last executing test programs: 3m17.284231572s ago: executing program 3 (id=231): socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdbd, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) (async) connect$inet6(r3, 0x0, 0x0) close(r3) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x80000, 0x80000002) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0x10001, 0x12) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x24000810) (async) sendfile(r5, r4, 0x0, 0xf03a0005) (async) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000800)}, 0x7}], 0x1, 0x40010002, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) 3m17.109838738s ago: executing program 3 (id=232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000000000fffffffa850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$sock_int(r2, 0x1, 0x28, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x2, 0x9}, {0x5}, {0x0, 0x0, 0x4}, {0x6}]}) 3m16.77505557s ago: executing program 3 (id=235): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="4897c40d1a", 0x5}], 0x1}, 0x4000040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x29, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=0x14, 0x80000) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) 3m16.230005917s ago: executing program 3 (id=240): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=r1], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x800, 0xb12d, 0x8, 0x1, 0xa7}}}}]}, 0x4c}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffe0, 0xa}, {0x2, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80d4}, 0x4000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000480)={r0, 0x0, 0xfffffffffffffe0a, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000500)="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", 0x5d6}, {0x0}], 0x2}, 0x4044000) r5 = accept$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @null}, [@null, @remote, @netrom, @remote, @null, @default, @null, @default]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000b00)={0x0, @in6={{0xa, 0x4e23, 0x1ff, @empty, 0x7}}, [0x3cfb, 0x100, 0xfffffffffffffff7, 0x7, 0x6, 0x7, 0xffff, 0x3, 0x40, 0xe, 0x1, 0x5, 0xc6, 0x7fffffffffffffff, 0x6]}, &(0x7f0000000d40)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000c40)={r6, @in={{0x2, 0x4e20, @empty}}, 0x1000, 0x1, 0x6, 0x6, 0x3, 0x1, 0x4f}, 0x9c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000d00)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000631108000000000005200000000000009500740000000080"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000865000/0x4000)=nil, 0x4000, 0x100000c, 0x4010, r8, 0x5450e000) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x4, 0x50, r8, 0xe9e28000) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf250c0000009c0003800400010004000100290004009ebf89a6efed047a754a2dd316fbd22de257b81aec75ce93c9c989f1a9e3a1eb278565932b00000061000500a4f827345ff1072c2aaabce6f7c81bd8c0e78f44f55daecbd4f5e21df266dd83949a027838d5c258816744a078a99048bb706383df8efb9a2ca03ae858de7c9be84c86b6d1709f6295c6961c06d3772c62bfa21887ad7e5c09ed761ac5000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000e00)=""/6, 0x6}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2}, 0x2001) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f0000000280)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0xfc1, &(0x7f0000003780)=ANY=[@ANYBLOB="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"/4011], 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c00)={0x14, r10, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) 3m15.352774147s ago: executing program 3 (id=249): r0 = socket$rxrpc(0x21, 0x2, 0xa) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x0, 0x24, 0x0, &(0x7f0000000280)="61dfb0020866c667fc53b9265583e283d8ddef068c05608ffc450394321545000043aee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1401, 0x9, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1d, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x40000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c4000000080002400000000009000100534e4154"], 0xb4}}, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x8) (async) unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xf, &(0x7f0000019200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0xff8cccad0bfa8d62, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xf46}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x95}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit]}, &(0x7f00000002c0)='syzkaller\x00', 0x3a8, 0x24, &(0x7f0000000300)=""/36, 0x0, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x9, 0xffffff50, 0x65}, 0x10, 0x246a, r1, 0x2, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000d80)=[{0x5, 0x4, 0x3, 0x3}, {0x3, 0x5, 0xa, 0x4}]}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001a000700ab092500090007", 0xf) (async) ioctl$IMGETCOUNT(r5, 0x40106183, &(0x7f0000000000)) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000a40)="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", 0xd0) (async) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000040)) (async) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m15.016021151s ago: executing program 3 (id=250): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) bind$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 2m59.809232838s ago: executing program 32 (id=250): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) bind$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 2m34.89224214s ago: executing program 1 (id=522): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x8000000000025a5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80000) sendto$unix(r0, &(0x7f00000002c0)="a3cd740c58f65874907a0f906176c088f8be51d243ffd0d5c5c6415b21e05f597c819d29f0f820c49c4a61cbb4a36d7c680b3154216a5386f3aa52bd0d060e65bdb31947143ff20b8562fd8ae64ac1bfe84512e1a073e2adbe7752054d8add2513178e239b1794e330d832071b958e6b8712ae6f8e125b6ab9fd5f86dd3c3a315dd00f69198249350dffe4333076cebb2866a3342fcdba3a2234cff5d03a99b22d0e3ae22fe5ac8647bcbb40b278341d004fa879bdd2977eea7faf3f81984e5c0857ce6406cd1065391cf8408c6c749f58145eddbfa817ca9815a3a2", 0xdc, 0x8000044, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r9) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r8, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES8=r8], 0x40c}}, 0x0) 2m33.79328031s ago: executing program 1 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='tlb_flush\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (fail_nth: 60) 2m33.609454039s ago: executing program 1 (id=535): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ip6tnl0\x00', 0x100}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ip6tnl0\x00', 0x100}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r2}) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r2}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x80) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000000a00)={{r6}, "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"}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000000a00)={{r6}, "fa5e84c9db476dc24231a9a8e8c68659f28a8af96ac89f9543eca7ac559527c7881983e32cfca54e6dc5c54941f0ee06f1a36d95d9657bc614cf3b29c34f773574cc10aa4e1f9438451e3a4dc717bf7cc9187535b82055e29f57a6f2e24a68d6b1556a305d3b7eb2c4e05f5d5d021227f1a38742d9f10ad8d8c82e9f2c81ae776eaaf87979441220bac20a42fae1093baa06ae5d85597297deb822ad7a880daa7083a5ad16e540b07a4244ac2d005d2dfc58c70c9e30ca637cd690f55e5c6040b90c68b7834050050edd7ae3272b274050b9d4237046da805fc578d59c4aa95586da31577faf9378d148ce6b493c52b2a192650c11fc23d12b31ee1a8b7fcaf2c36e1859714a2976c9df2be18489b969dc4d725afb18e6cdd68dcf66e2253e73098087b1edf0d2e57783b23190ea5c81f91d5e6b94df29a13a1005c6d05c2cac3fdcab385b55739d9914aba32ed5be9ea264749b65151c306ecea02269517ec03624193b69ebc294b94893073938cf5285b4b3b0948c688f4383915188c8a7c6808181d407607d2ffdb0ba970ba6cbed4d95013a7e185ff4e931b137f9e44d8ef918b87b8c470c9168e0cb2c9e1aad0377e718f7eddac7dc76b38e01ba7ef52e527604b69feac2b133aa75bea9c85381c443035e77cced85ca5583980a9720fd93d14797823176e0813630757fd729075f84261cf91989c6b871725815cd790c56778c993daa0f6b138e2e7ceded1cfd06555b16a7f1a238f91c461789dfaaf884c42c09ce24c7a98aa4c7881117c5abc5b525b379ee3216e21d9547caa958718d5ee05232fb29f7e50c77c97c3229348889663d1f16953db3e19147573eeab9fd262d4fe3d3d85f61177789e9efab704ac11e83040880058060f5e99c6100576c0898dfac3adbd55509ccd24177cf9869ed175a3a822692fe38d97ee682dc3fb95d404f5a1250a413247f784fb86117a76e4e709be22aace80ed3ad7607f15e59e11876336c8c8bbdd611eb04cca5e6d1dab9dea7a9c39a7a614aa1405840c12cbdbc7da289eca748d5977e7a14d2cb03412fccf0f4c95598a4e3abfd8d81998b04323c023aca0408fd1da05873fb75651e832bc9070e8c42a4838dd94e2ed60a6e0cdf56f8f7b11674006e43b01ffab258e79c50a9a4266e027964d3bb6c4c85f70da5630c66045eb088de831d5cf904f36af14e56cd5529d32603494725eda3a0e3d887498d5e1ddfc216d010a7c6066f802968caa0afed317e59af2863b4f1d2720c74d6eef889329286d4f9e2fa74ca742cbed6db15e65acf9d2f6d230e75152672afad20c0a6aadb0754a5217ea32df9a6657642bf73b347e8c9cd79983cc0aab75c5d76e3f57c150ce5455977130d92ac039bfcd00f4e2799b3ab93266852aec03e25d8c04a34f955480b468d572df73a95017ed6d9f90d9162c7a3cbe3bcbdbb14fd86313663d181c5aa90f881a3fb2017c91740b797fed71e4da14deb69d422158bb94236b7622d562dd0f3190ecc84ab437dc106990c0a0563aeb2ccf9ef69cdc789265d9f77f83bfcc2ccd1ab1306beecd21f75d0089eacfc29b270918ca89b5ec1e1e4584f13f066452b42ffb68aca2981877a63f74bf57b092b8b33794f4d2f732b53b5ba907175d3296a1785ecfaa7edd0151e795d2f2c6b7058551da728e8cec0215e244ccf58a2ab98dc53468944ebd4a238f133463e5e1fa4d17ddd793dd5a4d6ea3d30d8753ec3595a44afc0dd63f644ea66b26de59dc580abec3fe7de7151dadc2168118244fc1480ade84365b8d7f924b3dfd8244b00eb987c514de6a691fa58725c4ac4de4a3a312d599e3ea96e3f09104889b709eada991a2f8da355d516c88203a3c4347327a4487ccbd82533a48059a28696eefcb0d58b6f0e98ebc6979e17871ed82fb1f4fbc6df5e971d21cb414a7586bd964dd003e8154188f0db1c92716111a7718ed1f4bc56b0aaea048567e529621f3c4f9a4fde0d82c1db98fb7ad13afc1476bc8473cfcaf8f256e22dcd198d4bdec1582077bde8f860ab4b819efdfd7a8b266f64c2466cfdf63ef79348616d93f445464c7bb4da8f17a208b3644fc244ed05648f25fae5a71aecc2d55444ec583c2a2f95cb66b986aed5ed29d6703aab50df1290f5d8ab16c2f457acaa7950d63491ba123bf35c9663265f81d52b0784f9a2ef2de53ee2c88fa51a4541413c2ac35c1b0be5e989b714229feb5516f68ee22e1cf76d461dca897464243d6236af36ea9cc6d66486a1a49970689dd6a1aecd244629a71020708c6ec5c0a42f7a4ec2a4136db1b7dbdde4c853859cc3102017b617f1cc24ffde59c9a8721b6a8faeb3f55df8a516d2e169ec21bbe8953c563212555d66d38a510083e1310884d79eaac742b573dc9d928119b382a5c655890daa9303337e7cd5cb80211b893daafaa43e9700f16be2cabfd72250e35c52d3d820884503067f04119e1d6cabb0443d4d199197097448151b45407790e4b6612b6594471bb76160737feb0ca334a06716c03767ad9c0094e48316b6d1f649a979e02a9665817da18237c89773087146e31847c0abc2b8209d347c0482711ab16887b5754f94a9661a0b6689510784db2ba8aec8e4ac2dfc3cdb4e4045a673b9f433ff1d73bfa8ec597b93941c7daec5f9cd0fdea6f95d07171e681d32017a3e2d0cde459a0b55198653085d96e44cc7290191b10cfcb1a3332fdf71f41f0e54e2261d014022e2ab079d90a1158b1cd2452ec22be8d5e1223cc61a7f498fa3b0cd5cbc3e7c533b34afa3e4f4cc1a4c12205b7b97ec49c004c6a69db48dea4f526b33108cbd471b8cb5c35d8a360dbe720f27bad724108840dfa99a973ee6ad59b40a9d0467d36c3b6bfd730d911d2f942384850c0404b0c20bbe008909a1ae2c8e8625faad1a9af6d3dc175e173e893deebf2da54b401094448aeb2de6354c5f4c47a86cbb906ad30c600ad0496fca56db981c80dc091a583c08353dfa8cb2d4bb3e38a3a090c2f0f09388f9ba957da84aae463a10d0550b12b8fd68c02402a768e8faf51c89c1edac3164aa5f6e2b3d9a4818c42e24c26a3b253f5d738c732ff646f9fef729c63a1798531dd32bce443f7fedf366c7c3874577052d77b639e9f78b586a3b09466e900186bfafc3de6554e1c96df6573020fc022881b7dd3a63c9384d48bbeb271ace6f19b91e1c990247c82bb6a390298578d67f45207263f084658521aaae6189c3c1daa21c15855720f7bf11e10465ee551e7f18d3e6a73d3fb787b98a80da7b422dda8ac6b49b526b2687166590e459cef52cfbba6a11625e760531acca45223361f796dd2b739a79dedfb1e104a685184dd89ab5ffd1f6bb70df38383e698ed82714d8719af3c995f3a5e640a125a773064959ef033ef6897444acbb8e71d742db507071326ae5c0afa9a5b7d5a95e212836e61b792094c44fbe6858d78add76a2af9064f7689ed7a50eddaa2526021666d998c347e4c2783e9d60b20eb41d03d80c21aa267c33b6076aff6399105d8cf91fb9c129020b72322664794c71b7740560be6604a563645ae959446c8e5b49ade00ed82c707c2965ca6cd8863b3022087794d03c45a81f47906ef78cd09e4fde402431c0c553b4dc353c651c39149139134c331ff9c799ba4e74024a85a022e0e16775150607857bb2445e811c991c2b80620879dc218a184e2941340a25cbcdf9357d8a8427a417e247844e3f11828c5a6ab7e594f47a417ce43ce900754cd9b01e791fc7814fbaed5300da98f8848a65619779412db6b61a90edcc22b6622d0837a5be92b72d681c653621a8b6bf2cf97f55e6cffc2de1d09b717330c7e5abdfa91d17cc24dd1049af6e6d1516969e60932e40f02f70be78ae300819c7d60041cd45adcde41bb1fc87882486bd8ff1a37e28ec679c548bf654883bb7adddb362d34bd9339caa5e58e1830ba7a6f39ccab439a671affc165930349b0d80a82836ef4a0a253c3377b1cc773dfa619fd69df0e710261a347d4a2c93963d3517babbcb2a6d82c2ffe603095f2a6453103b99ff840f184ecfb13155d58706956f9c71a0d56b6961860f39f9d8a3bdcee6a66f164b02e2a51e6429c44bea3c953002a52d505e23d3ab02fa0664166443a2276377d2157232a7d7d153e3e53467eeb18520cba9db9fa4bbe7c65a32ee55185ac4e66219580b950d19fe69dca7c10398c6af7f26dc8a6c0d1a09d9da0108eef984514410e1611783f789519315881de0f74f976d3779a3b56b343ca2e05ba22670b2ffb0928e94c557b45c3283a8e6c5d7bff748812cec12f34f2c13182d4f8d44c7cbb4780b41b83c0306a90dbd0dcc358efb1e68e9ee99770c3ee9b91059b44ae115c63ddc439e771565889b875abe8f5e19ea1c994d5ae2c378044db13b787821cfcfd1e71de9404775ee85ae00f04a712bf58b41b39a1e09db10b7299ee73041dd1a1488a8167e3185a9420dac27caa1d71155968254a08ee084ffcdce434ed84d4a26bc8efa76fd51e9b78723838fd98cd81cf8ad5a1b2fd5007f50926e138d99a8cb66b8f2e429fb6558ba23128f4171e740fd2278549e4ca9ee294d5d027e95131b56cce8f156f2da504ee19f17fe700b92311c05d6f864e98b991282428fc8d89bed30be4558015e594389ab5e16709168bff7b12a8ed604e842d4e0442da5c745af0ebdad64c35ddafdd92f3661df97d8551b8a68aa711bc0a45b6d6064cfec4dd9a86747a71458b08f109a81908ee3ab588d3f25ff39ec462a78fe3db84b8187702444af6bff2fb12b659d4bc4fb026b7b4576cac3521d95794acba483179da587580dca53a5e8916051d4d77b4c035648005ae2f56e800ae1e44a17b2b1fd2b8914cd8033241eba17878a0e7845d00d26a39103d527b63cc7c3bc8213e8a527ecaadfaff1b7db95efed040fe9f903095176f2ecbdcdb9343e609228db43538d5f624c3ca089883e1e2cf28b52dcb8e6c759c7ef556d571df2754516e913e33d3a08ed59badd98507a4a98a20d38a4783fa81884a08bf0b4719d4d91c030c99dfecc11af946a7dc6ebda9b8fc3548152b1bc28c7873fc465c9f75d807b72c0f8efd81314b93d86a3dd8453bdf7d10665f08f139b844af5b453b6814d814121723f1ee5f38131bc942cf050bd3501cdad73831793db7f185d00b8a9651778730dad348179d06d60daa2467f5aa0a180869321cf19093c5ff9ea159cb6ed4289df99e6776f487e0a0765a074a9319cce9778e4f791f93872d0f58f00acde4816b72a0fe3d979c4ad643db80d2eae0974e7db86c8e88b016e0533d71e45ec030d8cb168f42371660fc6e1662b34ffec99ea10b302da1d2588550d627acad89d037475c1cfc4413f25de4175041fa3c22fdbeb94241d2ebb5de9e3e85e253bb6030b30328d428006e3aad7832c8f02a870c7c07721b0fb3e59a61348dd1925d770d81e9aad7fb9618f1347680e5bf18704f215f5af0b78a3c920b65fc6e286d06df396afd46b9de3a3383dfe1498be13a9e069f04973c9861aff690c357d62fc467cbb31317c56385915362fef0b44ae50c829379c2ceaeb2d053610a6e3298cee5a2efa69772d62edee0a85972c45d1eee26dd80b77a834c4358063de2cf5b3233ebbbc93629129e99d3593dbc5a7e0b491fda0daa62c965927af095c91464baefc3fe8511c8e7493cf5608ae9992ef59558c0b4bea92f170f1aa2c7ddde6fd1723ffdd3336ff3cdf9fdd9871f310a8aa291807c5a5ecf77ceda1fef818"}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2m33.141377862s ago: executing program 1 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100189ec6ea87c2bf504b00000000000000700000007000000002000000000000000200000d000000000000000000000000000000000000000000000000000000080000000001000000000000070000000000000000010000040000000000000000000000000600000000000000000000020000000000000000010000050000000000000000000053fb7454c4655a077c4cd33d14c5a2dac2bf65c1f9823501fc960e6c1a52b9680b5136b87a041bf70150dc3d89b7f6030f43a8197a06e378c20db2e0977f"], 0x0, 0x8a}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x1, 0x80, 0xc, 0xfffff42c, {{0xa, 0x4, 0x2, 0x8, 0x28, 0x68, 0x0, 0x5, 0x29, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0x40, 0x1, 0xc, [{@broadcast, 0x48}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180c000000000000000000000489837e000100003fdae6378b26181104", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e1d, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1cf4000000000000000000000700000001832704"], 0xf41c}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r3}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0x402, 0x3ff, 0x1, r2, 0x0, '\x00', r1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b00f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000a00)="8a3afee2c497da49b89463a8f4e22987b2de7958c94118cde48f88a046f5f390b3d9480a14cb8ed3450979e785569106250b5244d8042c28ff668e044f13fb6e6d0a664976c35ca48a3ba6165cd4001853c732b60e7435b2f0d2c064ee0bde66bbbc3e5780fedcda7e2f80cf468c7d6a82ec1c36d25e194d203ae9a0191ef364363f398a83656694f45523731c035b56047feb729d2312b450a0f8e5d1897c9493cbdf7192c071b77003b9e51ef62efdf576ff8fe8126b4079594777d48f648ce22c9ae3e36e46105f") r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="100000000000000001"], 0x10}}], 0x1, 0x4000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000340)="a9", 0x0}, 0x20) socket(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r8, 0x0, 0x100000000}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r10}, 0x10) r11 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r11, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r11) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newlink={0xfc, 0x10, 0x1, 0x70bd29, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, 0x10b88, 0x40421}, [@IFLA_VFINFO_LIST={0xc0, 0x16, 0x0, 0x1, [{0xbc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x1e7, 0xfffffffe, 0x8100}}, {0x14, 0x1, {0x6, 0xdbd, 0x0, 0x88a8}}, {0x14, 0x1, {0x6, 0x119, 0x7fff, 0x88a8}}, {0x14, 0x1, {0x4, 0x369, 0x6, 0x88a8}}, {0x14, 0x1, {0x1, 0xaf0, 0xf3f, 0x88a8}}, {0x14, 0x1, {0x9, 0x9a2, 0x1000000, 0x8100}}, {0x14, 0x1, {0x9, 0xd43, 0xfffffff8}}, {0x14, 0x1, {0xfff, 0xf9a, 0x81, 0x8100}}, {0x14, 0x1, {0xe6b4, 0x1a3, 0x8, 0xc03cab2bf61baa39}}]}]}]}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_MASTER={0x8}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 2m32.552693326s ago: executing program 1 (id=544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a12ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000040)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 2m32.331937074s ago: executing program 1 (id=546): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50000, 0x28011}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}]}, 0x48}}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x1ff) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a00000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000070900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000000000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001780)={0x0, 0x9005}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 2m16.541493352s ago: executing program 33 (id=546): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50000, 0x28011}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}]}, 0x48}}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x1ff) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a00000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000070900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000000000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001780)={0x0, 0x9005}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1m31.883055599s ago: executing program 0 (id=72): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) unshare(0x60600) (async) unshare(0x60600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x40b942b37d0000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="000000000000000000b7000000000000009500"/40], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = gettid() ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x4, 0x7}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) close(r8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000180)={0x6, 0x8ee, 0xfffc, 0x0, 0x7, 0x3, 0x1f0}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x8, 0xb, 0x1, 0x20083, 0x6]}, &(0x7f0000000400)=0x54) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) clock_gettime(0x37ad3e8caf423423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24008005}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x84) 1m24.996001079s ago: executing program 5 (id=969): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1m24.726066249s ago: executing program 5 (id=972): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r4, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4}}}}, 0x30}}, 0x2c040090) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x80, 0x8, 0x40}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x500}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) 1m24.418796545s ago: executing program 5 (id=976): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) 1m24.179949672s ago: executing program 5 (id=980): mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x200000f, 0x28011, 0xffffffffffffffff, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) 1m23.999281075s ago: executing program 5 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8cbef01b7f1efa050000000000000004", 0x0, 0x0, {0x6, 0x40}, {0x2000000000003, 0x1}, 0x6, [0x3, 0xa000000, 0x9, 0x7, 0x7, 0x1, 0x10, 0x953, 0x1, 0x4, 0x8, 