last executing test programs: 19.451386305s ago: executing program 2 (id=835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) socket$inet6(0xa, 0x6, 0xe915) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[], 0x3e) 19.091238295s ago: executing program 4 (id=840): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000620000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xd}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) 18.938791638s ago: executing program 4 (id=842): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000003f5fa4c286734dc52e84b37d710012c8cac43f08b43b9dfe530a6f4fcf3e3700dd39222d6c64b8518d7a6c3425d12b299ba1f925b4010248dfcf5a7d2a82c80ed7cda0a99d7e9e7aa2ea9f37f848ee4378f9129ac8b8fd3024352b05c368871d7d97c648277a630f4cf2f58d3c7edd4d9efd52c8a5cbd551df111763bdc8f12da8bfc4bd8acccb124699ffe87e9ee0ff8e08bf0f068e149158596cb3d9b01ff592d07224430cf4d60402bc9430b8f4fe81c874b71f3c2281498ebde468d06fa788c0f589db718d2d236aaed7864521b49a961567231d912eea1061c8471a515dbfb8e3cad45cfcd1195353", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @broadcast, 0x0, 0x0, 'sh\x00', 0xb, 0x56a0, 0x400026b}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb018093dae00000010000e2507f8696b55e70a4ab449fe61c84445114d50af5dba10fee87bd18cdc622d7acac5e9b7edbaa6714266d2ba29663399574fbacbe44774290b6dd136469eada712ea6760a47986ed660752befec839be42fc28d403d6a133b7b6c44537c9b38e55ec9c645528009c96439380fbb6465ba369457348e47bdeb90352204e7c9416bb087253835fa1fa5600560451e7d4c7d05d827bb0d0b622de6e78953a52b61d6cdec424323d1bbebc7fdaef04425ae2354e85f64095cf5c16fbb362aaf3443a4b7d12204377bdc640d14"], 0x0, 0x2a, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value}, 0x28) (async, rerun: 64) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 18.811342582s ago: executing program 1 (id=843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r0}, 0x0, 0x0, 0x406}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000010000000000000008"], 0x24}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) 18.742867737s ago: executing program 4 (id=844): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='rpc_socket_nospace\x00', r0, 0x0, 0xa33}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(r2) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a0006000000080016000200000008001000000400000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000740)=""/68, 0x44}], 0x3) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x201, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}, 'lo\x00'}}, 0x1e) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002500)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x44845}], 0x1, 0x8810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae"], 0x1c}}, 0x0) sendmmsg(r5, &(0x7f0000001cc0), 0x400000000000026, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES16, @ANYRESOCT=r2, @ANYRES16=r3, @ANYBLOB="0db89c8a5beb8e93f7901ced90b01ab7bee2af25d8fee81952373bcea9883a0ddd4dbc6c6abf1cd3e0382fe3f625247638753c5ac2cc929b174541bb3612903983134ad2e0c2ed6de1b755ae5126135a9359508ce16fb23099f4fe956c2663f8d5d4b36fc29ac7d54a55f150ea7ad839f6dd754d99eda75526b7da1bc993ca3bedf6313489e16de1d8e1fbe4fc41d9aec44c0b395e764028d7ed3025cba00a269b27fac5c8ea749e1a1acf2c101e027027043fe3f34077fb8ad3efbe778c44ac979bf3a973b99762bb0c5cdaf1f73f938c2ce2c99b0995f7fc058a29481f9e60"], 0x80}, 0x1, 0x0, 0x0, 0x24008011}, 0x20008000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8090) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x3, 0x4, 0x0, 0x1, {0xa, 0x4e20, 0x8, @mcast2, 0x101}}}, 0x3a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000000), &(0x7f0000000380)=r9}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000080ffffff9500000000000000bc6a00000100000018470000020000000000000000000000950000000000000018430000f9ffffff00000000000000000643bf000300000018140000", @ANYRES32=0x1, @ANYBLOB="0000000009000000185200000100"/24], &(0x7f0000000540)='GPL\x00', 0x40, 0x0, &(0x7f0000000580), 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000003c0)=[{r4, 0x80a0}, {r1, 0x1400}, {r6, 0xe384}, {r2, 0x2}, {0xffffffffffffffff, 0x2390}, {r4, 0xd108}, {r1, 0x2610}, {r1, 0x408b}], 0x8, &(0x7f0000000440), &(0x7f0000000480)={[0x4ce]}, 0x8) 16.935556026s ago: executing program 1 (id=845): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x1d, &(0x7f0000000680)=0x1, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a8dd928788b502b5ad764f23d1d45759", 0x10) r1 = socket$isdn(0x22, 0x3, 0x21) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) listen(r2, 0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xc, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'bond0\x00', {0x7fffffff}, 0x200}) 16.931707493s ago: executing program 3 (id=846): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r1) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r2, 0x0, 0x1}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) pselect6(0x0, 0x0, 0x0, &(0x7f0000000580)={0x7, 0xfffffffffffffffc, 0x9, 0x0, 0xffff, 0xaee3, 0x5}, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={[0x2]}, 0x8}) 16.87124604s ago: executing program 4 (id=847): syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5915ceb6b9", 0x5}], 0x1}, 0x20000011) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 16.870851415s ago: executing program 0 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x46}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x480000008000f28, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 16.869376537s ago: executing program 2 (id=849): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x0, 0xec6}]}, 0xc0}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @broadcast}], 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x3, 'wrr\x00', 0x39, 0x4, 0x200072}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x5, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010002, 0x4e23, 0x2000000, 0x0, 0x12d5f, 0x12d5c}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d000701000000000000000002"], 0x24}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0xfffff000}, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) recvfrom$l2tp(r7, &(0x7f0000000b00)=""/4096, 0x1000, 0x40002001, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{&(0x7f0000000440)={0xa, 0x4e22, 0xffffff7f, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000600)="1b", 0x1}], 0x1}}], 0x1, 0x400c0c0) 16.763747315s ago: executing program 1 (id=850): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001010080190001"], 0x114}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5, 0x800}, [@RTA_TABLE={0x8, 0xf, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5, 0x800}, [@RTA_TABLE={0x8, 0xf, 0x1}]}, 0x24}}, 0x0) mmap(&(0x7f0000308000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x61e81000) (async) mmap(&(0x7f0000308000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x61e81000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe) recvmmsg(r6, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x40011001, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x0, 0x4}}) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x0, 0x4}}) vmsplice(r5, 0x0, 0x0, 0x8) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000280)={{0x2, 0x4e20, @loopback}, {0x6, @local}, 0x30, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'wlan0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x24000084}, 0x4000084) setsockopt(r2, 0x10d, 0x10, &(0x7f0000000040)="001dd0d6", 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x20}}, 0x44850) 16.723676467s ago: executing program 4 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="fc000000190001190000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500fe8000000000000000000000000000aa000000003c00000000000000fc0100"/180], 0xfc}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 16.62734117s ago: executing program 2 (id=852): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x41}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) socket$isdn(0x22, 0x3, 0x3) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x8, 0x0, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) 16.550570978s ago: executing program 4 (id=853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffff000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0x10, 0x80003, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmsg$unix(r6, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'sit0\x00'}) ioctl(r6, 0x9, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) listen(r7, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000", @ANYBLOB], 0x90}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20000001) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000000)) 16.510774784s ago: executing program 2 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000001c0), 0x4) 16.451209955s ago: executing program 1 (id=855): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000001c0), &(0x7f0000000040)=0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b3002c37b5b8784e8b0952f6a402e0d6e967fe90be2c85e2fe7a718fadd0d47c85626eedd1d59069ce26a66021f779ad3f8774fc5bc4499f4b954846dcd12b172a791f18ce7c178324043adec02922563f9f352b7101f0f96315efd7a9256b60e0528112be1ad07d15548d60a707f99a", @ANYRES16=r1, @ANYRES64=r6], 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x80) 16.197632324s ago: executing program 1 (id=856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000600)={r1, 0x2, 0x1, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x17, &(0x7f0000000640)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf17}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xf7, &(0x7f0000000040)=""/247, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x23, 0x2, 0x5) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x18, 0x140d, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 16.153988393s ago: executing program 2 (id=857): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000240001000000000000000000000000000600040000fee4"], 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x1e, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000140), 0x6) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x140008d0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000fee000), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8800000001010104000000000000000002000000240001801400018008000100ac1e000108000200e000"], 0x88}}, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x105}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x20050800) 15.994960995s ago: executing program 1 (id=858): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0xa5, 0x4, 0x7, 0x41, @private0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x40, 0x40, 0x9, 0x6}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40051}, 0x24004044) r3 = socket(0x15, 0xa, 0x3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000380), 0x10) sendmmsg$alg(r3, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="8faf97130cc4a9bcbbc7534f9da63eaab6056163310cc7df603246e28c7e86f949241e6142346e51f5ebade990b02ac0cabc6399cb567415b3083ad1d0758aa0552920c98f302a6f9c53bfb47d74523866be5d693a7d66db66c5831f8719e063c2c1f53c318bfa0e5df19680b2410fbe7076a59491bcb3700c67bf9f75950901", 0x80}, {&(0x7f0000000440)="e8254b3cabeb1f8ddcd56bbcc7916bf4732f8c08c1ad8106cefba976f3a0d9150f59cf48940f2613ba3874aa56ed41ef482cacd75ab2284c7f935f4d43ffb33787c457850efbc7b287635e489d2e86f871ef9cd3d18c7eb510b824dff1ecb0c7b2da749d25583eb610ab7c4ece4cd240a8b90ba4314b3b9c9ce656436bd1d97255961e978ec6b71fad531288b4c9c77678270c4d7db4cc7cd88a2a8485e09fed309523405901a3cd5c73adfd9fcae059f343857a1048f782041f91b39a5b", 0xbe}, {&(0x7f0000000500)="162dab6ce3e99b57af642ed9a42b1af249ae2ce61bb2c03da52519e4129d32f686a967b389fb0a975eb7e478b2864eec94426e1b7a354110bd4c5c0fd2446b200ee9c8494a92d1e9", 0x48}, {&(0x7f0000000580)="cf3b621a1b1bbd9d0d3a5bcdeef7b5f7e1804005febc9f4fac900214a0a8ad8f9d6c5d4e483baf4fc703ec7bd7d4157bfc36e28ef96e1d97fc81bc4f5b8e2d304c6dd61df0c89135482132", 0x4b}, {&(0x7f0000000600)="14d0f4e635aa480c174e6d6f95076f795e6417e9b0a7c49103670156171dbc9bcc6be9096b3f90619abfdc2ea9a471fcc230a1802a262263e00ae36568b75a37f0a645f92f8d4562d840ac0204774b135f40baa9a68e4439aad19b660048d064d6d08704b344bcb34dffef41086daea64bdda6a0c2b14754c3474172229c8a32e5e4be893b3f26b7f36ae7ae6f015de4e4cfd0e9740064034d89c8e5cfdd9615e5b12d9cd1e7902102936307281ed2c0e80c27cc35dd367782fe7b518564a25ee1f9a1f85b2ba94c462d3a60fa104b6249ed5da0deaa3f7c227bb57114219bba8911525f629980d436beadb99a6c2d18e4d4ec72db7620b5228e", 0xfa}, {&(0x7f0000000700)="5bc4f0972f48c42cbe433c053d2067ae0f7a5bb6db625fdba8d9d415d9fcef76630219f05205f0fec00193d99777286ad156304522592af9b46c3d38f571047a28", 0x41}, {&(0x7f0000000780)="063055b8b1ea7ae9ee05aa17ef1ab9808ed5cbf2a07ce236aacc2bb815306ff3502d6a705868b8d6cf2ad91c10f44db3a51d59445bfec7587e4a2adea45405eab7ae8012184765eb52", 0x49}, {&(0x7f0000000800)="cff09cbb9aad86ffb4673205701fb32b478c87686aaf6fd7a5968744a78a6bb32c504312847b0ef5c42a169b13dc5b892d3e63748268e17f7ef36322efe265eddd14068dba9dcd124e7558782d49ec2037b6707c2d00fbd2d530e9e3d604b07cab7f539e01c4d8ad4e2ec2435138e2faaa2a7974f3a630ddfc850a7e6bd936362ab21c3c676aabde47d900d912777c359c06", 0x92}, {&(0x7f00000008c0)="5ca365d9657923c169fe03170cb0a88ebf623f46fbb1e2a19b63a341a66bac41593cb9f22289d535772d54d6b6660296730672a8797caf310f374f07ea2e8a75740a753aad9430a4196132278f8ed30a39dd1234ea6c20d82641f6d9acc0b89caf8899d5bc998734acf3cf50a116358c38d8a6357c286fcfb776b0ec07e0430094dd1345163f72b173232b765becc7231355fe1cdf4059df", 0x98}], 0x9, &(0x7f0000000a40)=[@iv={0x40, 0x117, 0x2, 0x27, "149a892f53b27878158a55e4c938d38a411b232b92c6d2b7ab64620402770ffaeb4c44d90c3806"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x1b, "9b3f4c1775fc36d87e72abbcd48e13c16404cc9d95c03e6f3056a7"}, @iv={0x18, 0x117, 0x2, 0x1, "cd"}], 0xa0, 0x4004010}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b00)="9415de5fc6d78894202e1472718d80ff4f1db0383a4da55588f4d9337d209fd195c1faed21fcbf1b316f905a35d0d0598a3f98b435b3d9a84418799ab88918c64e954b5ba0c4b6e47fb9cf99be46ca62a109edd550b24f0fc26d2d9390c435407fe1d8fb389e13c8c304970090134d09f1e312c7a83d0612f58ef839271b0722ea1c66e1f08a91af65", 0x89}, {&(0x7f0000000bc0)="cf66caa6886e18cc867d90274dea3fdc2b385be54e3df48d83ae67d4b61083b82a9ba9d143cd32f4ce8a517ad1f75fb433891d3dbe41ef9b3643da2cbd0ab95df4d3f214ca9499d2448d736b0bd8e21306007b058405efbcef1a92be1c25fc176f01df57d4e980da935aeb540b443302e28e3f31e095ee7d3f", 0x79}, {&(0x7f0000000c40)="95f6eb5fa93bafdf174fb3ab71154ce00c4d780093a944f07b7d1dac0b0f7e8e395ef88aaf29a0f2709686d39b702a825e83a87255e0fb4ace7ee5c8923138e326b0f1afd0e23c3402b500f63ae89eb6be91314cce5a4dfab53965913b2917c93383d72c97a7d0e6e90da03b3a7f99c4aa659ffba4d2b9b8", 0x78}, {&(0x7f0000000cc0)="4e809b5f8fe82b05268dfed26e2481906c5498040e5e9726acc9d650f831fde32242c02a2458f103a00f53c8eab95977d2a0b899d3f58e36c4af0347", 0x3c}], 0x4, 0x0, 0x0, 0x20008894}, {0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d40)="57cb2876e689a3b3debc4c063e7c5b68cca71845ba0bf9d317fb3286ccf492066b6f73af2d45d3636a959918cb1a62c972fbb81a0f062cb923f958ef61214aa9ca64938cb8aa1bb4a36c2831ef11c5df30c89593a842e8fc00e51acd18c3ea05f63c341b94dae05bd905db0973234b0ed06a3ec2d6a7a43fec216c504aa96cd04ae115c7cec27cbee5d204a2d94f5a9d176671a0dee07f9fbd0db6544c367966a7e4fbc137fa9acb333bbfd5cc742c44f84ee771015a44a4a861c5beafa5c420036fdc31310a7d83c82e30e5f39339f1021fd2", 0xd3}, {&(0x7f0000000e40)="d0ed9286849465449347cb9254af70b3815dd78c8fc7d7fc0d394d9ca726f894b63c79f93fcb6e8ca61651d92c6952d41a251911069195d78763427097aff376b0f19e1d99773f9a62aaa5c1359cf421e0b0e39ab45d2275c5d5d49d6441397fc0a45bc94acca2e958200b6297ee5eea32eac3dc574cc35435153e6336d7192c16268d85802f316a1649e51f8485ad3b0004", 0x92}, {&(0x7f0000000f00)="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", 0xfc}], 0x3, &(0x7f0000001040)=[@assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4040}], 0x3, 0x4040) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f0000001780)={&(0x7f0000001280)=@nfc, 0x80, &(0x7f0000001700)=[{&(0x7f0000001300)=""/5, 0x5}, {&(0x7f0000001340)=""/255, 0xff}, {&(0x7f0000001440)=""/207, 0xcf}, {&(0x7f0000001540)=""/97, 0x61}, {&(0x7f00000015c0)=""/115, 0x73}, {&(0x7f0000001640)=""/139, 0x8b}], 0x6}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001800), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1b}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf12}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x466}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) close(r7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="484cbbefa423"}]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x24000005) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000001a80)={0x9, 0x8}) writev(r7, &(0x7f0000001c40)=[{&(0x7f0000001ac0)="1a9020d1251cd1dd2b3a9437fdf0e65646960b121813111d94ec257d8587e12e8f993d809a5694dcfd860d5499", 0x2d}, {&(0x7f0000001b00)="85aadb2bef0a295ffbcd49913cea60523c023758330f4dfea24ce0f462c71d05d79dd1f16321b2a7ca5742bd810809b03a7e9588dbc276525453d4294405055883b440c9f0104cfa1b798dac7aa49f20c313cf94a35bf76ffe0faaa222d95046ce33a45358b7a5de9bc3cc4a665772255ec14f6c36d002f1f7259b2c17f1e6a1eafd13516c02ec7673ff24ccd564c2d7f4c9093f783a00d196e7a143172f94e2e153a45341d527f8eb3df3e98372c4e3ad6a2f913ea93f9ec34364b4c50740a5793953a0a92b232d53fcee6564a4", 0xce}, {&(0x7f0000001c00)="97ef6d4eb12160e04796e9f8c0c6f85aaaf756f5137b202dda92613b87c7d023a864ec4a7781b44a814a9dce0d229f124a84080af54d774ba21efcd1", 0x3c}], 0x3) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x5c, r10, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x65}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xd4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x61}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r11 = accept$netrom(r3, &(0x7f0000001e00)={{0x3, @rose}, [@rose, @netrom, @null, @default, @bcast, @netrom, @default, @netrom]}, &(0x7f0000001e80)=0x48) r12 = gettid() r13 = getuid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, &(0x7f0000001f00)=0xc) setsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000001f40)={r12, r13, r14}, 0xc) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000001f80)=0x201080, 0x4) 15.993289112s ago: executing program 3 (id=859): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x1f]}}, 0x5c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x5, 0x8, 0x2, 0x1ff}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae00000000000000001c"], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000800000000088a8000081000000080600000000060000010180c2000000aaaaaaaaaabb"], 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'nicvf0\x00', @multicast}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0}}, @rdma_map={0x30, 0x114, 0x2, {{0x0}, 0x0}}], 0x60}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="10530400002000001c0012800b00010062726964676500000c000280050019000000000088c0145bfebe893e3864c09d26536365077dd3138db24ec4f6eecc6f4b0abd5b9af28587e5"], 0x3c}}, 0x8080) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0xb1) r7 = accept(r6, 0x0, 0x0) recvmsg(r7, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 15.983645922s ago: executing program 2 (id=860): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r1, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x8, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x40, 0x80, 0x7, 0x2, {{0x12, 0x4, 0x2, 0x5, 0x48, 0x65, 0x0, 0xdc, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@timestamp={0x44, 0x8, 0xec, 0x0, 0x5, [0x26]}, @timestamp_addr={0x44, 0x1c, 0x58, 0x1, 0x7, [{@rand_addr=0x2, 0x8b1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x84}, {@rand_addr=0x64010102, 0x4}]}, @noop, @timestamp_addr={0x44, 0xc, 0xaa, 0x1, 0x8, [{@empty, 0x1}]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x9faf, 0x9, 0x3ff, 0x3600, r2, 0x2, '\x00', r4, r5, 0x2, 0x1, 0x3, 0x3, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r6, &(0x7f00000001c0), &(0x7f0000000180)=@udp6, 0x2}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003d0007010000000000000000047c0000040000000c000180"], 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="f0c406defd959d5054d628320f03", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000680)={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x9, 0x3, 0xf9, 0x600, 0x10000, 0x704006c}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006a0001", @ANYRESDEC=r10], 0x20}}, 0x4000000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c80000000"], 0x24}], 0x1}, 0x0) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x190}], 0xfdfe, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000008038e68ea312a5cfa6a33ca8a44d53fedce3240b55c17a47918df2126248f0af1b32d9fdccd745ed3a9b1d3d4150465e24b6ba06fb819680e569c79cb7c0", @ANYRES16=r12, @ANYBLOB="00022abd7000fcdbdf250c000000050038000000000005002d000000000005002f0001000000050033000100000008000b000400000008000b0006000000050035000500000008003b0004000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15.907986017s ago: executing program 0 (id=861): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', r1, 0x2f, 0xff, 0x0, 0xe, 0x54, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x80000000, 0x4}}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000120000032abd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="805200002404000008402300010106000000605eda00"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', r1, 0x2f, 0xff, 0x0, 0xe, 0x54, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x80, 0x80000000, 0x4}}) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000120000032abd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="805200002404000008402300010106000000605eda00"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 15.735152875s ago: executing program 0 (id=862): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) listen(r0, 0x400) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0x1}, 0x8) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x2}, 0x1}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x20000800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f00000003c0)=@raw=[@alu={0x7, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000400)='GPL\x00', 0x2, 0x56, &(0x7f0000000440)=""/86, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x2, 0x80000000, 0xfffffffe}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x4, 0x4, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x9}, {0x5, 0x1, 0x9, 0x1}], 0x10, 0x6486, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000000)=0x5, 0x12) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x12, r6, 0x0) sendfile(r7, r6, 0x0, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='svc_unregister\x00', r4, 0x0, 0x4}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 15.733989928s ago: executing program 3 (id=863): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) (async, rerun: 32) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020000000808000000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="c16b"], 0x80}}, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x201003, 0x1, 0x2, 0xd, 0x0, 0x1000}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) 15.564034969s ago: executing program 0 (id=864): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8d, 0x7, 0x7b6, 