last executing test programs: 20.348539295s ago: executing program 1 (id=2176): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={&(0x7f0000001080)='./file0\x00', 0x0, 0x8, r3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x14, 0x3, &(0x7f0000002200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000022c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002380)={0x2, 0xe, 0x7, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x81}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r4}, &(0x7f00000021c0), &(0x7f0000002500)=r5}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x40010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[@ANYRES32=r11, @ANYRES32, @ANYBLOB='3'], 0x20) 20.324517587s ago: executing program 0 (id=2178): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) unshare(0xa040000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xffdfffff, 0xf}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="c66e99dd3fccebc2edd405e42d17436bcd2012f844a30f3502a2b5b7ef7d4b0a92b9683c8bd96aa9cefbad0eac70b72d18b1efe0be7193d3db53ba674f428dcbee1f3b8e324fc3f1686c5366fd6622f84b690efa7b7d", @ANYRES32=0x0, @ANYBLOB="1200000000000000", @ANYRES32=0x0, @ANYBLOB="7f1e6803002ce433b56f76d3", @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) r2 = socket(0x8, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff9, 0x1e}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200000, {0x1, 0x14bb, 0xd3f, 0x100}}}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0x4, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x34, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x197e, 0x8, 0xfffffff7, 0x3ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0xb, 0xe, 0x8, 0x2}}]}}]}, 0x60}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x2}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='cachefiles_mark_inactive\x00', r8, 0x0, 0x7}, 0x18) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x25dfdbfd, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x62, 0x2, {0x300, 0xfffffffd, 0xffffffffdfffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) nanosleep(&(0x7f0000000540)={r11, r12+10000000}, &(0x7f0000000580)) r13 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r13, r9, 0x0, 0x16, 0xfffffffffffffffe}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) r14 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r14, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 18.876257569s ago: executing program 4 (id=2186): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000407bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r8, @ANYBLOB="0c0099002101000070000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r9, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x101, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000000)=@name, 0x10, 0x0, 0x0, 0x0, 0x6333e2b036a2c777}, 0x0) 18.821670372s ago: executing program 1 (id=2188): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f0000000300)=0x9, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r0, @ANYRES64, @ANYRES8=r0, @ANYRES64=r1, @ANYRESHEX=0x0, @ANYRES16=r0], 0x10448) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x0, 0x2, 0x5]}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x44, r7, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) 18.622112731s ago: executing program 4 (id=2189): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000791210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x7, &(0x7f0000001e00)=""/4088}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@local, 0x0}, &(0x7f0000000280)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400000000000000000000000000000000000001b88a5e0576e5341c02260d239d38f54d782ee897985febfc7cceaabbc034c7da7f3b9cb4456b544ef44fdbb46bc2e66094096eb58fed4810973c98d688de8494d0e3197835627b67eba2432efcf52f965d40d4fa246d36c54e83c1aa203bad195ba49623311788a0c1a9660c60e1d528", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r7, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x5, 0x0, 0x2, 0xa, 0x5, 0x2, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x5b, '\x00', r4, 0x25, r5, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0x0, 0xfffffff8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r1, r0, r0, r6, r0, r0, r0], &(0x7f0000000500)=[{0x3, 0x2, 0x1, 0x1}, {0x2, 0x5, 0x6, 0xe}], 0x10, 0x2}, 0x94) 18.502807329s ago: executing program 2 (id=2191): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) (async) syz_emit_ethernet(0x1011, &(0x7f0000000280)={@local, @remote, @void, {@x25={0x805, {0x0, 0x2, 0x9, "00e5d7ca9b7c251bd7cd104371463676c15ef5ffc924524329b96ca6a9f90ba4236493d9353665dfa899369ae8931228fdb8478da2573b881e4a7ad76ffd7d8d2607442a86ca43a7ade1ebbbfc72689f443ce7e2e5cbe7aaae22460d88a10007c1eaad918869655fe5ac6bc6371a16de9a1779d60001d5b30af4739183ba1c61ca57eb6c24609ab71a660628658c1c11798d62f9eed113ea421359599ba31f91e3a3895f065f9e8fc0b7465e81c67a4b5570bbbc3e230476dec40e3879df5137c1cbf3723844037af70028657d0a8c5a47c67f76f20878728f3921e2e7372ed62ce0a6dc5f52962d5276c12303c8422fb345bb0c255f66006bce8869dc7f1c89de2013142e3bcd552b708bb774d5c31d47ef1e7cbe840f695857e85c0ac6835d6905df1dd28734c6c9c0f0b79d7552a7357fa5e60e78d81a61bcf1c91ef4a8a11f71cba9baff31c1810f9af0342e8bce8c91a3c76091a849c427b8be0d0b234910675e097569a9f128283f795306ca34bf324ea9e0296fdcd09ab398b750dd3dbc7fdd4ec40a607409e8adf14408f1d2fc09fdb54929dbaac71b832f71d6f8327bf0fc9a3ef9a4e9434bf85194e5f969cb7b62493e6d558c879dc8cd33ee9c18e174a282ad4a938e463dcff4777818d261e9a64f31e2f98503dc06349288427d08393ee73c14ef2f16d4c85637b1361d24e7d3e28b5ad134591d9177cd298b9b93d885ace26468555d532a203dbdce4b12187cf760634772ab5274254802de983942f943bbf42f357285fb6be5f586fd158bbd5d74888c4f1f6f745c0287b91998b22dc72fa8b664c87fc285cca61e83a0bee92f65a8aa8bd2703a992727158bb3635c3f4386ac7f17d56b2a044481e4a80666272dc7add2ab95cee9725fabee99520c83df4508177507349b2bc979dbf6030c80a600927ebf83bf1ceec29618d94033847f8cd1888bb2d680a2da753c6e63d2e26525a4520c895980f295edba53780cebb2a3cd3b39f363ffe849cd372f5b4aa38382fe9d82bace52af93dae2294d56cbafcb9a14eb0a046bc1af9abb0a6b322cb94ffe3143702e63fa574219c1ae46d9422ae992eb9f7c133d4774e10c4e94c3d0e7db47196c8ca4ff8ff59016058bb53b63dd3e73d4b7f230d55c265eb9b8eb4b3367be6f9367e2a213cbb2ddbc671caf0bb6dec5e092782445b66c5e53be532695a9213251e99f05e92ffda3b4d3186b32fdd6fc5e28ae6feb445c7ad2e01bc352ef05d7ff3176f087a1eaea882439af618e76939b4c6b5ec506e06d3f381afcb7606ad467d05390d46b984cc2adc67fd7c1148d5a73f44b7a9022aa7d08941528d696b04470e48bc52486a4cc6c474b0e17cc7a4b02ac86bccaaceda221ed1421809dd5ed8b1a4fc68789b60da90faee4f7088530ab135ba166d6ec2603a0f48b76612f6f3a7641b9e115ab070571265d38427d3bc1c349f3c00e9524f7854798b7702fb46daf01da605655afd1410e63752184e960031c1861577abd54bc9734e8e11a7908497a7252645f9da1f5ff3b637e9338ea9f94d931ef99b09ef376813f10fc565760a1b0e14a45e400a1b78feb07755c72265cd434411520ab337bb2a5a928708370b14d847e9e74159b0ff288628bd26b176b7785b775a8e598c23bb0aee508f74ff218de9e939b0668c3b21b29ea96ec9df9af570b5636f1136f2a639484c8f49b1b6006448606bc4b1bc2a8ed6b1b6e75280caacc8c0bf4990ff9e1c2614835750c31aa64fefa2600331d39f6a40a89b7e4c8a17d8dc28d4f104163b78b454d9ad5f1b93f171fab822cc514011406efdc50b7f64f787eea6b96cbaf44ccd6bbb35937ae1486a20faa2914d3f16392b355f9cf118fb1a05255c40d00f8db523b1097f6fb8aa4d08804883149d4eb1fe5caf9142e5dcf92ca5a45fe6da6eec29be4f6d7f2f29de08ae01d60132bb0786994a71691ed98daa8d08892d60573010172b652644b47a1d5e69659f1187ddf63b4450d74e338576061cf77b1f8f6f3b50d2b362a6273ddc594a3781a768e78801b95a9853df252ee2dfe6dd44d7bd335f28629acfbbf294e5d466d005ff2ac77638660bc81176721809e0bc87fed9d915ffdcaf69554b044a3fb9e70755daeb4943b121217a3371422b793870e5d755d198b5061ed403b890c27d155f012ff399814661463bc1fb4c0ab025bc44684ea7aa1743d9b1ce4c5367aae972990cf83427023e39bb6a88f24cca9b1a8deefad031b8059c89d5bb00039bc158629876696b1fdcde7b1a7707c8ffe93784325952783db2ada65d503f0b77e41eae2af85e5d7b7e588169565d178d5d042df1d276b6f076ce79d6a1cb633feb45beed4051e8a17a9de099b5d6d1b7f3b0c928629dd269872d380d94c5f9c33f54430e09249e65c26c41312d03c15e38816cce6d821cc76f3ca21f2f3a5bde97449aaedfa92c6ba6bc21b6a5cc90feb1629d0761d28b10adf5bf52d023173276d535258b4fdd782816c3d394906dfac4c567d55fda7ac19b1a5b2aa9fd8d5d3bd71a4491257c9e35bb724324ef8378b65d9b9069b55f91bab9a69796bcf8353f0c7dfb4fa13874c41caa6117ed52f5c70f972c6458f741b88e295dda8c241069f56b267a692ccbcfee68b2aabc0419c74a1cc76213c886a3de5075c2a9d42a300a77f3202e6de7a2ba258504199bc67c30dc19e63df1c86cb6c2a253f8ee54cc634d59372203a80971d88efbfe1c434f790ae2ae59d1585a24daf919fe69f6453272c775023f255f642654a33915e0adae307ccc48821d94ec4a59ef2ee9c290e388e367b80385d648ca4c9c27c3893eee84aac5fb0e42b06b363f150f32301049409332a633625ee17b2558fd2a8251f63460866df3302e5f54902ceed7ff922dbcffe7193513157a3f7a0d89d45aa213845da3c988175de1be1728f946637eb5886306921b5b69cc2028bfa0ada4bd3de647114f7dd7de1957beab47a739fd1cea7275a80a286322b1aaa006056c914fdcb108132e22daa3e211437d292978d86a1050f36a29ccdf905bb1dd5a09d67462c6aada45a1c1547871e86bb48539154dc44e0d40300218214ba4a0c3897f4a52483968da19349347838f0f99edaba201714c0969be26c54f5200e2fe432dd964dc19fd4fe1d2f5c18693beb0f9ff4bc938cb19c3f066265590a706bc36d6bee55b6a2ea88a44501f6c180f67aedeeddbd50caeac88d0a0f4ec15f6c725e0d971b321150fca8f96ef0ffb52c059d6a5043d8514d3c5ac6f807193fe4d00710efc2a7203d0a44fc7896eb469587baf3cc253f6c0253ed38f9853e3c9f807c60bbcea4581b2c951192f005bd6e31479e2537186eeb7a5eea1fcfc4f19427bff54f24a5cf079a532ce5d5b983d533143ab846de674b153ee5ce716f0d6e5ef770468c3c5b09514e373773718aa129916447fb267d34f09be6bc5806f3b617b94c041a22d454ef8be3b75fbd7c8b12d8eea70cca16634a9f7ad45f23f93296127c869739504900d8c874b120bd51d2e5da5cc94fa77d4f29bf88ac5903f753d2adb55af76cce220b738c8b999955b78aa14182c8d7dd6b1fc1cdf1b6a2442a717d9d07a2eddf6f6bdbb9a0eea7fed0c585390f6b5604a6f2eb5fb824901436e081711d086173278a1e6b97fa08db0ddf409f263d28589b6ed1a04159677f2975a23e7885f0502e59a09bebd6315fa084116aeff8078e401aacc4e77fd7669351abe52d9ef8a2ed5f5433229eb1708d4a9bc44e96382039f1f72486ad57c880554c80938277e9c1f359c641000473a54950f777f65e11bfed113ac36d7b65ecfc6fc9b90f1d5ab2d13161a60d816656e988f42b75a276db22b6fd625f1dd35426d5bab78efdf990f4de9ce996f68bc923991d8ca76ff3e6ced2ce2fcef55eee3a2b06c677f30299657147a632154b4ae4268afa3bcb6fcf448d8746d5a5d2edac2fc6c419567871b4543a05e2af401fe59295b1c83888c2dcbfd1daaf1d8c31ad5cd2fbae405421d64e03c8f30fa0b42a9c14fecfa5a17a89ef77760765cb4878cd9655c828b0fce070c761c14fe26d18535f8e426fb8de3868ee5c4a42a3bdae1b2c9c014904373a899cc39dabdd04fda2efbe7fec34fdb4585b4d618282789e3a5d6c6ed3426535698d0fcd43de82732172bfff85cad6f9eddf057d9f84f006051e9ccf118ba6d17f013f81dcadad8b21a7e227fb98b99cf0012698a1a8264c39ac99fb7c3cca07078cb7e53551e78fdf1c981fda123776c34f0cf70454833a6a255ae7b0c0411d06453fba701eef5381262d44ace39e8021c94e9ae82c0497e841acce8fbafab2fced44c360b7abdb533c91db7ca018eb89b35dff1545539b6c29ce021139608a5071f19800f0710b0a2621a32b8f7de15ffa5dcbeb627261e0f70b6a9dc8aded167a10105d1d55eaba505e2ca593d0bead627d04067a54ebb55a027b21df24b9f209dd0349136942e82a98f305eff7229942c154b1e1bd856ebff720f213bf1b20ef55553c8f61b83d609a95c76fb136d5abe6774d6c5425b299f7af50b4247694d8b536dc40090270f516a45e52a65295678116e76ffe58714f45dbcae9f70ed0129fd7082ff3c1108742d21bb62ec12c8e3a0faeb5a6340f729f0f089b06913c0450106aaa9ed332e11cb9f96fae5257c9b3bb205c1b5f1d3a364a9f5eb5d0e1c7d7cf003f168d8c14b64e456bdcb1b05e4c6297b5de80960bca8ed40c95f687724a548ade68ecb9f9d03df5f70732598040e6f6ef2a9c12d19d15a6c5f4ee28052d7217354799ebda33d7d96d0c3a745c4fb6e24aca85b07e69b4a5164825f9b3452c442560e78066223a04e4bbe48bccb9fb8f7ac0c515e3d8d84726c645266236d1f4650c5a9a6c8e9cc16c9daf9396f6bb2185082f4f9329c346c34f21fd376c365aba84a78540dc67682eec8d65f023f8da9aee252e0df65fa8958c2fef59052cf4ec6da0472fcf320fc79e4f691e74225980cd2d1e7df6161580eb974f3c5b7ded3129c8a6cf7225dade94f3704282f0955bb1a4f1ceb12e449f402e54964b8f68cde83c07ff6232e359fba6d107607978278b5039260f338b1073e43e684482b47f44bd9d2e2aa5a10c82584693694fa90e19d31214e180fe37150e78983bb005e643acc33f1549f8444515b8769f169f1bcd30da97a9c291d4200928b920b06e8d261dc14259e555bd02d1d956b25a7297c1cd104e683373656e0c557c64b9ec0086caeb36870467c5072540832d213467c7ec52a6d72c646e5ab32aa4a753d87770c27fadbfcf571682fc847b3c73b1afa6390287bcfe468ce8df9742f46c0b43ddd750c600fb4f9fb72671b0adb60eb271db603f4fc145cfe3be3fbe73b0b2bb390b8eb913bd85c6b6c14335b4a9e94256db619e7fc2d9ff5428cc26785f319e5d229a08720f80eaf1d695d5ad33ff66265a8c4dda2d1cda67ccb971df68a86be89cd77cf92be9b9d19f737878f2375bb354303c3e3340a79dbf5d96a4d4f948e14bb42ecddaf0ac8a6cd82c535b0d204660e6fa8ab4a8ae1426dd9046a055b5a95a4491e6ef2e6e86d068751cb7654c0ebc298cd02ef1eab48a4423ab3d39db837ac6e18c5e2b7b97c78d95635ba9169d999c894b2dc95bb4302b6ef545577b00b2c7857db19971a9ce107a5a8a9ea2fc2141e86265e59f3c7bb0c9a88099119626a024c1c1e2027073ab503e84e6cc09f2ba299e482216e5de88a782a11c1a0d0c48efdc112ee27e765535799536bbea889eb77c5981d5e8b4f9b0"}}}}, 0x0) 18.409301212s ago: executing program 2 (id=2192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x29, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getnetconf={0x14, 0x52, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getnetconf={0x14, 0x52, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x600800, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) (async) ioctl$PPPIOCDISCONN(r4, 0x7439) pwrite64(r0, &(0x7f0000000140)="132d0ecd221db4b201a64531c9b6983852cd08a8c1f2471ed208360862f246872ffbc317e194440c21334f290bec8c785b6fa2a78bce561d7649ed74e2c220c201f034d7646492a7fc4b5e9f88a389459cec242546a6973f9f135aff22a12f85e2f28f9e77c5de41ffc264fa18cd6120a4048760b22f77ce4acfebaa0ea2e77af1a1ea674748f6e29d6ccf0c5ad96138b57a2088fb96bd8e3a9c84d605e34fbbb968877b610b963abaac58a01adc5e4e42", 0xb1, 0x1) 18.224480531s ago: executing program 4 (id=2194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000087ffff0000000000000000000000002000", @ANYRES32=r2, @ANYBLOB="8106010000000200140012800b000100627269646765000004000280"], 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000019006f4800007000f8dbdf2502202000ff02ff020018000008000100ac1414aa"], 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200000000000000000010"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000087ffff0000000000000000000000002000", @ANYRES32=r2, @ANYBLOB="8106010000000200140012800b000100627269646765000004000280"], 0x34}}, 0x20044002) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000019006f4800007000f8dbdf2502202000ff02ff020018000008000100ac1414aa"], 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200000000000000000010"], 0x2c}}, 0x0) (async) 18.215063835s ago: executing program 1 (id=2195): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000007e00ffffffffffff00000000037c000004004280040001800c00028008001780040001807d46b043272ccc159a8ce4b1c2ac"], 0x28}, 0x1, 0x0, 0x0, 0x404c0c0}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0xa6}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000200)=""/124, 0x7c}, {&(0x7f0000000a00)=""/261, 0x105}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000800)=""/218, 0xda}], 0x5}, 0x2000) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c00)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="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"], 0x184}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r5, 0x1, 0x3b, 0x0, &(0x7f00000007c0)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r7, &(0x7f00000005c0)="c220a3937f133ad783b078d3f167f5720e53b1ea3c8be3ae2fd6a4dd12f88e360ed7282a6562e99f8cdd789b3f526997b97cceb96f4a2ebe805832961301677d38cd7304b21544dcbb5f7f7eb49c8ead9dc5471f9c4e374164aeac80b2f710d8c431cdc08769eb0de9cd85840d98b48c1538b5cd75ba7655d1093a2320851a326f38b8d4eb3471e8af18fad72fc0fac768fca0c7d568815e7ece8106e0aabbc01beb058a6d59af2f02ec25fd2ade1d3e15ea48ef3267f1eba58a619b9883d27ccc4ce7de484112eaef1d0905359d94aea1f9834c852762d3974b7c6d4acb854740ea960c6c", 0xe5, 0x4040881, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000100)={r7, 0x0, 0x8001, 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) accept$alg(r10, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0xc044) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) accept4(r8, &(0x7f0000000140)=@l2, &(0x7f00000001c0)=0x80, 0x800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e0000000018ef02800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xf, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="100000050000004a00dc5478d200"], 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdf25090000003c0003800800010001000000080003000000000014000600fe8800000000000000000000000000011400020070696d36726567310000000000000000"], 0x50}}, 0x48040) socket$nl_netfilter(0x10, 0x3, 0xc) 18.163158953s ago: executing program 2 (id=2196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000020c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x90) 18.01649585s ago: executing program 4 (id=2197): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61123c00000000006113500000000000bf200000000000001500000008ffffffbd03010000000000cf300000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket(0x2, 0x80805, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, 0x0}, 0x812) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5fe0000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x12) close(0x4) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x60000123) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) 18.014466961s ago: executing program 1 (id=2198): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) unshare(0x6020480) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$BTRFS_IOC_BALANCE(r1, 0x8008b705, 0x200000000000000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r2, &(0x7f00000000c0)="7eaf9d668116879c47349548e696c4f047b21e974af5ae0221bfdd649a73ba538d5ada928c315be4935b585715b92e74f2541365538fd58c169fcaae8b0294082d47e8783b2fb3f20ebae357e2946872ab0cc940b086a62345de6a7ae88d986d33cb629f2c9f59c4d4661eb5ddc971c4581eaaebbb3f14e06d95334d5513b5a281ae557c077caffbd10d1ee4fe270e4d978156db973b42080a0f1788c925500fbc49f4fd4f9cf4eb76f51c5c18f84f96f52ba1891582c0eb73731cb206d595379e9c2a8ef08253a6c53927dff5fca097a50256a9bed03bd7b5b20c05f617625331ef785d1fbe8ef50f46e3", 0xfffffffffffffded, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x1000, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x8, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x7, 0x8, 0x3, 0xffffffffffffffff, 0xb89294c6b25cbc20}, @ldst={0x0, 0x3, 0x4, 0x9, 0x0, 0x1}, @generic={0x6, 0x6, 0x4, 0xfcc4, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 17.948530322s ago: executing program 2 (id=2199): syz_emit_ethernet(0x17, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc_tr={0x11, {@snap={0x1, 0xab, "dfba", "0d862c"}}}}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="a4000000100003040300"/19, @ANYRES32=0x0], 0xa4}}, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x6, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffff65a}, [@func, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @tail_call]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000001480)=""/4096, 0x40f00, 0x0, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x10, 0x8}, 0x10, r4, 0x0, 0x0, &(0x7f0000000340)=[0x1], 0x0, 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) 17.81726323s ago: executing program 0 (id=2200): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xac}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000001004000000000000700000040050600", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0300000000000000030000000e00"/28], 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0x10}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x8, 0x8}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000540)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @alu={0x0, 0x1, 0x5, 0xa, 0x6, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x1, 0x3, 0x1, 0x100, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa4f}}, @jmp={0x5, 0x0, 0xd, 0xf, 0x4, 0x40, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@deltaction={0x28c, 0x31, 0x200, 0x6, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4301}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb86}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20000000}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x76e}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r13, &(0x7f0000000000)={0x1f, 0x3}, 0xe) write$cgroup_int(r12, &(0x7f0000000200), 0xffffffc1) 17.636649036s ago: executing program 3 (id=2201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000001200576326bd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="2000000004210000080029"], 0x2c}, 0x1, 0x0, 0x0, 0x80d0}, 0x20004000) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100003042cbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="2387040000000000300012800b000100697036746e6c0000200002801400030000000000000000000000f7ffe0000002080007000a00000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 17.636114767s ago: executing program 1 (id=2202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socketpair(0x22, 0x8000f, 0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) read(r3, &(0x7f0000000080)=""/28, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0xe, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x43}, @ringbuf_query, @jmp={0x5, 0x0, 0x0, 0xb, 0x1, 0xfffffffffffffffc, 0x8}, @call={0x85, 0x0, 0x0, 0x45}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x22}], &(0x7f0000000380)='GPL\x00', 0x4df5f9f3, 0x81, &(0x7f0000000680)=""/129, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x8, 0x1, 0x7fffffff}, 0x10, 0xffffffffffffffff, r4, 0x4, &(0x7f0000000740)=[0x1], &(0x7f0000000780)=[{0x5, 0x5, 0x6, 0xc}, {0x5, 0x3, 0x10, 0x6}, {0x0, 0x5, 0x4, 0x2}, {0x5, 0x1, 0x1, 0xc}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@map=0x1, 0x6, 0x0, 0x3, &(0x7f0000000880)=[0x0], 0x1, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)={@map=r7, r5, 0x4, 0x2004, 0x0, @value=r8, @void, @void, @void, r6}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r9, 0x80047453, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r12, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@dev, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) r13 = socket$igmp6(0xa, 0x3, 0x2) ppoll(&(0x7f0000000200)=[{r0, 0x8400}, {r1, 0x1040}, {r10, 0x8}, {r11, 0x9}, {r13, 0x1384}, {r11, 0x1030}, {}], 0x5f, 0x0, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x1, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x2}, 0x1, 0x2}, {0x1, 0x1, {0x1, 0xf0, 0x3}, {0x2, 0xf0, 0x1}, 0x2, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 17.352659688s ago: executing program 2 (id=2203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000304000000003f0000000000000058e483cdc3d3d1049d03e5da4836192df4a666a6f105e3d27856fc863781f05889e1a55a340ba0becfda9db9696d5c83aea82a49ecd9e94d03ee4061932f4450e05a229cecedb6002735b9e1345a129e88092c9fe811770f3fcfb0114ee88c51e01752e7cfbe4e006637374b1eb2423786f9362d6f8163c1fcb395fcaafe43ac255415648131a69e0921839cdf3c02cb91", @ANYRES32=0x0, @ANYBLOB="00040400900a0000240012800b00010062726964676500001400028008001d00402c000008001c0003000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 17.285353141s ago: executing program 3 (id=2204): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000000000002d0000000c000500000000000000000008002f000000000005002e00010000000a0001007770616e3100000005002b00070000000c002d"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ufshcd_exception_event\x00', r2, 0x0, 0x6}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000080)={0x0, 