0xc, 0x1ff, 0x4, 0x2, 0x5]}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x328}}, 0x80) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) 1m23.851251826s ago: executing program 5 (id=985): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x100, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x70bd28, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400e300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x74, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x44080}, 0x40080) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000023c0)={{r1}, &(0x7f0000001100), &(0x7f0000001140)=r11}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000fff0000000000000000bdebd6e127d252527d000000008d137d7b0fe3437a18587398068199df9b579569390fb1dab6fd6873726dd5914986bfddfac5a88158342bd0878b2afc9b8e2d670b9548938dd33a58100d93bc14bb30b77ec78ece5af265b3a4b4b713fa43c21d08c5e3e2a6307a59748e67ac3aa0d4598fd566360c5370888c757db75970096d3fb951dd35555a8fd6a4d4a9e7fba244c984ff6548ac108b563a5d772720605a5f5bb785867b493b44662d38a316e0e2", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002b000000000005002a0000000000"], 0x44}}, 0x0) 1m20.236421513s ago: executing program 0 (id=72): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) unshare(0x60600) (async) unshare(0x60600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x40b942b37d0000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="000000000000000000b7000000000000009500"/40], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = gettid() ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x4, 0x7}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) close(r8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000180)={0x6, 0x8ee, 0xfffc, 0x0, 0x7, 0x3, 0x1f0}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x8, 0xb, 0x1, 0x20083, 0x6]}, &(0x7f0000000400)=0x54) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) clock_gettime(0x37ad3e8caf423423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24008005}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x84) 1m8.964966891s ago: executing program 0 (id=72): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) unshare(0x60600) (async) unshare(0x60600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x40b942b37d0000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="000000000000000000b7000000000000009500"/40], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = gettid() ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x4, 0x7}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) close(r8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000180)={0x6, 0x8ee, 0xfffc, 0x0, 0x7, 0x3, 0x1f0}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x8, 0xb, 0x1, 0x20083, 0x6]}, &(0x7f0000000400)=0x54) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) clock_gettime(0x37ad3e8caf423423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24008005}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x84) 1m7.272255342s ago: executing program 34 (id=985): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x100, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x70bd28, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400e300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x74, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x44080}, 0x40080) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000023c0)={{r1}, &(0x7f0000001100), &(0x7f0000001140)=r11}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000fff0000000000000000bdebd6e127d252527d000000008d137d7b0fe3437a18587398068199df9b579569390fb1dab6fd6873726dd5914986bfddfac5a88158342bd0878b2afc9b8e2d670b9548938dd33a58100d93bc14bb30b77ec78ece5af265b3a4b4b713fa43c21d08c5e3e2a6307a59748e67ac3aa0d4598fd566360c5370888c757db75970096d3fb951dd35555a8fd6a4d4a9e7fba244c984ff6548ac108b563a5d772720605a5f5bb785867b493b44662d38a316e0e2", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002b000000000005002a0000000000"], 0x44}}, 0x0) 1m3.663002696s ago: executing program 4 (id=1092): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x7f, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) socket$inet6(0xa, 0x80000, 0x55) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m3.380781256s ago: executing program 4 (id=1095): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'dummy0\x00', &(0x7f0000000400)=@ethtool_rxnfc={0x30, 0x2, 0x9, {0xa, @ah_ip6_spec={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x8}, {0x0, @remote, 0xc00, 0x2, [0x1000800, 0xffff]}, @usr_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x2a}, @empty, 0x6, 0x40, 0x7a}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 0x5, 0x8, [0x542c, 0x6]}, 0x7, 0x1}}}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0x2, 0x72, 0x400, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 1m3.173004549s ago: executing program 4 (id=1097): sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f700000000"], 0x38}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff030}, {0x6, 0x80, 0x0, 0x9}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) 51.402844248s ago: executing program 0 (id=72): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) unshare(0x60600) (async) unshare(0x60600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x40b942b37d0000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="000000000000000000b7000000000000009500"/40], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = gettid() ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x4, 0x7}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) close(r8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000180)={0x6, 0x8ee, 0xfffc, 0x0, 0x7, 0x3, 0x1f0}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x8, 0xb, 0x1, 0x20083, 0x6]}, &(0x7f0000000400)=0x54) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) clock_gettime(0x37ad3e8caf423423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24008005}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x84) 45.518675175s ago: executing program 4 (id=1097): sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f700000000"], 0x38}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff030}, {0x6, 0x80, 0x0, 0x9}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) 33.519555441s ago: executing program 0 (id=72): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) unshare(0x60600) (async) unshare(0x60600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x40b942b37d0000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="000000000000000000b7000000000000009500"/40], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = gettid() ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x4, 0x7}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) close(r8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000180)={0x6, 0x8ee, 0xfffc, 0x0, 0x7, 0x3, 0x1f0}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x8, 0xb, 0x1, 0x20083, 0x6]}, &(0x7f0000000400)=0x54) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) clock_gettime(0x37ad3e8caf423423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24008005}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x84) 31.044121585s ago: executing program 4 (id=1097): sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f700000000"], 0x38}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff030}, {0x6, 0x80, 0x0, 0x9}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) 17.76014469s ago: executing program 0 (id=72): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) unshare(0x60600) (async) unshare(0x60600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x40b942b37d0000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="000000000000000000b7000000000000009500"/40], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = gettid() ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x4, 0x7}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) close(r8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000180)={0x6, 0x8ee, 0xfffc, 0x0, 0x7, 0x3, 0x1f0}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x8, 0xb, 0x1, 0x20083, 0x6]}, &(0x7f0000000400)=0x54) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) clock_gettime(0x37ad3e8caf423423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24008005}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x84) 16.278317732s ago: executing program 4 (id=1097): sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f700000000"], 0x38}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff030}, {0x6, 0x80, 0x0, 0x9}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) 12.798820442s ago: executing program 6 (id=1296): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x32, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7e262595, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @ringbuf_query, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb617}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffffe, 0xe3, &(0x7f0000000200)=""/227, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x2, 0xe, 0xc}, {0x4, 0x5, 0xfffffffb, 0x3}, {0x2, 0x1, 0xa, 0x3}, {0x4, 0x1, 0xa, 0x1}, {0x5, 0x5, 0xb, 0x4}, {0x5, 0x4, 0x3, 0x1}], 0x10, 0x82}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={r0, r1}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000004c0)=@generic={0x2, 0x0, 0x9}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r2 = socket(0x1f, 0x5, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000500)='lp\x00', 0x3) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000044) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f0000000900)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x46, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x15, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80f}}, &(0x7f0000000680)='GPL\x00', 0x1, 0xe1, &(0x7f00000006c0)=""/225, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, r3, 0x8, &(0x7f0000000800)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x6, &(0x7f0000000c80)=[r6, r7, 0xffffffffffffffff, r8], &(0x7f0000000cc0)=[{0x2, 0x4, 0x5, 0x5}, {0x0, 0x2, 0x7, 0x7}, {0xc212, 0x1, 0x10, 0x9}, {0x3, 0x4, 0xa, 0x7}, {0x1, 0x3, 0x5}, {0x4, 0x5, 0x2, 0x2}], 0x10, 0xb5}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r6, &(0x7f0000001340)={&(0x7f0000000e00)=@isdn={0x22, 0x2b, 0x5, 0x56, 0x86}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000e80)="631942f3f1098375aba1d7eaf60af2ab4fb23938ffdbc3f8137d85aeaa2bf7ffe1175dae6b6f5d48031106e2289c68a7638e5b90782e57b0c467c25a37e6f6da80367192446b7a3157e6c55f3de497e720e7f875f572615fe1584558ede64b9803a884d17ea12e9d125ba0a0c98a00", 0x6f}, {&(0x7f0000000f00)="bd4517dd2f2eef5eed54160238e321667bab439e5f8166be90ba92b7130271572d4c261149161969a8a6f5a9ae4235f96d7780cc2f6547e07677b9ff69e073b4126178dd37b0fd71b39210a1e27bbe26578cba8e2a11cb4791fd3753712b735cdc2d3771f8bc988de549f250e7783985b38e0683f473203eb2c27ea5fe6f3084736d962ec52d360e8531a438ef6d992894e41683facea994bed2be15574ba87298799f81d3140fc32727a313939996bdbeddfeacca2b78b3b771da00211410454357c5114500c568", 0xc8}, {&(0x7f0000001000)="899c61d107d345155f9de8a3518033497af1ce6a6c75ca6db4e469e99665ab7585212a2396a32789021c7b929e889dea9379f5478c27d3fb1228e3c2f38e5f73269147e6031aa3ac2fe577fa044aa4b4bb57a0bfde46a7eab8ea85b8aa09c102761cfce6c2c8dcc90d6ff11cc93d47c2b3cb0a3e7bb6224013a37e1ed76db55295e6a5e14d69f66e9103798766d13bca6ee1c24cbb12e1cd3d288c75db6c401a6bcb171ffb63a08f61bd3541c8e9637b265930ae0151738ccb497812c0ce719e275ed83b96d2", 0xc6}, {&(0x7f0000001100)="1cd4f3c1c144fc4c95f0a75b5efb11584ab8c7fadf3c666493d4098d1e36caaa21ed0c0ecc04b2b7291d5715dae621c6d22a6428bfbdca7178695c561d68dcae91b10820c9f4583aa3d6464421b6912a6df4203e6834af57e9", 0x59}, {&(0x7f0000001180)="6066d4f1298f0ac1815bb5683071dd5dcfa3024dfa30f8184c33c8e2935a0da43a9243585a2cf4c9d5b6fcdbcdf5d5419493d104dfaadebc5e818aab96d8d731718a1265e9416c7d0947a6995d3de4de38bd4e2b6d504a62222b2e0e4ccfb3c24d35c46eb1b6d9bf78374053c5906e9e9380d49ebff3d774bbe73d02520329c76655802dbe8e4a0595fff72e6e3c6f4c478ab2d877d79fea6edf0c29698f291c79d140bc3091598838887108", 0xac}], 0x5, &(0x7f00000012c0)=[@txtime={{0x18, 0x1, 0x3d, 0x800}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}], 0x78}, 0x440c4) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r9, &(0x7f0000001380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f00000013c0)={'macvlan1\x00'}) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000001400)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000001440)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r10, 0x50009417, &(0x7f0000001500)={{r11}, r12, 0x10, @inherit={0x60, &(0x7f0000001480)={0x0, 0x3, 0x2, 0x7, {0x21, 0x7, 0xb72d, 0x9, 0x1}, [0xe1, 0x1d, 0x9]}}, @devid}) sendto(r9, &(0x7f0000002500)="3eb9e5e33b4f69c63e8a1e57ade91ff64467dcf2bd918118e21d40c7a1130f28e0b556b1c8dff06c9811835befaf0293864ab866f8a8816455d3e4afcade64f47e30abb48e4cb337888965c1a11c3fc0e0d00db376cf8981d24db9c1384f985cd63b908444c011681b778bdddbac20e6b8f0aa099413471f369bdb986759dc09825c9422f7dc9ba36d5498ac5353fabdb9d8ae363a61405db2a4d6e36f84e31f5f18d360630cc16393a0ffe5d162ada5b2cfd06986d894592ddee7fc38a2dfa32b080eba9b9e193b06c9ef52021138966cdaa1a119463c7e1f1ac72ac76fec28", 0xe0, 0x4004000, &(0x7f0000002600)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002940)={0x0, 0x1f, &(0x7f0000002680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9537, 0x0, 0x0, 0x0, 0x7}, [@exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @generic={0x10, 0x4, 0x4, 0x9, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x4, 0x1, 0x0, r11}, @jmp={0x5, 0x0, 0xd, 0x4, 0x6, 0x58, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000002780)='GPL\x00', 0x5, 0xa7, &(0x7f00000027c0)=""/167, 0x40f00, 0x4a, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000028c0)={0x5, 0x6, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002900)=[{0x2, 0x2, 0xa, 0x5}], 0x10, 0x7}, 0x94) socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000002a00), &(0x7f0000002a40)=0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f0000002a80)={0x2, 0x6, 0x1000, 0x4}, 0x8) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f0000002d80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002c00)={0x118, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_SEC_KEY={0xc8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "636d9734c8c340096f7d811f9deec1c0190b55aa982edc41ff08c046c19c4894"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9af58f1ae15253be121b4259f59f9ec62fbd52482404444d34b6bd6f117af3e3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f0b35876a0b524ee00cb0ed3a397d0aece65d07b0c05b6741d3b4095c0e3b82c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x35}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004}, 0x1) 11.364039513s ago: executing program 6 (id=1297): r0 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000005c0)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000af00)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000002d00090526bd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) recvmmsg(r0, &(0x7f000000acc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, &(0x7f0000000140)=""/150, 0x96}, 0x3}, {{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/26, 0x1a}], 0x7, &(0x7f00000005c0)=""/211, 0xd3}, 0x3}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/114, 0x72}, {&(0x7f0000000740)=""/130, 0x82}, {&(0x7f0000000800)=""/42, 0x2a}, {&(0x7f0000000840)=""/172, 0xac}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x5, &(0x7f0000001a00)=""/150, 0x96}, 0x3}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001ac0)=""/154, 0x9a}, {&(0x7f0000001b80)=""/154, 0x9a}], 0x2, &(0x7f0000001c40)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/32, 0x20}, {&(0x7f0000002c80)=""/135, 0x87}], 0x2, &(0x7f0000002d80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002ec0)=""/214, 0xd6}, {&(0x7f0000002fc0)=""/5, 0x5}], 0x2, &(0x7f0000003040)=""/220, 0xdc}, 0x1000}, {{&(0x7f0000003140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000008540)=[{&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/172, 0xac}, {&(0x7f0000006280)=""/209, 0xd1}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000007380)=""/128, 0x80}, {&(0x7f0000007400)=""/218, 0xda}, {&(0x7f0000007500)=""/58, 0x3a}, {&(0x7f0000007540)=""/4096, 0x1000}], 0xa}, 0x5}, {{&(0x7f0000008600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f000000ab00)=[{&(0x7f0000008680)=""/164, 0xa4}, {&(0x7f0000008740)=""/85, 0x55}, {&(0x7f00000087c0)=""/4096, 0x1000}, {&(0x7f00000097c0)=""/77, 0x4d}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/107, 0x6b}, {&(0x7f000000a8c0)=""/57, 0x39}, {&(0x7f000000a900)=""/178, 0xb2}, {&(0x7f000000a9c0)=""/50, 0x32}, {&(0x7f000000aa00)=""/247, 0xf7}], 0xa, &(0x7f000000abc0)=""/206, 0xce}, 0x8}], 0x8, 0x10000, &(0x7f000000aec0)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000b080)={'wlan1\x00'}) 10.213285322s ago: executing program 6 (id=1302): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x149a40, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) write(r4, &(0x7f00000000c0)="510003000000", 0x6) r5 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) r8 = accept4(r1, 0x0, 0x0, 0xc0800) setsockopt(r8, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000002034a94030008000400ffffffffffffaaaaaaaaaabb080045f0002c00000000002f9078ac1e0001e0000001000065580018907804e700000000000086ddffff000000009821d9f02f84492bbbd4be4a7a07f7270fbaebe2e58bf3bdde78b12eb4751b464bae68804e044ea798fa712ba4216e80c8c72337f678"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 6.181847975s ago: executing program 6 (id=1324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x300, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x7}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x300, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x7}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) (async) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) (async) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000400600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28) 5.732883536s ago: executing program 7 (id=1327): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000)=0x2, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x3ff, 0x4) 5.516675748s ago: executing program 7 (id=1329): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback}}}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000080), 0x4) close(0x3) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56561, 0x804, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x54}}, 0x4040010) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='|\x00\x00', @ANYRES16=r0, @ANYBLOB="00032dbd7000fddbdf251600000008000300", @ANYRES32=r1, @ANYBLOB="0a000600ffffffffffff00000a00060008021100000100000a001a00ffffffffffff00000a0006000802110000000000000a000600ffffffffffff00000a00060008fa1000000100000a000600ffffffffffff00"/96], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x408c0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11f, 0x11f, 0x7, [@union={0x6, 0x7, 0x0, 0x5, 0x1, 0x7, [{0x8, 0x4, 0x436}, {0xc, 0x4, 0x4}, {0x0, 0x5}, {0x3, 0x0, 0xfffffff3}, {0x0, 0x5, 0x3cf9}, {0xf, 0x2, 0xdec3}, {0x2, 0x5, 0x7}]}, @datasec={0xf, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x5, 0x5}], "cf37fd"}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x4, 0x2}, @union={0x0, 0x7, 0x0, 0x5, 0x1, 0x0, [{0xf, 0x2, 0x5}, {0x6, 0x4, 0xc80}, {0x10, 0x2, 0x9}, {0x0, 0x3, 0x1}, {0xd, 0x3, 0x9}, {0x3, 0x2, 0x400}, {0xd, 0x2, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x7fffffff}}, @ptr={0x9, 0x0, 0x0, 0x2, 0x5}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0xf, 0x1}]}, {0x0, [0x1e, 0x0, 0x0, 0x30, 0x61]}}, &(0x7f0000000800)=""/163, 0x13f, 0xa3, 0x0, 0x80000000}, 0x28) close(r8) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220182018000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140020aab70300000000000085000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x23, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000a40), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, 0x0) 3.97106779s ago: executing program 2 (id=1330): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4e2d, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400b3a4beab292851d30003000000000000000000000000300b22b159aff8b6391c1d87e09d6726f6a4e45ab7539f1eccb015384669392123aba4105b5b7b700e9041e655a0362fa29eaf10d7f66746a3a7bf368e5088399ff9918d3d36a3035670dbe28fbf5ae36eb85604e96df126ce2bcdcf76c79d78bc9cb07dfd66f20a5d8d6c019529df0e905b127bcf40c6598d308994b419112c0cafde4e8be087efd24d9a78f2c30c34a568686a694c232a908d890b7d429f01fe3fb23aeb79c50112e32e4b6d5a2112b989994368abf86dcf11ec3f6b77fd3f85427ce149ff762f77effe925c"], 0x18}, 0x15072b6d2954465d) shutdown(r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0x1ff}, {0x16}]}, 0x10) sendmmsg(r4, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x48, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x400c084) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = socket$packet(0x11, 0xa, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'ip6gre0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x718}, 0x1, 0x0, 0x0, 0x20060000}, 0x4) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x4, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r11, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r10, 0x4, 0xb1, 0x9, 0x6, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x8000, 