last executing test programs: 2m26.336401248s ago: executing program 0 (id=321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2m26.203272758s ago: executing program 0 (id=325): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x1b, &(0x7f0000000000)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="01000000100000022abd7000fddbdf250000a000ef71174ebd8d67570815e29f34ef83ed60aa7fed75e230f1effc05fca85528ea06001d6cd3101cc59d4c67d3030aa771ef7ed98a77f4de5dabe35557f8b241d854334bfb23c33e9c798d556f561b54dbd56ac15f0d8c0bc3a4feabc1f8ee7b00000000", @ANYRES32=r0, @ANYBLOB="0000f800460d0017708276dd64c3dea73843fa4c2aed6c3a26773245a09b98c318e422f656850a34c4e6ac8b026c5e0c687b32f201c4920cc57d85e050e7912104bfdd3e8159bc722bba2f9100bf6b4a70b8dbde9a37274ae03b00ee8e04cd807affc6eae1fe3c7e545c898392ff57ce528db69943f98bae000003001f4f52de2f9ad23ab75b36672c87dac94b25f045d09b13b8ec4a918c4c97bc37d42b4a93ff99d24d40a72eec7383cfbeb18ccc7e727fcbe0348d7718a29671470a94a718c87bd89343a90ff0c62658d1d0e1c6dbec616e6a3e90783628ea7a665ea1446bd2710020a2e024c6d2bf92326df1b790f240ff051b117169db23523ba02c786276cc2f8f8c0dac16ff50d3caaddd88196ceea2c191fef59cb2ed125b44dc6464e01c774fa0c203f67ebb389f8c45bcfe9d695c6075a2699094ba5e37c5477598cee1836a47f73e7907e413d97f01372fdda12f96abc62a5ba182cac2c293ffa2b1c6a8168972dbf5d9b36585480b724fa645d93fea68e29263557b8f8601d249089ac8487f0ec70795e208730e64b2af6bbfb80aeb5bcbb14739d4ef3714f4501aa2ba9ce31ad59761ccd305e87f71e018de7d991a92278524df47ea711e0b1697ac7a16f0479343306dd5bbd7d3694d10977ee7df421dbfa51dd0a4cc43a3f4b089a12e6c8e131df4fb574dee7ff0875e99c00de06683f9afbc406ba4ad96d1449a42bc39fae6b328c6462ec47aeb5a471e640ec7905ba29e40f4a40848f4c9273abe087073f5b21d3ce840a932544ec3095725bb871486293acd03637cef12a13d7ede33a147a3ec75f52fff6e43249b1ee9f9c39021992e7b2a21d99672baa5ba05f37553ff6e56edacb72efcb977d5f66744af4c8abf18d00aea907dcf58fc3148469ef7d05dc456573f2193c74fcfe8eab0d9a11287e4d464612f818f6cdefcbf777635cc848d26d40b1681f430500930be696394d45d4caed24267d3ce6a9c707df0e8e5b43cbe2240751ff2c016a357eddcfab5c7994798f50a29b199e8e3d1354216aa49467fe61bc9bd89748fc4418d78fe1a60b4b0332c793812f02030e600b50e52f67c7e7bf2f7712c0851107b764ab013884a990d51c26b93b4d51fb2a8b8d78021c9f712c585cf24e02b95a4fc98e8a91d9d97a346e2ee9e26c0c429f905e04de745bc6c3af41a0ce253a04399f0a40b22c73eb1965c77d0b9f1cbae760770a620ea0145d8ff61b0dea8487c97f16aefb15b6949f19393609a944c460807b343087a506f96304c7b6dc25992bde807876418238d1c87972c9531525331a7181a1a6bf7ade36267b06c0e0e936b3ea0916d0657e8969e1624a5f6f91fb93044586e88c3d2f6ddb4b6791444db5ae6d27a480ab74da9414769fa5adeebd6fba4014ba9a1bba659bdd81d58a0edbc910dc8f2821a6e1e2fbe0da3164a6024a84e957b2c88b61babeb192bce9ec90193dc9477d6c369ec100387c4b5cc266bbeddf443f61f54e4252cb9a34b540691ebd596253e9a9bde0929c4d569ccc4118bac069d19f4e591c5d375fdc080d10a5f89d9fca4862711e88bec517d955d7d94d65833e90d6d751047d217d755d9760662134560dea64e20f32ad7186651ec0ae71d0dee43a9f223e8e224a3eb71018f1c396c434753d313205f1dab4037c65f30aa74da0e538c8acabcc7b41b4c16c1c8b248959619877ad4215627130109be3d0fe75bb30e1792588dfa9c5e3dcf06bb03703e93ad6273ad0db3aa5c8a7951b6303f9f61f76f3d089738e3448ec5770e2be51f0e03ea27e929b71a181864f25d925519562684a024ee5ead4708c9873c23f3c8db5af8837eb984c73f1cb9e97891d035f903de0b03c39d670cb9036573a48e8b8e145f0ed7c5a1861c8949a7951fdca425b5659b929d5499ab5a3d0fa50cbb4e4c205ecad7c3962da6818619b280557b1f781f8314933e61f90ba72ea75fa2ccf65f2fe0a3fba83789fe914d8683dc3c72a32c1e45d3566dbd63ead5b305baa4928a8be1c20fa2e8cce477e2dc037e28b08248ed1f03b3bdeeda276a6a5372b28ca4af045b83ad936391538768e99c4adb6e18e82bb2ca9fa4aaf273aeef6a51a4a4a2abf3f22146e266448249c37ec1ae2adeafef1bcf0c3d1a7380d91b49622c7d7e06699ec98b367636dd922896ddcdf26651d85638c5ad83570583cb99ac02ecc49ac4cae557cd00390ee0abacb69ad138ad39f7cec8a29a028c63c19b8883a3452675fd1d7c53e3b5a767bf4e3046346d1ce6f41e4274d91a567088a2f71243e523a936b49efad0028ca52139430468cb4ae4029235f7a81463ad2a5719e40b88220bd8490a8864c98522eb55c121db845b994746fc3e1be967e4abc277d851ad56e31a3d2231ceef96db511eae8a234f5f56bfcf23bad74301bbd9a70450c16ad3da7080481a6b6ffec39d3c801f01b5f6d7735b036cd998b69aae4a7af12a8f0c1302cb30f090b5da91bcddaefa97c88b8e18950cb8e4f661bbb607c615813dfe0e0cc610430379a32b4df657b6b90848c23153e4d74c38ff8fdbbe2df7546d3a732f7d4bc7b64294146b264cbb1a7f1d28be6644959c07f51151e94064fd45e6bbeca22a531becb9bda360fc7ff2e04ebeade0620b185ac3d34ddf5c33315c56469d0e365bd8cb78e9c5a1f91d96e30a1207e3fba7c3573faf98ea149efdeb4a0468cad251b1918df47e5f511cc3178ce5a94056c48bca3d29b177e3d580e95b203bcd638687c37f87c14fe72c3ded3ff337b3e97d6fde94a396a06bcfe9ee2722eced76a440f0f6811154c67d6f457f6719d17954c29a165e656a33df4fe259f280abe401fe271f3a77ebbd1e1d49d4e06a6f8994da6569df4b616f3886788a9a300062f130c6d26439dfb7485e6f5c01c1cab5eb6b6ee3f79d0082fc65be64cc70c4b7762bd4a1e82b25999b103d98ed3dce21f6ba2af0837ebccbf15ec57310490548aada1e51b89012976a42ac34018af9df44c79cc5d506068d7afef84aed883816d941f6edeb6a2aac4f9a8234ac7e63bcb9b2dd4f438272a3e5e231a8d4f75eb0fce1d138ea5c4f84e6d6ab2541d2316c6c533df54e8f06e2f461ea8c89032594397a3332fc78e1bd18429ccf4f3e7e423ca0de330729b8622b12619675a8d6aeb97ffb84b6dcdaa4d49b33d22ab522e41eb8a39d20d82a38d106915057b1235ade1e47bc02b3268b0e63aa7ba0397dea00eb660bcafceec30ecb732cef1d8ca157837040bafefaeb9388e5cf4a6a53bb3a353181ac0b3e2f79b33249cd810ae5215a6a3181331d2084b15c96d8277430910fe16f4f32a617c42b1c519ab96dbeb2ab94bbac612cb763b9e9538ba656be2ca03bd907c0562819a741bb41c79b3ce2be6bc812cb5ebc478247bb7b406d1063124185c8aa972201bcd4f5632aca2b73fb46f1ba6acf2dbd65ff59673a3bf44c03d6e389d49cb3822bbc6612e4fc8588590cfb98af8c86d5d5b0a93a6a6630ad943d067fdbd515ee7499e36d5e75d91b0719c8f8a922d6f90f1c739d58a37e7110bfab1ca0f178a2c0e5373bf4877396b046971c7f2946fce99277f99807e8e5a85b706e7997fb0bf8bfcbb76e9c0372c36aedcd1ae41b01fb0a6764a3060a10361813d75b6ac9d481af08bc37e1f8fb2a2bb39200d2bc9ebe329a629ffb5ea7bb71c896eb67fd6f660b4f16830c752fb82e1ce63bf0c4340d00fcbb09420298171474070dd0653edc4484848c0848eef3739f13e6779f868804427d0c7d86a851a16265134e5b2205e7142b3ff8e33b38b32ab1ee4433323f54c232324cc0e59decca707736c08b83d90fa36d82e6ce6b558f739c6c06f62e60bef00bc3414c251fe2029e3c0685ce1f9d3173813f72a3822970aa8824af71a94661d11a2e8bf8565c4b6b4d08b82ab8f06bfc09a0604349a9076c25d74f4de627096d61f4c7d4a5942723621ea8e6751c7b1f2c416219db58e95037af3ea8c80f0a35b0d8a451f67116857d102e6292800f3b51bf890bbacef0b1ff3e640854dabdde1cffb19fc84b8bbc39a3c2300e8a4b86f9d97cee78737cbd7775601ae2ab88936e0c6195c4f918d5fefe90a73aef1a48aa9a860958cf7201f964ed24ac8eefd847437d20741fab5215f052b9d2d1c487f19ee0138223968333d20d7f9bbf3b9f7089f31da7035d5705085e4e90ee7ba0f0fe6c7a59992b9d2f9a7a75d664b6fa2baf8709445c4fcac485ad37e9a1858c48a6ffb7ed32ad615b8389cd899ade9e83e551b3294ad307cc89e084670d702bfc8d2ad2ea11c71a990b6eb8841f2ba7f156a43627d27da31fa7020cb3f80b05f3e94ed4cf3d43b3a938f3598fb086e14fd9d5a01f5a34be662624d88b356d7f0ecce0bd19ef1b395c76204ad630d9b3b9c2d049b6d76fe12aa2ff4a3f90cf4552b2aff737e4cbb503358d55a80822526fdf82d85fe6ec13b9826d20e5991a2497e0d0cb829114fdf100fa9b0e9e922052bbd09f1c2f2adccacde69d2c68c6d0d0436da8d307207d0eb4ae85533570bfe6985a51db190ffd80a23818ceb24348159f4221398d3e4d1b39165e4a4cf8bda3881581ee60a7fc026d76bef95bf1be421aa2fba95843c7694b0db17966ad0312f1f8a11a5345fcbc7d8971e1b5dad682bf1d05ddda39183afec834479a3fbcece22b179c5b89fedb258e47c7288dad8ebfc1f9c69b6ee9aa16d562caa404cf47400e6db6d1dc7fba2f0612f6c0230821c27d58ca9004bce21697ce1eec0687ae9ac5371a645b684114a1d83b422de3531a061af2be4394b87aefe57148fe303a1986558b5f072dd4ac1c027123274f94d2f85d30483723c3f72b352ff0cecbfd3b32c73d9917910d1f638c1b1ed9e3e0dcc68b6d0de12a1b2fd53b77ea47e3cf81e235f35fc45a21d1e5bd0f9ebc6a996387d2c558d68673e1bc1ac45646b1557635061b52633d4babe1504d6494a3582a926d516062a061f092224de8333802bf3b171b54aa58b7bc04e0833eee9fa2f3047ac4b0d678cec9fc25301c554a5f75ddc4093a313e20994d5922c23b30bb585c84b0c8f9b898559a65ab7e23b85d15c906551665326e584dbf0450304c7646f8fc9f6332370344fc8fadd45fa7ee7376a6a29d97d146c29affdb8e180315d86caf48e17ff473afcc26f866e91e39f7512dec7062633cbb86a3de7d4ef11a88ed5692cf12b165c705acb3f80577296a7318b865069d4ae8d0b66b9c6fdd97ddf84bb758d274082e6939bcf4d193a6b1257d63ddee0ccd1b7915cb473099957f781a19be15c790ae268dc632f12b491c3be6b9b26c8f09e001a2b4de7bdd922542b8982f50543d4547f0efdf85e75e28c9ae9d7c3d2d6e478dbf8b14b9037c6f680f1e3bd2b90d66425815f4fdd537fc45e093d3ae571b07e2cbd774656beaa296175247874d7836f798a51b80dfb8d0da4be557c5fc260e1494c09c3c65d30011725f98ddcf7e7c0ac726b253433d6ee7124fe460efb48cb5dd4587abe1660b785480dbb6d2cf0ff6e29a1b4b04e540ef090bd2df5a1901f6944e851478ddfbf117c95b590c79121d5148e24c953229f5a3286f4ecde06cdafc6cd600273aa7c23da8bc22e8b3e1b6eea372241e775c1413b012c11488a906a47be9d825adaccb173ba672a786bd00eb5eca786ab21cd4047921ece974acb197b1ee8285fe417a6c2ef0d530873416309283a97918c4ed7f51b0c15e73a0d1620fc9c266c324b437bc7fa6585c448205a9d2f788855fa45b6ee396f38bf22451f7d15e9738becf0a386a5a2138d722a6211e26bae21fa8b16ab585d3f95a8745fd3abed9094a3e2bab47f726ecb931627df3d53e250f172cc70af1958c825d8d051551f53742e9acc3255c2eb9b1b1e6fa9ad20b5644d0828fb21ad66c1d6919a5d54b075d41c5a0d2048b78b0b367a212713e718da702462e2e8dc865c7d122a10000ba8088d0cb7dee9ab04d64db3f8e68aa4ee1917dbb7539f7e40c5df42f0634c455cffe0b6507111dfedab8879d0aae620c60df68adbb93f39f7367d38cd252b17a586490b766acef715932d1358e1f1857eb81cc026041571110a4d82424c98cddda8e57e15d6817e8a21714ab8b7473d6594e4cda6b8d08fd79be1a84aa26a1b280ea84e8fda7b474a588bca5f963013a7ad7859dfbb8e024d841e1ba0ac319404a762482211c01d2f9dca7e974666d7978bc7636f752ae8e1e366899c3fffbceda738103ea89f27c227c7f717d78369b7c895a5f06bdadec5b22ca17ff920d63b50f3426b404d8378caaf79700b186c548273f4fd711729e1a61df0c0000068000004d000a01010100002c800000fa000000f2005da8c1b543eebce9439bd62259b2be8b76c53a90dea053b1ae01eff31e4201ce468ff4f120d89d6b24c0b79938ad72928256772f060a15e300ddbe8652113174c1b718c4451da9dd02f2df066d1fd3534931d8076efce92ee0d47992d58198186a0c5a2f16147dcda329f2a2197e64eba25a3fe7e8e441b609b65c4e42d1aaf0000029800000e0800000a88000003d00fe8000000000000000000000000000bb00000015000000000000004900810e000000007f80e2870228ca9593805a677e7be2bad651f8d01d9b3f87c01cba4c3bd49d5dfc8fc2916b8c105545d2a1aa0f4a92a2ff22f0791f18e27e4af67d746b90ba134791b87f7951a01689417d5cc990e360c34a692a17bda9c919f0bdcdfc0241918dbb7f412409ef9b887bc835b41e91532a65d45738bd1c44d57eb1591e992bb7dae93fb35e6d4361b20908b2edd9839a370ebb706e268d717c4d176ba55b3e79fa3b9c5000cde3ce1d61e7c2b6a7043ecbfcfafbc7792a110411c4242f01710aa5ba42884f96ed4a4400e03e94f0ca2fc73ca339fa0cb5977f80e31303cd356b0f019048f30a216700003500000000000000"]}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 2m26.071256696s ago: executing program 0 (id=327): r0 = socket$packet(0x11, 0x2, 0x300) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f00000000c0)=0x7, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r4, 0x3, 0x6, @broadcast}, 0x10) (async, rerun: 32) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6}, 0x10) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async) r6 = socket$igmp(0x2, 0x3, 0x2) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async, rerun: 64) setsockopt$MRT_PIM(r6, 0x0, 0xcf, &(0x7f0000000000)=0x3, 0x4) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r4, 0x0, 0x0, 0x7, 0x5, {{0x19, 0x4, 0x3, 0x0, 0x64, 0x66, 0x0, 0x6, 0x29, 0x0, @private=0xa010102, @multicast2, {[@ssrr={0x89, 0x13, 0xbd, [@remote, @broadcast, @empty, @loopback]}, @rr={0x7, 0x17, 0xb8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @broadcast, @remote, @remote]}, @timestamp_prespec={0x44, 0x14, 0x78, 0x3, 0xf, [{@multicast1, 0x6}, {@multicast2, 0x42}]}, @lsrr={0x83, 0xb, 0x66, [@private=0xa010102, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x209, 0x2}}, [@migrate={0x9c, 0x11, [{@in6=@empty, @in6=@remote, @in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, @in6=@remote, @in=@remote, @in=@dev, 0x0, 0x4, 0x0, 0x0, 0xa}]}]}, 0xec}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd29, 0x25dfd3fd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) 2m25.919543159s ago: executing program 0 (id=330): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xfffffff6, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x40, 0x80, 0x401, 0x2, {{0x11, 0x4, 0x0, 0x34, 0x44, 0x64, 0x0, 0xd, 0x4, 0x0, @empty, @loopback, {[@rr={0x7, 0x7, 0x4d, [@dev={0xac, 0x14, 0x14, 0x1f}]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xef, 0x0, 0x7, [0x0, 0x3, 0x4, 0xfffffffe, 0x8, 0x8]}, @generic={0x89, 0x6, "cc5d505a"}, @end]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x3, [@ptr={0xa, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x4}}, @enum={0x7, 0x5, 0x0, 0x6, 0x4, [{0x1, 0xa}, {0xc, 0xb}, {0xd, 0x1000}, {0x9, 0x80000000}, {0xd, 0xfffffc38}]}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @struct={0x8, 0x6, 0x0, 0x4, 0x0, 0x8, [{0xe, 0x5, 0x7}, {0x0, 0x5, 0x5}, {0x6, 0x3, 0x6}, {0x8, 0x3, 0x5}, {0x7, 0x1}, {0x4, 0x2, 0x7}]}]}, {0x0, [0x61]}}, &(0x7f00000003c0)=""/25, 0xd3, 0x19, 0x1, 0xa74, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x7ff, 0x0}, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x8e6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x4, 0x4, 0x59}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000680)=[{0x1, 0x1, 0x2, 0xc}, {0x4, 0x4, 0x5, 0x7}], 0x10, 0x1000, @void, @value}, 0x94) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x8, 0x18}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7cc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0x4, 0xb, 0x7, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7a605ee3189e2ba7}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x89, &(0x7f0000000140)=""/137, 0x41100, 0x0, '\x00', r1, @fallback=0x34, r2, 0x8, &(0x7f0000000440)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x6, 0x100, 0x80}, 0x10, r3, r4, 0x1, &(0x7f0000000900)=[r5, r6, r7], &(0x7f0000000940)=[{0x5, 0x4, 0xe, 0x3}], 0x10, 0x3, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000a40)={0x0, 0x1}, 0x8) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000a80)={0x3ff, 0x56, 0xc00a, 0x7, 0x80, 0x3ff, 0x8, 0xf3, 0x0}, &(0x7f0000000ac0)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000b00)={r9, 0x3ff, 0x9, [0x2, 0x5, 0xffff, 0x4, 0x3, 0x0, 0x3, 0xc7ca, 0x101]}, 0x1a) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r10, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4014) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r4, &(0x7f0000000c40)={0x2, 0x4e22, @multicast2}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000d00)={r6, &(0x7f0000000c80)="a360846e59e6b796106738e9f8115fa62d34de4e9d80b3c0e221ac093c5f8cff4c8d5a64d92df30c62ba970ecea08c33c9377210bc13efe9a366372b404c959bb3754616bf"}, 0x20) pipe(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000000d80)={r9, 0x7, 0x9}, 0x8) pselect6(0x40, &(0x7f0000000dc0)={0x6, 0x5, 0x3, 0x0, 0x401, 0x1000, 0x0, 0x2}, &(0x7f0000000e00)={0x7, 0x3, 0x7fffffffffffffff, 0xd, 0x8000, 0x401, 0x6, 0xd}, &(0x7f0000000e40)={0xd8, 0xb, 0x9, 0x4, 0xfffffffffffff17e, 0x2, 0x8, 0x83bd}, &(0x7f0000000e80)={0x77359400}, &(0x7f0000000f00)={&(0x7f0000000ec0)={[0x64cd]}, 0x8}) r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/net\x00') ioctl$NS_GET_OWNER_UID(r13, 0xb704, &(0x7f0000000f80)) mkdirat$cgroup(r12, &(0x7f0000000fc0)='syz1\x00', 0x1ff) r14 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000001040)="94072f35dd777dcf4717cb04f62a0ad9a68a8c7fe182fd06f68fb991b73cb9671255b3531c31305a8363100bf42868f3a4be4df21533c70fbb5253a640ca85925585099246f72fe3e7288bc1b2d0e457bbbf063c9cbce72d3fc75372f47f8012e642827d357e687788370ca05a2e0ce0e1a154edda4af02bbee206294823481ed13e9b14cd20068db4ef2fa8b06f268a414c7b198d7e30e5c9f09514929cfa966f360c45040438a3708ec7ab8b6bedd39d65fc", &(0x7f0000001100)=@udp=r12, 0x2}, 0x20) socket(0x5, 0x6, 0x9) getsockopt$IP_VS_SO_GET_TIMEOUT(r14, 0x0, 0x486, &(0x7f0000001180), &(0x7f00000011c0)=0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f0000001280)={0x0, 0xa4, "b745c6e23a59fa0bc1867d5ba76d541e09cda98ff35310b88fd207a52767eed37d67c4f1645dc81f4c1d5b503d7ffe8587fb8b9ccaf1a75e60d589fffe317a42acf56af2bf34be4a2e7fcd9a894abce4f5ff6a137124c5e86d145707ec24646632db6c5a090a21fc66cd8270e190a10900f683a28a315f6489604d81f62f6fad55a6b056201820078c54e0c51cc2920979a47ec2ff272c7e958343cce27a8636b59111ab"}, &(0x7f0000001340)=0xac) 2m25.761773754s ago: executing program 0 (id=335): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000000) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080000000200088b2f01000846"], 0xfdef) 2m25.522944065s ago: executing program 0 (id=337): unshare(0x60000400) r0 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0xfffffffe}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x5c8000) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x12, r5, 0x6aeee000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "2782eb71a65600", "4f22eb518797c32d340236a452d4d31439c3dcd91f625102a907bc938cde6204", "60db74b7", "7c592fd4758bca1e"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "2782eb71a65600", "4f22eb518797c32d340236a452d4d31439c3dcd91f625102a907bc938cde6204", "60db74b7", "7c592fd4758bca1e"}, 0x38) sendto$inet6(r5, &(0x7f0000000400)="ff9e455c6f4516faaf3f02d2216b5dc01cdce1167433b0c242fb59f7a04d02f23cdf27e424c208dfb1abbb1b0803f3b1f7d950567038b88cf5950fa5b7d0594c8191ec286a461429f00000000000", 0x4e, 0x40041, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x880000, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x880000, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x1000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32=r7, @ANYBLOB="0dfa130016000000240012000c00010000010000000000c2df0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32=r7, @ANYBLOB="0dfa130016000000240012000c00010000010000000000c2df0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 2m10.339335032s ago: executing program 32 (id=337): unshare(0x60000400) r0 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0xfffffffe}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x5c8000) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x12, r5, 0x6aeee000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "2782eb71a65600", "4f22eb518797c32d340236a452d4d31439c3dcd91f625102a907bc938cde6204", "60db74b7", "7c592fd4758bca1e"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "2782eb71a65600", "4f22eb518797c32d340236a452d4d31439c3dcd91f625102a907bc938cde6204", "60db74b7", "7c592fd4758bca1e"}, 0x38) sendto$inet6(r5, &(0x7f0000000400)="ff9e455c6f4516faaf3f02d2216b5dc01cdce1167433b0c242fb59f7a04d02f23cdf27e424c208dfb1abbb1b0803f3b1f7d950567038b88cf5950fa5b7d0594c8191ec286a461429f00000000000", 0x4e, 0x40041, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x880000, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x880000, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x1000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32=r7, @ANYBLOB="0dfa130016000000240012000c00010000010000000000c2df0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32=r7, @ANYBLOB="0dfa130016000000240012000c00010000010000000000c2df0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 34.015387745s ago: executing program 2 (id=1124): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x1) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 30.787873585s ago: executing program 2 (id=1148): r0 = socket(0x6, 0x800, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x2) getsockopt(r0, 0x114, 0x271b, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) 30.673209088s ago: executing program 2 (id=1150): r0 = socket$inet(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRES64=r0, @ANYRESDEC=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001940)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200000002"], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000002f00)=ANY=[@ANYBLOB="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", @ANYRESHEX=r6, @ANYRES8=r1, @ANYBLOB="4985c4d7cfdb52036988c3f413c99cb9880e786b1a7bf639f887d17ceb2e61a24ce29db63e64dbf522823075e5b979b5c17291f31863302351e914f78b18d6980b2e5723f9e10213aa861afa0ee77378e444f4f62786aa5d998d88d85c807b521a79949a2befa362f723538923e99140a9a85b02de73cf174ea12b81e99c237d74413856bb3a9eb1df44fdd8dfe7ce4b1cf30926a17cba37c2a8d3baea6814c7b75c115aaa218cece2bd991a296112a8594c0e62acb96c599cfbf5ade78dedb03f9b0954dbd258c32874cee25ba72c7056911165540f88f304e01440abe323d96dc40bd519c6b61eaad3864d730460f99473c25a39b9e2f0cc1ce7352237da93fdb809785cca9aa453ec8bbbc05092c799e322231b5cadce550a39ee78bda2a2b0a3de81b2f4f9e805b56fa091056696d149616c9b9ec1452e4df7917189b42df05a4c622642ddcb806774ed1399346a6cdf44838b2d3132b82be4db43bf2a1b5c4e5e5ebbc04db0bc579d4cce95db0c20f2912eacd33a638460723e40fe5ad0c4693a8a70fa4e916d97a3884174595562db2c8dc960b7dbdff2c405148ca616900e8db57c253a1d628658319febe9fa5553a825029adb81b4ba0a8f8f07c24b306a585119b18fef7e1433ce5c47d1fe2a7e2318a2fb9db1115678fed9b7eb25cd1f7b1fe2baf0f932a0e911a203b976e6f8849974a6e2953688c765f12cb366028adb6c484ee8e89740611491616ca7bbe39bfe7eb01aeb67d829d27cc56b32f99aec885975b2e321d6ed89c96c59b5b1745b013aa12e2b519ece17bd63baf7f15bcb2f49bf82e33ac29902494fd2ef2dc9a257039cafa21f9d74bcbe32ff7df030b7135edd309bbb7c20f8a5df79b22ad5ba78dab2fa463870d3897a2f3827efbea8d09287c95de6b4d557f7b9b31b42565d53eea01e9f7a818e2ea0180d6583bafe266fcb736261faedd3ed88048a5b8505b43b2782d4aaeb5fb5b21a3e0374e9edd414a6fdd3a508442e7921476cf38b6c36c5e9c8dd90a9951d6a80c5463f62d5df5340ac7df50f2f57e5a7020818d6451c9c9df2b2a2055bd379b6cb71d2f7532fba0093c553cfa3f1c604d40cb210ed8725b5a785e48dee49a17f11ac42c53776d1d773435f35ba857aa935c1c40bff4198e168b6c43616986ded45c779bd4a74c7f0bfd9fed7eb421b1e5d4f6ab3b604e82cb04f0021f8bc3924e3d0a83741fe219e41028eaa59350d50fa99611254d2700cac86a6f46a99b54782295608566c6dd39afffba811658ee1c60971512a446f54cdf8aadd4646e1abe6a3758fb88496cb6c9e06ef6ea1c7d5837944c73d8953a0fe2b8e46d5309217a361d8b9e3c07589d8212b48382e4b8d275ff606189aa74f0981331846842cd3f10bd62e16dc30137a35743331d792c3d528216cef9e3f0b1c8b6fba1443e48bbe9317a68cc242d7bb5439fb36fbbe63b120c47b1c56c9968247805e5f32f8884f05760a620738b5a42599185b4b90737d3c2a66ded9716e888599d834933d65ce03e13f2be2fb88db9b57ad47b89c26632bbffd56be1ba986f562c63cdc6fce845fd94620ff53d115489061358a1da6cb9fb34436c0af3c89a8dbb87cd6fb7883f3334d9aad4822f0cd5c937d34050ffc349eb109910d9bffec9dcabfcec848d9b8653d807403f13807ba43df9096b39b146c17e7bc20456e8b3c7bab2cd4c75373aafbdb9c67833cb9a8ae3e7b100ccacd379232bd736fcf1091ffd1b25e83b5171d9fef3609703d3edfee34613381047d4eb3f5b60362d2f09f2859e320925f6ab36d7e855d8d01cbe81619181c5ac8eac4ab654099b1e815fd66250ab24f31fcc769284fc48cd85440f54390e24127f0019234cf2f35c5cb56babd9e0045321a1eec7e94c830193b3f6de7d9275cc780ee3b7ea0b280c06e67973623132d11bfaf6fd9c505b803e144da3770c6ce45b4fa57f9d57eaad7092f520e64eaba0797237fe9de953ef67f313a47ff338e338fb1d8b403722beb214ad676f2e826d081cd75fdc3890ddaec2597436b1b4169a0b3403828b30018b47a83444bae16095a6148fd3695b1b87dce60b485fece4ba81309e2ae1247f4c2933620d68eff9f910d6fcbb8a2645f94258c266947e345ffee6957cc7d5052e9248363c31ab717d0e9edb9e425a52aa873196d2021a9e50069dffbc45b8d20196f4aeed3fcdccf51c2e5d7ad78c7fc753d5c5d2c224cf78006499d419649b8ab454bcb71a6be723b6b3607680107c889a17fdb298e9e843d36aa5c38a90c14a4f9d3858d66ea9e9e3b427479d7ad3f2320875cb14069f7a742f6ef372538b18c30495042d3cd07fa5820f11131c93b4b876b7d7443c32c761fa818c112297b5c4e341b862a158abb6b4c2f624a2bc7118576967449a7427a07c2d7c400657ca97185718a8b1a943bb5fcd0995e3d1ebf80193788816ec645e40a23b6b36bac3100c2930220ac166d99e066752c474d03bfc7d4d2df1f0d3b90f90d9578712da86dddf163e9bbe63737f6239bab0de6058439f07baad7d85d3e752935905279f1fce6c368fbbd10693c2287a903d69d2ce43d818106ba503f21d276d67f2a267f2b5579fc02ce6e682cf67fa6b2d387989979adfef3ab3bc0ee61ed0acad4f767b2fa62fbbbed0938aab52fb9c6aad8fdba13eca1e82ed4634aa1820e2bbfc33c8a46920f017166be116b46b4c3fd8cf18174d93383fbbe088d8df02047f6959205440a7dba75de4b629e3de0f12b64bbca360e43e3f19678f7e9ede2e20b9a2fa9bb99a9a15a66f1eae188dd7c0347c184a8f63858d1ce8f92aed14f4436474d118e7e21438905e9c4cee8b9f4aaebdd6b48c1c691533bc7454de4d8a1176997da35b9bdf9b0a1dab18ebd96a3535e5340b0490da5535c9a77701ed79bc4c26189c8859f92b4323aa53cabbfe649d04851b06cc236466624731ed19af1f899306205130f81a54b5dafec8b193bdfbe4b0c52bec1df47ce5dd183c3fdf604bcac1cfd3dc7b60b7b25ada84612aff57c6a811f1b83a5a1ee7217a6798b47e6c44747a9e6e87eb7809748224ffad527350199e772b55cf8f16d07aeacddfd7ca9d23c4ce580f1f5362a3f94f5f1270f803711e16d981c3eb214f5bfd6e6ec06d05e8e4fc3742d8190d1bb6c63c48f222fbab7066dda139802a8e8da18ad162d8f780ad5ebc90660cc27b083c002198081ceb88e03c1e570002592dd8ffbe26f07391287ceecdc130fa71475af2f046928ee0e70a902643b2ba99d8952bdfc1ffccfd9b13bd4273a8e119748097d15b984427ac051070d58f91645c9f25f2b927ad10ae5b38d6e4db3ff04d994fde13ffc59f837d7f32f8fe1dc57bd81038b68872b29feb6a87dc67e0653f51e6f0bdd0a41e50c79e89f8f68ba9ad7ddd66529e6785145871640b60a2a959e507d62e513a884c92beca3cef7a16abff8ce25fca7605613e37483ca611e6387545fb08515434be94bd92b2db6248b2c9fc0c51f77323173dd298625775dc925789c91c4038b717af0aba302e4db723e7a8e84525fb90049156e4b7a5613142f8edcaba31e11ece4086ec4c46959b4a0a408f9ae128713c30bbd37c3bb63c3cfbe8127472ad17020cab1de729406910157923a9e98d2aaa71a4b5dca2c168a2566cfc143e08078cfea94a6f6ca21c068984eb35c0695d0f9e294901342bee52e82e6091670e619ccab44e1aa14f94ce9b235144ad6d68fb2f4d1a4d06a926a14532457e9bcc7dc720c5bfbd961f67671ccba33cd3e940a6aab0b9cd1ca0ef64696c42035713829be07be5da6da7e4966384175fc1576ae98d9ad92ee2ba78df5d934ade447b4b214d4c3bc512732a226844b637431314188b101e4a75264cdd13f4eb6428af9514df782ca74988e0343b0c083550c4a3557636e6323992dfdc23950b6b954f8a172fe71673de75dc1c00c8c5954755b5dd165fa64fbeea8eeaa92cc1879e62369815b28fcead8b0229ab6aa87f8a6b9213394f7336f445072f4c5e7b46a584fd817822ee35f7314f0a3d27dfc51bbeb556399f0f4721d7ba5816bb1ce352bbf24d3bbc7049038d49c742965551050826de7b88860f052296ffc18b69f3c39e54739b5590cd079071bbdd2504453b99579184733968aeaf83f80eee273b80fb9555b71b96496e80fd7e8a5c2579b067c1ddc4b760b11a6df58dd631a8171560ead858b083c73cb83640ff9649c351070b368bc52893b577a27c19590286eaf173dba7050914d61ec3baba8a4779cbadc3ed9633738d59f2d2d54c113a596fe91136144063d5bc503ecf6905e4c5e1aaa0b85e7813bc85c4be41620bd116e98c045a8aa91271a207ad48d6b58eb90ab189746aae24d7347a2d59b36486f8b84173312df38f9184bb68eed83493a13245999ed86cea8397387447f7f7e201b62a8cf5ed25eb55dccd21c498a6460e0bc3e823091f28bbff3fca45af651ad80e2c0a3389997faf4f7e32ac68e5355380ee38c6184122339e6032d828c939425d4326563aced2a61abab60d7cea23e7a4de0b337f002cca654cd3d59ceafd9c8811f48c9202d20200bf2c80a1378645848e5c0a25630d8a7063697b734514e59fdede3bfc4b82bea32cdecf47bc95d6702b982e9c60c215b5b5733d26fc8dae9d5e49a4597c1de1253e89466963710bb0cac29ec0ed6f5680252f9c52a3e439312cdbfe048a3d263faff716962842b439fd949f6aa8f38797eed4b14dc219a7689fd658ec87457e5024be6865bb99e7cd5b96f9780435c93454879c73d3a038e0cc5cb975fed0b8f963548500cd8d29676bf7935583659a406bb7cae16a3de460425bfde588ddc637016965b057e49533903f4382fcd063e456ad7f0ad43bead88e7fb0e906772974ed7a7000089e450112a96fe54a16047dc502ccc899dd76a3a71b46efff493057bf14166bf24c0294aef070151811e72497aefe1c1b2b49e3d8f1f76fb630052af22f36a0879a408ee76052af35b4216e3714ddbd7ef816d215715f4a22aa3096a323fd894c763e065f3c0e6bca3d284f1abc5f88017a866c9b932b5f54b4ac1ec6662f32ac7735304c5367c33d2de2ade22c407f98af2da5add94ba473cdc9a66ba98f3b954be5552c7d6c8c60049f6132fa0a799014f9c0de91bb39ebe9e2196313f092689981e38184bb2199bb568da7b4c690d1d476b57bb6824c67f51791edb48e80701338a5e9c6b69c1a601240545b1cda37409cd6a6d15d47029e551f5d3575b3ae756e20621d481dc38a1e61f9256267e20a447f8e088685d09ff2c19f89ab730e97d93a9bda145618ab48702204b38b76ca5a2eaee27a1994c75155674417d3516eac382c9f1a3891f9ce656dca480fe9c9e793a53dab2181dbcedc244491c7d166acf4ed48f05f66fd1f7d7a88c0e886d8fe400aebde113dcc3dd77bab6d970e56ff14c8a5c89e5cdf250f7841e964478207041e784fa345ebc10f7cb173cd156f2f494ddc65ac7699738f1998d08bc933d9339ec0d6e8aa5139ddea79536dea9bc5c4937d52a8a9426a17490f76a486a1daaebf8f99356ecfeb0674ce4aeed3861e645a0b213b4fef9d06769ef2509a177bd87c32a34de188b0370eccb0d8641f0df87da059617ccbc2a9a6e9b94953e7663a8d2b9346ee8c8371b68e262ff51b71a077216e19fb7ad05e796a7b15a0e3082b9689bf9d33dee259d987c50b601bfdea6df26576e9f8abb7f2e64eec0f3c473aa7dd8810afbb6eabefddda509e3edafa4d0522e53754ce9190e4b334897dad408b00e62314f0c57669b778b2484ac816b0057ece520a172ebee260fe9810fe7461277567675a08245a7ee2b52c4134caad169856a73026b317222d01f74a387fad3c9115c2a0548a49f164d871086157cecca75d4551307d6832132bbbe216f21742c653516ddd32853dd38df13bcc3d95afa4f9099608a005da879c8f7ca855e8cf035280f9f321093650ed6defec8a28ea354b6ed535cda78c21d2d5caf7bf385d2cf2451a3b367d1f08046bc0ed56f97dc61f0310000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r9, r10, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000e82962e247a41aaf10786d3400"/24, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socketpair(0x2, 0x3, 0x2, &(0x7f0000000380)) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000580)='kmem_cache_free\x00', r3, 0x0, 0x3}, 0x18) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x5e7fcdb4, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffd}, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 29.498678475s ago: executing program 2 (id=1159): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8004) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x18) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000540), 0x4) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x200}, 0x8) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x818, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x7ec, 0x2, [@TCA_U32_SEL={0x524, 0x5, {0x0, 0x8, 0x1, 0x3ff, 0xfffe, 0x3, 0x4f, 0x2, [{0x3, 0x7, 0xdfd7, 0x1}, {0xa289ce1, 0x4, 0x6302, 0xe}, {0x46, 0x0, 0x8a, 0x1}, {0x6, 0x26, 0xf, 0x58d1}, {0x7fff, 0x8, 0xe5, 0x5}, {0xf46, 0x7, 0x872b, 0xffff75e9}, {0x8, 0x2, 0x1, 0xa3e}, {0xcd, 0x100, 0x10001, 0x5}, {0x46, 0x6, 0x2, 0x8}, {0x7, 0xffffffff, 0x2, 0x5}, {0x4, 0x8, 0x400, 0x4}, {0x7, 0x3, 0x9, 0x4}, {0x9a, 0x11, 0x2}, {0x6d6, 0x7, 0x3, 0x401}, {0x1ff, 0x3ff, 0x3be, 0x5}, {0x8, 0x3ff, 0x10001, 0xfff}, {0x7b, 0x2, 0x0, 0x5}, {0x2, 0xf, 0x400, 0x59e}, {0x4, 0x8, 0x0, 0x365}, {0x4d, 0x7fffffff, 0x3, 0xc8a}, {0xffffff7f, 0x2, 0x4, 0xc}, {0x800, 0x1, 0x597, 0x50}, {0x7, 0x4, 0xe980, 0x1}, {0x80000000, 0x9, 0xe, 0x80000000}, {0x2541, 0x7ff, 0x40, 0x7fff}, {0x10001, 0x6, 0x8, 0x34c}, {0x9, 0x9, 0x87, 0x3c08}, {0x0, 0x80000001, 0x8, 0x7}, {0x80, 0x8, 0x3, 0x7}, {0x1, 0x5, 0xdd96, 0x7}, {0x29c, 0x1, 0x800, 0xfffffe01}, {0x4, 0x3, 0x3, 0x8}, {0xfffffffb, 0x3, 0x1ff, 0x80000000}, {0x8, 0x7, 0x1, 0xfffff3b7}, {0x491, 0x5, 0x5, 0xfb}, {0x7f, 0xffffffff, 0x8001, 0x2}, {0x80000000, 0x4, 0x0, 0x2}, {0x3, 0x9, 0x0, 0x2}, {0xfffffff7, 0x2, 0x1, 0xff}, {0x0, 0x3, 0x3, 0x7}, {0x0, 0x7ff, 0x4, 0x7}, {0xf425, 0x2, 0x1, 0x61}, {0x4, 0x0, 0x8000}, {0xaf, 0x8000, 0x6bef, 0x6}, {0xffff, 0x7, 0x80, 0xfffffffa}, {0x9, 0x0, 0x8, 0xd3}, {0x7ff, 0x217, 0x1ff, 0x1}, {0x1, 0x8, 0x9}, {0xfed, 0x0, 0xa82, 0x6}, {0x51, 0x5, 0x120, 0x5}, {0x4, 0x72, 0x5, 0x2}, {0xba0c, 0x10001, 0x9, 0xc55e}, {0x7, 0x3, 0x80000001, 0x4e}, {0xfffffe00, 0x3, 0x4, 0x6}, {0x7, 0x4, 0x80000001, 0x4}, {0x9, 0x2, 0xa, 0x9}, {0x9, 0x7, 0x800, 0xaf}, {0x80000001, 0x9, 0x1, 0x6}, {0xcca, 0xffffffe2, 0x6, 0x4}, {0x1, 0x9, 0x5, 0x1}, {0xfff, 0x6, 0x2, 0xddb}, {0x7fff, 0x5f, 0x80000001, 0xbb37}, {0x6, 0xfffffeff, 0x81, 0x2}, {0x3, 0x8, 0x3, 0xfffffff7}, {0x265e, 0x8, 0x0, 0x2}, {0xff, 0x7ff, 0x9, 0xaedc}, {0x7, 0x1000, 0xb894, 0x3}, {0x9, 0x2, 0x9, 0x7}, {0x659b, 0x6e, 0x3800, 0x8ebb}, {0xf, 0x2, 0x4, 0x8cb}, {0xfff, 0x8000, 0x1, 0x7}, {0xffffff86, 0x9, 0x200, 0x8}, {0x100, 0xf, 0x2}, {0xff08, 0x10, 0x8, 0x7}, {0xd27, 0x1, 0x3, 0x4}, {0xffffffff, 0x9, 0x10, 0x4}, {0x6, 0x7fff, 0x1ff, 0x1}, {0x2, 0x3, 0xfffe, 0x7ff}, {0x9, 0x4, 0x9dd, 0x9}, {0x5, 0x8c26, 0x2, 0x8}, {0x40, 0x1, 0x7}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0xffff}}, @TCA_U32_HASH={0x8, 0x2, 0xae}, @TCA_U32_LINK={0x8, 0x3, 0x101}, @TCA_U32_LINK={0x8, 0x3, 0x7}, @TCA_U32_DIVISOR={0x8, 0x4, 0x3}, @TCA_U32_SEL={0x294, 0x5, {0x8, 0x4, 0x5, 0x3, 0x3, 0xd, 0x0, 0x4c, [{0x5, 0x8001, 0x64d2, 0xa6e3}, {0x5, 0x4474, 0x9, 0x2d2}, {0x4, 0xfff, 0x1, 0x4}, {0x5, 0x10, 0x5}, {0xe4, 0x1, 0x3, 0x472}, {0x5, 0x0, 0xfffff199, 0x2}, {0x987, 0x2, 0x6, 0x8}, {0x9, 0x27e2, 0x7, 0x8}, {0x7ff, 0x9, 0x4, 0x7}, {0x8000, 0x0, 0x1, 0x7}, {0xd76, 0x7fffffff, 0x7ff, 0x6}, {0x101, 0x5, 0x5, 0x7f}, {0xfffffffc, 0x3, 0x751, 0x5}, {0x1, 0x8, 0x1, 0x8}, {0x7, 0x4, 0x5, 0x3}, {0xfff, 0xfff, 0x1, 0x1}, {0x8001, 0x9, 0xd, 0x2}, {0x3f, 0xe07, 0x5, 0x1}, {0x62, 0x8, 0x8, 0x1}, {0x8, 0x9, 0x4, 0x3}, {0x5, 0x800, 0x9, 0x352}, {0x2, 0x7, 0x0, 0x382d}, {0x100, 0x1, 0x1ff, 0x800}, {0x80000001, 0x2, 0x8, 0x9}, {0x9, 0x1ff, 0x9, 0x7fffffff}, {0x8, 0x3ff, 0x2, 0x5}, {0x80, 0x2, 0x6, 0xf}, {0x3, 0xd1, 0x7, 0x7}, {0x4, 0x4, 0x5, 0x328}, {0xff, 0x8, 0xbd4, 0xfffffffa}, {0xd, 0x3, 0xfff, 0x401}, {0x7, 0x71, 0x0, 0x6}, {0x2, 0x6, 0x3, 0xe23}, {0x9, 0x10, 0x6, 0x2}, {0x0, 0x5, 0x6b3, 0xe}, {0x0, 0x480000, 0xb, 0x4}, {0xd, 0x7, 0x5, 0x81}, {0x8, 0x7, 0xffff, 0xb4}, {0x1, 0x0, 0x5, 0x653}, {0xfffffffb, 0x0, 0x9, 0x25d}]}}]}}]}, 0x818}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex=r10, r8, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r7}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r7, 0x13, 0x1, 0x112d, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0}, 0x40) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711225000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xff89, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1b) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex=r2, r3, 0x22, 0x6, r6, @void, @value=r12, @void, @void, r11}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000a2000a000200ffffffffffff000004000e80060005"], 0x34}}, 0x0) 29.28092507s ago: executing program 2 (id=1161): syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x100, 0x0, 0x82680027, r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0x28, 0x80003, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001004729241c000000000000000a6400bca382ab330000060a01040000000000000038000480340001800c00010062697400697365002400028008000340000000040800014000000016080006400000000108000240000000170900010073797a30000000000900020073797a32000000001400000011000100"/140], 0x8c}, 0x1, 0x0, 0x0, 0xa85f6be71bf09d4}, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x130) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'sit0\x00'}) ioctl(r6, 0x9, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 13.657440049s ago: executing program 2 (id=1161): syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x100, 0x0, 0x82680027, r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0x28, 0x80003, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001004729241c000000000000000a6400bca382ab330000060a01040000000000000038000480340001800c00010062697400697365002400028008000340000000040800014000000016080006400000000108000240000000170900010073797a30000000000900020073797a32000000001400000011000100"/140], 0x8c}, 0x1, 0x0, 0x0, 0xa85f6be71bf09d4}, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x130) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'sit0\x00'}) ioctl(r6, 0x9, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 5.527193758s ago: executing program 3 (id=1268): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000004c00), 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYRES64=r5], 0x3c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xf, 0x8, 0x8, 0xa, 0x4, 0x6, 0x1, 0x7}, &(0x7f0000000240)={0x13, 0xfff, 0xfffffffffffffffa, 0x2, 0x6, 0x1, 0x2, 0x6}, &(0x7f0000000280)={0x4b5b, 0x34e, 0x6, 0x2400000, 0x2, 0xd, 0x8fd0, 0xd683}, &(0x7f0000000300)={r1, r2+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x7a]}, 0x8}) socket$inet6_sctp(0xa, 0x2ad51b3c900eed43, 0x84) syz_emit_ethernet(0x3a, &(0x7f0000000fc0)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x7, 0x6, "a185e0", 0x0, 0x84, 0x0, @local, @remote}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000fc0)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x7, 0x6, "a185e0", 0x0, 0x84, 0x0, @local, @remote}}}}, 0x0) socket(0x2, 0x3, 0xff) (async) r6 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x85, 0x4) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x85, 0x4) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r7, 0x40305829, &(0x7f0000000a00)={{r7}, "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"}) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000001c0)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000600)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000700)={r9, 0x11, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000700)={r9, 0x11, 0x6, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x3, 0x4, 0x1, 0x1, 0xce4dcf862619394e, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x0, @void, @value, @value}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x3, 0x4, 0x1, 0x1, 0xce4dcf862619394e, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x0, @void, @value, @value}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r10, 0x36, 0x1, 0xfffeffff, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$inet(r6, &(0x7f0000000080)={0x2, 0xfffd, @remote}, 0x10) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0xfffd, @remote}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r6, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) 4.984423166s ago: executing program 3 (id=1270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002ffffffff0001000000"], 0x3c}}, 0x0) 4.643238577s ago: executing program 5 (id=1272): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b405001c8e000000000061106c0000f1ffff0600676d436000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) socket(0x10, 0x80002, 0x0) (async) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e40)=ANY=[@ANYBLOB="d41b00003b0007010000000000000000017c00000400fc801000018054717f8008003700", @ANYRES32, @ANYBLOB="ac1b0280a51b72"], 0x1bd4}}, 0xc000) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xe}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xe}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRES64], 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) (async) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='btrfs_sync_file\x00', r4, 0x0, 0x3}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 4.268155389s ago: executing program 3 (id=1273): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000080)=@can_delroute={0x54, 0x19, 0x4, 0x70bd25, 0x25dfdbfe, {0x1d, 0x1, 0x3}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "8c406429440489d2"}, 0x1}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "af6c436c1c5958af"}, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x800) 4.164096104s ago: executing program 5 (id=1274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001a00010028bd7000fedbdf2581"], 0x44}}, 0x884) 3.885176911s ago: executing program 5 (id=1276): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10009}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x4a336ce0971f293, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x9c935d90098c04d4) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.844610944s ago: executing program 1 (id=1277): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) close(r3) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=@newqdisc={0x3b4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x3b9, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0xffffffffffffff64, 0x2, "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"}]}}]}, 0x3b4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.689020778s ago: executing program 3 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000001180)={0x6, '\x00', {0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x1413, 0x1}, 0x10}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r2, 0x503, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48891}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r14, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r1) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x40, r15, 0xd4a83ae1cdef8d54, 0x70bd29, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r10], 0x398}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r8, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3ba, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5d}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x64}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r16, 0x29, 0x36, &(0x7f0000004240)=ANY=[], 0x8) connect$inet6(r16, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r16, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.41700684s ago: executing program 1 (id=1280): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)='}q', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="907210", 0x3}], 0x1}}], 0x2, 0x4000880) (async, rerun: 32) splice(r2, 0x0, r4, 0x0, 0x8000000000025a5, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, r0, 0x7, '\x00', r1, r3, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000280)={'sit0\x00', r1, 0x80, 0x20, 0x2c, 0x5, {{0x2e, 0x4, 0x0, 0x8, 0xb8, 0x66, 0x0, 0x80, 0x2f, 0x0, @empty, @private=0xa010102, {[@rr={0x7, 0x27, 0xf, [@multicast2, @private=0xa010102, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010102, @multicast1, @private=0xa010101, @remote]}, @timestamp_addr={0x44, 0x24, 0x98, 0x1, 0x0, [{@local, 0x509}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast2, 0x7fffffff}, {@private=0xa010101, 0x7}]}, @end, @timestamp_prespec={0x44, 0x1c, 0x80, 0x3, 0x3, [{@empty, 0x2}, {@private=0xa010100, 0x80000001}, {@empty, 0x2}]}, @timestamp_prespec={0x44, 0x3c, 0x25, 0x3, 0x2, [{@multicast2, 0x10000}, {@broadcast, 0xd}, {@broadcast, 0x8}, {@multicast1, 0x7}, {@local, 0x7b6}, {@loopback, 0x5}, {@local, 0xb}]}]}}}}}) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x114, r9, 0xfe12482fe0801d65, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0xfffffffffffffff9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x6}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) (async, rerun: 32) getpid() (rerun: 32) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r9, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x796006c3241b850b}, 0xc, &(0x7f0000000480)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f91e515418bbf301000030e55c50f0d8df101d9780c982d83cfaf9c5e4c2be5bb5e29e5e1ad39cdf377db21842114999ceee85e2ac0c15d61e7ebd5a98f2aac0fa7fad5171f5a1cad79d0253a5a626e56aa4136ed8477b4a18556563dc9a6311ae04466588416228179bd7343d5a544d0f35a1a346bbfbdb129e76a4e948e60f54ba0575bbd707b27f114923cfecd6556c2b6423cbb4dbabdf0d670cf14093c3b95d28d9a0", @ANYRES16=r9, @ANYBLOB="000227bd7000fddbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b00f8ffffff060011000800000008001500020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000800000006001100000000000800150003000000"], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4000880) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r10, 0x1, 0xa, &(0x7f00000001c0)=""/160, &(0x7f0000000040)=0xa0) sendmsg$kcm(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)="81c388ac796364ace5fa82ed7ae84319e700565211684ffac11de91ccacc1429ccf1c56d7bc02ccc70a5588417d6c298be22652eb754e3f4fe10974642327cc74909826aa8524b350d737ac986fe93cda344c7e9da8cd1d8e83b20339640232c8b5e59c35b2b6686040937d63e61db6337bee0a28858b9e0f49ba58f9b8f82d36a20f020700e413f5a8dde4e832e2a5d0a91a838a8fe9bcf63c2bb56ea456e44e5b0dcfd", 0xa4}], 0x1, &(0x7f0000000900)=[{0x108, 0xff350aefdc6fd3e1, 