last executing test programs: 2m48.666251946s ago: executing program 2 (id=778): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000180000000000000000000000711207000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m48.495478807s ago: executing program 2 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000005400)=ANY=[@ANYBLOB="18000000000010000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) bind$netrom(r1, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000) 2m48.323488659s ago: executing program 2 (id=784): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000006c00000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) 2m48.268855119s ago: executing program 2 (id=785): socket$igmp(0x2, 0x3, 0x2) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000000203010300000000000000000000000008000340000000090800044000000222080005"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='contention_begin\x00', r3}, 0x18) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f00000003c0)=0x1, 0x4) socket(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x24020400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet(0x2, 0x3, 0x30) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0xe8, 0x1d8, 0x2e8, 0x2e8, 0x1d8, 0x4, 0x0, {[{{@arp={@multicast1, @local, 0x0, 0x0, 0x4, 0x5, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x80, 0x3, 0x8, 0x5, 0x560e, 0xff60, 'veth1_to_bond\x00', 'geneve0\x00', {}, {}, 0x0, 0x280}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x3, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0xf437, 0x1, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0xa}, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 2m48.03098787s ago: executing program 2 (id=790): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8}]}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40041}, 0x800) 2m47.759398058s ago: executing program 2 (id=796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000012c0)={{{@in6=@remote, @in=@private=0xa010102, 0x4e21, 0x6, 0x4e20, 0x800, 0xa, 0x80, 0xa0, 0x89}, {0x40, 0x9, 0x0, 0x6, 0x40, 0x9, 0xfff, 0x8000}, {0x140000, 0x2, 0x100, 0x1}, 0x2, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1, 0x4d4, 0x2b}, 0xa, @in6=@loopback, 0x3501, 0x1, 0x1, 0x0, 0x213, 0x4, 0x8c}}, 0xe8) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 2m32.69445757s ago: executing program 32 (id=796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000012c0)={{{@in6=@remote, @in=@private=0xa010102, 0x4e21, 0x6, 0x4e20, 0x800, 0xa, 0x80, 0xa0, 0x89}, {0x40, 0x9, 0x0, 0x6, 0x40, 0x9, 0xfff, 0x8000}, {0x140000, 0x2, 0x100, 0x1}, 0x2, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1, 0x4d4, 0x2b}, 0xa, @in6=@loopback, 0x3501, 0x1, 0x1, 0x0, 0x213, 0x4, 0x8c}}, 0xe8) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 2m27.725759307s ago: executing program 1 (id=1001): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)=ANY=[], 0x190) (fail_nth: 9) 2m27.389091982s ago: executing program 1 (id=1004): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='.'], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x10, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, 0xffc0}, 0x90) socket(0x1d, 0x2, 0x6) epoll_create(0x2) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0xa, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r7], 0xc4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0xfe}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x10) 2m26.251333653s ago: executing program 1 (id=1013): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0xfa39, {{0xa, 0x4e20, 0x6, @mcast2, 0x8}}}, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800034000e90001080001400000000305000200020000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x84, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x45b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040004) 2m26.106760521s ago: executing program 1 (id=1015): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0xd632101844cd50d0, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @sctp_ip6_spec={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x4e21, 0x9}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_emit_ethernet(0x86, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13092abd7000ffdbdf25210000000c000100000200000000000009001f0070687931"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='ifs_status\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0xc4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003053bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00001a0000008903000012800c0001006d6163766c616e00140002800800010010000000080003000300000008000500", @ANYRES32=r7, @ANYBLOB], 0x4c}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0xf, 0xba, 0x6, 0x8, @loopback, @private0, 0x40, 0x0, 0x800, 0x5}}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x110, 0xa, 0x148, 0x110, 0x10, 0x368, 0x2a8, 0x2a8, 0x368, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x2f}, 0x0, 0xf0, 0x110, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x100000000000000, 0xff, 0x0, 0x0, 0x8, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x460) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@dellinkprop={0xb4, 0x6d, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x40, 0x4005}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xb}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}, @IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @multicast}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'ip6gre0\x00'}, @IFLA_PHYS_PORT_ID={0x18, 0x22, "898a0ed7b581f200"/20}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4048044}, 0x4004) unshare(0x6a040000) r10 = socket(0x8, 0x3, 0x0) getpeername$packet(r10, &(0x7f00000000c0), 0x0) 2m25.040830251s ago: executing program 1 (id=1023): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000040)=0x3, 0x4) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x20, 0x56, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000400)='syzkaller\x00', 0x7, 0x52, &(0x7f0000000440)=""/82, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 2m24.809994835s ago: executing program 1 (id=1026): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x3f, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x3}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) recvfrom$inet6(r2, &(0x7f00000003c0)=""/196, 0xc4, 0x2000, &(0x7f0000000040)={0xa, 0x4e24, 0x4a1e3cda, @mcast2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0xfd, 0x15, 0x0, 0xfc, 0xfd, 0xfc, 0xe2, 0xfe, 0x4, 0x81, 0x80, 0x8, 0x5}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendto$inet6(r2, &(0x7f0000000180)="27e82609", 0x4, 0x4008180, &(0x7f0000000280)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, 0x0, 0x8) socket$tipc(0x1e, 0x2, 0x0) shutdown(r2, 0x1) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x73, 0x0, 0x7}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'sit0\x00', 'dvmrp0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r6], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20020811) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2, &(0x7f00000014c0)=""/236, 0xec}, 0x40000023) 2m9.731877155s ago: executing program 33 (id=1026): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x3f, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x3}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) recvfrom$inet6(r2, &(0x7f00000003c0)=""/196, 0xc4, 0x2000, &(0x7f0000000040)={0xa, 0x4e24, 0x4a1e3cda, @mcast2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0xfd, 0x15, 0x0, 0xfc, 0xfd, 0xfc, 0xe2, 0xfe, 0x4, 0x81, 0x80, 0x8, 0x5}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendto$inet6(r2, &(0x7f0000000180)="27e82609", 0x4, 0x4008180, &(0x7f0000000280)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, 0x0, 0x8) socket$tipc(0x1e, 0x2, 0x0) shutdown(r2, 0x1) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x73, 0x0, 0x7}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'sit0\x00', 'dvmrp0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r6], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20020811) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2, &(0x7f00000014c0)=""/236, 0xec}, 0x40000023) 1m36.247442086s ago: executing program 3 (id=1248): socket$inet6(0xa, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/228, 0xff24, 0x0, 0x0}, &(0x7f0000000280)=0xffffffffffffff5c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x1, 0x0, 0x40000, 0x3, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffc, 0x2, 0x1}, {{@in6=@remote, 0x4d7, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) unshare(0x20000400) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x5, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000028000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f0fb4c3683c01c3cd8120249e8c48eee488146ba30574ad1d00be0e464fb04e4d7b6e262a79e353869490a5f6dfa9669b90425b2cdae85bd873142bd53dd4871adb5c641f395942501e178500ecc2d1ba46bd581ef5591c1"], 0x50) 1m21.381920562s ago: executing program 3 (id=1248): socket$inet6(0xa, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/228, 0xff24, 0x0, 0x0}, &(0x7f0000000280)=0xffffffffffffff5c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x1, 0x0, 0x40000, 0x3, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffc, 0x2, 0x1}, {{@in6=@remote, 0x4d7, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) unshare(0x20000400) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x5, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000028000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f0fb4c3683c01c3cd8120249e8c48eee488146ba30574ad1d00be0e464fb04e4d7b6e262a79e353869490a5f6dfa9669b90425b2cdae85bd873142bd53dd4871adb5c641f395942501e178500ecc2d1ba46bd581ef5591c1"], 0x50) 1m16.76065061s ago: executing program 5 (id=1573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xa4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r12 = socket$netlink(0x10, 0x3, 0x0) (async) clock_gettime(0x2, 0xffffffffffffffff) (async) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0) (async, rerun: 64) r15 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 1m15.255836379s ago: executing program 5 (id=1575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a0800064000000025090001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x4, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x88, 0xff}}, 0x18}}, 0x20040800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m14.814964405s ago: executing program 5 (id=1577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r3, 0x2ac6d477bcf2db69, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4004880) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r3, 0x410, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x35f0484f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x252}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xaca}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4804) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xfffffdc1, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4048006) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000200)={0x7, 0x7, 0x3}, &(0x7f0000000240)=0x28) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0xab], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa20000000000000702000000feffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xf, 0x0, &(0x7f0000000540)="029e54893d788a08ec0052411971b0", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x7c, 0x0, 0x5a, 0x3}]}}, &(0x7f0000000f40)=""/4096, 0x2a, 0x1000, 0x1}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m14.454361817s ago: executing program 5 (id=1581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0x42, 0x4, 0x438, 0xffffffff, 0x280, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'nr0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private2, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xff, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xff, 0xff000000, 0xffffffff, 0xffffffff], 0x7, 0x2, 0x26c1eb487c89d4b6, 0x4e22, 0x4e23, 0x4e20, 0x4e21, 0x401, 0x1331}, 0x80, 0x44}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x1], 0x5, 0x3}, {0x2, [0x2, 0x1, 0x2, 0x1], 0x2, 0x6}}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev}, &(0x7f00000000c0)=0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000140)="eb", 0x4164, 0x4008004, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0x8000, 0x4, 0x64d, 0x12, 0x28, 0xed07, 0x51}, 0x9c) recvfrom$inet(r2, &(0x7f0000000000)=""/46, 0x2e, 0x60, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10) 1m14.223451246s ago: executing program 5 (id=1584): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x3c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x8848000000000000) (fail_nth: 1) 1m14.068593208s ago: executing program 5 (id=1586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="bc010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000002b00000008"], 0x1bc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xfdf6}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x1f0, 0x2e0, 0x2e0, 0x1f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xf8, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x1}}, @common=@icmp6={{0x28}, {0x5, "0ee4"}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0xffffffff, 0x8000}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffff00, 0xff, 0xffffffff], [0xff, 0x0, 0x0, 0xffffffff], 'gretap0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x8, 0x1, 0x0, 0x10}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m8.180001984s ago: executing program 3 (id=1248): socket$inet6(0xa, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/228, 0xff24, 0x0, 0x0}, &(0x7f0000000280)=0xffffffffffffff5c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x1, 0x0, 0x40000, 0x3, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffc, 0x2, 0x1}, {{@in6=@remote, 0x4d7, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) unshare(0x20000400) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x5, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000028000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f0fb4c3683c01c3cd8120249e8c48eee488146ba30574ad1d00be0e464fb04e4d7b6e262a79e353869490a5f6dfa9669b90425b2cdae85bd873142bd53dd4871adb5c641f395942501e178500ecc2d1ba46bd581ef5591c1"], 0x50) 59.765663323s ago: executing program 0 (id=1676): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) socket(0x1e, 0x4, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x3) unshare(0x22020400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000006b030000000000001d400500000000004704000001ed000072030200000000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 59.627247201s ago: executing program 0 (id=1677): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', r1, 0x29, 0x3, 0x6, 0x7f, 0x5, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast1, 0x0, 0x40, 0x6, 0x3}}) (async) socket(0x25, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xffe9, 0x4}}]}}]}, 0x44}}, 0x4000) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="adaa000000000000791018000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) readv(r7, &(0x7f0000000140), 0x0) (async) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000030000000090a0104000000f4000000000700000008000440000000020900020073797a31000000000800054000000021200000000c0a01010000000000000000070000000900020073797a1000010000000000000000000084000afb66fd4056276765572d5ac2782b61860aaada8337632c7265ece3b1462706c8d2d8666db74eb43cb83858507e2422d214fca78339cb751858d66a7e7dd7046803d1683e713b8df339965cdf28c6d2ec89c5e34e631cd83a"], 0x98}}, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) (async) sendmsg(r4, &(0x7f00000005c0)={&(0x7f00000003c0)=@x25, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000007c0)=[{0x90, 0x109, 0x0, "62dda21b02d0d90cd544eac0be5dfd1b925edcb9f366c14e26e2abc5bb837dedce36d6061f0597af9560491e548c860336788acaafec15711df31b2ef88671ab7e211447290e95be83fa46d632f8ac834af6f8ebb9de0384285a1b90678e231655987b647f54c15bcf687ebccde428c30ee9ec27bd4d929b17b4f81cbb294a0e"}, {0x38, 0x116, 0x195, "8f596d6fbabb891cf6ae3e3711cf7f63351765af3539c22bd0192c2773049ef7aa"}, {0xe0, 0x115, 0xfb, "cb5437d4ea2420e4e73d411a492889725e7d20b032646ac672f9f2894587c1b78069cd2d2f0636e77bfbed6138e4662de2a432b8078222d3e15e3b912d816460c063c556c79de39edc6839400309339103f7cfab8d4422523d137e5ca31e828437f22e620c412611f26479ce1fd54ff2b4b44206317f62f8ee0c89370d98ee91f853db922964f4bf2ca5c2e9b9f1be7fb61af061b7195b90fe047f0113fc264ac076cbc6fdad80122f1bdab7428bda94732d368669c243d6bf0b81bdcdc8a5a1beaa0942d4a7fddfcc524b15d68a"}, {0x90, 0x11, 0x4, "601c43a07230892d7df0cff9cd6104263969c2e2387fbf76f3dd578c6e1e0fc4613f801e056b27f25b6fb926c9dfcc7480f818682cd9bb83ed4df8d61388d3f38ae7fbbb28288bfbfcaa2fc612201ac345d50c15bb3622b7142bcc877e6bf8314198a816e45b4fc4297e326cc5f04d95bf2d25d009079cab15"}, {0x100, 0x10c, 0x8, "3093a2e8b29ec82d870db205e4588d7091e672354ccaf3d7d20aa04410d4e5c2252e67f1a89dbf7ea80a727e20c8da5d7d99f6f839b01a58246539d83e370099890650355b16629375e11af7feab01d5580de840100a7ed3c8e18f0b5dcb22829b05696d86592eb0b37437f919dddf10196d6228efbf13368f450b1f88a97b3f6086f47da98a4f442b2384d82cc1892bd85ff52ad003afe97c7d1757fd11f247c56661d9db075a6c7aa2c4b68b29e1934279d4d4a5ae2954e2ead8c9b89b3d45aa03438eb3a0a97642e5ee1e645eeaeacb093843bc771d39893482dbd54c62cbbb53f247f1377761e3ed2ea131f46d69"}], 0x338}, 0x1c874) getsockopt$packet_int(r8, 0x107, 0x14, 0x0, &(0x7f0000000240)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000006000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000005000000000000"], 0x50) 59.444072118s ago: executing program 0 (id=1679): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r4) 59.017135375s ago: executing program 34 (id=1586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="bc010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000002b00000008"], 0x1bc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xfdf6}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x1f0, 0x2e0, 0x2e0, 0x1f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xf8, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x1}}, @common=@icmp6={{0x28}, {0x5, "0ee4"}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0xffffffff, 0x8000}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffff00, 0xff, 0xffffffff], [0xff, 0x0, 0x0, 0xffffffff], 'gretap0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x8, 0x1, 0x0, 0x10}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 51.501075872s ago: executing program 3 (id=1248): socket$inet6(0xa, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/228, 0xff24, 0x0, 0x0}, &(0x7f0000000280)=0xffffffffffffff5c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x1, 0x0, 0x40000, 0x3, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffc, 0x2, 0x1}, {{@in6=@remote, 0x4d7, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) unshare(0x20000400) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x5, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000028000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f0fb4c3683c01c3cd8120249e8c48eee488146ba30574ad1d00be0e464fb04e4d7b6e262a79e353869490a5f6dfa9669b90425b2cdae85bd873142bd53dd4871adb5c641f395942501e178500ecc2d1ba46bd581ef5591c1"], 0x50) 43.209461871s ago: executing program 0 (id=1679): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r4) 35.015400607s ago: executing program 3 (id=1248): socket$inet6(0xa, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/228, 0xff24, 0x0, 0x0}, &(0x7f0000000280)=0xffffffffffffff5c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x1, 