062][T16411] RBP: 00007fe80987f090 R08: 0000000000000000 R09: 0000000000000000 [ 457.415073][T16411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.415083][T16411] R13: 0000000000000001 R14: 00007fe808bb5fa0 R15: 00007ffecba4e948 [ 457.415109][T16411] [ 457.937867][T16422] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3005'. [ 457.952800][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3005'. [ 458.425183][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'. [ 458.811896][T16456] FAULT_INJECTION: forcing a failure. [ 458.811896][T16456] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 458.837502][T16452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3010'. [ 458.847843][T16456] CPU: 1 UID: 0 PID: 16456 Comm: syz.1.3013 Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 458.847874][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 458.847888][T16456] Call Trace: [ 458.847897][T16456] [ 458.847907][T16456] dump_stack_lvl+0x189/0x250 [ 458.847946][T16456] ? __pfx____ratelimit+0x10/0x10 [ 458.847972][T16456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.848006][T16456] ? __pfx__printk+0x10/0x10 [ 458.848031][T16456] ? fs_reclaim_acquire+0x7d/0x100 [ 458.848066][T16456] should_fail_ex+0x414/0x560 [ 458.848099][T16456] prepare_alloc_pages+0x213/0x610 [ 458.848133][T16456] __alloc_frozen_pages_noprof+0x123/0x370 [ 458.848165][T16456] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 458.848213][T16456] alloc_pages_bulk_noprof+0x560/0x710 [ 458.848247][T16456] ? alloc_pages_noprof+0xbe/0x190 [ 458.848275][T16456] kasan_populate_vmalloc+0xba/0x1a0 [ 458.848315][T16456] alloc_vmap_area+0xd51/0x1490 [ 458.848366][T16456] ? __pfx_alloc_vmap_area+0x10/0x10 [ 458.848385][T16456] ? __kasan_kmalloc+0x93/0xb0 [ 458.848405][T16456] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 458.848424][T16456] ? __sys_bpf+0x67e/0x860 [ 458.848447][T16456] ? __get_vm_area_node+0x13f/0x300 [ 458.848481][T16456] ? dev_map_alloc+0x1c9/0x540 [ 458.848513][T16456] __get_vm_area_node+0x1f8/0x300 [ 458.848541][T16456] __vmalloc_node_range_noprof+0x301/0x12f0 [ 458.848565][T16456] ? dev_map_alloc+0x1c9/0x540 [ 458.848626][T16456] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 458.848650][T16456] ? rcu_is_watching+0x15/0xb0 [ 458.848848][T16456] ? trace_kmalloc+0x1f/0xd0 [ 458.848886][T16456] ? __kmalloc_node_noprof+0x293/0x4e0 [ 458.848906][T16456] ? bpf_map_area_alloc+0x64/0x180 [ 458.848941][T16456] bpf_map_area_alloc+0x12d/0x180 [ 458.848972][T16456] ? dev_map_alloc+0x1c9/0x540 [ 458.849006][T16456] dev_map_alloc+0x1c9/0x540 [ 458.849042][T16456] map_create+0x900/0x1150 [ 458.849074][T16456] ? security_bpf+0x7e/0x300 [ 458.849102][T16456] __sys_bpf+0x67e/0x860 [ 458.849132][T16456] ? __pfx___sys_bpf+0x10/0x10 [ 458.849175][T16456] ? ksys_write+0x22a/0x250 [ 458.849211][T16456] ? __pfx_ksys_write+0x10/0x10 [ 458.849252][T16456] __x64_sys_bpf+0x7c/0x90 [ 458.849278][T16456] do_syscall_64+0xfa/0x3b0 [ 458.849303][T16456] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.849326][T16456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.849347][T16456] ? clear_bhb_loop+0x60/0xb0 [ 458.849374][T16456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.849395][T16456] RIP: 0033:0x7f84f938e929 [ 458.849415][T16456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.849435][T16456] RSP: 002b:00007f84f71f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.849459][T16456] RAX: ffffffffffffffda RBX: 00007f84f95b5fa0 RCX: 00007f84f938e929 [ 458.849475][T16456] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000 [ 458.849489][T16456] RBP: 00007f84f71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 458.849503][T16456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.849517][T16456] R13: 0000000000000001 R14: 00007f84f95b5fa0 R15: 00007ffd47c81ea8 [ 458.849550][T16456] [ 459.165467][ T5835] Bluetooth: hci6: command tx timeout [ 459.262052][T13948] hsr_slave_0: left promiscuous mode [ 459.275246][T13948] hsr_slave_1: left promiscuous mode [ 459.284558][T13948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.292755][T13948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.302459][T13948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.310225][T13948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.345068][T13948] veth1_macvtap: left promiscuous mode [ 459.351053][T13948] veth0_macvtap: left promiscuous mode [ 459.356776][T13948] veth1_vlan: left promiscuous mode [ 459.362491][T13948] veth0_vlan: left promiscuous mode [ 459.577266][T16466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3016'. [ 459.933486][T13948] team0 (unregistering): Port device team_slave_1 removed [ 459.976324][T13948] team0 (unregistering): Port device team_slave_0 removed [ 460.415636][T16346] chnl_net:caif_netlink_parms(): no params data found [ 460.614681][T16471] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3017'. [ 460.623874][T16469] syz_tun: entered allmulticast mode [ 460.646455][T16469] dvmrp1: entered allmulticast mode [ 460.663020][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3017'. [ 460.706014][T16346] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.715206][T16346] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.722722][T16346] bridge_slave_0: entered allmulticast mode [ 460.731682][T16346] bridge_slave_0: entered promiscuous mode [ 460.741370][T16346] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.748912][T16346] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.756394][T16346] bridge_slave_1: entered allmulticast mode [ 460.765483][T16346] bridge_slave_1: entered promiscuous mode [ 460.830035][T16479] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3018'. [ 460.940575][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3020'. [ 460.964055][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3020'. [ 461.164066][T16468] syz_tun: left allmulticast mode [ 461.173956][T16346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.210475][T16346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.238831][ T5835] Bluetooth: hci6: command tx timeout [ 461.419043][T16346] team0: Port device team_slave_0 added [ 461.452393][T16346] team0: Port device team_slave_1 added [ 461.518564][T16507] netlink: 'syz.5.3028': attribute type 2 has an invalid length. [ 