'bridge0\x00', {0x4}}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 17.004697664s ago: executing program 4 (id=2205): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000440)=[{{0x4, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1}}], 0x48) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x1, {0x0, 0xff}}, 0x18) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="8010e6", 0x3}], 0x1}}], 0x1, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x50, 0x30, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_sample={0x38, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1d93}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x40014) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20044804) recvfrom$llc(r5, 0x0, 0x0, 0x2002, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x40, 0x4}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x503, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, 0x0, 0x3a}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x12fd}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}]}, @IFLA_CARRIER={0x5}, @IFLA_EVENT={0x8, 0x2c, 0xe}]}, 0x64}}, 0x800) 17.004184971s ago: executing program 2 (id=2206): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) socketpair(0x28, 0x1, 0x10, &(0x7f00000000c0)) writev(r6, &(0x7f0000002540)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="fce1f26b6c369a0cafbad9d5dc6dbaac83f9dc15b2fbd501a3e99fd779790015b8a599a8286c06034558dc10b0781a44fe03aa6248b9ea9072e0083035771b51b7729a2354ae25e7f48e0356d12b40d045e6926f098c72953f8e48476d3a1b9e399d51ea7cb342b5dbd0ae7562fb5bb02d2920033f09aafadd2f613f365110f26d51adc97fe5c22ff1aa9ffdef08da56887e537079911604fff41d6403d914a9f8aff5b971e246cb66aa9748ef4cd7d652bdcc7d90f40c14dc74e8a13a542fef8f12cf8b0f328d54bca2a0d927c81cbc147ba6e1bed1c9c6ff2014df32d60cfbb781", 0xe2}, {&(0x7f0000001440)="af59161d4c08420254cae976078ff6a34b66d5d4041390404dee8140c7d7d4a066db", 0x22}, {&(0x7f0000001480)="6a8e65155a0111c3a16057c4cf5495169bc2c1697ac72fe029ebff1076f9b1c70f86e729159e4e0fcdcd451ac8ffb2002cfed5bc4f0c27653dec07cd460cc9a9e99f2c17ad866785c93d48c6e3969b3fb22b1f8723943ac110bbb1862b249a38d5c535a65e2654cd92334e7e3d9616d099d5c5b6bd6191e2d785b028c38410b614d0179e67b8", 0x86}, {&(0x7f0000001540)="844e1752bd952419a50ac3a56f3c26ef1771b7a1c67e3de5c100839b89bf0405c189a01fe7ecbd568134449b441fdc9e0888ac1146598164003fbc8effadcfe6a5d468b7bffed4fa5fa42572695bfded62ef972fcb50f750287bbdf3c51605a72eef5374264ba08157e911aa253d23403862e7e5d82049377d7aa6e5f3740989f31e6dce52e57c67db31d1b34ff7ffd7ba0269a02d071936de50e5a22879b62131efa9fae3ce523dede33f6efeb2574a1949532a67223d2923e6914278f1b5bf8dc2bcc268f54b2d85b498f9a96859f13674e3d3925175148e98da34a68d17d7c3b78687ce0d390f4e3f35bb17cbed75baa0548283eff3e14a4edffbbb653c451f3f9ab9356419e64a4833f01f2a8c8f313273fe464c987bebd14a93eb55cf95f8a4e34de154c68452fb1b21d52610ef8274cc55fbb79a32b87d90f4c96e3fe0de1232a6ef76bbc19b514faffb505b98668b9697a86a9ed2ea677f7cfae7af6e67f3059b2ec06e5b54028f67ec750bbe1911361fdad0e3e970a3c1e8fce30aa1d12c6efbc24c09ea71d1a995750543949926abc18af486568fa44e8ec7cb9ee0968bcc2fa04e1cf968b55de159aadac143e049bf172fd6954042ad28e406424eee65b029fe6c35cd6a71d5128240c88a5ff49df734ee60da939b0e9a0a6c0ab948fa433768a9ec38d5f712a26386b703d7d32e7f39961dc0f67854d30a2699bbbbd4695334831cf1b7069deb2221a2284cec85a782df4db81261f5ba57a5f4cad8f8150a9985fec49a73f4decead668b467ecf07e7192a8cbaf95a4276a2b9443d00b2626ccb5070f76f3bf185ac45c59007d5b6b6a58b8bd939b908a1682ddfe67dde542dcd8444dcae0deeb920d6c6df1e95cc196ca52f5cd89d1926f07acc48b9311d0b9726641db43f0607d981122a7d3eb45444b10a2a2e5fa84344ece96901dd6bc05fefe5fab416b7eac4b900cf2dbb9780989f447426a923f75f5108b096546f0bb8b02e7e51ecd36608477ab0d54b884a47a3b3471157c8878ccabca8cdc2f0ddb1563c0b644e5e910a44c4bcb29b713f81dfca88bb993a1b19a7e8f380ce114e8bd40ba335e653856171b2050ffed07671ad40d8484916ddd8e030eb09afee9dce0cd36cab5a9f22b0962a3ebbcba85b0e9a8d5c74a89b6ce6842943cc069e15202979cbefb4710d641773e5928236525fad9abfd66af657c1f264042bc00b1bcf8bd5d40c2ad9332ef75f115a7b24a0c6486f152742f94488b5cf6ac36b7620dff1f82a77fa724037e0fd41140e2cd4a6cadee1aea8097447b95f245c232d2a0f054c5c7add5bf99fdd5375009986d55f32da4d7a30119e993320f4d5c9ea57eef3f447048d9698021d6a1ae7b62f3feea121d2403ae9b670aa19a71fd10dd554321584f1a7ccceca2163e2538f4de46307e5e159f315292feada5088e23cc05b7a4880e69cf3e4f5daebc93c40e6412420144d515ecb59c7b06018b539fd3dac3f18b1ad5bcb56a66240248901e3dcfea8a06e7a45650c2d6adf2582f3335247466f846f160b2223e95bfd714c3f3533e01ff11fc2be98a620d3484ee5b7ba6f5064a15dc28c18faea3f518ad243eb68889e36cac6817e27f8cf57276415aa9e8be3e30a0611a6aa13fb4e3acb53904b6cabf185b97014f97b1dfdf4777af82517c24d1ca02eb5b90c4a66fa13dad2b59bdf8616827ec3277ec4d15354c75359a30f885b69ea317560133f8aa1e356fd1d4fcce41db38713cf66234c04c2c76552bfd5114641c23783d496e5d32652875f5c43e49aea10bbb48a65c0be4fadd349029af811dddae330ba080b2062d45fa0ef6e2909935236fe8b821eab4b9ff2539f663924c4d3a1426136633e8344e15f86290875e25720620a0de679de94333ab404bcd9d76f51f12691c1f332b53112cf2a1ea93225c90cdddccc829acb093e8455d8724820095925e2471f5c2967af29adea739f65f92ad64800787012f73bf449916ae9311452378b23d0bf23442be7578ba572f72bd456c854d9e173b9c4379aa6f6c7d52c6d61af802bcadaa5bfd699b813f7efa81e117527052eaa5d8b70ebb0efb5acbb86901e4c78f58e9cc9b836cb54ad72e644cbd6ab01c2c347f548c7c6575deb6710117b3278d9689144346d7e1bba897c97a731ba12fe3557d3bbd620409389ee0e2a8bff4794afe0ae967ccb09b0770d032590d1f67850c853e7f3fbc0a29670a01873384dea39411325e0a022da357dbae980077014d877f6e478d1d543ad7884455e9c345d419c191c0ef8d203065a2b42af73fdb38d307992b6c7128e2700b5d5191cb2c4bfeb1d8bd5b3a3cc10d16a71db1b445c09688061d609b5c945c7394e5f49e4556eba98aa6f8ff776169cf378b97e5722076ab4b0576e96c796e186d2c815930e1454d9b6565d658f6ef500b5af9537e5392b0a61345b442cf1dae7709c486af09732fbc23ab2316ddda58adeb882622294197fadc33ddcfb5886e29305a2fe910d2ff3e6cd81376c5766840e06f2ad70ff805392510dacd17495c6fea24495e4b4d1375ad1589f04bb08b2df7edfc69bee52ef36f2e5b53a25d72042af31b44c756d1820cc10af47b665d7c46577fa14508c00e93726e2e512b85151cf542dc29b37d33ac912bbe6fe6203ea051cece2318a9eb3141fd6ace63715334ed0d5d1132e1fe7bcbf5b64c5258c37f4c56752b6128b84c5fa78776e5232a0d4199f893d68eeaa6a4beb0deaa8d24635d8287989a96f9d67486667c708c38539adb00c53193adfcf00a0bc91a2be629e4bb05e1853d82e8fc9a58599c81ae3fccef2604de854b74ba7fba9251bb02f7015b87ce8d3264553a49c638230dd150188428667c000d73868afd4262cddabe7df83714bd2668d8dc3490c99c4c8348e31bc8816bf57ec4a65059c7993a73c25a87340424041220bc10e4cbf4198d02cf6d55537b80b2601469328216aa2f7edb0f478946bb5dfe7236e9aaec77752f7dd5163a694c16e6852e16b61aa60820be153631a6ff3a95a09a645d40d8c8ee94db19bc2df211b7f1dd04dbae95ca60544482599671512e37c62f1d5653eff6f41afa193ca386b24e8d5adf4283cb3a7452d7800334d677b3f8f99866eed30e369366915a2c57e95394b6dc1f34b72f836613e3ccdacf0a6e18fc8bd4678d87f510f704a36dfaee23295b5570339f5fe412bfbc8cd4a2ac0017141715e691079556b2737807d96d54b1bb30075a8979358ab4af01b705745cf3046b6acffa5c07bed98c62489bdeaf252b802997a77c9c617f5b321208b488f91f6776003448590990a723e027cd53d2eecf24a1f50538e19696eb665ce63de41ebae03fda899eb4202a7875282611f8fc50132d57d44a44e50e3fa27127c1524550128a802c7a1c6083551c9c402fa0e614d86ed0b6eb0e89fedb11614013458f525da2c0cd7ba91be93b188e12292c31857ac2aa3776a56002e93b36f9206cde76546790b07d508c9afd46e167937258efc8a58f34dcf4b68f4b456da9e6be532a4d7279942ce08756c5bb569b0014654ed497d6d9de7a3c583d6baa4a85aa903088aa30e0f9ecb6864b778b476ac0f5be943a59ee8a1cef4d0a71de5de3bb2e2bbc3fbe1444464ff642bfb4058e68cc1e9740f9ef070d905eb9e5318869078ec801c7c7746bb2764de07d96b324339b611289074593d0d82de9983562071a0b01dcf5f20d9951480296f8e9e3713b367188caee5881d5d8dd50e15df46ab2c288ac96764af012c650f3ae7727881b29de8a864ceaa3ae109487774d4851146cda3e656190143051f58f9d8185a945c7960c8d21abdcc32252949916f04912c72e0cefe2181c8cdfd95f0021cc273712f92c5c985ed5a392338a27ec820207cfa9b89194240fe6b0d4716cfd6f76eb9a01b017d2cde8bf3a2dc816d98e612f21bba2c48edaf4c893690bb41de8d7d089e2c453d4b543d16cb9cb11ef4f4054696cad77389081f0be3979525b31e2aa974d60736f318a682a1cc101ba121e8ae4908614c8eef00e1243bca4c354b1c46cfefb9127bb871b6ef322832996ca385aa157b3809c9c46445035c3059a13b24a126c566f37984df059c9ac7d36d6759691417316f6076b523b25ecbffd199632ec10440302bc6f7e0862fc52f01097729feecede95e444554474af34a11b4fe3817c237a9a81bad73d6bdc83bf79c800b7d5e716c06ffcedaad7bccf38e94572da5b64b43c5cf19b0f7bc027e31e6c872573ac89027b4636e75016780c32e82ca80889487f2299e59bf5e2ad10b4f63de7b480d55e76f4987546463902aaa2b4ac8e4d0bf57054db7ca442ad3e55a656de5a65145205c06c69f0ac8982b1994422023cbc05853870098ee70c31f045d4e4bfda079c1211beefc827acca3673d9c9286cfe97693c664faf66ff590f5204e5992c8221983d91ba7abdca8467bff6fedbb1a21aa97b934ec21410f94541ee06421a7ab38dd84433197da20baf92942de24b522e03a7ba0c2057752904985e34a3e7b87ec522ad5e75f9bf8733ac089518e6046276bc624eecba113bbb2651b0877e3113fbd9cd7e3645bff4eaa0499972c43f989638da4e8c25b129ebabce1f60c1afb45f23429ebde2e7bffe383b11bbc0873cb09bdabe5ead6ed920afc25b1d7a295cbf848f6529876856667c9c4a74d62cb211a9573d0e6d46822561c0c18c70551882402e2a7cd60ec475789f733ae2c3ea059803e691ed3e8b9a8132fcb39650cbfc461ce1668c46731d8a4784fc92a7f04b5c3f8706a1a60df9683f7c8da737e36ffca561f3cd5fd7398934c9497dd1c5f304f76ccc59fd0ae8d12ca4661442240b67b51ca12d45f393ec8f4e79a15c051ba7e51544d39fc08684231a42ab3a522c15eb76b0f3bc26ed618759d5db934f8a3425dfe1af9089cf9e4d6058a98290b8cb1c9801e24434fe0548be16e6b5c961fc33871aa38c967a81319b0c99ba36f3e874002b3c22cac02e87ee6373d46c13cd2bb59b10e3084770d829d08a667b7115d04f6d834e8a1914314e8e9804bb1796c1fb31ad36d22e773462218b968caf0f443ef9cda63fc7984c1c2640bcb21a2d5fa9faa4b91d210cae132fb3f53f303c7f540d09f96173b7394b85fc158355d1d212d4139cfb795b71fc15d1f11ef4e3c185dd3fa440a0be04cdc989acb8384b6959a4a10ba57d90579f3e5dcfe7966f6ef80955ecaea43cf32ed12229d76c7b6133f3bd5f364968c14f28813d6e16da97bd3ce19dc644604d5b873142939e92559aedb05cbb78f2572076580d3b8d2bee908dac340849b68d2911fab43c0c5c19deac12db9976dc0b8ad881aa33a1a63f4d04bcaf2c290eaf13d66eb7cddebdf49467a05527532e533bc61be2998ec12ba1af4a9826a44015f10fe4fcdd37d354cd097ecef9b06ac4b8ccbfac0094d504f830f19221827800b72651242cc5894dc054aaf791eb95b7acddd5f50be56cbc1d9ce254b7556c2e69d3b6e0b5cb0aeaddf17be31a11360246b5af58c517e546fb9a3c79f3780595f6d2428412b84c20cfe313c1c9b2717f813e2ea23f086665e62fa375712e1d139271f247c57f9a5600d547d1772fe729a6b531ee161d896cd7b04a207cc080fdbdd1c08188ca56519e5ed2ff873e73ecdaf2bf14b28033f459683d878634bdbb909e582df0307488bafa7ab71cd9666ae33d642ebf93b168cb0be2167f75f62a853c2486c5eb96bb7420a47d35b05c28e1cf10b0e3d3ca34b59813c74288ea783917696b7", 0x1000}], 0x5) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000702000000400000000005001500020000000500010006000000050005000a0000000500040001000000090002fe73797a320000000012000300686173683a6e65742c706f7274000000"], 0x60}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r8, @ANYBLOB="3cbcf02731c7e19a093fc2e3df7af9440100ffffffff0000000001005884801e078008000129233d3e595d7a90328c3a0cbd81223e00"], 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd70f9fcdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x38, r9, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x490c4) 16.841010346s ago: executing program 1 (id=2207): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000000c0002800400038004000400"], 0x38}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="021209090200000026bd70002656df25ec287ccc350af4df425ff011f676a0959fae0480ce7c1989379b526be484282476558aba9fbe110eaf5633cf488ff8573690caf7d11eb86baf769f80b4faed39a9fb6a48abcceafc81a4418b5d9df7ad71ec30d9b6ae75dd90"], 0x10}}, 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/12, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77696669000800024000000000090003"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24008000) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 16.708580684s ago: executing program 4 (id=2208): r0 = socket(0x10, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe0000000000000008", 0x1d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000570000000320989d00000004000020000000"], 0x0, 0x26}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000570000000320989d00000004000020000000"], 0x0, 0x26}, 0x20) socket$inet6(0xa, 0x3, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x18}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x18}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r4, 0x401c5820, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a00080200000025bd7000fcdbdf35"], 0x10}}, 0x30004000) (async) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a00080200000025bd7000fcdbdf35"], 0x10}}, 0x30004000) r6 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) (async) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000380)) 16.580724577s ago: executing program 0 (id=2209): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.497087531s ago: executing program 0 (id=2210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88981, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x7, 0x1, 0x0, 0x0, @str='\x13}\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNGETVNETLE(r0, 0x80047441, &(0x7f0000000180)) 16.40228212s ago: executing program 0 (id=2211): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000), 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 16.292443319s ago: executing program 3 (id=2212): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="f12468c6c394472c8eb4d933949b4e7ce34f7e40ba3f0e7faf4c451550fa3e23ce5eff4f94c1d6a8d70a2bac4a61a80878383b7e9b4949e5e1806334e9b2b38c36b1ae9cacf90d28c44777d394f9c35db1f99c67e2e8be7b18eb08f008d897c6f47e09251280c7f663bd27785705ece8f16d41629358dd8090186bbd46a69fb5727ba3e1d26a5489ee962100f4600a24873520bd6266c7d27e2c0645cdc1c5b6e0787b5a9e9a98358e557344f0d8190df4e39a0ae6a3c77022d5bfe6326c9f151c760d16864288295be04e9f6454cafc19431c2f99322dd409b56268d8e40d80ca98b6f6331f06ef5a28ed1b092e16558d33177d4ab70db6768e06f59cf9c9d0382a2d59fcad38fbeded381b74acb93bd915ae6898f8ba1587e780205ad4cbf31186fe3913dcdb2527af89b3f431029416fcf0aa6a5e81d935d7e37e932a4e8cec21daf2eff568ca97132e6c3e659d0332cbdac7111ac4edbad69c5b67e11ebecc863a58ad7264385e8520d3d3f27fa565bfd90907e66b0a6c692f6fa9b666cb3a1e4c341c7fe0235bbd1bcb657637c2c784c874a7d083f80644b6a6e68983f769e5b90a06b30f0418addd80ed03722a9360bd640acc28f89bef7d20a4b9384ade774b1e461be1a926c9753e561cfd4de1e15177008c1b1e88b267457f697f4ada22ee0198a644a76ab3eecc263e61bc09f1455888f768a15a3213b9981b2863c3505317e4e363a0cbebaad423cae3df0ee901ae7dc4c80ea6", 0x219}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x1c, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x1}], 0x0}, 0x94) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$NL80211_CMD_SET_KEY(r3, 0x0, 0x4004) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001000030425bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0005000000002dcef7a241ec08f0c8000100aaaaaa996319033e349b6a6865421496a221243b56dbc6804b347d1a60804308545f50dd2d3be5995147bb2ff975429b4c4cf505310a930000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) shutdown(r0, 0x1) (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f0000000040)}, 0x10) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) sendmsg$kcm(r8, 0x0, 0x8010) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0xbe, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0x2, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x7, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) recvfrom$inet(r9, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000000)=0x10001, 0x4) (async) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000006540)={0x0, 0x0, &(0x7f0000006500)={&(0x7f00000064c0)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8815}, 0x8044) (async) recvmmsg(r0, 0x0, 0x0, 0x10100, 0x0) 16.291927132s ago: executing program 0 (id=2213): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x8299, 0x61be, 0x3, 0x1, 0x3, 0xd, 0xf, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x3, 0xa, 0x0, 0x4, 0x6}}, &(0x7f0000000140)=0xb0) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000a40)=0xc, 0x4) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980", @ANYRES16=r2], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0xffffff22}, 0x8) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r7, 0x6180, 0x0) (async) sendmmsg$inet6(r7, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b826", 0x2}, {0x0}], 0x2}}], 0x1, 0xc0000) (async) socket$kcm(0x10, 0x2, 0x10) (async) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x9, 0x77) syz_extract_tcp_res$synack(&(0x7f0000000440)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xe1, &(0x7f00000004c0)={@broadcast, @empty, @void, {@ipv4={0x800, @tcp={{0x1f, 0x4, 0x2, 0x1, 0xd3, 0x66, 0x0, 0xf, 0x6, 0x0, @multicast2, @loopback, {[@noop, @timestamp_prespec={0x44, 0x34, 0xfd, 0x3, 0x7, [{@multicast2, 0x81}, {@broadcast, 0x4}, {@remote, 0x3}, {@local, 0x8}, {@local, 0x6}, {@private=0xa010101, 0x9}]}, @timestamp={0x44, 0x8, 0x90, 0x0, 0x7, [0x2]}, @rr={0x7, 0x1f, 0xbc, [@broadcast, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}, @generic={0x44, 0xb, "5454c6e7cc4f24a764"}]}}, {{0x4e22, 0x4e24, r8, r9, 0x1, 0x0, 0xd, 0xee, 0x2, 0x0, 0x2, {[@sack_perm={0x4, 0x2}, @fastopen={0x22, 0xc, "07393b7b4ac1681185dc"}, @md5sig={0x13, 0x12, "87c0f1e3e0468fe69d8fbfe0285f8037"}]}}, {"e9b429d05baa6fff748b37a7a09d68173fd28bd4d9963c304261296ddc987b3ee2139d"}}}}}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getpeername(r10, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16.164546647s ago: executing program 3 (id=2214): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000040)) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04"], 0x20}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000000308010100000000000000000000000006000240000000001c0004800800094000000000088008400000000008000a40000000000500034c85833ffe723537c7d10006000000"], 0x40}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030801010000000000000480080001400000000020ddb4c02f00"/40], 0x28}, 0x1, 0x0, 0x0, 0x80040}, 0x0) pipe(&(0x7f00000000c0)) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0x31, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000300)={0x6, &(0x7f0000000280)=[{0x4, 0x1, 0x4, 0x9ea}, {0x4, 0xa5, 0x62, 0x8}, {0x5, 0x7, 0x3, 0x54d1}, {0x8, 0x4, 0x5}, {0xf, 0x4, 0xd0, 0x3}, {0x2, 0x9, 0x7, 0x401}]}) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x15, 0x3, 0x400008) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000206010200000000000000000500000705000400010000001400078000000b400000007a08000840000000040500050005000000100003006269746d61706f7274000000"], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x24010) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0xfffffffffffffd0a, &(0x7f0000000f00)={0x0, 0x3c}}, 0x0) socket$inet6(0x10, 0x6, 0x5) 16.049145857s ago: executing program 3 (id=2215): syz_emit_ethernet(0x17, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc_tr={0x11, {@snap={0x1, 0xab, "dfba", "0d862c"}}}}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="a4000000100003040300"/19, @ANYRES32=0x0], 0xa4}}, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x6, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x17, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffff65a}, [@tail_call, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @tail_call]}, &(0x7f0000000100)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000001480)=""/4096, 0x40f00, 0x0, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x10, 0x8}, 0x10, r4, 0x0, 0x0, &(0x7f0000000340)=[0x1], 0x0, 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) 15.821167499s ago: executing program 3 (id=2216): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x98, 0x11e0, 0x0, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0xff000000, 'netpci0\x00', 'nr0\x00', {}, {}, 0x5c}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3b}}}, {{@uncond, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x1, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0xffffffffffffffff, 0x0, 0x80000000}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x1]}, {0xffff, [0x0, 0x1, 0x0, 0x0, 0x0, 0x5], 0x0, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff, 'veth1_to_bridge\x00', 'veth0_vlan\x00', {}, {}, 0x8, 0x1, 0x21}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x54}}, 0x0) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x907a108ace08298c}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00023fbd7000fddbdf255e0000000c009900210800005e000000080040015e0200000800a10001800000080026006c09000008009f000200000008ea00a100ff0100000800220169000000080026006c090000eb8e990e7cf49e105ebcfb257144946f4693e59a6c69929c7800b6784d59c6878a40ee54915750150a46df3b75f5364ce1d0a184b3929c6c593d616e61b295c3516c1975052063230790e2676337f4dc15087012a2b1a93eace07ba973"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8001) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r10, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x68, r10, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6e7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_init_net_socket$x25(0x9, 0x5, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x2712, 0x0, &(0x7f0000000040)) (async) mkdirat$cgroup(r8, &(0x7f0000000000)='syz1\x00', 0x1ff) (async) sendmsg$IPVS_CMD_GET_INFO(r11, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24048010) 1.239184278s ago: executing program 32 (id=2213): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x8299, 0x61be, 0x3, 0x1, 0x3, 0xd, 0xf, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x3, 0xa, 0x0, 0x4, 0x6}}, &(0x7f0000000140)=0xb0) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000a40)=0xc, 0x4) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r2], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0xffffff22}, 0x8) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r7, 0x6180, 0x0) (async) sendmmsg$inet6(r7, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b826", 0x2}, {0x0}], 0x2}}], 0x1, 0xc0000) (async) socket$kcm(0x10, 0x2, 0x10) (async) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x9, 0x77) syz_extract_tcp_res$synack(&(0x7f0000000440)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xe1, &(0x7f00000004c0)={@broadcast, @empty, @void, {@ipv4={0x800, @tcp={{0x1f, 0x4, 0x2, 0x1, 0xd3, 0x66, 0x0, 0xf, 0x6, 0x0, @multicast2, @loopback, {[@noop, @timestamp_prespec={0x44, 0x34, 0xfd, 0x3, 0x7, [{@multicast2, 0x81}, {@broadcast, 0x4}, {@remote, 0x3}, {@local, 0x8}, {@local, 0x6}, {@private=0xa010101, 0x9}]}, @timestamp={0x44, 0x8, 0x90, 0x0, 0x7, [0x2]}, @rr={0x7, 0x1f, 0xbc, [@broadcast, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}, @generic={0x44, 0xb, "5454c6e7cc4f24a764"}]}}, {{0x4e22, 0x4e24, r8, r9, 0x1, 0x0, 0xd, 0xee, 0x2, 0x0, 0x2, {[@sack_perm={0x4, 0x2}, @fastopen={0x22, 0xc, "07393b7b4ac1681185dc"}, @md5sig={0x13, 0x12, "87c0f1e3e0468fe69d8fbfe0285f8037"}]}}, {"e9b429d05baa6fff748b37a7a09d68173fd28bd4d9963c304261296ddc987b3ee2139d"}}}}}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getpeername(r10, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.180049257s ago: executing program 33 (id=2207): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000000c0002800400038004000400"], 0x38}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="021209090200000026bd70002656df25ec287ccc350af4df425ff011f676a0959fae0480ce7c1989379b526be484282476558aba9fbe110eaf5633cf488ff8573690caf7d11eb86baf769f80b4faed39a9fb6a48abcceafc81a4418b5d9df7ad71ec30d9b6ae75dd90"], 0x10}}, 