0x0, 0x40000, 0x3, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffc, 0x2, 0x1}, {{@in6=@remote, 0x4d7, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) unshare(0x20000400) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x5, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000028000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f0fb4c3683c01c3cd8120249e8c48eee488146ba30574ad1d00be0e464fb04e4d7b6e262a79e353869490a5f6dfa9669b90425b2cdae85bd873142bd53dd4871adb5c641f395942501e178500ecc2d1ba46bd581ef5591c1"], 0x50) 22.920176978s ago: executing program 0 (id=1679): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r4) 15.611266877s ago: executing program 3 (id=1248): socket$inet6(0xa, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/228, 0xff24, 0x0, 0x0}, &(0x7f0000000280)=0xffffffffffffff5c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x1, 0x0, 0x40000, 0x3, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffc, 0x2, 0x1}, {{@in6=@remote, 0x4d7, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) unshare(0x20000400) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x5, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000028000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f0fb4c3683c01c3cd8120249e8c48eee488146ba30574ad1d00be0e464fb04e4d7b6e262a79e353869490a5f6dfa9669b90425b2cdae85bd873142bd53dd4871adb5c641f395942501e178500ecc2d1ba46bd581ef5591c1"], 0x50) 8.263989772s ago: executing program 0 (id=1679): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r4) 5.023455833s ago: executing program 7 (id=1909): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000100)=0xffffff83) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xfc, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x14}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x20008084) 4.925000304s ago: executing program 7 (id=1911): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0xfff7, &(0x7f0000000000)='ip6_vti0\x00', 0x1000, 0xfffffffffffffff9, 0x6}) recvfrom(r1, &(0x7f00000001c0)=""/16, 0x10, 0x40000000, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) 2.627230403s ago: executing program 4 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x8, 0x1, 0x4}, 0x50) (async, rerun: 32) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}}, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.471497427s ago: executing program 6 (id=1917): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async, rerun: 64) recvmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) (async, rerun: 64) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r4, r5, 0x4}, 0x10) (async, rerun: 32) r6 = socket(0x1, 0x2, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000140)=@udp=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070001000080000001"], 0x48) (rerun: 64) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r8, &(0x7f0000000f80), 0x0}, 0x20) close(r7) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='f2fs_writepages\x00', r5, 0x0, 0x5}, 0x18) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 32) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="2600bae879959f29f4c6e1ac00000000000000000000fc5ff08ed9ac0153008b983f087148518bea73cb9afbf5c7051dc11308009e06867f3917de0e8c3a568069e7f3080000000000000084c2ab00000000f131dd7699e7d56e979e0a36113001937a3e19230a52ec00009e56d1da3a24d3c5d15d78a5f5069e2ed8850f472cf3755de8a4805238b331b70b28443b3cb95096905247488f096d27fa7c26525617c2bc79e7a74e2f6a23", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) sendmsg(0xffffffffffffffff, 0x0, 0x20000088) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) (rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) 2.320753633s ago: executing program 4 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000002f8ba8ce57942cfce82d09aaac058da318ef416edeedfa31d55974995ed88f629b388bea4ba0211963922333c407e5b6b2e88dcdd89c8ae2ac412fb07152d0c237ba1eb579ae6e207a56f78b540f1a614a46fabf5c5594ab0b689bec3f1f8f1b8ae89d281132e77605de0a3dc1de2878f0e7ca3e4b2893eba7db8c58dcc48575ffeefe4d0a15d1773385218ef69419c0b359c62363532e846b255c9ea12fd1f740e5ab4c84dc2684c9e04e0be5a5d865d6b23ff6178c35854fcdaeb670b6daa6210acc2d43f2521309c94a48cd1df1847a4af3fbb27d28427364a0", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="340600407c000000de9195b40087b81db4af6ada79361d216e963c87", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800020003000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4000100) (async) r3 = socket(0x2b, 0xa, 0xffffffff) syz_emit_ethernet(0x82, &(0x7f0000000a40)=ANY=[], 0x0) sendmmsg(r3, 0x0, 0x0, 0x20000090) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x1c0, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xf, 0x9fbd, 0x8000, 0x0, 0x7, 0x400, 0x3}}, {0xa, 0x2, [0x1c, 0xd2, 0x99]}}, {{0x1c, 0x1, {0xb, 0x1, 0x9, 0x7f0bc9e2, 0x2, 0x3, 0x5}}, {0x4}}]}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0xc, 0x5, 0xfff, 0x2, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0xb]}}, {{0x1c, 0x1, {0xe, 0xde, 0x2, 0xe, 0x2, 0x8000, 0x4, 0x4}}, {0xc, 0x2, [0x96, 0x2, 0xe1a5, 0x7]}}, {{0x1c, 0x1, {0x4, 0x6, 0x100, 0x7b3, 0x1, 0x1, 0x9, 0x4}}, {0xc, 0x2, [0x1, 0x101, 0x200, 0x12d]}}, {{0x1c, 0x1, {0x7, 0x16, 0x35, 0x1, 0x2, 0x6, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xe9, 0x8, 0x4b, 0x1, 0x0, 0x8, 0x6}}, {0x4}}, {{0x1c, 0x1, {0xfc, 0xf7, 0xc, 0xb88, 0x2, 0x3ff, 0x4, 0xa}}, {0x18, 0x2, [0xee3, 0xffff, 0x7f, 0x2, 0x0, 0x4, 0x5, 0x9, 0x1ff, 0x6]}}, {{0x1c, 0x1, {0x0, 0x6, 0x2, 0xffffff01, 0x1, 0x5, 0x7, 0x5}}, {0xe, 0x2, [0x8001, 0xd4, 0x4, 0x841, 0x5]}}, {{0x1c, 0x1, {0x7f, 0x2, 0x400, 0x7fff, 0x2, 0x9, 0x3ff, 0x1}}, {0x6, 0x2, [0x74]}}]}]}, 0x1c0}}, 0x0) (async) socket(0x18, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) (async, rerun: 32) close(0x3) (rerun: 32) connect$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000f, 0xc3072, 0xffffffffffffffff, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) sendmsg$can_bcm(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x1d, r9}, 0x10, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="02000000e20400000500002200000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRESDEC=r0, @ANYRES32=r4, @ANYBLOB="031700ef38c184854d7b585fe7b24edcc7c6bb0bc639"], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x44884) socket$xdp(0x2c, 0x3, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r10, 0x5421, &(0x7f0000000100)=0x5) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d68756765746c62209a3ad114751b5858d81673b3177ff8ce3c72d4712755066321c052d6ff21a0d825292817e7421378e6d4f665502ad01bb61ec317cb82df95422dae6dcae37d3fbc5baf997d452cafc18962fb0e5d63125f82b790ef249ec10a32bc15d22bb92bc5620618"], 0x9) 2.170292727s ago: executing program 7 (id=1919): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x2}}, 0x10) socket$rds(0x15, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x47) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a0010000000400bb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x2}}, 0x10) (async) socket$rds(0x15, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) accept(r1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x47) (async) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a0010000000400bb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) (async) 2.099511273s ago: executing program 4 (id=1920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x39) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNATTACHFILTER(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) 1.913384942s ago: executing program 4 (id=1921): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x0, 0xfffc}, 0x8) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xffff, 0x7, 0xdd5, 0x1e69}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000100)) 1.890568769s ago: executing program 6 (id=1922): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x5d) read(r0, 0x0, 0x0) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) socket(0xe446cd3f98920769, 0x6, 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.703320642s ago: executing program 7 (id=1923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) socketpair(0x5, 0x4, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) bind$802154_raw(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.577262306s ago: executing program 7 (id=1924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050025bd7000fddbdf252e00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x408c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='irq_handler_entry\x00', r8}, 0x18) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000026bd7000ffffffff0a140000030000070000000025000100ff0200000000000000000000000d000100000000"], 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x44}}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x1, 0x700, 0x3, 0xfffffff8, {{0x14, 0x4, 0x2, 0xa, 0x50, 0x64, 0x0, 0x3, 0x29, 0x0, @empty, @private=0xa010100, {[@timestamp={0x44, 0xc, 0x4f, 0x0, 0x5, [0x1ff, 0x6]}, @end, @cipso={0x86, 0x17, 0x2, [{0x5, 0x11, "5629610898dd62758a17a4fe9f8473"}]}, @ssrr={0x89, 0x13, 0x8a, [@multicast1, @broadcast, @multicast1, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r0, 0x4, 0x1a, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="03100000c8164050b6eb9bf036ba7627aa018934cf1d143beb104b7b89ba7d0047087ebf53b5d15a9adda6aea0f71fe395656b46a536086f22d3480a7060a75c48546c8e25a2d558a00a58a2962458671972a8572feb46f6d86c428f6c5d0d14a8c6b4c29cd9", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0100"/28], 0x50) 1.242690908s ago: executing program 7 (id=1925): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0x0, 0x80012d58, 0x12d59}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x11}}, @RTA_DST={0x8, 0x1, @multicast2}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 815.154672ms ago: executing program 6 (id=1926): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4008840) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x80000001) (async) connect$phonet_pipe(r2, &(0x7f00000003c0)={0x23, 0x6, 0xff, 0x9}, 0x10) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x7, 0xc, 0x7, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x4400c030) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010102, @in=@local, 0xfffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x20045009}, 0x4040114) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7], 0x4c}}, 0x800) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c0002"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 446.726997ms ago: executing program 4 (id=1927): r0 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@ax25={{0x3, @null}, [@rose, @remote, @bcast, @remote, @netrom, @null, @default]}, &(0x7f0000000300)=0x80, 0x800) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d270015000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a0000ad1818853422e45d000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x204e22}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008080}, 0xc1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_CS_CRC8={0x11e, 0x6, {0x31, 0x2c, 0x2d, 0xfe, 0x4, "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", 0x1, "3f4e0c272024116890a9108b9adc85dae91aba17"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x3, 0x3, 0x0, 0x0, "b377781aeecabf6b"}, 0x2}}]}, 0x14c}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004004}, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x1}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={r5, 0x5, 0x1, 0x5, 0x1, 0xffff8000}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r6], &(0x7f0000000400)='syzkaller\x00', 0x0, 0xfffffffffffffea8}, 0x94) 440.823173ms ago: executing program 6 (id=1928): unshare(0x26020480) (async) unshare(0x700) (async, rerun: 32) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000280)=0x4) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x80}, {0x0, 0xfffffffffffffffb, 0x6, 0xfffffffffffffffe, 0x4000000000000000, 0x80000000000}, {0xfffffffffffffffc, 0x0, 0x0, 0x7}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00', 0x0, 0x1, 0x0, 0x0, 0x7, 0xfffffffa, 0x1002}}, 0xe8) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000006380)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x94, 0x0, 0x0, 0x4}, {0x6}]}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, 0x1410, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) close(0x3) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES8], 0x98}}, 0x0) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) syz_open_procfs$namespace(0x0, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 186.764115ms ago: executing program 4 (id=1929): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0xfff7, &(0x7f0000000000)='ip6_vti0\x00', 0x1000, 0xfffffffffffffff9, 0x6}) recvfrom(r1, &(0x7f00000001c0)=""/16, 0x10, 0x40000000, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) 115.142163ms ago: executing program 6 (id=1930): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) (async) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x129, 0x40000, 0x25dfdbff, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b408862bfc92a93ab300000000000073119900000600008510000002000000b7000000000000009500c200e20000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 6 (id=1931): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x15, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x8000000}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xc, 0x1, 0xba6, 0x6, 0x4, 0xffff, 0x10000, 0x7ff, 0xffff, 0x8001, 0x5, 0x1ff, 0x1ff, 0x7, 0x6, 0x401, 0x7c, 0x1000, 0x0, 0x1, 0x5, 0x7fffffff, 0xe28, 0x1, 0xe, 0x0, 0x90a, 0xffffffff, 0x101, 0x8, 0x2, 0x8, 0xffff, 0x7, 0x8, 0x0, 0x2, 0xb, 0x76b, 0xffffffff, 0x5, 0x9, 0x3, 0x2, 0x1, 0x8, 0x9, 0x3ff, 0x3, 0x9, 0x9, 0x100, 0x3, 0x66a05780, 0x9ef6, 0x800, 0x6, 0x8, 0x6, 0x7fffffff, 0x200, 0x1000, 0x2, 0xd, 0xe3, 0x8, 0x1e4b1e6, 0x7, 0x2, 0x2, 0x0, 0x2, 0x0, 0x10, 0x9, 0x8, 0x9, 0x80000000, 0x2, 0xff, 0x4, 0x9, 0x8, 0x10001, 0x7, 0xfffffff5, 0x7f, 0x1, 0xe67, 0x8, 0x8, 0x7f62, 0x9, 0x6, 0x7, 0x5, 0x4, 0x4, 0x81, 0x0, 0x835, 0x7, 0x1, 0xcf, 0x1, 0x7fff, 0x8, 0x0, 0x7, 0x2, 0x4, 0x5, 0x9, 0x8fa, 0x9b, 0x3, 0x34e6, 0x9, 0x6, 0x401, 0xfffff707, 0x1ff, 0x1, 0xb, 0x8, 0x8, 0x4, 0x10, 0x0, 0x4bb84cc9, 0x3, 0xffffffd2, 0x5, 0x81, 0x9de, 0xe2, 0x8, 0x8, 0x8, 0x7fffffff, 0x7, 0x31, 0x1, 0xa, 0xa, 0x4, 0x9, 0x3, 0x7, 0x37, 0x62d, 0x8, 0x9, 0x5, 0x7, 0x3, 0xfffffffd, 0x3, 0x0, 0xd2c, 0x9, 0x2, 0x72, 0x7, 0xc, 0x1f, 0x10, 0x4260, 0xdc00000, 0xf, 0x9, 0x7, 0x5, 0x7, 0x800, 0x2, 0x7fff, 0x0, 0x200, 0x9, 0x200, 0xff1c, 0x5a, 0x426a, 0x9681, 0x3, 0x0, 0x7fffffff, 0x80000000, 0x9, 0x0, 0x2a, 0x1000, 0xfe, 0xfff, 0x6, 0x5, 0x7f, 0x0, 0x936, 0x8, 0x5, 0x8, 0x80000000, 0x100, 0x9, 0x5, 0xf2, 0x2, 0xffffffff, 0x3, 0x45, 0x1, 0x4, 0x6, 0x6, 0x8001, 0x2, 0x9, 0x5, 0xd, 0x0, 0xfffff5a9, 0x4, 0xa78, 0x80, 0x3c, 0x3, 0x0, 0x3, 0x2, 0x80, 0x3ff, 0xa27, 0x5, 0x3, 0xc, 0xa, 0x0, 0x4, 0x100, 0x7fffffff, 0xede7, 0x33, 0x2, 0x401, 0x9, 0x1, 0x2, 0x1000, 0x9, 0x2, 0x6, 0x2, 0x4, 0x4e9]}]}}]}, 0x434}}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): team_slave_0 added [ 229.900304][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'. [ 230.017854][T10421] team0: Port device team_slave_1 added [ 230.218842][ T5917] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 230.254820][T10421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.267562][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.297569][T10421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.303656][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 230.324642][T10532] netlink: 'syz.0.1284': attribute type 3 has an invalid length. [ 230.338484][T10421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.361427][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.447780][T10421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.806113][T10421] hsr_slave_0: entered promiscuous mode [ 230.828194][T10421] hsr_slave_1: entered promiscuous mode [ 230.838474][T10421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.847607][T10421] Cannot create hsr debugfs directory [ 230.985405][T10557] netlink: 'syz.4.1291': attribute type 2 has an invalid length. [ 231.230000][T10564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1294'. [ 231.332773][T10567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1294'. [ 231.403500][T10421] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.554698][ T5842] Bluetooth: hci3: command tx timeout [ 231.711469][T10421] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.762537][T10588] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20003 [ 231.834523][T10421] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.938226][T10421] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.016940][T10597] IPv6: sit1: Disabled Multicast RS [ 232.108693][T10593] lo speed is unknown, defaulting to 1000 [ 232.358148][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1305'. [ 232.368842][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1305'. [ 232.369065][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1305'. [ 232.403813][T10604] macvtap1: entered allmulticast mode [ 232.405969][T10607] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1305'. [ 232.409511][T10604] veth0_macvtap: entered allmulticast mode [ 232.586010][T10421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.613372][T10421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.644873][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1307'. [ 232.690909][T10421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.718085][T10616] sch_tbf: burst 5 is lower than device virt_wifi0 mtu (1514) ! [ 232.800560][T10421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.843216][T10610] lo speed is unknown, defaulting to 1000 [ 233.006651][T10630] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1311'. [ 233.393133][ T9082] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 233.632498][ T5842] Bluetooth: hci3: command tx timeout [ 233.776091][T10421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.889486][T10655] lo speed is unknown, defaulting to 1000 [ 234.049802][T10421] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.173322][T10653] lo speed is unknown, defaulting to 1000 [ 234.189516][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.196862][ T9084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.346012][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.353271][ T9084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.465805][T10421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.490033][T10673] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 235.265484][T10421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.375176][T10708] ip6gre1: entered allmulticast mode [ 235.667069][T10718] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1330'. [ 235.674358][T10421] veth0_vlan: entered promiscuous mode [ 235.689462][T10421] veth1_vlan: entered promiscuous mode [ 235.823044][T10421] veth0_macvtap: entered promiscuous mode [ 235.851687][T10421] veth1_macvtap: entered promiscuous mode [ 235.886611][T10421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.911878][T10421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.948115][ T9082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.977931][ T9082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.004301][ T9082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.015996][ T9082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.025635][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1333'. [ 236.252576][T10742] tipc: Enabling of bearer rejected, failed to enable media [ 236.262867][ T9082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.274439][ T9082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.397208][ T9073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.421449][ T9073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.513375][T10749] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1337'. [ 236.587414][T10751] xt_ecn: cannot match TCP bits for non-tcp packets [ 236.617599][T10751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1338'. [ 236.633181][T10751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1338'. [ 236.931809][T10761] netlink: 'syz.4.1340': attribute type 1 has an invalid length. [ 237.292753][T10771] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.388857][ T9084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.473522][T10775] IPVS: Unknown mcast interface: bridge0 [ 237.556635][T10772] lo speed is unknown, defaulting to 1000 [ 237.634215][ T9084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.931047][T10781] syzkaller1: entered promiscuous mode [ 237.936593][T10781] syzkaller1: entered allmulticast mode [ 237.952059][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1348'. [ 238.204317][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.213556][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.222524][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.232303][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.241212][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.630277][T10793] lo speed is unknown, defaulting to 1000 [ 238.709632][ T9084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.965627][ T9084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.995672][T10812] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1356'. [ 239.005450][T10812] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1356'. [ 239.181530][ T9087] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 239.554588][ T9084] bridge_slave_1: left allmulticast mode [ 239.583068][ T9084] bridge_slave_1: left promiscuous mode [ 239.590351][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.643831][ T9084] bridge_slave_0: left allmulticast mode [ 239.650248][ T9084] bridge_slave_0: left promiscuous mode [ 239.658891][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.685262][T10842] xt_TCPMSS: Only works on TCP SYN packets [ 239.698489][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1363'. [ 239.793275][ T5924] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 240.273254][ T5842] Bluetooth: hci3: command tx timeout [ 240.395101][ T9084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.411509][ T9084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.422353][ T9084] bond0 (unregistering): Released all slaves [ 240.472335][T10833] 8021q: VLANs not supported on caif0 [ 240.509618][T10793] chnl_net:caif_netlink_parms(): no params data found [ 240.700686][T10867] netlink: 'syz.4.1370': attribute type 1 has an invalid length. [ 240.708495][T10867] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1370'. [ 240.787152][T10872] netlink: 'syz.4.1370': attribute type 1 has an invalid length. [ 240.856049][T10872] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1370'. [ 241.504915][T10793] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.534632][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.549440][T10793] bridge_slave_0: entered allmulticast mode [ 241.573959][T10793] bridge_slave_0: entered promiscuous mode [ 241.588478][T10793] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.628276][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.655854][T10793] bridge_slave_1: entered allmulticast mode [ 241.710969][T10793] bridge_slave_1: entered promiscuous mode [ 241.758908][T10909] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1377'. [ 241.811828][T10909] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1377'. [ 241.857080][ T9084] hsr_slave_0: left promiscuous mode [ 241.878612][ T9084] hsr_slave_1: left promiscuous mode [ 241.886886][ T9084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.896962][ T9084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.907438][ T9084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.915211][ T9084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.001191][ T9084] veth1_macvtap: left promiscuous mode [ 242.014267][ T9084] veth0_macvtap: left promiscuous mode [ 242.022869][ T9084] veth1_vlan: left promiscuous mode [ 242.028591][ T9084] veth0_vlan: left promiscuous mode [ 242.202741][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1380'. [ 242.350602][ T5842] Bluetooth: hci3: command tx timeout [ 242.941047][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1383'. [ 242.950212][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 243.122254][ T9084] team0 (unregistering): Port device team_slave_1 removed [ 243.168330][ T9084] team0 (unregistering): Port device team_slave_0 removed [ 243.738924][T10793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.838293][T10793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.023975][T10793] team0: Port device team_slave_0 added [ 244.061568][T10941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1384'. [ 244.076174][T10947] ip6gre1: entered allmulticast mode [ 244.118416][T10793] team0: Port device team_slave_1 added [ 244.257891][T10957] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1389'. [ 244.279235][T10793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.291130][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.357709][T10961] xt_hashlimit: size too large, truncated to 1048576 [ 244.381133][T10793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.416498][T10963] : renamed from vxcan1 (while UP) [ 244.434428][ T5842] Bluetooth: hci3: command tx timeout [ 244.461078][T10793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.480014][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.517024][T10793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.677921][T10969] nbd: must specify at least one socket [ 244.704174][T10793] hsr_slave_0: entered promiscuous mode [ 244.727201][T10793] hsr_slave_1: entered promiscuous mode [ 244.750217][T10793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.770650][T10793] Cannot create hsr debugfs directory [ 244.914995][ T8881] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 244.991378][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1395'. [ 245.656287][T11007] lo speed is unknown, defaulting to 1000 [ 245.930013][T11015] lo speed is unknown, defaulting to 1000 [ 246.192494][ T9079] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 246.225185][ T9084] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.359058][T11007] netlink: 'syz.0.1403': attribute type 16 has an invalid length. [ 246.360250][T10793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.368425][T11007] netlink: 'syz.0.1403': attribute type 17 has an invalid length. [ 246.387353][T10793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 246.469821][T11007] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 246.478348][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1409'. [ 246.498019][T10793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 246.517690][T10793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.526250][ T5842] Bluetooth: hci3: command tx timeout [ 247.117811][T10793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.186924][T10793] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.244928][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.252301][ T8881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.279270][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.286893][ T8881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.325463][T11065] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1415'. [ 247.694153][T11078] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1418'. [ 247.705827][T11079] netlink: 'syz.4.1419': attribute type 10 has an invalid length. [ 247.740245][T11079] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1419'. [ 247.786988][T11078] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1418'. [ 247.842583][T11079] bridge0: port 1(dummy0) entered blocking state [ 247.901785][T11079] bridge0: port 1(dummy0) entered disabled state [ 247.923685][T11079] dummy0: entered allmulticast mode [ 247.963554][T11079] dummy0: left allmulticast mode [ 247.969163][T11079] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 248.466868][T10793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.520341][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1425'. [ 248.564719][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1425'. [ 248.567964][T10793] veth0_vlan: entered promiscuous mode [ 248.597685][T11099] netlink: 'syz.5.1425': attribute type 5 has an invalid length. [ 248.613625][T10793] veth1_vlan: entered promiscuous mode [ 248.705020][T10793] veth0_macvtap: entered promiscuous mode [ 248.741094][T11105] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1426'. [ 248.769071][T10793] veth1_macvtap: entered promiscuous mode [ 248.819627][T11116] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1428'. [ 248.859353][T10793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.870280][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1428'. [ 248.940157][T10793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.001150][ T9073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.010870][T11122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.048773][ T9073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.097340][ T9073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.137721][ T9073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.328728][ T9084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.372521][ T9084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.478424][ T9076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.501348][ T9076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.292732][T11174] netlink: 'syz.5.1445': attribute type 4 has an invalid length. [ 250.318765][T11174] : renamed from bond0 (while UP) [ 250.679017][ T9084] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 250.748259][ T9076] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.933917][ T9076] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.235605][T11191] batadv_slave_1: entered promiscuous mode [ 251.287497][ T9076] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.313325][ T8881] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 251.395804][T11191] syzkaller1: entered promiscuous mode [ 251.421324][T11191] syzkaller1: entered allmulticast mode [ 251.484018][ T9076] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.590954][T11196] __nla_validate_parse: 4 callbacks suppressed [ 251.590975][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 251.614053][T11190] batadv_slave_1: left promiscuous mode [ 251.870560][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1452'. [ 251.901131][ T9076] bridge_slave_1: left allmulticast mode [ 251.906848][ T9076] bridge_slave_1: left promiscuous mode [ 251.915424][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.943406][ T9076] bridge_slave_0: left allmulticast mode [ 251.952210][ T9076] bridge_slave_0: left promiscuous mode [ 251.968107][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.005475][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.016240][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.029046][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.061277][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.070761][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.910279][ T9076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.938463][ T9076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.964074][ T9076] bond0 (unregistering): Released all slaves [ 253.013940][T11200] vlan2: entered promiscuous mode [ 253.019046][T11200] team0: entered promiscuous mode [ 253.039862][T11200] team_slave_0: entered promiscuous mode [ 253.071320][T11200] team_slave_1: entered promiscuous mode [ 253.318589][T11201] lo speed is unknown, defaulting to 1000 [ 253.925144][ T9076] hsr_slave_0: left promiscuous mode [ 253.958904][ T9076] hsr_slave_1: left promiscuous mode [ 253.984554][ T9076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.004594][ T9076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.016468][ T9076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.041200][ T9076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.110838][ T5855] Bluetooth: hci3: command tx timeout [ 254.112423][ T9076] veth1_macvtap: left promiscuous mode [ 254.154136][ T9076] veth0_macvtap: left promiscuous mode [ 254.183737][ T9076] veth1_vlan: left promiscuous mode [ 254.208587][ T9076] veth0_vlan: left promiscuous mode [ 255.564115][ T9076] team0 (unregistering): Port device team_slave_1 removed [ 255.688181][ T9076] team0 (unregistering): Port device team_slave_0 removed [ 255.797541][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.190866][ T5855] Bluetooth: hci3: command tx timeout [ 256.434588][ T9073] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 256.544374][T11229] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1460'. [ 256.561052][T11229] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1460'. [ 256.825010][ T9073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.867397][ T9073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.941251][T11201] chnl_net:caif_netlink_parms(): no params data found [ 257.074877][ T9073] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 257.571735][T11201] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.580128][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.590731][T11201] bridge_slave_0: entered allmulticast mode [ 257.595215][T11270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1471'. [ 257.606508][T11201] bridge_slave_0: entered promiscuous mode [ 257.630149][T11201] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.649095][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.680130][T11201] bridge_slave_1: entered allmulticast mode [ 257.688293][T11201] bridge_slave_1: entered promiscuous mode [ 257.769117][ T5877] IPVS: starting estimator thread 0... [ 257.870614][T11274] IPVS: using max 30 ests per chain, 72000 per kthread [ 257.879919][T11278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1474'. [ 257.925256][T11284] xt_socket: unknown flags 0xfc [ 257.946091][T11201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.007399][T11201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.084263][T11288] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 258.198685][T11201] team0: Port device team_slave_0 added [ 258.271364][ T5855] Bluetooth: hci3: command tx timeout [ 258.349110][T11201] team0: Port device team_slave_1 added [ 258.361434][T11302] netlink: 'syz.5.1481': attribute type 12 has an invalid length. [ 258.369634][T11302] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1481'. [ 258.435575][T11295] lo speed is unknown, defaulting to 1000 [ 258.608719][T11201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.621892][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.668136][T11201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.713175][T11201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.728980][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.767717][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 258.777128][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 258.788819][T11314] netlink: 'syz.0.1485': attribute type 18 has an invalid length. [ 258.816161][T11201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.844408][T11317] netlink: 'syz.0.1485': attribute type 10 has an invalid length. [ 258.921283][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 258.931024][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 258.939937][T11319] netlink: 'syz.0.1485': attribute type 18 has an invalid length. [ 259.006848][T11317] team0: Port device dummy0 added [ 259.042211][T11310] lo speed is unknown, defaulting to 1000 [ 259.226253][T11201] hsr_slave_0: entered promiscuous mode [ 259.237094][T11201] hsr_slave_1: entered promiscuous mode [ 259.248994][T11201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.270376][T11201] Cannot create hsr debugfs directory [ 259.431954][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 259.455811][T11339] netlink: 716 bytes leftover after parsing attributes in process `syz.4.1493'. [ 259.949120][T11348] lo speed is unknown, defaulting to 1000 [ 260.134803][T11354] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 260.193335][T11354] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 260.283458][T11356] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1499'. [ 260.351046][ T5855] Bluetooth: hci3: command tx timeout [ 260.585951][T11367] lo speed is unknown, defaulting to 1000 [ 260.594460][T11374] netlink: 'syz.0.1503': attribute type 3 has an invalid length. [ 260.891717][T11382] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 260.960940][T11201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.046254][T11201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.115546][T11391] FAULT_INJECTION: forcing a failure. [ 261.115546][T11391] name failslab, interval 1, probability 0, space 0, times 0 [ 261.128330][T11391] CPU: 1 UID: 0 PID: 11391 Comm: syz.4.1507 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 261.128362][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.128376][T11391] Call Trace: [ 261.128384][T11391] [ 261.128395][T11391] dump_stack_lvl+0x189/0x250 [ 261.128434][T11391] ? __pfx____ratelimit+0x10/0x10 [ 261.128461][T11391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.128493][T11391] ? __pfx__printk+0x10/0x10 [ 261.128522][T11391] ? __lock_acquire+0xab9/0xd20 [ 261.128557][T11391] should_fail_ex+0x414/0x560 [ 261.128590][T11391] should_failslab+0xa8/0x100 [ 261.128622][T11391] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 261.128648][T11391] ? pfn_valid+0x125/0x4d0 [ 261.128675][T11391] ? pfn_valid+0x125/0x4d0 [ 261.128702][T11391] ? pfn_valid+0x125/0x4d0 [ 261.128733][T11391] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 261.128773][T11391] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 261.128814][T11391] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 261.128840][T11391] ? bpf_dispatcher_xdp+0x800/0x1000 [ 261.128861][T11391] ? bpf_dispatcher_xdp+0x800/0x1000 [ 261.128935][T11391] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 261.128972][T11391] ? _copy_from_user+0x94/0xb0 [ 261.128993][T11391] ? bpf_test_init+0x133/0x170 [ 261.129016][T11391] ? xdp_convert_md_to_buff+0x5b/0x330 [ 261.129045][T11391] bpf_prog_test_run_xdp+0x713/0x1000 [ 261.129091][T11391] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 261.129124][T11391] ? __fget_files+0x2a/0x420 [ 261.129154][T11391] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 261.129181][T11391] bpf_prog_test_run+0x2c4/0x340 [ 261.129216][T11391] __sys_bpf+0x4a4/0x860 [ 261.129246][T11391] ? __pfx___sys_bpf+0x10/0x10 [ 261.129288][T11391] ? ksys_write+0x22a/0x250 [ 261.129311][T11391] ? __pfx_ksys_write+0x10/0x10 [ 261.129344][T11391] ? rcu_is_watching+0x15/0xb0 [ 261.129385][T11391] __x64_sys_bpf+0x7c/0x90 [ 261.129411][T11391] do_syscall_64+0xfa/0x3b0 [ 261.129436][T11391] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.129459][T11391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.129490][T11391] ? clear_bhb_loop+0x60/0xb0 [ 261.129515][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.129542][T11391] RIP: 0033:0x7fdfebb8e929 [ 261.129561][T11391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.129579][T11391] RSP: 002b:00007fdfecad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.129608][T11391] RAX: ffffffffffffffda RBX: 00007fdfebdb5fa0 RCX: 00007fdfebb8e929 [ 261.129624][T11391] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 261.129637][T11391] RBP: 00007fdfecad6090 R08: 0000000000000000 R09: 0000000000000000 [ 261.129649][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.129662][T11391] R13: 0000000000000000 R14: 00007fdfebdb5fa0 R15: 00007ffe4a111538 [ 261.129695][T11391] [ 261.457596][T11201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.513291][T11201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.709999][T11201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.735255][T11201] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.796938][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.804212][ T8881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.832903][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.840178][ T8881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.194139][ T9076] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 262.834135][ T9084] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 262.872779][T11201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.012197][T11201] veth0_vlan: entered promiscuous mode [ 263.045092][T11201] veth1_vlan: entered promiscuous mode [ 263.125714][T11201] veth0_macvtap: entered promiscuous mode [ 263.150288][T11201] veth1_macvtap: entered promiscuous mode [ 263.209809][T11201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.256541][T11201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.311914][ T9082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.343745][T11470] __nla_validate_parse: 5 callbacks suppressed [ 263.343766][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 263.380316][ T9082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.383288][T11470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1525'. [ 263.419295][ T9082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.442311][ T9082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.488718][T11475] netlink: 'syz.4.1525': attribute type 21 has an invalid length. [ 263.494443][T11470] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1525'. [ 263.547746][T11475] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1525'. [ 263.728636][T11483] lo speed is unknown, defaulting to 1000 [ 263.878607][T11495] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1531'. [ 264.002435][ T9073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.020471][ T9073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.206165][ T8881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.239105][ T8881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.001317][T11540] !: renamed from dummy0 (while UP) [ 265.416986][T11567] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1544'. [ 265.579097][T11556] lo speed is unknown, defaulting to 1000 [ 266.017313][ T9076] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.232547][ T9076] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.360788][T11584] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1548'. [ 266.748175][T11583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1546'. [ 266.934180][ T9076] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.966221][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.976007][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.990106][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.000191][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.009326][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 267.118135][T11600] lo speed is unknown, defaulting to 1000 [ 267.289519][ T9076] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.298436][T11614] netlink: 'syz.6.1554': attribute type 5 has an invalid length. [ 267.953138][ T9084] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 268.167383][T11635] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.257188][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1564'. [ 268.286966][T11654] netlink: 'syz.4.1565': attribute type 10 has an invalid length. [ 268.307800][T11654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1565'. [ 268.378081][T11635] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.403024][T11654] bridge0: port 1(0!) entered blocking state [ 268.409518][T11654] bridge0: port 1(0!) entered disabled state [ 268.417785][T11654] !: entered allmulticast mode [ 268.425605][T11654] !: left allmulticast mode [ 268.449135][T11654] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 268.505361][ T9076] bridge_slave_1: left allmulticast mode [ 268.511762][ T9076] bridge_slave_1: left promiscuous mode [ 268.519680][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.536533][ T9076] bridge_slave_0: left allmulticast mode [ 268.546894][ T9076] bridge_slave_0: left promiscuous mode [ 268.553534][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.592770][ T9079] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 269.071522][ T5855] Bluetooth: hci3: command tx timeout [ 269.083890][ T9076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.096216][ T9076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.115092][ T9076] bond0 (unregistering): Released all slaves [ 269.203932][T11635] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.356723][T11600] chnl_net:caif_netlink_parms(): no params data found [ 269.404664][T11635] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.442314][T11674] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1568'. [ 269.530350][T11654] lo speed is unknown, defaulting to 1000 [ 269.813542][ T9076] hsr_slave_0: left promiscuous mode [ 269.819808][ T9076] hsr_slave_1: left promiscuous mode [ 269.841798][ T9076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.850281][ T9076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.871123][T11691] netlink: 'syz.5.1573': attribute type 1 has an invalid length. [ 269.880324][ T9076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.888660][ T9076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.918265][ T9076] veth1_macvtap: left promiscuous mode [ 269.924298][ T9076] veth0_macvtap: left promiscuous mode [ 269.929970][ T9076] veth1_vlan: left promiscuous mode [ 269.935694][ T9076] veth0_vlan: left promiscuous mode [ 270.565007][ T9076] team0 (unregistering): Port device team_slave_1 removed [ 270.615106][ T9076] team0 (unregistering): Port device team_slave_0 removed [ 271.161074][ T5855] Bluetooth: hci3: command tx timeout [ 271.247880][T11691] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 271.249192][ T8865] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.295047][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1574'. [ 271.342391][T11600] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.358343][T11600] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.377655][T11600] bridge_slave_0: entered allmulticast mode [ 271.421953][T11600] bridge_slave_0: entered promiscuous mode [ 271.437793][T11697] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 271.458724][T11702] netlink: 'syz.5.1575': attribute type 1 has an invalid length. [ 271.467277][T11702] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1575'. [ 271.489947][T11600] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.498738][T11600] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.507901][T11600] bridge_slave_1: entered allmulticast mode [ 271.518594][T11600] bridge_slave_1: entered promiscuous mode [ 271.834707][ T8865] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.905015][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1577'. [ 271.922972][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1577'. [ 271.985658][T11600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.021063][T11715] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1579'. [ 272.022275][T11600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.041343][ T9084] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.147213][ T9075] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.192513][T11600] team0: Port device team_slave_0 added [ 272.202200][T11718] Cannot find add_set index 2 as target [ 272.228550][T11600] team0: Port device team_slave_1 added [ 272.427862][T11729] FAULT_INJECTION: forcing a failure. [ 272.427862][T11729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.456044][T11600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.470335][T11729] CPU: 1 UID: 0 PID: 11729 Comm: syz.5.1584 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 272.470357][T11729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.470366][T11729] Call Trace: [ 272.470373][T11729] [ 272.470385][T11729] dump_stack_lvl+0x189/0x250 [ 272.470422][T11729] ? __pfx____ratelimit+0x10/0x10 [ 272.470447][T11729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.470503][T11729] ? __pfx__printk+0x10/0x10 [ 272.470533][T11729] ? __might_fault+0xb0/0x130 [ 272.470565][T11729] should_fail_ex+0x414/0x560 [ 272.470597][T11729] _copy_from_user+0x2d/0xb0 [ 272.470619][T11729] ___sys_sendmsg+0x158/0x2a0 [ 272.470653][T11729] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.470724][T11729] ? __fget_files+0x2a/0x420 [ 272.470747][T11729] ? __fget_files+0x3a0/0x420 [ 272.470780][T11729] __sys_sendmmsg+0x227/0x430 [ 272.470818][T11729] ? __pfx___sys_sendmmsg+0x10/0x10 [ 272.470846][T11729] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 272.470900][T11729] ? ksys_write+0x22a/0x250 [ 272.470922][T11729] ? __pfx_ksys_write+0x10/0x10 [ 272.470938][T11729] ? rcu_is_watching+0x15/0xb0 [ 272.470977][T11729] __x64_sys_sendmmsg+0xa0/0xc0 [ 272.471010][T11729] do_syscall_64+0xfa/0x3b0 [ 272.471034][T11729] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.471057][T11729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.471076][T11729] ? clear_bhb_loop+0x60/0xb0 [ 272.471101][T11729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.471121][T11729] RIP: 0033:0x7f02a018e929 [ 272.471140][T11729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.471156][T11729] RSP: 002b:00007f029dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.471177][T11729] RAX: ffffffffffffffda RBX: 00007f02a03b5fa0 RCX: 00007f02a018e929 [ 272.471192][T11729] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 272.471206][T11729] RBP: 00007f029dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.471217][T11729] R10: 8848000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.471229][T11729] R13: 0000000000000000 R14: 00007f02a03b5fa0 R15: 00007ffe6a4675a8 [ 272.471261][T11729] [ 272.471321][T11600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.622640][T11736] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 272.631239][T11600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.749334][T11600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.762823][T11600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.794766][T11600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.027358][T11600] hsr_slave_0: entered promiscuous mode [ 273.049775][T11600] hsr_slave_1: entered promiscuous mode [ 273.065589][T11600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.075202][ T9079] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 273.090665][T11600] Cannot create hsr debugfs directory [ 273.231352][ T5855] Bluetooth: hci3: command tx timeout [ 273.380198][T11747] team0: Port device dummy0 removed [ 273.499344][T11753] team0: Mode changed to "broadcast" [ 273.518321][T11747] vlan0: entered promiscuous mode [ 273.529780][T11747] bond0: entered promiscuous mode [ 273.639038][ T9076] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 273.963954][T11770] FAULT_INJECTION: forcing a failure. [ 273.963954][T11770] name failslab, interval 1, probability 0, space 0, times 0 [ 273.978539][T11772] netlink: 'syz.4.1597': attribute type 1 has an invalid length. [ 273.988008][T11770] CPU: 0 UID: 0 PID: 11770 Comm: syz.6.1596 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 273.988039][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.988052][T11770] Call Trace: [ 273.988064][T11770] [ 273.988074][T11770] dump_stack_lvl+0x189/0x250 [ 273.988112][T11770] ? __pfx____ratelimit+0x10/0x10 [ 273.988136][T11770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.988166][T11770] ? __pfx__printk+0x10/0x10 [ 273.988193][T11770] ? __pfx___might_resched+0x10/0x10 [ 273.988231][T11770] should_fail_ex+0x414/0x560 [ 273.988263][T11770] should_failslab+0xa8/0x100 [ 273.988288][T11770] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 273.988308][T11770] ? __alloc_skb+0x112/0x2d0 [ 273.988341][T11770] __alloc_skb+0x112/0x2d0 [ 273.988373][T11770] netlink_sendmsg+0x5c6/0xb30 [ 273.988410][T11770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.988441][T11770] ? aa_sock_msg_perm+0x94/0x160 [ 273.988470][T11770] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.988496][T11770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.988524][T11770] __sock_sendmsg+0x21c/0x270 [ 273.988551][T11770] ____sys_sendmsg+0x52d/0x830 [ 273.988588][T11770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.988639][T11770] ? import_iovec+0x74/0xa0 [ 273.988664][T11770] ___sys_sendmsg+0x21f/0x2a0 [ 273.988697][T11770] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.988768][T11770] ? __fget_files+0x2a/0x420 [ 273.988790][T11770] ? __fget_files+0x3a0/0x420 [ 273.988823][T11770] __sys_sendmmsg+0x227/0x430 [ 273.988861][T11770] ? __pfx___sys_sendmmsg+0x10/0x10 [ 273.988889][T11770] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 273.988945][T11770] ? ksys_write+0x22a/0x250 [ 273.988966][T11770] ? __pfx_ksys_write+0x10/0x10 [ 273.988982][T11770] ? rcu_is_watching+0x15/0xb0 [ 273.989020][T11770] __x64_sys_sendmmsg+0xa0/0xc0 [ 273.989054][T11770] do_syscall_64+0xfa/0x3b0 [ 273.989078][T11770] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.989101][T11770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.989122][T11770] ? clear_bhb_loop+0x60/0xb0 [ 273.989147][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.989167][T11770] RIP: 0033:0x7f5445d8e929 [ 273.989185][T11770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.989203][T11770] RSP: 002b:00007f5446bed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.989224][T11770] RAX: ffffffffffffffda RBX: 00007f5445fb5fa0 RCX: 00007f5445d8e929 [ 273.989239][T11770] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 273.989252][T11770] RBP: 00007f5446bed090 R08: 0000000000000000 R09: 0000000000000000 [ 273.989264][T11770] R10: 8848000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.989277][T11770] R13: 0000000000000000 R14: 00007f5445fb5fa0 R15: 00007ffcabf808b8 [ 273.989309][T11770] [ 274.392320][T11772] bond3: (slave veth11): Enslaving as an active interface with a down link [ 274.474522][T11777] bond3: (slave veth13): Enslaving as an active interface with a down link [ 274.519111][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1597'. [ 274.564682][T11772] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.583411][T11784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.736102][T11600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 274.785562][T11600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 274.808708][T11600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 274.861421][T11600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 275.125208][T11600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.175274][T11600] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.213679][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.220917][ T9073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.242093][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.249299][ T9073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.311485][ T5855] Bluetooth: hci3: command tx timeout [ 275.344208][T11815] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1608'. [ 275.443022][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'. [ 275.453316][T11815] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 275.466360][T11815] tipc: Enabled bearer , priority 10 [ 275.779061][T11835] lo speed is unknown, defaulting to 1000 [ 275.789328][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 275.798604][T11836] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 275.807839][T11836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.826385][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1614'. [ 275.958655][T11600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.096706][T11600] veth0_vlan: entered promiscuous mode [ 276.115364][T11600] veth1_vlan: entered promiscuous mode [ 276.181678][T11600] veth0_macvtap: entered promiscuous mode [ 276.268861][T11600] veth1_macvtap: entered promiscuous mode [ 276.321092][T11600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.335029][T11600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.362013][ T9073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.397717][ T9073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.418396][ T9073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.472659][ T9073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.695895][ T9079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.741873][ T9079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.868746][ T9076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.898121][ T9076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.998554][T11869] FAULT_INJECTION: forcing a failure. [ 276.998554][T11869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.018153][T11869] CPU: 1 UID: 0 PID: 11869 Comm: syz.6.1621 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 277.018185][T11869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.018198][T11869] Call Trace: [ 277.018206][T11869] [ 277.018215][T11869] dump_stack_lvl+0x189/0x250 [ 277.018251][T11869] ? __pfx____ratelimit+0x10/0x10 [ 277.018274][T11869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.018300][T11869] ? __pfx__printk+0x10/0x10 [ 277.018318][T11869] ? __might_fault+0xb0/0x130 [ 277.018343][T11869] should_fail_ex+0x414/0x560 [ 277.018368][T11869] _copy_from_iter+0x1db/0x16f0 [ 277.018397][T11869] ? rcu_is_watching+0x15/0xb0 [ 277.018433][T11869] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 277.018451][T11869] ? __pfx__copy_from_iter+0x10/0x10 [ 277.018477][T11869] ? __build_skb_around+0x257/0x3e0 [ 277.018503][T11869] ? netlink_sendmsg+0x642/0xb30 [ 277.018523][T11869] ? skb_put+0x11b/0x210 [ 277.018548][T11869] netlink_sendmsg+0x6b2/0xb30 [ 277.018577][T11869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.018602][T11869] ? aa_sock_msg_perm+0x94/0x160 [ 277.018624][T11869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.018646][T11869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.018668][T11869] __sock_sendmsg+0x21c/0x270 [ 277.018689][T11869] ____sys_sendmsg+0x52d/0x830 [ 277.018719][T11869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.018751][T11869] ? import_iovec+0x74/0xa0 [ 277.018770][T11869] ___sys_sendmsg+0x21f/0x2a0 [ 277.018797][T11869] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.018852][T11869] ? __fget_files+0x2a/0x420 [ 277.018870][T11869] ? __fget_files+0x3a0/0x420 [ 277.018896][T11869] __sys_sendmmsg+0x227/0x430 [ 