0x7, 0x2, 0xffffffff}}) socket$inet6_udp(0xa, 0x2, 0x0) 3.952929574s ago: executing program 7 (id=1331): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x2, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000240)) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r6) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000328bd7000fcdbdf2502000000133c9483690900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20000001) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000328bd7000fcdbdf2502000000133c9483690900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20000001) socket$inet(0x2, 0x1, 0x0) (async) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.668086949s ago: executing program 7 (id=1332): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0) (async) pipe(0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) (async) 3.547811867s ago: executing program 7 (id=1333): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) unshare(0x8040600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x2000000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) sendfile(r3, r3, 0x0, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x2}, 0x50) close(0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x318, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}, {0x0, 0x0, 0x80}]}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x44, 0x0, "9657cbb1491d4f77be69caf51fa08fc9231828423b2c00086a15eb1e4ce5"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x77eb488a, 0x5}}]}, 0x48}}, 0x0) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000540)) shutdown(0xffffffffffffffff, 0x1) 2.693528901s ago: executing program 2 (id=1334): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xf}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x27, r4, 0x1, 0xea, 0xa6ff, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x40040020}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000004c00128009000100626f6e64000000003c000280050001000200000008000a0000000000050001000200000005000c00020000003c000e000200000008000f003e0b000005001b000500000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1bd52c84568d1249f7669c2483fa40345b3f6a1bffca44546a50acdac8ee449c5461c6f2f254ba099e184438647705e5d8f1946d1c01d55e4657b71eb86a769b28d73b3496dc9aa1570b8be55df870e2869b9b964dbfcb48f75c9f65f60c5b9ad5cd42f924fdba6d0241f49972dd4c9621de82d3de86d0eb09b1e1"], 0x7c}}, 0x0) 2.524858552s ago: executing program 7 (id=1335): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 1.758688294s ago: executing program 2 (id=1336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000001000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000004000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000001000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x20}, 0x94) 1.682786734s ago: executing program 2 (id=1337): r0 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000100)="dc", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bba7bc00001800000000000000840000000000000007000400fefffbff20"], 0x50}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7961fdffffff000000007e0000000c0099deb4285d70006d9100"], 0x20}}, 0x4000054) r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @multicast1}, 0xc) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x278, 0x27, 0x100, 0x70bd25, 0x25dfdbfc, {0x3}, [@generic="2452e630b751e45b850be80df5995704092341a960054b198d56e694ca94ce231bb1af883b2b996c8bc35990180316b296e2610728bb33cba47c05494e49cf24ad5091844c4dd9cf4c61159a557ca9e27a91039c942e12da6b2b6631a60ad8bd70c2535eb284ed3e77fd62cb20a60cbc9828db1673a090a98b0d74453832d1124166e83ea48cccdceccf03f58b6beee01c387b124d7e0811a1085c98bf9a543547b569e63bd24077ccbe2f32ba485d4a220a400702252e77d71aeff54b139a73d16a82639eeb84c5c1db6341a73c62dfa421ddfb62fcba", @typed={0x8, 0xdc, 0x0, 0x0, @fd=r0}, @generic="574f096423d73ca02459cbd2a5c6aa45c4bc490b8aa1edbb96", @nested={0x13a, 0x4c, 0x0, 0x1, [@nested={0x4, 0x47}, @typed={0xa4, 0x114, 0x0, 0x0, @binary="1fe5a85578ebe66574d54f50b93caa30ec97540ecb39bbc9248be816c1cb865cbeb0718d833bfb2933b2e7a4c5cd61f950f53cb60c30746aac14f852b968169b6e62cef647e7fa54be7d65b8172aea0e63e2b3a21c64fbd47f640ec9db8f3d1f849972d65d72983735504af3c9830b43ae809ea99823d786ae04ebc4bf6c0f9ec7d14f1a6c1faae10cb0bdcbe26f8391f748e5de68c6c28b823be050a3785409"}, @generic="8b13ed25e72647aa365619ba81ff9393350811df615889b93a6167615c4856391d09cdbf33c417873b45f7e9b28608d29cf33e41babe476d0bc2724aeac9268e734bafe05c8ad0f71e85bbc0170e510c5f5b6830b9e48cc53ceb0faee4abf536c13a599e7b59867c0d393700b30bd72580f161a4c990cad2fe4a188606", @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x7b}, @generic="c9", @nested={0x4, 0xba}]}, @generic="15415256847beea60c323468128616476fd0034a71ea28157720abbc675ce2a1db7715d1e413fae2b444eda08168"]}, 0x278}}, 0x854) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@setlink={0x28, 0x13, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x800, 0x4a000}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'veth1_vlan\x00', 0x1}) 1.171591709s ago: executing program 2 (id=1338): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0xf82, 0x800, 0x7d2, 0x8, 0x7}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x82b6, 0x4, 0x8000, 0xa01e, 0x7, 0x40, 0xfffffe01, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1000, 0xd6, 0x7, 0x7, 0x6}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r4, 0x8}, 0x8) shutdown(r0, 0x1) 855.878162ms ago: executing program 2 (id=1339): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x89ee, 0x0, 0x3, 0x4, 0x9e}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x2, 0x2, 0x1, 0x2, 0x9, 0x8000}, 0x20) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x5, 0x4) setsockopt(0xffffffffffffffff, 0x7, 0x7, &(0x7f0000000100)="ace5809f538928a3b52dd9dc4d3686f60deb6dc4c70a92891a0f5926b4ff1d1e80c86cf65ca1ae0a277e44954423b812d555a5dbee99cf51cf7ceecffe8e8a96003af81a5dc90c623b4784db5403cc6f387e3a75f708de97e31ccb1af24047db03eea79cdac8fa9f37893daaaca9ffd087f2e0172c235020646c89e16c042aa27a44b58b7454328dcf93223389a09cde87a8", 0x92) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000280)=0x1430960) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) listen(r3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r3}) sendmmsg(r1, &(0x7f0000000680)=[{{&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @multicast1}, 0x0, 0x2, 0x0, 0x1}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="a90887c8dd86f3553f77eecfd364bce93f4505f4abf3c65fe4690b48d660b251c06bf9652e5aa60c7fb28facb65835711e29a6c41ba9d0d9747090d098f1cdd20ce82082c5421aad5eb5182a297a8819d6c62f8db4e5da11ccac72526b5e38171beba9a29a9e2f020a9846de1227d48a569395b0c504f24fc7ca3c329c8c70620dc5e79cd61b77cfc0e840acd1a6298b67e3d9285c7fe77e4249bfc0279c0234837f14f8646a5c818e526dd308504d32e5ec20ebff9531c7d7176e6cd5776656aeff0a4bd1d2b1ceb52904ac9d27044920d1d36de757b8cbd05b5fa0698452068ab262ed", 0xe4}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="cfccd890b0fae8c9a274f20fe4be8d2ceda203818acdb65f86daba5cafc45577d62c1667e40fc331acbf40e53d7b29376f1d3d9b1160c0cb87dec17baef7afc2e263e4ea5844fea6eb99b8b7824ac2ac8c6bf9eddf2c7f0a966a8b253c5af384cab684980eec52d55416df67f125d5ddf9ae6e4c329aef2c6b0a7c4eb42ce0499a4150fae8cf1855e4c4ff63ab913e511c223316f344c2d5ce0aa7cee38933e3965625ddd44c66fc6c83", 0xaa}, {&(0x7f0000000580)="16064926ea587ba6f91259c3f1547fcf08e2aed3a0", 0x15}], 0x4, &(0x7f0000000600)=[{0x68, 0x10d, 0x9, "2174a15ca9ed2bba8e9ef1b42933694e209b306855a2b8332112be9a11fff37b2ebf1c54c5d01e3b3d100e3d85a1aca647ac60f674cffd5874713272748f7daf86715d746d82b20c894e82aa15f293760f"}], 0x68}}], 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r5) syz_emit_ethernet(0x96, &(0x7f0000000700)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @local, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@mpls_mc={0x8848, {[{0x3}, {0x7}, {0x5}, {0xff800, 0x0, 0x1}, {0xfff}], @llc={@llc={0xbc, 0x8e, "fdd3", "87126d6899e9b378a757fac3b32e47f2b0e034877e32c6914c74cc1f734f65e1947dc041e778d62f919cb555003ffe6543e1915869cf3f9cbca782970087c8313443bf4f3e64f6a779fb348a5338bcd9b8b07d1bbde9d911e0bfdbbcdb91c37e51380115656c8d25"}}}}}}, &(0x7f00000007c0)={0x1, 0x2, [0xc12, 0xc59, 0x447, 0xad5]}) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000800)={@loopback, @local, @rand_addr=0x64010102}, 0xc) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000840), 0x4) sendto$inet(r1, &(0x7f0000000880)="f8c4ef95668937b3ed4d9983cdb1ed3d20863c01753fe9a199dd18da4ee5680be1eb68238bf63c68d3e292ad3a5d5c774f755bfa474a5026ab73caa1f031d6d038f7c05a94071d04d3240ff0d29bdbc47938c656df02b5899e5d99b7b72252c5cde2", 0x62, 0x0, &(0x7f0000000900)={0x2, 0x4e22, @local}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a80)={0x1, &(0x7f0000000940)="bc75f6188e5ae633d931acdecae0781590251facea9e3488ef28e70902a6340c6a776391c506baeb5d2ee792ca063400c39f5819b10dda903bb9473e44beb7239aee5bf63d1f29774b452be94514e407eca59d22e32ec4703ccda58791766d54027d40123f055d60bf6f0005657633d709d7ad82b6eae6954ad27faba948a4d2b4a4eca34452bce3253015aa14357fd84266cc67c51e15a83d2c231dde", &(0x7f0000000a00)=""/66}, 0x20) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x6c, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000c40)={0x0, 0x7}, 0x8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40801) sendmsg$inet(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)}, 0x4) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000000e40)={@null, @default, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 240.955377ms ago: executing program 6 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000fedbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="0a000617080211158009000100727afffa9701000004000400"], 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 0s ago: executing program 6 (id=1341): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f00000004c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x2, 'macvtap0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x80, 0x2, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5a2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x77bc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x64fd}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8761}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061107e0000000000dd710000000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r3, 0x4) kernel console output (not intermixed with test programs): 220.817277][ T9128] bond0 (unregistering): Released all slaves [ 221.081478][ T9141] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 221.107494][ T8995] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.141500][ T8995] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.161172][ T9144] netlink: 'syz.6.821': attribute type 11 has an invalid length. [ 221.182366][ T8995] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.250967][ T8995] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.502935][ T9163] wireguard0: entered promiscuous mode [ 221.512773][ T9163] wireguard0: entered allmulticast mode [ 221.556737][ T9171] netlink: 'syz.4.826': attribute type 20 has an invalid length. [ 221.588181][ T9171] __nla_validate_parse: 2 callbacks suppressed [ 221.588200][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 221.642408][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.683426][ T8995] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.691041][ T5839] Bluetooth: hci0: command tx timeout [ 221.719426][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.726675][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.761058][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.768323][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.827854][ T9177] lo speed is unknown, defaulting to 1000 [ 222.135089][ T9186] lo speed is unknown, defaulting to 1000 [ 222.417896][ T9192] lo speed is unknown, defaulting to 1000 [ 222.732274][ T8995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.743710][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.837'. [ 222.764520][ T9217] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 222.785469][ T9217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.999634][ T8995] veth0_vlan: entered promiscuous mode [ 223.027629][ T8995] veth1_vlan: entered promiscuous mode [ 223.170656][ T8995] veth0_macvtap: entered promiscuous mode [ 223.243537][ T8995] veth1_macvtap: entered promiscuous mode [ 223.300683][ T9234] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.841'. [ 223.310694][ T9234] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 223.311299][ T9233] vlan3: entered allmulticast mode [ 223.319520][ T9234] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 223.345555][ T9233] bridge_slave_0: entered allmulticast mode [ 223.494815][ T9237] vlan2: entered promiscuous mode [ 223.504763][ T9237] vlan2: entered allmulticast mode [ 223.512693][ T9237] hsr_slave_1: entered allmulticast mode [ 223.558448][ T8995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.640497][ T8995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.714043][ T8866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.749017][ T8866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.764906][ T5839] Bluetooth: hci0: command tx timeout [ 223.772827][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'. [ 223.791944][ T8866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.814737][ T8866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.103486][ T8866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.116344][ T8866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.355829][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.365726][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.601691][ T9266] netlink: 'syz.6.848': attribute type 3 has an invalid length. [ 224.624133][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.850'. [ 225.251004][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.851'. [ 225.459722][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.645956][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.012701][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.116580][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.345599][ T12] bridge_slave_1: left allmulticast mode [ 226.359291][ T12] bridge_slave_1: left promiscuous mode [ 226.375503][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.482212][ T12] bridge_slave_0: left allmulticast mode [ 226.508030][ T12] bridge_slave_0: left promiscuous mode [ 226.513949][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.740356][ T9287] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 227.402938][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.421733][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.430598][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.439983][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.448271][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.518288][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.552710][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.607918][ T12] bond0 (unregistering): Released all slaves [ 227.642615][ T9286] tc_dump_action: action bad kind [ 227.652709][ T9290] netlink: 'syz.6.852': attribute type 12 has an invalid length. [ 227.671888][ T9290] netlink: 'syz.6.852': attribute type 29 has an invalid length. [ 227.683992][ T9290] netlink: 148 bytes leftover after parsing attributes in process `syz.6.852'. [ 227.794158][ T9295] lo speed is unknown, defaulting to 1000 [ 228.121961][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.857'. [ 228.219033][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 228.878025][ T9327] netlink: 'syz.5.862': attribute type 4 has an invalid length. [ 229.095410][ T12] hsr_slave_0: left promiscuous mode [ 229.110198][ T12] hsr_slave_1: left promiscuous mode [ 229.116671][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.170494][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.207529][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.216646][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.259109][ T12] veth1_macvtap: left promiscuous mode [ 229.266508][ T12] veth0_macvtap: left promiscuous mode [ 229.272862][ T12] veth1_vlan: left promiscuous mode [ 229.282898][ T12] veth0_vlan: left promiscuous mode [ 229.524298][ T5150] Bluetooth: hci0: command tx timeout [ 230.120038][ T12] team0 (unregistering): Port device team_slave_1 removed [ 230.172910][ T12] team0 (unregistering): Port device team_slave_0 removed [ 230.311273][ T9239] Set syz1 is full, maxelem 65536 reached [ 230.515053][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 230.524275][ T9352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.540746][ T9352] netlink: 'syz.4.867': attribute type 7 has an invalid length. [ 230.548886][ T9352] netlink: 'syz.4.867': attribute type 8 has an invalid length. [ 230.556734][ T9352] netlink: 'syz.4.867': attribute type 4 has an invalid length. [ 230.564713][ T9352] netlink: 204 bytes leftover after parsing attributes in process `syz.4.867'. [ 230.725285][ T9344] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 230.760396][ T9295] chnl_net:caif_netlink_parms(): no params data found [ 230.863366][ T9351] gretap1: entered promiscuous mode [ 230.886211][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.868'. [ 230.912394][ T9346] lo speed is unknown, defaulting to 1000 [ 230.952211][ T9357] vlan2: entered promiscuous mode [ 230.974492][ T9357] team0: entered promiscuous mode [ 230.979862][ T9357] team_slave_0: entered promiscuous mode [ 230.995582][ T9357] team_slave_1: entered promiscuous mode [ 231.032678][ T9356] veth1_to_batadv: mtu greater than device maximum [ 231.048385][ T9365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.870'. [ 231.094002][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 231.144097][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 231.145548][ T9362] netlink: 'syz.4.870': attribute type 10 has an invalid length. [ 231.349666][ T9295] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.362532][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.370720][ T9295] bridge_slave_0: entered allmulticast mode [ 231.375085][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 231.379503][ T9295] bridge_slave_0: entered promiscuous mode [ 231.394534][ T9295] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.401805][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.413958][ T9295] bridge_slave_1: entered allmulticast mode [ 231.421955][ T9295] bridge_slave_1: entered promiscuous mode [ 231.604511][ T5150] Bluetooth: hci0: command tx timeout [ 231.612162][ T9295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.697789][ T9295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.792157][ T9295] team0: Port device team_slave_0 added [ 231.804245][ T9295] team0: Port device team_slave_1 added [ 231.961958][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.969710][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.003381][ T9295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.032140][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.044367][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.076131][ T9295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.122181][ T9398] lo speed is unknown, defaulting to 1000 [ 232.264734][ T9295] hsr_slave_0: entered promiscuous mode [ 232.271655][ T9295] hsr_slave_1: entered promiscuous mode [ 232.291403][ T9295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.305610][ T9295] Cannot create hsr debugfs directory [ 232.322916][ T9416] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 232.323757][ T9417] netlink: 'syz.6.884': attribute type 1 has an invalid length. [ 232.359606][ T9415] netlink: 'syz.6.884': attribute type 1 has an invalid length. [ 232.487085][ T9417] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 232.524555][ T9415] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 232.846964][ T9416] lo speed is unknown, defaulting to 1000 [ 233.159155][ T9435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.440760][ T9447] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 233.687009][ T5150] Bluetooth: hci0: command tx timeout [ 235.272691][ T9458] __nla_validate_parse: 54 callbacks suppressed [ 235.272714][ T9458] netlink: 60 bytes leftover after parsing attributes in process `syz.2.891'. [ 235.362218][ T9455] IPVS: length: 8 != 378304094696 [ 235.399582][ T9457] IPVS: length: 8 != 378304094696 [ 235.733619][ T9471] bridge: RTM_NEWNEIGH with invalid ether address [ 235.775476][ T5150] Bluetooth: hci0: command tx timeout [ 235.877608][ T9295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.919303][ T9295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.971445][ T9295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.005859][ T9484] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 236.037926][ T9295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.059268][ T9491] FAULT_INJECTION: forcing a failure. [ 236.059268][ T9491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.087258][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.901'. [ 236.105399][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.6.902 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 236.105434][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.105448][ T9491] Call Trace: [ 236.105456][ T9491] [ 236.105465][ T9491] dump_stack_lvl+0x189/0x250 [ 236.105506][ T9491] ? __pfx____ratelimit+0x10/0x10 [ 236.105531][ T9491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.105565][ T9491] ? __pfx__printk+0x10/0x10 [ 236.105603][ T9491] should_fail_ex+0x414/0x560 [ 236.105636][ T9491] _copy_to_user+0x31/0xb0 [ 236.105658][ T9491] simple_read_from_buffer+0xe1/0x170 [ 236.105687][ T9491] proc_fail_nth_read+0x1df/0x250 [ 236.105717][ T9491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.105747][ T9491] ? rw_verify_area+0x258/0x650 [ 236.105777][ T9491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.105805][ T9491] vfs_read+0x1fd/0x980 [ 236.105843][ T9491] ? __pfx___mutex_lock+0x10/0x10 [ 236.105870][ T9491] ? __pfx_vfs_read+0x10/0x10 [ 236.105904][ T9491] ? __fget_files+0x2a/0x420 [ 236.105933][ T9491] ? __fget_files+0x3a0/0x420 [ 236.105951][ T9491] ? __fget_files+0x2a/0x420 [ 236.105978][ T9491] ksys_read+0x145/0x250 [ 236.106005][ T9491] ? __pfx_ksys_read+0x10/0x10 [ 236.106029][ T9491] ? rcu_is_watching+0x15/0xb0 [ 236.106060][ T9491] ? do_syscall_64+0xbe/0x3b0 [ 236.106085][ T9491] do_syscall_64+0xfa/0x3b0 [ 236.106103][ T9491] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.106121][ T9491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.106138][ T9491] ? clear_bhb_loop+0x60/0xb0 [ 236.106236][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.106254][ T9491] RIP: 0033:0x7fd57338d33c [ 236.106271][ T9491] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 236.106286][ T9491] RSP: 002b:00007fd5741fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.106305][ T9491] RAX: ffffffffffffffda RBX: 00007fd5735b5fa0 RCX: 00007fd57338d33c [ 236.106318][ T9491] RDX: 000000000000000f RSI: 00007fd5741fc0a0 RDI: 0000000000000004 [ 236.106328][ T9491] RBP: 00007fd5741fc090 R08: 0000000000000000 R09: 0000000000000000 [ 236.106339][ T9491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.106348][ T9491] R13: 0000000000000000 R14: 00007fd5735b5fa0 R15: 00007ffc8daca7f8 [ 236.106375][ T9491] [ 236.475366][ T9295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.498908][ T9295] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.556077][ T8870] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.563317][ T8870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.579990][ T9500] netlink: 'syz.6.903': attribute type 10 has an invalid length. [ 236.591828][ T9500] netlink: 40 bytes leftover after parsing attributes in process `syz.6.903'. [ 236.649188][ T8870] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.656634][ T8870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.713325][ T9500] geneve0: entered promiscuous mode [ 236.728868][ T9500] team0: Port device geneve0 added [ 237.054813][ T9516] veth1_to_bond: entered allmulticast mode [ 237.065225][ T9510] syz.4.907: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 237.087518][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.6.908'. [ 237.128521][ T9510] CPU: 1 UID: 0 PID: 9510 Comm: syz.4.907 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 237.128556][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.128569][ T9510] Call Trace: [ 237.128578][ T9510] [ 237.128588][ T9510] dump_stack_lvl+0x189/0x250 [ 237.128629][ T9510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.128659][ T9510] ? __pfx__printk+0x10/0x10 [ 237.128681][ T9510] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 237.128703][ T9510] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 237.128726][ T9510] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 237.128750][ T9510] warn_alloc+0x214/0x310 [ 237.128779][ T9510] ? __pfx_warn_alloc+0x10/0x10 [ 237.128811][ T9510] ? __get_vm_area_node+0x28f/0x300 [ 237.128830][ T9510] ? xskq_create+0xbf/0x170 [ 237.128855][ T9510] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 237.128908][ T9510] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.128936][ T9510] ? __kasan_kmalloc+0x93/0xb0 [ 237.128957][ T9510] vmalloc_user_noprof+0xad/0xf0 [ 237.128978][ T9510] ? xskq_create+0xbf/0x170 [ 237.128999][ T9510] xskq_create+0xbf/0x170 [ 237.129043][ T9510] xsk_init_queue+0xb0/0x110 [ 237.129067][ T9510] xsk_setsockopt+0x4de/0x710 [ 237.129088][ T9510] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.129114][ T9510] ? aa_sock_opt_perm+0x74/0x110 [ 237.129141][ T9510] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 237.129165][ T9510] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.129185][ T9510] do_sock_setsockopt+0x25a/0x3e0 [ 237.129216][ T9510] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 237.129247][ T9510] ? __fget_files+0x2a/0x420 [ 237.129278][ T9510] __x64_sys_setsockopt+0x18b/0x220 [ 237.129312][ T9510] do_syscall_64+0xfa/0x3b0 [ 237.129335][ T9510] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.129355][ T9510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.129392][ T9510] ? clear_bhb_loop+0x60/0xb0 [ 237.129416][ T9510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.129434][ T9510] RIP: 0033:0x7fc36b58e929 [ 237.129453][ T9510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.129471][ T9510] RSP: 002b:00007fc3693f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.129492][ T9510] RAX: ffffffffffffffda RBX: 00007fc36b7b5fa0 RCX: 00007fc36b58e929 [ 237.129507][ T9510] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000c [ 237.129519][ T9510] RBP: 00007fc36b610b39 R08: 0000000000000004 R09: 0000000000000000 [ 237.129531][ T9510] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 237.129544][ T9510] R13: 0000000000000000 R14: 00007fc36b7b5fa0 R15: 00007ffccbbcc7e8 [ 237.129576][ T9510] [ 237.129585][ T9510] Mem-Info: [ 237.433948][ T9510] active_anon:4173 inactive_anon:0 isolated_anon:0 [ 237.433948][ T9510] active_file:1515 inactive_file:39910 isolated_file:0 [ 237.433948][ T9510] unevictable:768 dirty:258 writeback:0 [ 237.433948][ T9510] slab_reclaimable:11632 slab_unreclaimable:110346 [ 237.433948][ T9510] mapped:41314 shmem:1360 pagetables:1007 [ 237.433948][ T9510] sec_pagetables:0 bounce:0 [ 237.433948][ T9510] kernel_misc_reclaimable:0 [ 237.433948][ T9510] free:1291970 free_pcp:16007 free_cma:0 [ 237.569551][ T9516] veth1_to_bond (unregistering): left allmulticast mode [ 237.576739][ T9510] Node 0 active_anon:16592kB inactive_anon:0kB active_file:6060kB inactive_file:159432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165256kB dirty:1032kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12344kB pagetables:3880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 237.650012][ T9510] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 237.732181][ T9510] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.814024][ T9510] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 237.819892][ T9510] Node 0 DMA32 free:1255668kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16448kB inactive_anon:0kB active_file:6060kB inactive_file:157604kB unevictable:1536kB writepending:1028kB present:3129332kB managed:2560928kB mlocked:0kB bounce:0kB free_pcp:42908kB local_pcp:24908kB free_cma:0kB [ 237.870335][ T5150] Bluetooth: hci0: command tx timeout [ 237.918077][ T9510] lowmem_reserve[]: 0 0 1 1 1 [ 237.925058][ T9510] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 237.969193][ T9295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.038586][ T9510] lowmem_reserve[]: 0 0 0 0 0 [ 238.043412][ T9510] Node 1 Normal free:3899048kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21888kB local_pcp:7936kB free_cma:0kB [ 238.091168][ T9510] lowmem_reserve[]: 0 0 0 0 0 [ 238.099173][ T9510] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 238.112920][ T9510] Node 0 DMA32: 1094*4kB (UM) 340*8kB (UME) 105*16kB (UME) 411*32kB (UME) 375*64kB (UME) 54*128kB (UME) 22*256kB (UM) 11*512kB (UME) 4*1024kB (M) 9*2048kB (M) 286*4096kB (UM) = 1258088kB [ 238.139317][ T9295] veth0_vlan: entered promiscuous mode [ 238.151982][ T9510] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 238.165485][ T9510] Node 1 Normal: 208*4kB (U) 53*8kB (UME) 44*16kB (UME) 76*32kB (UME) 22*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3899048kB [ 238.184344][ T9510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.198134][ T9295] veth1_vlan: entered promiscuous mode [ 238.203771][ T9510] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.214434][ T9510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.224941][ T9510] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.237108][ T9510] 42782 total pagecache pages [ 238.246946][ T9510] 0 pages in swap cache [ 238.251473][ T9510] Free swap = 124996kB [ 238.255830][ T9510] Total swap = 124996kB [ 238.262975][ T9510] 2097051 pages RAM [ 238.269944][ T9510] 0 pages HighMem/MovableOnly [ 238.279408][ T9510] 424713 pages reserved [ 238.286827][ T9510] 0 pages cma reserved [ 238.346530][ T9295] veth0_macvtap: entered promiscuous mode [ 238.376876][ T9548] netlink: 'syz.6.918': attribute type 21 has an invalid length. [ 238.386388][ T9295] veth1_macvtap: entered promiscuous mode [ 238.440692][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.919'. [ 238.486184][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.518672][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.552472][ T8870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.572265][ T9555] SET target dimension over the limit! [ 238.594756][ T8870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.611697][ T8870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.650684][ T8866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.884409][ T9569] netlink: 'syz.5.924': attribute type 5 has an invalid length. [ 238.901591][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.924'. [ 238.911826][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.931156][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.079542][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.088945][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.130761][ T9578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.926'. [ 239.177836][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 239.181326][ T9578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.926'. [ 239.189189][ T9581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.202513][ T9578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.926'. [ 239.502377][ T9588] batadv_slave_0: entered promiscuous mode [ 239.522140][ T9588] batadv_slave_0: left promiscuous mode [ 239.609507][ T9594] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 239.805504][ T3017] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.921934][ T9594] veth3: entered promiscuous mode [ 240.051258][ T3017] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.240521][ T3017] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.553385][ T3017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.687139][ T3017] bridge_slave_1: left allmulticast mode [ 240.692846][ T3017] bridge_slave_1: left promiscuous mode [ 240.698720][ T3017] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.709323][ T3017] bridge_slave_0: left allmulticast mode [ 240.715565][ T3017] bridge_slave_0: left promiscuous mode [ 240.721357][ T3017] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.076247][ T3017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.089397][ T3017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.099602][ T3017] bond0 (unregistering): Released all slaves [ 241.274600][ T9615] __nla_validate_parse: 26 callbacks suppressed [ 241.274624][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 241.294237][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 241.314840][ T9613] tls_set_device_offload_rx: netdev not found [ 241.489647][ T9624] Bluetooth: MGMT ver 1.23 [ 241.717818][ T9618] syzkaller0: entered promiscuous mode [ 241.735095][ T9618] syzkaller0: entered allmulticast mode [ 241.785194][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'. [ 241.833057][ T9636] netlink: 5916 bytes leftover after parsing attributes in process `syz.2.945'. [ 241.859196][ T3017] hsr_slave_0: left promiscuous mode [ 241.880307][ T3017] hsr_slave_1: left promiscuous mode [ 241.895649][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.913301][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.916312][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.931155][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.940363][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.956770][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.978784][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.983092][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.997802][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.058675][ T3017] veth1_macvtap: left promiscuous mode [ 242.064606][ T3017] veth0_macvtap: left promiscuous mode [ 242.071102][ T3017] veth1_vlan: left promiscuous mode [ 242.079201][ T3017] veth0_vlan: left promiscuous mode [ 242.613024][ T3017] team0 (unregistering): Port device team_slave_1 removed [ 242.659416][ T3017] team0 (unregistering): Port device team_slave_0 removed [ 243.150940][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.947'. [ 244.096483][ T5150] Bluetooth: hci0: command tx timeout [ 244.786836][ T9640] lo speed is unknown, defaulting to 1000 [ 245.102226][ T9667] netlink: 'syz.4.954': attribute type 11 has an invalid length. [ 245.146979][ T9663] lo speed is unknown, defaulting to 1000 [ 245.223683][ T9673] netlink: 'syz.6.953': attribute type 10 has an invalid length. [ 245.466255][ T9673] veth0_vlan: left promiscuous mode [ 245.489004][ T9673] veth0_vlan: entered promiscuous mode [ 245.501426][ T9679] netlink: 'syz.5.957': attribute type 1 has an invalid length. [ 245.516350][ T9673] team0: Device veth0_vlan failed to register rx_handler [ 245.667090][ T9679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.780345][ T9680] bond1: (slave ip6gretap1): making interface the new active one [ 245.795320][ T9680] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 245.871233][ T9640] chnl_net:caif_netlink_parms(): no params data found [ 246.020338][ T9688] 8021q: VLANs not supported on wg1 [ 246.038450][ T9693] netlink: 136 bytes leftover after parsing attributes in process `syz.5.961'. [ 246.173272][ T5150] Bluetooth: hci0: command tx timeout [ 246.428607][ T9640] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.444378][ T9640] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.461903][ T9640] bridge_slave_0: entered allmulticast mode [ 246.481617][ T9640] bridge_slave_0: entered promiscuous mode [ 246.498152][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.514066][ T9640] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.582778][ T9640] bridge_slave_1: entered allmulticast mode [ 246.596007][ T9640] bridge_slave_1: entered promiscuous mode [ 246.781344][ T9640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.819779][ T9640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.836258][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 246.864569][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 246.873435][ T9730] netlink: 'syz.4.971': attribute type 13 has an invalid length. [ 246.951595][ T9640] team0: Port device team_slave_0 added [ 246.973594][ T9640] team0: Port device team_slave_1 added [ 246.984690][ T9736] netlink: 68 bytes leftover after parsing attributes in process `syz.2.970'. [ 247.004521][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 247.100396][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.108870][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.141639][ T9640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.193534][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.226725][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.304350][ T9640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.508653][ T9640] hsr_slave_0: entered promiscuous mode [ 247.525141][ T9640] hsr_slave_1: entered promiscuous mode [ 247.542340][ T9640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.554868][ T9640] Cannot create hsr debugfs directory [ 247.569365][ T9763] xt_connbytes: Forcing CT accounting to be enabled [ 247.597745][ T9763] set match dimension is over the limit! [ 247.866292][ T9772] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 247.899069][ T9775] netlink: 36 bytes leftover after parsing attributes in process `syz.5.985'. [ 248.244406][ T5150] Bluetooth: hci0: command tx timeout [ 248.457565][ T9640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.490699][ T9640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.502973][ T9789] xt_cgroup: xt_cgroup: no path or classid specified [ 248.523708][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 248.535027][ T9640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.554676][ T9640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.741965][ T9640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.796108][ T9640] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.832902][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.840275][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.889102][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.896460][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.439173][ T9640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.544904][ T9640] veth0_vlan: entered promiscuous mode [ 249.578756][ T9640] veth1_vlan: entered promiscuous mode [ 249.592469][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1001'. [ 249.634384][ T9834] block nbd0: server does not support multiple connections per device. [ 249.644969][ T9834] block nbd0: shutting down sockets [ 249.742156][ T9640] veth0_macvtap: entered promiscuous mode [ 249.801624][ T9640] veth1_macvtap: entered promiscuous mode [ 249.878915][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.912007][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.955691][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.984943][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.029822][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.058570][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.117261][ T9843] lo speed is unknown, defaulting to 1000 [ 250.194872][ T9848] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 250.365286][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.373380][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.463666][ T8872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.480103][ T8872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.538523][ T9838] mpoa:mpoad_close: () going down [ 251.281927][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1012'. [ 251.470510][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.797281][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.384521][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.456980][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.556238][ T12] bridge_slave_1: left allmulticast mode [ 252.561934][ T12] bridge_slave_1: left promiscuous mode [ 252.568336][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.579207][ T12] bridge_slave_0: left allmulticast mode [ 252.585737][ T12] bridge_slave_0: left promiscuous mode [ 252.591503][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.882078][ T9897] netlink: 'syz.6.1015': attribute type 1 has an invalid length. [ 252.896216][ T9897] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1015'. [ 252.965990][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 253.258758][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.272742][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.292674][ T12] bond0 (unregistering): Released all slaves [ 253.330241][ T9907] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1015'. [ 253.340562][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.351960][ T9905] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1015'. [ 253.385801][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.404268][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.412642][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.421322][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.501511][ T9913] lo speed is unknown, defaulting to 1000 [ 253.960076][ T9927] tipc: Enabling of bearer rejected, failed to enable media [ 253.964807][ T9920] lo speed is unknown, defaulting to 1000 [ 254.060212][ T12] hsr_slave_0: left promiscuous mode [ 254.066709][ T12] hsr_slave_1: left promiscuous mode [ 254.073091][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.087862][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.098796][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.111064][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.160769][ T12] veth1_macvtap: left promiscuous mode [ 254.169368][ T12] veth0_macvtap: left promiscuous mode [ 254.178816][ T12] veth1_vlan: left promiscuous mode [ 254.185375][ T12] veth0_vlan: left promiscuous mode [ 254.708702][ T12] team0 (unregistering): Port device team_slave_1 removed [ 254.755502][ T12] team0 (unregistering): Port device team_slave_0 removed [ 255.471571][ T9913] chnl_net:caif_netlink_parms(): no params data found [ 255.497501][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 255.511198][ T9937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1025'. [ 255.520732][ T9937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1025'. [ 