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/12, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77696669000800024000000000090003"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24008000) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.125740015s ago: executing program 34 (id=2206): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) socketpair(0x28, 0x1, 0x10, &(0x7f00000000c0)) writev(r6, &(0x7f0000002540)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="fce1f26b6c369a0cafbad9d5dc6dbaac83f9dc15b2fbd501a3e99fd779790015b8a599a8286c06034558dc10b0781a44fe03aa6248b9ea9072e0083035771b51b7729a2354ae25e7f48e0356d12b40d045e6926f098c72953f8e48476d3a1b9e399d51ea7cb342b5dbd0ae7562fb5bb02d2920033f09aafadd2f613f365110f26d51adc97fe5c22ff1aa9ffdef08da56887e537079911604fff41d6403d914a9f8aff5b971e246cb66aa9748ef4cd7d652bdcc7d90f40c14dc74e8a13a542fef8f12cf8b0f328d54bca2a0d927c81cbc147ba6e1bed1c9c6ff2014df32d60cfbb781", 0xe2}, {&(0x7f0000001440)="af59161d4c08420254cae976078ff6a34b66d5d4041390404dee8140c7d7d4a066db", 0x22}, {&(0x7f0000001480)="6a8e65155a0111c3a16057c4cf5495169bc2c1697ac72fe029ebff1076f9b1c70f86e729159e4e0fcdcd451ac8ffb2002cfed5bc4f0c27653dec07cd460cc9a9e99f2c17ad866785c93d48c6e3969b3fb22b1f8723943ac110bbb1862b249a38d5c535a65e2654cd92334e7e3d9616d099d5c5b6bd6191e2d785b028c38410b614d0179e67b8", 0x86}, {&(0x7f0000001540)="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", 0x1000}], 0x5) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000702000000400000000005001500020000000500010006000000050005000a0000000500040001000000090002fe73797a320000000012000300686173683a6e65742c706f7274000000"], 0x60}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r8, @ANYBLOB="3cbcf02731c7e19a093fc2e3df7af9440100ffffffff0000000001005884801e078008000129233d3e595d7a90328c3a0cbd81223e00"], 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd70f9fcdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x38, r9, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x490c4) 1.043226158s ago: executing program 35 (id=2208): r0 = socket(0x10, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe0000000000000008", 0x1d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000570000000320989d00000004000020000000"], 0x0, 0x26}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000570000000320989d00000004000020000000"], 0x0, 0x26}, 0x20) socket$inet6(0xa, 0x3, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x18}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x18}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r4, 0x401c5820, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a00080200000025bd7000fcdbdf35"], 0x10}}, 0x30004000) (async) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a00080200000025bd7000fcdbdf35"], 0x10}}, 0x30004000) r6 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) (async) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000380)) 0s ago: executing program 36 (id=2216): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x98, 0x11e0, 0x0, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0xff000000, 'netpci0\x00', 'nr0\x00', {}, {}, 0x5c}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3b}}}, {{@uncond, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x1, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0xffffffffffffffff, 0x0, 0x80000000}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x1]}, {0xffff, [0x0, 0x1, 0x0, 0x0, 0x0, 0x5], 0x0, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff, 'veth1_to_bridge\x00', 'veth0_vlan\x00', {}, {}, 0x8, 0x1, 0x21}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x54}}, 0x0) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x907a108ace08298c}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00023fbd7000fddbdf255e0000000c009900210800005e000000080040015e0200000800a10001800000080026006c09000008009f000200000008ea00a100ff0100000800220169000000080026006c090000eb8e990e7cf49e105ebcfb257144946f4693e59a6c69929c7800b6784d59c6878a40ee54915750150a46df3b75f5364ce1d0a184b3929c6c593d616e61b295c3516c1975052063230790e2676337f4dc15087012a2b1a93eace07ba973"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8001) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r10, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x68, r10, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6e7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_init_net_socket$x25(0x9, 0x5, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x2712, 0x0, &(0x7f0000000040)) (async) mkdirat$cgroup(r8, &(0x7f0000000000)='syz1\x00', 0x1ff) (async) sendmsg$IPVS_CMD_GET_INFO(r11, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24048010) kernel console output (not intermixed with test programs): 0716] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.415279][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'. [ 245.425676][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 245.437576][T10753] netlink: 'syz.1.1248': attribute type 12 has an invalid length. [ 245.464921][T10753] netlink: 'syz.1.1248': attribute type 11 has an invalid length. [ 245.492293][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.574216][ T9979] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.582842][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 245.705608][ T9979] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.786370][ T9979] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.890100][T10760] lo speed is unknown, defaulting to 1000 [ 245.925760][T10760] lo speed is unknown, defaulting to 1000 [ 245.960236][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 246.100388][T10768] netlink: 'syz.4.1253': attribute type 1 has an invalid length. [ 247.168467][T10804] netlink: 'syz.3.1263': attribute type 5 has an invalid length. [ 247.197525][T10804] netlink: 'syz.3.1263': attribute type 7 has an invalid length. [ 247.279608][T10804] : entered promiscuous mode [ 249.446735][T10902] sch_fq: defrate 2048 ignored. [ 250.096501][T10936] __nla_validate_parse: 13 callbacks suppressed [ 250.096524][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 250.688689][T10962] raw_sendmsg: syz.2.1326 forgot to set AF_INET. Fix it! [ 250.746574][T10965] xt_hashlimit: size too large, truncated to 1048576 [ 251.401359][T10991] bond_slave_0: default FDB implementation only supports local addresses [ 251.721067][T10995] syzkaller0: entered promiscuous mode [ 251.730285][T10995] syzkaller0: entered allmulticast mode [ 252.142784][T11015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1350'. [ 252.163470][T11015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1350'. [ 254.693206][T11052] xt_hashlimit: size too large, truncated to 1048576 [ 254.719183][T11055] sctp: [Deprecated]: syz.3.1363 (pid 11055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.719183][T11055] Use struct sctp_sack_info instead [ 255.198133][T11075] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1370'. [ 255.553893][T11094] syzkaller1: entered promiscuous mode [ 255.560443][T11095] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1375'. [ 255.564582][T11094] syzkaller1: entered allmulticast mode [ 255.700938][T11103] Cannot find set identified by id 0 to match [ 255.795817][T11106] netlink: 'syz.2.1380': attribute type 99 has an invalid length. [ 255.816811][T11108] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 255.853491][T11109] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1380'. [ 255.875874][T11108] netlink: 'syz.4.1381': attribute type 2 has an invalid length. [ 255.985370][T11108] netlink: 'syz.4.1381': attribute type 10 has an invalid length. [ 256.032594][T11108] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 256.073807][T11108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.138147][T11108] wlan1: mtu greater than device maximum [ 256.143855][T11108] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 256.489196][T11138] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1390'. [ 256.492118][T11136] syzkaller0: entered promiscuous mode [ 256.539249][T11136] syzkaller0: entered allmulticast mode [ 256.583390][T11136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1388'. [ 256.748164][T11153] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 257.033970][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 257.256970][T11171] IPv6: addrconf: prefix option has invalid lifetime [ 257.350036][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 257.463676][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'. [ 257.792816][T11198] xt_cgroup: invalid path, errno=-2 [ 257.836185][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1407'. [ 257.851357][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1407'. [ 257.880786][T11203] Bluetooth: MGMT ver 1.23 [ 257.936024][T11190] syzkaller0: entered promiscuous mode [ 257.943292][T11190] syzkaller0: entered allmulticast mode [ 260.712408][T11253] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 261.156287][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.677378][T11261] __nla_validate_parse: 1 callbacks suppressed [ 262.677399][T11261] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1422'. [ 262.789532][T11271] netlink: 'syz.4.1425': attribute type 1 has an invalid length. [ 262.825490][T11271] 8021q: adding VLAN 0 to HW filter on device bond8 [ 262.841883][T11272] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1424'. [ 262.892288][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 262.919673][T11277] netlink: 'syz.2.1424': attribute type 1 has an invalid length. [ 262.975405][T11277] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1424'. [ 262.986517][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 263.048475][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 263.103670][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 263.148166][T11292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1430'. [ 263.216166][T11292] bridge4: entered promiscuous mode [ 263.398589][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 263.454927][T11308] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 263.742628][T11312] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 263.806088][T11312] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 263.831716][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1435'. [ 263.843722][T11312] bond3: (slave xfrm1): making interface the new active one [ 263.853196][T11312] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 263.936271][T11319] tipc: Enabled bearer , priority 0 [ 263.975388][T11308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.008509][T11333] sit2: entered allmulticast mode [ 264.031224][T11314] ip6_vti0: mtu less than device minimum [ 264.118851][T11319] tipc: Disabling bearer [ 264.274668][T11338] vxcan0: entered promiscuous mode [ 264.582793][T11355] lo speed is unknown, defaulting to 1000 [ 264.635443][T11356] lo speed is unknown, defaulting to 1000 [ 264.679204][T11355] lo speed is unknown, defaulting to 1000 [ 265.216659][T11398] netlink: 'syz.3.1463': attribute type 3 has an invalid length. [ 265.245776][T11398] netlink: 'syz.3.1463': attribute type 2 has an invalid length. [ 265.488914][T11356] lo speed is unknown, defaulting to 1000 [ 265.613995][T11406] lo speed is unknown, defaulting to 1000 [ 265.725552][T11413] No such timeout policy "syz0" [ 266.044130][T11420] xt_bpf: check failed: parse error [ 266.096263][T11406] lo speed is unknown, defaulting to 1000 [ 266.212689][ T5855] Bluetooth: hci4: link tx timeout [ 266.218232][ T5855] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 266.788652][T11442] lo speed is unknown, defaulting to 1000 [ 266.877856][T11442] lo speed is unknown, defaulting to 1000 [ 267.580112][T11461] sctp: [Deprecated]: syz.1.1482 (pid 11461) Use of int in maxseg socket option. [ 267.580112][T11461] Use struct sctp_assoc_value instead [ 267.784811][T11476] __nla_validate_parse: 12 callbacks suppressed [ 267.784834][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 268.085506][T11482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.141844][T11484] tipc: Enabling of bearer rejected, failed to enable media [ 268.184881][T11481] netlink: 'syz.3.1488': attribute type 83 has an invalid length. [ 268.269749][ T5850] Bluetooth: hci4: command 0x0401 tx timeout [ 268.298578][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 268.624022][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 268.641124][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 268.667522][T11500] netlink: 'syz.0.1492': attribute type 18 has an invalid length. [ 268.714837][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 268.905712][T11504] netlink: 'syz.4.1493': attribute type 15 has an invalid length. [ 268.958498][T11504] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1493'. [ 269.428663][T11523] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1498'. [ 269.732052][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 269.801160][T11536] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 269.853814][T11539] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.034926][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 270.118999][T11552] lo speed is unknown, defaulting to 1000 [ 270.132998][T11552] lo speed is unknown, defaulting to 1000 [ 270.224853][T11560] netlink: 'syz.4.1510': attribute type 1 has an invalid length. [ 270.304659][T11565] bond9: entered promiscuous mode [ 270.317737][T11565] bond9: entered allmulticast mode [ 270.334445][T11565] 8021q: adding VLAN 0 to HW filter on device bond9 [ 270.399242][T11560] bridge5: entered promiscuous mode [ 270.405451][T11560] bridge5: entered allmulticast mode [ 270.412759][ T9979] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 270.427066][T11560] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 270.528351][ T9971] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 270.671184][T11582] syzkaller0: Caught tx_queue_len zero misconfig [ 270.709513][T11582] C: renamed from team_slave_0 [ 270.739760][T11582] netlink: 'syz.2.1513': attribute type 3 has an invalid length. [ 270.763998][T11582] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1513'. [ 270.805123][T11582] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 270.856597][T11579] tipc: Enabled bearer , priority 10 [ 271.055107][ T7849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.061812][T11597] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 271.088313][ T7849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.418244][T11609] x_tables: duplicate underflow at hook 1 [ 271.419677][T11608] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 271.634200][ T9971] nci: nci_rsp_packet: unknown rsp opcode 0xe39 [ 273.083232][T11671] netlink: 'syz.0.1538': attribute type 10 has an invalid length. [ 273.230142][T11681] tipc: Enabling of bearer rejected, failed to enable media [ 273.279258][T11681] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 273.526387][T11691] netlink: 'syz.0.1543': attribute type 10 has an invalid length. [ 273.605469][T11695] netlink: 'syz.0.1543': attribute type 10 has an invalid length. [ 273.612556][T11694] __nla_validate_parse: 5 callbacks suppressed [ 273.612590][T11694] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1542'. [ 273.693149][T11692] veth5: entered promiscuous mode [ 273.736115][T11691] team0: Port device 0! added [ 273.792398][T11695] team0: Port device 0! removed [ 273.834960][T11695] bond0: (slave 0!): Enslaving as an active interface with an up link [ 273.998219][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1545'. [ 274.141132][T11714] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1548'. [ 274.593404][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 274.700686][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1553'. [ 274.713093][T11741] tipc: Enabled bearer , priority 0 [ 274.723675][T11742] syzkaller0: entered promiscuous mode [ 274.731002][T11742] syzkaller0: entered allmulticast mode [ 274.750295][T11733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.800270][T11742] tipc: Resetting bearer [ 274.844341][T11742] tipc: Disabling bearer [ 274.928477][T11753] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1559'. [ 274.942892][T11751] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1558'. [ 274.981753][T11751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1558'. [ 275.010715][T11751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1558'. [ 275.054527][T11756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1560'. [ 275.312251][T11758] lo speed is unknown, defaulting to 1000 [ 275.345556][T11758] lo speed is unknown, defaulting to 1000 [ 275.699548][T11779] lo speed is unknown, defaulting to 1000 [ 275.756236][T11780] lo speed is unknown, defaulting to 1000 [ 275.773106][T11790] 8021q: VLANs not supported on lo [ 275.933504][T11779] lo speed is unknown, defaulting to 1000 [ 276.436987][T11780] lo speed is unknown, defaulting to 1000 [ 276.862053][T11835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.242479][T11847] netlink: 'syz.3.1584': attribute type 21 has an invalid length. [ 278.224228][T11855] lo speed is unknown, defaulting to 1000 [ 278.428776][T11855] lo speed is unknown, defaulting to 1000 [ 278.526453][T11876] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.534650][T11878] netlink: 'syz.3.1590': attribute type 2 has an invalid length. [ 278.545078][T11876] bridge0: port 1(bond3) entered blocking state [ 278.553408][T11876] bridge0: port 1(bond3) entered disabled state [ 278.561608][T11876] bond3: entered allmulticast mode [ 278.572311][T11876] bond3: entered promiscuous mode [ 278.583570][T11876] bridge0: port 1(bond3) entered blocking state [ 278.590172][T11876] bridge0: port 1(bond3) entered listening state [ 278.621046][T11878] þ: entered promiscuous mode [ 278.992764][T11888] 8021q: VLANs not supported on wg0 [ 279.490427][ T9971] bridge0: port 1(bond3) entered disabled state [ 279.580270][T11892] sctp: [Deprecated]: syz.1.1595 (pid 11892) Use of int in max_burst socket option deprecated. [ 279.580270][T11892] Use struct sctp_assoc_value instead [ 279.935846][T11897] __nla_validate_parse: 15 callbacks suppressed [ 279.935872][T11897] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1596'. [ 279.985838][T11900] netlink: 'syz.2.1597': attribute type 1 has an invalid length. [ 280.072527][T11902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1597'. [ 280.180435][T11900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.282762][T11903] gretap1: entered promiscuous mode [ 280.321426][T11903] bond4: (slave gretap1): making interface the new active one [ 280.336226][T11903] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 280.368752][T11912] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 280.376857][T11912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1598'. [ 280.534058][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1598'. [ 280.576720][T11921] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 280.622297][T11906] xt_CT: No such helper "snmp" [ 280.635576][T11921] tipc: Enabled bearer , priority 10 [ 280.846364][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 280.887962][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 280.915966][T11943] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:19999 [ 280.994773][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 281.224776][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 281.253268][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1610'. [ 281.316941][T11961] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1612'. [ 281.343319][T11963] sctp: [Deprecated]: syz.0.1614 (pid 11963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.343319][T11963] Use struct sctp_sack_info instead [ 281.728115][T11982] bridge0: port 2(veth0_to_bridge) entered blocking state [ 281.788011][T11982] bridge0: port 2(veth0_to_bridge) entered disabled state [ 281.796080][T11982] veth0_to_bridge: entered allmulticast mode [ 281.810440][T11982] veth0_to_bridge: entered promiscuous mode [ 281.819347][T11982] bridge0: port 2(veth0_to_bridge) entered blocking state [ 281.826721][T11982] bridge0: port 2(veth0_to_bridge) entered listening state [ 281.842770][T11988] netlink: 'syz.0.1622': attribute type 1 has an invalid length. [ 282.650688][T12022] FAULT_INJECTION: forcing a failure. [ 282.650688][T12022] name failslab, interval 1, probability 0, space 0, times 1 [ 282.685980][T12022] CPU: 1 UID: 0 PID: 12022 Comm: syz.3.1633 Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 282.686013][T12022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.686040][T12022] Call Trace: [ 282.686048][T12022] [ 282.686059][T12022] dump_stack_lvl+0x189/0x250 [ 282.686093][T12022] ? __pfx____ratelimit+0x10/0x10 [ 282.686116][T12022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.686142][T12022] ? __pfx__printk+0x10/0x10 [ 282.686189][T12022] ? __pfx___might_resched+0x10/0x10 [ 282.686215][T12022] ? fs_reclaim_acquire+0x7d/0x100 [ 282.686242][T12022] should_fail_ex+0x414/0x560 [ 282.686271][T12022] should_failslab+0xa8/0x100 [ 282.686305][T12022] __kmalloc_noprof+0xcb/0x4f0 [ 282.686332][T12022] ? kfree+0x4d/0x440 [ 282.686356][T12022] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 282.686387][T12022] tomoyo_realpath_from_path+0xe3/0x5d0 [ 282.686415][T12022] ? tomoyo_domain+0xd9/0x130 [ 282.686448][T12022] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 282.686481][T12022] tomoyo_path_number_perm+0x1e8/0x5a0 [ 282.686519][T12022] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 282.686571][T12022] ? __lock_acquire+0xab9/0xd20 [ 282.686617][T12022] ? __fget_files+0x2a/0x420 [ 282.686640][T12022] ? __fget_files+0x2a/0x420 [ 282.686657][T12022] ? __fget_files+0x3a0/0x420 [ 282.686674][T12022] ? __fget_files+0x2a/0x420 [ 282.686699][T12022] security_file_ioctl+0xcb/0x2d0 [ 282.686732][T12022] __se_sys_ioctl+0x47/0x170 [ 282.686762][T12022] do_syscall_64+0xfa/0x3b0 [ 282.686782][T12022] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.686802][T12022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.686822][T12022] ? clear_bhb_loop+0x60/0xb0 [ 282.686847][T12022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.686866][T12022] RIP: 0033:0x7fa0b098e9a9 [ 282.686885][T12022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.686903][T12022] RSP: 002b:00007fa0b170f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.686926][T12022] RAX: ffffffffffffffda RBX: 00007fa0b0bb5fa0 RCX: 00007fa0b098e9a9 [ 282.686941][T12022] RDX: 0000200000000180 RSI: 0000000080047441 RDI: 0000000000000003 [ 282.686954][T12022] RBP: 00007fa0b170f090 R08: 0000000000000000 R09: 0000000000000000 [ 282.686967][T12022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.686978][T12022] R13: 0000000000000000 R14: 00007fa0b0bb5fa0 R15: 00007ffc011b5f68 [ 282.687011][T12022] [ 282.687021][T12022] ERROR: Out of memory at tomoyo_realpath_from_path. [ 283.241049][T12036] netlink: 'syz.0.1638': attribute type 1 has an invalid length. [ 283.333751][T12036] bond0: option mode: unable to set because the bond device has slaves [ 283.529496][T12036] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.591899][T12036] bond4: (slave bond5): making interface the new active one [ 283.621676][T12036] bond4: (slave bond5): Enslaving as an active interface with