0x4, @empty, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8000, 0x8000, 0x9, 0x196}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x10, 0x80, 0x7, 0x8, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0x80, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x11}, {[@end]}}}}}) 15.549969556s ago: executing program 3 (id=865): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x7, 0x4, 0x4a0, 0x3b8, 0x1e8, 0x1e8, 0x3b8, 0x1e8, 0x3b8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3, 0x0, {}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0xff03, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}}}, {{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0xc, 0x0, {@empty, {[0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 'team_slave_0\x00', 'veth0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'geneve1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4f0) 15.431271574s ago: executing program 0 (id=866): syz_emit_ethernet(0x69, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="85", 0x1}, {&(0x7f0000000440)="a216c485b09810246e7a960a62884ad1af18ef598afbf50c5f73d09b2ab171599eceeebd", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000005bc0)="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", 0x136}, {&(0x7f0000000800)="01aa53d5015febfb0b5dfa07aba124bfdab77d6b265b4545400da52023d8baf8654d584cdbcfd5713c5765d1e87b0fcdef8404cef3e051f630280e0248e16c7e9e9bc9812aa0ab535ccb756852f1947662c15d010baa0b1c1f1e933ceb1dffe58588179994051e8b7f005c6b04c526092de299184c0055749ac7f50406e63993d3825c50b15857249d0c7116682627f4e2fe831fa4a9c1818a261b3918247bc90992414c8e618b6bf5c3c43b65f6a3b5546409fc5cbccfe70329b73b186f1fd046ea52edc73ec4981ee4a44120ec8f8db504bcb8512d3b95137b383df32dff32efa503bbb10c2e9eca028d201aa3e86825bf0f5b72cb1963aba8261c7b4f9cc3ca69cdc41a3a6c073263ab3cd17a5e6d99c97804b8f39e87a9684cb979abeecd5510cd9e308317454f654736ab398d7248906dd507ae525e90cd00befc8dce6633f06e16a67eea974143b8e261af41e457a15b91c8f94ffac4d6920be6fc5940011b974861670e822dca589459676f5f9d80336876a229dd5cf8000000000075b1f5bf922c5e368e8590fd8a39f9a815dc8c5e22089cc71af73a56baf2e7fee9e6e79dcbf177b162a641a6df2c2024e7d217f7c62a6c0d4c6b2fd39f205393d0ba6746645c8608db4be52cbbbb9b56bae71bc786340cd60fc899c9856430f5ed68333563541a8ac6066b465d4b2e5305bfa9e9a765d1250dace7576a0eff", 0x1fe}, {&(0x7f00000005c0)="0ce32eab78ca3c4a7bc73e96c2990c9002babb5c34c1327440eabea6ae3692de3f41d3d9844da1b530df4dd239e13f15a6dda935ca94a167891f42edbfd16936c296e72222691c9fda05000000000000001ddad55470c0ac33967e5b3ec0e1b2a078bab634369f7773cad684cb3e9eed9cbbc67f0000", 0x76}, {&(0x7f00000058c0)="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", 0x1dd}], 0x4}}], 0x2, 0xc880) sendto$inet6(r1, &(0x7f0000000040)='2', 0x1, 0x0, 0x0, 0x0) 15.430891687s ago: executing program 3 (id=867): r0 = socket(0x10, 0x3, 0x0) unshare(0x4000400) r1 = socket$rds(0x15, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x1010, r2, 0x8cb9d000) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 15.374902791s ago: executing program 3 (id=868): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}]}]}]}, 0x34}}, 0x8400) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x880, &(0x7f0000000bc0)={0xa, 0x4e24, 0x6, @mcast1, 0x9}, 0x4e) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000490001002bbd7000000000000a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x37) (async) close(r8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, 0x0, &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r9, r10, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r9}, 0x0, &(0x7f0000000140)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.313057827s ago: executing program 0 (id=869): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711242000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x100000000000, 0x20, 0x0, 0x0, 0x8001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000001640)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686, @ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800005a000000007b5af8ff00000000bfa200000000000007020000f8ffffff03000008000000b70400000000000085000000540000009500000000000000c5a6ca2b5b639c799be356eb7c21570420598826f90dc839012bf662c670cbef79acda48a3aa7bfadfd9697731c470e6d7e0b44465dbafa34fe5b92bc67f09ee599eff581a649ea24427e612d9b13acb49d832a9eb07b50885e677f2766fa01e2459659ec5b1522bfdd5d934906ed75678bb99a500"], &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004cfe050000000000002f77fbac141416e000030a94079f03b1800044020510e0845013f2325f003909050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff3e}, 0x2c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r6) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000400)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0100000004001000050000000300000001000000653a042183411fe328cfedafb03561f23905c4672cdd2d597d93f110e68749af550736edbd3c853f2dc6f71c8831b3f3e2c14f70f91884b6b77dab802ef57b27a877362121a83dab9b132e52e2757826b7e43289ed4e26b2fb0b5051ed037bc74b8731f1b07269a40832759797fc12fe6053224d41c551f580d1c15f15f674ce31b7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r10}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r10, &(0x7f00000001c0), &(0x7f00000002c0)=""/211}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000011240)={'batadv_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 642.862256ms ago: executing program 32 (id=858): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0xa5, 0x4, 0x7, 0x41, @private0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x40, 0x40, 0x9, 0x6}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40051}, 0x24004044) r3 = socket(0x15, 0xa, 0x3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000380), 0x10) sendmmsg$alg(r3, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="8faf97130cc4a9bcbbc7534f9da63eaab6056163310cc7df603246e28c7e86f949241e6142346e51f5ebade990b02ac0cabc6399cb567415b3083ad1d0758aa0552920c98f302a6f9c53bfb47d74523866be5d693a7d66db66c5831f8719e063c2c1f53c318bfa0e5df19680b2410fbe7076a59491bcb3700c67bf9f75950901", 0x80}, {&(0x7f0000000440)="e8254b3cabeb1f8ddcd56bbcc7916bf4732f8c08c1ad8106cefba976f3a0d9150f59cf48940f2613ba3874aa56ed41ef482cacd75ab2284c7f935f4d43ffb33787c457850efbc7b287635e489d2e86f871ef9cd3d18c7eb510b824dff1ecb0c7b2da749d25583eb610ab7c4ece4cd240a8b90ba4314b3b9c9ce656436bd1d97255961e978ec6b71fad531288b4c9c77678270c4d7db4cc7cd88a2a8485e09fed309523405901a3cd5c73adfd9fcae059f343857a1048f782041f91b39a5b", 0xbe}, {&(0x7f0000000500)="162dab6ce3e99b57af642ed9a42b1af249ae2ce61bb2c03da52519e4129d32f686a967b389fb0a975eb7e478b2864eec94426e1b7a354110bd4c5c0fd2446b200ee9c8494a92d1e9", 0x48}, {&(0x7f0000000580)="cf3b621a1b1bbd9d0d3a5bcdeef7b5f7e1804005febc9f4fac900214a0a8ad8f9d6c5d4e483baf4fc703ec7bd7d4157bfc36e28ef96e1d97fc81bc4f5b8e2d304c6dd61df0c89135482132", 0x4b}, {&(0x7f0000000600)="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", 0xfa}, {&(0x7f0000000700)="5bc4f0972f48c42cbe433c053d2067ae0f7a5bb6db625fdba8d9d415d9fcef76630219f05205f0fec00193d99777286ad156304522592af9b46c3d38f571047a28", 0x41}, {&(0x7f0000000780)="063055b8b1ea7ae9ee05aa17ef1ab9808ed5cbf2a07ce236aacc2bb815306ff3502d6a705868b8d6cf2ad91c10f44db3a51d59445bfec7587e4a2adea45405eab7ae8012184765eb52", 0x49}, {&(0x7f0000000800)="cff09cbb9aad86ffb4673205701fb32b478c87686aaf6fd7a5968744a78a6bb32c504312847b0ef5c42a169b13dc5b892d3e63748268e17f7ef36322efe265eddd14068dba9dcd124e7558782d49ec2037b6707c2d00fbd2d530e9e3d604b07cab7f539e01c4d8ad4e2ec2435138e2faaa2a7974f3a630ddfc850a7e6bd936362ab21c3c676aabde47d900d912777c359c06", 0x92}, {&(0x7f00000008c0)="5ca365d9657923c169fe03170cb0a88ebf623f46fbb1e2a19b63a341a66bac41593cb9f22289d535772d54d6b6660296730672a8797caf310f374f07ea2e8a75740a753aad9430a4196132278f8ed30a39dd1234ea6c20d82641f6d9acc0b89caf8899d5bc998734acf3cf50a116358c38d8a6357c286fcfb776b0ec07e0430094dd1345163f72b173232b765becc7231355fe1cdf4059df", 0x98}], 0x9, &(0x7f0000000a40)=[@iv={0x40, 0x117, 0x2, 0x27, "149a892f53b27878158a55e4c938d38a411b232b92c6d2b7ab64620402770ffaeb4c44d90c3806"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x1b, "9b3f4c1775fc36d87e72abbcd48e13c16404cc9d95c03e6f3056a7"}, @iv={0x18, 0x117, 0x2, 0x1, "cd"}], 0xa0, 0x4004010}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b00)="9415de5fc6d78894202e1472718d80ff4f1db0383a4da55588f4d9337d209fd195c1faed21fcbf1b316f905a35d0d0598a3f98b435b3d9a84418799ab88918c64e954b5ba0c4b6e47fb9cf99be46ca62a109edd550b24f0fc26d2d9390c435407fe1d8fb389e13c8c304970090134d09f1e312c7a83d0612f58ef839271b0722ea1c66e1f08a91af65", 0x89}, {&(0x7f0000000bc0)="cf66caa6886e18cc867d90274dea3fdc2b385be54e3df48d83ae67d4b61083b82a9ba9d143cd32f4ce8a517ad1f75fb433891d3dbe41ef9b3643da2cbd0ab95df4d3f214ca9499d2448d736b0bd8e21306007b058405efbcef1a92be1c25fc176f01df57d4e980da935aeb540b443302e28e3f31e095ee7d3f", 0x79}, {&(0x7f0000000c40)="95f6eb5fa93bafdf174fb3ab71154ce00c4d780093a944f07b7d1dac0b0f7e8e395ef88aaf29a0f2709686d39b702a825e83a87255e0fb4ace7ee5c8923138e326b0f1afd0e23c3402b500f63ae89eb6be91314cce5a4dfab53965913b2917c93383d72c97a7d0e6e90da03b3a7f99c4aa659ffba4d2b9b8", 0x78}, {&(0x7f0000000cc0)="4e809b5f8fe82b05268dfed26e2481906c5498040e5e9726acc9d650f831fde32242c02a2458f103a00f53c8eab95977d2a0b899d3f58e36c4af0347", 0x3c}], 0x4, 0x0, 0x0, 0x20008894}, {0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d40)="57cb2876e689a3b3debc4c063e7c5b68cca71845ba0bf9d317fb3286ccf492066b6f73af2d45d3636a959918cb1a62c972fbb81a0f062cb923f958ef61214aa9ca64938cb8aa1bb4a36c2831ef11c5df30c89593a842e8fc00e51acd18c3ea05f63c341b94dae05bd905db0973234b0ed06a3ec2d6a7a43fec216c504aa96cd04ae115c7cec27cbee5d204a2d94f5a9d176671a0dee07f9fbd0db6544c367966a7e4fbc137fa9acb333bbfd5cc742c44f84ee771015a44a4a861c5beafa5c420036fdc31310a7d83c82e30e5f39339f1021fd2", 0xd3}, {&(0x7f0000000e40)="d0ed9286849465449347cb9254af70b3815dd78c8fc7d7fc0d394d9ca726f894b63c79f93fcb6e8ca61651d92c6952d41a251911069195d78763427097aff376b0f19e1d99773f9a62aaa5c1359cf421e0b0e39ab45d2275c5d5d49d6441397fc0a45bc94acca2e958200b6297ee5eea32eac3dc574cc35435153e6336d7192c16268d85802f316a1649e51f8485ad3b0004", 0x92}, {&(0x7f0000000f00)="8acef81abfee7717c876802feb9f0c08be97b3542ba3bfe77e1cd81f3936d781168bfa88831ffd8c86dc1ba3880b5ed3984b1d3fd61b35127cb05d6fb8feb697667eed29e9fd2eb89632627df94fdbad15b5c7bffac3de177aa33a3d6b549a1195a1ebdac7d603661619d0c13b15f97bfe40418def2b68b00d5ded5b037069b21b3b362a7d546bce8f2e0a782cc27788339991b5c36c8aeb27c158249e687f1fcdca40faca97e246800256e279bd40bdcf68e6d0b9602592da6f1e9a09e2a1bea8cb07841c031c93d6558df5d53e195f63606adf50b65158f2e4816ac1abff1cce50cd1ecb6b842ada591eedce77850c642e9e278de167da1d60bde0", 0xfc}], 0x3, &(0x7f0000001040)=[@assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4040}], 0x3, 0x4040) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f0000001780)={&(0x7f0000001280)=@nfc, 0x80, &(0x7f0000001700)=[{&(0x7f0000001300)=""/5, 0x5}, {&(0x7f0000001340)=""/255, 0xff}, {&(0x7f0000001440)=""/207, 0xcf}, {&(0x7f0000001540)=""/97, 0x61}, {&(0x7f00000015c0)=""/115, 0x73}, {&(0x7f0000001640)=""/139, 0x8b}], 0x6}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001800), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1b}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf12}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x466}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) close(r7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="484cbbefa423"}]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x24000005) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000001a80)={0x9, 0x8}) writev(r7, &(0x7f0000001c40)=[{&(0x7f0000001ac0)="1a9020d1251cd1dd2b3a9437fdf0e65646960b121813111d94ec257d8587e12e8f993d809a5694dcfd860d5499", 0x2d}, {&(0x7f0000001b00)="85aadb2bef0a295ffbcd49913cea60523c023758330f4dfea24ce0f462c71d05d79dd1f16321b2a7ca5742bd810809b03a7e9588dbc276525453d4294405055883b440c9f0104cfa1b798dac7aa49f20c313cf94a35bf76ffe0faaa222d95046ce33a45358b7a5de9bc3cc4a665772255ec14f6c36d002f1f7259b2c17f1e6a1eafd13516c02ec7673ff24ccd564c2d7f4c9093f783a00d196e7a143172f94e2e153a45341d527f8eb3df3e98372c4e3ad6a2f913ea93f9ec34364b4c50740a5793953a0a92b232d53fcee6564a4", 0xce}, {&(0x7f0000001c00)="97ef6d4eb12160e04796e9f8c0c6f85aaaf756f5137b202dda92613b87c7d023a864ec4a7781b44a814a9dce0d229f124a84080af54d774ba21efcd1", 0x3c}], 0x3) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x5c, r10, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x65}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xd4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x61}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r11 = accept$netrom(r3, &(0x7f0000001e00)={{0x3, @rose}, [@rose, @netrom, @null, @default, @bcast, @netrom, @default, @netrom]}, &(0x7f0000001e80)=0x48) r12 = gettid() r13 = getuid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, &(0x7f0000001f00)=0xc) setsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000001f40)={r12, r13, r14}, 0xc) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000001f80)=0x201080, 0x4) 582.819082ms ago: executing program 33 (id=860): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r1, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x8, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x40, 0x80, 0x7, 0x2, {{0x12, 0x4, 0x2, 0x5, 0x48, 0x65, 0x0, 0xdc, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@timestamp={0x44, 0x8, 0xec, 0x0, 0x5, [0x26]}, @timestamp_addr={0x44, 0x1c, 0x58, 0x1, 0x7, [{@rand_addr=0x2, 0x8b1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x84}, {@rand_addr=0x64010102, 0x4}]}, @noop, @timestamp_addr={0x44, 0xc, 0xaa, 0x1, 0x8, [{@empty, 0x1}]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x9faf, 0x9, 0x3ff, 0x3600, r2, 0x2, '\x00', r4, r5, 0x2, 0x1, 0x3, 0x3, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r6, &(0x7f00000001c0), &(0x7f0000000180)=@udp6, 0x2}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003d0007010000000000000000047c0000040000000c000180"], 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="f0c406defd959d5054d628320f03", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000680)={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x9, 0x3, 0xf9, 0x600, 0x10000, 0x704006c}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006a0001", @ANYRESDEC=r10], 0x20}}, 0x4000000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c80000000"], 0x24}], 0x1}, 0x0) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x190}], 0xfdfe, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000008038e68ea312a5cfa6a33ca8a44d53fedce3240b55c17a47918df2126248f0af1b32d9fdccd745ed3a9b1d3d4150465e24b6ba06fb819680e569c79cb7c0", @ANYRES16=r12, @ANYBLOB="00022abd7000fcdbdf250c000000050038000000000005002d000000000005002f0001000000050033000100000008000b000400000008000b0006000000050035000500000008003b0004000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) 526.426125ms ago: executing program 34 (id=853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffff000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0x10, 0x80003, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmsg$unix(r6, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'sit0\x00'}) ioctl(r6, 0x9, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) listen(r7, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000", @ANYBLOB], 0x90}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20000001) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000000)) 86.948319ms ago: executing program 35 (id=869): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711242000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x100000000000, 0x20, 0x0, 0x0, 0x8001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000001640)=ANY=[@ANYBLOB="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"/686, @ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800005a000000007b5af8ff00000000bfa200000000000007020000f8ffffff03000008000000b70400000000000085000000540000009500000000000000c5a6ca2b5b639c799be356eb7c21570420598826f90dc839012bf662c670cbef79acda48a3aa7bfadfd9697731c470e6d7e0b44465dbafa34fe5b92bc67f09ee599eff581a649ea24427e612d9b13acb49d832a9eb07b50885e677f2766fa01e2459659ec5b1522bfdd5d934906ed75678bb99a500"], &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004cfe050000000000002f77fbac141416e000030a94079f03b1800044020510e0845013f2325f003909050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff3e}, 0x2c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r6) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000400)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0100000004001000050000000300000001000000653a042183411fe328cfedafb03561f23905c4672cdd2d597d93f110e68749af550736edbd3c853f2dc6f71c8831b3f3e2c14f70f91884b6b77dab802ef57b27a877362121a83dab9b132e52e2757826b7e43289ed4e26b2fb0b5051ed037bc74b8731f1b07269a40832759797fc12fe6053224d41c551f580d1c15f15f674ce31b7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r10}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r10, &(0x7f00000001c0), &(0x7f00000002c0)=""/211}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000011240)={'batadv_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 0s ago: executing program 36 (id=868): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}]}]}]}, 0x34}}, 0x8400) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x880, &(0x7f0000000bc0)={0xa, 0x4e24, 0x6, @mcast1, 0x9}, 0x4e) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000490001002bbd7000000000000a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x37) (async) close(r8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, 0x0, &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r9, r10, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r9}, 0x0, &(0x7f0000000140)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): pe 2 family 0 port 6081 - 0 [ 81.620381][ T5918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'. [ 81.622831][ T5837] veth1_macvtap: entered promiscuous mode [ 81.658902][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.673998][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.719138][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.752736][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.805040][ T5918] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6'. [ 81.814350][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 81.834089][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.845404][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.857829][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.869351][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.879365][ T5145] Bluetooth: hci1: command tx timeout [ 81.879429][ T5145] Bluetooth: hci0: command tx timeout [ 81.885629][ T54] Bluetooth: hci3: command tx timeout [ 81.891270][ T5145] Bluetooth: hci4: command tx timeout [ 81.896775][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.912085][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.922189][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.932998][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.945765][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.967864][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.970605][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.981369][ T5145] Bluetooth: hci2: command tx timeout [ 81.986606][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.032385][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.052205][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.062955][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.073382][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.084037][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.094365][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.105558][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.117662][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.137908][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.156842][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.172360][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.181307][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.265992][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.280881][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.284017][ T5926] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 82.299703][ T5926] bridge1: entered promiscuous mode [ 82.311668][ T5926] bridge1: entered allmulticast mode [ 82.344271][ T5929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.427558][ T5926] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.487826][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.508262][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.635750][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.694490][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.739868][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.755831][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.828978][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 82.837985][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.854981][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.239784][ T5948] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 83.247792][ T5948] netlink: 'syz.2.10': attribute type 2 has an invalid length. [ 83.264057][ T5948] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 83.270927][ T5948] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 83.324821][ T5950] netlink: 'syz.1.2': attribute type 7 has an invalid length. [ 83.355400][ T5950] netlink: 'syz.1.2': attribute type 8 has an invalid length. [ 83.553990][ T5954] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.952052][ T54] Bluetooth: hci3: command tx timeout [ 83.952907][ T5832] Bluetooth: hci0: command tx timeout [ 83.957545][ T5846] Bluetooth: hci1: command tx timeout [ 83.968634][ T5846] Bluetooth: hci4: command tx timeout [ 84.032240][ T5846] Bluetooth: hci2: command tx timeout [ 84.160505][ T5977] Zero length message leads to an empty skb [ 84.210925][ T5983] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20002 [ 84.718313][ T6007] netlink: 76 bytes leftover after parsing attributes in process `syz.4.25'. [ 84.773083][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 84.812227][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 84.815933][ T6008] ip6t_rpfilter: unknown options [ 84.870037][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.146474][ T6026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29'. [ 85.191849][ T6025] netlink: 'syz.2.30': attribute type 9 has an invalid length. [ 85.463520][ T6039] syz.4.33 uses obsolete (PF_INET,SOCK_PACKET) [ 85.512422][ T6038] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 85.567911][ T6038] netlink: 'syz.4.33': attribute type 4 has an invalid length. [ 85.623678][ T6038] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.33'. [ 86.048889][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 86.396297][ T6078] syzkaller1: entered promiscuous mode [ 86.414367][ T6078] syzkaller1: entered allmulticast mode [ 86.438925][ T6074] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 86.670907][ T6074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.913441][ T6100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.44'. [ 