0x9, "8145b96634b2f68b6d0f2a7caa5f5a70fac41144deb9d067598852531a653e4301d87ca97881be537b0758e86c6ab5897cf3066a1201a735d3eb3cdc1eac938416418e12a01c9766e65e55e093a6cf1d7aafc10d56422282a03873c8a1d5d2af081c9ad74e4cd81aa1989ccce0681e3a1caae67e88e40073a956c33acd0ad198a90ce85dbc9ba94f730f1dddb33628081e99fbc6e3af89e3ef8d1d69bbe9fa07da2e4b73457ee1e295f8f69564dee8eb7f035ac315290a97f28f144052e2254fcd553d9dfb0c305dc2ef2b62ca2634aa5938e46845bd471f68b3571dda1849f18793ddc8d397468ad83056fccafbe4bb354201966c2ec23b"}], 0x108}, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1f, 0x7, 0x1, 0x7, 0x8203, r5, 0x7e, '\x00', r6, r3, 0x2, 0x1, 0x3, 0x0, @value=r3, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40000000000000079109100000000006700000000000000950000000000000014dd87c981448adde150070035607253509cf15f6fb6d7f00feb9362407c130617d886fc9d8f49a25ca63818c10e05b948aed95a12614f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r12, 0x112, 0xa, &(0x7f0000000000)=0xc, &(0x7f0000000040)=0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r11, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.348963875s ago: executing program 4 (id=1281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x629, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xbcf, 0xc0, 0x1, 0x7fffffff, 0x4}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x0, 0x0, 0x0, 0x0, "d9b0db7b77b7ea4df776f6b4061440d6ef44477d5b183973aa0ec402b72eed48529a44fe36e91a79344b777fd81334346ff64025e77fcfbc91e29ed9895d69d06e4dc56bbc6a4879d0b34d9b0f0069f9"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt(0xffffffffffffffff, 0xffffff75, 0x6, &(0x7f0000000400)="8b1d3170d43ca5fb2c7760db838cf865e3989a8bbb89", 0x16) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r4, 0x29, 0xcd, &(0x7f0000004200)="81193541f29c7c74a9c5d3de1c409843b57b9ae104b85b95383e08634c9629a09ce2567cdabb0d2b91e17f32f39ad57c4395c359e5d6defa552e8edbeea26588bda7ebcb04c964232e724cf74700060c8fc1487709f2cfeb72e806eb", 0x5c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000c80)="b9ff060000000000000014f086dd", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 3.135325935s ago: executing program 5 (id=1282): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000340)=0xfffffffd, 0x4) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}, 0x2120) sendmmsg$alg(r2, &(0x7f0000004680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x20000000) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001cc0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff1, 0xfff2}, {0xfff2, 0x9}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x91, 0x29, 0x7, 0xfffffff1, 0xa7b, 0x75a, 0x5, 0x10001, 0x6, 0x6, 0xf69, 0x6, 0x1, 0x10, 0x8001, 0x8000, 0x50, 0x1, 0x644f7a2c, 0x7, 0xfffffffe, 0xa0, 0x7, 0x7f, 0x5, 0xbd, 0x6, 0x1, 0x9, 0xfffffff3, 0x4, 0x9, 0x5, 0x3ff, 0xffff, 0x7, 0x2, 0x64, 0x1000, 0x9, 0x5, 0x401, 0x6, 0x10001, 0x1, 0x0, 0x8, 0xfffff967, 0xfffffff8, 0x6, 0x1ff, 0x3ff, 0x3, 0x34b9, 0xfffffc01, 0x80000000, 0xc, 0x9, 0x2, 0x6, 0xff, 0x0, 0x56, 0x4, 0x1, 0x7f1, 0x6, 0x7, 0xfff, 0x7f, 0x5, 0x3, 0x7a0800, 0x5, 0x0, 0x9, 0x5a9, 0x9, 0x7, 0x8, 0x8, 0x80000001, 0x81, 0x6, 0x81, 0x3fc0, 0x3, 0x40, 0x5, 0x3, 0x1d, 0x1, 0x4, 0x9, 0x75, 0x8, 0x9, 0x7, 0x80000001, 0x800, 0x1, 0x208b, 0x6, 0x6, 0x54c6, 0x9, 0x8, 0xfffffff0, 0x6, 0xffff, 0x0, 0x1ba91ea4, 0x7, 0x3, 0x9, 0x0, 0x6, 0x0, 0x7, 0x4, 0x2be3, 0x72, 0x3, 0xfffffff8, 0x6, 0x5, 0x6, 0x6, 0x6, 0x9, 0x12, 0x5, 0x7, 0x36, 0x401, 0x2, 0xfff, 0xc000, 0x8001, 0xdb8a, 0xff, 0x85, 0x200, 0x7, 0x8aef, 0x7, 0x2, 0x5, 0x6, 0x3, 0x6, 0x610, 0x8, 0x2, 0x5, 0x8, 0x81, 0x1, 0x10, 0x4, 0x0, 0x113, 0x81, 0x7fffffff, 0x4, 0x0, 0x2, 0x7fffffff, 0x4, 0x4, 0x5, 0xffffffff, 0x2, 0x4, 0x1, 0x4, 0x4, 0x800, 0xb, 0x4, 0x5, 0x2, 0xe, 0x2, 0x0, 0x7, 0x4ab, 0x5, 0x6, 0xfffffff7, 0x3, 0x8, 0x2, 0x1, 0x1, 0x3, 0x2, 0x3ff, 0x4, 0x100, 0x8, 0xdc, 0x1, 0x2, 0x92a, 0x936c, 0xfffffff1, 0x80, 0x5, 0x4, 0x8001, 0x5, 0x6, 0xd417, 0x800, 0x100, 0x4, 0x7f, 0x5, 0xd, 0x2, 0x5, 0x0, 0xe7, 0x1, 0x200, 0x3, 0x9, 0xdf, 0x4, 0x4c6100, 0x400, 0x4e8, 0x0, 0x8, 0x8, 0xffffffd5, 0x101, 0xfffffff8, 0xfff, 0x28a, 0x9, 0x4, 0xba5, 0x100, 0x1, 0x5, 0x1, 0xfbf, 0x800000, 0x80000000, 0x3, 0x0, 0x8, 0x3, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x0}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f00000004c0)={0x48, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x48}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r9, 0x84, 0x82, &(0x7f00000001c0)="020000000980ffff", 0x8) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r8, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5) r10 = openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000080), 0x9) 3.134301082s ago: executing program 1 (id=1283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000002000010000000000000000000a008000000000030000000014000200fc02"], 0x30}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @remote}, {0x0, @multicast}, 0x6, {0x2, 0x4e23, @empty}, 'veth1_to_bond\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9860b27ec2000000004fe40810003d0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000002000010000000000000000000a008000000000030000000014000200fc02"], 0x30}}, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @remote}, {0x0, @multicast}, 0x6, {0x2, 0x4e23, @empty}, 'veth1_to_bond\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9860b27ec2000000004fe40810003d0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) (async) 2.713018019s ago: executing program 3 (id=1284): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="123d7300ff0000000d000800ff0f00080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/27], 0x48) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x0) (async, rerun: 64) r3 = socket$key(0xf, 0x3, 0x2) (rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="01ac0f00"]}]}, 0x1c}], 0x1}, 0x0) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) syz_emit_ethernet(0x49, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa371544aeaaaaaa080045ee8e3b0000000000019078ac1e0001ac1414aa0000907800680007169e1ba38452a14503dc5d4ead37f1c184b3d8713afa78ad95d08af2aa62d0b84db9fa0906c3a084367e4925c8792914193544032d65b004f66d7cc24f94da177d91f7eb94e8a2284ebb3d7f03d767cdc90f4945f3b5acc14fa75a45f1a532314f509bad6ba1b64dc3886c1a03f8f73a8f4c0ce96be6f9"], 0x0) (async, rerun: 32) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) (rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000005d80), 0x1, 0x0, 0x0) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) shutdown(r9, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x26c, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x0, 0x6, 0xa, 0x20, 0xfffffffffffffffc}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xe69, 0x5, &(0x7f0000000140)=""/5, 0x41100, 0x18, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0xc, 0x2}, {0x3, 0x4, 0x3, 0x7}, {0x1, 0x4, 0xe, 0xc}, {0x4, 0x2, 0xa, 0x6}, {0x2, 0x4, 0x4, 0xb}, {0x0, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xe}], 0x10, 0xffffff4d, @void, @value}, 0x94) (async, rerun: 32) recvmmsg(r9, &(0x7f0000000080), 0x72a, 0x500, 0x0) 2.510339359s ago: executing program 4 (id=1285): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x3a, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9f, 0x2b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000811}, 0x40810) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2.45555383s ago: executing program 5 (id=1286): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x3, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r3 = socket$inet(0x2, 0x2, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x140}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0xfffffffc, 0x2}, 0x10) unshare(0x48040200) mmap(&(0x7f0000347000/0x4000)=nil, 0x4000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff17}, 0x20040050) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890c, &(0x7f00000002c0)) bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r4, 0x0, 0x0) listen(r5, 0x10000007) 1.529026887s ago: executing program 4 (id=1287): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000680), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x40, r2, 0x1, 0x0, 0x2, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x40080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffef}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) 1.50857333s ago: executing program 1 (id=1288): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="123d7300ff0000000d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/27], 0x48) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0xa, 0x1e17) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="01ac0f00"]}]}, 0x1c}], 0x1}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r3, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_emit_ethernet(0x49, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa371544aeaaaaaa080045ee8e3b0000000000019078ac1e0001ac1414aa0000907800680007169e1ba38452a14503dc5d4ead37f1c184b3d8713afa78ad95d08af2aa62d0b84db9fa0906c3a084367e4925c8792914193544032d65b004f66d7cc24f94da177d91f7eb94e8a2284ebb3d7f03d767cdc90f4945f3b5acc14fa75a45f1a532314f509bad6ba1b64dc3886c1a03f8f73a8f4c0ce96be6f9"], 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005d80), 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x500, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0xfc}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0xfffffffc, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8) 1.335713773s ago: executing program 3 (id=1289): socket$inet(0x2, 0x3, 0x2) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x9a4fd000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x2b, 0x1, 0x0) r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000096727d2e5d257bfbafee000000000000"], 0x78) 941.251359ms ago: executing program 4 (id=1290): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000180000000000010100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001640)={0x3c, r0, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_a, @random="111adf5e3322", {0xc, 0x8}}, 0x37, @void}}]}, 0x3c}}, 0x40054) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000d8200000", @ANYRES16=r4, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x44014}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) 600.997565ms ago: executing program 4 (id=1291): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x8040) socket$packet(0x11, 0x2, 0x300) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRES32], 0x28}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008000000010000ea800000008abdd1a22cd70a2d1c28a9c8e4e96b41f8f0b70429f8a8b0c2ca46252f567f5b5cca99a20ef1a046aea2866e346c4e2bd7690ed1d7bd595fcdc0a7a00358fe3ff1ecba908a4f26772060d128bb2bcdd897cc37875d59c1309c5c2561f689530a574268f98ebd44d3962bce407a0ac10cbeec8821b803e786b3db856808b66011db78ceb51d5818049dc0ab8cf757509c6f4b95993913e17144556ad7e1b04ce078000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x1d, &(0x7f0000000b00)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffb963}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1a, 0x16, 0xb3, 0x7f, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r10, 0x29, 0x22, &(0x7f0000001f00)="8bdd8e", 0x3) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, 0x0, 0x1) 283.624825ms ago: executing program 1 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) close(r1) 274.353123ms ago: executing program 4 (id=1293): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x8500, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r9, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x4, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000700)={&(0x7f0000000580), 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1c, r12, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000042) r13 = accept4$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @private}, &(0x7f0000000380)=0x10, 0x0) getsockopt$inet_mreqn(r13, 0x0, 0x20, &(0x7f00000003c0)={@empty, @empty}, &(0x7f0000000400)=0xc) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) sendmsg$netlink(r15, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008"], 0x2c}], 0x1}, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r16, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x1, 0xffffffff]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_LABELS_MASK={0x8, 0x17, [0xce1f]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x50}]}, @CTA_STATUS={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r14, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff29, 0x0}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x40000000}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r17, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 139.946094ms ago: executing program 5 (id=1294): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r2, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008814}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f00000001a0093cf26bd7000fddbdf25ff7fd36b27d9a6bde300000000000000ff0100000000000000000000000000013d2200054e240002020000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000004d332000000ac1e01010000000000000000"], 0xf0}}, 0x28008004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffe86, &(0x7f00000001c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="280500003d000701000053c7a65a0000017c0000040000000c000180060006006558000004050280ff04112b21da88b4c6f05da2b8be4e48f73a5dd026dea934426e7183ba09f9664b03df433c99a8f5313cf1b9d16c275656e36ac488f2e3814223861a0e5f6553f144", @ANYBLOB="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"], 0x528}}, 0xc000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @multicast2}, {0x1}, 0x8, {0x2, 0x4e23, @multicast1}, 'virt_wifi0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x160000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 0s ago: executing program 1 (id=1295): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000180)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x3, {0xa, 0x4e23, 0x1000, @mcast1, 0x3}}}, 0x32) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ff000000000000000100050005000700000000000800090000003f001400200000200100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) kernel console output (not intermixed with test programs): which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.586950][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.623607][ T5840] hsr_slave_0: entered promiscuous mode [ 60.631484][ T5840] hsr_slave_1: entered promiscuous mode [ 60.637795][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.645937][ T5840] Cannot create hsr debugfs directory [ 60.753292][ T5841] hsr_slave_0: entered promiscuous mode [ 60.759758][ T5841] hsr_slave_1: entered promiscuous mode [ 60.766504][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.774060][ T5841] Cannot create hsr debugfs directory [ 60.792987][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.813627][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.822422][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.835231][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.948425][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.980215][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.990751][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.023860][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.107844][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.131784][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.151342][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.160360][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.169794][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.181286][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.206661][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.234338][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.281823][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.288921][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.298592][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.312012][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.327718][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.381468][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.412702][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.419932][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.457660][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.464806][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.558239][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.569066][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.599601][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.621798][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.637273][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.648421][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.655556][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.680942][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.693067][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.720637][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.727803][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.738966][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.746132][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.759073][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.766229][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.783821][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.790971][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.813757][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.820909][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.863534][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.940889][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.948049][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.968244][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.000167][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.007338][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.030250][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.204039][ T5826] veth0_vlan: entered promiscuous mode [ 62.237257][ T5826] veth1_vlan: entered promiscuous mode [ 62.292847][ T5826] veth0_macvtap: entered promiscuous mode [ 62.313840][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.314703][ T5828] Bluetooth: hci0: command tx timeout [ 62.326092][ T5142] Bluetooth: hci1: command tx timeout [ 62.355534][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.363225][ T5826] veth1_macvtap: entered promiscuous mode [ 62.381919][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.392463][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.400025][ T5828] Bluetooth: hci2: command tx timeout [ 62.432184][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.452194][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.462150][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.471969][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.481654][ T5828] Bluetooth: hci3: command tx timeout [ 62.501509][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.554675][ T5828] Bluetooth: hci4: command tx timeout [ 62.643494][ T5841] veth0_vlan: entered promiscuous mode [ 62.658657][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.689021][ T5841] veth1_vlan: entered promiscuous mode [ 62.755432][ T5830] veth0_vlan: entered promiscuous mode [ 62.767104][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.779565][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.811637][ T5830] veth1_vlan: entered promiscuous mode [ 62.856270][ T5841] veth0_macvtap: entered promiscuous mode [ 62.867734][ T5836] veth0_vlan: entered promiscuous mode [ 62.871841][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.895783][ T5841] veth1_macvtap: entered promiscuous mode [ 62.904697][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.928489][ T5840] veth0_vlan: entered promiscuous mode [ 62.967907][ T5840] veth1_vlan: entered promiscuous mode [ 62.982238][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.002512][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.013754][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.025046][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.035653][ T5836] veth1_vlan: entered promiscuous mode [ 63.051740][ T5830] veth0_macvtap: entered promiscuous mode [ 63.089909][ T5840] veth0_macvtap: entered promiscuous mode [ 63.106870][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.134045][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.145509][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.154815][ T5830] veth1_macvtap: entered promiscuous mode [ 63.168433][ T5840] veth1_macvtap: entered promiscuous mode [ 63.182120][ T5836] veth0_macvtap: entered promiscuous mode [ 63.193762][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.203630][ T5907] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 63.208242][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.214347][ T5907] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1'. [ 63.230904][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.240066][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.253303][ T5836] veth1_macvtap: entered promiscuous mode [ 63.292467][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.303253][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.338064][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.348878][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.353455][ T5909] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.360533][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.388753][ T5911] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.398686][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.413242][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.423115][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.433956][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.444420][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.454996][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.465782][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.481866][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.492499][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.502659][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.513843][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.525593][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.534739][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.545700][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.557360][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.568001][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.578281][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.603920][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.622368][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.633959][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.646052][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.655693][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.667382][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.681568][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.692462][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.702327][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.712833][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.723906][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.742221][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.751562][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.761498][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.770285][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.788003][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.796936][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.805912][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.814813][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.827097][ T5914] Zero length message leads to an empty skb [ 63.829173][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.856834][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.888639][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.906993][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.918327][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.928902][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.939269][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.951597][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.968450][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.027556][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.043813][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.053050][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.061990][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.118240][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.130020][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.199837][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.216424][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.252955][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.270738][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.294063][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.302028][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.323885][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.332843][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.396907][ T5828] Bluetooth: hci0: command tx timeout [ 64.404839][ T5828] Bluetooth: hci1: command tx timeout [ 64.436417][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.450711][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.470050][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.480017][ T5828] Bluetooth: hci2: command tx timeout [ 64.487118][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.498717][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.506724][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.561761][ T5828] Bluetooth: hci3: command tx timeout [ 64.634617][ T5828] Bluetooth: hci4: command tx timeout [ 64.894013][ T5933] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 64.970265][ T5935] xt_socket: unknown flags 0x8 [ 64.998621][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 65.008690][ T5941] x_tables: duplicate underflow at hook 1 [ 65.031043][ T5940] dvmrp1: entered allmulticast mode [ 65.046868][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12'. [ 65.059850][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12'. [ 65.166923][ T5943] delete_channel: no stack [ 65.223889][ T5943] tipc: Started in network mode [ 65.240039][ T5943] tipc: Node identity 6, cluster identity 4711 [ 65.253990][ T5943] tipc: Node number set to 6 [ 65.273665][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 65.318468][ T5949] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 65.460548][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 65.480765][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 65.563737][ T5956] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18'. [ 65.587868][ T5962] raw_sendmsg: syz.3.20 forgot to set AF_INET. Fix it! [ 65.731465][ T5972] syzkaller1: entered promiscuous mode [ 65.737179][ T5972] syzkaller1: entered allmulticast mode [ 65.773007][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 65.786780][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 65.801556][ T5967] netlink: 'syz.0.22': attribute type 18 has an invalid length. [ 65.816699][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.824975][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.942420][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.958253][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.027970][ T5972] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.040464][ T5972] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.052988][ T5972] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.061948][ T5972] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.359740][ T5983] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 66.371895][ T5983] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 66.475773][ T5828] Bluetooth: hci1: command tx timeout [ 66.477468][ T5142] Bluetooth: hci0: command tx timeout [ 66.555312][ T5142] Bluetooth: hci2: command tx timeout [ 66.635191][ T5142] Bluetooth: hci3: command tx timeout [ 66.715989][ T5142] Bluetooth: hci4: command tx timeout [ 67.020148][ T6017] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 67.230212][ T6026] xt_TCPMSS: Only works on TCP SYN packets [ 67.273783][ T6026] netlink: 'syz.0.33': attribute type 39 has an invalid length. [ 67.412449][ T6028] pimreg3: entered allmulticast mode [ 67.495011][ T6036] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 67.500453][ T6023] pimreg3: left allmulticast mode [ 67.591523][ T6034] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 67.614459][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 67.623950][ T6035] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 67.654768][ T5877] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 67.700913][ T6043] syz.2.42[6043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.084339][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 68.241349][ T6073] __nla_validate_parse: 6 callbacks suppressed [ 68.241367][ T6073] netlink: 36 bytes leftover after parsing attributes in process `syz.0.52'. [ 68.463120][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 68.475683][ T6077] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 68.508776][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 68.839403][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 69.166046][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 69.213302][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 69.312554][ T6119] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 69.326003][ T6119] netlink: 17 bytes leftover after parsing attributes in process `syz.1.65'. [ 69.385408][ T6121] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 69.428149][ T6121] bridge_slave_0: left allmulticast mode [ 69.458586][ T6121] bridge_slave_0: left promiscuous mode [ 69.470661][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.535007][ T6121] bridge_slave_1: left allmulticast mode [ 69.540895][ T6121] bridge_slave_1: left promiscuous mode [ 69.561165][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.636490][ T6121] bond0: (slave bond_slave_0): Releasing backup interface [ 69.721246][ T6121] bond0: (slave bond_slave_1): Releasing backup interface [ 69.831248][ T6121] team0: Port device team_slave_0 removed [ 69.921588][ T6121] team0: Port device team_slave_1 removed [ 69.932251][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.944362][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.976272][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.014786][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.073188][ T6128] ipt_rpfilter: unknown options [ 70.110261][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 70.172754][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 70.243577][ T6134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.67'. [ 70.750673][ T6165] bridge1: entered promiscuous mode [ 70.764810][ T6165] bridge1: entered allmulticast mode [ 70.776332][ T6165] team0: Port device bridge1 added [ 70.869409][ T6170] bridge0: port 3(ip6gretap0) entered blocking state [ 70.877400][ T6170] bridge0: port 3(ip6gretap0) entered disabled state [ 70.887613][ T6170] ip6gretap0: entered allmulticast mode [ 70.912040][ T6170] ip6gretap0: entered promiscuous mode [ 70.924980][ T6170] bridge0: port 3(ip6gretap0) entered blocking state [ 70.932086][ T6170] bridge0: port 3(ip6gretap0) entered forwarding state [ 71.600264][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.719664][ T6201] rdma_op ffff8881463039f0 conn xmit_rdma 0000000000000000 [ 71.761018][ T6202] warning: `syz.3.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.855275][ T6211] netlink: 'syz.3.86': attribute type 4 has an invalid length. [ 72.109969][ T6221] geneve1: mtu less than device minimum [ 72.482532][ T6248] netlink: 'syz.1.99': attribute type 1 has an invalid length. [ 72.512778][ T6248] batadv1: entered promiscuous mode [ 72.522616][ T6248] batadv1: entered allmulticast mode [ 72.811571][ T6261] netlink: 'syz.4.102': attribute type 1 has an invalid length. [ 72.830202][ T6261] netlink: 'syz.4.102': attribute type 2 has an invalid length. [ 73.324719][ T6288] __nla_validate_parse: 37 callbacks suppressed [ 73.324737][ T6288] netlink: 68 bytes leftover after parsing attributes in process `syz.3.106'. [ 73.538647][ T6299] netlink: 68 bytes leftover after parsing attributes in process `syz.2.111'. [ 73.560004][ T6294] netlink: 44 bytes leftover after parsing attributes in process `syz.2.111'. [ 73.693119][ T6294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.879281][ T6313] netlink: 'syz.1.113': attribute type 1 has an invalid length. [ 73.910825][ T6313] nbd: couldn't find a device at index 20 [ 73.953710][ T6294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.982178][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.115'. [ 74.167005][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 74.468994][ T6294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.065849][ T6294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.167318][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 75.204446][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 75.265947][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 75.268505][ T6294] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.327215][ T6294] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.373439][ T6294] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.420293][ T6294] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.435110][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 75.443796][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 75.514434][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 75.628340][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 75.639477][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 76.097643][ T6419] ip6gretap0: entered promiscuous mode [ 76.117385][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.184782][ T6419] batadv_slave_0: entered promiscuous mode [ 76.716018][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 76.734013][ T8] cfg80211: failed to load regulatory.db [ 77.268683][ T6473] netlink: 'syz.3.147': attribute type 5 has an invalid length. [ 77.853589][ T6495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.397888][ T6519] __nla_validate_parse: 81 callbacks suppressed [ 78.397908][ T6519] netlink: 32 bytes leftover after parsing attributes in process `syz.4.160'. [ 78.798114][ T6544] tipc: Enabled bearer , priority 0 [ 78.806084][ T6544] syzkaller0: entered promiscuous mode [ 78.811752][ T6544] syzkaller0: entered allmulticast mode [ 78.828721][ T6544] tipc: Resetting bearer [ 78.846864][ T6542] tipc: Resetting bearer [ 78.871100][ T6547] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 78.925300][ T6547] sctp: [Deprecated]: syz.0.167 (pid 6547) Use of int in maxseg socket option. [ 78.925300][ T6547] Use struct sctp_assoc_value instead [ 78.961028][ T6542] tipc: Disabling bearer [ 79.076010][ T6555] netlink: 76 bytes leftover after parsing attributes in process `syz.0.171'. [ 79.132405][ T6551] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 79.161516][ T6551] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 79.183208][ T6562] bridge0: entered promiscuous mode [ 79.191687][ T6551] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 79.253026][ T6551] veth0_vlan: left promiscuous mode [ 79.269966][ T6551] veth0_vlan: entered promiscuous mode [ 79.300471][ T6551] team0: Device veth0_vlan failed to register rx_handler [ 79.366875][ T6562] bridge0: left promiscuous mode [ 79.464493][ T6578] netlink: 48 bytes leftover after parsing attributes in process `syz.2.176'. [ 79.559660][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 79.580261][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 79.674813][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 79.723584][ T6587] vlan2: entered promiscuous mode [ 79.743248][ T6587] veth0_to_bridge: entered promiscuous mode [ 79.776679][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 79.827707][ T6587] veth0_to_bridge: left promiscuous mode [ 79.897244][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'. [ 80.585815][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 80.755365][ T6644] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 80.782452][ T6644] netlink: 228 bytes leftover after parsing attributes in process `syz.4.192'. [ 80.950377][ T6636] team0 (unregistering): Port device team_slave_0 removed [ 80.971528][ T6636] team0 (unregistering): Port device team_slave_1 removed [ 81.211282][ T6665] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 81.242218][ T6665] xt_hashlimit: max too large, truncated to 1048576 [ 81.801888][ T5204] udevd[5204]: worker [5839] terminated by signal 33 (Unknown signal 33) [ 81.826121][ T5204] udevd[5204]: worker [5839] failed while handling '/devices/virtual/block/loop1' [ 82.054820][ T6691] tc_dump_action: action bad kind [ 82.100307][ T6703] tap0: tun_chr_ioctl cmd 1074025681 [ 82.560745][ T6723] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 82.981900][ T6739] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.991557][ T6739] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.000802][ T6739] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.009590][ T6739] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.019479][ T6739] vxlan1: entered promiscuous mode [ 83.024698][ T6739] vxlan1: entered allmulticast mode [ 83.093520][ T6739] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.102592][ T6739] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.111855][ T6739] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.120893][ T6739] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.352494][ T6759] netlink: 'syz.4.224': attribute type 4 has an invalid length. [ 83.517467][ T6788] netlink: 'syz.4.229': attribute type 1 has an invalid length. [ 83.694413][ T6800] netlink: 'syz.1.230': attribute type 3 has an invalid length. [ 83.762352][ T6796] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 83.864248][ T6796] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 83.890838][ T6796] bond1: (slave vti0): making interface the new active one [ 83.906175][ T6796] bond1: (slave vti0): Enslaving as an active interface with an up link [ 84.324855][ T6823] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 84.541154][ T6828] ip6gre2: entered allmulticast mode [ 84.807053][ T6837] netlink: 'syz.1.239': attribute type 10 has an invalid length. [ 84.902896][ T6836] __nla_validate_parse: 17 callbacks suppressed [ 84.902918][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 85.214609][ T6854] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 85.250415][ T6837] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 85.510466][ T6867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.247'. [ 85.524386][ T6863] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.525704][ T6867] batadv0: entered promiscuous mode [ 85.598079][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 85.608256][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 85.625621][ T6873] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 85.729641][ T6878] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 85.838615][ T6882] bridge0: port 3(gretap0) entered blocking state [ 85.864956][ T6882] bridge0: port 3(gretap0) entered disabled state [ 85.869601][ T6884] netlink: 'syz.1.254': attribute type 1 has an invalid length. [ 85.871547][ T6882] gretap0: entered allmulticast mode [ 85.893069][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 85.909403][ T6882] gretap0: entered promiscuous mode [ 85.931767][ T6882] bridge0: port 3(gretap0) entered blocking state [ 85.938406][ T6882] bridge0: port 3(gretap0) entered forwarding state [ 85.956574][ T6886] gretap0: left allmulticast mode [ 85.978783][ T6886] gretap0: left promiscuous mode [ 85.984909][ T6886] bridge0: port 3(gretap0) entered disabled state [ 86.324979][ T6902] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 86.366060][ T6905] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 86.455547][ T6910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.904363][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 86.934410][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 87.041755][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 87.079334][ T6917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'. [ 87.307908][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 87.388450][ T5843] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 87.412183][ T5843] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 87.438193][ T6944] pim6reg: entered allmulticast mode [ 87.439579][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 87.454698][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 87.465472][ T6948] pim6reg: left allmulticast mode [ 87.515006][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.554366][ T6954] netlink: 'syz.2.273': attribute type 4 has an invalid length. [ 87.574905][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 87.676569][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 87.764570][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 87.793003][ T6968] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 87.802700][ T6969] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 87.860234][ T6968] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 87.894966][ T6973] netlink: 'syz.0.279': attribute type 9 has an invalid length. [ 87.911556][ T6973] netlink: 'syz.0.279': attribute type 7 has an invalid length. [ 87.927182][ T6973] netlink: 'syz.0.279': attribute type 8 has an invalid length. [ 87.943239][ T6973] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 87.955385][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 87.992717][ T6973] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 88.885622][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 89.002104][ T7019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.446305][ T7030] sock: sock_timestamping_bind_phc: sock not bind to device [ 90.427417][ T7049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.491826][ T7051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.796188][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 91.903260][ T7072] sctp: [Deprecated]: syz.3.305 (pid 7072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.903260][ T7072] Use struct sctp_sack_info instead [ 91.969991][ T7072] veth1_to_bridge: entered promiscuous mode [ 91.983740][ T7072] veth1_to_bridge: left promiscuous mode [ 92.129936][ T7085] sctp: [Deprecated]: syz.4.309 (pid 7085) Use of int in maxseg socket option. [ 92.129936][ T7085] Use struct sctp_assoc_value instead [ 92.292202][ T7091] __nla_validate_parse: 8 callbacks suppressed [ 92.292220][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.312'. [ 92.320504][ T7091] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.337811][ T7091] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.349198][ T7091] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.364698][ T7091] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.545630][ T25] IPVS: starting estimator thread 0... [ 92.553899][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 