an up link [ 283.649544][T12044] IPv6: sit3: Disabled Multicast RS [ 283.706491][T12044] sit3: entered allmulticast mode [ 283.911041][T12047] macvlan0: entered promiscuous mode [ 283.964718][T12047] macvlan0: entered allmulticast mode [ 284.343367][T12072] FAULT_INJECTION: forcing a failure. [ 284.343367][T12072] name failslab, interval 1, probability 0, space 0, times 0 [ 284.371428][T12072] CPU: 0 UID: 0 PID: 12072 Comm: syz.3.1647 Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 284.371460][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.371473][T12072] Call Trace: [ 284.371482][T12072] [ 284.371491][T12072] dump_stack_lvl+0x189/0x250 [ 284.371522][T12072] ? __pfx____ratelimit+0x10/0x10 [ 284.371544][T12072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.371570][T12072] ? __pfx__printk+0x10/0x10 [ 284.371601][T12072] ? __pfx___might_resched+0x10/0x10 [ 284.371625][T12072] ? fs_reclaim_acquire+0x7d/0x100 [ 284.371651][T12072] should_fail_ex+0x414/0x560 [ 284.371679][T12072] should_failslab+0xa8/0x100 [ 284.371711][T12072] __kmalloc_noprof+0xcb/0x4f0 [ 284.371738][T12072] ? tomoyo_encode+0x28b/0x550 [ 284.371767][T12072] tomoyo_encode+0x28b/0x550 [ 284.371798][T12072] tomoyo_realpath_from_path+0x58d/0x5d0 [ 284.371834][T12072] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 284.371867][T12072] tomoyo_path_number_perm+0x1e8/0x5a0 [ 284.371902][T12072] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 284.371954][T12072] ? __lock_acquire+0xab9/0xd20 [ 284.371999][T12072] ? __fget_files+0x2a/0x420 [ 284.372031][T12072] ? __fget_files+0x2a/0x420 [ 284.372048][T12072] ? __fget_files+0x3a0/0x420 [ 284.372065][T12072] ? __fget_files+0x2a/0x420 [ 284.372088][T12072] security_file_ioctl+0xcb/0x2d0 [ 284.372121][T12072] __se_sys_ioctl+0x47/0x170 [ 284.372150][T12072] do_syscall_64+0xfa/0x3b0 [ 284.372171][T12072] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.372191][T12072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.372212][T12072] ? clear_bhb_loop+0x60/0xb0 [ 284.372236][T12072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.372256][T12072] RIP: 0033:0x7fa0b098e9a9 [ 284.372275][T12072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.372292][T12072] RSP: 002b:00007fa0b170f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.372313][T12072] RAX: ffffffffffffffda RBX: 00007fa0b0bb5fa0 RCX: 00007fa0b098e9a9 [ 284.372328][T12072] RDX: 0000200000000180 RSI: 0000000080047441 RDI: 0000000000000003 [ 284.372341][T12072] RBP: 00007fa0b170f090 R08: 0000000000000000 R09: 0000000000000000 [ 284.372358][T12072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.372368][T12072] R13: 0000000000000000 R14: 00007fa0b0bb5fa0 R15: 00007ffc011b5f68 [ 284.372401][T12072] [ 284.373655][T12072] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.655391][T12075] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 284.842501][T12075] xt_CT: No such helper "snmp" [ 284.852976][T12075] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 284.864169][T12075] tipc: Enabled bearer , priority 10 [ 285.281704][T12092] __nla_validate_parse: 9 callbacks suppressed [ 285.281726][T12092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1655'. [ 285.311443][T12094] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 285.821531][T12116] tipc: Enabled bearer , priority 0 [ 285.859218][T12112] syzkaller0: entered promiscuous mode [ 285.864853][T12112] syzkaller0: entered allmulticast mode [ 285.871306][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 285.908224][T12114] netlink: 'syz.0.1660': attribute type 30 has an invalid length. [ 285.916200][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'. [ 285.983417][T12110] tipc: Resetting bearer [ 286.071042][T12129] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1662'. [ 286.071264][T12110] tipc: Disabling bearer [ 286.222984][ T36] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x8 [ 286.251674][T12126] lo speed is unknown, defaulting to 1000 [ 286.261331][T12126] lo speed is unknown, defaulting to 1000 [ 289.665557][T12162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1670'. [ 290.121681][T12181] netlink: 91 bytes leftover after parsing attributes in process `syz.1.1677'. [ 290.330521][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 290.530681][T12205] openvswitch: netlink: Tunnel attr 7 has unexpected len 4 expected 0 [ 290.756015][T12218] netlink: 'syz.3.1690': attribute type 13 has an invalid length. [ 290.793803][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 290.812241][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1690'. [ 291.012383][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 291.034529][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1694'. [ 291.046160][T12233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1694'. [ 291.261648][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 291.295628][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 291.576547][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 291.595971][T12259] xt_hashlimit: overflow, try lower: 2/0 [ 291.701552][T12264] batadv_slave_1: entered promiscuous mode [ 291.709375][T12266] netlink: 'syz.4.1707': attribute type 29 has an invalid length. [ 291.731158][T12266] netlink: 'syz.4.1707': attribute type 29 has an invalid length. [ 291.751282][T12266] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1707'. [ 291.783816][T12266] unsupported nla_type 58 [ 291.949564][T12269] Cannot find set identified by id 65532 to match [ 292.009181][T12264] batadv_slave_1: left promiscuous mode [ 292.559352][T12307] xt_hashlimit: size too large, truncated to 1048576 [ 292.620976][T12299] sit1: entered allmulticast mode [ 292.673251][T12304] : renamed from bridge_slave_0 [ 292.915196][T12314] ip_vti0: entered allmulticast mode [ 292.943802][T12313] ip_vti0: left allmulticast mode [ 293.241515][T12323] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 293.314157][T12327] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 293.352898][T12323] 8021q: adding VLAN 0 to HW filter on device bond5 [ 293.411557][T12323] netlink: 'syz.2.1721': attribute type 11 has an invalid length. [ 293.456749][T12327] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 294.092259][T12366] xt_hashlimit: size too large, truncated to 1048576 [ 294.136508][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.146875][T12367] tap0: tun_chr_ioctl cmd 1074025680 [ 294.153771][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.609130][T12380] veth5: entered promiscuous mode [ 294.685606][T12376] veth7: entered promiscuous mode [ 294.973951][T12400] wireguard0: entered promiscuous mode [ 294.987838][T12400] wireguard0: entered allmulticast mode [ 295.154699][T12413] IPVS: Unknown mcast interface: vcan0 [ 295.459127][T12419] __nla_validate_parse: 17 callbacks suppressed [ 295.459151][T12419] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1746'. [ 295.510677][T12419] xt_hashlimit: size too large, truncated to 1048576 [ 295.564483][T12427] : renamed from bridge_slave_0 [ 295.717849][T12430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1751'. [ 295.731670][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 295.950812][T12438] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 296.256211][T12456] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1759'. [ 296.296458][T12456] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 296.400044][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 296.420719][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 296.443383][T12466] netlink: 'syz.2.1761': attribute type 5 has an invalid length. [ 296.456597][T12469] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1762'. [ 296.462394][T12466] netlink: 'syz.2.1761': attribute type 6 has an invalid length. [ 296.794995][T12475] lo speed is unknown, defaulting to 1000 [ 296.814120][T12475] lo speed is unknown, defaulting to 1000 [ 296.955146][T12478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1763'. [ 296.992433][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'. [ 297.017804][T12478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1763'. [ 297.416768][T12491] netlink: 'syz.4.1767': attribute type 3 has an invalid length. [ 297.531102][T12494] atomic_op ffff88807ae1b998 conn xmit_atomic 0000000000000000 [ 297.833157][T12502] lo speed is unknown, defaulting to 1000 [ 298.044548][T12502] lo speed is unknown, defaulting to 1000 [ 298.980261][T12540] netlink: 'syz.1.1782': attribute type 4 has an invalid length. [ 299.110688][T12545] netlink: 'syz.1.1782': attribute type 20 has an invalid length. [ 299.502335][T12557] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 299.818750][ T9971] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.848415][ T9971] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.894033][ T9971] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.928874][ T9971] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.012822][T12570] tipc: Enabled bearer , priority 0 [ 300.025752][T12566] tipc: Enabling of bearer rejected, already enabled [ 300.069187][T12572] syzkaller0: entered promiscuous mode [ 300.074799][T12572] syzkaller0: entered allmulticast mode [ 300.104662][T12574] x_tables: duplicate underflow at hook 2 [ 300.167995][T12566] tipc: Resetting bearer [ 300.332377][T12583] tipc: Enabled bearer , priority 10 [ 300.390826][T12587] netlink: 'syz.0.1796': attribute type 10 has an invalid length. [ 300.454974][T12564] tipc: Resetting bearer [ 300.522499][T12564] tipc: Disabling bearer [ 300.755949][T12602] ieee802154 phy1 wpan1: encryption failed: -22 [ 301.035708][T12622] __nla_validate_parse: 10 callbacks suppressed [ 301.035728][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 301.201017][T12628] netlink: 'syz.2.1808': attribute type 3 has an invalid length. [ 301.216112][T12612] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.626634][T12612] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.800811][T12612] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.960646][T12612] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.304414][T12643] syzkaller1: entered promiscuous mode [ 302.315228][T12643] syzkaller1: entered allmulticast mode [ 302.372208][T12642] dummy0: entered allmulticast mode [ 302.418564][ T7857] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.475414][ T3476] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.565293][ T3476] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.589923][ T3476] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.736435][T12657] netlink: 'syz.3.1814': attribute type 21 has an invalid length. [ 302.745827][T12657] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1814'. [ 302.796226][T12657] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1814'. [ 302.848635][T12659] lo speed is unknown, defaulting to 1000 [ 302.900527][T12659] lo speed is unknown, defaulting to 1000 [ 302.991220][T12650] lo speed is unknown, defaulting to 1000 [ 303.275232][T12675] bridge6: entered promiscuous mode [ 303.313134][T12675] bridge6: entered allmulticast mode [ 303.333229][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1817'. [ 303.764406][T12650] lo speed is unknown, defaulting to 1000 [ 303.795311][T12700] tipc: Bearer : already 2 bearers with priority 10 [ 303.884923][T12700] tipc: Bearer : trying with adjusted priority [ 303.929621][T12700] tipc: Invalid UDP bearer configuration [ 303.929678][T12700] tipc: Enabling of bearer rejected, failed to enable media [ 304.244661][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'. [ 304.326764][T12717] netlink: 'syz.0.1827': attribute type 1 has an invalid length. [ 304.379295][T12717] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 304.970193][T12738] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1831'. [ 305.663802][T12755] veth9: entered promiscuous mode [ 305.944960][T12774] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 306.160863][T12782] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1847'. [ 306.202091][T12782] 0ªX¹¦À: renamed from caif0 [ 306.212202][T12782] 0ªX¹¦À: entered allmulticast mode [ 306.225625][T12782] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 306.243679][T12776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1844'. [ 306.265416][T12776] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1844'. [ 306.275814][T12776] nbd: illegal input index 65508 [ 306.547822][ T3476] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 306.557054][ T3476] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 306.568660][ T8962] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 307.005494][T12802] syzkaller0: entered promiscuous mode [ 307.012706][T12802] syzkaller0: entered allmulticast mode [ 307.021976][T12808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1854'. [ 307.053918][T12808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1854'. [ 307.079278][ T8962] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 307.549834][ T8962] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 308.275817][T12814] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 309.686771][T12808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1854'. [ 309.762950][T12815] lo speed is unknown, defaulting to 1000 [ 309.808701][T12815] lo speed is unknown, defaulting to 1000 [ 310.318427][T12861] netlink: 'syz.0.1865': attribute type 10 has an invalid length. [ 310.384812][T12861] bond0: (slave 0!): Releasing backup interface [ 310.403865][T12861] bond0: (slave wlan1): Releasing backup interface [ 310.458937][T12861] bond3: (slave xfrm1): Releasing backup interface [ 310.519434][T12871] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.552691][T12861] bond4: (slave bond5): Releasing backup interface [ 310.579072][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 310.618448][ T8962] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 310.638063][T12871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1868'. [ 310.656012][T12874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1868'. [ 310.670043][T12874] netlink: 'syz.3.1868': attribute type 1 has an invalid length. [ 310.791711][T12879] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 310.810380][ T8962] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 310.907365][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 311.693799][T12913] FAULT_INJECTION: forcing a failure. [ 311.693799][T12913] name failslab, interval 1, probability 0, space 0, times 0 [ 311.730727][T12913] CPU: 0 UID: 0 PID: 12913 Comm: syz.4.1878 Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 311.730760][T12913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.730772][T12913] Call Trace: [ 311.730780][T12913] [ 311.730789][T12913] dump_stack_lvl+0x189/0x250 [ 311.730820][T12913] ? __pfx____ratelimit+0x10/0x10 [ 311.730841][T12913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.730865][T12913] ? __pfx__printk+0x10/0x10 [ 311.730899][T12913] ? __pfx___might_resched+0x10/0x10 [ 311.730928][T12913] should_fail_ex+0x414/0x560 [ 311.730955][T12913] should_failslab+0xa8/0x100 [ 311.730988][T12913] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 311.731017][T12913] ? __alloc_skb+0x112/0x2d0 [ 311.731044][T12913] __alloc_skb+0x112/0x2d0 [ 311.731070][T12913] netlink_sendmsg+0x5c6/0xb30 [ 311.731100][T12913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.731125][T12913] ? aa_sock_msg_perm+0x94/0x160 [ 311.731149][T12913] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.731170][T12913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.731192][T12913] __sock_sendmsg+0x219/0x270 [ 311.731226][T12913] ____sys_sendmsg+0x505/0x830 [ 311.731256][T12913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.731292][T12913] ? import_iovec+0x74/0xa0 [ 311.731324][T12913] ___sys_sendmsg+0x21f/0x2a0 [ 311.731350][T12913] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.731416][T12913] ? __fget_files+0x2a/0x420 [ 311.731446][T12913] ? __fget_files+0x3a0/0x420 [ 311.731476][T12913] __x64_sys_sendmsg+0x19b/0x260 [ 311.731504][T12913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.731539][T12913] ? __pfx_ksys_write+0x10/0x10 [ 311.731564][T12913] ? rcu_is_watching+0x15/0xb0 [ 311.731594][T12913] ? do_syscall_64+0xbe/0x3b0 [ 311.731619][T12913] do_syscall_64+0xfa/0x3b0 [ 311.731639][T12913] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.731659][T12913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.731679][T12913] ? clear_bhb_loop+0x60/0xb0 [ 311.731704][T12913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.731724][T12913] RIP: 0033:0x7f58e3b8e9a9 [ 311.731742][T12913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.731760][T12913] RSP: 002b:00007f58e493d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.731781][T12913] RAX: ffffffffffffffda RBX: 00007f58e3db5fa0 RCX: 00007f58e3b8e9a9 [ 311.731796][T12913] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 311.731819][T12913] RBP: 00007f58e493d090 R08: 0000000000000000 R09: 0000000000000000 [ 311.731832][T12913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.731844][T12913] R13: 0000000000000000 R14: 00007f58e3db5fa0 R15: 00007ffe4601ded8 [ 311.731876][T12913] [ 312.089658][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 312.349659][ C1] bridge0: port 2(veth0_to_bridge) entered learning state [ 312.476441][T12933] lo: entered promiscuous mode [ 312.507959][T12933] netlink: 'syz.2.1885': attribute type 8 has an invalid length. [ 312.539235][T12933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.654973][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'. [ 312.684365][T12938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1887'. [ 312.696533][T12937] tipc: Enabled bearer , priority 0 [ 312.722565][T12937] syzkaller0: entered promiscuous mode [ 312.740308][T12937] syzkaller0: entered allmulticast mode [ 313.124297][T12935] tipc: Resetting bearer [ 313.200184][T12935] tipc: Disabling bearer [ 313.773189][T12988] netlink: 'syz.0.1898': attribute type 4 has an invalid length. [ 313.923043][T13002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1904'. [ 313.930094][T12999] tipc: Enabling of bearer rejected, already enabled [ 313.981699][T12999] tipc: Resetting bearer [ 314.046139][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 314.134508][T13011] netlink: 616 bytes leftover after parsing attributes in process `syz.2.1906'. [ 314.220345][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1907'. [ 314.698162][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 314.744883][T13030] netlink: 'syz.2.1910': attribute type 9 has an invalid length. [ 314.755113][T13030] netlink: 'syz.2.1910': attribute type 7 has an invalid length. [ 314.782878][T13030] netlink: 'syz.2.1910': attribute type 8 has an invalid length. [ 314.843413][T13035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1915'. [ 314.956747][T13039] netlink: 'syz.4.1917': attribute type 4 has an invalid length. [ 314.998642][ T8963] lo speed is unknown, defaulting to 1000 [ 314.998960][T13041] FAULT_INJECTION: forcing a failure. [ 314.998960][T13041] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 315.006201][ T8963] syz0: Port: 1 Link DOWN [ 315.027301][T13041] CPU: 0 UID: 0 PID: 13041 Comm: syz.0.1918 Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 315.027332][T13041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.027346][T13041] Call Trace: [ 315.027354][T13041] [ 315.027363][T13041] dump_stack_lvl+0x189/0x250 [ 315.027394][T13041] ? __pfx____ratelimit+0x10/0x10 [ 315.027415][T13041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.027439][T13041] ? __pfx__printk+0x10/0x10 [ 315.027468][T13041] ? __might_fault+0xb0/0x130 [ 315.027509][T13041] should_fail_ex+0x414/0x560 [ 315.027535][T13041] _copy_from_iter+0x1db/0x16f0 [ 315.027565][T13041] ? rcu_is_watching+0x15/0xb0 [ 315.027591][T13041] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 315.027621][T13041] ? __pfx__copy_from_iter+0x10/0x10 [ 315.027649][T13041] ? __build_skb_around+0x257/0x3e0 [ 315.027675][T13041] ? netlink_sendmsg+0x642/0xb30 [ 315.027693][T13041] ? skb_put+0x11b/0x210 [ 315.027718][T13041] netlink_sendmsg+0x6b2/0xb30 [ 315.027750][T13041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.027781][T13041] ? aa_sock_msg_perm+0x94/0x160 [ 315.027802][T13041] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.027822][T13041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.027843][T13041] __sock_sendmsg+0x219/0x270 [ 315.027876][T13041] ____sys_sendmsg+0x505/0x830 [ 315.027906][T13041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.027930][T13039] netlink: 'syz.4.1917': attribute type 4 has an invalid length. [ 315.027940][T13041] ? import_iovec+0x74/0xa0 [ 315.027971][T13041] ___sys_sendmsg+0x21f/0x2a0 [ 315.027995][T13041] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.028064][T13041] ? __fget_files+0x2a/0x420 [ 315.028085][T13041] ? __fget_files+0x3a0/0x420 [ 315.028119][T13041] __x64_sys_sendmsg+0x19b/0x260 [ 315.028149][T13041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.028189][T13041] ? __pfx_ksys_write+0x10/0x10 [ 315.028216][T13041] ? rcu_is_watching+0x15/0xb0 [ 315.028250][T13041] ? do_syscall_64+0xbe/0x3b0 [ 315.028280][T13041] do_syscall_64+0xfa/0x3b0 [ 315.028303][T13041] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.028329][T13041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.028353][T13041] ? clear_bhb_loop+0x60/0xb0 [ 315.028381][T13041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.028402][T13041] RIP: 0033:0x7fd013f8e9a9 [ 315.028424][T13041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.028444][T13041] RSP: 002b:00007fd014eb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.028468][T13041] RAX: ffffffffffffffda RBX: 00007fd0141b5fa0 RCX: 00007fd013f8e9a9 [ 315.028485][T13041] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 315.028500][T13041] RBP: 00007fd014eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.028514][T13041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.028528][T13041] R13: 0000000000000000 R14: 00007fd0141b5fa0 R15: 00007fffbed43e88 [ 315.028562][T13041] [ 315.035767][ T8962] lo speed is unknown, defaulting to 1000 [ 315.538056][ T7705] lo speed is unknown, defaulting to 1000 [ 315.544241][ T7705] syz0: Port: 1 Link ACTIVE [ 315.554643][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1922'. [ 315.632298][T13059] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 315.985654][T13072] netlink: 'syz.4.1928': attribute type 1 has an invalid length. [ 316.039291][T13072] 8021q: adding VLAN 0 to HW filter on device bond10 [ 316.075204][T13072] bond10: (slave veth9): Enslaving as an active interface with a down link [ 316.112416][T13073] rdma_rxe: rxe_newlink: failed to add lo [ 316.119758][T13072] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 316.120220][T13077] rdma_rxe: rxe_newlink: failed to add lo [ 316.128740][T13072] bond10: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 316.195788][T13081] FAULT_INJECTION: forcing a failure. [ 316.195788][T13081] name failslab, interval 1, probability 0, space 0, times 0 [ 316.219400][T13081] CPU: 1 UID: 0 PID: 13081 Comm: syz.2.1931 Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 316.219433][T13081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.219445][T13081] Call