86.938865][ T6074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.983770][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 86.995620][ T46] cfg80211: failed to load regulatory.db [ 87.008357][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 87.037471][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.44'. [ 87.252215][ T6074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.341583][ T6112] netlink: 'syz.3.47': attribute type 9 has an invalid length. [ 87.574155][ T6074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.711256][ T6126] netlink: 52 bytes leftover after parsing attributes in process `syz.0.49'. [ 88.165620][ T6141] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.190228][ T6074] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.217948][ T6141] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 88.278270][ T6074] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.384315][ T6074] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.478256][ T6155] netlink: 48 bytes leftover after parsing attributes in process `syz.0.55'. [ 88.518481][ T6074] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.029805][ T6171] netlink: 'syz.1.58': attribute type 6 has an invalid length. [ 89.149517][ T6173] netlink: 'syz.2.59': attribute type 10 has an invalid length. [ 89.164743][ T6173] team0: Device veth1_macvtap failed to register rx_handler [ 89.179828][ T6173] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 89.187643][ T6173] netlink: 224 bytes leftover after parsing attributes in process `syz.2.59'. [ 89.384855][ T6185] netlink: 88 bytes leftover after parsing attributes in process `syz.4.63'. [ 89.394518][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 89.746216][ T6198] dccp_invalid_packet: P.Data Offset(0) too small [ 89.758682][ T6202] netlink: 'syz.0.68': attribute type 9 has an invalid length. [ 89.774977][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 90.188801][ T6214] netlink: 'syz.0.72': attribute type 6 has an invalid length. [ 90.204133][ T6218] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 90.231829][ T6220] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 90.878298][ T6253] netlink: 'syz.3.82': attribute type 9 has an invalid length. [ 90.977303][ T6256] bridge_slave_0: left allmulticast mode [ 90.995263][ T6256] bridge_slave_0: left promiscuous mode [ 91.062554][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.096474][ T6256] bridge_slave_1: left allmulticast mode [ 91.118740][ T6256] bridge_slave_1: left promiscuous mode [ 91.136094][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.175678][ T6256] bond0: (slave bond_slave_0): Releasing backup interface [ 91.190679][ T6256] bond0: (slave bond_slave_1): Releasing backup interface [ 91.219994][ T6256] team0: Port device team_slave_0 removed [ 91.240524][ T6256] team0: Port device team_slave_1 removed [ 91.260223][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.274335][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.289121][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.300633][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.422272][ T6269] netlink: 'syz.0.87': attribute type 6 has an invalid length. [ 91.711131][ T6279] tipc: Started in network mode [ 91.716480][ T6279] tipc: Node identity , cluster identity 4711 [ 92.001685][ T6292] __nla_validate_parse: 3 callbacks suppressed [ 92.001707][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 92.145078][ T6295] Bluetooth: MGMT ver 1.23 [ 92.192738][ T6302] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 92.370692][ T6312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.95'. [ 92.990773][ T6333] openvswitch: netlink: Actions may not be safe on all matching packets [ 94.463574][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 94.524731][ C1] Unknown status report in ack skb [ 94.605822][ T5887] IPVS: starting estimator thread 0... [ 94.621717][ T6351] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 94.723214][ T6357] IPVS: using max 21 ests per chain, 50400 per kthread [ 94.770294][ T6363] validate_nla: 1 callbacks suppressed [ 94.770316][ T6363] netlink: 'syz.4.112': attribute type 9 has an invalid length. [ 95.071398][ T6364] netlink: 72 bytes leftover after parsing attributes in process `syz.2.111'. [ 95.375268][ T6385] netlink: 'syz.4.114': attribute type 6 has an invalid length. [ 95.395555][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 95.742111][ T6349] delete_channel: no stack [ 96.470833][ T6416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.478519][ T6416] IPv6: NLM_F_CREATE should be set when creating new route [ 96.953572][ T6426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.130'. [ 96.980784][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 97.082835][ T1106] wlan1: Trigger new scan to find an IBSS to join [ 98.010584][ T6446] dummy0: entered promiscuous mode [ 98.182869][ T6450] netlink: 'syz.3.139': attribute type 9 has an invalid length. [ 98.314030][ T6446] dummy0: left promiscuous mode [ 98.518625][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 98.530758][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 99.565394][ T6479] x_tables: ip_tables: udp match: only valid for protocol 17 [ 99.933439][ T6490] bridge0: port 3(ipvlan2) entered blocking state [ 99.965545][ T6490] bridge0: port 3(ipvlan2) entered disabled state [ 99.984507][ T6490] ipvlan2: entered allmulticast mode [ 99.996969][ T6490] bridge0: entered allmulticast mode [ 100.013889][ T6490] ipvlan2: left allmulticast mode [ 100.027116][ T6490] bridge0: left allmulticast mode [ 100.247417][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.148'. [ 100.417988][ T6493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.501564][ T6498] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 100.509429][ T6505] netlink: 'syz.0.150': attribute type 9 has an invalid length. [ 100.550293][ T6498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.557646][ T6498] IPv6: NLM_F_CREATE should be set when creating new route [ 100.582386][ T6502] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 100.590368][ T6502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.674845][ T6509] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20002 [ 101.084478][ T52] wlan1: Trigger new scan to find an IBSS to join [ 102.124711][ T52] wlan1: Creating new IBSS network, BSSID fe:d7:4e:42:11:7f [ 102.156118][ T6535] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.170686][ T6535] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 102.361320][ T6541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.158'. [ 102.546848][ T6549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.373721][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 103.401666][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 105.258745][ T6605] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 105.292038][ T6605] macvtap1: entered promiscuous mode [ 105.379718][ T6606] geneve0: entered promiscuous mode [ 105.410205][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 105.475523][ T6606] geneve0: left promiscuous mode [ 105.608694][ T6605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.176'. [ 105.653035][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 106.063653][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 107.355612][ T6661] netlink: 'syz.4.187': attribute type 10 has an invalid length. [ 107.529426][ T6672] IPv6: addrconf: prefix option has invalid lifetime [ 107.539533][ T6673] FAULT_INJECTION: forcing a failure. [ 107.539533][ T6673] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.553678][ T6673] CPU: 0 UID: 0 PID: 6673 Comm: syz.3.190 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 107.564329][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 107.574435][ T6673] Call Trace: [ 107.577754][ T6673] [ 107.580745][ T6673] dump_stack_lvl+0x241/0x360 [ 107.585497][ T6673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.590216][ T6661] team0: Device veth1_macvtap failed to register rx_handler [ 107.590730][ T6673] ? __pfx__printk+0x10/0x10 [ 107.590771][ T6673] ? __pfx_lock_release+0x10/0x10 [ 107.607720][ T6673] should_fail_ex+0x3b0/0x4e0 [ 107.612437][ T6673] _copy_from_user+0x2f/0xc0 [ 107.617053][ T6673] do_arpt_set_ctl+0x759/0x1650 [ 107.621920][ T6673] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 107.627237][ T6673] ? __pfx___mutex_trylock_common+0x10/0x10 [ 107.633167][ T6673] ? nf_setsockopt+0x240/0x2c0 [ 107.637948][ T6673] ? __pfx_lock_release+0x10/0x10 [ 107.642989][ T6673] ? rcu_is_watching+0x15/0xb0 [ 107.647792][ T6673] ? __mutex_unlock_slowpath+0x21e/0x790 [ 107.653478][ T6673] ? __pfx___mutex_lock+0x10/0x10 [ 107.658521][ T6673] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.664520][ T6673] ? aa_sk_perm+0x96d/0xab0 [ 107.669056][ T6673] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.673929][ T6673] nf_setsockopt+0x295/0x2c0 [ 107.678538][ T6673] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 107.684442][ T6673] do_sock_setsockopt+0x3af/0x720 [ 107.689489][ T6673] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 107.695050][ T6673] ? __fget_files+0x395/0x410 [ 107.699742][ T6673] ? __fget_files+0x2a/0x410 [ 107.704353][ T6673] __x64_sys_setsockopt+0x1ee/0x280 [ 107.709568][ T6673] do_syscall_64+0xf3/0x230 [ 107.714107][ T6673] ? clear_bhb_loop+0x35/0x90 [ 107.718805][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.724727][ T6673] RIP: 0033:0x7fe5a0585d29 [ 107.729171][ T6673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.748874][ T6673] RSP: 002b:00007fe5a13b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.757305][ T6673] RAX: ffffffffffffffda RBX: 00007fe5a0775fa0 RCX: 00007fe5a0585d29 [ 107.765291][ T6673] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 107.773268][ T6673] RBP: 00007fe5a13b2090 R08: 00000000000004f0 R09: 0000000000000000 [ 107.781245][ T6673] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000001 [ 107.789315][ T6673] R13: 0000000000000000 R14: 00007fe5a0775fa0 R15: 00007ffc774275a8 [ 107.797322][ T6673] [ 107.889608][ T6677] netlink: 'syz.4.187': attribute type 1 has an invalid length. [ 107.930314][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 107.944146][ T6682] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 107.965471][ T6677] netlink: 224 bytes leftover after parsing attributes in process `syz.4.187'. [ 108.117724][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 108.219252][ T6682] tap0: tun_chr_ioctl cmd 1074025677 [ 108.235140][ T6682] tap0: linktype set to 778 [ 108.389715][ T6702] netlink: 'syz.2.193': attribute type 9 has an invalid length. [ 108.421662][ T6702] FAULT_INJECTION: forcing a failure. [ 108.421662][ T6702] name failslab, interval 1, probability 0, space 0, times 1 [ 108.438587][ T6702] CPU: 1 UID: 0 PID: 6702 Comm: syz.2.193 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 108.449243][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 108.459341][ T6702] Call Trace: [ 108.462660][ T6702] [ 108.465635][ T6702] dump_stack_lvl+0x241/0x360 [ 108.470367][ T6702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.475617][ T6702] ? __pfx__printk+0x10/0x10 [ 108.480264][ T6702] ? __kmalloc_cache_noprof+0x48/0x390 [ 108.485783][ T6702] ? __pfx___might_resched+0x10/0x10 [ 108.491112][ T6702] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 108.497753][ T6702] ? kobject_set_name_vargs+0x61/0x120 [ 108.503267][ T6702] should_fail_ex+0x3b0/0x4e0 [ 108.507992][ T6702] should_failslab+0xac/0x100 [ 108.512718][ T6702] __kmalloc_cache_noprof+0x70/0x390 [ 108.518050][ T6702] ? device_add+0xc1/0xbf0 [ 108.522517][ T6702] device_add+0xc1/0xbf0 [ 108.526812][ T6702] device_create+0x257/0x2e0 [ 108.531456][ T6702] ? __pfx_device_create+0x10/0x10 [ 108.536635][ T6702] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 108.542919][ T6702] mac80211_hwsim_new_radio+0x3e5/0x4a90 [ 108.548605][ T6702] ? _printk+0xd5/0x120 [ 108.552802][ T6702] ? __nla_validate_parse+0x4f4/0x3090 [ 108.558292][ T6702] ? __pfx__printk+0x10/0x10 [ 108.562915][ T6702] ? stack_depot_save_flags+0x37/0x940 [ 108.568401][ T6702] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 108.574502][ T6702] hwsim_new_radio_nl+0xece/0x2290 [ 108.579657][ T6702] ? __pfx___nla_validate_parse+0x10/0x10 [ 108.585399][ T6702] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 108.590992][ T6702] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 108.597384][ T6702] genl_rcv_msg+0xb14/0xec0 [ 108.601946][ T6702] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.607033][ T6702] ? __pfx_lock_acquire+0x10/0x10 [ 108.612074][ T6702] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 108.617641][ T6702] ? __pfx___might_resched+0x10/0x10 [ 108.622947][ T6702] netlink_rcv_skb+0x1e3/0x430 [ 108.627726][ T6702] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.632795][ T6702] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.638118][ T6702] genl_rcv+0x28/0x40 [ 108.642119][ T6702] netlink_unicast+0x7f6/0x990 [ 108.646901][ T6702] ? __pfx_netlink_unicast+0x10/0x10 [ 108.652191][ T6702] ? __virt_addr_valid+0x45f/0x530 [ 108.657320][ T6702] ? __phys_addr_symbol+0x2f/0x70 [ 108.662379][ T6702] ? __check_object_size+0x47a/0x730 [ 108.667701][ T6702] netlink_sendmsg+0x8e4/0xcb0 [ 108.672493][ T6702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.677826][ T6702] ? aa_sock_msg_perm+0x91/0x160 [ 108.682775][ T6702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.688073][ T6702] __sock_sendmsg+0x221/0x270 [ 108.692784][ T6702] ____sys_sendmsg+0x52a/0x7e0 [ 108.697565][ T6702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.702865][ T6702] ? __fget_files+0x2a/0x410 [ 108.707476][ T6702] ? __fget_files+0x2a/0x410 [ 108.712086][ T6702] __sys_sendmsg+0x269/0x350 [ 108.716695][ T6702] ? __pfx_lock_release+0x10/0x10 [ 108.721744][ T6702] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.726896][ T6702] ? __pfx_vfs_write+0x10/0x10 [ 108.731718][ T6702] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.738072][ T6702] ? do_syscall_64+0x100/0x230 [ 108.742870][ T6702] ? do_syscall_64+0xb6/0x230 [ 108.747573][ T6702] do_syscall_64+0xf3/0x230 [ 108.752103][ T6702] ? clear_bhb_loop+0x35/0x90 [ 108.756819][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.762744][ T6702] RIP: 0033:0x7fe3e4185d29 [ 108.767176][ T6702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.786883][ T6702] RSP: 002b:00007fe3e500b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.795377][ T6702] RAX: ffffffffffffffda RBX: 00007fe3e4375fa0 RCX: 00007fe3e4185d29 [ 108.803384][ T6702] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 108.811376][ T6702] RBP: 00007fe3e500b090 R08: 0000000000000000 R09: 0000000000000000 [ 108.819367][ T6702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.827362][ T6702] R13: 0000000000000000 R14: 00007fe3e4375fa0 R15: 00007ffff83ba678 [ 108.835362][ T6702] [ 109.295632][ T6737] FAULT_INJECTION: forcing a failure. [ 109.295632][ T6737] name failslab, interval 1, probability 0, space 0, times 0 [ 109.324160][ T6737] CPU: 1 UID: 0 PID: 6737 Comm: syz.3.202 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 109.329428][ T6739] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 109.334804][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 109.334823][ T6737] Call Trace: [ 109.334834][ T6737] [ 109.334843][ T6737] dump_stack_lvl+0x241/0x360 [ 109.334881][ T6737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.334910][ T6737] ? __pfx__printk+0x10/0x10 [ 109.334939][ T6737] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 109.334970][ T6737] ? __pfx___might_resched+0x10/0x10 [ 109.334996][ T6737] should_fail_ex+0x3b0/0x4e0 [ 109.335023][ T6737] should_failslab+0xac/0x100 [ 109.335051][ T6737] __kmalloc_node_noprof+0xe1/0x4d0 [ 109.335077][ T6737] ? apparmor_capable+0x13b/0x1b0 [ 109.335102][ T6737] ? __kvmalloc_node_noprof+0x72/0x190 [ 109.335128][ T6737] __kvmalloc_node_noprof+0x72/0x190 [ 109.335151][ T6737] xt_alloc_table_info+0x3d/0xa0 [ 109.335179][ T6737] do_arpt_set_ctl+0xb84/0x1650 [ 109.427119][ T6737] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 109.432456][ T6737] ? __pfx___mutex_trylock_common+0x10/0x10 [ 109.438407][ T6737] ? nf_setsockopt+0x240/0x2c0 [ 109.443220][ T6737] ? __pfx_lock_release+0x10/0x10 [ 109.448283][ T6737] ? rcu_is_watching+0x15/0xb0 [ 109.453105][ T6737] ? __mutex_unlock_slowpath+0x21e/0x790 [ 109.458784][ T6737] ? __pfx___mutex_lock+0x10/0x10 [ 109.463852][ T6737] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.470047][ T6737] ? aa_sk_perm+0x96d/0xab0 [ 109.474612][ T6737] ? __pfx_aa_sk_perm+0x10/0x10 [ 109.479517][ T6737] nf_setsockopt+0x295/0x2c0 [ 109.480616][ T6747] netlink: 'syz.2.204': attribute type 21 has an invalid length. [ 109.484136][ T6737] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 109.484164][ T6737] do_sock_setsockopt+0x3af/0x720 [ 109.484201][ T6737] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 109.484235][ T6737] ? __fget_files+0x395/0x410 [ 109.484266][ T6737] ? __fget_files+0x2a/0x410 [ 109.484304][ T6737] __x64_sys_setsockopt+0x1ee/0x280 [ 109.499244][ T6747] netlink: 128 bytes leftover after parsing attributes in process `syz.2.204'. [ 109.502930][ T6737] do_syscall_64+0xf3/0x230 [ 109.502968][ T6737] ? clear_bhb_loop+0x35/0x90 [ 109.503004][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.503034][ T6737] RIP: 0033:0x7fe5a0585d29 [ 109.503056][ T6737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.503075][ T6737] RSP: 002b:00007fe5a13b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.503101][ T6737] RAX: ffffffffffffffda RBX: 00007fe5a0775fa0 RCX: 00007fe5a0585d29 [ 109.519137][ T6747] netlink: 'syz.2.204': attribute type 4 has an invalid length. [ 109.523082][ T6737] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 109.523101][ T6737] RBP: 00007fe5a13b2090 R08: 00000000000004f0 R09: 0000000000000000 [ 109.523117][ T6737] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000001 [ 109.523131][ T6737] R13: 0000000000000000 R14: 00007fe5a0775fa0 R15: 00007ffc774275a8 [ 109.523163][ T6737] [ 109.681899][ T6747] netlink: 3 bytes leftover after parsing attributes in process `syz.2.204'. [ 109.808527][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.839451][ T6762] netlink: 'syz.2.207': attribute type 9 has an invalid length. [ 109.868041][ T6762] FAULT_INJECTION: forcing a failure. [ 109.868041][ T6762] name failslab, interval 1, probability 0, space 0, times 0 [ 109.917692][ T6762] CPU: 1 UID: 0 PID: 6762 Comm: syz.2.207 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 109.928358][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 109.938460][ T6762] Call Trace: [ 109.941771][ T6762] [ 109.944739][ T6762] dump_stack_lvl+0x241/0x360 [ 109.949497][ T6762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.954754][ T6762] ? __pfx__printk+0x10/0x10 [ 109.959407][ T6762] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 109.965978][ T6762] ? __pfx___might_resched+0x10/0x10 [ 109.971314][ T6762] should_fail_ex+0x3b0/0x4e0 [ 109.976030][ T6762] should_failslab+0xac/0x100 [ 109.980763][ T6762] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 109.987119][ T6762] ? __kernfs_new_node+0x9d/0x870 [ 109.992178][ T6762] kstrdup+0x39/0xb0 [ 109.996106][ T6762] __kernfs_new_node+0x9d/0x870 [ 110.000978][ T6762] ? mark_lock+0x9a/0x360 [ 110.005331][ T6762] ? __lock_acquire+0x1397/0x2100 [ 110.010466][ T6762] ? __pfx___kernfs_new_node+0x10/0x10 [ 110.015984][ T6762] kernfs_new_node+0x137/0x240 [ 110.020819][ T6762] kernfs_create_dir_ns+0x43/0x120 [ 110.025945][ T6762] sysfs_create_dir_ns+0x189/0x3a0 [ 110.031070][ T6762] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 110.036750][ T6762] kobject_add_internal+0x435/0x8d0 [ 110.040167][ T6773] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.210'. [ 110.041987][ T6762] kobject_add+0x152/0x220 [ 110.042049][ T6762] ? kobject_put+0x43d/0x480 [ 110.060127][ T6762] ? __pfx_kobject_add+0x10/0x10 [ 110.065135][ T6762] ? get_device_parent+0x25d/0x410 [ 110.070291][ T6762] ? device_add+0x318/0xbf0 [ 110.074927][ T6762] device_add+0x4e5/0xbf0 [ 110.079295][ T6762] device_create+0x257/0x2e0 [ 110.083918][ T6762] ? __pfx_device_create+0x10/0x10 [ 110.089087][ T6762] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 110.095345][ T6762] mac80211_hwsim_new_radio+0x3e5/0x4a90 [ 110.101011][ T6762] ? _printk+0xd5/0x120 [ 110.105196][ T6762] ? __nla_validate_parse+0x4f4/0x3090 [ 110.110694][ T6762] ? __pfx__printk+0x10/0x10 [ 110.115350][ T6762] ? stack_depot_save_flags+0x37/0x940 [ 110.120861][ T6762] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 110.127001][ T6762] hwsim_new_radio_nl+0xece/0x2290 [ 110.132168][ T6762] ? __pfx___nla_validate_parse+0x10/0x10 [ 110.137926][ T6762] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 110.143527][ T6762] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 110.149883][ T6762] genl_rcv_msg+0xb14/0xec0 [ 110.154426][ T6762] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.159487][ T6762] ? __pfx_lock_acquire+0x10/0x10 [ 110.164545][ T6762] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 110.170117][ T6762] ? __pfx___might_resched+0x10/0x10 [ 110.175424][ T6762] netlink_rcv_skb+0x1e3/0x430 [ 110.180239][ T6762] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.185289][ T6762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.190642][ T6762] genl_rcv+0x28/0x40 [ 110.194685][ T6762] netlink_unicast+0x7f6/0x990 [ 110.199519][ T6762] ? __pfx_netlink_unicast+0x10/0x10 [ 110.204825][ T6762] ? __virt_addr_valid+0x45f/0x530 [ 110.209975][ T6762] ? __phys_addr_symbol+0x2f/0x70 [ 110.215042][ T6762] ? __check_object_size+0x47a/0x730 [ 110.220357][ T6762] netlink_sendmsg+0x8e4/0xcb0 [ 110.225172][ T6762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.230508][ T6762] ? aa_sock_msg_perm+0x91/0x160 [ 110.235572][ T6762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.240903][ T6762] __sock_sendmsg+0x221/0x270 [ 110.245640][ T6762] ____sys_sendmsg+0x52a/0x7e0 [ 110.250439][ T6762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.255754][ T6762] ? __fget_files+0x2a/0x410 [ 110.260424][ T6762] ? __fget_files+0x2a/0x410 [ 110.265105][ T6762] __sys_sendmsg+0x269/0x350 [ 110.269747][ T6762] ? __pfx_lock_release+0x10/0x10 [ 110.274815][ T6762] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.279951][ T6762] ? __pfx_vfs_write+0x10/0x10 [ 110.284793][ T6762] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.291153][ T6762] ? do_syscall_64+0x100/0x230 [ 110.295964][ T6762] ? do_syscall_64+0xb6/0x230 [ 110.300662][ T6762] do_syscall_64+0xf3/0x230 [ 110.305202][ T6762] ? clear_bhb_loop+0x35/0x90 [ 110.309932][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.315865][ T6762] RIP: 0033:0x7fe3e4185d29 [ 110.320291][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.339910][ T6762] RSP: 002b:00007fe3e500b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.348338][ T6762] RAX: ffffffffffffffda RBX: 00007fe3e4375fa0 RCX: 00007fe3e4185d29 [ 110.356321][ T6762] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 110.364299][ T6762] RBP: 00007fe3e500b090 R08: 