92.635238][ T7102] IPVS: using max 39 ests per chain, 93600 per kthread [ 92.645928][ T7106] ªªªªª: renamed from bridge0 (while UP) [ 92.658813][ T7106] ªªªªª: port 3(ip6gretap0) entered disabled state [ 92.665685][ T7106] ªªªªª: port 2(bridge_slave_1) entered disabled state [ 92.665814][ T7108] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.317'. [ 92.673159][ T7106] ªªªªª: port 1(bridge_slave_0) entered disabled state [ 92.692291][ T7106] ªªªªª: entered promiscuous mode [ 92.698174][ T7106] ªªªªª: entered allmulticast mode [ 92.715226][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 92.868454][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 92.905938][ T7115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.320'. [ 93.183311][ T7139] hsr0: entered promiscuous mode [ 93.241239][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 93.434570][ T7157] netlink: zone id is out of range [ 93.448086][ T7157] netlink: zone id is out of range [ 93.465979][ T7157] netlink: set zone limit has 8 unknown bytes [ 93.679507][ T7171] IPv6: sit1: Disabled Multicast RS [ 93.691979][ T7171] sit1: entered allmulticast mode [ 93.727405][ T7166] netlink: 64 bytes leftover after parsing attributes in process `syz.1.334'. [ 93.928355][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 93.944335][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 94.291520][ T7199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.318139][ T7199] syz_tun: entered allmulticast mode [ 94.329988][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.344'. [ 94.354054][ T7199] netlink: 'syz.2.343': attribute type 1 has an invalid length. [ 94.365185][ T7199] netlink: 'syz.2.343': attribute type 4 has an invalid length. [ 94.383999][ T7197] syz_tun: left allmulticast mode [ 94.673743][ T7220] ªªªªªª: renamed from veth0_vlan (while UP) [ 95.406708][ T7247] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.790851][ T7288] xt_hashlimit: size too large, truncated to 1048576 [ 99.565164][ T7325] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 99.694453][ T7327] netlink: 'syz.4.379': attribute type 10 has an invalid length. [ 99.702249][ T7327] ªªªªª: left promiscuous mode [ 99.796263][ T7327] ªªªªª: left allmulticast mode [ 99.843310][ T7327] ªªªªª: port 3(ip6gretap0) entered blocking state [ 99.850250][ T7327] ªªªªª: port 3(ip6gretap0) entered forwarding state [ 99.857974][ T7327] ªªªªª: port 2(bridge_slave_1) entered blocking state [ 99.865079][ T7327] ªªªªª: port 2(bridge_slave_1) entered forwarding state [ 99.872404][ T7327] ªªªªª: port 1(bridge_slave_0) entered blocking state [ 99.879503][ T7327] ªªªªª: port 1(bridge_slave_0) entered forwarding state [ 99.925835][ T7331] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 100.023508][ T7327] team0: Port device ªªªªª added [ 100.034450][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 100.083911][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 100.404574][ T7339] __nla_validate_parse: 43 callbacks suppressed [ 100.404591][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 100.430252][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 100.460447][ T7338] pim6reg1: entered promiscuous mode [ 100.466018][ T7338] pim6reg1: entered allmulticast mode [ 100.505557][ T7342] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 100.515906][ T7342] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 100.605319][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 100.624818][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 100.715062][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 100.876597][ T6762] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 101.049195][ T7357] netlink: 'syz.2.388': attribute type 5 has an invalid length. [ 101.084405][ T7357] netlink: 160 bytes leftover after parsing attributes in process `syz.2.388'. [ 101.103767][ T7357] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 101.260555][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 101.279815][ T7365] netlink: 72 bytes leftover after parsing attributes in process `syz.4.389'. [ 101.305436][ T7365] netlink: 72 bytes leftover after parsing attributes in process `syz.4.389'. [ 101.327687][ T7365] netlink: 'syz.4.389': attribute type 10 has an invalid length. [ 101.361488][ T7365] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 101.404343][ T7365] team0: Failed to send options change via netlink (err -105) [ 101.411855][ T7365] team0: Port device netdevsim0 added [ 101.925450][ T6762] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 102.430450][ T7385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.961459][ T7391] netlink: 'syz.4.398': attribute type 11 has an invalid length. [ 103.343391][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.399'. [ 103.354692][ T5142] Bluetooth: hci4: command tx timeout [ 103.555698][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 104.135921][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 104.349099][ T7410] tipc: Enabling of bearer rejected, failed to enable media [ 104.605110][ T7425] netlink: 'syz.1.405': attribute type 46 has an invalid length. [ 104.627368][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 104.662745][ T7424] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 104.691959][ T7424] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20003 [ 104.813405][ T7428] IPVS: Error connecting to the multicast addr [ 105.100232][ T7408] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 105.147016][ T7437] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 105.250033][ T7441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.310573][ T7441] bond1: (slave bond2): making interface the new active one [ 105.359936][ T7441] bond1: (slave bond2): Enslaving as an active interface with an up link [ 105.715041][ T7449] syz.1.414 uses old SIOCAX25GETINFO [ 106.225234][ T7465] __nla_validate_parse: 3 callbacks suppressed [ 106.225255][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 106.298991][ T7459] netlink: 244 bytes leftover after parsing attributes in process `syz.2.417'. [ 106.349907][ T5142] Bluetooth: hci2: command 0x0401 tx timeout [ 106.574500][ T7471] netlink: 'syz.4.419': attribute type 4 has an invalid length. [ 106.943565][ T7475] Cannot find set identified by id 0 to match [ 106.980500][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 107.170863][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 107.200221][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 107.275391][ T7487] netlink: 68 bytes leftover after parsing attributes in process `syz.3.423'. [ 107.739790][ T7510] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 107.748676][ T7510] netlink: 224 bytes leftover after parsing attributes in process `syz.3.427'. [ 107.988163][ T7515] netlink: 'syz.1.429': attribute type 4 has an invalid length. [ 108.022459][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.430'. [ 108.045672][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 108.058762][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 108.729568][ T7544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.752161][ T7544] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.789278][ T7544] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.823121][ T7544] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.851240][ T7544] geneve2: entered promiscuous mode [ 108.863444][ T7544] geneve2: entered allmulticast mode [ 109.124667][ T7552] Bluetooth: MGMT ver 1.23 [ 109.956951][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.965802][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.973618][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.982317][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.989935][ T5828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 109.997424][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.039938][ T7568] netlink: 'syz.3.443': attribute type 13 has an invalid length. [ 110.090684][ T7568] netlink: 'syz.3.443': attribute type 11 has an invalid length. [ 110.178130][ T7574] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 110.225607][ T7574] macvlan2: entered allmulticast mode [ 110.243156][ T7574] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 110.279372][ T7574] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 110.674816][ T7570] chnl_net:caif_netlink_parms(): no params data found [ 110.903138][ T7607] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 110.930065][ T7602] batadv_slave_1: entered promiscuous mode [ 111.090462][ T7570] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.098140][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.105876][ T7570] bridge_slave_0: entered allmulticast mode [ 111.112844][ T7570] bridge_slave_0: entered promiscuous mode [ 111.120537][ T7570] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.128157][ T7570] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.135412][ T7570] bridge_slave_1: entered allmulticast mode [ 111.142345][ T7570] bridge_slave_1: entered promiscuous mode [ 111.144842][ T7619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.216431][ T7570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.250842][ T7570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.326642][ T7570] team0: Port device team_slave_0 added [ 111.341577][ T7570] team0: Port device team_slave_1 added [ 111.350494][ T7625] __nla_validate_parse: 6 callbacks suppressed [ 111.351612][ T7625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.456'. [ 111.412312][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.420727][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.456800][ T7570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.479360][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.492235][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.526842][ T7570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.603542][ T7570] hsr_slave_0: entered promiscuous mode [ 111.676722][ T7570] hsr_slave_1: entered promiscuous mode [ 111.704928][ T7570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.727967][ T7570] Cannot create hsr debugfs directory [ 112.011846][ T7642] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 112.018895][ T7639] pim6reg1: entered promiscuous mode [ 112.048096][ T7639] pim6reg1: entered allmulticast mode [ 112.079067][ T5828] Bluetooth: hci5: command tx timeout [ 112.145377][ T7570] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.179490][ T7644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.461'. [ 112.233322][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 112.252421][ T7570] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.303613][ T7570] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.346643][ T7570] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.408166][ T7570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.508867][ T7570] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.519873][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.527052][ T6763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.533390][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 112.560658][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.567842][ T6752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.637020][ T7570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.679744][ T7570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.785980][ T7661] xt_bpf: check failed: parse error [ 112.812420][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'. [ 113.022605][ T7570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.118973][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 113.446225][ T7570] veth0_vlan: entered promiscuous mode [ 113.465978][ T7570] veth1_vlan: entered promiscuous mode [ 113.492299][ T7570] veth0_macvtap: entered promiscuous mode [ 113.503468][ T7570] veth1_macvtap: entered promiscuous mode [ 113.518786][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.529562][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.539641][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.550397][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.560504][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.571184][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.583659][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.601981][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.613520][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.625864][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.637179][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.647556][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.658479][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.670050][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.688691][ T7570] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.698021][ T7570] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.709422][ T7570] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.723408][ T7570] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.816874][ T6762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.832802][ T6762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.861879][ T6762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.876466][ T6762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.164490][ T5828] Bluetooth: hci5: command tx timeout [ 114.202944][ T7704] netlink: 244 bytes leftover after parsing attributes in process `syz.5.478'. [ 114.212823][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.478'. [ 114.423409][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'. [ 114.432732][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'. [ 114.442076][ T7715] netlink: 'syz.1.481': attribute type 6 has an invalid length. [ 114.524801][ T7717] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 114.628982][ T7722] bond0: option min_links: invalid value (18446744073709551615) [ 114.704478][ T7722] bond0: option min_links: allowed values 0 - 2147483647 [ 115.823419][ T7752] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 115.911067][ T7755] netlink: 'syz.4.489': attribute type 5 has an invalid length. [ 115.932585][ T7755] ip6erspan0: entered promiscuous mode [ 115.984240][ T7752] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 115.997671][ T7752] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 116.244631][ T5828] Bluetooth: hci5: command tx timeout [ 117.235728][ T7786] netlink: 'syz.5.498': attribute type 1 has an invalid length. [ 117.276118][ T7786] trusted_key: syz.5.498 sent an empty control message without MSG_MORE. [ 117.317975][ T7785] __nla_validate_parse: 1 callbacks suppressed [ 117.317996][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.498'. [ 117.831102][ T7803] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 117.993614][ T7807] ªªªªª: port 1(bridge_slave_0) entered blocking state [ 118.000756][ T7807] ªªªªª: port 1(bridge_slave_0) entered forwarding state [ 118.230421][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.510'. [ 118.328774][ T5828] Bluetooth: hci5: command tx timeout [ 118.463224][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 118.956025][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 119.105050][ T7842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.516'. [ 119.789688][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 119.878545][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 119.904013][ T7863] netlink: 'syz.3.521': attribute type 1 has an invalid length. [ 120.894456][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 121.054074][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.522'. [ 121.135701][ T7873] netlink: 'syz.4.522': attribute type 27 has an invalid length. [ 121.205019][ T7860] netlink: 288 bytes leftover after parsing attributes in process `syz.2.520'. [ 121.397582][ T7874] IPVS: Scheduler module ip_vs_sip not found [ 122.065042][ T8] IPVS: starting estimator thread 0... [ 122.165770][ T7902] IPVS: using max 19 ests per chain, 45600 per kthread [ 122.293537][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 122.452183][ T7913] netlink: 1264 bytes leftover after parsing attributes in process `syz.5.533'. [ 123.036345][ T7936] netlink: 'syz.2.535': attribute type 12 has an invalid length. [ 124.070615][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 124.133787][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'. [ 124.219816][ T7957] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 124.242034][ T7958] netlink: 'syz.3.544': attribute type 8 has an invalid length. [ 124.290887][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 124.697812][ T7968] netlink: 88 bytes leftover after parsing attributes in process `syz.2.545'. [ 125.204525][ T7980] netlink: 'syz.5.551': attribute type 21 has an invalid length. [ 125.260664][ T7980] netlink: 'syz.5.551': attribute type 6 has an invalid length. [ 125.344235][ T7980] netlink: 64 bytes leftover after parsing attributes in process `syz.5.551'. [ 125.377335][ T7993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.543857][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.566320][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.555'. [ 126.092407][ T8008] netlink: 56 bytes leftover after parsing attributes in process `syz.2.558'. [ 126.635381][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 126.638184][ T8017] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 126.664212][ T8017] netlink: 36 bytes leftover after parsing attributes in process `syz.3.561'. [ 127.165837][ T8041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.565'. [ 127.745850][ T8064] netlink: 'syz.1.566': attribute type 8 has an invalid length. [ 128.076175][ T8044] __nla_validate_parse: 2 callbacks suppressed [ 128.076195][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 128.113016][ T8075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.573'. [ 128.149138][ T8076] bridge0: entered promiscuous mode [ 128.178559][ T8075] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 128.200449][ T8074] bridge0: left promiscuous mode [ 129.334368][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 129.508272][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 130.309308][ T8142] Cannot find set identified by id 0 to match [ 130.522761][ T8142] pim6reg: entered allmulticast mode [ 130.950759][ T8158] netlink: zone id is out of range [ 130.990144][ T8161] netlink: 48 bytes leftover after parsing attributes in process `syz.5.593'. [ 131.042766][ T8158] netlink: zone id is out of range [ 131.076323][ T8158] netlink: set zone limit has 8 unknown bytes [ 131.116168][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.596'. [ 131.164416][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 131.184342][ T8168] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 131.213437][ T8167] netlink: 148 bytes leftover after parsing attributes in process `syz.4.596'. [ 131.266675][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.595'. [ 131.288688][ T8167] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 132.099619][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 132.148091][ T8197] netlink: 'syz.3.602': attribute type 1 has an invalid length. [ 132.670877][ T8212] tipc: Started in network mode [ 132.695373][ T8212] tipc: Node identity 1edd18712b8d, cluster identity 4711 [ 132.728002][ T8212] tipc: Enabled bearer , priority 0 [ 132.753917][ T8219] syzkaller0: entered promiscuous mode [ 132.844821][ T8219] syzkaller0: entered allmulticast mode [ 132.908668][ T8210] tipc: Resetting bearer [ 133.001793][ T8210] tipc: Disabling bearer [ 133.036275][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.132237][ T8226] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 133.138995][ T8226] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 133.470236][ T8239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.545190][ T8239] __nla_validate_parse: 2 callbacks suppressed [ 133.545210][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'. [ 133.608475][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'. [ 133.938800][ T8252] team0: Device ipvlan2 failed to register rx_handler [ 134.109727][ T8259] vlan0: entered promiscuous mode [ 134.130604][ T8259] team0: Port device vlan0 added [ 134.590643][ T8276] netlink: 96 bytes leftover after parsing attributes in process `syz.5.626'. [ 134.788673][ T8290] bridge2: entered promiscuous mode [ 134.793929][ T8290] bridge2: entered allmulticast mode [ 134.870380][ T8290] team0: Port device bridge2 added [ 135.151293][ T8309] 8021q: VLANs not supported on lo [ 135.178825][ T8310] batadv1: entered promiscuous mode [ 135.215476][ T8310] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.364395][ T8325] netlink: 48 bytes leftover after parsing attributes in process `syz.4.635'. [ 135.392633][ T8325] netlink: 'syz.4.635': attribute type 39 has an invalid length. [ 136.106265][ T8347] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 136.123650][ T8346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.228042][ T8349] netlink: 32 bytes leftover after parsing attributes in process `syz.3.640'. [ 136.317191][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.640'. [ 136.344538][ T8351] xt_hashlimit: size too large, truncated to 1048576 [ 136.366197][ T6760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.404177][ T6760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.938996][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 137.084981][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'. [ 137.943207][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 