255.530801][ T5150] Bluetooth: hci0: command tx timeout [ 255.532835][ T9937] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1025'. [ 255.719708][ T5906] hid-generic 0005:04F3:000E.0001: collection stack underflow [ 255.727790][ T5906] hid-generic 0005:04F3:000E.0001: item 0 0 0 12 parsing failed [ 255.736407][ T5906] hid-generic 0005:04F3:000E.0001: probe with driver hid-generic failed with error -22 [ 255.893123][ T9949] vlan3: entered allmulticast mode [ 255.980022][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.995343][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.004782][ T9913] bridge_slave_0: entered allmulticast mode [ 256.022751][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.044194][ T9913] bridge_slave_0: entered promiscuous mode [ 256.068018][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.104301][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.116715][ T9913] bridge_slave_1: entered allmulticast mode [ 256.136645][ T9913] bridge_slave_1: entered promiscuous mode [ 256.181618][ T9962] netlink: 'syz.2.1032': attribute type 2 has an invalid length. [ 256.196513][ T5947] IPVS: starting estimator thread 0... [ 256.198421][ T9962] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 256.214255][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 256.287508][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1032'. [ 256.297166][ T9964] IPVS: using max 32 ests per chain, 76800 per kthread [ 256.333682][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.352545][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.368531][ T9958] lo speed is unknown, defaulting to 1000 [ 256.539160][ T9913] team0: Port device team_slave_0 added [ 256.614346][ T9913] team0: Port device team_slave_1 added [ 256.671635][ T9966] lo speed is unknown, defaulting to 1000 [ 256.826286][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.844414][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.931430][ T9913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.017275][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.034110][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.096827][ T9913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.235569][ T9974] nbd4: detected capacity change from 0 to 63 [ 257.248913][ T9976] block nbd4: NBD_DISCONNECT [ 257.275396][ T9976] block nbd4: Disconnected due to user request. [ 257.309019][ T9913] hsr_slave_0: entered promiscuous mode [ 257.314955][ T9976] block nbd4: shutting down sockets [ 257.322740][ T9913] hsr_slave_1: entered promiscuous mode [ 257.330161][ T9913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.338272][ T9913] Cannot create hsr debugfs directory [ 257.614408][ T5150] Bluetooth: hci0: command tx timeout [ 258.336250][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 258.550033][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 258.563780][ T9913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.678834][ T9913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.731798][ T9913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.812362][ T9913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.180972][ T9913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.239399][ T9913] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.297047][T10033] lo speed is unknown, defaulting to 1000 [ 259.308661][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.315938][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.356635][T10039] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1051'. [ 259.411290][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.418609][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.645146][T10049] FAULT_INJECTION: forcing a failure. [ 259.645146][T10049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.652154][ T9913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.698674][ T5150] Bluetooth: hci0: command tx timeout [ 259.704098][T10049] CPU: 1 UID: 0 PID: 10049 Comm: syz.2.1055 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 259.704139][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.704154][T10049] Call Trace: [ 259.704163][T10049] [ 259.704177][T10049] dump_stack_lvl+0x189/0x250 [ 259.704216][T10049] ? __pfx____ratelimit+0x10/0x10 [ 259.704240][T10049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.704273][T10049] ? __pfx__printk+0x10/0x10 [ 259.704310][T10049] should_fail_ex+0x414/0x560 [ 259.704342][T10049] _copy_to_user+0x31/0xb0 [ 259.704366][T10049] tipc_getsockopt+0x44e/0x580 [ 259.704393][T10049] ? __pfx_tipc_getsockopt+0x10/0x10 [ 259.704432][T10049] do_sock_getsockopt+0x35d/0x650 [ 259.704468][T10049] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 259.704502][T10049] ? do_syscall_64+0x40/0x3b0 [ 259.704529][T10049] ? __fget_files+0x3a0/0x420 [ 259.704557][T10049] ? __fget_files+0x2a/0x420 [ 259.704593][T10049] __x64_sys_getsockopt+0x1a5/0x250 [ 259.704628][T10049] ? do_syscall_64+0x40/0x3b0 [ 259.704657][T10049] ? do_syscall_64+0x40/0x3b0 [ 259.704702][T10049] do_syscall_64+0xfa/0x3b0 [ 259.704729][T10049] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.704757][T10049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.704780][T10049] ? clear_bhb_loop+0x60/0xb0 [ 259.704811][T10049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.704834][T10049] RIP: 0033:0x7ff6cd98e929 [ 259.704857][T10049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.704879][T10049] RSP: 002b:00007ff6ce77b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 259.704906][T10049] RAX: ffffffffffffffda RBX: 00007ff6cdbb5fa0 RCX: 00007ff6cd98e929 [ 259.704924][T10049] RDX: 0000000000000081 RSI: 000000000000010f RDI: 0000000000000004 [ 259.704940][T10049] RBP: 00007ff6ce77b090 R08: 0000200000000180 R09: 0000000000000000 [ 259.704955][T10049] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 259.704971][T10049] R13: 0000000000000000 R14: 00007ff6cdbb5fa0 R15: 00007ffc506f1cf8 [ 259.705009][T10049] [ 259.787321][T10052] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1054'. [ 260.131430][T10063] xt_socket: unknown flags 0xfc [ 260.166679][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1057'. [ 260.178202][T10058] lo speed is unknown, defaulting to 1000 [ 260.198467][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1057'. [ 260.476775][ T9913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.588961][T10073] netlink: 'syz.4.1059': attribute type 1 has an invalid length. [ 260.588965][T10079] netlink: 'syz.2.1061': attribute type 8 has an invalid length. [ 260.605077][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 260.812993][ T9913] veth0_vlan: entered promiscuous mode [ 260.853461][ T9913] veth1_vlan: entered promiscuous mode [ 260.919821][ T9913] veth0_macvtap: entered promiscuous mode [ 260.942480][ T9913] veth1_macvtap: entered promiscuous mode [ 260.980817][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.995202][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.029153][ T8872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.046003][ T8872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.067096][ T8872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.086819][ T8872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.432053][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.461123][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.469462][T10097] FAULT_INJECTION: forcing a failure. [ 261.469462][T10097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.533949][T10097] CPU: 0 UID: 0 PID: 10097 Comm: syz.4.1066 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 261.533983][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.533997][T10097] Call Trace: [ 261.534006][T10097] [ 261.534016][T10097] dump_stack_lvl+0x189/0x250 [ 261.534055][T10097] ? __pfx____ratelimit+0x10/0x10 [ 261.534081][T10097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.534115][T10097] ? __pfx__printk+0x10/0x10 [ 261.534154][T10097] should_fail_ex+0x414/0x560 [ 261.534186][T10097] _copy_to_user+0x31/0xb0 [ 261.534218][T10097] simple_read_from_buffer+0xe1/0x170 [ 261.534247][T10097] proc_fail_nth_read+0x1df/0x250 [ 261.534275][T10097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.534305][T10097] ? rw_verify_area+0x258/0x650 [ 261.534336][T10097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.534363][T10097] vfs_read+0x1fd/0x980 [ 261.534400][T10097] ? __pfx___mutex_lock+0x10/0x10 [ 261.534426][T10097] ? __pfx_vfs_read+0x10/0x10 [ 261.534460][T10097] ? __fget_files+0x2a/0x420 [ 261.534488][T10097] ? __fget_files+0x3a0/0x420 [ 261.534509][T10097] ? __fget_files+0x2a/0x420 [ 261.534541][T10097] ksys_read+0x145/0x250 [ 261.534577][T10097] ? __pfx_ksys_read+0x10/0x10 [ 261.534607][T10097] ? fput+0xa0/0xd0 [ 261.534638][T10097] ? do_syscall_64+0xbe/0x3b0 [ 261.534668][T10097] do_syscall_64+0xfa/0x3b0 [ 261.534691][T10097] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.534715][T10097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.534736][T10097] ? clear_bhb_loop+0x60/0xb0 [ 261.534763][T10097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.534784][T10097] RIP: 0033:0x7fc36b58d33c [ 261.534803][T10097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 261.534822][T10097] RSP: 002b:00007fc3693f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.534845][T10097] RAX: ffffffffffffffda RBX: 00007fc36b7b5fa0 RCX: 00007fc36b58d33c [ 261.534861][T10097] RDX: 000000000000000f RSI: 00007fc3693f60a0 RDI: 0000000000000005 [ 261.534875][T10097] RBP: 00007fc3693f6090 R08: 0000000000000000 R09: 0000000000000000 [ 261.534888][T10097] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 261.534902][T10097] R13: 0000000000000000 R14: 00007fc36b7b5fa0 R15: 00007ffccbbcc7e8 [ 261.534936][T10097] [ 261.821246][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.829239][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.844225][ T5150] Bluetooth: hci0: command tx timeout [ 262.147859][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 262.251582][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 262.260885][T10107] openvswitch: netlink: Unknown nsh attribute 0 [ 262.267441][T10107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.322661][T10104] netlink: 'syz.4.1068': attribute type 1 has an invalid length. [ 262.332715][T10104] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.1068'. [ 262.633395][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.033746][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.226557][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.282806][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.382366][ T62] bridge_slave_1: left allmulticast mode [ 263.388278][ T62] bridge_slave_1: left promiscuous mode [ 263.394243][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.403714][ T62] bridge_slave_0: left allmulticast mode [ 263.410050][ T62] bridge_slave_0: left promiscuous mode [ 263.416048][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.786849][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.798650][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.809499][ T62] bond0 (unregistering): Released all slaves [ 264.030301][ T62] hsr_slave_0: left promiscuous mode [ 264.036839][ T62] hsr_slave_1: left promiscuous mode [ 264.042774][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.050581][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.059809][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.067547][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.092418][ T62] veth1_macvtap: left promiscuous mode [ 264.098302][ T62] veth0_macvtap: left promiscuous mode [ 264.104072][ T62] veth1_vlan: left promiscuous mode [ 264.109437][ T62] veth0_vlan: left promiscuous mode [ 264.609206][T10137] __nla_validate_parse: 2 callbacks suppressed [ 264.609227][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 265.084942][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 265.101574][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 265.111175][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.128531][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.151797][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.197368][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 265.214218][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 265.225094][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 265.250440][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 265.280682][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 265.409152][ T62] team0 (unregistering): Port device team_slave_1 removed [ 265.452425][ T62] team0 (unregistering): Port device team_slave_0 removed [ 265.908930][T10146] netlink: 'syz.6.1078': attribute type 1 has an invalid length. [ 265.919936][T10146] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1078'. [ 265.997097][T10142] lo speed is unknown, defaulting to 1000 [ 266.052880][T10144] lo speed is unknown, defaulting to 1000 [ 266.254090][T10151] SET target dimension over the limit! [ 266.667604][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1083'. [ 266.767151][T10142] chnl_net:caif_netlink_parms(): no params data found [ 267.033053][T10144] chnl_net:caif_netlink_parms(): no params data found [ 267.055273][T10179] Bluetooth: MGMT ver 1.23 [ 267.136190][T10183] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1087'. [ 267.204153][ T5835] Bluetooth: hci0: command tx timeout [ 267.304756][T10189] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 267.320189][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.334287][T10142] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.341616][T10142] bridge_slave_0: entered allmulticast mode [ 267.347756][T10189] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1088'. [ 267.366130][ T5835] Bluetooth: hci7: command tx timeout [ 267.372773][T10142] bridge_slave_0: entered promiscuous mode [ 267.415425][T10189] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 267.435665][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.442801][T10142] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.474143][T10142] bridge_slave_1: entered allmulticast mode [ 267.482089][T10142] bridge_slave_1: entered promiscuous mode [ 267.511616][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1089'. [ 267.531839][T10191] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 267.539543][T10191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.641021][T10144] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.648477][T10144] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.657232][T10144] bridge_slave_0: entered allmulticast mode [ 267.666039][T10144] bridge_slave_0: entered promiscuous mode [ 267.696440][T10142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.724484][T10144] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.745106][T10144] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.752436][T10144] bridge_slave_1: entered allmulticast mode [ 267.770748][T10144] bridge_slave_1: entered promiscuous mode [ 267.788144][T10142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.916256][T10144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.981808][T10144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.044951][T10142] team0: Port device team_slave_0 added [ 268.176016][T10144] team0: Port device team_slave_0 added [ 268.195591][T10142] team0: Port device team_slave_1 added [ 268.203775][T10144] team0: Port device team_slave_1 added [ 268.340244][T10142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.347665][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.414214][T10142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.552214][T10144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.576829][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.609803][T10144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.630815][T10215] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 268.654952][T10142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.673975][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.729148][T10142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.770296][T10144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.792133][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.822907][T10144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.875831][T10225] xt_cgroup: xt_cgroup: no path or classid specified [ 268.924307][ T8872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.935762][ T8872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.170518][ T8872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.188955][ T8872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.284870][ T5835] Bluetooth: hci0: command tx timeout [ 269.306893][T10142] hsr_slave_0: entered promiscuous mode [ 269.313404][T10142] hsr_slave_1: entered promiscuous mode [ 269.349691][T10142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.361355][T10142] Cannot create hsr debugfs directory [ 269.402856][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.414356][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.422744][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.427743][T10235] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1102'. [ 269.442520][T10235] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1102'. [ 269.453107][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.460574][ T5839] Bluetooth: hci7: command tx timeout [ 269.470187][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.500139][ T8872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.529606][ T8872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.569534][T10144] hsr_slave_0: entered promiscuous mode [ 269.596666][T10144] hsr_slave_1: entered promiscuous mode [ 269.603069][T10144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.613753][T10144] Cannot create hsr debugfs directory [ 269.679689][ T8872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.692513][ T8872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.793650][T10239] lo speed is unknown, defaulting to 1000 [ 270.467235][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1109'. [ 270.898584][ T8872] bond0 (unregistering): Released all slaves [ 270.915556][ T8872] bond1 (unregistering): Released all slaves [ 271.025950][ T8872] bond2 (unregistering): Released all slaves [ 271.197428][ T8872] IPVS: stopping backup sync thread 6962 ... [ 271.366617][ T5839] Bluetooth: hci0: command tx timeout [ 271.528717][ T5839] Bluetooth: hci2: command tx timeout [ 271.535275][ T5839] Bluetooth: hci7: command tx timeout [ 271.798347][T10239] chnl_net:caif_netlink_parms(): no params data found [ 272.359823][ T8872] hsr_slave_0: left promiscuous mode [ 272.366777][T10290] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1114'. [ 272.376961][T10290] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1114'. [ 272.377030][ T8872] hsr_slave_1: left promiscuous mode [ 272.386205][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1114'. [ 272.465591][ T8872] veth1_macvtap: left promiscuous mode [ 272.471258][ T8872] veth0_macvtap: left promiscuous mode [ 273.452428][ T5835] Bluetooth: hci0: command tx timeout [ 273.604354][ T5835] Bluetooth: hci7: command tx timeout [ 273.604363][ T5839] Bluetooth: hci2: command tx timeout [ 274.689510][T10291] veth0_to_bridge: entered promiscuous mode [ 274.699064][T10292] veth0_to_bridge: left promiscuous mode [ 274.710849][T10296] Â: renamed from pim6reg1 [ 274.851254][T10239] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.859588][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.882850][T10239] bridge_slave_0: entered allmulticast mode [ 274.899106][T10239] bridge_slave_0: entered promiscuous mode [ 274.921499][T10239] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.930279][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.943265][T10239] bridge_slave_1: entered allmulticast mode [ 274.951955][T10239] bridge_slave_1: entered promiscuous mode [ 274.975481][T10301] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1116'. [ 275.004027][T10301] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1116'. [ 275.128988][T10239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.140599][T10307] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 275.149049][T10301] lo speed is unknown, defaulting to 1000 [ 275.173182][T10302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.196772][T10239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.260218][T10301] lo speed is unknown, defaulting to 1000 [ 275.280888][T10307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1118'. [ 275.299707][T10308] bond2: (slave gretap1): making interface the new active one [ 275.310123][T10308] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 275.338859][T10142] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.352570][T10142] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 275.375599][T10142] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 275.393779][T10307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.400835][T10301] lo speed is unknown, defaulting to 1000 [ 275.419705][T10239] team0: Port device team_slave_0 added [ 275.457811][T10239] team0: Port device team_slave_1 added [ 275.512223][T10142] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 275.593473][ T8872] IPVS: stop