0000000000000000 R09: 0000000000000000 [ 110.372295][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.380290][ T6762] R13: 0000000000000000 R14: 00007fe3e4375fa0 R15: 00007ffff83ba678 [ 110.388321][ T6762] [ 110.397305][ T6762] kobject: kobject_add_internal failed for hwsim21 (error: -12 parent: mac80211_hwsim) [ 110.413843][ T6772] __nla_validate_parse: 1 callbacks suppressed [ 110.413862][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.209'. [ 110.599925][ T6780] netlink: 1 bytes leftover after parsing attributes in process `syz.0.212'. [ 110.772819][ T6794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.217'. [ 110.783836][ T6792] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 110.784511][ T6794] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 110.800081][ T6794] netlink: 224 bytes leftover after parsing attributes in process `syz.2.217'. [ 110.842689][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 110.959265][ T6806] netlink: 256 bytes leftover after parsing attributes in process `syz.3.220'. [ 110.970753][ T6806] unsupported nlmsg_type 40 [ 111.113964][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 111.137427][ T6816] netlink: 'syz.2.223': attribute type 9 has an invalid length. [ 111.212129][ T6816] FAULT_INJECTION: forcing a failure. [ 111.212129][ T6816] name failslab, interval 1, probability 0, space 0, times 0 [ 111.238698][ T6816] CPU: 1 UID: 0 PID: 6816 Comm: syz.2.223 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 111.249367][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 111.259465][ T6816] Call Trace: [ 111.262782][ T6816] [ 111.265751][ T6816] dump_stack_lvl+0x241/0x360 [ 111.270493][ T6816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.275755][ T6816] ? __pfx__printk+0x10/0x10 [ 111.280397][ T6816] ? kmem_cache_alloc_noprof+0x48/0x380 [ 111.286002][ T6816] ? __pfx___might_resched+0x10/0x10 [ 111.291339][ T6816] should_fail_ex+0x3b0/0x4e0 [ 111.296071][ T6816] should_failslab+0xac/0x100 [ 111.300794][ T6816] ? __kernfs_new_node+0xd8/0x870 [ 111.305847][ T6816] kmem_cache_alloc_noprof+0x70/0x380 [ 111.311279][ T6816] __kernfs_new_node+0xd8/0x870 [ 111.316183][ T6816] ? mark_lock+0x9a/0x360 [ 111.320555][ T6816] ? __lock_acquire+0x1397/0x2100 [ 111.325627][ T6816] ? __pfx___kernfs_new_node+0x10/0x10 [ 111.331159][ T6816] kernfs_new_node+0x137/0x240 [ 111.335984][ T6816] kernfs_create_dir_ns+0x43/0x120 [ 111.341143][ T6816] sysfs_create_dir_ns+0x189/0x3a0 [ 111.346333][ T6816] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 111.352021][ T6816] kobject_add_internal+0x435/0x8d0 [ 111.357288][ T6816] kobject_add+0x152/0x220 [ 111.361762][ T6816] ? kobject_put+0x43d/0x480 [ 111.366420][ T6816] ? __pfx_kobject_add+0x10/0x10 [ 111.371420][ T6816] ? get_device_parent+0x25d/0x410 [ 111.376568][ T6816] ? device_add+0x318/0xbf0 [ 111.381116][ T6816] device_add+0x4e5/0xbf0 [ 111.385579][ T6816] device_create+0x257/0x2e0 [ 111.390222][ T6816] ? __pfx_device_create+0x10/0x10 [ 111.395386][ T6816] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 111.401701][ T6816] mac80211_hwsim_new_radio+0x3e5/0x4a90 [ 111.407411][ T6816] ? _printk+0xd5/0x120 [ 111.411626][ T6816] ? __nla_validate_parse+0x4f4/0x3090 [ 111.417128][ T6816] ? __pfx__printk+0x10/0x10 [ 111.421748][ T6816] ? stack_depot_save_flags+0x37/0x940 [ 111.427237][ T6816] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 111.433431][ T6816] hwsim_new_radio_nl+0xece/0x2290 [ 111.438574][ T6816] ? __pfx___nla_validate_parse+0x10/0x10 [ 111.444319][ T6816] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 111.449908][ T6816] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 111.456266][ T6816] genl_rcv_msg+0xb14/0xec0 [ 111.460810][ T6816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.465878][ T6816] ? __pfx_lock_acquire+0x10/0x10 [ 111.470913][ T6816] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 111.476487][ T6816] ? __pfx___might_resched+0x10/0x10 [ 111.481794][ T6816] netlink_rcv_skb+0x1e3/0x430 [ 111.486576][ T6816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.491626][ T6816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.496948][ T6816] genl_rcv+0x28/0x40 [ 111.500946][ T6816] netlink_unicast+0x7f6/0x990 [ 111.505734][ T6816] ? __pfx_netlink_unicast+0x10/0x10 [ 111.511029][ T6816] ? __virt_addr_valid+0x45f/0x530 [ 111.516161][ T6816] ? __phys_addr_symbol+0x2f/0x70 [ 111.521211][ T6816] ? __check_object_size+0x47a/0x730 [ 111.526521][ T6816] netlink_sendmsg+0x8e4/0xcb0 [ 111.531313][ T6816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.536640][ T6816] ? aa_sock_msg_perm+0x91/0x160 [ 111.541611][ T6816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.547009][ T6816] __sock_sendmsg+0x221/0x270 [ 111.551721][ T6816] ____sys_sendmsg+0x52a/0x7e0 [ 111.556509][ T6816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.561812][ T6816] ? __fget_files+0x2a/0x410 [ 111.566427][ T6816] ? __fget_files+0x2a/0x410 [ 111.571037][ T6816] __sys_sendmsg+0x269/0x350 [ 111.575642][ T6816] ? __pfx_lock_release+0x10/0x10 [ 111.580683][ T6816] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.585837][ T6816] ? __pfx_vfs_write+0x10/0x10 [ 111.590652][ T6816] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.597005][ T6816] ? do_syscall_64+0x100/0x230 [ 111.601788][ T6816] ? do_syscall_64+0xb6/0x230 [ 111.606483][ T6816] do_syscall_64+0xf3/0x230 [ 111.611025][ T6816] ? clear_bhb_loop+0x35/0x90 [ 111.615723][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.621633][ T6816] RIP: 0033:0x7fe3e4185d29 [ 111.626060][ T6816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.645683][ T6816] RSP: 002b:00007fe3e500b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.654114][ T6816] RAX: ffffffffffffffda RBX: 00007fe3e4375fa0 RCX: 00007fe3e4185d29 [ 111.662097][ T6816] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 111.670076][ T6816] RBP: 00007fe3e500b090 R08: 0000000000000000 R09: 0000000000000000 [ 111.678054][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.686031][ T6816] R13: 0000000000000000 R14: 00007fe3e4375fa0 R15: 00007ffff83ba678 [ 111.694124][ T6816] [ 111.757095][ T6816] kobject: kobject_add_internal failed for hwsim22 (error: -12 parent: mac80211_hwsim) [ 111.982548][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 112.415705][ T6861] netlink: 'syz.0.240': attribute type 9 has an invalid length. [ 112.826454][ T6869] delete_channel: no stack [ 113.142932][ T6896] batadv_slave_1: entered promiscuous mode [ 113.159834][ T6895] batadv_slave_1: left promiscuous mode [ 113.304128][ T6902] netlink: 'syz.3.253': attribute type 9 has an invalid length. [ 113.328985][ T6902] FAULT_INJECTION: forcing a failure. [ 113.328985][ T6902] name failslab, interval 1, probability 0, space 0, times 0 [ 113.351708][ T6902] CPU: 0 UID: 0 PID: 6902 Comm: syz.3.253 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 113.362381][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 113.372476][ T6902] Call Trace: [ 113.375806][ T6902] [ 113.378786][ T6902] dump_stack_lvl+0x241/0x360 [ 113.383526][ T6902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.388775][ T6902] ? __pfx__printk+0x10/0x10 [ 113.393418][ T6902] ? kmem_cache_alloc_noprof+0x48/0x380 [ 113.399015][ T6902] ? __pfx___might_resched+0x10/0x10 [ 113.404353][ T6902] should_fail_ex+0x3b0/0x4e0 [ 113.409087][ T6902] should_failslab+0xac/0x100 [ 113.413814][ T6902] ? __kernfs_new_node+0xd8/0x870 [ 113.418880][ T6902] kmem_cache_alloc_noprof+0x70/0x380 [ 113.424304][ T6902] __kernfs_new_node+0xd8/0x870 [ 113.429213][ T6902] ? __pfx___kernfs_new_node+0x10/0x10 [ 113.434723][ T6902] ? __pfx_lock_acquire+0x10/0x10 [ 113.439785][ T6902] ? sysfs_do_create_link_sd+0x77/0x110 [ 113.445369][ T6902] ? __pfx_lock_release+0x10/0x10 [ 113.450434][ T6902] ? do_raw_spin_lock+0x14f/0x370 [ 113.455507][ T6902] ? sysfs_add_file_mode_ns+0x26b/0x310 [ 113.461129][ T6902] kernfs_new_node+0x137/0x240 [ 113.465936][ T6902] kernfs_create_link+0xa5/0x1f0 [ 113.470920][ T6902] sysfs_do_create_link_sd+0x85/0x110 [ 113.476323][ T6902] device_add_class_symlinks+0xc2/0x250 [ 113.481979][ T6902] device_add+0x553/0xbf0 [ 113.486333][ T6902] device_create+0x257/0x2e0 [ 113.490946][ T6902] ? __pfx_device_create+0x10/0x10 [ 113.496080][ T6902] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 113.502389][ T6902] mac80211_hwsim_new_radio+0x3e5/0x4a90 [ 113.508063][ T6902] ? _printk+0xd5/0x120 [ 113.512252][ T6902] ? __nla_validate_parse+0x4f4/0x3090 [ 113.517742][ T6902] ? __pfx__printk+0x10/0x10 [ 113.522344][ T6902] ? stack_depot_save_flags+0x37/0x940 [ 113.527816][ T6902] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 113.533912][ T6902] hwsim_new_radio_nl+0xece/0x2290 [ 113.539053][ T6902] ? __pfx___nla_validate_parse+0x10/0x10 [ 113.544793][ T6902] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 113.550383][ T6902] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 113.556738][ T6902] genl_rcv_msg+0xb14/0xec0 [ 113.561273][ T6902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.566365][ T6902] ? __pfx_lock_acquire+0x10/0x10 [ 113.571415][ T6902] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 113.576980][ T6902] ? __pfx___might_resched+0x10/0x10 [ 113.582292][ T6902] netlink_rcv_skb+0x1e3/0x430 [ 113.587157][ T6902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.592207][ T6902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.597537][ T6902] genl_rcv+0x28/0x40 [ 113.601538][ T6902] netlink_unicast+0x7f6/0x990 [ 113.606320][ T6902] ? __pfx_netlink_unicast+0x10/0x10 [ 113.611623][ T6902] ? __virt_addr_valid+0x45f/0x530 [ 113.616766][ T6902] ? __phys_addr_symbol+0x2f/0x70 [ 113.621811][ T6902] ? __check_object_size+0x47a/0x730 [ 113.627117][ T6902] netlink_sendmsg+0x8e4/0xcb0 [ 113.631909][ T6902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.637237][ T6902] ? aa_sock_msg_perm+0x91/0x160 [ 113.642202][ T6902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.647504][ T6902] __sock_sendmsg+0x221/0x270 [ 113.652222][ T6902] ____sys_sendmsg+0x52a/0x7e0 [ 113.657014][ T6902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.662331][ T6902] ? __fget_files+0x2a/0x410 [ 113.666939][ T6902] ? __fget_files+0x2a/0x410 [ 113.671554][ T6902] __sys_sendmsg+0x269/0x350 [ 113.676182][ T6902] ? __pfx_lock_release+0x10/0x10 [ 113.681246][ T6902] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.686399][ T6902] ? __pfx_vfs_write+0x10/0x10 [ 113.691212][ T6902] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.697651][ T6902] ? do_syscall_64+0x100/0x230 [ 113.702450][ T6902] ? do_syscall_64+0xb6/0x230 [ 113.707174][ T6902] do_syscall_64+0xf3/0x230 [ 113.711705][ T6902] ? clear_bhb_loop+0x35/0x90 [ 113.716423][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.722337][ T6902] RIP: 0033:0x7fe5a0585d29 [ 113.726768][ T6902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.746388][ T6902] RSP: 002b:00007fe5a13b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.754818][ T6902] RAX: ffffffffffffffda RBX: 00007fe5a0775fa0 RCX: 00007fe5a0585d29 [ 113.762809][ T6902] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 113.770790][ T6902] RBP: 00007fe5a13b2090 R08: 0000000000000000 R09: 0000000000000000 [ 113.778773][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.786757][ T6902] R13: 0000000000000000 R14: 00007fe5a0775fa0 R15: 00007ffc774275a8 [ 113.794766][ T6902] [ 114.106534][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 114.141936][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 114.162206][ T6919] delete_channel: no stack [ 114.339738][ T6934] Bluetooth: MGMT ver 1.23 [ 115.126662][ T6958] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 115.676835][ T6996] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 115.680782][ T6990] __nla_validate_parse: 4 callbacks suppressed [ 115.680804][ T6990] netlink: 332 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.712831][ T6990] netlink: 104 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.724865][ T6990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.746479][ T6993] netlink: 'syz.1.284': attribute type 9 has an invalid length. [ 115.958905][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 116.017429][ T7014] netlink: 'syz.0.289': attribute type 21 has an invalid length. [ 116.026482][ T7013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.290'. [ 116.061771][ T7014] netlink: 128 bytes leftover after parsing attributes in process `syz.0.289'. [ 116.103732][ T7014] netlink: 'syz.0.289': attribute type 4 has an invalid length. [ 116.113150][ T7014] netlink: 'syz.0.289': attribute type 5 has an invalid length. [ 116.121740][ T7014] netlink: 3 bytes leftover after parsing attributes in process `syz.0.289'. [ 116.339072][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.294'. [ 116.343678][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 116.398178][ T7022] netlink: 80 bytes leftover after parsing attributes in process `syz.0.294'. [ 116.407874][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 116.509756][ T7030] xt_TCPMSS: Only works on TCP SYN packets [ 116.743687][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.751619][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.354984][ T7004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.385047][ T7004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.828377][ T7004] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.851429][ T7004] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.859851][ T7004] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.874948][ T7004] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.227807][ T7046] netlink: 'syz.3.301': attribute type 10 has an invalid length. [ 118.285853][ T7046] batman_adv: batadv0: Adding interface: team0 [ 118.293051][ T7046] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 118.326796][ T7051] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20000 [ 118.357354][ T7057] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 118.518093][ T7065] netlink: 'syz.4.305': attribute type 10 has an invalid length. [ 118.528646][ T7065] bridge0: entered promiscuous mode [ 118.591750][ T7068] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 119.145484][ T7093] netlink: 'syz.4.311': attribute type 10 has an invalid length. [ 119.203740][ T7093] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 119.446474][ T7101] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 119.510294][ T7103] bond0: entered promiscuous mode [ 119.523334][ T7103] bond_slave_0: entered promiscuous mode [ 119.557054][ T7103] bond_slave_1: entered promiscuous mode [ 119.568727][ T7103] syz_tun: entered promiscuous mode [ 119.588912][ T7103] bond0: left promiscuous mode [ 119.601830][ T7103] bond_slave_0: left promiscuous mode [ 119.608162][ T7103] bond_slave_1: left promiscuous mode [ 119.615722][ T7103] syz_tun: left promiscuous mode [ 119.631484][ T7101] gre1: entered promiscuous mode [ 119.745139][ T7115] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96 [ 120.124633][ T7131] vlan4: entered promiscuous mode [ 120.129767][ T7131] veth1: entered promiscuous mode [ 120.164756][ T7131] veth1: left promiscuous mode [ 120.821109][ T7164] __nla_validate_parse: 11 callbacks suppressed [ 120.821133][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 120.878690][ T7166] netlink: 'syz.2.334': attribute type 10 has an invalid length. [ 120.899067][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.918768][ T7166] bond0: (slave team0): Enslaving as an active interface with an up link [ 120.949695][ T7171] netlink: 'syz.4.336': attribute type 9 has an invalid length. [ 121.152133][ T7185] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.340'. [ 121.202457][ T7185] netlink: 'syz.3.340': attribute type 1 has an invalid length. [ 121.283880][ T7185] bond2: entered allmulticast mode [ 121.287377][ T7191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 121.289657][ T7185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.345955][ T7191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 121.351681][ T7185] bond2: (slave ip6gretap1): making interface the new active one [ 121.363921][ T7185] ip6gretap1: entered allmulticast mode [ 121.371608][ T7185] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 121.489363][ T7201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.502899][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 121.514277][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 121.587544][ T7204] tipc: Started in network mode [ 121.607720][ T7204] tipc: Node identity , cluster identity 4711 [ 121.624135][ T7204] tipc: Failed to obtain node identity [ 121.637510][ T7204] tipc: Enabling of bearer rejected, failed to enable media [ 121.967010][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.350'. [ 121.988937][ T7237] netlink: 'syz.4.350': attribute type 7 has an invalid length. [ 121.991207][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 122.006933][ T7237] netlink: 'syz.4.350': attribute type 8 has an invalid length. [ 122.015249][ T7237] netlink: 'syz.4.350': attribute type 7 has an invalid length. [ 122.025359][ T7237] netlink: 208184 bytes leftover after parsing attributes in process `syz.4.350'. [ 122.056768][ T7238] netlink: 48 bytes leftover after parsing attributes in process `syz.4.350'. [ 122.342081][ T7255] nbd: must specify a device to reconfigure [ 122.482728][ T7266] vlan2: entered allmulticast mode [ 122.939765][ T7293] IPVS: Scheduler module ip_vs_ not found [ 123.146264][ T7299] hsr_slave_0: left promiscuous mode [ 123.164356][ T7299] hsr_slave_1: left promiscuous mode [ 123.439726][ T7315] syzkaller1: entered allmulticast mode [ 123.831831][ T7325] veth0_to_bridge: entered promiscuous mode [ 123.841946][ T7324] veth0_to_bridge: left promiscuous mode [ 124.168967][ T7355] validate_nla: 2 callbacks suppressed [ 124.168988][ T7355] netlink: 'syz.3.386': attribute type 5 has an invalid length. [ 124.216924][ T7359] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 124.325850][ T7359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.349882][ T7364] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.359935][ T7364] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.368943][ T7364] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.378030][ T7364] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.444895][ T7374] netlink: 'syz.4.392': attribute type 3 has an invalid length. [ 124.596136][ T7376] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20003 [ 125.111252][ T7400] bridge0: port 3(gretap0) entered blocking state [ 125.121295][ T7400] bridge0: port 3(gretap0) entered disabled state [ 125.134582][ T7400] gretap0: entered allmulticast mode [ 125.147964][ T7400] gretap0: entered promiscuous mode [ 125.157814][ T7400] bridge0: port 3(gretap0) entered blocking state [ 125.164835][ T7400] bridge0: port 3(gretap0) entered forwarding state [ 125.261797][ T7413] gretap0: left allmulticast mode [ 125.266975][ T7413] gretap0: left promiscuous mode [ 125.322287][ T7413] bridge0: port 3(gretap0) entered disabled state [ 125.873579][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 125.876329][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.192532][ T7465] __nla_validate_parse: 10 callbacks suppressed [ 126.192584][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 127.190083][ T7503] openvswitch: netlink: Duplicate key (type 32). [ 127.195159][ T7495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.197841][ T7505] netlink: 'syz.3.430': attribute type 9 has an invalid length. [ 127.205240][ T7495] bridge0: port 1(bond1) entered blocking state [ 127.218164][ T7495] bridge0: port 1(bond1) entered disabled state [ 127.225006][ T7495] bond1: entered allmulticast mode [ 127.232610][ T7505] FAULT_INJECTION: forcing a failure. [ 127.232610][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 127.233828][ T7495] bond1: entered promiscuous mode [ 127.246501][ T7505] CPU: 1 UID: 0 PID: 7505 Comm: syz.3.430 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 127.261412][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 127.271508][ T7505] Call Trace: [ 127.274818][ T7505] [ 127.277777][ T7505] dump_stack_lvl+0x241/0x360 [ 127.282519][ T7505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.287765][ T7505] ? __pfx__printk+0x10/0x10 [ 127.290002][ T7495] bridge0: port 1(bond1) entered blocking state [ 127.292377][ T7505] ? __kmalloc_noprof+0xb5/0x4c0 [ 127.292415][ T7505] ? __pfx___might_resched+0x10/0x10 [ 127.292444][ T7505] should_fail_ex+0x3b0/0x4e0 [ 127.292472][ T7505] should_failslab+0xac/0x100 [ 127.292504][ T7505] __kmalloc_noprof+0xdd/0x4c0 [ 127.299069][ T7495] bridge0: port 1(bond1) entered forwarding state [ 127.303811][ T7505] ? kobject_get_path+0xb8/0x230 [ 127.303850][ T7505] kobject_get_path+0xb8/0x230 [ 127.303886][ T7505] kobject_uevent_env+0x2a5/0x8e0 [ 127.344501][ T7505] ? device_pm_add+0x62/0x320 [ 127.349244][ T7505] device_add+0x63b/0xbf0 [ 127.353632][ T7505] device_create+0x257/0x2e0 [ 127.358290][ T7505] ? __pfx_device_create+0x10/0x10 [ 127.363485][ T7505] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 127.369779][ T7505] mac80211_hwsim_new_radio+0x3e5/0x4a90 [ 127.375473][ T7505] ? _printk+0xd5/0x120 [ 127.379702][ T7505] ? __nla_validate_parse+0x4f4/0x3090 [ 127.385206][ T7505] ? __pfx__printk+0x10/0x10 [ 127.389833][ T7505] ? stack_depot_save_flags+0x37/0x940 [ 127.395319][ T7505] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 127.401419][ T7505] hwsim_new_radio_nl+0xece/0x2290 [ 127.406563][ T7505] ? __pfx___nla_validate_parse+0x10/0x10 [ 127.412315][ T7505] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 127.417909][ T7505] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 127.424267][ T7505] genl_rcv_msg+0xb14/0xec0 [ 127.428807][ T7505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 127.433871][ T7505] ? __pfx_lock_acquire+0x10/0x10 [ 127.438907][ T7505] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 127.444472][ T7505] ? __pfx___might_resched+0x10/0x10 [ 127.449782][ T7505] netlink_rcv_skb+0x1e3/0x430 [ 127.454562][ T7505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 127.459607][ T7505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.464929][ T7505] genl_rcv+0x28/0x40 [ 127.468927][ T7505] netlink_unicast+0x7f6/0x990 [ 127.473717][ T7505] ? __pfx_netlink_unicast+0x10/0x10 [ 127.479011][ T7505] ? __virt_addr_valid+0x45f/0x530 [ 127.484149][ T7505] ? __phys_addr_symbol+0x2f/0x70 [ 127.489200][ T7505] ? __check_object_size+0x47a/0x730 [ 127.494505][ T7505] netlink_sendmsg+0x8e4/0xcb0 [ 127.499309][ T7505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.504613][ T7505] ? aa_sock_msg_perm+0x91/0x160 [ 127.509589][ T7505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.514892][ T7505] __sock_sendmsg+0x221/0x270 [ 127.519594][ T7505] ____sys_sendmsg+0x52a/0x7e0 [ 127.524381][ T7505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.529679][ T7505] ? __fget_files+0x2a/0x410 [ 127.534311][ T7505] ? __fget_files+0x2a/0x410 [ 127.539010][ T7505] __sys_sendmsg+0x269/0x350 [ 127.543613][ T7505] ? __pfx_lock_release+0x10/0x10 [ 127.548662][ T7505] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.553823][ T7505] ? __pfx_vfs_write+0x10/0x10 [ 127.558621][ T7505] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.564960][ T7505] ? do_syscall_64+0x100/0x230 [ 127.569736][ T7505] ? do_syscall_64+0xb6/0x230 [ 127.574452][ T7505] do_syscall_64+0xf3/0x230 [ 127.578970][ T7505] ? clear_bhb_loop+0x35/0x90 [ 127.583663][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.589565][ T7505] RIP: 0033:0x7fe5a0585d29 [ 127.594023][ T7505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.613635][ T7505] RSP: 002b:00007fe5a13b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.622062][ T7505] RAX: ffffffffffffffda RBX: 00007fe5a0775fa0 RCX: 00007fe5a0585d29 [ 127.630045][ T7505] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 127.638029][ T7505] RBP: 00007fe5a13b2090 R08: 0000000000000000 R09: 0000000000000000 [ 127.646012][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.654025][ T7505] R13: 0000000000000000 R14: 00007fe5a0775fa0 R15: 00007ffc774275a8 [ 127.662049][ T7505] [ 127.766112][ T12] bridge0: port 1(bond1) entered disabled state [ 127.941476][ T29] audit: type=1107 audit(1737053798.820:2): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/u%Å¿;/ÖüyL÷kä»e2×koU‹h.