137.970742][ T8391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.652'. [ 139.846320][ T8412] syz.4.660[8412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.846418][ T8412] syz.4.660[8412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.908769][ T8412] syz.4.660[8412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.321478][ T8415] netlink: 64 bytes leftover after parsing attributes in process `syz.4.661'. [ 142.006997][ T8446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.670'. [ 142.473756][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.674'. [ 142.577528][ T8460] Timeout policy `syz0' can only be used by L3 protocol number 35064 [ 143.197139][ T8471] netlink: 'syz.4.678': attribute type 10 has an invalid length. [ 143.629591][ T8487] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 143.641234][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 144.099683][ T8499] netlink: 32 bytes leftover after parsing attributes in process `syz.4.686'. [ 144.113946][ T8499] erspan0: entered promiscuous mode [ 144.241850][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.688'. [ 144.358633][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 144.802163][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.696'. [ 145.471075][ T8558] Dead loop on virtual device ip6_vti0, fix it urgently! [ 146.040363][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 146.083444][ T8582] netlink: 'syz.2.713': attribute type 29 has an invalid length. [ 146.121377][ T8582] netlink: 'syz.2.713': attribute type 2 has an invalid length. [ 146.160808][ T8588] netlink: 248 bytes leftover after parsing attributes in process `syz.3.712'. [ 146.333058][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 146.446644][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.718'. [ 146.468715][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 146.666261][ T8618] openvswitch: netlink: Message has 8 unknown bytes. [ 146.685987][ T8618] openvswitch: netlink: Message has 8 unknown bytes. [ 146.726661][ T8623] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 146.921059][ T8630] netlink: 'syz.1.724': attribute type 1 has an invalid length. [ 147.015011][ T8637] netlink: 40 bytes leftover after parsing attributes in process `syz.4.726'. [ 147.985745][ T8678] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 147.997184][ T5828] Bluetooth: hci5: command tx timeout [ 148.016944][ T8669] netlink: 156 bytes leftover after parsing attributes in process `syz.5.737'. [ 148.171948][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.738'. [ 148.249223][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.256730][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.378773][ T8672] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 148.449465][ T8696] netlink: 'syz.1.741': attribute type 10 has an invalid length. [ 148.892233][ T8698] tun0: tun_chr_ioctl cmd 1074025677 [ 148.904456][ T8698] tun0: linktype set to 773 [ 149.224802][ T8714] tipc: Can't bind to reserved service type 1 [ 149.308897][ T8716] syz.3.748: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.374727][ T8716] CPU: 1 UID: 0 PID: 8716 Comm: syz.3.748 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 149.385369][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.395451][ T8716] Call Trace: [ 149.398748][ T8716] [ 149.401688][ T8716] dump_stack_lvl+0x241/0x360 [ 149.406405][ T8716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.411618][ T8716] ? __pfx__printk+0x10/0x10 [ 149.416233][ T8716] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 149.422669][ T8716] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 149.429199][ T8716] warn_alloc+0x278/0x410 [ 149.433546][ T8716] ? __pfx_warn_alloc+0x10/0x10 [ 149.438419][ T8716] ? hash_netnet_create+0x801/0x16a0 [ 149.443752][ T8716] ? __get_vm_area_node+0x1c8/0x2d0 [ 149.448983][ T8716] ? __get_vm_area_node+0x25c/0x2d0 [ 149.454216][ T8716] __vmalloc_node_range_noprof+0x62f/0x1380 [ 149.460179][ T8716] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 149.465949][ T8716] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.472319][ T8716] ? rcu_is_watching+0x15/0xb0 [ 149.477119][ T8716] ? trace_kmalloc+0x1f/0xd0 [ 149.481730][ T8716] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 149.487206][ T8716] ? __kvmalloc_node_noprof+0x72/0x190 [ 149.492678][ T8716] __kvmalloc_node_noprof+0x142/0x190 [ 149.498050][ T8716] ? hash_netnet_create+0x801/0x16a0 [ 149.503349][ T8716] hash_netnet_create+0x801/0x16a0 [ 149.508462][ T8716] ? __pfx_lock_acquire+0x10/0x10 [ 149.513480][ T8716] ? ip_set_create+0x424/0x18b0 [ 149.518327][ T8716] ? __pfx_lock_release+0x10/0x10 [ 149.523350][ T8716] ? __pfx_hash_netnet_create+0x10/0x10 [ 149.528898][ T8716] ? __nla_parse+0x40/0x60 [ 149.533313][ T8716] ? __pfx_hash_netnet_create+0x10/0x10 [ 149.538859][ T8716] ip_set_create+0xa31/0x18b0 [ 149.543531][ T8716] ? ip_set_create+0x424/0x18b0 [ 149.548393][ T8716] ? __pfx_ip_set_create+0x10/0x10 [ 149.553525][ T8716] ? nfnetlink_rcv_msg+0x225/0x1180 [ 149.558726][ T8716] nfnetlink_rcv_msg+0xbec/0x1180 [ 149.563752][ T8716] ? nfnetlink_rcv_msg+0x225/0x1180 [ 149.568964][ T8716] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 149.574457][ T8716] netlink_rcv_skb+0x1e3/0x430 [ 149.579220][ T8716] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 149.584680][ T8716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.589970][ T8716] ? apparmor_capable+0x13b/0x1b0 [ 149.594989][ T8716] ? bpf_lsm_capable+0x9/0x10 [ 149.599660][ T8716] ? security_capable+0x7e/0x2d0 [ 149.604598][ T8716] nfnetlink_rcv+0x297/0x2ab0 [ 149.609270][ T8716] ? __pfx_validate_chain+0x10/0x10 [ 149.614477][ T8716] ? mark_lock+0x9a/0x360 [ 149.618802][ T8716] ? __pfx_validate_chain+0x10/0x10 [ 149.623996][ T8716] ? __lock_acquire+0x1397/0x2100 [ 149.629019][ T8716] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 149.634135][ T8716] ? mark_lock+0x9a/0x360 [ 149.638478][ T8716] ? __lock_acquire+0x1397/0x2100 [ 149.643516][ T8716] ? __pfx_lock_release+0x10/0x10 [ 149.648539][ T8716] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.653743][ T8716] ? __pfx_lock_release+0x10/0x10 [ 149.658775][ T8716] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.663968][ T8716] netlink_unicast+0x7f6/0x990 [ 149.668731][ T8716] ? __pfx_netlink_unicast+0x10/0x10 [ 149.674006][ T8716] ? __virt_addr_valid+0x45f/0x530 [ 149.679114][ T8716] ? __phys_addr_symbol+0x2f/0x70 [ 149.684146][ T8716] ? __check_object_size+0x47a/0x730 [ 149.689441][ T8716] netlink_sendmsg+0x8e4/0xcb0 [ 149.694210][ T8716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.699494][ T8716] ? aa_sock_msg_perm+0x91/0x160 [ 149.704429][ T8716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.709705][ T8716] __sock_sendmsg+0x221/0x270 [ 149.714414][ T8716] ____sys_sendmsg+0x52a/0x7e0 [ 149.719206][ T8716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.724498][ T8716] ? __fget_files+0x2a/0x410 [ 149.729095][ T8716] ? __fget_files+0x2a/0x410 [ 149.733692][ T8716] __sys_sendmsg+0x269/0x350 [ 149.738285][ T8716] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.743433][ T8716] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.749766][ T8716] ? do_syscall_64+0x100/0x230 [ 149.754533][ T8716] ? do_syscall_64+0xb6/0x230 [ 149.759212][ T8716] do_syscall_64+0xf3/0x230 [ 149.763710][ T8716] ? clear_bhb_loop+0x35/0x90 [ 149.768395][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.774299][ T8716] RIP: 0033:0x7f11b3b85d29 [ 149.778712][ T8716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.798315][ T8716] RSP: 002b:00007f11b4a75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.806725][ T8716] RAX: ffffffffffffffda RBX: 00007f11b3d75fa0 RCX: 00007f11b3b85d29 [ 149.814690][ T8716] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 149.822652][ T8716] RBP: 00007f11b3c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 149.830616][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.838582][ T8716] R13: 0000000000000000 R14: 00007f11b3d75fa0 R15: 00007ffe73fc7c38 [ 149.846580][ T8716] [ 149.895460][ T8716] Mem-Info: [ 149.898631][ T8716] active_anon:3918 inactive_anon:0 isolated_anon:0 [ 149.898631][ T8716] active_file:1255 inactive_file:38283 isolated_file:0 [ 149.898631][ T8716] unevictable:768 dirty:18 writeback:0 [ 149.898631][ T8716] slab_reclaimable:10292 slab_unreclaimable:103116 [ 149.898631][ T8716] mapped:33387 shmem:1429 pagetables:689 [ 149.898631][ T8716] sec_pagetables:0 bounce:0 [ 149.898631][ T8716] kernel_misc_reclaimable:0 [ 149.898631][ T8716] free:1331585 free_pcp:497 free_cma:0 [ 150.004317][ T8716] Node 0 active_anon:17472kB inactive_anon:0kB active_file:5020kB inactive_file:153064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135148kB dirty:72kB writeback:0kB shmem:5680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11748kB pagetables:2956kB sec_pagetables:0kB all_unreclaimable? no [ 150.171566][ T8716] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 150.322283][ T8716] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.449197][ T8716] lowmem_reserve[]: 0 2465 2466 0 0 [ 150.499043][ T8716] Node 0 DMA32 free:1392104kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:25084kB inactive_anon:0kB active_file:5020kB inactive_file:152228kB unevictable:1536kB writepending:80kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:2520kB local_pcp:528kB free_cma:0kB [ 150.693375][ T8716] lowmem_reserve[]: 0 0 0 0 0 [ 150.714304][ T8716] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.824359][ T8716] lowmem_reserve[]: 0 0 0 0 0 [ 150.859678][ T8716] Node 1 Normal free:3905792kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.135420][ T8716] lowmem_reserve[]: 0 0 0 0 0 [ 151.140208][ T8716] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 151.153137][ T8716] Node 0 DMA32: 2*4kB (UE) 187*8kB (UE) 195*16kB (UME) 175*32kB (UE) 186*64kB (UE) 29*128kB (UE) 4*256kB (UE) 4*512kB (UE) 3*1024kB (UME) 3*2048kB (UM) 327*4096kB (M) = 1377520kB [ 151.171280][ T8716] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 151.182962][ T8716] Node 1 Normal: 244*4kB (UME) 56*8kB (UME) 41*16kB (UME) 223*32kB (UME) 92*64kB (UME) 36*128kB (UME) 10*256kB (UME) 7*512kB (UM) 3*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3905792kB [ 151.210604][ T8716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.220354][ T8716] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.229691][ T8716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.239823][ T8716] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.249166][ T8716] 45984 total pagecache pages [ 151.253946][ T8716] 0 pages in swap cache [ 151.258222][ T8716] Free swap = 124996kB [ 151.262378][ T8716] Total swap = 124996kB [ 151.354386][ T8716] 2097051 pages RAM [ 151.358234][ T8716] 0 pages HighMem/MovableOnly [ 151.404788][ T8716] 427011 pages reserved [ 151.431978][ T8716] 0 pages cma reserved [ 152.242447][ T8772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.759'. [ 152.392438][ T8775] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 153.063767][ T8803] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 153.112005][ T8803] NCSI netlink: No device for ifindex 0 [ 153.767157][ T8817] netlink: 332 bytes leftover after parsing attributes in process `syz.4.770'. [ 153.829885][ T8818] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 154.603535][ T8842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.769'. [ 154.679266][ T8825] syzkaller0: entered promiscuous mode [ 154.772316][ T8825] syzkaller0: entered allmulticast mode [ 154.828549][ T8829] IPv6: sit1: Disabled Multicast RS [ 154.857587][ T8829] sit1: entered allmulticast mode [ 155.070218][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 155.401815][ T8844] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 155.434870][ T8846] bridge3: entered promiscuous mode [ 155.440120][ T8846] bridge3: entered allmulticast mode [ 158.570662][ T8844] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 158.835338][ T8871] netlink: 128 bytes leftover after parsing attributes in process `syz.3.781'. [ 158.939239][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 160.273047][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.792'. [ 160.340619][ T8917] macsec1: entered promiscuous mode [ 160.403348][ T8917] erspan0: entered promiscuous mode [ 160.522522][ T8917] erspan0: left promiscuous mode [ 160.800552][ T8935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.796'. [ 161.409629][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.801'. [ 161.507359][ T8958] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 161.543461][ T8960] openvswitch: netlink: Multiple metadata blocks provided [ 161.594627][ T8960] openvswitch: netlink: Multiple metadata blocks provided [ 161.695818][ T8965] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 161.953075][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 161.997245][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.807'. [ 162.063196][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'. [ 162.284684][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 162.294379][ T8987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.332701][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 162.618284][ T9002] tipc: Started in network mode [ 162.632530][ T9002] tipc: Node identity 02124b91a19f, cluster identity 4711 [ 162.653714][ T9002] tipc: Enabled bearer , priority 0 [ 162.737181][ T9002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'. [ 162.835928][ T9013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.816'. [ 162.932785][ T9008] syzkaller0: entered promiscuous mode [ 162.966974][ T9019] ieee802154 phy1 wpan1: encryption failed: -22 [ 162.991368][ T9008] syzkaller0: entered allmulticast mode [ 163.038359][ T9008] tipc: Resetting bearer [ 163.063743][ T8999] netlink: 'syz.5.814': attribute type 10 has an invalid length. [ 163.091590][ T9001] tipc: Resetting bearer [ 163.618426][ T5828] Bluetooth: hci5: link tx timeout [ 163.631038][ T5828] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.679603][ T8] tipc: Node number set to 2743946129 [ 164.948570][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 164.957005][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 165.679679][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 166.025792][ T9001] tipc: Disabling bearer [ 166.037391][ T8999] geneve0: entered promiscuous mode [ 166.431157][ T9050] netlink: 'syz.2.824': attribute type 5 has an invalid length. [ 167.226973][ T9085] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 167.246356][ T9085] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 167.620639][ T9110] netlink: 'syz.2.842': attribute type 10 has an invalid length. [ 167.639605][ T9110] netlink: 55 bytes leftover after parsing attributes in process `syz.2.842'. [ 167.800358][ T9116] netlink: 'syz.1.843': attribute type 64 has an invalid length. [ 167.822001][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 167.893425][ T9114] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.042009][ T9122] netlink: 176 bytes leftover after parsing attributes in process `syz.5.846'. [ 168.107482][ T9114] netlink: 48 bytes leftover after parsing attributes in process `syz.4.844'. [ 168.147186][ T9109] delete_channel: no stack [ 168.162035][ T9109] delete_channel: no stack [ 168.348475][ T9131] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.847'. [ 168.380384][ T9127] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.847'. [ 168.400719][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 168.429235][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 168.835112][ T9161] x_tables: duplicate underflow at hook 1 [ 169.046838][ T9172] netlink: 'syz.2.858': attribute type 11 has an invalid length. [ 169.477489][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.866'. [ 169.793302][ T9188] bond3: entered promiscuous mode [ 169.830507][ T9188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.914526][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.187947][ T9202] xt_l2tp: unknown flags: 10 [ 170.836892][ T9188] bond3 (unregistering): Released all slaves [ 171.286539][ T9214] netlink: 'syz.4.868': attribute type 1 has an invalid length. [ 171.423648][ T9223] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.432688][ T9223] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.442441][ T9223] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.451525][ T9223] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.638810][ T9229] netlink: 'syz.2.869': attribute type 1 has an invalid length. [ 171.859730][ T9229] bond3 (unregistering): Released all slaves [ 171.909561][ T9244] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 172.476375][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'. [ 172.682250][ T9259] __nla_validate_parse: 2 callbacks suppressed [ 172.682268][ T9259] netlink: 68 bytes leftover after parsing attributes in process `syz.1.884'. [ 172.753522][ T9259] netlink: 48 bytes leftover after parsing attributes in process `syz.1.884'. [ 172.807310][ T9264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.886'. [ 173.191911][ T9280] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 173.228393][ T9279] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 173.285255][ T9282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.892'. [ 173.308246][ T9284] netlink: 44 bytes leftover after parsing attributes in process `syz.1.892'. [ 173.921447][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 174.111287][ T9318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.898'. [ 174.419528][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 175.710962][ T9385] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.756057][ T9385] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.838060][ T9390] lo: entered promiscuous mode [ 175.978503][ T9385] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.030699][ T9385] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.187839][ T9385] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.394580][ T9385] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.491594][ T9381] lo: left promiscuous mode [ 176.613689][ T9385] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.655176][ T9385] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.198559][ T9385] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.253679][ T9385] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.339567][ T9385] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.514530][ T9385] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.530474][ T9385] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.559197][ T9385] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.643807][ T9438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.925'. [ 177.658835][ T9439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.926'. [ 177.668383][ T9385] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.686404][ T9385] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.699572][ T9439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.926'. [ 177.719612][ T9387] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.740533][ T9387] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.768125][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 177.842273][ T9387] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.878220][ T9387] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.207236][ T9387] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.245811][ T9387] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.568920][ T9387] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.633872][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 178.747656][ T9464] openvswitch: netlink: IP tunnel dst address not specified [ 178.894663][ T9387] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.119738][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 179.127585][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 179.335850][ T9472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 179.367953][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 179.516177][ T9486] netlink: 64 bytes leftover after parsing attributes in process `syz.2.939'. [ 179.624246][ T9492] tun0: tun_chr_ioctl cmd 1074812117 [ 179.630565][ T9494] tun0: tun_chr_ioctl cmd 1074812117 [ 179.658047][ T9496] IPv6: sit1: Disabled Multicast RS [ 179.840824][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 180.003659][ T9387] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.042311][ T9387] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.093477][ T9387] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.122919][ T9387] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.202033][ T9387] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.244650][ T9387] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.314829][ T9387] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.323163][ T9387] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.031495][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 181.210433][ T9470] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.216909][ T9470] Bluetooth: hci1: command 0x0406 tx timeout [ 181.223050][ T9470] Bluetooth: hci2: command 0x0401 tx timeout [ 181.231024][ T9470] Bluetooth: hci3: command 0x0406 tx timeout [ 181.304889][ T9560] netlink: 'syz.1.955': attribute type 2 has an invalid length. [ 181.329795][ T9560] : entered promiscuous mode [ 181.409088][ T9564] xfrm1: entered allmulticast mode [ 181.463241][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'. [ 182.152274][ T9576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.275684][ T9577] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 182.314988][ T9579] netlink: 48 bytes leftover after parsing attributes in process `syz.4.961'. [ 185.453074][ T9577] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.705552][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.967'. [ 185.885392][ T9622] tap0: tun_chr_ioctl cmd 1074025677 [ 185.890888][ T9622] tap0: linktype set to 778 [ 186.002352][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 186.214513][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.977'. [ 186.357721][ T9657] sctp: [Deprecated]: syz.3.979 (pid 9657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.357721][ T9657] Use struct sctp_sack_info instead [ 186.648640][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 187.310257][ T9683] netlink: 'syz.3.987': attribute type 9 has an invalid length. [ 187.320209][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 187.486733][ T9686] netlink: 'syz.3.988': attribute type 142 has an invalid length. [ 187.496483][ T9687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.989'. [ 187.792265][ T9695] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.990'. [ 187.801490][ T9695] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 187.820007][ T9700] netlink: 'syz.1.993': attribute type 6 has an invalid length. [ 187.844225][ T9700] netlink: 'syz.1.993': attribute type 7 has an invalid length. [ 187.852049][ T9700] netlink: 'syz.1.993': attribute type 8 has an invalid length. [ 187.860353][ T9695] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 187.868200][ T9695] netlink: 112 bytes leftover after parsing attributes in process `syz.3.990'. [ 187.903416][ T9695] bridge0: entered promiscuous mode [ 187.935474][ T9694] bridge0: left promiscuous mode [ 187.963941][ T9706] netlink: 9 bytes leftover after parsing attributes in process `syz.4.995'. [ 187.974462][ T9706] 0·: renamed from hsr_slave_1 (while UP) [ 188.014079][ T9706] 0·: entered allmulticast mode [ 188.020459][ T9706] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 188.163767][ T9709] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.996'. [ 188.204895][ T9721] syz.2.999: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 188.244405][ T9721] CPU: 1 UID: 0 PID: 9721 Comm: syz.2.999 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 188.255048][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.265120][ T9721] Call Trace: [ 188.268407][ T9721] [ 188.271340][ T9721] dump_stack_lvl+0x241/0x360 [ 188.276031][ T9721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.281244][ T9721] ? __pfx__printk+0x10/0x10 [ 188.285835][ T9721] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 188.292253][ T9721] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 188.298755][ T9721] warn_alloc+0x278/0x410 [ 188.303080][ T9721] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 188.309143][ T9721] ? __pfx_warn_alloc+0x10/0x10 [ 188.313990][ T9721] ? kasan_save_track+0x3f/0x80 [ 188.318834][ T9721] ? __kasan_kmalloc+0x98/0xb0 [ 188.323591][ T9721] ? xsk_setsockopt+0x4ea/0x950 [ 188.328439][ T9721] ? do_sock_setsockopt+0x3af/0x720 [ 188.333630][ T9721] ? __x64_sys_setsockopt+0x1ee/0x280 [ 188.338996][ T9721] ? do_syscall_64+0xf3/0x230 [ 188.343665][ T9721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.349735][ T9721] __vmalloc_node_range_noprof+0x126/0x1380 [ 188.355654][ T9721] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.361998][ T9721] ? __kasan_kmalloc+0x98/0xb0 [ 188.366764][ T9721] vmalloc_user_noprof+0x74/0x80 [ 188.371695][ T9721] ? xskq_create+0xb6/0x170 [ 188.376233][ T9721] xskq_create+0xb6/0x170 [ 188.380571][ T9721] xsk_init_queue+0xa1/0x100 [ 188.385162][ T9721] xsk_setsockopt+0x4ea/0x950 [ 188.389839][ T9721] ? __pfx_xsk_setsockopt+0x10/0x10 [ 188.395038][ T9721] ? __pfx_aa_sk_perm+0x10/0x10 [ 188.399889][ T9721] ? aa_sock_opt_perm+0x79/0x120 [ 188.404826][ T9721] ? __pfx_xsk_setsockopt+0x10/0x10 [ 188.410024][ T9721] do_sock_setsockopt+0x3af/0x720 [ 188.415051][ T9721] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 188.420593][ T9721] ? __fget_files+0x395/0x410 [ 188.425279][ T9721] ? __fget_files+0x2a/0x410 [ 188.429875][ T9721] __x64_sys_setsockopt+0x1ee/0x280 [ 188.435078][ T9721] do_syscall_64+0xf3/0x230 [ 188.439580][ T9721] ? clear_bhb_loop+0x35/0x90 [ 188.444258][ T9721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.450145][ T9721] RIP: 0033:0x7f6d2e985d29 [ 188.454557][ T9721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.474167][ T9721] RSP: 002b:00007f6d2f814038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.482594][ T9721] RAX: ffffffffffffffda RBX: 00007f6d2eb75fa0 RCX: 00007f6d2e985d29 [ 188.490561][ T9721] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 188.498526][ T9721] RBP: 00007f6d2ea01b08 R08: 0000000000000004 R09: 0000000000000000 [ 188.506494][ T9721] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.514457][ T9721] R13: 0000000000000000 R14: 00007f6d2eb75fa0 R15: 00007ffc42a83a28 [ 188.522435][ T9721] [ 188.534324][ T9721] Mem-Info: [ 188.537476][ T9721] active_anon:4007 inactive_anon:0 isolated_anon:0 [ 188.537476][ T9721] active_file:1272 inactive_file:38299 isolated_file:0 [ 188.537476][ T9721] unevictable:768 dirty:66 writeback:0 [ 188.537476][ T9721] slab_reclaimable:10591 slab_unreclaimable:103379 [ 188.537476][ T9721] mapped:34496 shmem:1429 pagetables:745 [ 188.537476][ T9721] sec_pagetables:0 bounce:0 [ 188.537476][ T9721] kernel_misc_reclaimable:0 [ 188.537476][ T9721] free:1331152 free_pcp:500 free_cma:0 [ 188.604441][ T9721] Node 0 active_anon:16028kB inactive_anon:0kB active_file:5088kB inactive_file:153128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137984kB dirty:260kB writeback:0kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11844kB pagetables:2980kB sec_pagetables:0kB all_unreclaimable? no [ 188.662441][ T9723] vxcan1 speed is unknown, defaulting to 1000 [ 188.719632][ T9723] vxcan1 speed is unknown, defaulting to 1000 [ 188.755883][ T9721] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 188.788095][ T9723] vxcan1 speed is unknown, defaulting to 1000 [ 188.916986][ T9721] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.112292][ T9721] lowmem_reserve[]: 0 2465 2466 0 0 [ 189.122709][ T9721] Node 0 DMA32 free:1402312kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:16160kB inactive_anon:0kB active_file:5088kB inactive_file:152292kB unevictable:1536kB writepending:264kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:2196kB local_pcp:808kB free_cma:0kB [ 189.218697][ T9737] Cannot find del_set index 286 as target [ 189.315820][ T9721] lowmem_reserve[]: 0 0 0 0 0 [ 189.340745][ T9721] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.466137][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 189.473016][ T9723] infiniband syz0: set down [ 189.477941][ T9723] infiniband syz0: added vxcan1 [ 189.487287][ T9723] syz0: rxe_create_cq: returned err = -12 [ 189.493486][ T9723] infiniband syz0: Couldn't create ib_mad CQ [ 189.499882][ T9723] infiniband syz0: Couldn't open port 1 [ 189.517688][ T9721] lowmem_reserve[]: 0 0 0 0 0 [ 189.522583][ T9721] Node 1 Normal free:3905792kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.591608][ T9721] lowmem_reserve[]: 0 0 0 0 0 [ 189.610654][ T9721] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 189.645923][ T9723] RDS/IB: syz0: added [ 189.650417][ T9723] smc: adding ib device syz0 with port count 1 [ 189.662091][ T9721] Node 0 DMA32: 2*4kB (UE) 155*8kB (UM) 277*16kB (UM) 178*32kB (UME) 257*64kB (UME) 79*128kB (UME) 28*256kB (UME) 10*512kB (ME) 10*1024kB (UME) 3*2048kB (UM) 326*4096kB (M) = 1401904kB [ 189.700062][ T9723] smc: ib device syz0 port 1 has pnetid [ 189.739184][ T9723] vxcan1 speed is unknown, defaulting to 1000 [ 189.751134][ T9746] netlink: 'syz.4.1005': attribute type 3 has an invalid length. [ 189.778204][ T9721] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 189.802023][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 189.855422][ T9721] Node 1 Normal: 244*4kB (UME) 56*8kB (UME) 41*16kB (UME) 223*32kB (UME) 92*64kB (UME) 36*128kB (UME) 10*256kB (UME) 7*512kB (UM) 3*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3905792kB [ 189.978458][ T9721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.054178][ T9721] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.120032][ T9721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.164806][ T9721] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.216314][ T9721] 41002 total pagecache pages [ 190.221041][ T9721] 0 pages in swap cache [ 190.272051][ T9721] Free swap = 124996kB [ 190.304336][ T9721] Total swap = 124996kB [ 190.324249][ T9721] 2097051 pages RAM [ 190.328091][ T9721] 0 pages HighMem/MovableOnly [ 190.367128][ T9721] 427011 pages reserved [ 190.423800][ T9721] 0 pages cma reserved [ 190.680106][ T9764] x_tables: duplicate underflow at hook 2 [ 190.810721][ T9723] vxcan1 speed is unknown, defaulting to 1000 [ 191.227613][ T9723] vxcan1 speed is unknown, defaulting to 1000 [ 191.584006][ T9723] vxcan1 speed is unknown, defaulting to 1000 [ 191.805868][ T9796] __nla_validate_parse: 5 callbacks suppressed [ 191.805887][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1021'. [ 192.021100][ T9801] netlink: set zone limit has 8 unknown bytes [ 192.127371][ T9723] vxcan1 speed is unknown, defaulting to 1000 [ 192.365112][ T9809] tipc: Enabling of bearer rejected, failed to enable media [ 192.620924][ T9723] vxcan1 speed is unknown, defaulting to 1000 [ 193.232676][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 193.520252][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 194.405529][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 194.475238][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.492695][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.326129][ T9873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1044'. [ 196.084275][ T6760] wlan0: Trigger new scan to find an IBSS to join [ 197.146666][ T9909] tls_set_device_offload: netdev not found [ 198.089657][ T9939] erspan1: entered promiscuous mode [ 198.125323][ T9939] erspan1: entered allmulticast mode [ 198.399415][ T9945] netlink: 'syz.5.1065': attribute type 1 has an invalid length. [ 198.444986][ T9945] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1065'. [ 198.538043][ T9948] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 198.621073][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1067'. [ 198.705710][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 198.798413][ T9951] bridge_slave_1: left allmulticast mode [ 198.884505][ T9951] bridge_slave_1: left promiscuous mode [ 198.923096][ T9951] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.984044][ T9957] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 199.177559][ T6760] wlan0: Trigger new scan to find an IBSS to join [ 199.200702][ T9951] bridge_slave_0: left allmulticast mode [ 199.229528][ T9951] bridge_slave_0: left promiscuous mode [ 199.272225][ T9951] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.585476][ T9996] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1077'. [ 200.861497][T10005] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1080'. [ 201.262183][T10012] netlink: 'syz.4.1083': attribute type 2 has an invalid length. [ 201.527592][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'. [ 201.568461][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1085'. [ 202.007959][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 202.039403][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 202.076061][ T6751] wlan0: Creating new IBSS network, BSSID d6:f2:81:54:92:26 [ 202.734787][T10068] netlink: 'syz.2.1096': attribute type 1 has an invalid length. [ 202.791848][T10067] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.881135][T10067] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.008009][T10086] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1103'. [ 203.117087][T10076] veth8: entered allmulticast mode [ 203.168682][T10067] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.222115][T10067] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.347874][T10067] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.378201][T10067] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.619400][T10067] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.629748][T10067] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.684251][T10103] lo: entered allmulticast mode [ 203.991379][T10067] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.044315][T10067] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.090034][T10067] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.109874][T10119] __nla_validate_parse: 1 callbacks suppressed [ 204.109894][T10119] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1114'. [ 204.175656][T10067] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.184773][T10103] Cannot find del_set index 4 as target [ 204.230820][T10067] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.268316][T10067] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.292842][T10121] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1115'. [ 204.333147][T10067] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.371142][T10067] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.426670][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'. [ 204.514379][T10126] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1116'. [ 205.026718][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1119'. [ 205.313624][T10148] vlan2: entered promiscuous mode [ 205.623632][T10162] SET target dimension over the limit! [ 205.638188][T10162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.919498][T10167] syzkaller1: entered promiscuous mode [ 205.933105][T10167] syzkaller1: entered allmulticast mode [ 206.634749][T10182] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 207.156650][T10201] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1140'. [ 207.179138][T10203] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 207.191101][T10201] erspan0: entered promiscuous mode [ 207.199794][T10201] batman_adv: batadv0: Adding interface: macvlan3 [ 207.206425][T10201] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.233994][T10201] batman_adv: batadv0: Interface activated: macvlan3 [ 207.294804][T10203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.365512][T10206] bond3: (slave bridge5): making interface the new active one [ 207.377884][T10206] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 207.568130][T10211] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1143'. [ 207.626201][T10211] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1143'. [ 207.700675][T10215] openvswitch: netlink: Missing key (keys=40, expected=100) [ 208.280405][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 208.296079][T10222] netlink: 'syz.1.1147': attribute type 2 has an invalid length. [ 208.315857][T10222] netlink: 'syz.1.1147': attribute type 4 has an invalid length. [ 208.649136][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 209.161778][T10237] netlink: 'syz.3.1153': attribute type 4 has an invalid length. [ 209.264531][T10237] netlink: 'syz.3.1153': attribute type 10 has an invalid length. [ 209.311082][T10237] veth0_vlan: left promiscuous mode [ 209.348852][T10237] veth0_vlan: entered promiscuous mode [ 209.385618][T10237] team0: Device veth0_vlan failed to register rx_handler [ 209.447449][T10251] __nla_validate_parse: 2 callbacks suppressed [ 209.447466][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1156'. [ 209.567400][T10251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.009170][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 210.205935][T10272] ebt_limit: overflow, try lower: 0/0 [ 211.715593][T10294] vxcan1 speed is unknown, defaulting to 1000 [ 212.003886][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.017169][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.027741][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.039835][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.048317][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.056487][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.395470][T10296] vxcan1 speed is unknown, defaulting to 1000 [ 212.506189][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1172'. [ 213.024174][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1176'. [ 213.094415][T10332] netlink: 'syz.5.1176': attribute type 4 has an invalid length. [ 213.174731][T10306] vxcan1 speed is unknown, defaulting to 1000 [ 213.214435][T10332] netlink: 'syz.5.1176': attribute type 8 has an invalid length. [ 213.222205][T10332] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1176'. [ 213.590920][T10346] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 213.647519][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1180'. [ 214.165045][ T5828] Bluetooth: hci4: command tx timeout [ 214.786403][T10369] net veth1_virt_wifi : renamed from virt_wifi0 [ 214.797674][T10361] vxcan1 speed is unknown, defaulting to 1000 [ 214.811206][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 215.146443][T10306] chnl_net:caif_netlink_parms(): no params data found [ 215.834282][T10306] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.847133][T10306] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.872944][T10306] bridge_slave_0: entered allmulticast mode [ 215.891951][T10306] bridge_slave_0: entered promiscuous mode [ 216.035243][T10399] bond1: entered promiscuous mode [ 216.042750][T10399] bond1: entered allmulticast mode [ 216.074835][T10399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.122641][T10306] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.157822][T10306] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.189160][T10402] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 216.202710][T10306] bridge_slave_1: entered allmulticast mode [ 216.233581][T10306] bridge_slave_1: entered promiscuous mode [ 216.241523][ T5828] Bluetooth: hci4: command tx timeout [ 216.352627][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1193'. [ 216.403452][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1193'. [ 216.527892][T10306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.601701][T10306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.698009][T10414] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 216.850618][T10306] team0: Port device team_slave_0 added [ 216.862563][T10414] netlink: zone id is out of range [ 216.896072][T10414] netlink: zone id is out of range [ 216.901276][T10414] netlink: zone id is out of range [ 216.919936][T10306] team0: Port device team_slave_1 added [ 216.952595][T10414] netlink: zone id is out of range [ 216.962125][T10416] vxcan1 speed is unknown, defaulting to 1000 [ 216.972055][T10423] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1199'. [ 217.031103][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1198'. [ 217.081143][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1198'. [ 217.101533][T10306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.135541][T10306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.246126][T10306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.340838][T10306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.363611][T10306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.524134][T10306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.760947][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1202'. [ 217.885946][T10306] hsr_slave_0: entered promiscuous mode [ 218.078136][T10306] hsr_slave_1: entered promiscuous mode [ 218.120615][T10306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.157178][T10306] Cannot create hsr debugfs directory [ 218.324336][ T5828] Bluetooth: hci4: command tx timeout [ 219.408290][T10306] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.491222][T10455] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 219.639763][T10306] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.766696][T10306] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.893203][T10306] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.010841][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1211'. [ 220.403572][ T5828] Bluetooth: hci4: command tx timeout [ 220.448166][T10306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.476454][T10306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.478006][ T8] IPVS: starting estimator thread 0... [ 220.490896][T10472] netlink: 'syz.5.1214': attribute type 39 has an invalid length. [ 220.546942][T10306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.656068][T10482] IPVS: using max 20 ests per chain, 48000 per kthread [ 220.756220][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 220.803482][T10306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.868806][T10306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.884228][T10306] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.896352][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.903469][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.929728][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.936888][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.970852][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 221.594892][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.632357][T10522] batadv_slave_0: entered promiscuous mode [ 222.050097][T10306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.179456][T10306] veth0_vlan: entered promiscuous mode [ 222.215581][T10306] veth1_vlan: entered