461.606109][T16346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.627323][T16346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.667633][T16346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.680910][T16346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.687886][T16346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.717058][T16346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.755344][T16510] bond0: option mode: unable to set because the bond device has slaves [ 461.833935][T16346] hsr_slave_0: entered promiscuous mode [ 461.846172][T16346] hsr_slave_1: entered promiscuous mode [ 461.856025][T16346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.873976][T16346] Cannot create hsr debugfs directory [ 462.426305][T16525] bridge0: port 3(dummy0) entered disabled state [ 462.555743][T16525] dummy0 (unregistering): left allmulticast mode [ 462.577302][T16525] dummy0 (unregistering): left promiscuous mode [ 462.586463][T16525] bridge0: port 3(dummy0) entered disabled state [ 462.647248][T16538] netlink: 'syz.2.3038': attribute type 1 has an invalid length. [ 462.744140][T13946] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.752892][T13946] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.765883][T13946] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.778961][T13946] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.869420][T16346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 462.880247][T16346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 462.891088][T16346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.901490][T16346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.996219][T16346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.023608][T16346] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.037637][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.044874][T13946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.065840][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.073047][ T6698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.319552][ T5835] Bluetooth: hci6: command tx timeout [ 463.403145][T16346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.547576][T16346] veth0_vlan: entered promiscuous mode [ 463.596761][T16346] veth1_vlan: entered promiscuous mode [ 463.685012][T16346] veth0_macvtap: entered promiscuous mode [ 463.705515][T16346] veth1_macvtap: entered promiscuous mode [ 463.787310][T16572] __nla_validate_parse: 4 callbacks suppressed [ 463.787333][T16572] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3045'. [ 463.805777][T16346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.859123][T16346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.893634][ T6698] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.915880][T16576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.917212][ T6698] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.937813][ T6698] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.947894][ T6698] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.015285][T16574] lo speed is unknown, defaulting to 1000 [ 464.047914][T16574] lo speed is unknown, defaulting to 1000 [ 464.176315][T13946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.202663][T13946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.323447][T13946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.340952][T13946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.632964][T16590] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3050'. [ 464.684640][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3050'. [ 465.438590][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 465.626833][T16626] netlink: 'syz.5.3059': attribute type 1 has an invalid length. [ 465.785393][T16626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.862872][T16626] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3059'. [ 465.878610][ T5832] Bluetooth: hci6: command 0x0405 tx timeout [ 465.915882][T16628] bond2: (slave veth7): Enslaving as an active interface with a down link [ 466.014427][T16629] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 466.093088][T16639] vlan0: entered allmulticast mode [ 466.100573][T16639] veth1: entered allmulticast mode [ 466.193254][T16648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'. [ 466.245685][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3065'. [ 466.488500][T16658] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3068'. [ 466.616333][T16662] lo speed is unknown, defaulting to 1000 [ 466.642072][T16662] lo speed is unknown, defaulting to 1000 [ 466.831656][T16671] netlink: 'syz.5.3072': attribute type 1 has an invalid length. [ 466.863981][T16671] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3072'. [ 466.949789][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3071'. [ 467.389984][ T1903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.546844][ T1903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.634805][ T1903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.737954][ T1903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.911636][ T1903] bridge_slave_1: left allmulticast mode [ 467.917335][ T1903] bridge_slave_1: left promiscuous mode [ 467.923377][ T1903] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.933528][ T1903] bridge_slave_0: left allmulticast mode [ 467.939659][ T1903] bridge_slave_0: left promiscuous mode [ 467.946136][ T1903] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.316961][ T1903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.328155][ T1903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.342286][ T1903] bond0 (unregistering): Released all slaves [ 468.599055][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 468.696394][T16686] tipc: Enabled bearer , priority 10 [ 468.976258][T16700] __nla_validate_parse: 2 callbacks suppressed [ 468.976281][T16700] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3078'. [ 469.045181][T16684] tipc: Disabling bearer [ 469.136665][ T1903] hsr_slave_0: left promiscuous mode [ 469.161887][ T1903] hsr_slave_1: left promiscuous mode [ 469.175466][ T1903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.191913][ T1903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.218881][ T1903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.228440][ T1903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.285495][ T1903] veth1_macvtap: left promiscuous mode [ 469.296290][ T1903] veth0_macvtap: left promiscuous mode [ 469.303714][ T1903] veth1_vlan: left promiscuous mode [ 469.314919][ T1903] veth0_vlan: left promiscuous mode [ 469.359459][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 469.370133][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 469.382323][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 469.391359][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 469.401746][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 469.855040][ T1903] team0 (unregistering): Port device team_slave_1 removed [ 469.903213][ T1903] team0 (unregistering): Port device team_slave_0 removed [ 470.318152][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'. [ 470.331262][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'. [ 470.344937][T16687] lo speed is unknown, defaulting to 1000 [ 470.370467][T16687] lo speed is unknown, defaulting to 1000 [ 470.426558][T16715] lo speed is unknown, defaulting to 1000 [ 470.527882][T16722] IPVS: set_ctl: invalid protocol: 60 172.30.0.2:20001 [ 470.673298][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'. [ 471.104393][T16715] lo speed is unknown, defaulting to 1000 [ 471.383998][T16759] netdevsim0: entered promiscuous mode [ 471.410199][T16759] netdevsim0: port 1(macvlan1) entered blocking state [ 471.444501][T16759] netdevsim0: port 1(macvlan1) entered disabled state [ 471.472597][T16759] macvlan1: entered allmulticast mode [ 471.479120][ T5835] Bluetooth: hci6: command tx timeout [ 471.482505][T16759] netdevsim0: entered allmulticast mode [ 471.520766][T16759] macvlan1: left allmulticast mode [ 471.526030][T16759] netdevsim0: left allmulticast mode [ 471.538066][T16759] netdevsim0: left promiscuous mode [ 471.596769][T16763] netlink: 'syz.1.3096': attribute type 11 has an invalid length. [ 472.022714][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 472.205627][T16776] geneve3: left allmulticast mode [ 472.238941][T13946] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.256830][T13946] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.281849][T13946] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.296428][T13946] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.464187][T16791] bridge_slave_0: left allmulticast mode [ 472.477346][T16791] bridge_slave_0: left promiscuous mode [ 472.491989][T16791] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.514082][T16793] netlink: 'syz.5.3103': attribute type 10 has an invalid length. [ 472.514934][T16791] bridge_slave_1: left allmulticast mode [ 472.533794][T16791] bridge_slave_1: left promiscuous mode [ 472.558630][T16791] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.583768][T16796] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3103'. [ 472.605174][T16791] bond2: (slave veth0_to_bond): Releasing active interface [ 472.675559][T16791] team0: Port device team_slave_0 removed [ 472.707992][T16791] team0: Port device team_slave_1 removed [ 472.733062][T16791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.741832][T16791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.760226][ T5835] Bluetooth: hci5: command 0x0405 tx timeout [ 472.765854][T16800] SET target dimension over the limit! [ 472.775069][T16791] bond0: (slave gretap2): Releasing active interface [ 472.786909][T16791] gretap2: left allmulticast mode [ 472.817371][T16791] bond2: (slave veth7): Releasing active interface [ 472.830947][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3102'. [ 472.865556][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3102'. [ 472.903805][T16787] lo speed is unknown, defaulting to 1000 [ 472.955422][T16798] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 472.998499][T16798] CPU: 1 UID: 0 PID: 16798 Comm: syz.1.3106 Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 472.998536][T16798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.998552][T16798] Call Trace: [ 472.998562][T16798] [ 472.998573][T16798] dump_stack_lvl+0x189/0x250 [ 472.998619][T16798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.998656][T16798] ? __pfx__printk+0x10/0x10 [ 472.998682][T16798] ? kernfs_path_from_node+0x2c/0x260 [ 472.998709][T16798] ? kernfs_path_from_node+0x2c/0x260 [ 472.998734][T16798] ? kernfs_path_from_node+0x2c/0x260 [ 472.998763][T16798] ? kernfs_path_from_node+0x22c/0x260 [ 472.998787][T16798] ? kernfs_path_from_node+0x2c/0x260 [ 472.998817][T16798] sysfs_warn_dup+0x8e/0xa0 [ 472.998842][T16798] sysfs_do_create_link_sd+0xc0/0x110 [ 472.998871][T16798] device_add_class_symlinks+0x1cf/0x240 [ 472.998901][T16798] device_add+0x475/0xb50 [ 472.998931][T16798] wiphy_register+0x1ba6/0x28d0 [ 472.998987][T16798] ? __pfx_wiphy_register+0x10/0x10 [ 472.999013][T16798] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 472.999056][T16798] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 472.999095][T16798] ieee80211_register_hw+0x33e1/0x4120 [ 472.999150][T16798] ? ieee80211_register_hw+0x14a1/0x4120 [ 472.999195][T16798] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 472.999235][T16798] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 472.999268][T16798] ? __hrtimer_setup+0x187/0x210 [ 472.999300][T16798] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 472.999334][T16798] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 472.999399][T16798] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 472.999423][T16798] ? trace_kmalloc+0x1f/0xd0 [ 472.999454][T16798] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 472.999476][T16798] ? kstrndup+0xbf/0x160 [ 472.999516][T16798] hwsim_new_radio_nl+0xea4/0x1b10 [ 472.999546][T16798] ? __pfx___nla_validate_parse+0x10/0x10 [ 472.999597][T16798] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 472.999640][T16798] ? __nla_parse+0x40/0x60 [ 472.999676][T16798] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 472.999722][T16798] genl_family_rcv_msg_doit+0x212/0x300 [ 472.999765][T16798] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 472.999815][T16798] ? bpf_lsm_capable+0x9/0x20 [ 472.999835][T16798] ? security_capable+0x7e/0x2e0 [ 472.999872][T16798] genl_rcv_msg+0x60e/0x790 [ 472.999934][T16798] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.999986][T16798] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 473.000032][T16798] netlink_rcv_skb+0x205/0x470 [ 473.000061][T16798] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.000097][T16798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.000147][T16798] ? down_read+0x1ad/0x2e0 [ 473.000179][T16798] genl_rcv+0x28/0x40 [ 473.000210][T16798] netlink_unicast+0x758/0x8d0 [ 473.000249][T16798] netlink_sendmsg+0x805/0xb30 [ 473.000289][T16798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.000322][T16798] ? aa_sock_msg_perm+0x94/0x160 [ 473.000352][T16798] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.000379][T16798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.000409][T16798] __sock_sendmsg+0x219/0x270 [ 473.000438][T16798] ____sys_sendmsg+0x505/0x830 [ 473.000477][T16798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.000521][T16798] ? import_iovec+0x74/0xa0 [ 473.000548][T16798] ___sys_sendmsg+0x21f/0x2a0 [ 473.000583][T16798] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.000665][T16798] ? __fget_files+0x2a/0x420 [ 473.000688][T16798] ? __fget_files+0x3a0/0x420 [ 473.000727][T16798] __x64_sys_sendmsg+0x19b/0x260 [ 473.000763][T16798] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.000809][T16798] ? rcu_is_watching+0x15/0xb0 [ 473.000850][T16798] ? do_syscall_64+0xbe/0x3b0 [ 473.000881][T16798] do_syscall_64+0xfa/0x3b0 [ 473.000906][T16798] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.000931][T16798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.000960][T16798] ? clear_bhb_loop+0x60/0xb0 [ 473.000988][T16798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.001009][T16798] RIP: 0033:0x7f84f938e929 [ 473.001031][T16798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.001052][T16798] RSP: 002b:00007f84f71f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.001076][T16798] RAX: ffffffffffffffda RBX: 00007f84f95b5fa0 RCX: 00007f84f938e929 [ 473.001093][T16798] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 473.001108][T16798] RBP: 00007f84f9410b39 R08: 0000000000000000 R09: 0000000000000000 [ 473.001122][T16798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.001136][T16798] R13: 0000000000000000 R14: 00007f84f95b5fa0 R15: 00007ffd47c81ea8 [ 473.001175][T16798] [ 473.475941][T16787] lo speed is unknown, defaulting to 1000 [ 473.568000][ T5832] Bluetooth: hci6: command tx timeout [ 473.595545][T16715] chnl_net:caif_netlink_parms(): no params data found [ 473.880207][T16814] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3110'. [ 473.921532][T16817] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3111'. [ 473.957120][T16715] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.967602][T16715] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.980318][T16715] bridge_slave_0: entered allmulticast mode [ 473.988225][T16715] bridge_slave_0: entered promiscuous mode [ 474.138881][T16715] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.146078][T16715] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.155063][T16715] bridge_slave_1: entered allmulticast mode [ 474.170047][T16715] bridge_slave_1: entered promiscuous mode [ 474.235481][T16818] lo speed is unknown, defaulting to 1000 [ 474.287784][T16715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.305311][T16715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.315958][T16818] lo speed is unknown, defaulting to 1000 [ 474.369688][T16715] team0: Port device team_slave_0 added [ 474.383873][T16715] team0: Port device team_slave_1 added [ 474.454948][T16715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.469156][T16715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.527166][T16715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.542919][T16715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.564141][T16715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.606289][T16715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.847947][T16715] hsr_slave_0: entered promiscuous mode [ 474.866850][T16715] hsr_slave_1: entered promiscuous mode [ 474.889429][T16715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.905637][T16715] Cannot create hsr debugfs directory [ 475.655136][ T5832] Bluetooth: hci6: command tx timeout [ 475.792736][T16837] dvmrp0: entered allmulticast mode [ 476.185457][T16850] __nla_validate_parse: 1 callbacks suppressed [ 476.185479][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3123'. [ 476.267601][T16853] bridge1: port 1(ip6gretap1) entered blocking state [ 476.275946][T16853] bridge1: port 1(ip6gretap1) entered disabled state [ 476.283623][T16853] ip6gretap1: entered allmulticast mode [ 476.293887][T16853] ip6gretap1: entered promiscuous mode [ 476.308947][T16852] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3120'. [ 476.408259][T16715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.429808][T16715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.442509][T16715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.456552][T16715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.654275][T16715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.683612][T16715] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.710483][T13937] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.717780][T13937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.728214][T13937] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.735463][T13937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.839834][T16878] Cannot find del_set index 2 as target [ 476.874726][T16880] Cannot find del_set index 2 as target [ 476.932833][T16883] lo speed is unknown, defaulting to 1000 [ 476.942414][T16883] lo speed is unknown, defaulting to 1000 [ 477.025187][T16876] lo speed is unknown, defaulting to 1000 [ 477.174935][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3130'. [ 477.375049][T16715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.545145][T16715] veth0_vlan: entered promiscuous mode [ 477.564368][T16899] lo speed is unknown, defaulting to 1000 [ 477.584475][T16715] veth1_vlan: entered promiscuous mode [ 477.611104][T16899] lo speed is unknown, defaulting to 1000 [ 477.720128][ T5835] Bluetooth: hci6: command tx timeout [ 477.739064][T16905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.836684][T16715] veth0_macvtap: entered promiscuous mode [ 477.852125][T16906] lo speed is unknown, defaulting to 1000 [ 477.863463][T16715] veth1_macvtap: entered promiscuous mode [ 478.063251][T16715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.171811][T16876] lo speed is unknown, defaulting to 1000 [ 478.217104][T16715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.296752][T13941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.318057][T13941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.357727][T13941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.403144][T13941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.787494][T16906] lo speed is unknown, defaulting to 1000 [ 478.855360][T13946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.884326][T13946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.003676][T13946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.018968][T13946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.161603][T16909] lo speed is unknown, defaulting to 1000 [ 479.218978][T16909] lo speed is unknown, defaulting to 1000 [ 480.092360][T13941] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.266876][T16915] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 480.313212][T16915] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 480.368727][T16915] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 480.481328][T13941] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.515638][T16916] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 480.620778][T13941] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.791601][T13941] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.939335][T13941] bridge_slave_1: left allmulticast mode [ 480.945304][T13941] bridge_slave_1: left promiscuous mode [ 480.953274][T13941] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.964215][T13941] bridge_slave_0: left allmulticast mode [ 480.971287][T13941] bridge_slave_0: left promiscuous mode [ 480.977111][T13941] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.304435][T13941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.318160][T13941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.328851][T13941] bond0 (unregistering): Released all slaves [ 481.744363][T16927] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3140'. [ 481.841761][T16929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.070206][T13941] hsr_slave_0: left promiscuous mode [ 482.088629][T13941] hsr_slave_1: left promiscuous mode [ 482.105124][T13941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.117689][T13941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.178862][T13941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.184068][T16941] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3143'. [ 482.186473][T13941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.259920][T13941] veth1_macvtap: left promiscuous mode [ 482.265537][T13941] veth0_macvtap: left promiscuous mode [ 482.271832][T13941] veth1_vlan: left promiscuous mode [ 482.277193][T13941] veth0_vlan: left promiscuous mode [ 482.374733][T16946] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3147'. [ 482.520978][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 482.533582][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 482.543681][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 482.553802][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 482.563564][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 483.176123][T13941] team0 (unregistering): Port device team_slave_1 removed [ 483.225810][T13941] team0 (unregistering): Port device team_slave_0 removed [ 483.882655][T16963] lo speed is unknown, defaulting to 1000 [ 483.911138][T16965] lo speed is unknown, defaulting to 1000 [ 483.920129][T16963] lo speed is unknown, defaulting to 1000 [ 483.946967][T16946] lo speed is unknown, defaulting to 1000 [ 483.993342][T16949] lo speed is unknown, defaulting to 1000 [ 484.141514][T16977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3153'. [ 484.310135][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3154'. [ 484.406761][T16965] lo speed is unknown, defaulting to 1000 [ 484.452020][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3156'. [ 484.553573][T16991] batadv_slave_0: entered promiscuous mode [ 484.599297][ T5835] Bluetooth: hci6: command tx timeout [ 484.794100][T16988] batadv_slave_0: left promiscuous mode [ 484.928221][T16946] lo speed is unknown, defaulting to 1000 [ 485.245971][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3160'. [ 485.323098][T16949] lo speed is unknown, defaulting to 1000 [ 485.790730][T17010] x_tables: duplicate underflow at hook 1 [ 486.130397][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3163'. [ 486.154065][T17020] pim6reg: entered allmulticast mode [ 486.466104][T17036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3167'. [ 486.615721][T16949] chnl_net:caif_netlink_parms(): no params data found [ 486.654465][T17042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3169'. [ 486.678723][ T5832] Bluetooth: hci6: command tx timeout [ 486.873833][T16949] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.881285][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.889856][T16949] bridge_slave_0: entered allmulticast mode [ 486.897338][T16949] bridge_slave_0: entered promiscuous mode [ 486.906845][T16949] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.914343][T16949] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.922461][T16949] bridge_slave_1: entered allmulticast mode [ 486.931011][T16949] bridge_slave_1: entered promiscuous mode [ 486.974777][T17049] __nla_validate_parse: 1 callbacks suppressed [ 486.974799][T17049] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3170'. [ 487.005586][T16949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.031710][T16949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.173463][T16949] team0: Port device team_slave_0 added [ 487.187924][T16949] team0: Port device team_slave_1 added [ 487.261617][T16949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.270584][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.300723][T16949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.329073][T16949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.351410][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.428965][T16949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.656183][T16949] hsr_slave_0: entered promiscuous mode [ 