*dñ†¡)ƒÈQä$þŠÚÍ”*m~ñaï&gäô"$f_Af{è€ „«ZÓæ¹/×C©k¥«S¥Á°D' [ 128.140479][ T7525] netlink: 'syz.1.439': attribute type 9 has an invalid length. [ 128.407100][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 128.432844][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 128.468898][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 128.481834][ T7540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.446'. [ 128.497368][ T7540] gtp1: entered promiscuous mode [ 128.507638][ T7540] gtp1: entered allmulticast mode [ 128.673101][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 128.761174][ T7552] netlink: 'syz.3.449': attribute type 5 has an invalid length. [ 128.815823][ T7558] netlink: 'syz.1.452': attribute type 9 has an invalid length. [ 129.034097][ T7564] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 129.053591][ T7564] netlink: 72 bytes leftover after parsing attributes in process `syz.0.451'. [ 129.067496][ T7564] netlink: 'syz.0.451': attribute type 1 has an invalid length. [ 129.080510][ T7564] netlink: 68 bytes leftover after parsing attributes in process `syz.0.451'. [ 129.192712][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 129.207816][ T7574] team0: Device is already in use. [ 129.239989][ T7576] hsr0: entered promiscuous mode [ 129.270406][ T7578] siw: device registration error -23 [ 129.277188][ T7576] hsr_slave_0: left promiscuous mode [ 129.291284][ T7576] hsr_slave_1: left promiscuous mode [ 129.357188][ T7576] hsr0 (unregistering): left promiscuous mode [ 129.963567][ T7602] netlink: 44 bytes leftover after parsing attributes in process `syz.0.466'. [ 130.214849][ T7625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.955135][ T7666] batman_adv: batadv0: Removing interface: team0 [ 130.976185][ T7666] bridge_slave_0: left allmulticast mode [ 130.994583][ T7666] bridge_slave_0: left promiscuous mode [ 131.014128][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.055618][ T7666] bridge_slave_1: left allmulticast mode [ 131.077870][ T7666] bridge_slave_1: left promiscuous mode [ 131.102468][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.137835][ T7666] bond0: (slave bond_slave_0): Releasing backup interface [ 131.165023][ T7666] bond0: (slave bond_slave_1): Releasing backup interface [ 131.228861][ T7666] team0: Port device team_slave_0 removed [ 131.254761][ T7666] team0: Port device team_slave_1 removed [ 131.271437][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.278920][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.304394][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.321955][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.360426][ T7666] bond2: (slave ip6gretap1): Releasing active interface [ 131.401386][ T7666] ip6gretap1: left allmulticast mode [ 131.534737][ T7681] __nla_validate_parse: 54 callbacks suppressed [ 131.534761][ T7681] netlink: 48 bytes leftover after parsing attributes in process `syz.2.484'. [ 131.597659][ T7679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.604967][ T7679] IPv6: NLM_F_CREATE should be set when creating new route [ 131.612327][ T7679] IPv6: NLM_F_CREATE should be set when creating new route [ 131.739668][ T7693] IPv6: addrconf: prefix option has invalid lifetime [ 131.775097][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 131.802490][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 132.019809][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 132.324369][ T7719] netlink: 'syz.3.493': attribute type 10 has an invalid length. [ 132.363790][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.378223][ T7719] bond0: (slave team0): Enslaving as an active interface with an up link [ 132.403143][ T7719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.499089][ T7724] netlink: zone id is out of range [ 132.513463][ T7724] netlink: set zone limit has 8 unknown bytes [ 132.718613][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 132.933743][ T7742] sctp: [Deprecated]: syz.2.499 (pid 7742) Use of int in maxseg socket option. [ 132.933743][ T7742] Use struct sctp_assoc_value instead [ 132.983765][ T7741] team0: Device is already in use. [ 133.005827][ T7745] netlink: 'syz.0.500': attribute type 3 has an invalid length. [ 133.051749][ T7745] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.500'. [ 133.059797][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.502'. [ 133.090602][ T7750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.502'. [ 133.162262][ T7753] batadv0: entered promiscuous mode [ 133.176795][ T7752] batadv0: left promiscuous mode [ 133.201044][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 133.545178][ T7763] netlink: 'syz.3.507': attribute type 5 has an invalid length. [ 133.570675][ T7763] Cannot find set identified by id 0 to match [ 133.602722][ T7763] netlink: 40 bytes leftover after parsing attributes in process `syz.3.507'. [ 134.308532][ T7780] bond0: (slave syz_tun): Releasing backup interface [ 134.392899][ T7780] bridge_slave_0: left allmulticast mode [ 134.430171][ T7780] bridge_slave_0: left promiscuous mode [ 134.478005][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.565113][ T7780] bridge_slave_1: left allmulticast mode [ 134.599748][ T7780] bridge_slave_1: left promiscuous mode [ 134.628639][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.498207][ T7780] bond0: (slave bond_slave_0): Releasing backup interface [ 135.557932][ T7780] bond0: (slave bond_slave_1): Releasing backup interface [ 135.680942][ T7796] openvswitch: netlink: Message has 1 unknown bytes. [ 135.692181][ T7780] team0: Port device team_slave_0 removed [ 135.743176][ T7780] team0: Port device team_slave_1 removed [ 135.783395][ T7780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.801113][ T7780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.915544][ T7780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.928396][ T7780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.152761][ T7804] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551609) [ 136.199259][ T7804] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 137.831807][ T7831] netlink: 'syz.3.527': attribute type 9 has an invalid length. [ 138.201919][ T7839] Driver unsupported XDP return value 0 on prog (id 254) dev N/A, expect packet loss! [ 138.509080][ T7843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.622050][ T7841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.669233][ T7845] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 138.851372][ T7845] __nla_validate_parse: 3 callbacks suppressed [ 138.851394][ T7845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.528'. [ 139.179884][ T7850] Cannot find add_set index 0 as target [ 140.019121][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'. [ 140.352886][ T7872] netlink: 44 bytes leftover after parsing attributes in process `syz.1.535'. [ 140.533312][ T7877] x_tables: duplicate underflow at hook 1 [ 140.545439][ T7879] netlink: 'syz.3.538': attribute type 12 has an invalid length. [ 140.588199][ T7877] netlink: 'syz.0.536': attribute type 12 has an invalid length. [ 140.601990][ T7877] netlink: 'syz.0.536': attribute type 29 has an invalid length. [ 140.640680][ T7877] netlink: 148 bytes leftover after parsing attributes in process `syz.0.536'. [ 140.654794][ T7884] netlink: 'syz.1.539': attribute type 9 has an invalid length. [ 140.760500][ T7887] raw_sendmsg: syz.3.541 forgot to set AF_INET. Fix it! [ 141.937149][ T7925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 141.974362][ T7925] trusted_key: syz.1.548 sent an empty control message without MSG_MORE. [ 142.033787][ T7929] netlink: 72 bytes leftover after parsing attributes in process `syz.4.550'. [ 142.371191][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.434458][ T7945] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 142.550472][ T7957] netlink: 44 bytes leftover after parsing attributes in process `syz.4.553'. [ 142.578474][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 142.589018][ T7949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.617983][ T7956] vlan0: entered promiscuous mode [ 142.662449][ T7956] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 142.697506][ T7949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.156278][ T7974] netlink: 'syz.1.561': attribute type 39 has an invalid length. [ 143.354425][ T7976] netlink: 3 bytes leftover after parsing attributes in process `syz.4.563'. [ 143.475445][ T7980] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 143.543608][ T7983] netlink: 'syz.1.565': attribute type 1 has an invalid length. [ 143.561531][ T7983] netlink: 'syz.1.565': attribute type 8 has an invalid length. [ 143.600073][ T7983] netlink: 109544 bytes leftover after parsing attributes in process `syz.1.565'. [ 143.895621][ T7994] netlink: 30 bytes leftover after parsing attributes in process `syz.2.569'. [ 144.112450][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.139921][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.478038][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.576'. [ 144.515725][ T8019] netlink: 80 bytes leftover after parsing attributes in process `syz.4.576'. [ 144.527253][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 144.956141][ T8037] netlink: 128 bytes leftover after parsing attributes in process `syz.2.583'. [ 145.183050][ T8053] netlink: 'syz.0.586': attribute type 1 has an invalid length. [ 145.190923][ T8053] netlink: 224 bytes leftover after parsing attributes in process `syz.0.586'. [ 145.213821][ T8053] nbd: nbd0 already in use [ 145.247880][ T8053] veth0_vlan: entered allmulticast mode [ 145.491511][ T7909] Set syz1 is full, maxelem 65536 reached [ 145.680612][ T8071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.594'. [ 145.697247][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.591'. [ 145.738397][ T8067] netlink: 80 bytes leftover after parsing attributes in process `syz.0.591'. [ 145.778183][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'. [ 146.160447][ T8100] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 146.211752][ T8106] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 146.249981][ T8100] batman_adv: batadv0: Adding interface: team0 [ 146.281937][ T8100] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 146.314980][ T8106] team0: entered promiscuous mode [ 146.333824][ T8106] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.346597][ T8106] batman_adv: batadv0: Interface activated: team0 [ 146.354792][ T8106] batman_adv: batadv0: Interface deactivated: team0 [ 146.366182][ T8106] batman_adv: batadv0: Removing interface: team0 [ 146.374277][ T8106] bridge0: port 1(team0) entered blocking state [ 146.381239][ T8106] bridge0: port 1(team0) entered disabled state [ 146.396197][ T8106] team0: entered allmulticast mode [ 146.567615][ T8124] netlink: 'syz.0.609': attribute type 1 has an invalid length. [ 146.699756][ T8131] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 146.828153][ T8124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.832999][ T3474] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 146.883919][ T8124] vlan2: entered promiscuous mode [ 146.908913][ T8138] netlink: 'syz.4.614': attribute type 11 has an invalid length. [ 146.918479][ T8124] bond1: entered promiscuous mode [ 146.930249][ T8124] ip6gretap1: entered promiscuous mode [ 146.938424][ T8124] bond1: left promiscuous mode [ 146.956836][ T8124] ip6gretap1: left promiscuous mode [ 146.969975][ T8142] sctp: [Deprecated]: syz.1.615 (pid 8142) Use of int in max_burst socket option. [ 146.969975][ T8142] Use struct sctp_assoc_value instead [ 147.003391][ T3523] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 147.264243][ T8148] x_tables: duplicate underflow at hook 1 [ 147.839696][ T8188] netlink: zone id is out of range [ 147.862001][ T8188] netlink: zone id is out of range [ 147.890547][ T8188] netlink: zone id is out of range [ 147.937620][ T8188] netlink: zone id is out of range [ 147.952535][ T8188] netlink: zone id is out of range [ 147.968262][ T8188] netlink: zone id is out of range [ 147.973913][ T8188] netlink: zone id is out of range [ 150.154720][ T8233] __nla_validate_parse: 14 callbacks suppressed [ 150.154740][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 150.581027][ T8250] netlink: 'syz.1.647': attribute type 7 has an invalid length. [ 150.600073][ T8250] netlink: 'syz.1.647': attribute type 8 has an invalid length. [ 150.643571][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 150.662863][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 150.795964][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 150.819355][ T8276] netlink: 60 bytes leftover after parsing attributes in process `syz.4.654'. [ 150.828394][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 150.828433][ T8280] veth0_to_bond: entered promiscuous mode [ 150.963407][ T8282] netlink: 304 bytes leftover after parsing attributes in process `syz.1.656'. [ 151.006159][ T8282] ip6tnl0: Master is either lo or non-ether device [ 151.072118][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 151.215878][ T8300] net_ratelimit: 253 callbacks suppressed [ 151.215900][ T8300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.257227][ T8300] geneve2: entered promiscuous mode [ 151.263167][ T8300] geneve2: entered allmulticast mode [ 151.273239][ T8302] netlink: 52 bytes leftover after parsing attributes in process `syz.4.662'. [ 151.371273][ T8307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 151.471486][ T8310] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 151.499309][ T5886] IPVS: starting estimator thread 0... [ 151.593927][ T8314] IPVS: using max 20 ests per chain, 48000 per kthread [ 151.887962][ T8328] vlan5: entered allmulticast mode [ 151.910832][ T8328] bridge_slave_0: entered allmulticast mode [ 151.925658][ T8328] bridge_slave_0: left allmulticast mode [ 152.094819][ T8337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.671'. [ 152.302033][ T8341] netlink: 'syz.1.672': attribute type 5 has an invalid length. [ 152.757361][ T8369] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 68 [ 152.766986][ T8368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.070920][ T8392] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.200404][ T8462] syzkaller0: entered promiscuous mode [ 154.227129][ T8462] syzkaller0: entered allmulticast mode [ 154.406210][ T8471] ªªªªªª: renamed from syzkaller0 [ 154.748383][ T8480] bridge0: port 3(gretap0) entered blocking state [ 154.755237][ T8480] bridge0: port 3(gretap0) entered disabled state [ 154.762445][ T8480] gretap0: entered allmulticast mode [ 154.769223][ T8480] gretap0: entered promiscuous mode [ 154.775348][ T8480] bridge0: port 3(gretap0) entered blocking state [ 154.781929][ T8480] bridge0: port 3(gretap0) entered forwarding state [ 154.790892][ T8480] gretap0: left allmulticast mode [ 154.796182][ T8480] gretap0: left promiscuous mode [ 154.801482][ T8480] bridge0: port 3(gretap0) entered disabled state [ 156.940874][ T8506] __nla_validate_parse: 4 callbacks suppressed [ 156.940898][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 157.336748][ T8517] syz.1.719 (8517) used greatest stack depth: 18256 bytes left [ 157.668461][ T8543] netlink: 36 bytes leftover after parsing attributes in process `syz.4.727'. [ 158.065131][ T8553] netlink: 'syz.1.730': attribute type 12 has an invalid length. [ 158.115073][ T8552] netlink: 'syz.1.730': attribute type 12 has an invalid length. [ 158.352325][ T8563] sch_tbf: burst 250 is lower than device lo mtu (65550) ! [ 158.362685][ T8561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.732'. [ 158.437054][ T8563] netlink: 168 bytes leftover after parsing attributes in process `syz.4.734'. [ 158.827523][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 159.299057][ T8615] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 159.312375][ T8615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.337666][ T8615] vlan2: entered promiscuous mode [ 159.353035][ T8615] bond0: entered promiscuous mode [ 159.369098][ T8615] bond_slave_0: entered promiscuous mode [ 159.372976][ T8617] netlink: 168 bytes leftover after parsing attributes in process `syz.4.749'. [ 159.379425][ T8615] bond_slave_1: entered promiscuous mode [ 159.407693][ T8615] bond0: left promiscuous mode [ 159.412876][ T8615] bond_slave_0: left promiscuous mode [ 159.426582][ T8615] bond_slave_1: left promiscuous mode [ 160.025750][ T8617] vlan2: entered promiscuous mode [ 160.039782][ T8617] vlan2: entered allmulticast mode [ 160.056633][ T8617] macvtap0: entered allmulticast mode [ 160.064110][ T8617] veth0_macvtap: entered allmulticast mode [ 160.082048][ T8617] macvtap0: entered promiscuous mode [ 160.104927][ T8617] team0: Port device vlan2 added [ 160.460589][ T8647] netlink: 160 bytes leftover after parsing attributes in process `syz.1.756'. [ 160.470339][ T8647] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 160.738921][ T8678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.761'. [ 160.750128][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 160.814174][ T8680] ax25_connect(): syz.4.765 uses autobind, please contact jreuter@yaina.de [ 161.013666][ T8688] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 161.060126][ T8691] netlink: 'syz.0.770': attribute type 9 has an invalid length. [ 161.094559][ T8688] netlink: 36 bytes leftover after parsing attributes in process `syz.3.769'. [ 161.162019][ T8692] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 161.178377][ T8696] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 161.256913][ T8692] bond2: entered promiscuous mode [ 161.289133][ T8692] bond2: entered allmulticast mode [ 161.374471][ T8708] netlink: 'syz.0.775': attribute type 15 has an invalid length. [ 161.474773][ T8709] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 161.557537][ T8692] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 161.572563][ T8692] bond2: (slave batadv1): making interface the new active one [ 161.593025][ T8692] batadv1: entered promiscuous mode [ 161.598461][ T8692] batadv1: entered allmulticast mode [ 161.616073][ T8692] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 161.867858][ T8723] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.059938][ T8736] __nla_validate_parse: 3 callbacks suppressed [ 162.059961][ T8736] netlink: 44 bytes leftover after parsing attributes in process `syz.0.779'. [ 162.116753][ T8742] netlink: 'syz.3.780': attribute type 2 has an invalid length. [ 162.145093][ T8723] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.209406][ T8731] vlan2: entered promiscuous mode [ 162.323695][ T8723] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.337188][ T8746] netlink: 'syz.2.782': attribute type 9 has an invalid length. [ 162.527222][ T8723] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.610586][ T8758] netlink: 44 bytes leftover after parsing attributes in process `syz.3.784'. [ 163.826279][ T8763] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.841685][ T8763] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.850626][ T8763] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.881692][ T8763] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.941931][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 163.972497][ T8785] tun0: tun_chr_ioctl cmd 1074025680 [ 164.087541][ T8723] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.152847][ T8723] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.238654][ T8723] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.278403][ T8723] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.288769][ T8802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.794'. [ 164.519826][ T8811] netlink: 'syz.4.796': attribute type 9 has an invalid length. [ 165.182011][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.800'. [ 165.258573][ T8839] bond0: entered promiscuous mode [ 165.291441][ T8839] bond_slave_0: entered promiscuous mode [ 165.324620][ T8839] bond_slave_1: entered promiscuous mode [ 165.334712][ T8839] team0: entered promiscuous mode [ 165.351736][ T8839] team_slave_0: entered promiscuous mode [ 165.360131][ T8839] team_slave_1: entered promiscuous mode [ 165.377905][ T8839] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.389208][ T8839] bond0: left promiscuous mode [ 165.404902][ T8839] bond_slave_0: left promiscuous mode [ 165.410821][ T8839] bond_slave_1: left promiscuous mode [ 165.419323][ T8839] team0: left promiscuous mode [ 165.429841][ T8839] team_slave_0: left promiscuous mode [ 165.438211][ T8839] team_slave_1: left promiscuous mode [ 165.513745][ T8846] bond2: left allmulticast mode [ 165.526303][ T8846] gtp1: left promiscuous mode [ 165.533059][ T8846] gtp1: left allmulticast mode [ 165.643962][ T8859] delete_channel: no stack [ 165.744297][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.805'. [ 165.863103][ T8863] netlink: 80 bytes leftover after parsing attributes in process `syz.1.805'. [ 165.902272][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.805'. [ 166.188312][ T8880] delete_channel: no stack [ 166.211603][ T8880] delete_channel: no stack [ 166.470432][ T8893] syzkaller1: entered promiscuous mode [ 166.487579][ T8893] syzkaller1: entered allmulticast mode [ 166.658847][ T8904] netlink: 244 bytes leftover after parsing attributes in process `syz.2.821'. [ 166.682356][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 167.156542][ T8933] ipt_ECN: cannot use operation on non-tcp rule [ 167.200298][ T8934] netlink: 'syz.2.829': attribute type 12 has an invalid length. [ 167.227320][ T8934] netlink: 'syz.2.829': attribute type 29 has an invalid length. [ 167.248886][ T8936] __nla_validate_parse: 5 callbacks suppressed [ 167.248908][ T8936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.830'. [ 167.270645][ T8934] netlink: 148 bytes leftover after parsing attributes in process `syz.2.829'. [ 