unused estimator thread 0... [ 275.684280][ T5839] Bluetooth: hci2: command tx timeout [ 275.781454][T10301] infiniband syz0: set active [ 275.788565][T10301] infiniband syz0: added lo [ 275.795595][T10301] syz0: rxe_create_cq: returned err = -12 [ 275.804519][T10301] infiniband syz0: Couldn't create ib_mad CQ [ 275.810765][T10301] infiniband syz0: Couldn't open port 1 [ 275.831447][T10239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.846567][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.885908][T10301] RDS/IB: syz0: added [ 275.891447][T10301] smc: adding ib device syz0 with port count 1 [ 275.905551][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1120'. [ 275.916141][T10239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.924373][T10301] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 275.941304][T10239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.954000][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.994041][T10239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.022537][ T5919] lo speed is unknown, defaulting to 1000 [ 276.032217][T10319] netlink: 'syz.2.1120': attribute type 13 has an invalid length. [ 276.053334][ T5947] lo speed is unknown, defaulting to 1000 [ 276.081267][T10301] lo speed is unknown, defaulting to 1000 [ 276.082595][T10144] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 276.118804][T10320] netlink: 'syz.2.1120': attribute type 4 has an invalid length. [ 276.628708][T10144] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 276.646238][T10144] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 276.722594][T10239] hsr_slave_0: entered promiscuous mode [ 276.736070][T10239] hsr_slave_1: entered promiscuous mode [ 276.745807][T10301] lo speed is unknown, defaulting to 1000 [ 276.751713][ T1036] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.765641][ T1036] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 276.783134][ T1036] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.794083][ T1036] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 276.803180][T10144] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 276.932642][ T1036] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.954453][ T1036] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 276.998945][ T1036] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.011871][ T1036] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 277.274161][T10336] xt_bpf: check failed: parse error [ 277.298492][T10301] lo speed is unknown, defaulting to 1000 [ 277.434580][T10142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.552989][T10142] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.577680][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.584914][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.623073][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.630311][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.764827][ T5839] Bluetooth: hci2: command tx timeout [ 277.790883][T10144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.871647][T10144] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.921208][T10346] lo speed is unknown, defaulting to 1000 [ 277.948396][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.955668][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.982216][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.989469][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.066454][T10346] lo speed is unknown, defaulting to 1000 [ 278.335567][T10239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.359054][T10239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.398386][T10142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.429579][T10239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 278.456394][T10239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 278.494224][T10301] lo speed is unknown, defaulting to 1000 [ 278.842072][T10142] veth0_vlan: entered promiscuous mode [ 278.865308][T10144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.876258][T10301] lo speed is unknown, defaulting to 1000 [ 278.905576][T10142] veth1_vlan: entered promiscuous mode [ 279.015057][T10142] veth0_macvtap: entered promiscuous mode [ 279.042931][T10142] veth1_macvtap: entered promiscuous mode [ 279.066711][T10239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.111634][T10142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.171225][T10142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.193192][T10239] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.229854][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.237109][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.296700][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.303943][ T8867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.342825][ T1036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.375829][ T8872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.436958][ T8872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.451851][T10301] lo speed is unknown, defaulting to 1000 [ 279.488970][ T8872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.637602][ T8872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.650106][ T8872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.713124][ T8872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.738550][ T8872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.854409][T10144] veth0_vlan: entered promiscuous mode [ 279.891213][T10144] veth1_vlan: entered promiscuous mode [ 280.037964][T10144] veth0_macvtap: entered promiscuous mode [ 280.063084][T10144] veth1_macvtap: entered promiscuous mode [ 280.079506][T10301] lo speed is unknown, defaulting to 1000 [ 280.119808][T10144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.216868][T10144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.314727][ T8866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.401153][ T62] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.421309][ T62] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.455865][ T62] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.474180][ T62] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.533007][ T8866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.581724][T10239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.595778][T10301] lo speed is unknown, defaulting to 1000 [ 280.643202][ T8866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.774682][ T8866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.900620][ T8867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.928203][ T8867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.007203][ T8867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.030528][ T8867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.230907][ T8866] bridge_slave_1: left allmulticast mode [ 281.236826][ T8866] bridge_slave_1: left promiscuous mode [ 281.242659][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.275899][ T8866] bridge_slave_0: left allmulticast mode [ 281.281621][ T8866] bridge_slave_0: left promiscuous mode [ 281.308499][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.777865][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.791296][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.802082][ T8866] bond0 (unregistering): Released all slaves [ 281.921465][T10239] veth0_vlan: entered promiscuous mode [ 281.952440][T10239] veth1_vlan: entered promiscuous mode [ 282.020638][T10239] veth0_macvtap: entered promiscuous mode [ 282.105985][T10239] veth1_macvtap: entered promiscuous mode [ 282.368461][T10239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.393717][T10239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.529507][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.556273][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.631491][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1128'. [ 282.635450][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.677832][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.026443][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.044340][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.062192][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.073227][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.094188][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.271110][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1130'. [ 283.651305][ T8866] hsr_slave_0: left promiscuous mode [ 283.658785][ T8866] hsr_slave_1: left promiscuous mode [ 283.680608][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.690649][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.706122][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.724758][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.781111][ T8866] veth1_macvtap: left promiscuous mode [ 283.797870][ T8866] veth0_macvtap: left promiscuous mode [ 283.803574][ T8866] veth1_vlan: left promiscuous mode [ 283.814270][ T8866] veth0_vlan: left promiscuous mode [ 284.387172][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 284.438284][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 284.516050][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802465b000: rx timeout, send abort [ 284.525117][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802465b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 284.782464][T10412] netlink: 'syz.7.1134': attribute type 3 has an invalid length. [ 285.093136][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.103046][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.129762][ T5835] Bluetooth: hci0: command tx timeout [ 285.251270][T10403] lo speed is unknown, defaulting to 1000 [ 285.269370][T10403] lo speed is unknown, defaulting to 1000 [ 285.393621][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.410343][T10421] syz.6.1135 (10421) used obsolete PPPIOCDETACH ioctl [ 285.425187][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.533586][T10418] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.627439][T10416] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1135'. [ 285.664866][T10416] netlink: 'syz.6.1135': attribute type 3 has an invalid length. [ 285.778187][T10418] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.919393][T10418] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.959010][T10420] lo speed is unknown, defaulting to 1000 [ 285.998763][T10420] lo speed is unknown, defaulting to 1000 [ 286.037606][T10418] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.328592][ T8866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.597000][ T8866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.840013][ T8866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.907732][ T8870] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.949497][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.959966][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.970131][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.979129][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.989617][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.040855][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.055399][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.073718][ T8870] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.135442][ T8866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.156541][T10403] chnl_net:caif_netlink_parms(): no params data found [ 287.197960][T10431] lo speed is unknown, defaulting to 1000 [ 287.204378][ T5150] Bluetooth: hci0: command tx timeout [ 287.318562][T10439] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 287.327039][T10440] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 287.342797][T10431] lo speed is unknown, defaulting to 1000 [ 287.389596][T10441] atomic_op ffff88807e94f998 conn xmit_atomic 0000000000000000 [ 287.422319][T10441] netlink: 'syz.6.1140': attribute type 1 has an invalid length. [ 287.459532][T10441] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1140'. [ 287.491876][T10441] netlink: 'syz.6.1140': attribute type 1 has an invalid length. [ 287.523667][T10441] netlink: 'syz.6.1140': attribute type 1 has an invalid length. [ 287.548468][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.564087][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.571463][T10403] bridge_slave_0: entered allmulticast mode [ 287.586563][T10403] bridge_slave_0: entered promiscuous mode [ 287.630298][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.645147][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.652658][T10403] bridge_slave_1: entered allmulticast mode [ 287.668482][T10403] bridge_slave_1: entered promiscuous mode [ 287.747839][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1142'. [ 287.784421][T10448] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1142'. [ 287.880238][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.921687][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.027510][ T8866] bridge_slave_1: left allmulticast mode [ 288.044367][ T8866] bridge_slave_1: left promiscuous mode [ 288.050314][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.065055][ T8866] bridge_slave_0: left allmulticast mode [ 288.074535][ T8866] bridge_slave_0: left promiscuous mode [ 288.080407][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.706972][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.727634][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.742421][T10468] netlink: 'syz.6.1148': attribute type 1 has an invalid length. [ 288.743312][ T8866] bond0 (unregistering): Released all slaves [ 288.763367][T10468] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1148'. [ 288.773215][T10468] NCSI netlink: No device for ifindex 4294967295 [ 288.792984][T10403] team0: Port device team_slave_0 added [ 288.804358][ T5150] Bluetooth: hci5: command 0x0406 tx timeout [ 288.826710][T10403] team0: Port device team_slave_1 added [ 288.910552][T10470] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1149'. [ 288.971786][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.984014][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.010695][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.025169][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.032170][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.058596][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.069685][ T5835] Bluetooth: hci2: command tx timeout [ 289.087899][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1149'. [ 289.284582][ T5835] Bluetooth: hci0: command tx timeout [ 289.445944][T10403] hsr_slave_0: entered promiscuous mode [ 289.452818][T10403] hsr_slave_1: entered promiscuous mode [ 289.484968][T10403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.492601][T10403] Cannot create hsr debugfs directory [ 289.507138][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880759f6c00: rx timeout, send abort [ 289.515891][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880759f6c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 289.622505][T10482] netlink: 'syz.6.1150': attribute type 2 has an invalid length. [ 289.872268][ T8866] hsr_slave_0: left promiscuous mode [ 289.889371][ T8866] hsr_slave_1: left promiscuous mode [ 289.899286][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.914227][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.945217][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.963024][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.260801][ T8866] veth1_macvtap: left promiscuous mode [ 290.269378][ T8866] veth0_macvtap: left promiscuous mode [ 290.283330][T10488] netlink: 'syz.2.1152': attribute type 1 has an invalid length. [ 290.291572][ T8866] veth1_vlan: left promiscuous mode [ 290.301662][ T8866] veth0_vlan: left promiscuous mode [ 291.040165][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 291.093783][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 291.127597][ T5835] Bluetooth: hci2: command tx timeout [ 291.365952][ T5835] Bluetooth: hci0: command tx timeout [ 291.611030][T10488] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 291.994203][T10431] chnl_net:caif_netlink_parms(): no params data found [ 292.027021][T10517] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1159'. [ 292.062693][T10516] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 292.134501][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 292.270330][T10516] bond0 (unregistering): Released all slaves [ 292.555662][T10528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.578508][T10523] syz.6.1161 (10523) used greatest stack depth: 16736 bytes left [ 292.609697][T10431] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.617116][T10431] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.633382][T10431] bridge_slave_0: entered allmulticast mode [ 292.645745][T10431] bridge_slave_0: entered promiscuous mode [ 292.711871][T10431] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.754118][T10431] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.761911][T10431] bridge_slave_1: entered allmulticast mode [ 292.791457][T10431] bridge_slave_1: entered promiscuous mode [ 292.848807][T10544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1167'. [ 292.885512][T10544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1167'. [ 292.920245][T10431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.019409][T10431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.206142][ T5835] Bluetooth: hci2: command tx timeout [ 293.321789][T10431] team0: Port device team_slave_0 added [ 293.330115][T10403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.356311][T10403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.379664][T10555] bridge_slave_0: left promiscuous mode [ 293.386237][T10555] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.400829][T10555] bridge_slave_1: left allmulticast mode [ 293.414247][T10555] bridge_slave_1: left promiscuous mode [ 293.431425][T10555] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.449600][T10555] team_slave_0: left promiscuous mode [ 293.486743][T10555] team0: Port device team_slave_0 removed [ 293.509681][T10555] team_slave_1: left promiscuous mode [ 293.529468][T10555] team0: Port device team_slave_1 removed [ 293.543485][T10555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.555473][T10555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.578975][T10555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.594452][T10555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.618287][T10555] geneve0: left promiscuous mode [ 293.650324][T10570] netlink: 'syz.2.1173': attribute type 2 has an invalid length. [ 293.664214][T10570] netlink: 'syz.2.1173': attribute type 1 has an invalid length. [ 293.678613][T10555] team0: Port device geneve0 removed [ 293.710515][T10431] team0: Port device team_slave_1 added [ 293.770806][ T8338] lo speed is unknown, defaulting to 1000 [ 293.773082][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 293.783256][T10403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.814962][T10572] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1174'. [ 293.907026][T10403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.950166][T10431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.961179][T10431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.995166][T10431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.040900][T10431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.051190][T10431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.079607][T10431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.299215][T10431] hsr_slave_0: entered promiscuous mode [ 294.310094][T10431] hsr_slave_1: entered promiscuous mode [ 294.871316][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.058884][T10403] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.130201][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.137462][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.157520][T10610] delete_channel: no stack [ 295.266990][ T8870] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.274194][ T8870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.286067][ T5835] Bluetooth: hci2: command tx timeout [ 295.412804][T10617] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1186'. [ 295.457615][T10624] netlink: 'syz.6.1187': attribute type 1 has an invalid length. [ 295.512363][T10627] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 295.537209][T10628] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 295.698174][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1191'. [ 295.803049][T10431] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.864930][T10431] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.898994][T10431] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.955564][T10431] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 296.242989][T10403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.383121][T10431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.493465][T10403] veth0_vlan: entered promiscuous mode [ 296.510839][T10431] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.576906][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.584186][ T8867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.663659][T10403] veth1_vlan: entered promiscuous mode [ 296.710490][ T8870] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.717822][ T8870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.802237][T10403] veth0_macvtap: entered promiscuous mode [ 296.842861][T10403] veth1_macvtap: entered promiscuous mode [ 296.918502][T10403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.988262][T10403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.084415][ T8870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.094629][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.142298][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.161922][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.198652][T10698] wg1: entered promiscuous mode [ 297.203585][T10698] wg1: entered allmulticast mode [ 297.472659][ T8866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.486321][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1212'. [ 297.495532][ T8866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.560393][ T8870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.570993][ T8870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.636505][T10431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.977296][T10724] netlink: 'syz.6.1216': attribute type 21 has an invalid length. [ 297.996153][T10724] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1216'. [ 298.011789][T10724] netlink: 'syz.6.1216': attribute type 5 has an invalid length. [ 298.046637][T10724] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1216'. [ 298.209243][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.381734][T10727] lo speed is unknown, defaulting to 1000 [ 298.488993][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.561129][T10727] lo speed is unknown, defaulting to 1000 [ 298.638193][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.671155][T10431] veth0_vlan: entered promiscuous mode [ 298.700263][T10431] veth1_vlan: entered promiscuous mode [ 298.748720][T10431] veth0_macvtap: entered promiscuous mode [ 298.761083][T10431] veth1_macvtap: entered promiscuous mode [ 298.789573][T10431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.806542][T10431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.856499][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.907758][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.923602][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.945804][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.968093][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.986400][T10730] netlink: 312 bytes leftover after parsing attributes in process `syz.7.1217'. [ 299.196575][ T62] bridge_slave_1: left allmulticast mode [ 299.202687][ T62] bridge_slave_1: left promiscuous mode [ 299.209400][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.221766][ T62] bridge_slave_0: left allmulticast mode [ 299.227936][ T62] bridge_slave_0: left promiscuous mode [ 299.233660][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.630330][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.645669][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.657272][ T62] bond0 (unregistering): Released all slaves [ 299.721023][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.729267][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.889567][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.906106][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.560364][ T62] hsr_slave_0: left promiscuous mode [ 300.570528][ T62] hsr_slave_1: left promiscuous mode [ 300.585103][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.604316][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.662921][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.683329][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.809921][ T62] veth1_macvtap: left promiscuous mode [ 300.834527][ T62] veth0_macvtap: left promiscuous mode [ 300.844485][ T62] veth1_vlan: left promiscuous mode [ 300.849898][ T62] veth0_vlan: left promiscuous mode [ 300.998020][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.008434][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.018090][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.035199][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.043288][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.317515][T10757] netlink: 'syz.2.1221': attribute type 1 has an invalid length. [ 301.345307][T10757] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1221'. [ 301.654596][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.689231][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.699788][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.708249][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.718094][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.912139][ T62] team0 (unregistering): Port device team_slave_1 removed [ 301.960640][ T62] team0 (unregistering): Port device team_slave_0 removed [ 302.623186][T10758] lo speed is unknown, defaulting to 1000 [ 302.650366][T10750] lo speed is unknown, defaulting to 1000 [ 302.650390][T10758] lo speed is unknown, defaulting to 1000 [ 303.124880][ T5150] Bluetooth: hci0: command tx timeout [ 303.182597][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.224637][T10750] lo speed is unknown, defaulting to 1000 [ 303.231800][T10776] x_tables: duplicate underflow at hook 3 [ 303.251662][T10776] x_tables: duplicate underflow at hook 1 [ 303.336727][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.480342][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.592244][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.764016][ T5150] Bluetooth: hci2: command tx timeout [ 304.021754][T10758] chnl_net:caif_netlink_parms(): no params data found [ 304.347414][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1230'. [ 304.371752][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1230'. [ 304.401814][ T62] bridge_slave_1: left allmulticast mode [ 304.434135][ T62] bridge_slave_1: left promiscuous mode [ 304.440015][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.489924][ T62] bridge_slave_0: left allmulticast mode [ 304.507730][ T62] bridge_slave_0: left promiscuous mode [ 304.513700][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.040404][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.051935][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.062718][ T62] bond0 (unregistering): Released all slaves [ 305.204270][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 305.211875][ T5835] Bluetooth: hci0: command tx timeout [ 305.372019][T10750] chnl_net:caif_netlink_parms(): no params data found [ 305.398569][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.406511][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.414467][T10758] bridge_slave_0: entered allmulticast mode [ 305.422707][T10758] bridge_slave_0: entered promiscuous mode [ 305.480989][T10758] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.494103][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.504240][T10758] bridge_slave_1: entered allmulticast mode [ 305.526184][T10758] bridge_slave_1: entered promiscuous mode [ 305.733466][T10758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.747949][T10758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.785853][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1240'. [ 305.843972][ T5835] Bluetooth: hci2: command tx timeout [ 305.867655][T10835] netlink: 51 bytes leftover after parsing attributes in process `syz.7.1239'. [ 305.926159][T10758] team0: Port device team_slave_0 added [ 305.947515][T10758] team0: Port device team_slave_1 added [ 306.132637][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.191016][T10758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.199164][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.236363][T10758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.277045][ T62] hsr_slave_0: left promiscuous mode [ 306.284366][ T62] hsr_slave_1: left promiscuous mode [ 306.290380][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.298303][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.308030][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.315769][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.341762][ T62] veth1_macvtap: left promiscuous mode [ 306.348909][ T62] veth0_macvtap: left promiscuous mode [ 306.355358][ T62] veth1_vlan: left promiscuous mode [ 306.360707][ T62] veth0_vlan: left promiscuous mode [ 306.950804][ T62] team0 (unregistering): Port device team_slave_1 removed [ 306.999347][ T62] team0 (unregistering): Port device team_slave_0 removed [ 307.290386][ T5835] Bluetooth: hci0: command tx timeout [ 307.502610][T10750] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.510607][T10750] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.518055][T10750] bridge_slave_0: entered allmulticast mode [ 307.527777][T10750] bridge_slave_0: entered promiscuous mode [ 307.654582][T10758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.669638][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.699151][T10758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.794622][T10850] tipc: Enabling of bearer rejected, failed to enable media [ 307.816242][T10750] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.829398][T10750] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.852611][T10750] bridge_slave_1: entered allmulticast mode [ 307.875925][T10750] bridge_slave_1: entered promiscuous mode [ 307.933895][ T5835] Bluetooth: hci2: command tx timeout [ 308.040548][T10750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.125940][T10750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.311481][T10758] hsr_slave_0: entered promiscuous mode [ 308.344654][T10758] hsr_slave_1: entered promiscuous mode [ 308.355668][T10879] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1247'. [ 308.401281][T10750] team0: Port device team_slave_0 added [ 308.469462][T10750] team0: Port device team_slave_1 added [ 308.640399][T10750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.647807][T10750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.674227][T10750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.692380][T10750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.702697][T10750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.730193][T10750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.024650][T10750] hsr_slave_0: entered promiscuous mode [ 309.046315][T10750] hsr_slave_1: entered promiscuous mode [ 309.054371][T10750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.061995][T10750] Cannot create hsr debugfs directory [ 309.149758][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 309.364504][ T5835] Bluetooth: hci0: command tx timeout [ 309.477209][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1252'. [ 309.580092][T10900] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1253'. [ 309.627894][T10900] netlink: 'syz.2.1253': attribute type 12 has an invalid length. [ 309.653888][T10900] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1253'. [ 310.004171][ T5835] Bluetooth: hci2: command tx timeout [ 310.221617][T10750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.240568][T10750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.264442][T10750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.281205][T10750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.424551][T10758] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.443976][T10758] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 310.472222][T10758] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 310.501513][T10758] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 310.600713][T10750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.641693][T10750] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.688811][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.696069][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.741938][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.749318][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.832142][T10758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.896571][T10758] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.935079][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.942311][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.999042][T10925] xt_hashlimit: size too large, truncated to 1048576 [ 311.040002][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.047266][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.149438][T10923] lo speed is unknown, defaulting to 1000 [ 311.239474][T10758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.264341][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1256'. [ 311.335650][T10923] lo speed is unknown, defaulting to 1000 [ 311.587797][T10750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.802059][T10750] veth0_vlan: entered promiscuous mode [ 311.839031][T10750] veth1_vlan: entered promiscuous mode [ 311.910137][T10750] veth0_macvtap: entered promiscuous mode [ 311.937423][T10949] netlink: 'syz.2.1260': attribute type 10 has an invalid length. [ 311.950068][T10750] veth1_macvtap: entered promiscuous mode [ 312.000139][T10949] macvlan0: entered allmulticast mode [ 312.031411][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 312.039268][T10758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.078177][T10949] bridge0: port 1(macvlan2) entered blocking state [ 312.104057][T10949] bridge0: port 1(macvlan2) entered disabled state [ 312.110264][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1261'. [ 312.118470][T10949] macvlan2: entered allmulticast mode [ 312.141236][T10949] macvlan2: left allmulticast mode [ 312.319265][T10750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.428519][T10750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.488020][ T8867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.505653][ T8867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.590356][ T8867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.630706][ T8867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.672933][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1265'. [ 312.964929][ T8870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.992536][ T8870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.158165][ T8867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.166686][ T8867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.238025][T10758] veth0_vlan: entered promiscuous mode [ 313.307204][T10758] veth1_vlan: entered promiscuous mode [ 313.377716][T10758] veth0_macvtap: entered promiscuous mode [ 313.474825][T10758] veth1_macvtap: entered promiscuous mode [ 313.525217][T10758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.552971][T10758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.572191][T10986] netlink: 'syz.6.1269': attribute type 2 has an invalid length. [ 313.592625][ T8870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.649569][ T8870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.678714][ T8870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.710966][ T8870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.063116][ T8867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.215971][T10995] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.312821][T10995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.331124][T10995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.481571][ T8867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.500589][ T62] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.511790][ T62] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.543318][ T62] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.576284][ T8867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.591050][ T62] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.631417][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.641915][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.703083][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.712498][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.767635][ T8867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.304735][ T8867] bridge_slave_1: left allmulticast mode [ 315.310462][ T8867] bridge_slave_1: left promiscuous mode [ 315.323133][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.339718][ T8867] bridge_slave_0: left allmulticast mode [ 315.364643][ T8867] bridge_slave_0: left promiscuous mode [ 315.372448][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.429732][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1272'. [ 315.439718][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1272'. [ 315.788128][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.799740][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.811239][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.820391][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.837579][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.915872][T11011] netlink: 'syz.2.1275': attribute type 1 has an invalid length. [ 316.036990][T11011] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 316.182150][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.201805][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.218945][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.242782][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.253345][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.268594][ T8867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.298212][ T8867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.311783][ T8867] bond0 (unregistering): Released all slaves [ 316.329666][T11004] geneve1: entered promiscuous mode [ 316.335181][T11004] geneve1: entered allmulticast mode [ 316.400444][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.437539][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.454575][T11015] lo speed is unknown, defaulting to 1000 [ 316.472763][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.508461][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.531588][T11015] lo speed is unknown, defaulting to 1000 [ 316.555529][T11013] lo speed is unknown, defaulting to 1000 [ 316.596501][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1277'. [ 316.679372][T11017] lo speed is unknown, defaulting to 1000 [ 317.041566][T11013] lo speed is unknown, defaulting to 1000 [ 317.260408][T11038] netlink: 'syz.7.1282': attribute type 2 has an invalid length. [ 317.416631][T11017] lo speed is unknown, defaulting to 1000 [ 317.454706][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.765600][T11046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.873513][T11046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'. [ 317.884893][T11046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1285'. [ 317.924297][ T5835] Bluetooth: hci0: command tx timeout [ 317.953782][T11048] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1286'. [ 318.245250][T11061] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1288'. [ 318.273053][T11061] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1288'. [ 318.327322][ T5835] Bluetooth: hci2: command tx timeout [ 318.380126][T11013] chnl_net:caif_netlink_parms(): no params data found [ 318.558915][ T8867] hsr_slave_0: left promiscuous mode [ 318.596416][ T8867] hsr_slave_1: left promiscuous mode [ 318.611957][ T8867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.632616][ T8867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.646050][ T8867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.653763][ T8867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.687733][ T8867] veth1_macvtap: left promiscuous mode [ 318.693363][ T8867] veth0_macvtap: left promiscuous mode [ 318.706790][ T8867] veth1_vlan: left promiscuous mode [ 318.718857][T11076] sctp: [Deprecated]: syz.7.1295 (pid 11076) Use of int in maxseg socket option. [ 318.718857][T11076] Use struct sctp_assoc_value instead [ 318.746660][ T8867] veth0_vlan: left promiscuous mode [ 319.488875][ T8867] team0 (unregistering): Port device team_slave_1 removed [ 319.548216][ T8867] team0 (unregistering): Port device team_slave_0 removed [ 320.014892][ T5835] Bluetooth: hci0: command tx timeout [ 320.207413][T11076] lo speed is unknown, defaulting to 1000 [ 320.239026][T11076] lo speed is unknown, defaulting to 1000 [ 320.404663][ T5835] Bluetooth: hci2: command tx timeout [ 320.702020][T11013] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.712089][T11013] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.720279][T11013] bridge_slave_0: entered allmulticast mode [ 320.730839][T11013] bridge_slave_0: entered promiscuous mode [ 320.845815][T11013] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.853131][T11013] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.867530][T11013] bridge_slave_1: entered allmulticast mode [ 320.876248][T11013] bridge_slave_1: entered promiscuous mode [ 321.067063][T11013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.150424][T11106] netlink: 'syz.2.1300': attribute type 21 has an invalid length. [ 321.181802][T11017] chnl_net:caif_netlink_parms(): no params data found [ 321.212981][T11013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.222565][T11104] macsec0: entered allmulticast mode [ 321.241411][T11106] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 