487.665369][T16949] hsr_slave_1: entered promiscuous mode [ 487.672256][T16949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.680661][T16949] Cannot create hsr debugfs directory [ 487.686434][T17066] lo speed is unknown, defaulting to 1000 [ 487.722640][T17066] lo speed is unknown, defaulting to 1000 [ 487.913464][T17068] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3175'. [ 488.095431][T17067] lo speed is unknown, defaulting to 1000 [ 488.119785][T17068] netlink: 'syz.6.3175': attribute type 12 has an invalid length. [ 488.380915][T17079] sctp: [Deprecated]: syz.5.3179 (pid 17079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.380915][T17079] Use struct sctp_sack_info instead [ 488.566077][T16949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 488.589648][T16949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 488.614052][T16949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 488.634437][T16949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 488.706010][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3182'. [ 488.758664][ T5832] Bluetooth: hci6: command tx timeout [ 488.972476][T17090] bridge0: left promiscuous mode [ 489.686502][T17090] veth3: left promiscuous mode [ 489.706679][T17090] ipvlan0: left allmulticast mode [ 489.718757][T17090] bond0: left allmulticast mode [ 489.763088][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'. [ 489.775250][T17067] lo speed is unknown, defaulting to 1000 [ 489.794947][T13946] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.838912][T13946] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.916086][T13946] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.962058][T13946] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.137205][T17128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3186'. [ 490.194768][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3186'. [ 490.477867][T16949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.531459][T16949] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.638400][T13948] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.645649][T13948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.674983][T13948] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.682285][T13948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.728922][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3191'. [ 490.838799][ T5832] Bluetooth: hci6: command tx timeout [ 491.036934][T17162] veth0: entered promiscuous mode [ 491.097875][T17166] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3195'. [ 491.103015][T17161] veth0: left promiscuous mode [ 491.115942][T17164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3194'. [ 491.639750][T16949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.717007][T16949] veth0_vlan: entered promiscuous mode [ 491.734146][T16949] veth1_vlan: entered promiscuous mode [ 491.838860][T16949] veth0_macvtap: entered promiscuous mode [ 491.867509][T16949] veth1_macvtap: entered promiscuous mode [ 491.893727][T17182] lo speed is unknown, defaulting to 1000 [ 491.944489][T16949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.976525][T16949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.987727][T17186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.010181][T17182] lo speed is unknown, defaulting to 1000 [ 492.032140][T13946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.070707][T13946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.123295][T17187] IPv6: sit2: Disabled Multicast RS [ 492.132626][T13946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.141949][T13946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.323342][T13941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.342428][T13941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.422882][T13947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.441982][T13947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.492725][T17199] netlink: 'syz.1.3205': attribute type 1 has an invalid length. [ 492.588115][T17199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.619467][T17201] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3206'. [ 492.742682][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3206'. [ 492.976166][T17212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3208'. [ 492.985677][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3208'. [ 492.994625][T17212] netlink: 'syz.2.3208': attribute type 5 has an invalid length. [ 493.006665][T17212] netlink: 'syz.2.3208': attribute type 1 has an invalid length. [ 493.014788][T17212] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3208'. [ 493.082914][ T31] INFO: task syz.3.2372:13972 blocked for more than 143 seconds. [ 493.098335][ T31] Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 [ 493.106009][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.131902][ T31] task:syz.3.2372 state:D stack:25352 pid:13972 tgid:13967 ppid:5837 task_flags:0x400140 flags:0x00004004 [ 493.160783][ T31] Call Trace: [ 493.167878][ T31] [ 493.208420][ T31] __schedule+0x16f5/0x4d00 [ 493.213097][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.217996][ T31] ? schedule+0x165/0x360 [ 493.260549][ T31] ? __pfx___schedule+0x10/0x10 [ 493.278535][ T31] ? schedule+0x91/0x360 [ 493.282848][ T31] schedule+0x165/0x360 [ 493.287043][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.328778][ T31] __mutex_lock+0x724/0xe80 [ 493.333369][ T31] ? __mutex_lock+0x51b/0xe80 [ 493.338096][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 493.385198][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.397914][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 493.416468][ T31] ? __nlmsg_put+0xef/0x1b0 [ 493.428648][ T31] ? genlmsg_put+0x137/0x2e0 [ 493.433317][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 493.445329][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 493.458055][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 493.470138][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 493.475801][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 493.491475][ T31] genl_rcv_msg+0x60e/0x790 [ 493.496051][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.502972][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 493.508053][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 