167.336427][ T8930] syzkaller1: entered promiscuous mode [ 167.356372][ T8930] syzkaller1: entered allmulticast mode [ 167.398253][ T8941] netlink: 'syz.0.831': attribute type 5 has an invalid length. [ 167.456059][ T8941] bond0: option all_slaves_active: invalid value (7) [ 167.472612][ T8941] netlink: 'syz.0.831': attribute type 1 has an invalid length. [ 167.571021][ T8943] vlan2: entered promiscuous mode [ 167.847147][ T8950] netlink: 56 bytes leftover after parsing attributes in process `syz.3.833'. [ 167.987116][ T8959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 168.108057][ T8959] netlink: 80 bytes leftover after parsing attributes in process `syz.3.838'. [ 168.118888][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.838'. [ 168.516118][ T8983] netlink: 44 bytes leftover after parsing attributes in process `syz.4.844'. [ 170.381859][ T5886] IPVS: starting estimator thread 0... [ 170.471588][ T8998] IPVS: using max 20 ests per chain, 48000 per kthread [ 170.516930][ T9004] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 170.541609][ T9004] netlink: 228 bytes leftover after parsing attributes in process `syz.1.850'. [ 170.556840][ T9003] tipc: Enabling of bearer rejected, failed to enable media [ 170.585956][ T9008] dvmrp1: entered allmulticast mode [ 170.612674][ T9009] netlink: 240 bytes leftover after parsing attributes in process `syz.0.848'. [ 170.838696][ T9012] netlink: 76 bytes leftover after parsing attributes in process `syz.4.853'. [ 170.860514][ T9022] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 170.872292][ T9012] block nbd0: NBD_DISCONNECT [ 170.898227][ T9012] block nbd0: Send disconnect failed -107 [ 170.927579][ T9012] block nbd0: Disconnected due to user request. [ 170.960152][ T9012] block nbd0: shutting down sockets [ 171.070520][ T9030] netlink: 'syz.1.856': attribute type 32 has an invalid length. [ 171.305261][ T9041] openvswitch: netlink: Message has 8 unknown bytes. [ 187.012286][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.027063][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.041928][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.061406][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.068591][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.079974][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.091688][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.100896][ T5832] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 187.108917][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.108998][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.139284][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 187.147096][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.177770][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.268048][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.280503][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.288707][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.297432][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 187.311982][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.608270][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 187.618662][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 187.624363][ T9082] chnl_net:caif_netlink_parms(): no params data found [ 187.633536][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 187.642692][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 187.652295][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 187.659662][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 187.819320][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 187.839419][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 187.872994][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 187.880360][ T9081] chnl_net:caif_netlink_parms(): no params data found [ 187.888873][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 187.899956][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 187.910532][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 188.025359][ T9082] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.034152][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.041651][ T9082] bridge_slave_0: entered allmulticast mode [ 188.049833][ T9082] bridge_slave_0: entered promiscuous mode [ 188.061155][ T9082] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.068488][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.076106][ T9082] bridge_slave_1: entered allmulticast mode [ 188.083458][ T9082] bridge_slave_1: entered promiscuous mode [ 188.221191][ T9082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.232435][ T9081] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.239644][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.247584][ T9081] bridge_slave_0: entered allmulticast mode [ 188.255038][ T9081] bridge_slave_0: entered promiscuous mode [ 188.280950][ T9082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.290786][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.298389][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.305973][ T9081] bridge_slave_1: entered allmulticast mode [ 188.313030][ T9081] bridge_slave_1: entered promiscuous mode [ 188.346050][ T9086] chnl_net:caif_netlink_parms(): no params data found [ 188.388881][ T9082] team0: Port device team_slave_0 added [ 188.443599][ T9082] team0: Port device team_slave_1 added [ 188.478977][ T9081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.493467][ T9081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.507615][ T9093] chnl_net:caif_netlink_parms(): no params data found [ 188.589715][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.597618][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.624429][ T9082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.637311][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.644805][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.671131][ T9082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.693780][ T9081] team0: Port device team_slave_0 added [ 188.720218][ T9081] team0: Port device team_slave_1 added [ 188.801892][ T9081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.808905][ T9081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.838372][ T9081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.887845][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.897374][ T9086] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.905606][ T9086] bridge_slave_0: entered allmulticast mode [ 188.913650][ T9086] bridge_slave_0: entered promiscuous mode [ 188.922970][ T9081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.929962][ T9081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.957371][ T9081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.008328][ T9093] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.016269][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.024545][ T9093] bridge_slave_0: entered allmulticast mode [ 189.032137][ T9093] bridge_slave_0: entered promiscuous mode [ 189.041467][ T9086] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.048779][ T9086] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.056728][ T9086] bridge_slave_1: entered allmulticast mode [ 189.065262][ T9086] bridge_slave_1: entered promiscuous mode [ 189.086878][ T9082] hsr_slave_0: entered promiscuous mode [ 189.093572][ T9082] hsr_slave_1: entered promiscuous mode [ 189.103997][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.111149][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.119658][ T9093] bridge_slave_1: entered allmulticast mode [ 189.127015][ T9093] bridge_slave_1: entered promiscuous mode [ 189.158732][ T9086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.195469][ T9093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.207424][ T9086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.231850][ T54] Bluetooth: hci5: command tx timeout [ 189.233976][ T5846] Bluetooth: hci6: command tx timeout [ 189.277701][ T9093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.318961][ T9081] hsr_slave_0: entered promiscuous mode [ 189.326356][ T9081] hsr_slave_1: entered promiscuous mode [ 189.332682][ T9081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.340307][ T9081] Cannot create hsr debugfs directory [ 189.382932][ T9086] team0: Port device team_slave_0 added [ 189.391149][ T9086] team0: Port device team_slave_1 added [ 189.398210][ T5846] Bluetooth: hci7: command tx timeout [ 189.426857][ T9093] team0: Port device team_slave_0 added [ 189.488483][ T9093] team0: Port device team_slave_1 added [ 189.512642][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.519637][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.547699][ T9086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.561797][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.569006][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.595825][ T9086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.700606][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.708934][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.735633][ T9093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.746373][ T5846] Bluetooth: hci8: command tx timeout [ 189.770054][ T9097] chnl_net:caif_netlink_parms(): no params data found [ 189.792923][ T9086] hsr_slave_0: entered promiscuous mode [ 189.799461][ T9086] hsr_slave_1: entered promiscuous mode [ 189.805859][ T9086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.813939][ T9086] Cannot create hsr debugfs directory [ 189.820141][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.827577][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.854302][ T9093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.951700][ T5846] Bluetooth: hci9: command tx timeout [ 190.005965][ T9093] hsr_slave_0: entered promiscuous mode [ 190.013086][ T9093] hsr_slave_1: entered promiscuous mode [ 190.019281][ T9093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.027383][ T9093] Cannot create hsr debugfs directory [ 190.251234][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.266740][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.275167][ T9097] bridge_slave_0: entered allmulticast mode [ 190.282956][ T9097] bridge_slave_0: entered promiscuous mode [ 190.292577][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.299681][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.307594][ T9097] bridge_slave_1: entered allmulticast mode [ 190.315066][ T9097] bridge_slave_1: entered promiscuous mode [ 190.410795][ T9097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.454502][ T9097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.507640][ T9097] team0: Port device team_slave_0 added [ 190.535823][ T9097] team0: Port device team_slave_1 added [ 190.568556][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.576325][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.603670][ T9097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.634581][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.641855][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.668793][ T9097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.755354][ T9097] hsr_slave_0: entered promiscuous mode [ 190.762169][ T9097] hsr_slave_1: entered promiscuous mode [ 190.768362][ T9097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.776187][ T9097] Cannot create hsr debugfs directory [ 191.311964][ T5846] Bluetooth: hci5: command tx timeout [ 191.312015][ T5839] Bluetooth: hci6: command tx timeout [ 191.471514][ T54] Bluetooth: hci7: command tx timeout [ 191.791497][ T54] Bluetooth: hci8: command tx timeout [ 192.031760][ T54] Bluetooth: hci9: command tx timeout [ 193.391504][ T5839] Bluetooth: hci5: command tx timeout [ 193.395262][ T54] Bluetooth: hci6: command tx timeout [ 193.551586][ T54] Bluetooth: hci7: command tx timeout [ 193.881750][ T54] Bluetooth: hci8: command tx timeout [ 194.111606][ T54] Bluetooth: hci9: command tx timeout [ 195.471547][ T54] Bluetooth: hci6: command tx timeout [ 195.482016][ T54] Bluetooth: hci5: command tx timeout [ 195.632052][ T54] Bluetooth: hci7: command tx timeout [ 195.951567][ T54] Bluetooth: hci8: command tx timeout [ 196.191913][ T54] Bluetooth: hci9: command tx timeout [ 201.711545][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 201.714383][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 201.717632][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.732122][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 246.829661][ T5839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 246.838880][ T5839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 246.849910][ T5839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 246.858422][ T5839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 246.870607][ T5839] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 246.878583][ T5839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 247.040358][ T9124] chnl_net:caif_netlink_parms(): no params data found [ 247.116337][ T9124] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.123911][ T9124] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.132013][ T9124] bridge_slave_0: entered allmulticast mode [ 247.138835][ T9124] bridge_slave_0: entered promiscuous mode [ 247.147383][ T9124] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.154957][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.163734][ T9124] bridge_slave_1: entered allmulticast mode [ 247.170528][ T9124] bridge_slave_1: entered promiscuous mode [ 247.199746][ T9124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.211174][ T9124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.251889][ T9124] team0: Port device team_slave_0 added [ 247.259543][ T9124] team0: Port device team_slave_1 added [ 247.288849][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.296499][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.323983][ T9124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.338160][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.346081][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.373707][ T9124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.417749][ T9124] hsr_slave_0: entered promiscuous mode [ 247.424907][ T9124] hsr_slave_1: entered promiscuous mode [ 247.432366][ T9124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.439970][ T9124] Cannot create hsr debugfs directory [ 248.312793][ T5839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 248.322095][ T5839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 248.330124][ T5839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 248.339183][ T5839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 248.349317][ T5839] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 248.371968][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 248.388952][ T5849] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 248.399140][ T5849] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 248.422337][ T5838] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 248.433707][ T5838] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 248.440932][ T5832] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 248.453399][ T5832] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 248.460600][ T5838] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 248.462545][ T5832] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 248.476672][ T5838] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 248.485634][ T5832] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 248.497517][ T5832] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 248.509818][ T5832] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 248.542116][ T5832] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 248.553963][ T5832] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 248.573139][ T5832] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 248.581171][ T5832] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 248.589244][ T5832] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 248.611689][ T5832] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 248.886826][ T9136] chnl_net:caif_netlink_parms(): no params data found [ 248.915737][ T5832] Bluetooth: hci10: command tx timeout [ 249.007415][ T9140] chnl_net:caif_netlink_parms(): no params data found [ 249.099553][ T9138] chnl_net:caif_netlink_parms(): no params data found [ 249.193444][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.200590][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.208978][ T9136] bridge_slave_0: entered allmulticast mode [ 249.216886][ T9136] bridge_slave_0: entered promiscuous mode [ 249.229613][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.237681][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.245421][ T9136] bridge_slave_1: entered allmulticast mode [ 249.253318][ T9136] bridge_slave_1: entered promiscuous mode [ 249.364604][ T9136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.386352][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.394589][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.402035][ T9140] bridge_slave_0: entered allmulticast mode [ 249.409287][ T9140] bridge_slave_0: entered promiscuous mode [ 249.428468][ T9136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.449448][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.457698][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.465265][ T9140] bridge_slave_1: entered allmulticast mode [ 249.473972][ T9140] bridge_slave_1: entered promiscuous mode [ 249.480511][ T9142] chnl_net:caif_netlink_parms(): no params data found [ 249.518905][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.526779][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.534622][ T9138] bridge_slave_0: entered allmulticast mode [ 249.542789][ T9138] bridge_slave_0: entered promiscuous mode [ 249.585244][ T9140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.612956][ T9136] team0: Port device team_slave_0 added [ 249.619282][ T9138] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.626678][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.644208][ T9138] bridge_slave_1: entered allmulticast mode [ 249.651794][ T9138] bridge_slave_1: entered promiscuous mode [ 249.677534][ T9140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.700747][ T9136] team0: Port device team_slave_1 added [ 249.763294][ T9140] team0: Port device team_slave_0 added [ 249.781663][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.788674][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.815616][ T9136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.865218][ T9140] team0: Port device team_slave_1 added [ 249.873628][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.881689][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.908409][ T9136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.930518][ T9138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.943816][ T9138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.015708][ T9142] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.023749][ T9142] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.031176][ T9142] bridge_slave_0: entered allmulticast mode [ 250.039492][ T9142] bridge_slave_0: entered promiscuous mode [ 250.048714][ T9142] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.056345][ T9142] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.063894][ T9142] bridge_slave_1: entered allmulticast mode [ 250.070737][ T9142] bridge_slave_1: entered promiscuous mode [ 250.078676][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.086332][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.114234][ T9140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.130805][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.138302][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.165027][ T9140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.183800][ T9138] team0: Port device team_slave_0 added [ 250.247649][ T9138] team0: Port device team_slave_1 added [ 250.267490][ T9142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.304868][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.312407][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.339554][ T9138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.354731][ T9142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.368737][ T9136] hsr_slave_0: entered promiscuous mode [ 250.376415][ T9136] hsr_slave_1: entered promiscuous mode [ 250.382997][ T9136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.391136][ T9136] Cannot create hsr debugfs directory [ 250.412175][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.419184][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.446170][ T5832] Bluetooth: hci11: command tx timeout [ 250.452924][ T9138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.511803][ T5832] Bluetooth: hci12: command tx timeout [ 250.534074][ T9142] team0: Port device team_slave_0 added [ 250.561178][ T9140] hsr_slave_0: entered promiscuous mode [ 250.568114][ T9140] hsr_slave_1: entered promiscuous mode [ 250.575341][ T9140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.583430][ T9140] Cannot create hsr debugfs directory [ 250.592635][ T5832] Bluetooth: hci13: command tx timeout [ 250.613725][ T9138] hsr_slave_0: entered promiscuous mode [ 250.620269][ T9138] hsr_slave_1: entered promiscuous mode [ 250.627654][ T9138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.635420][ T9138] Cannot create hsr debugfs directory [ 250.643982][ T9142] team0: Port device team_slave_1 added [ 250.679906][ T5832] Bluetooth: hci14: command tx timeout [ 250.725591][ T9142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.733018][ T9142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.759810][ T9142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.773480][ T9142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.780677][ T9142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.808261][ T9142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.970139][ T9142] hsr_slave_0: entered promiscuous mode [ 250.977026][ T9142] hsr_slave_1: entered promiscuous mode [ 250.983531][ T9142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.991146][ T9142] Cannot create hsr debugfs directory [ 250.997369][ T5832] Bluetooth: hci10: command tx timeout [ 252.511656][ T5832] Bluetooth: hci11: command tx timeout [ 252.591680][ T5832] Bluetooth: hci12: command tx timeout [ 252.681705][ T5832] Bluetooth: hci13: command tx timeout [ 252.761751][ T5832] Bluetooth: hci14: command tx timeout [ 253.072510][ T5832] Bluetooth: hci10: command tx timeout [ 254.591501][ T5832] Bluetooth: hci11: command tx timeout [ 254.671950][ T5832] Bluetooth: hci12: command tx timeout [ 254.761548][ T5832] Bluetooth: hci13: command tx timeout [ 254.831563][ T5832] Bluetooth: hci14: command tx timeout [ 255.151658][ T5832] Bluetooth: hci10: command tx timeout [ 256.672150][ T5832] Bluetooth: hci11: command tx timeout [ 256.751506][ T5832] Bluetooth: hci12: command tx timeout [ 256.832099][ T5832] Bluetooth: hci13: command tx timeout [ 256.911503][ T5832] Bluetooth: hci14: command tx