277.018926][T11869] ? __pfx___sys_sendmmsg+0x10/0x10 [ 277.018949][T11869] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 277.018992][T11869] ? ksys_write+0x22a/0x250 [ 277.019009][T11869] ? __pfx_ksys_write+0x10/0x10 [ 277.019022][T11869] ? rcu_is_watching+0x15/0xb0 [ 277.019052][T11869] __x64_sys_sendmmsg+0xa0/0xc0 [ 277.019079][T11869] do_syscall_64+0xfa/0x3b0 [ 277.019099][T11869] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.019117][T11869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.019133][T11869] ? clear_bhb_loop+0x60/0xb0 [ 277.019153][T11869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.019170][T11869] RIP: 0033:0x7f5445d8e929 [ 277.019185][T11869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.019199][T11869] RSP: 002b:00007f5446bed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 277.019217][T11869] RAX: ffffffffffffffda RBX: 00007f5445fb5fa0 RCX: 00007f5445d8e929 [ 277.019230][T11869] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 277.019241][T11869] RBP: 00007f5446bed090 R08: 0000000000000000 R09: 0000000000000000 [ 277.019251][T11869] R10: 8848000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.019261][T11869] R13: 0000000000000000 R14: 00007f5445fb5fa0 R15: 00007ffcabf808b8 [ 277.019287][T11869] [ 277.584612][T11883] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 277.601591][ T5917] IPVS: starting estimator thread 0... [ 277.701033][T11884] IPVS: using max 29 ests per chain, 69600 per kthread [ 278.024591][T11900] ip6tnl1: entered promiscuous mode [ 278.030980][T11900] ip6tnl1: entered allmulticast mode [ 278.050197][T11900] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 278.201625][ T8865] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 278.365776][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 278.375249][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 278.384390][T11910] netlink: 'syz.0.1636': attribute type 18 has an invalid length. [ 278.508745][ T3434] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.036851][ T3434] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.099990][ T3434] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.189195][ T3434] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.475432][ T9073] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 279.512292][T11917] lo speed is unknown, defaulting to 1000 [ 279.539950][T11923] lo speed is unknown, defaulting to 1000 [ 279.678584][ T3434] bridge_slave_1: left allmulticast mode [ 279.689177][ T3434] bridge_slave_1: left promiscuous mode [ 279.728026][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.842715][ T3434] bridge_slave_0: left allmulticast mode [ 279.848426][ T3434] bridge_slave_0: left promiscuous mode [ 279.856308][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.865666][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.867748][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.882457][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.892343][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.900223][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.609825][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.640370][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.653327][ T3434] bond0 (unregistering): Released all slaves [ 280.845404][T11935] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.854375][T11935] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.044956][T11935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.076706][T11935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.257045][T11935] ip6gre1: left allmulticast mode [ 281.390500][ T9073] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.409943][ T9073] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.438641][ T9073] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.675013][T11927] lo speed is unknown, defaulting to 1000 [ 281.905797][ T3434] hsr_slave_0: left promiscuous mode [ 281.923853][ T3434] hsr_slave_1: left promiscuous mode [ 281.931544][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.939571][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.950711][ T5842] Bluetooth: hci3: command tx timeout [ 281.967390][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.983347][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.125358][ T3434] veth1_macvtap: left promiscuous mode [ 282.131968][ T3434] veth0_macvtap: left promiscuous mode [ 282.137976][ T3434] veth1_vlan: left promiscuous mode [ 282.143661][ T3434] veth0_vlan: left promiscuous mode [ 282.738814][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 282.789271][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 283.308363][T11968] kthread_run failed with err -4 [ 283.715073][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'. [ 283.769185][T11927] chnl_net:caif_netlink_parms(): no params data found [ 283.960068][ T8865] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 284.030647][ T5842] Bluetooth: hci3: command tx timeout [ 284.067410][T11999] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1657'. [ 284.103670][T11927] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.119955][T11927] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.128078][T11927] bridge_slave_0: entered allmulticast mode [ 284.137312][T11927] bridge_slave_0: entered promiscuous mode [ 284.147045][T11927] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.154966][T11927] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.162669][T11927] bridge_slave_1: entered allmulticast mode [ 284.173381][T11927] bridge_slave_1: entered promiscuous mode [ 284.285864][T11927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.378328][T11927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.445675][T12007] lo speed is unknown, defaulting to 1000 [ 284.484742][T12011] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1660'. [ 284.599711][T11927] team0: Port device team_slave_0 added [ 284.619458][T11927] team0: Port device team_slave_1 added [ 284.723634][T12016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1663'. [ 284.758500][T12016] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1663'. [ 284.796159][T12016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1663'. [ 285.036506][T11927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.056312][T12020] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1664'. [ 285.060950][T11927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.099473][T12022] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1665'. [ 285.112381][T12023] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1665'. [ 285.123730][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1660'. [ 285.133987][T11927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.159137][T12020] hsr_slave_0: left promiscuous mode [ 285.165986][T12020] hsr_slave_1: left promiscuous mode [ 285.193002][T11927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.201021][T11927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.228048][T11927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.239221][ T9084] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 285.419588][T11927] hsr_slave_0: entered promiscuous mode [ 285.430004][T11927] hsr_slave_1: entered promiscuous mode [ 285.436869][T11927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.446745][T11927] Cannot create hsr debugfs directory [ 285.853616][T12038] gtp0: entered promiscuous mode [ 285.858794][T12038] gtp0: entered allmulticast mode [ 285.897816][T12040] $Hÿ: renamed from bond0 (while UP) [ 285.934510][T12040] $Hÿ: entered promiscuous mode [ 286.111571][ T5842] Bluetooth: hci3: command tx timeout [ 286.253064][T12042] lo speed is unknown, defaulting to 1000 [ 287.231945][T11927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 287.258131][T11927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 287.279566][T11927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 287.305487][T11927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 287.412194][ T9073] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.524281][ T9073] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.642700][ T9073] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.718070][T12083] batadv_slave_1: entered promiscuous mode [ 287.807730][ T9073] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.902716][T11927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.009858][T11927] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.092965][ T9076] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.100201][ T9076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.144545][ T9076] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.151812][ T9076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.190788][ T5842] Bluetooth: hci3: command tx timeout [ 288.245094][T12096] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.436852][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.452144][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.465410][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.494838][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.511320][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.531101][T12108] netlink: 'syz.6.1686': attribute type 21 has an invalid length. [ 288.580282][T12102] lo speed is unknown, defaulting to 1000 [ 288.592620][T12108] netlink: 'syz.6.1686': attribute type 13 has an invalid length. [ 288.607218][T12108] netlink: 'syz.6.1686': attribute type 17 has an invalid length. [ 288.615642][ T5855] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 288.625392][ T5855] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 288.638880][T12113] TCP: TCP_TX_DELAY enabled [ 288.638923][ T5855] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 288.656044][ T5855] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 288.666231][ T5855] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 289.336139][ T9073] bond0 (unregistering): Released all slaves [ 289.452206][ T9073] bond1 (unregistering): Released all slaves [ 289.575564][ T9073] bond2 (unregistering): Released all slaves [ 289.691679][T12101] lo speed is unknown, defaulting to 1000 [ 289.958924][T12110] lo speed is unknown, defaulting to 1000 [ 290.086356][T11927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.466244][T12136] __nla_validate_parse: 5 callbacks suppressed [ 290.466265][T12136] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1693'. [ 290.486334][T12136] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1693'. [ 290.591051][ T5855] Bluetooth: hci0: command tx timeout [ 290.657407][T12139] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1694'. [ 290.659453][T12101] chnl_net:caif_netlink_parms(): no params data found [ 290.751217][ T5855] Bluetooth: hci7: command tx timeout [ 290.857370][ T9073] veth1_macvtap: left promiscuous mode [ 290.867540][ T9073] veth0_macvtap: left promiscuous mode [ 290.881234][ T9073] veth1_vlan: left promiscuous mode [ 290.886673][ T9073] veth0_vlan: left promiscuous mode [ 290.927228][T12146] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1695'. [ 292.138929][ T5924] lo speed is unknown, defaulting to 1000 [ 292.160744][T11927] veth0_vlan: entered promiscuous mode [ 292.170025][ T5924] infiniband syz2: ib_query_port failed (-19) [ 292.238134][T12110] chnl_net:caif_netlink_parms(): no params data found [ 292.414495][T11927] veth1_vlan: entered promiscuous mode [ 292.468051][T12101] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.478860][T12101] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.486698][T12101] bridge_slave_0: entered allmulticast mode [ 292.513810][T12101] bridge_slave_0: entered promiscuous mode [ 292.601077][T12101] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.608329][T12101] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.640910][T12101] bridge_slave_1: entered allmulticast mode [ 292.649004][T12101] bridge_slave_1: entered promiscuous mode [ 292.681001][ T5855] Bluetooth: hci0: command tx timeout [ 292.721951][T12174] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1701'. [ 292.831522][ T5855] Bluetooth: hci7: command tx timeout [ 292.831939][T12110] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.860311][T12110] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.870727][T12110] bridge_slave_0: entered allmulticast mode [ 292.898418][T12110] bridge_slave_0: entered promiscuous mode [ 292.911804][T12110] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.918985][T12110] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.928393][T12110] bridge_slave_1: entered allmulticast mode [ 292.936532][T12110] bridge_slave_1: entered promiscuous mode [ 292.994810][T12101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.077425][T12183] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1703'. [ 293.096356][T12101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.184752][T12110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.200071][ T9073] IPVS: stop unused estimator thread 0... [ 293.258848][T12101] team0: Port device team_slave_0 added [ 293.269614][T11927] veth0_macvtap: entered promiscuous mode [ 293.287216][T12110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.317366][T12101] team0: Port device team_slave_1 added [ 293.336366][T11927] veth1_macvtap: entered promiscuous mode [ 293.418799][T12110] team0: Port device team_slave_0 added [ 293.447766][T12110] team0: Port device team_slave_1 added [ 293.478314][T12101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.486524][T12101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.514732][T12101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.548212][T12110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.556219][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.582837][T12110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.596216][T12101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.605707][T12101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.632432][T12101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.658306][T12110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.665921][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.692394][T12110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.742923][T11927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.803681][T12101] hsr_slave_0: entered promiscuous mode [ 293.812400][T12101] hsr_slave_1: entered promiscuous mode [ 293.819113][T12101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.826988][T12101] Cannot create hsr debugfs directory [ 293.853948][T12110] hsr_slave_0: entered promiscuous mode [ 293.861745][T12110] hsr_slave_1: entered promiscuous mode [ 293.868419][T12110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.876199][T12110] Cannot create hsr debugfs directory [ 293.911483][T11927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.024750][ T8881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.055820][ T8881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.065859][ T8881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.121476][ T8881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.383706][T12199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1709'. [ 294.460165][ T8865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.468445][ T8865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.541924][T12204] vlan2: entered promiscuous mode [ 294.557499][T12204] vlan2: entered allmulticast mode [ 294.569660][T12204] hsr_slave_1: entered allmulticast mode [ 294.684212][ T8881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.698501][ T8881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.698965][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1710'. [ 294.790710][T12211] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1712'. [ 294.918172][ T5855] Bluetooth: hci7: command tx timeout [ 295.013828][T12110] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 295.055999][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1714'. [ 295.122664][T12110] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 295.177927][T12217] macsec1: entered promiscuous mode [ 295.198424][T12217] dummy0: entered promiscuous mode [ 295.219005][T12217] macsec1: entered allmulticast mode [ 295.224540][T12217] dummy0: entered allmulticast mode [ 295.281071][T12110] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 295.421333][ T3434] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.462712][T12110] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 295.564139][ T3434] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.631893][ T3434] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.756453][ T3434] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.807847][T12110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.824588][T12101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 295.836070][T12101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 295.855239][T12101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 295.871276][T12101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 295.919587][T12110] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.969360][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.976570][ T8881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.999823][ T3434] bridge_slave_1: left allmulticast mode [ 296.006116][ T3434] bridge_slave_1: left promiscuous mode [ 296.012398][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.023287][ T3434] bridge_slave_0: left allmulticast mode [ 296.028954][ T3434] bridge_slave_0: left promiscuous mode [ 296.036460][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.557534][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.578258][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.600954][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.610021][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.619757][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.680041][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.694490][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.707605][ T3434] bond0 (unregistering): Released all slaves [ 296.824737][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.832019][ T8865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.996448][ T5855] Bluetooth: hci7: command tx timeout [ 297.330035][ T3434] hsr_slave_0: left promiscuous mode [ 297.338899][ T3434] hsr_slave_1: left promiscuous mode [ 297.358696][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.381494][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.401592][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.409964][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.480677][ T3434] veth1_macvtap: left promiscuous mode [ 297.486339][ T3434] veth0_macvtap: left promiscuous mode [ 297.500952][ T3434] veth1_vlan: left promiscuous mode [ 297.506394][ T3434] veth0_vlan: left promiscuous mode [ 298.413616][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 298.468869][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 298.673985][ T5855] Bluetooth: hci3: command tx timeout [ 299.072068][ T5855] Bluetooth: hci7: command tx timeout [ 299.139682][T12101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.315618][T12101] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.453991][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.461265][ T9084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.509027][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.516331][ T9084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.618739][T12241] chnl_net:caif_netlink_parms(): no params data found [ 299.752029][T12276] can: request_module (can-proto-4) failed. [ 299.877667][T12110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.908272][T12282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 299.977759][T12288] netlink: 'syz.6.1727': attribute type 11 has an invalid length. [ 300.098861][T12241] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.128807][T12241] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.139094][T12241] bridge_slave_0: entered allmulticast mode [ 300.147860][T12241] bridge_slave_0: entered promiscuous mode [ 300.244878][T12241] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.281678][T12241] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.304070][T12241] bridge_slave_1: entered allmulticast mode [ 300.328339][T12241] bridge_slave_1: entered promiscuous mode [ 300.406895][T12306] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1731'. [ 300.419707][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1731'. [ 300.441399][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1731'. [ 300.489648][T12241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.553626][T12241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.661129][T12241] team0: Port device team_slave_0 added [ 300.678829][T12241] team0: Port device team_slave_1 added [ 300.742308][T12241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.749317][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.751566][ T5855] Bluetooth: hci3: command tx timeout [ 300.776496][T12241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.806468][T12241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.819296][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.846935][T12241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.896686][T12101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.989304][T12241] hsr_slave_0: entered promiscuous mode [ 301.006067][T12241] hsr_slave_1: entered promiscuous mode [ 301.020131][T12241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.029210][T12241] Cannot create hsr debugfs directory [ 301.113315][T12110] veth0_vlan: entered promiscuous mode [ 301.156727][T12110] veth1_vlan: entered promiscuous mode [ 301.257305][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1733'. [ 301.301854][T12321] vlan0: entered promiscuous mode [ 301.383932][T12101] veth0_vlan: entered promiscuous mode [ 301.492293][T12110] veth0_macvtap: entered promiscuous mode [ 301.565970][T12110] veth1_macvtap: entered promiscuous mode [ 301.575574][T12101] veth1_vlan: entered promiscuous mode [ 301.627482][T12328] FAULT_INJECTION: forcing a failure. [ 301.627482][T12328] name failslab, interval 1, probability 0, space 0, times 0 [ 301.674618][T12101] veth0_macvtap: entered promiscuous mode [ 301.695762][T12328] CPU: 0 UID: 0 PID: 12328 Comm: syz.4.1736 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 301.695795][T12328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.695825][T12328] Call Trace: [ 301.695834][T12328] [ 301.695844][T12328] dump_stack_lvl+0x189/0x250 [ 301.695884][T12328] ? __pfx____ratelimit+0x10/0x10 [ 301.695911][T12328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.695945][T12328] ? __pfx__printk+0x10/0x10 [ 301.695976][T12328] ? __pfx___might_resched+0x10/0x10 [ 301.696015][T12328] should_fail_ex+0x414/0x560 [ 301.696047][T12328] should_failslab+0xa8/0x100 [ 301.696073][T12328] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 301.696096][T12328] ? __alloc_skb+0x112/0x2d0 [ 301.696129][T12328] __alloc_skb+0x112/0x2d0 [ 301.696162][T12328] netlink_sendmsg+0x5c6/0xb30 [ 301.696202][T12328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.696233][T12328] ? aa_sock_msg_perm+0x94/0x160 [ 301.696263][T12328] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.696291][T12328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.696318][T12328] __sock_sendmsg+0x21c/0x270 [ 301.696346][T12328] ____sys_sendmsg+0x52d/0x830 [ 301.696385][T12328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.696426][T12328] ? import_iovec+0x74/0xa0 [ 301.696451][T12328] ___sys_sendmsg+0x21f/0x2a0 [ 301.696485][T12328] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.696566][T12328] ? __might_fault+0xb0/0x130 [ 301.696592][T12328] __sys_sendmmsg+0x227/0x430 [ 301.696632][T12328] ? __pfx___sys_sendmmsg+0x10/0x10 [ 301.696662][T12328] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 301.696720][T12328] ? ksys_write+0x22a/0x250 [ 301.696743][T12328] ? __pfx_ksys_write+0x10/0x10 [ 301.696759][T12328] ? rcu_is_watching+0x15/0xb0 [ 301.696800][T12328] __x64_sys_sendmmsg+0xa0/0xc0 [ 301.696844][T12328] do_syscall_64+0xfa/0x3b0 [ 301.696869][T12328] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.696894][T12328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.696914][T12328] ? clear_bhb_loop+0x60/0xb0 [ 301.696941][T12328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.696960][T12328] RIP: 0033:0x7fdfebb8e929 [ 301.696980][T12328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.696999][T12328] RSP: 002b:00007fdfecad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 301.697022][T12328] RAX: ffffffffffffffda RBX: 00007fdfebdb5fa0 RCX: 00007fdfebb8e929 [ 301.697038][T12328] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 301.697052][T12328] RBP: 00007fdfecad6090 R08: 0000000000000000 R09: 0000000000000000 [ 301.697065][T12328] R10: 8848000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.697080][T12328] R13: 0000000000000000 R14: 00007fdfebdb5fa0 R15: 00007ffe4a111538 [ 301.697113][T12328] [ 301.977845][T12101] veth1_macvtap: entered promiscuous mode [ 302.002224][T12101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.016947][T12101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.029982][ T3434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.084584][T12110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.103731][T12110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.171991][ T3434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.244704][ T3434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.308515][ T3434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.325890][T12336] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1739'. [ 302.339214][ T3434] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.369847][ T3434] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.418207][ T8881] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.434767][ T8881] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.558942][ T9084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.581434][ T9084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.680530][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.698707][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.798022][ T9084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.812237][ T9084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.831873][ T5855] Bluetooth: hci3: command tx timeout [ 302.948814][T12241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 302.969050][T12241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 303.002365][ T9084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.011906][T12241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 303.027924][ T9084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.084770][T12241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 303.206794][T12349] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1743'. [ 303.216813][T12350] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1743'. [ 303.349214][T12349] bond1: entered allmulticast mode [ 303.787333][T12241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.825146][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1744'. [ 303.947261][ T9084] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.131642][ T9084] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.240638][T12241] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.299347][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.306628][ T8881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.392341][ T9084] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.444757][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.463240][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.476407][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.483681][ T8881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.494294][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.506770][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.517319][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.588699][ T9084] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.911749][ T5855] Bluetooth: hci3: command tx timeout [ 305.429032][ T9084] bridge_slave_1: left allmulticast mode [ 305.435018][ T9084] bridge_slave_1: left promiscuous mode [ 305.451075][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.475643][ T9084] bridge_slave_0: left allmulticast mode [ 305.481770][ T9084] bridge_slave_0: left promiscuous mode [ 305.488414][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.929278][ T9084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.947157][ T9084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.958319][ T9084] bond0 (unregistering): Released all slaves [ 306.165467][T12416] netlink: 'syz.6.1755': attribute type 1 has an invalid length. [ 306.292231][T12416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.331884][T12417] netlink: 'syz.7.1756': attribute type 12 has an invalid length. [ 306.335284][T12418] bond2: (slave gretap1): making interface the new active one [ 306.342225][T12417] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.1756'. [ 306.364142][T12418] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 306.545654][T12420] bond2 (unregistering): (slave gretap1): Releasing active interface [ 306.557130][T12420] bond2 (unregistering): Released all slaves [ 306.597270][ T5855] Bluetooth: hci0: command tx timeout [ 306.734267][ T9084] hsr_slave_0: left promiscuous mode [ 306.745256][ T9084] hsr_slave_1: left promiscuous mode [ 306.752004][ T9084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.759601][ T9084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.768619][ T9084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.776785][ T9084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.804290][ T9084] veth1_macvtap: left promiscuous mode [ 306.810007][ T9084] veth0_macvtap: left promiscuous mode [ 306.817107][ T9084] veth1_vlan: left promiscuous mode [ 306.823553][ T9084] veth0_vlan: left promiscuous mode [ 307.456088][ T9084] team0 (unregistering): Port device team_slave_1 removed [ 307.513945][ T9084] team0 (unregistering): Port device team_slave_0 removed [ 307.999338][T12241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.085316][T12378] chnl_net:caif_netlink_parms(): no params data found [ 308.337570][T12437] FAULT_INJECTION: forcing a failure. [ 308.337570][T12437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.349826][T12440] batadv_slave_0: entered promiscuous mode [ 308.365390][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1760'. [ 308.377898][T12437] CPU: 0 UID: 0 PID: 12437 Comm: syz.6.1759 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 308.377929][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.377955][T12437] Call Trace: [ 308.377968][T12437] [ 308.377978][T12437] dump_stack_lvl+0x189/0x250 [ 308.378015][T12437] ? __pfx____ratelimit+0x10/0x10 [ 308.378039][T12437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.378072][T12437] ? __pfx__printk+0x10/0x10 [ 308.378117][T12437] should_fail_ex+0x414/0x560 [ 308.378150][T12437] _copy_to_user+0x31/0xb0 [ 308.378174][T12437] simple_read_from_buffer+0xe1/0x170 [ 308.378202][T12437] proc_fail_nth_read+0x1df/0x250 [ 308.378231][T12437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.378261][T12437] ? rw_verify_area+0x258/0x650 [ 308.378292][T12437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.378318][T12437] vfs_read+0x1fd/0x980 [ 308.378355][T12437] ? __pfx___mutex_lock+0x10/0x10 [ 308.378382][T12437] ? __pfx_vfs_read+0x10/0x10 [ 308.378416][T12437] ? __fget_files+0x2a/0x420 [ 308.378444][T12437] ? __fget_files+0x3a0/0x420 [ 308.378466][T12437] ? __fget_files+0x2a/0x420 [ 308.378499][T12437] ksys_read+0x145/0x250 [ 308.378520][T12437] ? __pfx_ksys_read+0x10/0x10 [ 308.378548][T12437] ? rcu_is_watching+0x15/0xb0 [ 308.378586][T12437] ? do_syscall_64+0xbe/0x3b0 [ 308.378616][T12437] do_syscall_64+0xfa/0x3b0 [ 308.378639][T12437] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.378663][T12437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.378682][T12437] ? clear_bhb_loop+0x60/0xb0 [ 308.378707][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.378727][T12437] RIP: 0033:0x7f5445d8d33c [ 308.378746][T12437] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 308.378763][T12437] RSP: 002b:00007f5446bed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.378785][T12437] RAX: ffffffffffffffda RBX: 00007f5445fb5fa0 RCX: 00007f5445d8d33c [ 308.378800][T12437] RDX: 000000000000000f RSI: 00007f5446bed0a0 RDI: 0000000000000005 [ 308.378812][T12437] RBP: 00007f5446bed090 R08: 0000000000000000 R09: 0000000000000000 [ 308.378825][T12437] R10: 8848000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.378837][T12437] R13: 0000000000000000 R14: 00007f5445fb5fa0 R15: 00007ffcabf808b8 [ 308.378871][T12437] [ 308.424971][T12241] veth0_vlan: entered promiscuous mode [ 308.675395][ T5855] Bluetooth: hci0: command tx timeout [ 308.816543][T12378] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.837097][T12378] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.851403][T12378] bridge_slave_0: entered allmulticast mode [ 308.899646][T12378] bridge_slave_0: entered promiscuous mode [ 308.948550][T12378] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.966425][T12378] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.984791][T12378] bridge_slave_1: entered allmulticast mode [ 309.008268][T12378] bridge_slave_1: entered promiscuous mode [ 309.109681][T12241] veth1_vlan: entered promiscuous mode [ 309.202558][T12378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.235012][T12378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.343377][T12378] team0: Port device team_slave_0 added [ 309.389252][T12378] team0: Port device team_slave_1 added [ 309.417078][T12241] veth0_macvtap: entered promiscuous mode [ 309.539547][T12467] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1766'. [ 309.675084][T12378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.683356][T12378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.709862][T12378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.723810][T12468] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1766'. [ 309.745226][T12241] veth1_macvtap: entered promiscuous mode [ 309.768843][T12378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.786215][T12378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.821216][T12378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.920050][T12241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.978651][T12378] hsr_slave_0: entered promiscuous mode [ 309.987446][T12378] hsr_slave_1: entered promiscuous mode [ 309.994397][T12378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.002286][T12378] Cannot create hsr debugfs directory [ 310.035674][T12241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.058178][T12479] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1771'. [ 310.260233][ T9073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.269544][ T9073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.303891][T12489] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1774'. [ 310.338129][ T9073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.399594][ T9073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.750628][ T5842] Bluetooth: hci0: command tx timeout [ 310.756996][ T9073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.777361][ T9073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.943898][ T9084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.976631][ T9084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.033268][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1781'. [ 311.645712][T12378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.562006][ T8881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.616570][T12378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.635515][T12548] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 312.692280][ T8881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.722531][T12378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.743655][T12378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.831459][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 312.948222][ T8881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.133101][ T8881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.495911][T12378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.663601][ T8881] bridge_slave_1: left allmulticast mode [ 313.679030][ T8881] bridge_slave_1: left promiscuous mode [ 313.695505][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.731807][ T8881] bridge_slave_0: left allmulticast mode [ 313.747516][ T8881] bridge_slave_0: left promiscuous mode [ 313.761374][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.779444][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.802781][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.813234][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.830886][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.846392][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.219180][T12592] netlink: 'syz.7.1797': attribute type 1 has an invalid length. [ 314.653282][ T8881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.678293][ T8881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.695067][ T8881] bond0 (unregistering): Released all slaves [ 314.853419][T12378] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.888945][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.896181][ T9073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.911748][ T5855] Bluetooth: hci0: command 0x0419 tx timeout [ 315.123391][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.130644][ T9073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.397883][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 315.414516][T12378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.472456][T12617] macsec2: entered allmulticast mode [ 315.499694][T12617] batman_adv: batadv0: Adding interface: macsec2 [ 315.521004][T12617] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.556210][T12617] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active [ 315.747220][ T8881] hsr_slave_0: left promiscuous mode [ 315.755319][ T8881] hsr_slave_1: left promiscuous mode [ 315.763595][ T8881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.771846][ T8881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.779863][ T8881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.787758][ T8881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.871846][ T5855] Bluetooth: hci3: command tx timeout [ 315.877705][ T8881] veth1_macvtap: left promiscuous mode [ 315.888160][ T8881] veth0_macvtap: left promiscuous mode [ 315.897048][ T8881] veth1_vlan: left promiscuous mode [ 315.911126][ T8881] veth0_vlan: left promiscuous mode [ 316.554131][ T8881] team0 (unregistering): Port device team_slave_1 removed [ 316.604379][ T8881] team0 (unregistering): Port device team_slave_0 removed [ 317.240141][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.465017][T12660] netdevsim netdevsim6: Direct firmware load for ..