493.518308][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 493.523743][ T31] netlink_rcv_skb+0x205/0x470 [ 493.532603][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.537678][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.547457][ T31] ? down_read+0x1ad/0x2e0 [ 493.554145][ T31] genl_rcv+0x28/0x40 [ 493.558170][ T31] netlink_unicast+0x758/0x8d0 [ 493.571758][ T31] netlink_sendmsg+0x805/0xb30 [ 493.576637][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.584233][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 493.594515][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.601808][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.607138][ T31] __sock_sendmsg+0x219/0x270 [ 493.615776][ T31] ____sys_sendmsg+0x505/0x830 [ 493.622123][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.627477][ T31] ? import_iovec+0x74/0xa0 [ 493.635943][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 493.644768][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.651036][ T31] ? __fget_files+0x2a/0x420 [ 493.655697][ T31] ? __fget_files+0x3a0/0x420 [ 493.660909][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 493.665902][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.671442][ T31] ? rcu_is_watching+0x15/0xb0 [ 493.676255][ T31] ? do_syscall_64+0xbe/0x3b0 [ 493.681043][ T31] do_syscall_64+0xfa/0x3b0 [ 493.685570][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.691154][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.697257][ T31] ? clear_bhb_loop+0x60/0xb0 [ 493.702389][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.708357][ T31] RIP: 0033:0x7fb77ff8e929 [ 493.712880][ T31] RSP: 002b:00007fb77ddd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.722243][ T31] RAX: ffffffffffffffda RBX: 00007fb7801b6080 RCX: 00007fb77ff8e929 [ 493.730310][ T31] RDX: 0000000000000010 RSI: 0000200000001540 RDI: 0000000000000008 [ 493.738401][ T31] RBP: 00007fb780010b39 R08: 0000000000000000 R09: 0000000000000000 [ 493.746398][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.755376][ T31] R13: 0000000000000000 R14: 00007fb7801b6080 R15: 00007ffed25b76b8 [ 493.763447][ T31] [ 493.766608][ T31] [ 493.766608][ T31] Showing all locks held in the system: [ 493.774560][ T31] 1 lock held by khungtaskd/31: [ 493.818789][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 493.858413][ T31] 2 locks held by getty/5590: [ 493.863149][ T31] #0: ffff888030c740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 493.898355][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 493.920960][ T31] 2 locks held by syz.4.1935/12452: [ 493.926208][ T31] #0: ffffffff8f5775f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.940193][ T31] #1: ffffffff8e41cd48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 493.953697][ T31] 3 locks held by kworker/u8:26/13945: [ 493.962426][ T31] #0: ffff88802fdb0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 493.978566][ T31] #1: ffffc9000b4c7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 493.996196][ T31] #2: ffffffff8f512888 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 494.006955][ T31] 4 locks held by kworker/u8:27/13946: [ 494.017445][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 494.029567][ T31] #1: ffffc9001b207bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 494.046978][ T31] #2: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 494.062947][ T31] #3: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 494.074085][ T31] 4 locks held by kworker/u8:28/13947: [ 494.085302][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 494.098594][ T31] #1: ffffc9001b1e7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 494.124316][ T31] #2: ffffffff8f512888 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 494.148315][ T31] #3: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 494.177366][ T31] 2 locks held by syz.3.2372/13972: [ 494.182933][ T31] #0: ffffffff8f5775f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.191902][ T31] #1: ffffffff8e41cd48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 494.202591][ T31] 2 locks held by kworker/0:12/15475: [ 494.207988][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 494.219308][ T31] #1: ffffc9000b99fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 494.229798][ T31] 1 lock held by syz-executor/16949: [ 494.235106][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 494.245272][ T31] 1 lock held by syz.1.3205/17206: [ 494.253668][ T31] 1 lock held by syz.6.3206/17200: [ 494.261321][ T31] #0: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 494.273139][ T31] 3 locks held by syz.2.3208/17212: [ 494.278717][ T31] #0: ffffffff8f5775f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.286980][ T31] #1: ffff88807d2976d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 494.305290][ T31] #2: ffffffff8f512888 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_dump_wiphy+0x49/0x6f0 [ 494.326879][ T31] [ 494.368701][ T31] ============================================= [ 494.368701][ T31] [ 494.377191][ T31] NMI backtrace for cpu 0 [ 494.377211][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 494.377238][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.377252][ T31] Call Trace: [ 494.377262][ T31] [ 494.377273][ T31] dump_stack_lvl+0x189/0x250 [ 494.377311][ T31] ? __wake_up_klogd+0xd9/0x110 [ 494.377346][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.377380][ T31] ? __pfx__printk+0x10/0x10 [ 494.377420][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 494.377458][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 494.377489][ T31] ? _printk+0xcf/0x120 [ 494.377519][ T31] ? __pfx__printk+0x10/0x10 [ 494.377546][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 494.377578][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 494.377632][ T31] watchdog+0xfee/0x1030 [ 494.377666][ T31] ? watchdog+0x1de/0x1030 [ 494.377706][ T31] kthread+0x70e/0x8a0 [ 494.377734][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.377763][ T31] ? __pfx_kthread+0x10/0x10 [ 494.377790][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.377812][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.377835][ T31] ? __pfx_kthread+0x10/0x10 [ 494.377862][ T31] ret_from_fork+0x3fc/0x770 [ 494.377900][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 494.377940][ T31] ? __switch_to_asm+0x39/0x70 [ 