321.402872][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 321.539074][T11013] team0: Port device team_slave_0 added [ 321.698336][T11013] team0: Port device team_slave_1 added [ 321.885171][ T1036] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.961085][T11013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.973892][T11111] lo speed is unknown, defaulting to 1000 [ 321.981415][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.017661][T11013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.064738][T11111] lo speed is unknown, defaulting to 1000 [ 322.113097][ T1036] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.137646][T11113] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1302'. [ 322.157549][T11013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.168810][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.195357][T11013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.229696][T11130] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1307'. [ 322.306458][T11017] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.327736][T11017] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.351244][T11017] bridge_slave_0: entered allmulticast mode [ 322.381501][T11017] bridge_slave_0: entered promiscuous mode [ 322.401400][T11017] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.413103][T11017] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.434503][T11017] bridge_slave_1: entered allmulticast mode [ 322.484158][ T5835] Bluetooth: hci2: command tx timeout [ 322.485042][T11017] bridge_slave_1: entered promiscuous mode [ 322.551938][ T1036] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.772815][ T1036] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.841748][T11017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.886361][T11013] hsr_slave_0: entered promiscuous mode [ 322.902501][T11013] hsr_slave_1: entered promiscuous mode [ 322.916648][T11013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.931345][T11013] Cannot create hsr debugfs directory [ 322.957918][T11017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.028654][T11151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1313'. [ 323.074511][T11017] team0: Port device team_slave_0 added [ 323.179518][T11154] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1314'. [ 323.188983][T11154] netlink: zone id is out of range [ 323.194252][T11154] netlink: zone id is out of range [ 323.199574][T11154] netlink: zone id is out of range [ 323.205039][T11154] netlink: zone id is out of range [ 323.210343][T11154] netlink: zone id is out of range [ 323.215611][T11154] netlink: zone id is out of range [ 323.224910][T11017] team0: Port device team_slave_1 added [ 323.230704][T11154] netlink: zone id is out of range [ 323.243780][T11154] netlink: zone id is out of range [ 323.261496][T11154] netlink: zone id is out of range [ 323.267062][T11154] netlink: zone id is out of range [ 323.453126][T11017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.461023][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.499816][T11017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.564061][T11160] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 323.588155][T11017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.595753][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.615545][T11160] netlink: 'syz.7.1316': attribute type 4 has an invalid length. [ 323.629664][T11017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.668748][ T1036] bridge_slave_1: left allmulticast mode [ 323.677757][ T1036] bridge_slave_1: left promiscuous mode [ 323.683664][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.699694][ T1036] bridge_slave_0: left allmulticast mode [ 323.707365][ T1036] bridge_slave_0: left promiscuous mode [ 323.713157][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.192615][ T1036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.204480][ T1036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.215650][ T1036] bond0 (unregistering): Released all slaves [ 324.319315][T11165] netem: invalid attributes len -24 [ 324.561044][T11017] hsr_slave_0: entered promiscuous mode [ 324.573963][ T5835] Bluetooth: hci2: command tx timeout [ 324.583142][T11017] hsr_slave_1: entered promiscuous mode [ 324.593534][T11017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.609024][T11017] Cannot create hsr debugfs directory [ 325.898722][ T1036] hsr_slave_0: left promiscuous mode [ 325.908907][ T1036] hsr_slave_1: left promiscuous mode [ 325.918930][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.927439][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.941944][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.952020][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.983302][ T1036] veth1_macvtap: left promiscuous mode [ 326.004803][ T1036] veth0_macvtap: left promiscuous mode [ 326.010485][ T1036] veth1_vlan: left promiscuous mode [ 326.020714][ T1036] veth0_vlan: left promiscuous mode [ 326.801686][ T1036] team0 (unregistering): Port device team_slave_1 removed [ 326.861113][ T1036] team0 (unregistering): Port device team_slave_0 removed [ 327.510113][T11182] lo speed is unknown, defaulting to 1000 [ 327.577897][T11182] lo speed is unknown, defaulting to 1000 [ 327.645192][T11183] lo speed is unknown, defaulting to 1000 [ 327.812928][T11013] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 327.971900][T11013] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.030591][T11013] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.138308][T11013] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.204639][T11183] lo speed is unknown, defaulting to 1000 [ 329.133784][T11226] netlink: 'syz.7.1335': attribute type 13 has an invalid length. [ 329.142020][T11226] netlink: 'syz.7.1335': attribute type 17 has an invalid length. [ 329.162144][T11228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1334'. [ 329.317374][T11226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.327315][T11226] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.341394][T11226] net_ratelimit: 73 callbacks suppressed [ 329.341405][T11226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.400365][T11228] bond0: entered promiscuous mode [ 329.412216][T11228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.579245][T11228] bond0 (unregistering): Released all slaves [ 329.690285][T11017] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.760242][T11229] lo speed is unknown, defaulting to 1000 [ 329.769634][T11017] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.801936][T11017] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.845245][T11229] lo speed is unknown, defaulting to 1000 [ 329.878697][T11017] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.911912][T11013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.961243][T11235] netlink: 'syz.2.1337': attribute type 4 has an invalid length. [ 329.993110][T11013] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.009637][T11225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.018649][T11241] netlink: 'syz.2.1337': attribute type 4 has an invalid length. [ 330.051849][ T8866] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.059257][ T8866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.124658][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.131914][ T8867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.450635][T11017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.540124][T11017] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.617744][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.625080][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.712503][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.719827][ T8866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.781158][T11250] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 331.016520][T11017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.089210][T11013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.192225][T11013] veth0_vlan: entered promiscuous mode [ 331.229555][T11013] veth1_vlan: entered promiscuous mode [ 331.406535][T11013] veth0_macvtap: entered promiscuous mode [ 331.427327][T11013] veth1_macvtap: entered promiscuous mode [ 331.434580][T11256] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1340'. [ 331.490962][T11013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.521579][T11013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.529993][ T31] INFO: task syz.1.546:8065 blocked for more than 143 seconds. [ 331.544610][ T31] Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 [ 331.552526][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.568564][ T8867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.577537][ T31] task:syz.1.546 state:D stack:26344 pid:8065 tgid:8064 ppid:5845 task_flags:0x400140 flags:0x00004004 [ 331.589800][ T31] Call Trace: [ 331.593234][ T31] [ 331.596632][ T31] __schedule+0x16f5/0x4d00 [ 331.601328][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.614173][ T31] ? schedule+0x165/0x360 [ 331.640478][ T31] ? __pfx___schedule+0x10/0x10 [ 331.649049][ T3017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.662236][ T3017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.671085][ T31] ? schedule+0x91/0x360 [ 331.671131][ T31] schedule+0x165/0x360 [ 331.671167][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.671192][ T31] __mutex_lock+0x724/0xe80 [ 331.671221][ T31] ? __mutex_lock+0x51b/0xe80 [ 331.671253][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 331.702976][ T3017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.725728][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.733454][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 331.740371][ T31] ? __nlmsg_put+0xef/0x1b0 [ 331.746643][ T31] ? genlmsg_put+0x137/0x2e0 [ 331.751380][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 331.757349][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 331.762576][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 331.770701][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 331.776449][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 331.782960][ T31] genl_rcv_msg+0x60e/0x790 [ 331.787889][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.793008][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 331.798333][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 331.804774][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 331.810361][ T31] netlink_rcv_skb+0x208/0x470 [ 331.815264][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.820384][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.825893][ T31] ? down_read+0x1ad/0x2e0 [ 331.830399][ T31] genl_rcv+0x28/0x40 [ 331.840184][ T31] netlink_unicast+0x75b/0x8d0 [ 331.845962][ T31] netlink_sendmsg+0x805/0xb30 [ 331.850917][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.856537][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 331.861590][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.867366][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.872814][ T31] __sock_sendmsg+0x219/0x270 [ 331.877805][ T31] ____sys_sendmsg+0x505/0x830 [ 331.882720][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.888386][ T31] ? import_iovec+0x74/0xa0 [ 331.893020][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 331.897950][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.903405][ T31] ? __fget_files+0x2a/0x420 [ 331.908546][ T31] ? __fget_files+0x3a0/0x420 [ 331.913345][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 331.918815][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.925126][ T31] ? rcu_is_watching+0x15/0xb0 [ 331.930048][ T31] ? do_syscall_64+0xbe/0x3b0 [ 331.934915][ T31] do_syscall_64+0xfa/0x3b0 [ 331.939532][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.945097][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.951306][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.956255][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.962266][ T31] RIP: 0033:0x7f5ba2d8e929 [ 331.967859][ T31] RSP: 002b:00007f5ba3cb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.976552][ T31] RAX: ffffffffffffffda RBX: 00007f5ba2fb5fa0 RCX: 00007f5ba2d8e929 [ 331.984831][ T31] RDX: 0000000000000010 RSI: 0000200000001540 RDI: 0000000000000006 [ 331.992956][ T31] RBP: 00007f5ba2e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 332.001334][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.010154][ T31] R13: 0000000000000000 R14: 00007f5ba2fb5fa0 R15: 00007ffe55fc27f8 [ 332.018429][ T31] [ 332.027958][ T31] [ 332.027958][ T31] Showing all locks held in the system: [ 332.036884][ T31] 4 locks held by kworker/u8:0/12: [ 332.045489][ T31] 1 lock held by ksoftirqd/0/15: [ 332.050588][ T31] 3 locks held by kworker/1:0/24: [ 332.059379][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 332.077003][ T31] #1: ffffc900001e7bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 332.088592][ T31] #2: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 332.098954][ T31] 1 lock held by khungtaskd/31: [ 332.103950][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 332.113986][ T31] 2 locks held by getty/5591: [ 332.118684][ T31] #0: ffff8880349620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 332.128613][ T31] #1: ffffc9000362c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 332.138910][ T31] 2 locks held by syz.3.250/6921: [ 332.144065][ T31] #0: ffffffff8f5775f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.152331][ T31] #1: ffffffff8e41cd48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 332.162614][ T31] 2 locks held by syz.1.546/8065: [ 332.168630][ T31] #0: ffffffff8f5775f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.177043][ T31] #1: ffffffff8e41cd48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 332.188673][ T31] 2 locks held by syz.5.985/9770: [ 332.193731][ T31] #0: ffffffff8f5775f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.203777][ T31] #1: ffffffff8e41cd48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 332.214270][ T31] 3 locks held by syz-executor/11013: [ 332.219677][ T31] #0: ffffffff8f512888 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 332.228900][ T31] #1: ffff888048d394e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x227/0x420 [ 332.238734][ T31] #2: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 332.250222][ T31] 1 lock held by syz-executor/11017: [ 332.255613][ T31] #0: ffffffff8f512888 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 332.265240][ T31] 2 locks held by syz.7.1335/11229: [ 332.270470][ T31] #0: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 332.279987][ T31] #1: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 332.290187][ T31] [ 332.300699][ T31] ============================================= [ 332.300699][ T31] [ 332.332924][T11017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.341225][ T31] NMI backtrace for cpu 1 [ 332.341247][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 332.341274][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.341287][ T31] Call Trace: [ 332.341296][ T31] [ 332.341305][ T31] dump_stack_lvl+0x189/0x250 [ 332.341342][ T31] ? __wake_up_klogd+0xd9/0x110 [ 332.341370][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.341403][ T31] ? __pfx__printk+0x10/0x10 [ 332.341441][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 332.341478][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 332.341508][ T31] ? _printk+0xcf/0x120 [ 332.341536][ T31] ? __pfx__printk+0x10/0x10 [ 332.341562][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 332.341593][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 332.341630][ T31] watchdog+0xfee/0x1030 [ 332.341661][ T31] ? watchdog+0x1de/0x1030 [ 332.341699][ T31] kthread+0x70e/0x8a0 [ 332.341726][ T31] ? __pfx_watchdog+0x10/0x10 [ 332.341771][ T31] ? __pfx_kthread+0x10/0x10 [ 332.341797][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.341819][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.341840][ T31] ? __pfx_kthread+0x10/0x10 [ 332.341866][ T31] ret_from_fork+0x3fc/0x770 [ 332.341900][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 332.341940][ T31] ? __switch_to_asm+0x39/0x70 [ 332.341962][ T31] ? __switch_to_asm+0x33/0x70 [ 332.341982][ T31] ? __pfx_kthread+0x10/0x10 [ 332.342008][ T31] ret_from_fork_asm+0x1a/0x30 [ 332.342048][ T31] [ 332.342057][ T31] Sending NMI from CPU 1 to CPUs 0: [ 332.502921][ C0] NMI backtrace for cpu 0 [ 332.502942][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 332.502963][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.502975][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 332.503002][ C0] RIP: 0010:kasan_check_range+0x7/0x2c0 [ 332.503023][ C0] Code: e8 7e 3b e4 ff 90 0f 0b cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 <41> 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d 04 37 [ 332.503040][ C0] RSP: 0018:ffffc900001175f0 EFLAGS: 00000046 [ 332.503054][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81c7db48 [ 332.503066][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fa134f0 [ 332.503077][ C0] RBP: ffffc90000117730 R08: ffffffff8fa134f7 R09: 1ffffffff1f4269e [ 332.503091][ C0] R10: dffffc0000000000 R11: fffffbfff1f4269f R12: 1ffff92000022eed [ 332.503105][ C0] R13: ffff88807bae71a8 R14: ffffc90000117768 R15: dffffc0000000000 [ 332.503119][ C0] FS: 0000000000000000(0000) GS:ffff888125c48000(0000) knlGS:0000000000000000 [ 332.503133][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.503145][ C0] CR2: 00007f012c10d008 CR3: 00000000578ae000 CR4: 00000000003526f0 [ 332.503161][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.503172][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.503183][ C0] Call Trace: [ 332.503190][ C0] [ 332.503199][ C0] trace_irq_disable+0x28/0x110 [ 332.503223][ C0] work_grab_pending+0x145/0x990 [ 332.503241][ C0] ? get_random_u32+0x48e/0x940 [ 332.503261][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.503281][ C0] ? get_random_u32+0x155/0x940 [ 332.503299][ C0] ? get_random_u32+0x4df/0x940 [ 332.503318][ C0] ? __pfx_work_grab_pending+0x10/0x10 [ 332.503337][ C0] ? __pfx_get_random_u32+0x10/0x10 [ 332.503361][ C0] mod_delayed_work_on+0x90/0x200 [ 332.503381][ C0] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 332.503404][ C0] ipv6_mc_dad_complete+0x2b3/0x4b0 [ 332.503429][ C0] addrconf_dad_completed+0x6d5/0xd60 [ 332.503455][ C0] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 332.503477][ C0] ? addrconf_dad_work+0xd83/0x14b0 [ 332.503501][ C0] addrconf_dad_work+0xc36/0x14b0 [ 332.503520][ C0] ? __lock_acquire+0xab9/0xd20 [ 332.503549][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 332.503569][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 332.503600][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.503617][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 332.503643][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 332.503670][ C0] process_scheduled_works+0xae1/0x17b0 [ 332.503741][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.503779][ C0] worker_thread+0x8a0/0xda0 [ 332.503827][ C0] kthread+0x70e/0x8a0 [ 332.503856][ C0] ? __pfx_worker_thread+0x10/0x10 [ 332.503886][ C0] ? __pfx_kthread+0x10/0x10 [ 332.503907][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.503924][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.503941][ C0] ? __pfx_kthread+0x10/0x10 [ 332.503961][ C0] ret_from_fork+0x3fc/0x770 [ 332.503987][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 332.504016][ C0] ? __switch_to_asm+0x39/0x70 [ 332.504034][ C0] ? __switch_to_asm+0x33/0x70 [ 332.504051][ C0] ? __pfx_kthread+0x10/0x10 [ 332.504070][ C0] ret_from_fork_asm+0x1a/0x30 [ 332.504099][ C0] [ 332.506657][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 332.506681][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 332.506713][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.506730][ T31] Call Trace: [ 332.506741][ T31] [ 332.506752][ T31] dump_stack_lvl+0x99/0x250 [ 332.506797][ T31] ? __asan_memcpy+0x40/0x70 [ 332.506833][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.506870][ T31] ? __pfx__printk+0x10/0x10 [ 332.506915][ T31] panic+0x2db/0x790 [ 332.506961][ T31] ? __pfx_panic+0x10/0x10 [ 332.506997][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 332.507034][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 332.507080][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 332.507126][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 332.507174][ T31] watchdog+0x102d/0x1030 [ 332.507211][ T31] ? watchdog+0x1de/0x1030 [ 332.507256][ T31] kthread+0x70e/0x8a0 [ 332.507290][ T31] ? __pfx_watchdog+0x10/0x10 [ 332.507322][ T31] ? __pfx_kthread+0x10/0x10 [ 332.507354][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.507378][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.507404][ T31] ? __pfx_kthread+0x10/0x10 [ 332.507433][ T31] ret_from_fork+0x3fc/0x770 [ 332.507473][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 332.507517][ T31] ? __switch_to_asm+0x39/0x70 [ 332.507558][ T31] ? __switch_to_asm+0x33/0x70 [ 332.507583][ T31] ? __pfx_kthread+0x10/0x10 [ 332.507613][ T31] ret_from_fork_asm+0x1a/0x30 [ 332.507660][ T31] [ 332.992705][ T31] Kernel Offset: disabled [ 332.997042][ T31] Rebooting in 86400 seconds..