€ failed with error -2 [ 317.475581][T12660] netdevsim netdevsim6: Falling back to sysfs fallback for: ..€ [ 317.544929][T12378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.671953][T12583] chnl_net:caif_netlink_parms(): no params data found [ 317.839645][T12378] veth0_vlan: entered promiscuous mode [ 317.950877][ T5842] Bluetooth: hci3: command tx timeout [ 317.963632][T12378] veth1_vlan: entered promiscuous mode [ 318.106225][ T9079] veth0_to_bridge: left allmulticast mode [ 318.120809][ T9079] veth0_to_bridge: left promiscuous mode [ 318.139493][ T9079] bridge0: port 1(veth0_to_bridge) entered disabled state [ 318.562204][ T9079] dvmrp0 (unregistering): left allmulticast mode [ 318.941261][ T9079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.953117][ T9079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.967678][ T9079] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 318.984685][ T9079] bond0 (unregistering): Released all slaves [ 319.007373][ T9079] bond1 (unregistering): Released all slaves [ 319.027732][ T9079] bond2 (unregistering): Released all slaves [ 319.096254][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1817'. [ 319.111564][T12681] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1817'. [ 319.301804][ T9079] þ: left promiscuous mode [ 319.311013][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 319.342594][T12685] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1818'. [ 319.364710][T12583] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.372136][T12583] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.379418][T12583] bridge_slave_0: entered allmulticast mode [ 319.388064][T12583] bridge_slave_0: entered promiscuous mode [ 319.397531][T12583] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.416075][T12583] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.423627][T12583] bridge_slave_1: entered allmulticast mode [ 319.431918][T12583] bridge_slave_1: entered promiscuous mode [ 319.562844][T12686] netlink: 'syz.7.1818': attribute type 9 has an invalid length. [ 319.577615][T12686] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1818'. [ 319.603384][T12583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.624018][T12583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.794003][T12583] team0: Port device team_slave_0 added [ 319.848808][T12583] team0: Port device team_slave_1 added [ 320.005840][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1819'. [ 320.031944][ T5855] Bluetooth: hci3: command tx timeout [ 320.055170][ T9079] hsr_slave_0: left promiscuous mode [ 320.073467][ T9079] hsr_slave_1: left promiscuous mode [ 320.083820][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.092825][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.108532][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.117350][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.149589][ T9079] veth1_macvtap: left promiscuous mode [ 320.156659][ T9079] veth0_macvtap: left promiscuous mode [ 320.163376][ T9079] veth1_vlan: left promiscuous mode [ 320.327210][ T9079] pim6reg (unregistering): left allmulticast mode [ 320.779234][ T9079] team0 (unregistering): Port device team_slave_1 removed [ 320.833359][ T9079] team0 (unregistering): Port device team_slave_0 removed [ 321.223991][T12583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.232644][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.259074][T12583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.295568][T12583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.309045][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.335384][T12583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.377786][T12378] veth0_macvtap: entered promiscuous mode [ 321.637878][T12378] veth1_macvtap: entered promiscuous mode [ 321.651093][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1823'. [ 321.677924][T12583] hsr_slave_0: entered promiscuous mode [ 321.687752][T12583] hsr_slave_1: entered promiscuous mode [ 321.702921][T12583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.740554][T12583] Cannot create hsr debugfs directory [ 321.773641][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1822'. [ 321.802340][T12700] netlink: 'syz.7.1822': attribute type 9 has an invalid length. [ 321.830820][T12700] netlink: 'syz.7.1822': attribute type 7 has an invalid length. [ 321.838628][T12700] netlink: 'syz.7.1822': attribute type 8 has an invalid length. [ 321.967288][T12378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.023458][T12378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.111099][ T5855] Bluetooth: hci3: command tx timeout [ 322.169961][ T8881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.184677][ T8881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.223881][ T8881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.240952][ T8881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.634339][T12732] netlink: 'syz.4.1830': attribute type 6 has an invalid length. [ 322.652947][T12732] netlink: 'syz.4.1830': attribute type 7 has an invalid length. [ 322.671984][T12732] netlink: 'syz.4.1830': attribute type 8 has an invalid length. [ 323.041005][ T9073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.053070][ T9073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.085042][T12743] x_tables: duplicate underflow at hook 1 [ 323.098867][T12745] netlink: 'syz.7.1829': attribute type 6 has an invalid length. [ 323.191324][ T8865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.201297][ T8865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.464720][T12756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1836'. [ 323.737824][T12760] netlink: 'syz.4.1837': attribute type 13 has an invalid length. [ 324.064238][T12583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 324.197147][ T8865] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.249251][T12583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 324.295292][T12583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 324.423007][ T8865] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.516466][T12583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 324.916830][ T8865] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.049728][ T8865] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.068755][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.079212][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.081824][T12793] xt_ecn: cannot match TCP bits for non-tcp packets [ 325.094568][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.096547][T12793] Cannot find add_set index 0 as target [ 325.112365][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.120271][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.169685][T12793] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1843'. [ 325.189455][T12793] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1843'. [ 325.237337][T12793] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1843'. [ 325.254810][T12583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.391677][T12583] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.427958][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.435254][ T8881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.502478][T12800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1845'. [ 325.536205][ T9076] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.543454][ T9076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.601524][ T8865] bridge_slave_1: left allmulticast mode [ 325.610692][ T8865] bridge_slave_1: left promiscuous mode [ 325.616568][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.632173][ T8865] bridge_slave_0: left allmulticast mode [ 325.638048][ T8865] bridge_slave_0: left promiscuous mode [ 325.657767][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.962362][T12818] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1849'. [ 326.226488][ T8865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.238769][ T8865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.249304][ T8865] bond0 (unregistering): Released all slaves [ 326.276330][T12818] 0ªX¹¦À: renamed from caif0 [ 326.330693][T12818] 0ªX¹¦À: entered allmulticast mode [ 326.336244][T12818] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 326.703476][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1853'. [ 326.856019][T12837] netlink: 'syz.7.1854': attribute type 10 has an invalid length. [ 326.914485][T12790] chnl_net:caif_netlink_parms(): no params data found [ 327.156872][ T5855] Bluetooth: hci0: command tx timeout [ 327.261057][ T8865] hsr_slave_0: left promiscuous mode [ 327.279722][ T8865] hsr_slave_1: left promiscuous mode [ 327.299090][ T8865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.317514][ T8865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.348032][ T8865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.358442][ T8865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.395659][ T8865] veth1_macvtap: left promiscuous mode [ 327.401453][ T8865] veth0_macvtap: left promiscuous mode [ 327.407229][ T8865] veth1_vlan: left promiscuous mode [ 327.415125][ T8865] veth0_vlan: left promiscuous mode [ 327.489210][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 328.016375][ T8865] team0 (unregistering): Port device team_slave_1 removed [ 328.069667][ T8865] team0 (unregistering): Port device team_slave_0 removed [ 328.544915][T12856] ipvlan0: entered promiscuous mode [ 328.586359][T12860] kthread_run failed with err -4 [ 328.603362][T12868] netlink: 'syz.4.1860': attribute type 1 has an invalid length. [ 328.670687][T12790] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.677922][T12790] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.719199][T12790] bridge_slave_0: entered allmulticast mode [ 328.744687][T12790] bridge_slave_0: entered promiscuous mode [ 328.767184][T12790] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.776027][T12790] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.784133][T12790] bridge_slave_1: entered allmulticast mode [ 328.792374][T12790] bridge_slave_1: entered promiscuous mode [ 328.816087][T12879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.999521][T12790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.038980][T12790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.189450][T12790] team0: Port device team_slave_0 added [ 329.207381][T12790] team0: Port device team_slave_1 added [ 329.231619][ T5855] Bluetooth: hci0: command tx timeout [ 329.282300][T12583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.294198][T12790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.306279][T12790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.334341][T12790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.348708][T12790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.361533][T12790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.395158][T12790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.484236][T12790] hsr_slave_0: entered promiscuous mode [ 329.492407][T12790] hsr_slave_1: entered promiscuous mode [ 329.499195][T12790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.507986][T12790] Cannot create hsr debugfs directory [ 329.944071][T12583] veth0_vlan: entered promiscuous mode [ 330.004094][T12583] veth1_vlan: entered promiscuous mode [ 330.154316][T12583] veth0_macvtap: entered promiscuous mode [ 330.179434][T12899] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1869'. [ 330.179838][T12583] veth1_macvtap: entered promiscuous mode [ 330.205162][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1869'. [ 330.249058][T12583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.279350][T12583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.318639][ T9076] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.331558][ T9076] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.358617][ T9076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.382118][ T9076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.518234][ T9076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.542383][ T9076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.588309][T12790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.615136][ T9076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.616317][T12790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.631672][ T9076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.660741][T12790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.690178][T12790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.925481][T12790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.952875][T12790] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.101411][ T9076] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.135900][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.143114][ T8881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.209779][ T9076] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.256849][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.264109][ T8881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.311272][ T5855] Bluetooth: hci0: command tx timeout [ 331.338953][ T9076] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.508897][ T9076] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.590001][T12790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.667492][ T9076] bridge_slave_1: left allmulticast mode [ 331.673739][ T9076] bridge_slave_1: left promiscuous mode [ 331.679467][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.690247][ T9076] bridge_slave_0: left allmulticast mode [ 331.697153][ T9076] bridge_slave_0: left promiscuous mode [ 331.703149][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.078175][ T9076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.089246][ T9076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.100255][ T9076] bond0 (unregistering): Released all slaves [ 332.217677][T12790] veth0_vlan: entered promiscuous mode [ 332.273963][T12790] veth1_vlan: entered promiscuous mode [ 332.456597][T12936] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 332.689361][T12790] veth0_macvtap: entered promiscuous mode [ 333.168989][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.184326][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.202098][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.221292][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.239744][T12790] veth1_macvtap: entered promiscuous mode [ 333.246147][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.390820][ T5855] Bluetooth: hci0: command tx timeout [ 333.420632][ T9076] hsr_slave_0: left promiscuous mode [ 333.456246][ T9076] hsr_slave_1: left promiscuous mode [ 333.472874][ T9076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.490617][ T9076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.521772][ T9076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.529300][ T9076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.734885][ T9076] veth1_macvtap: left promiscuous mode [ 333.751133][ T9076] veth0_macvtap: left promiscuous mode [ 333.756886][ T9076] veth1_vlan: left promiscuous mode [ 333.799266][ T9076] veth0_vlan: left promiscuous mode [ 335.142525][ T9076] team0 (unregistering): Port device team_slave_1 removed [ 335.253817][ T9076] team0 (unregistering): Port device team_slave_0 removed [ 335.313598][ T5855] Bluetooth: hci3: command tx timeout [ 336.250785][T12967] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1885'. [ 336.316118][T12962] netlink: 'syz.4.1884': attribute type 4 has an invalid length. [ 336.515547][T12969] netlink: 'syz.7.1885': attribute type 5 has an invalid length. [ 336.669041][T12790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.778599][T12790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.826428][T12980] netlink: 'syz.7.1887': attribute type 21 has an invalid length. [ 336.888930][ T3434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.905190][T12980] netlink: 'syz.7.1887': attribute type 1 has an invalid length. [ 336.919741][T12980] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1887'. [ 337.000567][T12983] xt_TCPMSS: Only works on TCP SYN packets [ 337.003577][ T3434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.116280][ T3434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.184584][ T3434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.391373][ T5855] Bluetooth: hci3: command tx timeout [ 337.512498][ T8865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.561057][ T8865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.818153][ T9073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.856797][ T9073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.890101][T12945] chnl_net:caif_netlink_parms(): no params data found [ 338.342299][T12945] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.368658][T12945] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.385858][T12945] bridge_slave_0: entered allmulticast mode [ 338.418851][T12945] bridge_slave_0: entered promiscuous mode [ 338.454916][T12945] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.478256][T12945] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.497868][T12945] bridge_slave_1: entered allmulticast mode [ 338.527387][T12945] bridge_slave_1: entered promiscuous mode [ 338.644064][ T8863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.749123][T12945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.814909][ T8863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.836476][T12945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.892275][T12945] team0: Port device team_slave_0 added [ 338.902553][T12945] team0: Port device team_slave_1 added [ 338.970017][ T8863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.078244][ T8863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.108639][T12945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.120529][T12945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.160708][T12945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.184289][T12945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.200432][T12945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.227103][T12945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.352492][T13025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.478062][ T5855] Bluetooth: hci3: command tx timeout [ 339.641815][T12945] hsr_slave_0: entered promiscuous mode [ 339.648650][T12945] hsr_slave_1: entered promiscuous mode [ 339.699718][T12945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.720455][T12945] Cannot create hsr debugfs directory [ 339.820882][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.834592][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.847000][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.862854][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.873195][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.077480][ T8863] bridge_slave_1: left allmulticast mode [ 340.086587][ T8863] bridge_slave_1: left promiscuous mode [ 340.097858][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.109110][ T8863] bridge_slave_0: left allmulticast mode [ 340.116742][ T8863] bridge_slave_0: left promiscuous mode [ 340.124115][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.544780][T13039] netlink: 