promiscuous mode [ 222.301772][T10306] veth0_macvtap: entered promiscuous mode [ 222.331307][T10306] veth1_macvtap: entered promiscuous mode [ 222.377800][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.399351][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.422276][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.442358][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.452584][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.471824][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.533891][T10306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.609531][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.807220][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.835913][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.871641][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.895933][T10547] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1232'. [ 222.912647][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.931345][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.971179][T10306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.001995][T10306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.046582][T10306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.261941][T10306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.317986][T10306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.331672][T10306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.349368][T10306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.403354][T10555] vxcan1 speed is unknown, defaulting to 1000 [ 223.610923][ T6760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.651777][ T6760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.716425][ T6760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.740532][ T6760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.809229][T10565] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1236'. [ 223.857068][T10566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1237'. [ 223.916942][T10566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1237'. [ 224.512153][T10579] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.532097][ T6760] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.193050][ T6760] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.397409][T10602] vxcan1 speed is unknown, defaulting to 1000 [ 226.588727][ T6760] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.817272][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1246'. [ 227.021310][ T6760] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.520867][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1248'. [ 227.631533][T10628] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 227.672481][ T6760] bridge_slave_1: left allmulticast mode [ 227.718287][ T6760] bridge_slave_1: left promiscuous mode [ 227.758632][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.843054][ T6760] bridge_slave_0: left allmulticast mode [ 227.870581][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.882623][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.890938][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.935180][ T6760] bridge_slave_0: left promiscuous mode [ 227.964396][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.974846][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 227.982243][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.010707][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.021621][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1257'. [ 229.271135][ T6760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.296880][ T6760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.318053][ T6760] bond0 (unregistering): Released all slaves [ 229.411839][T10632] vxcan1 speed is unknown, defaulting to 1000 [ 229.730152][T10664] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1261'. [ 229.809355][T10670] xt_l2tp: missing protocol rule (udp|l2tpip) [ 230.000438][T10676] netlink: 'syz.5.1263': attribute type 4 has an invalid length. [ 230.033795][T10675] netlink: 'syz.5.1263': attribute type 4 has an invalid length. [ 230.077897][ T5833] Bluetooth: hci4: command tx timeout [ 230.157595][T10678] vxcan1 speed is unknown, defaulting to 1000 [ 231.193444][ T6760] hsr_slave_0: left promiscuous mode [ 231.203204][ T6760] hsr_slave_1: left promiscuous mode [ 231.209413][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.217521][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.225848][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.233407][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.259578][ T6760] veth1_macvtap: left promiscuous mode [ 231.312155][ T6760] veth0_macvtap: left promiscuous mode [ 231.318939][ T6760] veth1_vlan: left promiscuous mode [ 231.332564][ T6760] veth0_vlan: left promiscuous mode [ 231.460967][T10695] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1266'. [ 232.161748][ T5833] Bluetooth: hci4: command tx timeout [ 232.492654][ T6760] team0 (unregistering): Port device team_slave_1 removed [ 232.581771][ T6760] team0 (unregistering): Port device team_slave_0 removed [ 233.517034][T10696] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 233.580042][T10632] chnl_net:caif_netlink_parms(): no params data found [ 233.800272][T10632] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.807980][T10632] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.815323][T10632] bridge_slave_0: entered allmulticast mode [ 233.822448][T10632] bridge_slave_0: entered promiscuous mode [ 233.830966][T10632] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.838292][T10632] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.847761][T10632] bridge_slave_1: entered allmulticast mode [ 233.855181][T10632] bridge_slave_1: entered promiscuous mode [ 233.882405][T10632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.041093][T10632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.167808][ T6753] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 234.236060][ T5833] Bluetooth: hci4: command tx timeout [ 234.272064][T10632] team0: Port device team_slave_0 added [ 234.347096][T10632] team0: Port device team_slave_1 added [ 234.497088][T10632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.511544][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.603346][T10632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.616162][T10720] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1271'. [ 234.626386][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 234.656673][T10632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.665356][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'. [ 234.684293][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.711014][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 234.725813][T10723] netlink: 'syz.5.1272': attribute type 2 has an invalid length. [ 234.748030][T10632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.838994][T10723] Tq€: entered promiscuous mode [ 235.077839][T10632] hsr_slave_0: entered promiscuous mode [ 235.120973][T10632] hsr_slave_1: entered promiscuous mode [ 235.146091][T10632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.173442][T10632] Cannot create hsr debugfs directory [ 235.197909][T10728] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1274'. [ 235.222721][T10730] netlink: 'syz.4.1275': attribute type 21 has an invalid length. [ 235.630397][T10734] netlink: 900 bytes leftover after parsing attributes in process `syz.1.1277'. [ 235.668515][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'. [ 235.693361][T10736] xt_TCPMSS: Only works on TCP SYN packets [ 235.779094][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'. [ 236.135508][T10740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.165109][T10740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.315118][ T5833] Bluetooth: hci4: command tx timeout [ 236.683572][T10632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.700826][T10632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 236.770884][T10632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.814982][T10632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.943374][T10771] vxcan1 speed is unknown, defaulting to 1000 [ 237.180569][T10632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.262575][T10632] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.313867][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.321159][ T6766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.391326][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.398525][ T6766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.120729][T10787] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 238.242176][T10785] vxcan1 speed is unknown, defaulting to 1000 [ 238.465826][T10790] netem: unknown loss type 0 [ 238.484613][T10790] netem: change failed [ 239.166753][T10796] macsec1: entered allmulticast mode [ 239.221712][T10798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.284307][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 239.316729][ T30] INFO: task syz.0.337:7178 blocked for more than 144 seconds. [ 239.324558][ T30] Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 239.332193][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 239.483948][ T30] task:syz.0.337 state:D stack:22784 pid:7178 tgid:7176 ppid:5826 flags:0x00000004 [ 239.519906][ T30] Call Trace: [ 239.523239][ T30] [ 239.551694][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 239.578796][ T30] __schedule+0x1850/0x4c30 [ 239.583393][ T30] ? __pfx___schedule+0x10/0x10 [ 239.609087][ T30] ? __pfx_lock_release+0x10/0x10 [ 239.644239][ T30] ? __lock_sock+0x1c8/0x330 [ 239.648896][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 239.655252][T10796] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1293'. [ 239.711382][ T30] ? schedule+0x90/0x320 [ 239.742611][ T30] schedule+0x14b/0x320 [ 239.765470][ T30] __lock_sock+0x1cd/0x330 [ 239.802012][ T30] ? __pfx___lock_sock+0x10/0x10 [ 239.825898][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 239.840722][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 239.859859][ T30] ? lock_sock_nested+0x6a/0x100 [ 239.886539][ T30] lock_sock_nested+0x9e/0x100 [ 239.891394][ T30] do_tcp_setsockopt+0x954/0x2540 [ 239.918442][ T30] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 239.942682][ T30] ? __pfx___might_resched+0x10/0x10 [ 239.954584][ T30] ? __lock_acquire+0x1397/0x2100 [ 239.959662][ T30] ? tcp_setsockopt+0x3e/0xf0 [ 239.978379][ T30] tls_setsockopt+0x17a/0x15d0 [ 239.983207][ T30] ? __pfx_tls_setsockopt+0x10/0x10 [ 239.997397][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 240.002302][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 240.012972][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 240.021955][ T30] ? sock_common_setsockopt+0x37/0xc0 [ 240.033001][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 240.040151][ T30] do_sock_setsockopt+0x3af/0x720 [ 240.051033][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 240.057907][ T30] ? __fget_files+0x395/0x410 [ 240.062611][ T30] ? __fget_files+0x2a/0x410 [ 240.073459][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 240.080154][ T30] do_syscall_64+0xf3/0x230 [ 240.090284][ T30] ? clear_bhb_loop+0x35/0x90 [ 240.096533][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.102451][ T30] RIP: 0033:0x7fab77785d29 [ 240.112470][ T30] RSP: 002b:00007fab78650038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.122175][ T30] RAX: ffffffffffffffda RBX: 00007fab77976080 RCX: 00007fab77785d29 [ 240.134453][ T30] RDX: 0000000000000019 RSI: 0000000000000006 RDI: 0000000000000005 [ 240.142452][ T30] RBP: 00007fab77801b08 R08: 0000000000000004 R09: 0000000000000000 [ 240.168017][ T30] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000000 [ 240.179054][ T30] R13: 0000000000000000 R14: 00007fab77976080 R15: 00007ffe6cd4aea8 [ 240.192079][ T30] [ 240.224505][ T30] [ 240.224505][ T30] Showing all locks held in the system: [ 240.232272][ T30] 3 locks held by kworker/1:0/25: [ 240.294286][ T30] #0: ffff8880b873e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 240.324197][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 240.365813][ T30] #2: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 240.392277][ T30] 1 lock held by khungtaskd/30: [ 240.410295][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 240.440927][ T30] 3 locks held by kworker/u8:4/80: [ 240.460895][ T30] #0: ffff8880303d5948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 240.493012][ T30] #1: ffffc9000218fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 240.530873][ T30] #2: ffffffff8fcb3988 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0xd0/0x16f0 [ 240.570963][ T30] 2 locks held by getty/5586: [ 240.579928][ T30] #0: ffff888030e930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 240.610458][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 240.633138][ T30] 3 locks held by kworker/u8:23/6760: [ 240.638760][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 240.658562][ T30] #1: ffffc9000fdd7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 240.671996][ T30] #2: ffffffff8fcb3988 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 240.684285][ T30] 2 locks held by kworker/u8:28/6766: [ 240.689681][ T30] 1 lock held by syz.0.337/7178: [ 240.700938][ T30] #0: ffff88805b708fd8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: do_tcp_setsockopt+0x954/0x2540 [ 240.713347][ T30] 1 lock held by syz.0.337/7179: [ 240.726779][ T30] 1 lock held by syz-executor/10632: [ 240.732103][ T30] #0: ffffffff8fcb3988 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 240.748106][ T30] 2 locks held by syz.3.1289/10785: [ 240.753324][ T30] #0: ffffffff8fca74d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 240.764267][ T30] #1: ffffffff8fcb3988 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x20e/0x720 [ 240.773805][ T30] 2 locks held by syz.4.1293/10799: [ 240.786049][ T30] #0: ffffffff8fcb3988 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x394/0x8d0 [ 240.799790][ T30] #1: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 240.813096][ T30] 3 locks held by syz.5.1294/10797: [ 240.827600][ T30] #0: ffff888058504d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 240.842252][ T30] #1: ffff888058504078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 240.854238][ T30] #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 240.871090][ T30] 1 lock held by syz.1.1295/10801: [ 240.876331][ T30] #0: ffffffff8fcb3988 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 240.913644][ T30] [ 240.918422][ T30] ============================================= [ 240.918422][ T30] [ 240.964326][ T30] NMI backtrace for cpu 1 [ 240.968699][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 240.979203][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.989263][ T30] Call Trace: [ 240.992549][ T30] [ 240.995491][ T30] dump_stack_lvl+0x241/0x360 [ 241.000187][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.005398][ T30] ? __pfx__printk+0x10/0x10 [ 241.010010][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 241.014975][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 241.020448][ T30] ? _printk+0xd5/0x120 [ 241.024615][ T30] ? __pfx__printk+0x10/0x10 [ 241.029217][ T30] ? __wake_up_klogd+0xcc/0x110 [ 241.034082][ T30] ? __pfx__printk+0x10/0x10 [ 241.038684][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 241.043715][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 241.049700][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 241.055695][ T30] watchdog+0xff6/0x1040 [ 241.059947][ T30] ? watchdog+0x1ea/0x1040 [ 241.064376][ T30] ? __pfx_watchdog+0x10/0x10 [ 241.069066][ T30] kthread+0x2f0/0x390 [ 241.073152][ T30] ? __pfx_watchdog+0x10/0x10 [ 241.077836][ T30] ? __pfx_kthread+0x10/0x10 [ 241.082433][ T30] ret_from_fork+0x4b/0x80 [ 241.086854][ T30] ? __pfx_kthread+0x10/0x10 [ 241.091456][ T30] ret_from_fork_asm+0x1a/0x30 [ 241.096249][ T30] [ 241.100153][ T30] Sending NMI from CPU 1 to CPUs 0: [ 241.105533][ C0] NMI backtrace for cpu 0 [ 241.105545][ C0] CPU: 0 UID: 0 PID: 7179 Comm: syz.0.337 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 241.105564][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.105573][ C0] RIP: 0010:tls_write_space+0xb1/0x120 [ 241.105594][ C0] Code: e3 07 bf 02 00 00 00 89 de e8 fb 10 48 f7 80 fb 02 75 12 e8 f1 0d 48 f7 4c 89 f7 4c 89 fe e8 b6 84 02 00 eb 10 e8 df 0d 48 f7 <4c> 89 f7 4c 89 fe e8 c4 0a 01 00 49 83 c7 20 4c 89 f8 48 c1 e8 03 [ 241.105607][ C0] RSP: 0018:ffffc900032e7a98 EFLAGS: 00000293 [ 241.105622][ C0] RAX: ffffffff8a576611 RBX: 0000000000000001 RCX: ffff888027388000 [ 241.105634][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 241.105644][ C0] RBP: ffffc900032e7c10 R08: ffffffff8a5765f5 R09: ffffffff8a2a9123 [ 241.105656][ C0] R10: 0000000000000018 R11: ffffffff8a576560 R12: dffffc0000000000 [ 241.105667][ C0] R13: 00000000ffffffff R14: ffff88805b708d80 R15: ffff8880775e7400 [ 241.105678][ C0] FS: 00007fab7862f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 241.105692][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.105703][ C0] CR2: 00007f57648a56c0 CR3: 000000005a340000 CR4: 00000000003526f0 [ 241.105717][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.105727][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.105737][ C0] Call Trace: [ 241.105743][ C0] [ 241.105749][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 241.105770][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 241.105790][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 241.105815][ C0] ? nmi_handle+0x2a/0x5a0 [ 241.105841][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 241.105855][ C0] ? nmi_handle+0x14f/0x5a0 [ 241.105871][ C0] ? nmi_handle+0x2a/0x5a0 [ 241.105888][ C0] ? tls_write_space+0xb1/0x120 [ 241.105903][ C0] ? default_do_nmi+0x63/0x160 [ 241.105923][ C0] ? exc_nmi+0x123/0x1f0 [ 241.105941][ C0] ? end_repeat_nmi+0xf/0x53 [ 241.105961][ C0] ? __pfx_tls_write_space+0x10/0x10 [ 241.105975][ C0] ? do_tcp_setsockopt+0x963/0x2540 [ 241.105994][ C0] ? tls_write_space+0x95/0x120 [ 241.106008][ C0] ? tls_write_space+0xb1/0x120 [ 241.106023][ C0] ? tls_write_space+0xb1/0x120 [ 241.106038][ C0] ? tls_write_space+0xb1/0x120 [ 241.106054][ C0] ? tls_write_space+0xb1/0x120 [ 241.106069][ C0] [ 241.106074][ C0] [ 241.106080][ C0] do_tcp_setsockopt+0x1264/0x2540 [ 241.106104][ C0] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 241.106128][ C0] ? __pfx___might_resched+0x10/0x10 [ 241.106144][ C0] ? __lock_acquire+0x1397/0x2100 [ 241.106160][ C0] ? tcp_setsockopt+0x3e/0xf0 [ 241.106176][ C0] tls_setsockopt+0x17a/0x15d0 [ 241.106194][ C0] ? __pfx_tls_setsockopt+0x10/0x10 [ 241.106211][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 241.106233][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 241.106248][ C0] ? aa_sock_opt_perm+0x79/0x120 [ 241.106263][ C0] ? sock_common_setsockopt+0x37/0xc0 [ 241.106285][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 241.106305][ C0] do_sock_setsockopt+0x3af/0x720 [ 241.106325][ C0] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 241.106343][ C0] ? __fget_files+0x395/0x410 [ 241.106361][ C0] ? __fget_files+0x2a/0x410 [ 241.106383][ C0] __x64_sys_setsockopt+0x1ee/0x280 [ 241.106403][ C0] do_syscall_64+0xf3/0x230 [ 241.106419][ C0] ? clear_bhb_loop+0x35/0x90 [ 241.106438][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.106455][ C0] RIP: 0033:0x7fab77785d29 [ 241.106468][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.106481][ C0] RSP: 002b:00007fab7862f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.106496][ C0] RAX: ffffffffffffffda RBX: 00007fab77976160 RCX: 00007fab77785d29 [ 241.106508][ C0] RDX: 0000000000000019 RSI: 0000000000000006 RDI: 0000000000000005 [ 241.106517][ C0] RBP: 00007fab77801b08 R08: 0000000000000004 R09: 0000000000000000 [ 241.106527][ C0] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000000 [ 241.106537][ C0] R13: 0000000000000000 R14: 00007fab77976160 R15: 00007ffe6cd4aea8 [ 241.106556][ C0] [ 241.553808][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 241.560694][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 241.571197][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.581253][ T30] Call Trace: [ 241.584533][ T30] [ 241.587466][ T30] dump_stack_lvl+0x241/0x360 [ 241.592162][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.597367][ T30] ? __pfx__printk+0x10/0x10 [ 241.601963][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 241.607969][ T30] ? vscnprintf+0x5d/0x90 [ 241.612322][ T30] panic+0x349/0x880 [ 241.616228][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 241.622395][ T30] ? __pfx_panic+0x10/0x10 [ 241.626818][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 241.632208][ T30] ? __irq_work_queue_local+0x137/0x410 [ 241.637761][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 241.643140][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 241.649304][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 241.655470][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 241.661638][ T30] watchdog+0x1035/0x1040 [ 241.665980][ T30] ? watchdog+0x1ea/0x1040 [ 241.670413][ T30] ? __pfx_watchdog+0x10/0x10 [ 241.675103][ T30] kthread+0x2f0/0x390 [ 241.679179][ T30] ? __pfx_watchdog+0x10/0x10 [ 241.683864][ T30] ? __pfx_kthread+0x10/0x10 [ 241.688462][ T30] ret_from_fork+0x4b/0x80 [ 241.692883][ T30] ? __pfx_kthread+0x10/0x10 [ 241.697479][ T30] ret_from_fork_asm+0x1a/0x30 [ 241.702260][ T30] [ 241.705407][ T30] Kernel Offset: disabled [ 241.709726][ T30] Rebooting in 86400 seconds..