timeout [ 307.420551][ T5839] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 307.431132][ T5839] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 307.439839][ T5839] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 307.452899][ T5839] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 307.461953][ T5839] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 307.469396][ T5839] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 307.649237][ T9169] chnl_net:caif_netlink_parms(): no params data found [ 307.732784][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.740090][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.747796][ T9169] bridge_slave_0: entered allmulticast mode [ 307.756025][ T9169] bridge_slave_0: entered promiscuous mode [ 307.764502][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.772424][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.779756][ T9169] bridge_slave_1: entered allmulticast mode [ 307.787294][ T9169] bridge_slave_1: entered promiscuous mode [ 307.823357][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.837022][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.875003][ T9169] team0: Port device team_slave_0 added [ 307.886108][ T9169] team0: Port device team_slave_1 added [ 307.916181][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.923390][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.950092][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.964258][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.971915][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.998585][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.044684][ T9169] hsr_slave_0: entered promiscuous mode [ 308.051596][ T9169] hsr_slave_1: entered promiscuous mode [ 308.057884][ T9169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.066041][ T9169] Cannot create hsr debugfs directory [ 308.836394][ T5839] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 308.846208][ T5839] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 308.855176][ T5839] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 308.864719][ T5839] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 308.872926][ T5839] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 308.880371][ T5839] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 308.963692][ T5849] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 308.981704][ T5849] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 308.990242][ T5849] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 308.998887][ T5849] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 309.007839][ T5849] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 309.015999][ T5849] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 309.064391][ T5849] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 309.075190][ T5849] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 309.092347][ T5849] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 309.111772][ T5849] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 309.123052][ T5849] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 309.132025][ T5849] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 309.178380][ T5849] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 309.191717][ T5849] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 309.201558][ T5849] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 309.214311][ T5849] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 309.222426][ T5849] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 309.230024][ T5849] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 309.422012][ T9181] chnl_net:caif_netlink_parms(): no params data found [ 309.551510][ T5832] Bluetooth: hci15: command tx timeout [ 309.654962][ T9185] chnl_net:caif_netlink_parms(): no params data found [ 309.666454][ T9181] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.673792][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.682663][ T9181] bridge_slave_0: entered allmulticast mode [ 309.689824][ T9181] bridge_slave_0: entered promiscuous mode [ 309.722422][ T9181] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.729683][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.737697][ T9181] bridge_slave_1: entered allmulticast mode [ 309.745499][ T9181] bridge_slave_1: entered promiscuous mode [ 309.839988][ T9181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.866081][ T9183] chnl_net:caif_netlink_parms(): no params data found [ 309.912760][ T9181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.993235][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.000462][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.007890][ T9185] bridge_slave_0: entered allmulticast mode [ 310.015957][ T9185] bridge_slave_0: entered promiscuous mode [ 310.035386][ T9181] team0: Port device team_slave_0 added [ 310.044535][ T9181] team0: Port device team_slave_1 added [ 310.097448][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.105760][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.114641][ T9185] bridge_slave_1: entered allmulticast mode [ 310.121996][ T9185] bridge_slave_1: entered promiscuous mode [ 310.169401][ T9188] chnl_net:caif_netlink_parms(): no params data found [ 310.182277][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.189282][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.217350][ T9181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.256088][ T9185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.266433][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.274929][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.301865][ T9181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.343553][ T9185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.400379][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.407987][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.415451][ T9183] bridge_slave_0: entered allmulticast mode [ 310.423765][ T9183] bridge_slave_0: entered promiscuous mode [ 310.432876][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.439988][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.447520][ T9183] bridge_slave_1: entered allmulticast mode [ 310.455499][ T9183] bridge_slave_1: entered promiscuous mode [ 310.469257][ T9185] team0: Port device team_slave_0 added [ 310.522404][ T9185] team0: Port device team_slave_1 added [ 310.532188][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.593464][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.626376][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.634391][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.642235][ T9188] bridge_slave_0: entered allmulticast mode [ 310.649559][ T9188] bridge_slave_0: entered promiscuous mode [ 310.663629][ T9181] hsr_slave_0: entered promiscuous mode [ 310.670298][ T9181] hsr_slave_1: entered promiscuous mode [ 310.677751][ T9181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.685620][ T9181] Cannot create hsr debugfs directory [ 310.692870][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.699861][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.727579][ T9185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.752766][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.759909][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.767786][ T9188] bridge_slave_1: entered allmulticast mode [ 310.775331][ T9188] bridge_slave_1: entered promiscuous mode [ 310.808364][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.816141][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.842823][ T9185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.875349][ T9183] team0: Port device team_slave_0 added [ 310.885556][ T9183] team0: Port device team_slave_1 added [ 310.911721][ T9188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.976930][ T9188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.992626][ T5832] Bluetooth: hci16: command tx timeout [ 311.015019][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.022785][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.049159][ T9183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.071830][ T5832] Bluetooth: hci17: command tx timeout [ 311.108290][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.118317][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.145839][ T9183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.156557][ T5832] Bluetooth: hci18: command tx timeout [ 311.183621][ T9188] team0: Port device team_slave_0 added [ 311.198932][ T9185] hsr_slave_0: entered promiscuous mode [ 311.206581][ T9185] hsr_slave_1: entered promiscuous mode [ 311.213510][ T9185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.222176][ T9185] Cannot create hsr debugfs directory [ 311.238580][ T9188] team0: Port device team_slave_1 added [ 311.311803][ T5832] Bluetooth: hci19: command tx timeout [ 311.343058][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.350067][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.378207][ T9188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.417418][ T9183] hsr_slave_0: entered promiscuous mode [ 311.425492][ T9183] hsr_slave_1: entered promiscuous mode [ 311.432295][ T9183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.439908][ T9183] Cannot create hsr debugfs directory [ 311.446523][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.454195][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.480844][ T9188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.600147][ T9188] hsr_slave_0: entered promiscuous mode [ 311.613172][ T9188] hsr_slave_1: entered promiscuous mode [ 311.619483][ T9188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.627827][ T9188] Cannot create hsr debugfs directory [ 311.633636][ T5832] Bluetooth: hci15: command tx timeout [ 313.071657][ T5832] Bluetooth: hci16: command tx timeout [ 313.161601][ T5832] Bluetooth: hci17: command tx timeout [ 313.232235][ T5832] Bluetooth: hci18: command tx timeout [ 313.401514][ T5832] Bluetooth: hci19: command tx timeout [ 313.711617][ T5832] Bluetooth: hci15: command tx timeout [ 314.357231][ T5832] Bluetooth: hci9: command 0x0406 tx timeout [ 314.360082][ T5849] Bluetooth: hci7: command 0x0406 tx timeout [ 314.365523][ T5832] Bluetooth: hci6: command 0x0406 tx timeout [ 314.369851][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 314.376047][ T5832] Bluetooth: hci8: command 0x0406 tx timeout [ 315.151629][ T5838] Bluetooth: hci16: command tx timeout [ 315.231470][ T5838] Bluetooth: hci17: command tx timeout [ 315.311474][ T5838] Bluetooth: hci18: command tx timeout [ 315.471577][ T5838] Bluetooth: hci19: command tx timeout [ 315.482187][ T30] INFO: task syz.4.853:9012 blocked for more than 143 seconds. [ 315.489813][ T30] Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 315.497751][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.506910][ T30] task:syz.4.853 state:D stack:21912 pid:9012 tgid:9011 ppid:5829 flags:0x00004006 [ 315.517704][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 315.521025][ T30] [ 315.531282][ T30] __schedule+0x1850/0x4c30 [ 315.536106][ T30] ? __pfx___schedule+0x10/0x10 [ 315.541019][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.591696][ T30] ? __lock_acquire+0x1397/0x2100 [ 315.596835][ T30] ? schedule+0x90/0x320 [ 315.601124][ T30] schedule+0x14b/0x320 [ 315.630281][ T30] schedule_timeout+0xb0/0x290 [ 315.636213][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 315.641874][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 315.647917][ T30] ? wait_for_completion+0x2fe/0x620 [ 315.654318][ T30] ? wait_for_completion+0x2fe/0x620 [ 315.659664][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.665818][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 315.671068][ T30] ? wait_for_completion+0x2fe/0x620 [ 315.676566][ T30] wait_for_completion+0x355/0x620 [ 315.681976][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 315.687662][ T30] ? flush_workqueue_prep_pwqs+0x4c3/0x530 [ 315.694422][ T30] ? check_flush_dependency+0x88/0x3c0 [ 315.699931][ T30] ? __flush_workqueue+0x504/0x1280 [ 315.705480][ T30] __flush_workqueue+0x575/0x1280 [ 315.710558][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 315.717229][ T30] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 315.724891][ T30] ? __wake_up_common_lock+0x18c/0x1e0 [ 315.730428][ T30] nbd_disconnect_and_put+0xaa/0x250 [ 315.735903][ T30] nbd_genl_disconnect+0x451/0x720 [ 315.741064][ T30] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 315.747070][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 315.754270][ T30] genl_rcv_msg+0xb14/0xec0 [ 315.758843][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.765033][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 315.770134][ T30] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 315.775971][ T30] ? __pfx___might_resched+0x10/0x10 [ 315.782221][ T30] netlink_rcv_skb+0x1e3/0x430 [ 315.787040][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.793370][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.798757][ T30] genl_rcv+0x28/0x40 [ 315.803085][ T5838] Bluetooth: hci15: command tx timeout [ 315.808633][ T30] netlink_unicast+0x7f6/0x990 [ 315.814146][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 315.819476][ T30] ? __virt_addr_valid+0x45f/0x530 [ 315.825616][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 315.830794][ T30] ? __check_object_size+0x47a/0x730 [ 315.836332][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 315.841146][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.847282][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 315.852526][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.857869][ T30] __sock_sendmsg+0x221/0x270 [ 315.862900][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 315.867722][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.873920][ T30] ? __fget_files+0x2a/0x410 [ 315.878561][ T30] ? __fget_files+0x2a/0x410 [ 315.883584][ T30] __sys_sendmsg+0x269/0x350 [ 315.888233][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.893643][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.900016][ T30] ? do_syscall_64+0x100/0x230 [ 315.905730][ T30] ? do_syscall_64+0xb6/0x230 [ 315.910465][ T30] do_syscall_64+0xf3/0x230 [ 315.915350][ T30] ? clear_bhb_loop+0x35/0x90 [ 315.920107][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.926748][ T30] RIP: 0033:0x7fca53985d29 [ 315.931911][ T30] RSP: 002b:00007fca5489d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.940391][ T30] RAX: ffffffffffffffda RBX: 00007fca53b75fa0 RCX: 00007fca53985d29 [ 315.948832][ T30] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000007 [ 315.957018][ T30] RBP: 00007fca53a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 315.965824][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.973991][ T30] R13: 0000000000000000 R14: 00007fca53b75fa0 R15: 00007ffc6135d8f8 [ 315.982344][ T30] [ 315.985427][ T30] INFO: task syz.2.860:9041 blocked for more than 143 seconds. [ 315.993765][ T30] Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 316.001742][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.010451][ T30] task:syz.2.860 state:D stack:23336 pid:9041 tgid:9032 ppid:5830 flags:0x00004004 [ 316.020827][ T30] Call Trace: [ 316.025168][ T30] [ 316.028673][ T30] __schedule+0x1850/0x4c30 [ 316.033668][ T30] ? __pfx___schedule+0x10/0x10 [ 316.038593][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.043905][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 316.049852][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.056647][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.063354][ T30] ? schedule+0x90/0x320 [ 316.067654][ T30] schedule+0x14b/0x320 [ 316.071999][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.077502][ T30] __mutex_lock+0x7e7/0xee0 [ 316.082858][ T30] ? __mutex_lock+0x5ef/0xee0 [ 316.087597][ T30] ? genl_rcv_msg+0x121/0xec0 [ 316.092506][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.097603][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 316.104061][ T30] ? __pfx_validate_chain+0x10/0x10 [ 316.109315][ T30] ? radix_tree_lookup+0x238/0x290 [ 316.115487][ T30] genl_rcv_msg+0x121/0xec0 [ 316.120049][ T30] ? mark_lock+0x9a/0x360 [ 316.124746][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.130346][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 316.135767][ T30] ? __pfx___might_resched+0x10/0x10 [ 316.141121][ T30] netlink_rcv_skb+0x1e3/0x430 [ 316.146867][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.152076][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.157451][ T30] genl_rcv+0x28/0x40 [ 316.161674][ T30] netlink_unicast+0x7f6/0x990 [ 316.166507][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 316.172526][ T30] ? __virt_addr_valid+0x45f/0x530 [ 316.177689][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 316.183082][ T30] ? __check_object_size+0x47a/0x730 [ 316.188422][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 316.201997][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.207374][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 316.213083][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.218422][ T30] __sock_sendmsg+0x221/0x270 [ 316.223460][ T30] __sys_sendto+0x363/0x4c0 [ 316.228023][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 316.234493][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 316.240546][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.247258][ T30] ? exc_page_fault+0x590/0x8b0 [ 316.252398][ T30] __x64_sys_sendto+0xde/0x100 [ 316.257219][ T30] do_syscall_64+0xf3/0x230 [ 316.262616][ T30] ? clear_bhb_loop+0x35/0x90 [ 316.267356][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.273708][ T30] RIP: 0033:0x7fe3e4187bbc [ 316.278256][ T30] RSP: 002b:00007fe3e4fe8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 316.286812][ T30] RAX: ffffffffffffffda RBX: 00007fe3e4fe8fc0 RCX: 00007fe3e4187bbc [ 316.295628][ T30] RDX: 0000000000000020 RSI: 00007fe3e4fe9010 RDI: 000000000000000f [ 316.303842][ T30] RBP: 0000000000000000 R08: 00007fe3e4fe8f14 R09: 000000000000000c [ 316.312101][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000f [ 316.320106][ T30] R13: 00007fe3e4fe8f68 R14: 00007fe3e4fe9010 R15: 0000000000000000 [ 316.328993][ T30] [ 316.332330][ T30] INFO: task syz.2.860:9049 blocked for more than 144 seconds. [ 316.340484][ T30] Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 316.348393][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.358096][ T30] task:syz.2.860 state:D stack:26152 pid:9049 tgid:9032 ppid:5830 flags:0x00000004 [ 316.368449][ T30] Call Trace: [ 316.372008][ T30] [ 316.374975][ T30] __schedule+0x1850/0x4c30 [ 316.379557][ T30] ? __pfx___schedule+0x10/0x10 [ 316.385339][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.390598][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 316.396824][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.402851][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.409229][ T30] ? schedule+0x90/0x320 [ 316.414327][ T30] schedule+0x14b/0x320 [ 316.418544][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.424243][ T30] __mutex_lock+0x7e7/0xee0 [ 316.428791][ T30] ? __mutex_lock+0x5ef/0xee0 [ 316.433825][ T30] ? genl_rcv_msg+0x121/0xec0 [ 316.439076][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.444980][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 316.451213][ T30] ? __pfx_validate_chain+0x10/0x10 [ 316.456763][ T30] ? radix_tree_lookup+0x238/0x290 [ 316.462333][ T30] genl_rcv_msg+0x121/0xec0 [ 316.466917][ T30] ? mark_lock+0x9a/0x360 [ 316.472095][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.477214][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 316.482414][ T30] ? __pfx___might_resched+0x10/0x10 [ 316.487755][ T30] netlink_rcv_skb+0x1e3/0x430 [ 316.492820][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.497907][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.504171][ T30] genl_rcv+0x28/0x40 [ 316.508213][ T30] netlink_unicast+0x7f6/0x990 [ 316.513480][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 316.518821][ T30] ? __virt_addr_valid+0x45f/0x530 [ 316.524105][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 316.529183][ T30] ? __check_object_size+0x47a/0x730 [ 316.535400][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 316.540919][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.546604][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 316.551832][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.557168][ T30] __sock_sendmsg+0x221/0x270 [ 316.562597][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 316.567445][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.573149][ T30] ? __fget_files+0x2a/0x410 [ 316.577800][ T30] ? __fget_files+0x2a/0x410 [ 316.582638][ T30] __sys_sendmsg+0x269/0x350 [ 316.587286][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.593239][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.599629][ T30] ? do_syscall_64+0x100/0x230 [ 316.604663][ T30] ? do_syscall_64+0xb6/0x230 [ 316.609431][ T30] do_syscall_64+0xf3/0x230 [ 316.614202][ T30] ? clear_bhb_loop+0x35/0x90 [ 316.618941][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.625695][ T30] RIP: 0033:0x7fe3e4185d29 [ 316.630168][ T30] RSP: 002b:00007fe3e4fc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.638908][ T30] RAX: ffffffffffffffda RBX: 00007fe3e4376160 RCX: 00007fe3e4185d29 [ 316.649078][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000011 [ 316.657991][ T30] RBP: 00007fe3e4201b08 R08: 0000000000000000 R09: 0000000000000000 [ 316.666335][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.674699][ T30] R13: 0000000000000000 R14: 00007fe3e4376160 R15: 00007ffff83ba678 [ 316.683695][ T30] [ 316.686789][ T30] INFO: task syz.1.858:9040 blocked for more than 144 seconds. [ 316.696051][ T30] Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 316.703959][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.713811][ T30] task:syz.1.858 state:D stack:26600 pid:9040 tgid:9033 ppid:5831 flags:0x00000004 [ 316.724208][ T30] Call Trace: [ 316.727523][ T30] [ 316.730505][ T30] __schedule+0x1850/0x4c30 [ 316.735339][ T30] ? __pfx___schedule+0x10/0x10 [ 316.740250][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.746675][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 316.752904][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.758854][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.765450][ T30] ? schedule+0x90/0x320 [ 316.769757][ T30] schedule+0x14b/0x320 [ 316.774804][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.780316][ T30] __mutex_lock+0x7e7/0xee0 [ 316.785190][ T30] ? __mutex_lock+0x5ef/0xee0 [ 316.789930][ T30] ? genl_rcv_msg+0x121/0xec0 [ 316.795015][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.800083][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.807154][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 316.812801][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 316.818050][ T30] ? radix_tree_lookup+0x238/0x290 [ 316.823542][ T30] genl_rcv_msg+0x121/0xec0 [ 316.828105][ T30] ? mark_lock+0x9a/0x360 [ 