'syz.4.1900': attribute type 21 has an invalid length. [ 340.566863][T13040] netlink: 'syz.4.1900': attribute type 21 has an invalid length. [ 340.833778][ T8863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.846626][ T8863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.857468][ T8863] bond0 (unregistering): Released all slaves [ 340.924614][T13039] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1900'. [ 340.988147][T13040] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1900'. [ 341.182701][T13049] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1903'. [ 341.195490][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'. [ 341.538181][ T8863] hsr_slave_0: left promiscuous mode [ 341.553429][ T5855] Bluetooth: hci3: command tx timeout [ 341.587921][ T8863] hsr_slave_1: left promiscuous mode [ 341.609563][ T8863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.630320][ T8863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.648882][ T8863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.657653][ T8863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.716704][ T8863] veth1_macvtap: left promiscuous mode [ 341.731148][ T8863] veth0_macvtap: left promiscuous mode [ 341.740128][ T8863] veth1_vlan: left promiscuous mode [ 341.752753][ T8863] veth0_vlan: left promiscuous mode [ 341.963227][ T5855] Bluetooth: hci0: command tx timeout [ 342.747723][ T8863] team0 (unregistering): Port device team_slave_1 removed [ 342.803562][ T8863] team0 (unregistering): Port device team_slave_0 removed [ 344.040278][ T5842] Bluetooth: hci0: command tx timeout [ 344.055217][T13033] chnl_net:caif_netlink_parms(): no params data found [ 344.325850][T13097] veth0: entered promiscuous mode [ 344.357144][T13094] veth0: left promiscuous mode [ 344.424997][T12945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.511330][T12945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.541267][T13033] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.550887][T13033] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.558833][T13033] bridge_slave_0: entered allmulticast mode [ 344.571828][T13033] bridge_slave_0: entered promiscuous mode [ 344.591273][T12945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.622391][T13033] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.633416][T13033] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.645582][T13033] bridge_slave_1: entered allmulticast mode [ 344.661546][T13033] bridge_slave_1: entered promiscuous mode [ 344.701782][T12945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.813250][T13033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.872340][T13033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.911088][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 345.010317][T13033] team0: Port device team_slave_0 added [ 345.022197][T13033] team0: Port device team_slave_1 added [ 345.075767][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1924'. [ 345.104769][T13033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.112594][T13033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.139359][T13033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.172819][T13132] netlink: 'syz.7.1924': attribute type 3 has an invalid length. [ 345.188013][T13033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.195150][T13033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.224144][T13033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.347747][T13033] hsr_slave_0: entered promiscuous mode [ 345.354723][T13033] hsr_slave_1: entered promiscuous mode [ 345.362290][T13033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.370066][T13033] Cannot create hsr debugfs directory [ 346.122209][ T5855] Bluetooth: hci0: command tx timeout [ 346.222755][T12945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.490183][T12945] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.547826][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.555095][ T9091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.594416][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.601678][ T9091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.671616][ T31] INFO: task syz.1.1026:9564 blocked for more than 143 seconds. [ 346.694059][ T31] Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 [ 346.719046][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.734492][ T31] task:syz.1.1026 state:D stack:25352 pid:9564 tgid:9563 ppid:5838 task_flags:0x400140 flags:0x00004004 [ 346.748084][ T31] Call Trace: [ 346.751835][ T31] [ 346.754813][ T31] __schedule+0x16f5/0x4d00 [ 346.759457][ T31] ? __lock_acquire+0xab9/0xd20 [ 346.773967][ T31] ? schedule+0x165/0x360 [ 346.778451][ T31] ? __pfx___schedule+0x10/0x10 [ 346.786927][ T31] ? schedule+0x91/0x360 [ 346.792368][ T31] schedule+0x165/0x360 [ 346.796684][ T31] schedule_preempt_disabled+0x13/0x30 [ 346.802708][ T31] __mutex_lock+0x724/0xe80 [ 346.808099][ T31] ? __mutex_lock+0x51b/0xe80 [ 346.817718][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 346.847634][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 346.868897][ T31] ? __nlmsg_put+0xef/0x1b0 [ 346.876926][ T31] ? genlmsg_put+0x137/0x2e0 [ 346.885895][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 346.892161][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 346.897722][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 346.907590][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 346.917198][ T31] ? kernel_text_address+0xa5/0xe0 [ 346.930060][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 346.938646][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 346.949601][ T31] genl_rcv_msg+0x60e/0x790 [ 346.957450][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.968840][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 346.976764][ T31] netlink_rcv_skb+0x205/0x470 [ 346.986870][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.993666][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.999119][ T31] ? down_read+0x1ad/0x2e0 [ 347.008938][ T31] genl_rcv+0x28/0x40 [ 347.014948][ T31] netlink_unicast+0x758/0x8d0 [ 347.019792][ T31] netlink_sendmsg+0x805/0xb30 [ 347.036213][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.046314][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 347.055241][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.064931][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.070305][ T31] __sock_sendmsg+0x21c/0x270 [ 347.084421][ T31] ____sys_sendmsg+0x505/0x830 [ 347.089376][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.098232][ T31] ? import_iovec+0x74/0xa0 [ 347.107032][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 347.116035][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.121758][ T31] ? __fget_files+0x2a/0x420 [ 347.126490][ T31] ? __fget_files+0x3a0/0x420 [ 347.131528][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 347.136611][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.144211][ T31] ? rcu_is_watching+0x15/0xb0 [ 347.149138][ T31] ? do_syscall_64+0xbe/0x3b0 [ 347.153836][T12945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.168554][ T31] do_syscall_64+0xfa/0x3b0 [ 347.176406][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.188743][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.197215][ T31] ? clear_bhb_loop+0x60/0xb0 [ 347.213542][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.219717][ T31] RIP: 0033:0x7fd05ad8e929 [ 347.236397][ T31] RSP: 002b:00007fd05bcba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.246155][T12945] veth0_vlan: entered promiscuous mode [ 347.258557][ T31] RAX: ffffffffffffffda RBX: 00007fd05afb5fa0 RCX: 00007fd05ad8e929 [ 347.274376][T12945] veth1_vlan: entered promiscuous mode [ 347.278059][ T31] RDX: 0000000000040000 RSI: 0000200000000540 RDI: 0000000000000006 [ 347.290516][ T31] RBP: 00007fd05ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 347.299019][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.318752][ T31] R13: 0000000000000000 R14: 00007fd05afb5fa0 R15: 00007fff2dd7e578 [ 347.345114][T12945] veth0_macvtap: entered promiscuous mode [ 347.355370][ T31] [ 347.358599][ T31] [ 347.358599][ T31] Showing all locks held in the system: [ 347.368991][ T31] 1 lock held by khungtaskd/31: [ 347.376719][T12945] veth1_macvtap: entered promiscuous mode [ 347.379482][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 347.414498][ T31] 3 locks held by kworker/u8:7/3452: [ 347.420193][ T31] 2 locks held by getty/5600: [ 347.426211][ T31] #0: ffff888030d340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 347.437418][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 347.448233][ T31] 3 locks held by kworker/0:6/5917: [ 347.475047][T12945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.482536][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 347.501019][ T31] #1: ffffc90004ecfbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 347.520326][T12945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.527770][ T31] #2: ffff888023e4d240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 347.544512][ T31] 3 locks held by kworker/0:7/5924: [ 347.559963][ T3452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.561422][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 347.583453][ T31] #1: ffffc90004f3fbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 347.594868][ T31] #2: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 347.597183][ T3452] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.614771][ T31] 2 locks held by syz.2.796/8723: [ 347.619934][ T31] #0: ffffffff8f577bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 347.634253][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 347.650053][ T3452] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.665125][ T31] 3 locks held by kworker/u8:34/9091: [ 347.671796][ T3452] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.680630][ T31] #0: ffff88814c1e5148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 347.703128][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 347.718341][ T31] #2: ffff88802ef5c628 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x6e/0x1290 [ 347.727904][ T31] 2 locks held by syz.1.1026/9564: [ 347.741964][ T31] #0: ffffffff8f577bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 347.756180][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 347.768330][ T31] 2 locks held by syz.5.1586/11733: [ 347.782644][ T31] #0: ffffffff8f577bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 347.801611][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 347.812687][ T31] 3 locks held by syz-executor/12945: [ 347.818097][ T31] #0: ffffffff8f512e88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 347.827409][ T31] #1: ffff88807663d4e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x227/0x420 [ 347.837382][ T31] #2: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 347.848593][ T31] 7 locks held by syz-executor/13033: [ 347.854213][ T31] #0: ffff88802f03a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 347.864892][ T31] #1: ffff888044d5b888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 347.875639][ T31] #2: ffff8880276215a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 347.885964][ T31] #3: ffffffff8edad908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 347.896728][ T31] #4: ffff88804fc350e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 347.907617][ T31] #5: ffff88804fc33250 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 347.918273][ T31] #6: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 347.929428][ T31] 2 locks held by syz.4.1929/13165: [ 347.935021][ T31] [ 347.937566][ T31] ============================================= [ 347.937566][ T31] [ 348.006856][ T31] NMI backtrace for cpu 1 [ 348.006879][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 348.006903][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.006916][ T31] Call Trace: [ 348.006923][ T31] [ 348.006932][ T31] dump_stack_lvl+0x189/0x250 [ 348.006966][ T31] ? __wake_up_klogd+0xd9/0x110 [ 348.006993][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.007024][ T31] ? __pfx__printk+0x10/0x10 [ 348.007057][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 348.007080][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 348.007096][ T31] ? _printk+0xcf/0x120 [ 348.007123][ T31] ? __pfx__printk+0x10/0x10 [ 348.007150][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 348.007180][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 348.007201][ T31] watchdog+0xfee/0x1030 [ 348.007231][ T31] ? watchdog+0x1de/0x1030 [ 348.007266][ T31] kthread+0x70e/0x8a0 [ 348.007292][ T31] ? __pfx_watchdog+0x10/0x10 [ 348.007318][ T31] ? __pfx_kthread+0x10/0x10 [ 348.007343][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.007365][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.007387][ T31] ? __pfx_kthread+0x10/0x10 [ 348.007412][ T31] ret_from_fork+0x3f9/0x770 [ 348.007444][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 348.007479][ T31] ? __switch_to_asm+0x39/0x70 [ 348.007499][ T31] ? __switch_to_asm+0x33/0x70 [ 348.007530][ T31] ? __pfx_kthread+0x10/0x10 [ 348.007553][ T31] ret_from_fork_asm+0x1a/0x30 [ 348.007591][ T31] [ 348.007626][ T31] Sending NMI from CPU 1 to CPUs 0: [ 348.168482][ C0] NMI backtrace for cpu 0 [ 348.168508][ C0] CPU: 0 UID: 0 PID: 13165 Comm: syz.4.1929 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 348.168530][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.168541][ C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x37/0x90 [ 348.168569][ C0] Code: 08 70 9d 92 65 8b 15 68 11 dd 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e 8b 91 18 16 00 00 <83> fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c 16 00 00 49 c1 e1 [ 348.168585][ C0] RSP: 0018:ffffc90004867790 EFLAGS: 00000046 [ 348.168600][ C0] RAX: ffffffff81745e6d RBX: 0000000077ad6000 RCX: ffff88805b2d9e00 [ 348.168613][ C0] RDX: 0000000040000002 RSI: ffff8880f7ad6000 RDI: 0000000077ad6000 [ 348.168624][ C0] RBP: ffffc900048678b0 R08: ffff8880318b5d37 R09: 1ffff11006316ba6 [ 348.168637][ C0] R10: dffffc0000000000 R11: ffffed1006316ba7 R12: ffff8880318b56b8 [ 348.168650][ C0] R13: ffff8880318b5600 R14: ffff8880f7ad6000 R15: dffffc0000000000 [ 348.168663][ C0] FS: 00007fdfecad66c0(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000 [ 348.168677][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.168689][ C0] CR2: 0000200000675030 CR3: 0000000048602000 CR4: 00000000003526f0 [ 348.168704][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 348.168714][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 348.168724][ C0] Call Trace: [ 348.168731][ C0] [ 348.168737][ C0] __phys_addr+0x6d/0x180 [ 348.168757][ C0] load_new_mm_cr3+0xb1/0x1e0 [ 348.168776][ C0] switch_mm_irqs_off+0x52d/0x7a0 [ 348.168797][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 348.168814][ C0] ? psi_task_switch+0x314/0x6d0 [ 348.168835][ C0] __schedule+0x106c/0x4d00 [ 348.168863][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 348.168883][ C0] ? ___sys_recvmsg+0x1c4/0x510 [ 348.168909][ C0] ? __pfx___schedule+0x10/0x10 [ 348.168925][ C0] ? ___sys_recvmsg+0x1c4/0x510 [ 348.168950][ C0] ? kfree+0x4d/0x440 [ 348.168978][ C0] ? ___sys_recvmsg+0x1c4/0x510 [ 348.169002][ C0] ? trace_irq_disable+0x37/0x110 [ 348.169026][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 348.169046][ C0] preempt_schedule_irq+0xb5/0x150 [ 348.169065][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 348.169088][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 348.169117][ C0] irqentry_exit+0x6f/0x90 [ 348.169135][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.169153][ C0] RIP: 0010:do_recvmmsg+0x33f/0x770 [ 348.169168][ C0] Code: 88 32 02 00 00 e8 e1 c4 7c f8 48 c7 c7 60 71 91 8c be a1 0b 00 00 e8 f0 b8 c8 f8 49 8d 4c 24 38 89 d8 e8 a4 8f 23 02 48 89 cb <49> 83 c4 40 eb 54 41 81 e7 ff ff fe ff 4c 8b 6c 24 40 4c 89 ee 48 [ 348.169182][ C0] RSP: 0018:ffffc90004867c40 EFLAGS: 00000246 [ 348.169196][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 348.169206][ C0] RDX: 0000000000000000 RSI: ffffffff8db73310 RDI: ffffffff8be28b80 [ 348.169218][ C0] RBP: ffffc90004867e10 R08: 0000000000000000 R09: ffffffff820c5120 [ 348.169229][ C0] R10: dffffc0000000000 R11: fffffbfff1f4277f R12: 0000200000675f40 [ 348.169241][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000019c6d [ 348.169257][ C0] ? __might_fault+0xb0/0x130 [ 348.169284][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 348.169316][ C0] ? __pfx_do_futex+0x10/0x10 [ 348.169344][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 348.169361][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 348.169376][ C0] ? rcu_is_watching+0x15/0xb0 [ 348.169403][ C0] ? do_syscall_64+0xbe/0x3b0 [ 348.169427][ C0] do_syscall_64+0xfa/0x3b0 [ 348.169447][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.169466][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.169482][ C0] ? clear_bhb_loop+0x60/0xb0 [ 348.169509][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.169525][ C0] RIP: 0033:0x7fdfebb8e929 [ 348.169538][ C0] Code: Unable to access opcode bytes at 0x7fdfebb8e8ff. [ 348.169547][ C0] RSP: 002b:00007fdfecad6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 348.169563][ C0] RAX: ffffffffffffffda RBX: 00007fdfebdb5fa0 RCX: 00007fdfebb8e929 [ 348.169575][ C0] RDX: 03fffffffffffff2 RSI: 0000200000004400 RDI: 0000000000000005 [ 348.169587][ C0] RBP: 00007fdfebc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 348.169597][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.169607][ C0] R13: 0000000000000000 R14: 00007fdfebdb5fa0 R15: 00007ffe4a111538 [ 348.169627][ C0] [ 348.182250][T12945] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 348.212025][ T5855] Bluetooth: hci0: command tx timeout [ 348.258136][T12945] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 348.285696][T13098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.443675][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 348.443703][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 348.443733][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.443749][ T31] Call Trace: [ 348.443759][ T31] [ 348.443771][ T31] dump_stack_lvl+0x99/0x250 [ 348.443816][ T31] ? __asan_memcpy+0x40/0x70 [ 348.443851][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.443887][ T31] ? __pfx__printk+0x10/0x10 [ 348.443923][ T31] panic+0x2db/0x790 [ 348.443958][ T31] ? __pfx_panic+0x10/0x10 [ 348.443985][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 348.444006][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 348.444042][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 348.444069][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 348.727045][ T31] watchdog+0x102d/0x1030 [ 348.731419][ T31] ? watchdog+0x1de/0x1030 [ 348.735880][ T31] kthread+0x70e/0x8a0 [ 348.739982][ T31] ? __pfx_watchdog+0x10/0x10 [ 348.744690][ T31] ? __pfx_kthread+0x10/0x10 [ 348.749316][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.754563][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.759821][ T31] ? __pfx_kthread+0x10/0x10 [ 348.764452][ T31] ret_from_fork+0x3f9/0x770 [ 348.769085][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 348.774244][ T31] ? __switch_to_asm+0x39/0x70 [ 348.779036][ T31] ? __switch_to_asm+0x33/0x70 [ 348.783820][ T31] ? __pfx_kthread+0x10/0x10 [ 348.788445][ T31] ret_from_fork_asm+0x1a/0x30 [ 348.793253][ T31] [ 348.796631][ T31] Kernel Offset: disabled [ 348.801139][ T31] Rebooting in 86400 seconds..