Trace: [ 316.219454][T13081] [ 316.219463][T13081] dump_stack_lvl+0x189/0x250 [ 316.219493][T13081] ? __pfx____ratelimit+0x10/0x10 [ 316.219515][T13081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.219540][T13081] ? __pfx__printk+0x10/0x10 [ 316.219569][T13081] ? __lock_acquire+0xab9/0xd20 [ 316.219601][T13081] should_fail_ex+0x414/0x560 [ 316.219628][T13081] should_failslab+0xa8/0x100 [ 316.219661][T13081] kmem_cache_alloc_noprof+0x73/0x3c0 [ 316.219688][T13081] ? skb_clone+0x212/0x3a0 [ 316.219719][T13081] skb_clone+0x212/0x3a0 [ 316.219748][T13081] __netlink_deliver_tap+0x404/0x850 [ 316.219784][T13081] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.219807][T13081] netlink_deliver_tap+0x19c/0x1b0 [ 316.219828][T13081] netlink_unicast+0x7fa/0x9e0 [ 316.219867][T13081] ? __pfx_netlink_unicast+0x10/0x10 [ 316.219909][T13081] ? netlink_sendmsg+0x642/0xb30 [ 316.219927][T13081] ? skb_put+0x11b/0x210 [ 316.219958][T13081] netlink_sendmsg+0x805/0xb30 [ 316.219989][T13081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.220014][T13081] ? aa_sock_msg_perm+0x94/0x160 [ 316.220038][T13081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 316.220059][T13081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.220081][T13081] __sock_sendmsg+0x219/0x270 [ 316.220114][T13081] ____sys_sendmsg+0x505/0x830 [ 316.220146][T13081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.220181][T13081] ? import_iovec+0x74/0xa0 [ 316.220214][T13081] ___sys_sendmsg+0x21f/0x2a0 [ 316.220242][T13081] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.220309][T13081] ? __fget_files+0x2a/0x420 [ 316.220326][T13081] ? __fget_files+0x3a0/0x420 [ 316.220356][T13081] __x64_sys_sendmsg+0x19b/0x260 [ 316.220384][T13081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.220420][T13081] ? __pfx_ksys_write+0x10/0x10 [ 316.220444][T13081] ? rcu_is_watching+0x15/0xb0 [ 316.220475][T13081] ? do_syscall_64+0xbe/0x3b0 [ 316.220501][T13081] do_syscall_64+0xfa/0x3b0 [ 316.220521][T13081] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.220541][T13081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.220561][T13081] ? clear_bhb_loop+0x60/0xb0 [ 316.220586][T13081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.220606][T13081] RIP: 0033:0x7fc97078e9a9 [ 316.220624][T13081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.220642][T13081] RSP: 002b:00007fc97159d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.220664][T13081] RAX: ffffffffffffffda RBX: 00007fc9709b5fa0 RCX: 00007fc97078e9a9 [ 316.220678][T13081] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 316.220691][T13081] RBP: 00007fc97159d090 R08: 0000000000000000 R09: 0000000000000000 [ 316.220703][T13081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.220714][T13081] R13: 0000000000000000 R14: 00007fc9709b5fa0 R15: 00007fff25387ff8 [ 316.220747][T13081] [ 316.273745][T13073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.581344][T13073] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.600014][T13073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.804870][T13107] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 316.994668][T13116] netlink: 'syz.3.1940': attribute type 28 has an invalid length. [ 317.250363][T13126] FAULT_INJECTION: forcing a failure. [ 317.250363][T13126] name failslab, interval 1, probability 0, space 0, times 0 [ 317.270544][T13124] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 317.271363][T13125] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 317.310840][T13126] CPU: 0 UID: 0 PID: 13126 Comm: syz.2.1943 Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 317.310879][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.310891][T13126] Call Trace: [ 317.310900][T13126] [ 317.310909][T13126] dump_stack_lvl+0x189/0x250 [ 317.310939][T13126] ? __pfx____ratelimit+0x10/0x10 [ 317.310960][T13126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.310985][T13126] ? __pfx__printk+0x10/0x10 [ 317.311017][T13126] ? __pfx___might_resched+0x10/0x10 [ 317.311041][T13126] ? fs_reclaim_acquire+0x7d/0x100 [ 317.311067][T13126] should_fail_ex+0x414/0x560 [ 317.311093][T13126] should_failslab+0xa8/0x100 [ 317.311127][T13126] __kmalloc_noprof+0xcb/0x4f0 [ 317.311154][T13126] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 317.311189][T13126] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 317.311225][T13126] genl_family_rcv_msg_doit+0xb8/0x300 [ 317.311261][T13126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 317.311292][T13126] ? __pfx_genl_get_cmd+0x10/0x10 [ 317.311316][T13126] ? __pfx_hwsim_get_radio_nl+0x10/0x10 [ 317.311336][T13126] ? __pfx_hwsim_dump_radio_nl+0x10/0x10 [ 317.311373][T13126] genl_rcv_msg+0x60e/0x790 [ 317.311407][T13126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.311433][T13126] ? __pfx_hwsim_get_radio_nl+0x10/0x10 [ 317.311456][T13126] ? __asan_memcpy+0x40/0x70 [ 317.311478][T13126] ? __pfx_ref_tracker_free+0x10/0x10 [ 317.311510][T13126] netlink_rcv_skb+0x208/0x470 [ 317.311527][T13126] ? __lock_acquire+0xab9/0xd20 [ 317.311549][T13126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.311577][T13126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.311619][T13126] ? down_read+0x1ad/0x2e0 [ 317.311646][T13126] genl_rcv+0x28/0x40 [ 317.311669][T13126] netlink_unicast+0x82c/0x9e0 [ 317.311710][T13126] ? __pfx_netlink_unicast+0x10/0x10 [ 317.311748][T13126] ? netlink_sendmsg+0x642/0xb30 [ 317.311767][T13126] ? skb_put+0x11b/0x210 [ 317.311794][T13126] netlink_sendmsg+0x805/0xb30 [ 317.311826][T13126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.311857][T13126] ? aa_sock_msg_perm+0x94/0x160 [ 317.311882][T13126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.311903][T13126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.311925][T13126] __sock_sendmsg+0x219/0x270 [ 317.311959][T13126] ____sys_sendmsg+0x505/0x830 [ 317.311991][T13126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.312027][T13126] ? import_iovec+0x74/0xa0 [ 317.312060][T13126] ___sys_sendmsg+0x21f/0x2a0 [ 317.312087][T13126] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.312155][T13126] ? __fget_files+0x2a/0x420 [ 317.312172][T13126] ? __fget_files+0x3a0/0x420 [ 317.312203][T13126] __x64_sys_sendmsg+0x19b/0x260 [ 317.312231][T13126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.312268][T13126] ? __pfx_ksys_write+0x10/0x10 [ 317.312292][T13126] ? rcu_is_watching+0x15/0xb0 [ 317.312322][T13126] ? do_syscall_64+0xbe/0x3b0 [ 317.312347][T13126] do_syscall_64+0xfa/0x3b0 [ 317.312367][T13126] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.312386][T13126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.312406][T13126] ? clear_bhb_loop+0x60/0xb0 [ 317.312431][T13126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.312449][T13126] RIP: 0033:0x7fc97078e9a9 [ 317.312467][T13126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.312483][T13126] RSP: 002b:00007fc97159d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.312505][T13126] RAX: ffffffffffffffda RBX: 00007fc9709b5fa0 RCX: 00007fc97078e9a9 [ 317.312520][T13126] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 317.312532][T13126] RBP: 00007fc97159d090 R08: 0000000000000000 R09: 0000000000000000 [ 317.312542][T13126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.312554][T13126] R13: 0000000000000000 R14: 00007fc9709b5fa0 R15: 00007fff25387ff8 [ 317.312581][T13126] [ 317.319404][T13124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.701031][T13136] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 317.770881][T13136] __nla_validate_parse: 7 callbacks suppressed [ 317.770903][T13136] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1944'. [ 317.868803][T13143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1947'. [ 317.921584][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 317.945443][T13146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1948'. [ 318.051896][T13125] 8021q: adding VLAN 0 to HW filter on device bond11 [ 318.082278][T13131] ipvlan2: entered allmulticast mode [ 318.089895][T13131] bond11: entered allmulticast mode [ 318.092815][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1949'. [ 318.106033][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1949'. [ 318.119969][T13149] netlink: 'syz.2.1949': attribute type 15 has an invalid length. [ 318.129214][T13149] netlink: 'syz.2.1949': attribute type 18 has an invalid length. [ 318.144496][T13132] bond11: (slave gretap2): making interface the new active one [ 318.153120][T13132] gretap2: entered allmulticast mode [ 318.160887][T13132] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 318.246219][T13152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1950'. [ 318.414231][T13157] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 318.446442][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1953'. [ 318.479940][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1954'. [ 318.893874][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1958'. [ 318.982677][T13187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.037023][T13178] bridge0: entered promiscuous mode [ 319.387326][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 319.400405][T13206] veth1: entered promiscuous mode [ 319.478245][T13206] bridge7: entered promiscuous mode [ 319.502074][T13206] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 319.535864][T13206] hsr1: entered promiscuous mode [ 319.594289][T13216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.773048][T13225] netlink: 'syz.4.1970': attribute type 39 has an invalid length. [ 319.881917][T13230] lo speed is unknown, defaulting to 1000 [ 319.893547][T13230] lo speed is unknown, defaulting to 1000 [ 320.530399][T13257] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 168 [ 320.853057][T13265] tipc: Enabled bearer , priority 0 [ 320.862824][T13265] syzkaller0: entered promiscuous mode [ 320.875050][T13265] syzkaller0: entered allmulticast mode [ 321.038967][T13264] tipc: Resetting bearer [ 321.119553][T13264] tipc: Disabling bearer [ 321.969152][T13313] lo speed is unknown, defaulting to 1000 [ 322.004708][T13313] lo speed is unknown, defaulting to 1000 [ 322.274777][T13330] veth0: entered promiscuous mode [ 322.420846][T13322] veth0 (unregistering): left promiscuous mode [ 322.456683][T13322] veth1 (unregistering): left promiscuous mode [ 322.597995][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.234813][T13354] FAULT_INJECTION: forcing a failure. [ 323.234813][T13354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.292417][T13354] CPU: 0 UID: 0 PID: 13354 Comm: syz.0.2006 Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 323.292466][T13354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.292487][T13354] Call Trace: [ 323.292495][T13354] [ 323.292504][T13354] dump_stack_lvl+0x189/0x250 [ 323.292534][T13354] ? __pfx____ratelimit+0x10/0x10 [ 323.292555][T13354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.292580][T13354] ? __pfx__printk+0x10/0x10 [ 323.292622][T13354] should_fail_ex+0x414/0x560 [ 323.292649][T13354] _copy_to_user+0x31/0xb0 [ 323.292685][T13354] simple_read_from_buffer+0xe1/0x170 [ 323.292720][T13354] proc_fail_nth_read+0x1df/0x250 [ 323.292743][T13354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.292766][T13354] ? rw_verify_area+0x258/0x650 [ 323.292791][T13354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.292811][T13354] vfs_read+0x200/0x980 [ 323.292843][T13354] ? __pfx___mutex_lock+0x10/0x10 [ 323.292866][T13354] ? __pfx_vfs_read+0x10/0x10 [ 323.292895][T13354] ? __fget_files+0x2a/0x420 [ 323.292919][T13354] ? __fget_files+0x3a0/0x420 [ 323.292947][T13354] ? __fget_files+0x2a/0x420 [ 323.292974][T13354] ksys_read+0x145/0x250 [ 323.293004][T13354] ? __pfx_ksys_read+0x10/0x10 [ 323.293034][T13354] ? do_syscall_64+0xbe/0x3b0 [ 323.293058][T13354] do_syscall_64+0xfa/0x3b0 [ 323.293078][T13354] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.293097][T13354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.293117][T13354] ? clear_bhb_loop+0x60/0xb0 [ 323.293143][T13354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.293161][T13354] RIP: 0033:0x7fd013f8d3bc [ 323.293179][T13354] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 323.293198][T13354] RSP: 002b:00007fd014eb6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.293220][T13354] RAX: ffffffffffffffda RBX: 00007fd0141b5fa0 RCX: 00007fd013f8d3bc [ 323.293235][T13354] RDX: 000000000000000f RSI: 00007fd014eb60a0 RDI: 0000000000000004 [ 323.293248][T13354] RBP: 00007fd014eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.293260][T13354] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 323.293273][T13354] R13: 0000000000000000 R14: 00007fd0141b5fa0 R15: 00007fffbed43e88 [ 323.293305][T13354] [ 323.936285][T13362] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 324.025806][T13368] __nla_validate_parse: 12 callbacks suppressed [ 324.025828][T13368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2011'. [ 324.352441][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 324.380132][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 324.425049][T13377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2014'. [ 324.700437][T13385] netlink: 'syz.4.2016': attribute type 21 has an invalid length. [ 324.736096][T13385] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2016'. [ 324.790627][T13385] Unknown status report in ack skb [ 324.986243][T13396] netlink: 'syz.3.2019': attribute type 10 has an invalid length. [ 325.053820][T13398] netlink: 'syz.3.2019': attribute type 10 has an invalid length. [ 325.129317][T13396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2019'. [ 325.176942][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'. [ 325.189408][T13404] veth1: entered promiscuous mode [ 325.214550][T13404] netlink: 'syz.4.2021': attribute type 8 has an invalid length. [ 325.244600][T13404] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 325.326346][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'. [ 325.411199][T13409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2023'. [ 325.463130][T13411] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2024'. [ 325.829093][T13427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.576206][ T9971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.584502][ T9971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.599133][ T7697] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.652016][T13451] lo speed is unknown, defaulting to 1000 [ 326.685191][T13451] lo speed is unknown, defaulting to 1000 [ 326.738289][ T7705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 327.388089][ T7697] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 327.575706][T13480] lo speed is unknown, defaulting to 1000 [ 327.585801][T13480] lo speed is unknown, defaulting to 1000 [ 327.643791][T13480] lo speed is unknown, defaulting to 1000 [ 327.840434][T13480] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 328.170170][T13480] lo speed is unknown, defaulting to 1000 [ 328.186821][T13480] lo speed is unknown, defaulting to 1000 [ 328.210251][T13480] lo speed is unknown, defaulting to 1000 [ 328.228648][T13480] lo speed is unknown, defaulting to 1000 [ 328.262641][T13480] lo speed is unknown, defaulting to 1000 [ 328.283770][T13480] lo speed is unknown, defaulting to 1000 [ 329.143036][T13533] __nla_validate_parse: 10 callbacks suppressed [ 329.143058][T13533] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2054'. [ 329.191258][T13533] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2054'. [ 330.267758][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.692891][ T7857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.753182][T13553] pimreg: entered allmulticast mode [ 331.782990][ T7857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.855060][T13565] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2058'. [ 331.904512][ T7857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.943773][ T7857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.185985][T13575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2062'. [ 332.442013][T13588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.488173][ T7697] lo speed is unknown, defaulting to 1000 [ 332.659519][T13597] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2070'. [ 332.685394][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2070'. [ 332.785656][T13599] netlink: 'syz.3.2072': attribute type 4 has an invalid length. [ 332.844430][T13601] netlink: 'syz.3.2072': attribute type 4 has an invalid length. [ 333.053845][ T8962] lo speed is unknown, defaulting to 1000 [ 333.063804][ T977] lo speed is unknown, defaulting to 1000 [ 333.129895][T13612] netlink: 'syz.1.2073': attribute type 20 has an invalid length. [ 333.305796][T13616] netlink: 'syz.2.2075': attribute type 16 has an invalid length. [ 333.355726][T13616] netlink: 17622 bytes leftover after parsing attributes in process `syz.2.2075'. [ 333.383574][T13617] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 333.571898][ T30] audit: type=1800 audit(1753362585.545:2): pid=13622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2076" name="batadv_slave_1" dev="tmpfs" ino=2205 res=0 errno=0 [ 333.871620][T13634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2078'. [ 333.928137][T13636] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 334.008595][ T7697] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.049940][T13636] netlink: 'syz.0.2079': attribute type 10 has an invalid length. [ 334.078884][T13636] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 334.115288][T13636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.154970][T13636] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 334.268712][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'. [ 334.321168][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'. [ 334.581323][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'. [ 334.749121][ T7697] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.766127][T13685] netlink: 'syz.0.2094': attribute type 10 has an invalid length. [ 334.796880][T13685] team0: Port device 0! added [ 334.842910][T13685] netlink: 'syz.0.2094': attribute type 1 has an invalid length. [ 334.980802][T13693] batman_adv: batadv0: Removing interface: macvlan0 [ 334.992270][T13693] batman_adv: batadv0: Removing interface: ipvlan0 [ 335.038874][T13693] team0: Port device bridge0 removed [ 335.083115][T13693] bond4: (slave gretap1): Releasing active interface [ 335.158262][ T8960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 335.387366][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 335.589919][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2104'. [ 335.682714][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2105'. [ 335.721624][ T8960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 335.831257][T13721] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2106'. [ 335.883864][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'. [ 336.235719][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2105'. [ 336.249942][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2105'. [ 336.270235][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2105'. [ 336.490308][T13738] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.061949][T13758] lo speed is unknown, defaulting to 1000 [ 337.109605][T13761] lo speed is unknown, defaulting to 1000 [ 337.154095][T13758] lo speed is unknown, defaulting to 1000 [ 337.155610][T13760] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.936299][T13794] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 337.948941][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.967993][T13758] lo speed is unknown, defaulting to 1000 [ 337.968359][T13761] lo speed is unknown, defaulting to 1000 [ 338.703084][T13820] syz.0.2137: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 338.765323][T13820] CPU: 1 UID: 0 PID: 13820 Comm: syz.0.2137 Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 338.765353][T13820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.765363][T13820] Call Trace: [ 338.765371][T13820] [ 338.765380][T13820] dump_stack_lvl+0x189/0x250 [ 338.765420][T13820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.765446][T13820] ? __pfx__printk+0x10/0x10 [ 338.765474][T13820] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 338.765502][T13820] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 338.765531][T13820] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 338.765569][T13820] warn_alloc+0x214/0x310 [ 338.765595][T13820] ? __pfx_warn_alloc+0x10/0x10 [ 338.765625][T13820] ? __get_vm_area_node+0x28f/0x300 [ 338.765656][T13820] ? xskq_create+0xbf/0x170 [ 338.765680][T13820] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 338.765746][T13820] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 338.765785][T13820] ? __kasan_kmalloc+0x93/0xb0 [ 338.765817][T13820] vmalloc_user_noprof+0xad/0xf0 [ 338.765848][T13820] ? xskq_create+0xbf/0x170 [ 338.765869][T13820] xskq_create+0xbf/0x170 [ 338.765892][T13820] xsk_init_queue+0xb0/0x110 [ 338.765926][T13820] xsk_setsockopt+0x57b/0x8d0 [ 338.765960][T13820] ? __pfx_xsk_setsockopt+0x10/0x10 [ 338.765991][T13820] ? __pfx_aa_sk_perm+0x10/0x10 [ 338.766026][T13820] ? __fget_files+0x2a/0x420 [ 338.766044][T13820] ? aa_sock_opt_perm+0x74/0x110 [ 338.766067][T13820] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 338.766089][T13820] ? __pfx_xsk_setsockopt+0x10/0x10 [ 338.766120][T13820] do_sock_setsockopt+0x179/0x1b0 [ 338.766150][T13820] __x64_sys_setsockopt+0x13f/0x1b0 [ 338.766181][T13820] do_syscall_64+0xfa/0x3b0 [ 338.766202][T13820] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.766222][T13820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.766242][T13820] ? clear_bhb_loop+0x60/0xb0 [ 338.766268][T13820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.766287][T13820] RIP: 0033:0x7fd013f8e9a9 [ 338.766306][T13820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.766324][T13820] RSP: 002b:00007fd014eb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 338.766346][T13820] RAX: ffffffffffffffda RBX: 00007fd0141b5fa0 RCX: 00007fd013f8e9a9 [ 338.766361][T13820] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 338.766372][T13820] RBP: 00007fd014010d69 R08: 0000000000000004 R09: 0000000000000000 [ 338.766385][T13820] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 338.766397][T13820] R13: 0000000000000000 R14: 00007fd0141b5fa0 R15: 00007fffbed43e88 [ 338.766430][T13820] [ 338.829049][T13820] Mem-Info: [ 339.098076][T13761] lo speed is unknown, defaulting to 1000 [ 339.120718][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 339.149650][T13820] active_anon:7213 inactive_anon:0 isolated_anon:0 [ 339.149650][T13820] active_file:1642 inactive_file:39929 isolated_file:0 [ 339.149650][T13820] unevictable:768 dirty:121 writeback:0 [ 339.149650][T13820] slab_reclaimable:11890 slab_unreclaimable:140656 [ 339.149650][T13820] mapped:33191 shmem:4232 pagetables:1098 [ 339.149650][T13820] sec_pagetables:0 bounce:0 [ 339.149650][T13820] kernel_misc_reclaimable:0 [ 339.149650][T13820] free:1271139 free_pcp:13294 free_cma:0 [ 339.210917][T13820] Node 0 active_anon:28852kB inactive_anon:0kB active_file:6568kB