494.377963][ T31] ? __switch_to_asm+0x33/0x70 [ 494.377985][ T31] ? __pfx_kthread+0x10/0x10 [ 494.378011][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.378053][ T31] [ 494.378063][ T31] Sending NMI from CPU 0 to CPUs 1: [ 494.538002][ C1] NMI backtrace for cpu 1 [ 494.538039][ C1] CPU: 1 UID: 0 PID: 17200 Comm: syz.6.3206 Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 494.538063][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.538075][ C1] RIP: 0010:__lock_acquire+0xac/0xd20 [ 494.538106][ C1] Code: 48 8b 44 c3 08 48 85 c0 75 20 45 31 ff 48 89 df 31 d2 e8 17 f0 ff ff 48 8b 3c 24 48 85 c0 0f 84 02 0c 00 00 8b 0d 04 9d 0a 18 <8b> 97 e8 0a 00 00 85 c9 0f 94 c1 83 fa 30 40 0f 93 c6 40 20 ce 40 [ 494.538122][ C1] RSP: 0018:ffffc90003def408 EFLAGS: 00000082 [ 494.538139][ C1] RAX: ffffffff934638a8 RBX: ffffffff8e13ee60 RCX: 0000000000000000 [ 494.538160][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88806f49bc00 [ 494.538176][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 494.538188][ C1] R10: ffffc90003def658 R11: ffffffff81ace6a0 R12: 0000000000000002 [ 494.538201][ C1] R13: ffffffff8e13ee60 R14: 0000000000000000 R15: 0000000000000000 [ 494.538213][ C1] FS: 0000000000000000(0000) GS:ffff888125d48000(0000) knlGS:0000000000000000 [ 494.538228][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.538241][ C1] CR2: 00005650a1e83000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 494.538257][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 494.538278][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 494.538298][ C1] Call Trace: [ 494.538307][ C1] [ 494.538324][ C1] ? unwind_next_frame+0xa5/0x2390 [ 494.538353][ C1] lock_acquire+0x120/0x360 [ 494.538377][ C1] ? unwind_next_frame+0xa5/0x2390 [ 494.538416][ C1] ? unwind_next_frame+0xa5/0x2390 [ 494.538443][ C1] ? __fput+0x44c/0xa70 [ 494.538466][ C1] ? unwind_next_frame+0xa5/0x2390 [ 494.538492][ C1] unwind_next_frame+0xc2/0x2390 [ 494.538522][ C1] ? unwind_next_frame+0xa5/0x2390 [ 494.538552][ C1] ? unwind_next_frame+0xa5/0x2390 [ 494.538579][ C1] ? kcov_close+0x28/0x50 [ 494.538605][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 494.538631][ C1] arch_stack_walk+0x11c/0x150 [ 494.538659][ C1] ? __fput+0x44c/0xa70 [ 494.538682][ C1] stack_trace_save+0x9c/0xe0 [ 494.538701][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 494.538727][ C1] save_stack+0xf5/0x1f0 [ 494.538744][ C1] ? __pfx_save_stack+0x10/0x10 [ 494.538759][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 494.538779][ C1] ? vfree+0x25a/0x400 [ 494.538802][ C1] ? kcov_close+0x28/0x50 [ 494.538824][ C1] ? __fput+0x44c/0xa70 [ 494.538852][ C1] ? page_ext_put+0x97/0xc0 [ 494.538871][ C1] __reset_page_owner+0x71/0x1f0 [ 494.538895][ C1] __free_frozen_pages+0xc71/0xe70 [ 494.538918][ C1] vfree+0x25a/0x400 [ 494.538951][ C1] ? __pfx_kcov_close+0x10/0x10 [ 494.538975][ C1] kcov_close+0x28/0x50 [ 494.538996][ C1] __fput+0x44c/0xa70 [ 494.539028][ C1] task_work_run+0x1d1/0x260 [ 494.539052][ C1] ? __pfx_task_work_run+0x10/0x10 [ 494.539082][ C1] ? kmem_cache_free+0x18f/0x400 [ 494.539113][ C1] do_exit+0x6b5/0x22e0 [ 494.539137][ C1] ? do_raw_spin_lock+0x121/0x290 [ 494.539163][ C1] ? __pfx_do_exit+0x10/0x10 [ 494.539182][ C1] ? cgroup_freezing+0x20/0x360 [ 494.539215][ C1] do_group_exit+0x21c/0x2d0 [ 494.539250][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.539272][ C1] get_signal+0x1286/0x1340 [ 494.539316][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 494.539341][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 494.539373][ C1] ? kmem_cache_free+0x309/0x400 [ 494.539397][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 494.539429][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 494.539461][ C1] exit_to_user_mode_loop+0x75/0x110 [ 494.539486][ C1] do_syscall_64+0x2bd/0x3b0 [ 494.539508][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.539532][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.539551][ C1] ? clear_bhb_loop+0x60/0xb0 [ 494.539572][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.539594][ C1] RIP: 0033:0x7f3bfc58e929 [ 494.539610][ C1] Code: Unable to access opcode bytes at 0x7f3bfc58e8ff. [ 494.539620][ C1] RSP: 002b:00007ffe80eefe18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 494.539643][ C1] RAX: 0000000000000000 RBX: 00007f3bfc7b7ba0 RCX: 00007f3bfc58e929 [ 494.539656][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 494.539675][ C1] RBP: 00007f3bfc7b7ba0 R08: 0000000000000138 R09: 0000001280ef010f [ 494.539688][ C1] R10: 00007f3bfc7b7ac0 R11: 0000000000000246 R12: 00000000000786f4 [ 494.539701][ C1] R13: 00007f3bfc7b5fa0 R14: ffffffffffffffff R15: 00007ffe80eeff30 [ 494.539735][ C1] [ 494.541608][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 494.541630][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00946-ge96ee511c906 #0 PREEMPT(full) [ 494.541663][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.541681][ T31] Call Trace: [ 494.541692][ T31] [ 494.541705][ T31] dump_stack_lvl+0x99/0x250 [ 494.541751][ T31] ? __asan_memcpy+0x40/0x70 [ 494.541786][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.541828][ T31] ? __pfx__printk+0x10/0x10 [ 494.541873][ T31] panic+0x2db/0x790 [ 494.541927][ T31] ? __pfx_panic+0x10/0x10 [ 494.541964][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 494.542000][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 494.542046][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 494.542080][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 494.542131][ T31] watchdog+0x102d/0x1030 [ 494.542167][ T31] ? watchdog+0x1de/0x1030 [ 494.542210][ T31] kthread+0x70e/0x8a0 [ 494.542246][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.542277][ T31] ? __pfx_kthread+0x10/0x10 [ 494.542309][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.542335][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.542361][ T31] ? __pfx_kthread+0x10/0x10 [ 494.542393][ T31] ret_from_fork+0x3fc/0x770 [ 494.542433][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 494.542477][ T31] ? __switch_to_asm+0x39/0x70 [ 494.542502][ T31] ? __switch_to_asm+0x33/0x70 [ 494.542526][ T31] ? __pfx_kthread+0x10/0x10 [ 494.542559][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.542605][ T31] [ 495.137447][ T31] Kernel Offset: disabled [ 495.141776][ T31] Rebooting in 86400 seconds..