inactive_file:159516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132764kB dirty:484kB writeback:0kB shmem:15392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13884kB pagetables:4248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 339.235017][ T3476] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 339.270730][ T3476] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 339.281750][T13820] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 339.323417][T13820] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.366526][T13817] lo speed is unknown, defaulting to 1000 [ 339.386801][T13816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.402824][T13820] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 339.415917][T13820] Node 0 DMA32 free:1165032kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28868kB inactive_anon:0kB active_file:6568kB inactive_file:157952kB unevictable:1536kB writepending:436kB present:3129332kB managed:2558316kB mlocked:0kB bounce:0kB free_pcp:35228kB local_pcp:12820kB free_cma:0kB [ 339.461507][T13820] lowmem_reserve[]: 0 0 1 1 1 [ 339.466857][T13820] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 339.467923][ T3476] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 339.516638][T13820] lowmem_reserve[]: 0 0 0 0 0 [ 339.522505][T13820] Node 1 Normal free:3904140kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17572kB local_pcp:4608kB free_cma:0kB [ 339.538673][T13835] tipc: Enabled bearer , priority 0 [ 339.566447][T13820] lowmem_reserve[]: 0 0 0 0 0 [ 339.572380][T13820] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 339.587936][T13820] Node 0 DMA32: 1972*4kB (U) 1093*8kB (UME) 669*16kB (UME) 1331*32kB (UME) 315*64kB (UME) 124*128kB (UM) 113*256kB (UM) 44*512kB (UME) 16*1024kB (UM) 4*2048kB (UE) 240*4096kB (UM) = 1165032kB [ 339.607519][T13833] syzkaller0: entered promiscuous mode [ 339.607545][T13833] syzkaller0: entered allmulticast mode [ 339.621183][T13817] lo speed is unknown, defaulting to 1000 [ 339.658055][T13820] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 339.692235][T13820] Node 1 Normal: 183*4kB (UE) 44*8kB (UME) 47*16kB (UME) 89*32kB (UME) 33*64kB (UME) 10*128kB (UME) 3*256kB (UM) 4*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3904140kB [ 339.746292][T13834] tipc: Resetting bearer [ 339.770919][T13820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.788230][T13820] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 339.800494][T13842] __nla_validate_parse: 59 callbacks suppressed [ 339.800514][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 339.825995][T13820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.841894][T13834] tipc: Disabling bearer [ 339.855612][T13820] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 339.870410][T13820] 45799 total pagecache pages [ 339.881689][T13820] 0 pages in swap cache [ 339.890996][T13820] Free swap = 124996kB [ 339.901284][T13820] Total swap = 124996kB [ 339.905599][T13820] 2097051 pages RAM [ 339.927982][T13820] 0 pages HighMem/MovableOnly [ 339.942059][T13820] 425430 pages reserved [ 339.955742][T13820] 0 pages cma reserved [ 340.274912][T13817] lo speed is unknown, defaulting to 1000 [ 340.525960][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 340.812963][T13860] pim6reg1: entered promiscuous mode [ 340.827010][T13860] pim6reg1: entered allmulticast mode [ 341.422524][T13885] sctp: [Deprecated]: syz.4.2152 (pid 13885) Use of int in maxseg socket option. [ 341.422524][T13885] Use struct sctp_assoc_value instead [ 341.638877][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2154'. [ 342.193527][T13920] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 342.202517][T13919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2162'. [ 342.320674][T13924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2158'. [ 342.427353][ C1] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 342.434964][ C1] bridge0: topology change detected, propagating [ 342.823718][T13946] netlink: 'syz.0.2168': attribute type 1 has an invalid length. [ 342.846458][T13946] netlink: 600 bytes leftover after parsing attributes in process `syz.0.2168'. [ 342.942617][T13947] lo speed is unknown, defaulting to 1000 [ 342.960877][T13947] lo speed is unknown, defaulting to 1000 [ 343.314994][T13947] lo speed is unknown, defaulting to 1000 [ 344.248993][T13985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2178'. [ 344.265136][T13992] lo speed is unknown, defaulting to 1000 [ 344.299828][T13992] lo speed is unknown, defaulting to 1000 [ 344.319816][T14001] lo: left promiscuous mode [ 344.383744][T14001] 0ªX¹¦À: left allmulticast mode [ 344.409787][T14005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2182'. [ 344.410136][T14001] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 344.475544][T14007] xt_hashlimit: size too large, truncated to 1048576 [ 345.135024][T13992] lo speed is unknown, defaulting to 1000 [ 345.149445][T13996] rdma_rxe: rxe_newlink: failed to add lo [ 345.469411][T14030] netlink: 'syz.1.2188': attribute type 23 has an invalid length. [ 345.838923][T14045] netlink: 'syz.2.2192': attribute type 6 has an invalid length. [ 345.874147][T14044] netlink: 'syz.2.2192': attribute type 6 has an invalid length. [ 345.917049][T14047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2194'. [ 345.976393][T14051] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2195'. [ 346.005522][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2195'. [ 346.020476][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2195'. [ 346.117023][T14052] syzkaller1: entered promiscuous mode [ 346.122886][T14052] syzkaller1: entered allmulticast mode [ 346.284636][T14066] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.2198'. [ 346.296811][T14064] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2199'. [ 346.327755][T14064] xt_hashlimit: size too large, truncated to 1048576 [ 346.419468][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2200'. [ 346.686228][T14079] ip6tnl2: entered promiscuous mode [ 346.706034][T14079] ip6tnl2: entered allmulticast mode [ 346.748366][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 346.936779][T14084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2203'. [ 346.965660][T14084] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 347.206527][T14088] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 347.236143][T14090] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 347.300247][T14090] block nbd0: NBD_DISCONNECT [ 347.305278][T14090] block nbd0: Send disconnect failed -22 [ 347.327585][T14090] block nbd0: Disconnected due to user request. [ 347.344775][T14090] block nbd0: shutting down sockets [ 347.361255][T14088] xt_CT: No such helper "snmp" [ 347.576371][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'. [ 347.586856][T14104] netlink: 'syz.0.2209': attribute type 20 has an invalid length. [ 347.596907][T14104] netlink: 'syz.0.2209': attribute type 20 has an invalid length. [ 347.745135][T14109] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 347.754774][T14109] 0ªî{X¹¦: entered allmulticast mode [ 347.764491][T14109] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 347.856794][T14115] netlink: 'syz.3.2212': attribute type 1 has an invalid length. [ 347.918706][T14115] 8021q: adding VLAN 0 to HW filter on device bond5 [ 348.106791][T14125] xt_hashlimit: size too large, truncated to 1048576 [ 348.158965][T14127] : renamed from bridge_slave_0 (while UP) [ 353.309173][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.584443][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.595543][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.609478][ T5863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.621651][ T5863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.630405][ T5863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.723101][T14137] lo speed is unknown, defaulting to 1000 [ 363.734610][T14137] lo speed is unknown, defaulting to 1000 [ 363.748794][ T5863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.759882][ T5863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.768780][ T5863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.778947][ T5863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.786896][ T5863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.835113][ T5863] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.845605][ T5863] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.854863][ T5863] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.863620][ T5863] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.872484][ T5863] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.888662][T14139] lo speed is unknown, defaulting to 1000 [ 363.938630][ T5863] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 363.949856][ T5863] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 363.967960][ T5863] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 363.976291][ T5863] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 363.984562][ T5863] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 364.013336][T14141] lo speed is unknown, defaulting to 1000 [ 364.075902][T14143] lo speed is unknown, defaulting to 1000 [ 364.141257][T14137] lo speed is unknown, defaulting to 1000 [ 364.143059][T14139] lo speed is unknown, defaulting to 1000 [ 364.576127][T14137] chnl_net:caif_netlink_parms(): no params data found [ 364.634271][ T5850] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 364.637283][T14141] lo speed is unknown, defaulting to 1000 [ 364.658174][ T5850] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 364.666865][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 364.684795][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 364.694167][ T5850] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 364.724856][T14139] lo speed is unknown, defaulting to 1000 [ 364.932880][T14141] lo speed is unknown, defaulting to 1000 [ 364.942988][T14137] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.952348][T14137] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.961970][T14137] bridge_slave_0: entered allmulticast mode [ 364.970374][T14137] bridge_slave_0: entered promiscuous mode [ 364.980760][T14143] lo speed is unknown, defaulting to 1000 [ 365.015556][T14149] lo speed is unknown, defaulting to 1000 [ 365.022453][T14137] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.039218][T14137] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.046872][T14137] bridge_slave_1: entered allmulticast mode [ 365.056897][T14137] bridge_slave_1: entered promiscuous mode [ 365.171949][T14137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.212299][T14137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.371262][T14149] lo speed is unknown, defaulting to 1000 [ 365.379301][T14143] lo speed is unknown, defaulting to 1000 [ 365.407720][T14137] team0: Port device team_slave_0 added [ 365.472222][T14137] team0: Port device team_slave_1 added [ 365.586728][T14137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.594683][T14137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.622250][T14137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.688242][T14137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.695532][T14137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.723673][ T5850] Bluetooth: hci5: command tx timeout [ 365.729872][T14137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.764346][T14139] chnl_net:caif_netlink_parms(): no params data found [ 365.784105][T14149] lo speed is unknown, defaulting to 1000 [ 365.869620][ T5850] Bluetooth: hci6: command tx timeout [ 365.947274][ T5850] Bluetooth: hci7: command tx timeout [ 366.009749][T14137] hsr_slave_0: entered promiscuous mode [ 366.016800][T14137] hsr_slave_1: entered promiscuous mode [ 366.025071][T14141] chnl_net:caif_netlink_parms(): no params data found [ 366.033158][ T5850] Bluetooth: hci8: command tx timeout [ 366.220946][T14139] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.229512][T14139] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.236975][T14139] bridge_slave_0: entered allmulticast mode [ 366.246096][T14139] bridge_slave_0: entered promiscuous mode [ 366.304610][T14139] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.313339][T14139] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.320934][T14139] bridge_slave_1: entered allmulticast mode [ 366.330482][T14139] bridge_slave_1: entered promiscuous mode [ 366.463104][T14139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.478633][T14139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.488982][T14143] chnl_net:caif_netlink_parms(): no params data found [ 366.642951][T14139] team0: Port device team_slave_0 added [ 366.686513][T14141] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.695084][T14141] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.703689][T14141] bridge_slave_0: entered allmulticast mode [ 366.712648][T14141] bridge_slave_0: entered promiscuous mode [ 366.747607][ T5850] Bluetooth: hci9: command tx timeout [ 366.755704][T14139] team0: Port device team_slave_1 added [ 366.781572][T14141] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.790314][T14141] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.798763][T14141] bridge_slave_1: entered allmulticast mode [ 366.809055][T14141] bridge_slave_1: entered promiscuous mode [ 366.920274][T14141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.969541][T14149] chnl_net:caif_netlink_parms(): no params data found [ 366.987844][T14139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.995187][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.023341][T14139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.049220][T14139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.058210][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.091464][T14139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.109073][T14141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.119927][T14143] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.127925][T14143] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.135297][T14143] bridge_slave_0: entered allmulticast mode [ 367.142970][T14143] bridge_slave_0: entered promiscuous mode [ 367.219152][T14143] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.226739][T14143] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.235513][T14143] bridge_slave_1: entered allmulticast mode [ 367.244455][T14143] bridge_slave_1: entered promiscuous mode [ 367.293117][T14141] team0: Port device team_slave_0 added [ 367.364232][T14141] team0: Port device team_slave_1 added [ 367.433052][T14139] hsr_slave_0: entered promiscuous mode [ 367.441013][T14139] hsr_slave_1: entered promiscuous mode [ 367.448859][T14139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.456575][T14139] Cannot create hsr debugfs directory [ 367.501077][T14143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.516234][T14143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.583471][T14141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.591769][T14141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.619241][T14141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.704501][T14141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.713169][T14141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.740436][T14141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.771483][T14149] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.780105][T14149] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.788920][T14149] bridge_slave_0: entered allmulticast mode [ 367.796497][T14149] bridge_slave_0: entered promiscuous mode [ 367.798057][ T5850] Bluetooth: hci5: command tx timeout [ 367.841922][T14143] team0: Port device team_slave_0 added [ 367.849743][T14149] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.858987][T14149] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.866595][T14149] bridge_slave_1: entered allmulticast mode [ 367.876335][T14149] bridge_slave_1: entered promiscuous mode [ 367.924151][T14143] team0: Port device team_slave_1 added [ 367.948436][ T5850] Bluetooth: hci6: command tx timeout [ 368.026190][T14149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.037317][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.037911][ T5850] Bluetooth: hci7: command tx timeout [ 368.090370][T14143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.098242][T14143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.128163][T14143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.128210][ T5850] Bluetooth: hci8: command tx timeout [ 368.151107][T14141] hsr_slave_0: entered promiscuous mode [ 368.159213][T14141] hsr_slave_1: entered promiscuous mode [ 368.166655][T14141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.176056][T14141] Cannot create hsr debugfs directory [ 368.191342][T14149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.239041][T14143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.246609][T14143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.276511][T14143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.373753][T14149] team0: Port device team_slave_0 added [ 368.393933][T14149] team0: Port device team_slave_1 added [ 368.537969][T14143] hsr_slave_0: entered promiscuous mode [ 368.545196][T14143] hsr_slave_1: entered promiscuous mode [ 368.552741][T14143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.561172][T14143] Cannot create hsr debugfs directory [ 368.595839][T14149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.604153][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.631349][T14149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.645187][T14149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.652695][T14149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.683061][T14149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.827268][ T5850] Bluetooth: hci9: command tx timeout [ 368.938852][T14149] hsr_slave_0: entered promiscuous mode [ 368.946514][T14149] hsr_slave_1: entered promiscuous mode [ 368.953534][T14149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.962275][T14149] Cannot create hsr debugfs directory [ 369.878256][ T5850] Bluetooth: hci5: command tx timeout [ 370.038501][ T5850] Bluetooth: hci6: command tx timeout [ 370.108514][ T5850] Bluetooth: hci7: command tx timeout [ 370.199597][ T5850] Bluetooth: hci8: command tx timeout [ 370.908225][ T5850] Bluetooth: hci9: command tx timeout [ 371.948276][ T5850] Bluetooth: hci5: command tx timeout [ 372.107657][ T5850] Bluetooth: hci6: command tx timeout [ 372.188675][ T5850] Bluetooth: hci7: command tx timeout [ 372.267483][ T5850] Bluetooth: hci8: command tx timeout [ 372.987346][ T5850] Bluetooth: hci9: command tx timeout [ 382.747458][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.202579][ T5863] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 423.212578][ T5863] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 423.221907][ T5863] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 423.231480][ T5863] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 423.246804][ T5863] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 423.288372][T14184] lo speed is unknown, defaulting to 1000 [ 423.295459][T14184] lo speed is unknown, defaulting to 1000 [ 423.472092][T14184] lo speed is unknown, defaulting to 1000 [ 423.648613][T14184] chnl_net:caif_netlink_parms(): no params data found [ 423.746989][T14184] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.755449][T14184] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.763746][T14184] bridge_slave_0: entered allmulticast mode [ 423.773080][T14184] bridge_slave_0: entered promiscuous mode [ 423.782572][T14184] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.791768][T14184] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.800978][T14184] bridge_slave_1: entered allmulticast mode [ 423.809724][T14184] bridge_slave_1: entered promiscuous mode [ 423.851798][T14184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.866415][T14184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.917739][T14184] team0: Port device team_slave_0 added [ 423.926697][T14184] team0: Port device team_slave_1 added [ 423.973869][T14184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.981832][T14184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.010075][T14184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.025722][T14184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.033756][T14184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.061398][T14184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.309121][T14184] hsr_slave_0: entered promiscuous mode [ 424.338630][T14184] hsr_slave_1: entered promiscuous mode [ 424.346422][T14184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.387944][T14184] Cannot create hsr debugfs directory [ 424.650319][ T5850] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 424.669531][ T5850] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 424.679033][ T5850] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 424.688520][ T5850] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 424.698531][ T5850] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 424.802256][ T5850] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 424.812729][ T5850] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 424.822397][ T5850] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 424.840047][ T5850] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 424.858398][ T5850] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 425.003682][T14195] lo speed is unknown, defaulting to 1000 [ 425.015190][ T5850] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 425.026393][ T5850] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 425.038330][ T5850] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 425.058472][ T5850] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 425.068456][ T5850] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 425.099785][T14195] lo speed is unknown, defaulting to 1000 [ 425.199122][T14197] lo speed is unknown, defaulting to 1000 [ 425.218779][T14200] lo speed is unknown, defaulting to 1000 [ 425.307797][ T5863] Bluetooth: hci10: command tx timeout [ 425.463550][T14200] lo speed is unknown, defaulting to 1000 [ 425.471208][T14195] lo speed is unknown, defaulting to 1000 [ 425.629820][ T5850] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 425.640598][ T5850] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 425.658161][ T5850] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 425.668435][ T5850] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 425.676717][ T5850] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 425.804347][T14200] lo speed is unknown, defaulting to 1000 [ 425.804392][T14197] lo speed is unknown, defaulting to 1000 [ 425.880208][T14202] lo speed is unknown, defaulting to 1000 [ 426.112673][T14202] lo speed is unknown, defaulting to 1000 [ 426.137358][T14197] lo speed is unknown, defaulting to 1000 [ 426.424083][T14195] chnl_net:caif_netlink_parms(): no params data found [ 426.479832][T14202] lo speed is unknown, defaulting to 1000 [ 426.693898][T14200] chnl_net:caif_netlink_parms(): no params data found [ 426.747899][ T5863] Bluetooth: hci11: command tx timeout [ 426.814531][T14195] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.822414][T14195] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.830772][T14195] bridge_slave_0: entered allmulticast mode [ 426.839004][T14195] bridge_slave_0: entered promiscuous mode [ 426.855018][T14195] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.866277][T14195] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.875512][T14195] bridge_slave_1: entered allmulticast mode [ 426.884779][T14195] bridge_slave_1: entered promiscuous mode [ 426.898133][T14197] chnl_net:caif_netlink_parms(): no params data found [ 426.908066][ T5863] Bluetooth: hci12: command tx timeout [ 427.078411][T14195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.115984][T14200] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.124405][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.132749][T14200] bridge_slave_0: entered allmulticast mode [ 427.141649][T14200] bridge_slave_0: entered promiscuous mode [ 427.149159][ T5863] Bluetooth: hci13: command tx timeout [ 427.155310][T14200] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.165168][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.173694][T14200] bridge_slave_1: entered allmulticast mode [ 427.182776][T14200] bridge_slave_1: entered promiscuous mode [ 427.214012][T14195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.358675][T14195] team0: Port device team_slave_0 added [ 427.388326][ T5863] Bluetooth: hci10: command tx timeout [ 427.440917][T14200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.455187][T14195] team0: Port device team_slave_1 added [ 427.481883][T14197] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.489978][T14197] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.497914][T14197] bridge_slave_0: entered allmulticast mode [ 427.506206][T14197] bridge_slave_0: entered promiscuous mode [ 427.516996][T14200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.573814][T14195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.582276][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.611128][T14195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.624203][T14197] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.632243][T14197] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.640457][T14197] bridge_slave_1: entered allmulticast mode [ 427.649596][T14197] bridge_slave_1: entered promiscuous mode [ 427.678013][T14202] chnl_net:caif_netlink_parms(): no params data found [ 427.693454][T14195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.701702][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.707586][ T5863] Bluetooth: hci14: command tx timeout [ 427.729739][T14195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.753228][T14200] team0: Port device team_slave_0 added [ 427.763587][T14200] team0: Port device team_slave_1 added [ 427.826711][T14197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.903856][T14197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.939093][T14200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.946095][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.974397][T14200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.040634][T14200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.047957][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.076607][T14200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.095997][T14195] hsr_slave_0: entered promiscuous mode [ 428.105890][T14195] hsr_slave_1: entered promiscuous mode [ 428.113200][T14195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.121381][T14195] Cannot create hsr debugfs directory [ 428.174056][T14197] team0: Port device team_slave_0 added [ 428.185387][T14197] team0: Port device team_slave_1 added [ 428.330430][T14197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.338524][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.365750][T14197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.380397][T14197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.388158][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.415173][T14197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.428538][T14202] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.435718][T14202] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.444062][T14202] bridge_slave_0: entered allmulticast mode [ 428.451967][T14202] bridge_slave_0: entered promiscuous mode [ 428.485914][T14200] hsr_slave_0: entered promiscuous mode [ 428.492759][T14200] hsr_slave_1: entered promiscuous mode [ 428.500242][T14200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.508233][T14200] Cannot create hsr debugfs directory [ 428.550586][T14202] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.558720][T14202] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.566486][T14202] bridge_slave_1: entered allmulticast mode [ 428.575124][T14202] bridge_slave_1: entered promiscuous mode [ 428.682903][T14202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.706623][T14202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.742432][T14197] hsr_slave_0: entered promiscuous mode [ 428.750043][T14197] hsr_slave_1: entered promiscuous mode [ 428.756912][T14197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.764699][T14197] Cannot create hsr debugfs directory [ 428.828873][ T5850] Bluetooth: hci11: command tx timeout [ 428.940101][T14202] team0: Port device team_slave_0 added [ 428.988205][ T5850] Bluetooth: hci12: command tx timeout [ 428.993553][T14202] team0: Port device team_slave_1 added [ 429.091082][T14202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.104277][T14202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.132135][T14202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.154298][T14202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.163026][T14202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.191554][T14202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.227608][ T5850] Bluetooth: hci13: command tx timeout [ 429.444730][T14202] hsr_slave_0: entered promiscuous mode [ 429.452473][T14202] hsr_slave_1: entered promiscuous mode [ 429.460531][T14202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.469449][ T5850] Bluetooth: hci10: command tx timeout [ 429.474857][T14202] Cannot create hsr debugfs directory [ 429.794555][ T5850] Bluetooth: hci14: command tx timeout [ 430.908240][ T5850] Bluetooth: hci11: command tx timeout [ 431.068624][ T5850] Bluetooth: hci12: command tx timeout [ 431.307506][ T5850] Bluetooth: hci13: command tx timeout [ 431.548157][ T5850] Bluetooth: hci10: command tx timeout [ 431.867362][ T5850] Bluetooth: hci14: command tx timeout [ 432.987765][ T5850] Bluetooth: hci11: command tx timeout [ 433.148327][ T5850] Bluetooth: hci12: command tx timeout [ 433.388217][ T5850] Bluetooth: hci13: command tx timeout [ 433.948086][ T5850] Bluetooth: hci14: command tx timeout [ 435.227550][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 445.470680][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 483.308200][ T5863] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 483.317990][ T5863] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 483.327238][ T5863] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 483.335568][ T5863] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 483.345422][ T5863] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 483.391686][T14234] lo speed is unknown, defaulting to 1000 [ 483.400598][T14234] lo speed is unknown, defaulting to 1000 [ 483.591041][T14234] lo speed is unknown, defaulting to 1000 [ 483.782762][T14234] chnl_net:caif_netlink_parms(): no params data found [ 483.889281][T14234] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.896892][T14234] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.904938][T14234] bridge_slave_0: entered allmulticast mode [ 483.913929][T14234] bridge_slave_0: entered promiscuous mode [ 483.925160][T14234] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.932584][T14234] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.941168][T14234] bridge_slave_1: entered allmulticast mode [ 483.950056][T14234] bridge_slave_1: entered promiscuous mode [ 483.997003][T14234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.011251][T14234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.062067][T14234] team0: Port device team_slave_0 added [ 484.071318][T14234] team0: Port device team_slave_1 added [ 484.120468][T14234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.128934][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.155652][T14234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.169526][T14234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.176510][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.206116][T14234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.275430][T14234] hsr_slave_0: entered promiscuous mode [ 484.283398][T14234] hsr_slave_1: entered promiscuous mode [ 484.291507][T14234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.300390][T14234] Cannot create hsr debugfs directory [ 485.268901][ T5863] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 485.298380][ T5863] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 485.308113][ T5863] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 485.320296][ T5863] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 485.328359][ T5863] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 485.387873][ T5863] Bluetooth: hci15: command tx timeout [ 485.421594][T14246] lo speed is unknown, defaulting to 1000 [ 485.425906][ T5850] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 485.438634][ T5850] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 485.448416][ T5850] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 485.456616][ T5850] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 485.465279][ T5850] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 485.474765][T14246] lo speed is unknown, defaulting to 1000 [ 485.583250][ T5850] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 485.593789][ T5850] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 485.605343][T14248] lo speed is unknown, defaulting to 1000 [ 485.607471][ T5850] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 485.628435][ T5850] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 485.636317][ T5850] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 485.755135][ T5850] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 485.762091][T14250] lo speed is unknown, defaulting to 1000 [ 485.770649][ T5850] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 485.780247][ T5850] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 485.800324][ T5850] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 485.826004][ T5850] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 485.907416][T14248] lo speed is unknown, defaulting to 1000 [ 485.927922][T14246] lo speed is unknown, defaulting to 1000 [ 485.971057][T14252] lo speed is unknown, defaulting to 1000 [ 486.191258][T14250] lo speed is unknown, defaulting to 1000 [ 486.201368][T14248] lo speed is unknown, defaulting to 1000 [ 486.445748][T14246] chnl_net:caif_netlink_parms(): no params data found [ 486.559333][T14250] lo speed is unknown, defaulting to 1000 [ 486.570400][T14252] lo speed is unknown, defaulting to 1000 [ 486.896023][T14246] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.904692][T14246] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.934731][T14246] bridge_slave_0: entered allmulticast mode [ 486.950384][T14246] bridge_slave_0: entered promiscuous mode [ 486.961318][T14246] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.970029][T14246] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.978751][T14246] bridge_slave_1: entered allmulticast mode [ 486.986457][T14246] bridge_slave_1: entered promiscuous mode [ 486.995341][T14252] lo speed is unknown, defaulting to 1000 [ 487.072705][T14248] chnl_net:caif_netlink_parms(): no params data found [ 487.110516][T14246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.171702][T14246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.252855][T14246] team0: Port device team_slave_0 added [ 487.268117][T14246] team0: Port device team_slave_1 added [ 487.387746][T14259] Bluetooth: hci16: command tx timeout [ 487.410033][T14248] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.418578][T14248] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.425992][T14248] bridge_slave_0: entered allmulticast mode [ 487.435331][T14248] bridge_slave_0: entered promiscuous mode [ 487.444689][T14246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.452684][T14246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.480051][T14246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.491894][T14259] Bluetooth: hci15: command tx timeout [ 487.502042][T14246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.509967][T14246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.539053][T14246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.557909][T14259] Bluetooth: hci17: command tx timeout [ 487.564741][T14248] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.572741][T14248] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.581891][T14248] bridge_slave_1: entered allmulticast mode [ 487.590810][T14248] bridge_slave_1: entered promiscuous mode [ 487.707452][T14259] Bluetooth: hci18: command tx timeout [ 487.715148][T14248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.730156][T14248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.868953][T14259] Bluetooth: hci19: command tx timeout [ 487.896688][T14246] hsr_slave_0: entered promiscuous mode [ 487.904721][T14246] hsr_slave_1: entered promiscuous mode [ 487.913373][T14246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.921439][T14246] Cannot create hsr debugfs directory [ 487.930666][T14248] team0: Port device team_slave_0 added [ 487.986631][T14248] team0: Port device team_slave_1 added [ 487.993985][T14250] chnl_net:caif_netlink_parms(): no params data found [ 488.175997][T14248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.184090][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.211666][T14248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.225668][T14248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.233752][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.260831][T14248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.415805][T14252] chnl_net:caif_netlink_parms(): no params data found [ 488.476640][T14248] hsr_slave_0: entered promiscuous mode [ 488.484135][T14248] hsr_slave_1: entered promiscuous mode [ 488.492455][T14248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.501531][T14248] Cannot create hsr debugfs directory [ 488.508183][T14259] Bluetooth: hci5: command 0x0406 tx timeout [ 488.511118][T14258] Bluetooth: hci8: command 0x0406 tx timeout [ 488.514634][T14259] Bluetooth: hci6: command 0x0406 tx timeout [ 488.523220][T14258] Bluetooth: hci7: command 0x0406 tx timeout [ 488.531525][T14259] Bluetooth: hci9: command 0x0406 tx timeout [ 488.610238][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.618698][T14250] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.626422][T14250] bridge_slave_0: entered allmulticast mode [ 488.634870][T14250] bridge_slave_0: entered promiscuous mode [ 488.706300][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.715480][T14250] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.724152][T14250] bridge_slave_1: entered allmulticast mode [ 488.733629][T14250] bridge_slave_1: entered promiscuous mode [ 488.884147][T14250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.902157][T14250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.029618][T14252] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.037599][T14252] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.045090][T14252] bridge_slave_0: entered allmulticast mode [ 489.061739][T14252] bridge_slave_0: entered promiscuous mode [ 489.118257][T14250] team0: Port device team_slave_0 added [ 489.124746][T14252] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.133778][T14252] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.142900][T14252] bridge_slave_1: entered allmulticast mode [ 489.151779][T14252] bridge_slave_1: entered promiscuous mode [ 489.191329][T14250] team0: Port device team_slave_1 added [ 489.261609][T14252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.326186][T14252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.358713][T14250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.365820][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.394920][T14250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.445768][T14250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.454088][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.481900][ T5850] Bluetooth: hci16: command tx timeout [ 489.487879][T14250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.524071][T14252] team0: Port device team_slave_0 added [ 489.547317][ T5850] Bluetooth: hci15: command tx timeout [ 489.554284][T14252] team0: Port device team_slave_1 added [ 489.629369][ T5850] Bluetooth: hci17: command tx timeout [ 489.655833][T14252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.664084][T14252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.691757][T14252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.706062][T14252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.713996][T14252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.741189][T14252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.787137][ T5850] Bluetooth: hci18: command tx timeout [ 489.803288][T14250] hsr_slave_0: entered promiscuous mode [ 489.811632][T14250] hsr_slave_1: entered promiscuous mode [ 489.819373][T14250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.826990][T14250] Cannot create hsr debugfs directory [ 489.937787][T14252] hsr_slave_0: entered promiscuous mode [ 489.944980][T14252] hsr_slave_1: entered promiscuous mode [ 489.951929][ T5850] Bluetooth: hci19: command tx timeout [ 489.960127][T14252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.968290][T14252] Cannot create hsr debugfs directory [ 491.549104][ T5850] Bluetooth: hci16: command tx timeout [ 491.638060][ T5850] Bluetooth: hci15: command tx timeout [ 491.710787][ T5850] Bluetooth: hci17: command tx timeout [ 491.867641][ T5850] Bluetooth: hci18: command tx timeout [ 492.028599][ T5850] Bluetooth: hci19: command tx timeout [ 493.628045][ T5850] Bluetooth: hci16: command tx timeout [ 493.798129][ T5850] Bluetooth: hci17: command tx timeout [ 493.957893][ T5850] Bluetooth: hci18: command tx timeout [ 494.108127][ T5850] Bluetooth: hci19: command tx timeout [ 499.228353][ T31] INFO: task syz.2.2206:14090 blocked for more than 143 seconds. [ 499.236222][ T31] Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 [ 499.245225][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.255252][ T31] task:syz.2.2206 state:D stack:23720 pid:14090 tgid:14089 ppid:5847 task_flags:0x400140 flags:0x00004006 [ 499.268909][ T31] Call Trace: [ 499.272396][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 499.275607][ T31] __schedule+0x16f5/0x4d00 [ 499.288125][ T31] ? schedule+0x165/0x360 [ 499.292586][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.298532][ T31] ? __pfx___schedule+0x10/0x10 [ 499.303776][ T31] ? schedule+0x91/0x360 [ 499.309025][ T31] schedule+0x165/0x360 [ 499.313411][ T31] schedule_timeout+0x9a/0x270 [ 499.319202][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 499.325043][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.331310][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.337907][ T31] ? wait_for_completion+0x267/0x5d0 [ 499.343421][ T31] wait_for_completion+0x2bf/0x5d0 [ 499.349683][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 499.397808][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 499.403893][ T31] ? check_flush_dependency+0x88/0x400 [ 499.437785][ T31] __flush_workqueue+0x6f7/0x14b0 [ 499.442999][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 499.449916][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.455174][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 499.462548][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 499.469667][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 499.475205][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 499.481295][ T31] nbd_genl_disconnect+0x485/0x570 [ 499.486626][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 499.493303][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 499.500417][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 499.506033][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 499.512988][ T31] ? stack_trace_save+0x9c/0xe0 [ 499.518742][ T31] genl_rcv_msg+0x60e/0x790 [ 499.523393][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.529741][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 499.536091][ T31] netlink_rcv_skb+0x208/0x470 [ 499.542007][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.546924][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.553116][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.559343][ T31] ? down_read+0x1ad/0x2e0 [ 499.564097][ T31] genl_rcv+0x28/0x40 [ 499.569269][ T31] netlink_unicast+0x82c/0x9e0 [ 499.574209][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 499.580340][ T31] ? netlink_sendmsg+0x642/0xb30 [ 499.585758][ T31] ? skb_put+0x11b/0x210 [ 499.591018][ T31] netlink_sendmsg+0x805/0xb30 [ 499.596307][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.602507][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 499.608501][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.613851][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.620024][ T31] __sock_sendmsg+0x219/0x270 [ 499.624894][ T31] ____sys_sendmsg+0x505/0x830 [ 499.630656][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.636001][ T31] ? import_iovec+0x74/0xa0 [ 499.641198][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 499.645913][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.652140][ T31] ? __fget_files+0x2a/0x420 [ 499.656963][ T31] ? __fget_files+0x3a0/0x420 [ 499.662633][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 499.668598][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.674285][ T31] ? rcu_is_watching+0x15/0xb0 [ 499.679977][ T31] ? do_syscall_64+0xbe/0x3b0 [ 499.684791][ T31] do_syscall_64+0xfa/0x3b0 [ 499.690333][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.695932][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.702403][ T31] ? clear_bhb_loop+0x60/0xb0 [ 499.707924][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.713896][ T31] RIP: 0033:0x7fc97078e9a9 [ 499.718545][ T31] RSP: 002b:00007fc97159d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.728218][ T31] RAX: ffffffffffffffda RBX: 00007fc9709b5fa0 RCX: 00007fc97078e9a9 [ 499.736343][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000009 [ 499.745334][ T31] RBP: 00007fc970810d69 R08: 0000000000000000 R09: 0000000000000000 [ 499.754237][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.762939][ T31] R13: 0000000000000000 R14: 00007fc9709b5fa0 R15: 00007fff25387ff8 [ 499.772431][ T31] [ 499.775614][ T31] INFO: task syz.1.2207:14095 blocked for more than 143 seconds. [ 499.784154][ T31] Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 [ 499.792926][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.802677][ T31] task:syz.1.2207 state:D stack:28456 pid:14095 tgid:14094 ppid:5854 task_flags:0x400040 flags:0x00004004 [ 499.816418][ T31] Call Trace: [ 499.820400][ T31] [ 499.823555][ T31] __schedule+0x16f5/0x4d00 [ 499.829003][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.833904][ T31] ? schedule+0x165/0x360 [ 499.839155][ T31] ? __pfx___schedule+0x10/0x10 [ 499.844344][ T31] ? schedule+0x91/0x360 [ 499.849557][ T31] schedule+0x165/0x360 [ 499.853791][ T31] schedule_preempt_disabled+0x13/0x30 [ 499.860165][ T31] __mutex_lock+0x724/0xe80 [ 499.864928][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 499.871484][ T31] ? __mutex_lock+0x51b/0xe80 [ 499.876415][ T31] ? genl_rcv_msg+0x10d/0x790 [ 499.882164][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 499.888303][ T31] ? stack_trace_save+0x9c/0xe0 [ 499.893497][ T31] ? radix_tree_lookup+0x240/0x290 [ 499.900013][ T31] genl_rcv_msg+0x10d/0x790 [ 499.904843][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.910827][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.916037][ T31] netlink_rcv_skb+0x208/0x470 [ 499.921673][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.927015][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.933228][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.939421][ T31] ? down_read+0x1ad/0x2e0 [ 499.943901][ T31] genl_rcv+0x28/0x40 [ 499.948953][ T31] netlink_unicast+0x82c/0x9e0 [ 499.953895][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 499.959973][ T31] ? netlink_sendmsg+0x642/0xb30 [ 499.965235][ T31] ? skb_put+0x11b/0x210 [ 499.970453][ T31] netlink_sendmsg+0x805/0xb30 [ 499.975461][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.981654][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 499.986717][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.992265][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.997846][ T31] __sock_sendmsg+0x219/0x270 [ 500.002667][ T31] __sys_sendto+0x3bd/0x520 [ 500.007830][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 500.013078][ T31] ? count_memcg_event_mm+0x21/0x260 [ 500.018888][ T31] ? exc_page_fault+0x76/0xf0 [ 500.023588][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 500.030336][ T31] __x64_sys_sendto+0xde/0x100 [ 500.035263][ T31] do_syscall_64+0xfa/0x3b0 [ 500.040680][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.045923][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.052976][ T31] ? clear_bhb_loop+0x60/0xb0 [ 500.058499][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.064683][ T31] RIP: 0033:0x7f3680d9083c [ 500.070106][ T31] RSP: 002b:00007f3681bc2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 500.079419][ T31] RAX: ffffffffffffffda RBX: 00007f3681bc2fc0 RCX: 00007f3680d9083c [ 500.088721][ T31] RDX: 0000000000000020 RSI: 00007f3681bc3010 RDI: 0000000000000009 [ 500.097935][ T31] RBP: 0000000000000000 R08: 00007f3681bc2f14 R09: 000000000000000c [ 500.106220][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 500.115595][ T31] R13: 00007f3681bc2f68 R14: 00007f3681bc3010 R15: 0000000000000000 [ 500.124724][ T31] [ 500.128837][ T31] INFO: task syz.4.2208:14100 blocked for more than 144 seconds. [ 500.136602][ T31] Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 [ 500.145325][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.155044][ T31] task:syz.4.2208 state:D stack:27832 pid:14100 tgid:14097 ppid:5849 task_flags:0x400140 flags:0x00004004 [ 500.168187][ T31] Call Trace: [ 500.171515][ T31] [ 500.174734][ T31] __schedule+0x16f5/0x4d00 [ 500.180171][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.185092][ T31] ? schedule+0x165/0x360 [ 500.190781][ T31] ? __pfx___schedule+0x10/0x10 [ 500.195830][ T31] ? schedule+0x91/0x360 [ 500.200833][ T31] schedule+0x165/0x360 [ 500.205139][ T31] schedule_preempt_disabled+0x13/0x30 [ 500.211577][ T31] __mutex_lock+0x724/0xe80 [ 500.216216][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 500.222623][ T31] ? __mutex_lock+0x51b/0xe80 [ 500.228431][ T31] ? genl_rcv_msg+0x10d/0x790 [ 500.233260][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 500.238981][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 500.244165][ T31] ? radix_tree_lookup+0x240/0x290 [ 500.250395][ T31] genl_rcv_msg+0x10d/0x790 [ 500.255214][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.261022][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 500.266109][ T31] ? __asan_memcpy+0x40/0x70 [ 500.272226][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 500.278536][ T31] netlink_rcv_skb+0x208/0x470 [ 500.283437][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.288857][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.294026][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.300065][ T31] ? down_read+0x1ad/0x2e0 [ 500.304529][ T31] genl_rcv+0x28/0x40 [ 500.308850][ T31] netlink_unicast+0x82c/0x9e0 [ 500.313802][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 500.320162][ T31] ? netlink_sendmsg+0x642/0xb30 [ 500.325153][ T31] ? skb_put+0x11b/0x210 [ 500.330832][ T31] netlink_sendmsg+0x805/0xb30 [ 500.336054][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.342461][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 500.348337][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 500.353959][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.360006][ T31] __sock_sendmsg+0x219/0x270 [ 500.365006][ T31] __sys_sendto+0x3bd/0x520 [ 500.370786][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 500.375967][ T31] ? count_memcg_event_mm+0x21/0x260 [ 500.382156][ T31] ? exc_page_fault+0x76/0xf0 [ 500.386876][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 500.392951][ T31] __x64_sys_sendto+0xde/0x100 [ 500.398726][ T31] do_syscall_64+0xfa/0x3b0 [ 500.403362][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.409549][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.415738][ T31] ? clear_bhb_loop+0x60/0xb0 [ 500.421374][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.428204][ T31] RIP: 0033:0x7f58e3b9083c [ 500.432668][ T31] RSP: 002b:00007f58e491aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 500.441786][ T31] RAX: ffffffffffffffda RBX: 00007f58e491afc0 RCX: 00007f58e3b9083c [ 500.450969][ T31] RDX: 0000000000000020 RSI: 00007f58e491b010 RDI: 000000000000000d [ 500.459692][ T31] RBP: 0000000000000000 R08: 00007f58e491af14 R09: 000000000000000c [ 500.468654][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 500.476776][ T31] R13: 00007f58e491af68 R14: 00007f58e491b010 R15: 0000000000000000 [ 500.485641][ T31] [ 500.489551][ T31] INFO: task syz.0.2213:14116 blocked for more than 144 seconds. [ 500.505927][ T31] Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 [ 500.514858][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.524219][ T31] task:syz.0.2213 state:D stack:28184 pid:14116 tgid:14111 ppid:5853 task_flags:0x400040 flags:0x00004004 [ 500.537532][ T31] Call Trace: [ 500.540862][ T31] [ 500.543831][ T31] __schedule+0x16f5/0x4d00 [ 500.549254][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.554148][ T31] ? schedule+0x165/0x360 [ 500.559492][ T31] ? __pfx___schedule+0x10/0x10 [ 500.564415][ T31] ? schedule+0x91/0x360 [ 500.569404][ T31] schedule+0x165/0x360 [ 500.573624][ T31] schedule_preempt_disabled+0x13/0x30 [ 500.579959][ T31] __mutex_lock+0x724/0xe80 [ 500.584518][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 500.590274][ T31] ? __mutex_lock+0x51b/0xe80 [ 500.595001][ T31] ? genl_rcv_msg+0x10d/0x790 [ 500.599873][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 500.604938][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 500.610305][ T31] ? radix_tree_lookup+0x240/0x290 [ 500.615563][ T31] genl_rcv_msg+0x10d/0x790 [ 500.621210][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.626288][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 500.631874][ T31] ? __asan_memcpy+0x40/0x70 [ 500.636516][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 500.642735][ T31] netlink_rcv_skb+0x208/0x470 [ 500.648189][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.653105][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.659129][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.664465][ T31] ? down_read+0x1ad/0x2e0 [ 500.670155][ T31] genl_rcv+0x28/0x40 [ 500.674656][ T31] netlink_unicast+0x82c/0x9e0 [ 500.680340][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 500.685701][ T31] ? netlink_sendmsg+0x642/0xb30 [ 500.691522][ T31] ? skb_put+0x11b/0x210 [ 500.696095][ T31] netlink_sendmsg+0x805/0xb30 [ 500.701783][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.707890][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 500.712967][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 500.719294][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.724617][ T31] __sock_sendmsg+0x219/0x270 [ 500.730102][ T31] __sys_sendto+0x3bd/0x520 [ 500.734913][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 500.740905][ T31] ? count_memcg_event_mm+0x21/0x260 [ 500.746610][ T31] ? exc_page_fault+0x76/0xf0 [ 500.751936][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 500.758229][ T31] __x64_sys_sendto+0xde/0x100 [ 500.763138][ T31] do_syscall_64+0xfa/0x3b0 [ 500.768442][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.773699][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.780572][ T31] ? clear_bhb_loop+0x60/0xb0 [ 500.785390][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.791994][ T31] RIP: 0033:0x7fd013f9083c [ 500.796595][ T31] RSP: 002b:00007fd014e72ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 500.806434][ T31] RAX: ffffffffffffffda RBX: 00007fd014e72fc0 RCX: 00007fd013f9083c [ 500.815294][ T31] RDX: 0000000000000024 RSI: 00007fd014e73010 RDI: 0000000000000004 [ 500.824498][ T31] RBP: 0000000000000000 R08: 00007fd014e72f14 R09: 000000000000000c [ 500.833501][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 500.842450][ T31] R13: 00007fd014e72f68 R14: 00007fd014e73010 R15: 0000000000000000 [ 500.851721][ T31] [ 500.855000][ T31] INFO: task syz.3.2216:14129 blocked for more than 144 seconds. [ 500.864058][ T31] Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 [ 500.872407][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.881804][ T31] task:syz.3.2216 state:D stack:26888 pid:14129 tgid:14128 ppid:5852 task_flags:0x400040 flags:0x00004004 [ 500.894501][ T31] Call Trace: [ 500.898457][ T31] [ 500.901530][ T31] __schedule+0x16f5/0x4d00 [ 500.906163][ T31] ? __lock_acquire+0xab9/0xd20 [ 500.911962][ T31] ? schedule+0x165/0x360 [ 500.916392][ T31] ? __pfx___schedule+0x10/0x10 [ 500.922409][ T31] ? schedule+0x91/0x360 [ 500.926883][ T31] schedule+0x165/0x360 [ 500.931755][ T31] schedule_preempt_disabled+0x13/0x30 [ 500.938079][ T31] __mutex_lock+0x724/0xe80 [ 500.942722][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 500.948539][ T31] ? __mutex_lock+0x51b/0xe80 [ 500.953279][ T31] ? genl_rcv_msg+0x10d/0x790 [ 500.958883][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 500.964122][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 500.969894][ T31] ? radix_tree_lookup+0x240/0x290 [ 500.975139][ T31] genl_rcv_msg+0x10d/0x790 [ 500.980531][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.985624][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 500.991620][ T31] ? __asan_memcpy+0x40/0x70 [ 500.996352][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 501.002703][ T31] netlink_rcv_skb+0x208/0x470 [ 501.008546][ T31] ? __lock_acquire+0xab9/0xd20 [ 501.013501][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.019746][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.025456][ T31] ? down_read+0x1ad/0x2e0 [ 501.030700][ T31] genl_rcv+0x28/0x40 [ 501.034907][ T31] netlink_unicast+0x82c/0x9e0 [ 501.041167][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 501.046976][ T31] ? netlink_sendmsg+0x642/0xb30 [ 501.052832][ T31] ? skb_put+0x11b/0x210 [ 501.058053][ T31] netlink_sendmsg+0x805/0xb30 [ 501.063299][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.069686][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 501.074903][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.081337][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.086871][ T31] __sock_sendmsg+0x219/0x270 [ 501.092622][ T31] __sys_sendto+0x3bd/0x520 [ 501.098028][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 501.103205][ T31] ? count_memcg_event_mm+0x21/0x260 [ 501.109679][ T31] ? exc_page_fault+0x76/0xf0 [ 501.114872][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 501.121212][ T31] __x64_sys_sendto+0xde/0x100 [ 501.126094][ T31] do_syscall_64+0xfa/0x3b0 [ 501.131736][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.138120][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.144325][ T31] ? clear_bhb_loop+0x60/0xb0 [ 501.150200][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.156637][ T31] RIP: 0033:0x7fa0b099083c [ 501.162536][ T31] RSP: 002b:00007fa0b170dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 501.171440][ T31] RAX: ffffffffffffffda RBX: 00007fa0b170dfc0 RCX: 00007fa0b099083c [ 501.180357][ T31] RDX: 0000000000000020 RSI: 00007fa0b170e010 RDI: 0000000000000004 [ 501.188634][ T31] RBP: 0000000000000000 R08: 00007fa0b170df14 R09: 000000000000000c [ 501.196959][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 501.206570][ T31] R13: 00007fa0b170df68 R14: 00007fa0b170e010 R15: 0000000000000000 [ 501.215849][ T31] [ 501.220125][ T31] [ 501.220125][ T31] Showing all locks held in the system: [ 501.229244][ T31] 1 lock held by khungtaskd/31: [ 501.234421][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 501.245749][ T31] 2 locks held by getty/5610: [ 501.251511][ T31] #0: ffff888030d550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 501.262388][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 501.273144][ T31] 2 locks held by kworker/u9:3/5855: [ 501.279268][ T31] #0: ffff8880254f3148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 501.291504][ T31] #1: ffffc9000409fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 501.304424][ T31] 3 locks held by syz.2.2206/14090: [ 501.310674][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.320114][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.330302][ T31] #2: ffff888142b60a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 501.341767][ T31] 2 locks held by syz.1.2207/14095: [ 501.347947][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.356405][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.366416][ T31] 2 locks held by syz.4.2208/14100: [ 501.372349][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.381715][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.391805][ T31] 2 locks held by syz.0.2213/14116: [ 501.398328][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.406697][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.416365][ T31] 2 locks held by syz.3.2216/14129: [ 501.422342][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.432402][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.442590][ T31] 2 locks held by syz-executor/14137: [ 501.448749][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.457717][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.467109][ T31] 2 locks held by syz-executor/14139: [ 501.472512][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.480978][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.490859][ T31] 2 locks held by syz-executor/14141: [ 501.496321][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.505214][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.514909][ T31] 2 locks held by syz-executor/14143: [ 501.521230][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.530244][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.540144][ T31] 2 locks held by syz-executor/14149: [ 501.545561][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.554994][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.565004][ T31] 2 locks held by syz-executor/14184: [ 501.571340][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.580641][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.590690][ T31] 2 locks held by syz-executor/14195: [ 501.596181][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.605244][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.615831][ T31] 2 locks held by syz-executor/14197: [ 501.622140][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.631384][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.641774][ T31] 2 locks held by syz-executor/14200: [ 501.648217][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.656561][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.666320][ T31] 2 locks held by syz-executor/14202: [ 501.672161][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.681217][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.691102][ T31] 2 locks held by syz-executor/14234: [ 501.696583][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.705649][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.715506][ T31] 2 locks held by syz-executor/14246: [ 501.721912][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.730921][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.740875][ T31] 2 locks held by syz-executor/14248: [ 501.746263][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.754751][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.764192][ T31] 2 locks held by syz-executor/14250: [ 501.769949][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.779297][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.789559][ T31] 2 locks held by syz-executor/14252: [ 501.795235][ T31] #0: ffffffff8f583f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.804521][ T31] #1: ffffffff8f583d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 501.814342][ T31] [ 501.816788][ T31] ============================================= [ 501.816788][ T31] [ 501.826101][ T31] NMI backtrace for cpu 1 [ 501.826120][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 501.826138][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.826147][ T31] Call Trace: [ 501.826153][ T31] [ 501.826161][ T31] dump_stack_lvl+0x189/0x250 [ 501.826182][ T31] ? __wake_up_klogd+0xd9/0x110 [ 501.826205][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.826223][ T31] ? __pfx__printk+0x10/0x10 [ 501.826252][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 501.826275][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 501.826293][ T31] ? _printk+0xcf/0x120 [ 501.826320][ T31] ? __pfx__printk+0x10/0x10 [ 501.826347][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 501.826363][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 501.826386][ T31] watchdog+0xfee/0x1030 [ 501.826407][ T31] ? watchdog+0x1de/0x1030 [ 501.826437][ T31] kthread+0x70e/0x8a0 [ 501.826460][ T31] ? __pfx_watchdog+0x10/0x10 [ 501.826472][ T31] ? __pfx_kthread+0x10/0x10 [ 501.826494][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.826516][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.826530][ T31] ? __pfx_kthread+0x10/0x10 [ 501.826551][ T31] ret_from_fork+0x3fc/0x770 [ 501.826568][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 501.826588][ T31] ? __switch_to_asm+0x39/0x70 [ 501.826607][ T31] ? __switch_to_asm+0x33/0x70 [ 501.826625][ T31] ? __pfx_kthread+0x10/0x10 [ 501.826646][ T31] ret_from_fork_asm+0x1a/0x30 [ 501.826680][ T31] [ 501.826686][ T31] Sending NMI from CPU 1 to CPUs 0: [ 501.999104][ C0] NMI backtrace for cpu 0 [ 501.999123][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 501.999145][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.999157][ C0] Workqueue: bat_events batadv_nc_worker [ 501.999189][ C0] RIP: 0010:lock_acquire+0xb9/0x360 [ 501.999210][ C0] Code: 8c 24 04 0e 00 0f 84 fa 00 00 00 65 8b 05 8f b4 02 11 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 b0 a0 92 83 b8 ec 0a 00 00 00 <0f> 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 [ 501.999225][ C0] RSP: 0018:ffffc90000127980 EFLAGS: 00000246 [ 501.999240][ C0] RAX: ffff88801d2a8000 RBX: 0000000000000000 RCX: 99608c6a1c284600 [ 501.999253][ C0] RDX: 0000000000000000 RSI: ffffffff8b3dc87f RDI: 1ffffffff1c27e1c [ 501.999265][ C0] RBP: ffffffff8b3dc862 R08: 0000000000000000 R09: 0000000000000000 [ 501.999276][ C0] R10: dffffc0000000000 R11: ffffffff8b3dc790 R12: 0000000000000002 [ 501.999288][ C0] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000000 [ 501.999299][ C0] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 501.999313][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.999325][ C0] CR2: 00005568b0c5a650 CR3: 000000000df38000 CR4: 00000000003526f0 [ 501.999341][ C0] Call Trace: [ 501.999350][ C0] [ 501.999363][ C0] ? batadv_nc_worker+0xd2/0x610 [ 501.999389][ C0] ? batadv_nc_worker+0xd2/0x610 [ 501.999413][ C0] batadv_nc_worker+0xef/0x610 [ 501.999437][ C0] ? batadv_nc_worker+0xd2/0x610 [ 501.999462][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 501.999484][ C0] process_scheduled_works+0xae1/0x17b0 [ 501.999520][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 501.999549][ C0] worker_thread+0x8a0/0xda0 [ 501.999584][ C0] kthread+0x70e/0x8a0 [ 501.999616][ C0] ? __pfx_worker_thread+0x10/0x10 [ 501.999636][ C0] ? __pfx_kthread+0x10/0x10 [ 501.999660][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.999685][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.999701][ C0] ? __pfx_kthread+0x10/0x10 [ 501.999725][ C0] ret_from_fork+0x3fc/0x770 [ 501.999745][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 501.999767][ C0] ? __switch_to_asm+0x39/0x70 [ 501.999790][ C0] ? __switch_to_asm+0x33/0x70 [ 501.999811][ C0] ? __pfx_kthread+0x10/0x10 [ 501.999834][ C0] ret_from_fork_asm+0x1a/0x30 [ 501.999866][ C0] [ 502.000234][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 502.247804][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 502.259764][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.270183][ T31] Call Trace: [ 502.273868][ T31] [ 502.276860][ T31] dump_stack_lvl+0x99/0x250 [ 502.281569][ T31] ? __asan_memcpy+0x40/0x70 [ 502.286548][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.292503][ T31] ? __pfx__printk+0x10/0x10 [ 502.297420][ T31] panic+0x2db/0x790 [ 502.301796][ T31] ? __pfx_panic+0x10/0x10 [ 502.306381][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 502.312405][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 502.317997][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 502.324710][ T31] watchdog+0x102d/0x1030 [ 502.329495][ T31] ? watchdog+0x1de/0x1030 [ 502.333931][ T31] kthread+0x70e/0x8a0 [ 502.338047][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.342761][ T31] ? __pfx_kthread+0x10/0x10 [ 502.347487][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.352863][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.358271][ T31] ? __pfx_kthread+0x10/0x10 [ 502.363011][ T31] ret_from_fork+0x3fc/0x770 [ 502.367983][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 502.373640][ T31] ? __switch_to_asm+0x39/0x70 [ 502.378653][ T31] ? __switch_to_asm+0x33/0x70 [ 502.383529][ T31] ? __pfx_kthread+0x10/0x10 [ 502.388333][ T31] ret_from_fork_asm+0x1a/0x30 [ 502.393329][ T31] [ 502.396831][ T31] Kernel Offset: disabled [ 502.401264][ T31] Rebooting in 86400 seconds..