316.833306][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.838490][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 316.843661][ T30] ? __pfx___might_resched+0x10/0x10 [ 316.849534][ T30] netlink_rcv_skb+0x1e3/0x430 [ 316.854615][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.859698][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.865862][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 316.871629][ T30] genl_rcv+0x28/0x40 [ 316.875677][ T30] netlink_unicast+0x7f6/0x990 [ 316.880493][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 316.886003][ T30] ? __virt_addr_valid+0x45f/0x530 [ 316.891152][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 316.897055][ T30] ? __check_object_size+0x47a/0x730 [ 316.902810][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 316.907642][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.913326][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 316.918311][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.924372][ T30] __sock_sendmsg+0x221/0x270 [ 316.929099][ T30] __sys_sendto+0x363/0x4c0 [ 316.933883][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 316.938996][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 316.945256][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.952958][ T30] ? exc_page_fault+0x590/0x8b0 [ 316.957877][ T30] __x64_sys_sendto+0xde/0x100 [ 316.962824][ T30] do_syscall_64+0xf3/0x230 [ 316.967396][ T30] ? clear_bhb_loop+0x35/0x90 [ 316.972415][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.978408][ T30] RIP: 0033:0x7f949bd87bbc [ 316.983759][ T30] RSP: 002b:00007f949cb40ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 316.992579][ T30] RAX: ffffffffffffffda RBX: 00007f949cb40fc0 RCX: 00007f949bd87bbc [ 317.000700][ T30] RDX: 0000000000000020 RSI: 00007f949cb41010 RDI: 0000000000000006 [ 317.008816][ T30] RBP: 0000000000000000 R08: 00007f949cb40f14 R09: 000000000000000c [ 317.017865][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 317.026231][ T30] R13: 00007f949cb40f68 R14: 00007f949cb41010 R15: 0000000000000000 [ 317.034572][ T30] [ 317.037752][ T30] INFO: task syz.1.858:9047 blocked for more than 144 seconds. [ 317.046104][ T30] Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 317.054527][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.063454][ T30] task:syz.1.858 state:D stack:26600 pid:9047 tgid:9033 ppid:5831 flags:0x00000004 [ 317.074666][ T30] Call Trace: [ 317.077985][ T30] [ 317.080944][ T30] __schedule+0x1850/0x4c30 [ 317.085650][ T30] ? __pfx___schedule+0x10/0x10 [ 317.090669][ T30] ? __pfx_lock_release+0x10/0x10 [ 317.096034][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 317.102835][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 317.108785][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.115423][ T30] ? schedule+0x90/0x320 [ 317.119718][ T30] schedule+0x14b/0x320 [ 317.124173][ T30] schedule_preempt_disabled+0x13/0x30 [ 317.129706][ T30] __mutex_lock+0x7e7/0xee0 [ 317.135083][ T30] ? __mutex_lock+0x5ef/0xee0 [ 317.139825][ T30] ? genl_rcv_msg+0x121/0xec0 [ 317.144803][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 317.149879][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.157185][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 317.163338][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 317.168598][ T30] ? radix_tree_lookup+0x238/0x290 [ 317.173998][ T30] genl_rcv_msg+0x121/0xec0 [ 317.178563][ T30] ? mark_lock+0x9a/0x360 [ 317.183224][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.188342][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.194324][ T30] ? __pfx___might_resched+0x10/0x10 [ 317.199657][ T30] netlink_rcv_skb+0x1e3/0x430 [ 317.204701][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.209802][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.215435][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 317.220967][ T30] genl_rcv+0x28/0x40 [ 317.225835][ T30] netlink_unicast+0x7f6/0x990 [ 317.230651][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 317.245144][ T5838] Bluetooth: hci16: command tx timeout [ 317.250725][ T30] ? __virt_addr_valid+0x45f/0x530 [ 317.257163][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 317.262582][ T30] ? __check_object_size+0x47a/0x730 [ 317.267931][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 317.272879][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.278226][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 317.284055][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.289401][ T30] __sock_sendmsg+0x221/0x270 [ 317.294311][ T30] __sys_sendto+0x363/0x4c0 [ 317.298876][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 317.304281][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 317.310426][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.317695][ T30] __x64_sys_sendto+0xde/0x100 [ 317.322741][ T5838] Bluetooth: hci17: command tx timeout [ 317.328303][ T30] do_syscall_64+0xf3/0x230 [ 317.333032][ T30] ? clear_bhb_loop+0x35/0x90 [ 317.337763][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.344772][ T30] RIP: 0033:0x7f949bd87bbc [ 317.349225][ T30] RSP: 002b:00007f949cb1fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 317.358317][ T30] RAX: ffffffffffffffda RBX: 00007f949cb1ffc0 RCX: 00007f949bd87bbc [ 317.366589][ T30] RDX: 0000000000000028 RSI: 00007f949cb20010 RDI: 0000000000000007 [ 317.375518][ T30] RBP: 0000000000000000 R08: 00007f949cb1ff14 R09: 000000000000000c [ 317.383848][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 317.395128][ T5838] Bluetooth: hci18: command tx timeout [ 317.400693][ T30] R13: 00007f949cb1ff68 R14: 00007f949cb20010 R15: 0000000000000000 [ 317.409620][ T30] [ 317.412896][ T30] INFO: task syz.3.868:9071 blocked for more than 145 seconds. [ 317.420566][ T30] Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 317.428651][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.437892][ T30] task:syz.3.868 state:D stack:26600 pid:9071 tgid:9070 ppid:5841 flags:0x00000004 [ 317.448322][ T30] Call Trace: [ 317.451909][ T30] [ 317.454881][ T30] __schedule+0x1850/0x4c30 [ 317.459455][ T30] ? __pfx___schedule+0x10/0x10 [ 317.465789][ T30] ? __pfx_lock_release+0x10/0x10 [ 317.470881][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 317.476924][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 317.483065][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.489450][ T30] ? schedule+0x90/0x320 [ 317.494464][ T30] schedule+0x14b/0x320 [ 317.498760][ T30] schedule_preempt_disabled+0x13/0x30 [ 317.504604][ T30] __mutex_lock+0x7e7/0xee0 [ 317.509164][ T30] ? __mutex_lock+0x5ef/0xee0 [ 317.514019][ T30] ? genl_rcv_msg+0x121/0xec0 [ 317.518759][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 317.524681][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.530888][ T30] ? __pfx_validate_chain+0x10/0x10 [ 317.536319][ T30] ? radix_tree_lookup+0x238/0x290 [ 317.541836][ T30] genl_rcv_msg+0x121/0xec0 [ 317.546407][ T30] ? mark_lock+0x9a/0x360 [ 317.550788][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.556683][ T5838] Bluetooth: hci19: command tx timeout [ 317.563045][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.568143][ T30] ? __pfx___might_resched+0x10/0x10 [ 317.573611][ T30] netlink_rcv_skb+0x1e3/0x430 [ 317.578439][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.584509][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.589880][ T30] genl_rcv+0x28/0x40 [ 317.594214][ T30] netlink_unicast+0x7f6/0x990 [ 317.599044][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 317.604577][ T30] ? __virt_addr_valid+0x45f/0x530 [ 317.609733][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 317.615501][ T30] ? __check_object_size+0x47a/0x730 [ 317.620840][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 317.625950][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.631405][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 317.636412][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.642624][ T30] __sock_sendmsg+0x221/0x270 [ 317.647385][ T30] __sys_sendto+0x363/0x4c0 [ 317.652108][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 317.657208][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 317.663547][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.670448][ T30] ? exc_page_fault+0x590/0x8b0 [ 317.676311][ T30] __x64_sys_sendto+0xde/0x100 [ 317.681125][ T30] do_syscall_64+0xf3/0x230 [ 317.685895][ T30] ? clear_bhb_loop+0x35/0x90 [ 317.690631][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.696795][ T30] RIP: 0033:0x7fe5a0587bbc [ 317.702116][ T30] RSP: 002b:00007fe5a13b0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 317.710596][ T30] RAX: ffffffffffffffda RBX: 00007fe5a13b0fc0 RCX: 00007fe5a0587bbc [ 317.718887][ T30] RDX: 0000000000000020 RSI: 00007fe5a13b1010 RDI: 0000000000000005 [ 317.727099][ T30] RBP: 0000000000000000 R08: 00007fe5a13b0f14 R09: 000000000000000c [ 317.735844][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 317.744213][ T30] R13: 00007fe5a13b0f68 R14: 00007fe5a13b1010 R15: 0000000000000000 [ 317.752462][ T30] [ 317.755562][ T30] INFO: task syz.0.869:9077 blocked for more than 145 seconds. [ 317.764080][ T30] Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 317.772328][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.781047][ T30] task:syz.0.869 state:D stack:23544 pid:9077 tgid:9075 ppid:5837 flags:0x00000004 [ 317.792481][ T30] Call Trace: [ 317.795806][ T30] [ 317.798801][ T30] __schedule+0x1850/0x4c30 [ 317.803603][ T30] ? __pfx___schedule+0x10/0x10 [ 317.808507][ T30] ? __pfx_lock_release+0x10/0x10 [ 317.813796][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 317.819741][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 317.826507][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.833154][ T30] ? schedule+0x90/0x320 [ 317.837442][ T30] schedule+0x14b/0x320 [ 317.841740][ T30] schedule_preempt_disabled+0x13/0x30 [ 317.847246][ T30] __mutex_lock+0x7e7/0xee0 [ 317.852650][ T30] ? __mutex_lock+0x5ef/0xee0 [ 317.857376][ T30] ? genl_rcv_msg+0x121/0xec0 [ 317.862571][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 317.867663][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.874976][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 317.880426][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 317.886402][ T30] ? radix_tree_lookup+0x238/0x290 [ 317.891770][ T30] genl_rcv_msg+0x121/0xec0 [ 317.896369][ T30] ? mark_lock+0x9a/0x360 [ 317.900752][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.906269][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.912214][ T30] ? __pfx___might_resched+0x10/0x10 [ 317.917578][ T30] netlink_rcv_skb+0x1e3/0x430 [ 317.922545][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.927645][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.933310][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 317.938846][ T30] genl_rcv+0x28/0x40 [ 317.943726][ T30] netlink_unicast+0x7f6/0x990 [ 317.948572][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 317.954191][ T30] ? __virt_addr_valid+0x45f/0x530 [ 317.959363][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 317.964504][ T30] ? __check_object_size+0x47a/0x730 [ 317.969846][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 317.976085][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.981718][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 317.986724][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.992388][ T30] __sock_sendmsg+0x221/0x270 [ 317.997142][ T30] __sys_sendto+0x363/0x4c0 [ 318.002472][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 318.007565][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.014042][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.020427][ T30] ? exc_page_fault+0x590/0x8b0 [ 318.025642][ T30] __x64_sys_sendto+0xde/0x100 [ 318.030462][ T30] do_syscall_64+0xf3/0x230 [ 318.036001][ T30] ? clear_bhb_loop+0x35/0x90 [ 318.040733][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.046777][ T30] RIP: 0033:0x7fc3d9d87bbc [ 318.051542][ T30] RSP: 002b:00007fc3dac3cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 318.060057][ T30] RAX: ffffffffffffffda RBX: 00007fc3dac3cfc0 RCX: 00007fc3d9d87bbc [ 318.068923][ T30] RDX: 0000000000000024 RSI: 00007fc3dac3d010 RDI: 000000000000000b [ 318.077830][ T30] RBP: 0000000000000000 R08: 00007fc3dac3cf14 R09: 000000000000000c [ 318.086059][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 318.094866][ T30] R13: 00007fc3dac3cf68 R14: 00007fc3dac3d010 R15: 0000000000000000 [ 318.103277][ T30] [ 318.106413][ T30] [ 318.106413][ T30] Showing all locks held in the system: [ 318.114902][ T30] 1 lock held by khungtaskd/30: [ 318.119815][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 318.130747][ T30] 2 locks held by kworker/u8:8/1166: [ 318.136349][ T30] 2 locks held by kworker/u9:1/5145: [ 318.142058][ T30] #0: ffff8880257cb148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 318.154242][ T30] #1: ffffc90010697d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 318.166240][ T30] 2 locks held by getty/5584: [ 318.170937][ T30] #0: ffff88814e8300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 318.182576][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 318.193180][ T30] 3 locks held by syz.4.853/9012: [ 318.198250][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.206734][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.216505][ T30] #2: ffff888025677198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x34/0x250 [ 318.227357][ T30] 2 locks held by syz.2.860/9041: [ 318.232671][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.240940][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.250804][ T30] 2 locks held by syz.2.860/9049: [ 318.256232][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.264858][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.283910][ T30] 2 locks held by syz.1.858/9040: [ 318.289008][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.297406][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.307431][ T30] 2 locks held by syz.1.858/9047: [ 318.312713][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.320989][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.330413][ T30] 2 locks held by syz.3.868/9071: [ 318.336209][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.344970][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.354275][ T30] 2 locks held by syz.0.869/9077: [ 318.359509][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.368666][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.377867][ T30] 2 locks held by syz-executor/9081: [ 318.384187][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.393244][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.402534][ T30] 2 locks held by syz-executor/9082: [ 318.407848][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.416319][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.426348][ T30] 2 locks held by syz-executor/9086: [ 318.431813][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.440098][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.449866][ T30] 2 locks held by syz-executor/9093: [ 318.456101][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.464731][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.473975][ T30] 2 locks held by syz-executor/9097: [ 318.479290][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.489049][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.498286][ T30] 2 locks held by syz-executor/9124: [ 318.503883][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.512893][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.522176][ T30] 2 locks held by syz-executor/9136: [ 318.527507][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.536005][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.546011][ T30] 2 locks held by syz-executor/9138: [ 318.552138][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.560440][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.569772][ T30] 2 locks held by syz-executor/9140: [ 318.578450][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.587617][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.596897][ T30] 2 locks held by syz-executor/9142: [ 318.603017][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.611453][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.620525][ T30] 2 locks held by syz-executor/9169: [ 318.626219][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.635302][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.644647][ T30] 2 locks held by syz-executor/9181: [ 318.649997][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.658432][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.668451][ T30] 2 locks held by syz-executor/9183: [ 318.674133][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.682671][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.692994][ T30] 2 locks held by syz-executor/9185: [ 318.698411][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.706998][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.716342][ T30] 2 locks held by syz-executor/9188: [ 318.722407][ T30] #0: ffffffff8fd17970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 318.730697][ T30] #1: ffffffff8fd17828 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 318.739985][ T30] [ 318.742662][ T30] ============================================= [ 318.742662][ T30] [ 318.751121][ T30] NMI backtrace for cpu 1 [ 318.755480][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 318.766087][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 318.776160][ T30] Call Trace: [ 318.779495][ T30] [ 318.782523][ T30] dump_stack_lvl+0x241/0x360 [ 318.787237][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.792470][ T30] ? __pfx__printk+0x10/0x10 [ 318.797106][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 318.802085][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 318.807595][ T30] ? _printk+0xd5/0x120 [ 318.811795][ T30] ? __pfx__printk+0x10/0x10 [ 318.816423][ T30] ? __wake_up_klogd+0xcc/0x110 [ 318.821314][ T30] ? __pfx__printk+0x10/0x10 [ 318.825948][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 318.831010][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 318.837035][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 318.843028][ T30] watchdog+0xff6/0x1040 [ 318.847315][ T30] ? watchdog+0x1ea/0x1040 [ 318.851759][ T30] ? __pfx_watchdog+0x10/0x10 [ 318.856467][ T30] kthread+0x2f0/0x390 [ 318.860555][ T30] ? __pfx_watchdog+0x10/0x10 [ 318.865248][ T30] ? __pfx_kthread+0x10/0x10 [ 318.869856][ T30] ret_from_fork+0x4b/0x80 [ 318.874310][ T30] ? __pfx_kthread+0x10/0x10 [ 318.878916][ T30] ret_from_fork_asm+0x1a/0x30 [ 318.883826][ T30] [ 318.888608][ T30] Sending NMI from CPU 1 to CPUs 0: [ 318.894494][ C0] NMI backtrace for cpu 0 [ 318.894508][ C0] CPU: 0 UID: 0 PID: 61 Comm: kworker/u8:4 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 318.894530][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 318.894543][ C0] Workqueue: bat_events batadv_nc_worker [ 318.894576][ C0] RIP: 0010:batadv_nc_purge_paths+0x30d/0x3b0 [ 318.894597][ C0] Code: ff ff e8 d6 79 07 f6 4c 89 e7 be 03 00 00 00 e8 a9 5b 2a f9 e9 90 fe ff ff e8 bf 79 07 f6 eb 05 e8 b8 79 07 f6 48 8b 7c 24 50 be 13 37 00 48 8b 54 24 18 48 ff c2 48 8b 44 24 48 42 0f b6 04 [ 318.894613][ C0] RSP: 0018:ffffc9000213fac0 EFLAGS: 00000293 [ 318.894628][ C0] RAX: ffffffff8b980a68 RBX: ffffffff8b980b20 RCX: ffff88801b3f5a00 [ 318.894643][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88808fe497c0 [ 318.894655][ C0] RBP: ffff8880465f8af8 R08: 0000000000000003 R09: fffff52000427f48 [ 318.894678][ C0] R10: dffffc0000000000 R11: fffff52000427f48 R12: ffff88808ff44d80 [ 318.894692][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88808fd084d0 [ 318.894705][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 318.894720][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.894733][ C0] CR2: 000055dbedca2088 CR3: 000000000e736000 CR4: 00000000003526f0 [ 318.894749][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.894761][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.894772][ C0] Call Trace: [ 318.894779][ C0] [ 318.894787][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 318.894807][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 318.894831][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 318.894849][ C0] ? nmi_handle+0x2a/0x5a0 [ 318.894879][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 318.894896][ C0] ? nmi_handle+0x14f/0x5a0 [ 318.894918][ C0] ? nmi_handle+0x2a/0x5a0 [ 318.894941][ C0] ? batadv_nc_purge_paths+0x30d/0x3b0 [ 318.894958][ C0] ? default_do_nmi+0x63/0x160 [ 318.894976][ C0] ? exc_nmi+0x123/0x1f0 [ 318.894992][ C0] ? end_repeat_nmi+0xf/0x53 [ 318.895019][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 318.895040][ C0] ? batadv_nc_purge_paths+0x308/0x3b0 [ 318.895058][ C0] ? batadv_nc_purge_paths+0x30d/0x3b0 [ 318.895077][ C0] ? batadv_nc_purge_paths+0x30d/0x3b0 [ 318.895105][ C0] ? batadv_nc_purge_paths+0x30d/0x3b0 [ 318.895123][ C0] [ 318.895129][ C0] [ 318.895142][ C0] batadv_nc_worker+0x328/0x610 [ 318.895170][ C0] ? batadv_nc_worker+0xcb/0x610 [ 318.895197][ C0] ? process_scheduled_works+0x976/0x1840 [ 318.895217][ C0] process_scheduled_works+0xa66/0x1840 [ 318.895249][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.895272][ C0] ? assign_work+0x364/0x3d0 [ 318.895293][ C0] worker_thread+0x870/0xd30 [ 318.895316][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 318.895339][ C0] ? __kthread_parkme+0x169/0x1d0 [ 318.895361][ C0] ? __pfx_worker_thread+0x10/0x10 [ 318.895380][ C0] kthread+0x2f0/0x390 [ 318.895401][ C0] ? __pfx_worker_thread+0x10/0x10 [ 318.895419][ C0] ? __pfx_kthread+0x10/0x10 [ 318.895442][ C0] ret_from_fork+0x4b/0x80 [ 318.895459][ C0] ? __pfx_kthread+0x10/0x10 [ 318.895481][ C0] ret_from_fork_asm+0x1a/0x30 [ 318.895506][ C0] [ 318.897159][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 319.222831][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 319.233342][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 319.243414][ T30] Call Trace: [ 319.246710][ T30] [ 319.249652][ T30] dump_stack_lvl+0x241/0x360 [ 319.254357][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.259579][ T30] ? __pfx__printk+0x10/0x10 [ 319.264187][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 319.270189][ T30] ? vscnprintf+0x5d/0x90 [ 319.274532][ T30] panic+0x349/0x880 [ 319.278451][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 319.284616][ T30] ? __pfx_panic+0x10/0x10 [ 319.289047][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 319.294441][ T30] ? __irq_work_queue_local+0x137/0x410 [ 319.300008][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 319.305401][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 319.311574][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 319.317752][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 319.323924][ T30] watchdog+0x1035/0x1040 [ 319.328272][ T30] ? watchdog+0x1ea/0x1040 [ 319.332712][ T30] ? __pfx_watchdog+0x10/0x10 [ 319.337406][ T30] kthread+0x2f0/0x390 [ 319.341494][ T30] ? __pfx_watchdog+0x10/0x10 [ 319.346188][ T30] ? __pfx_kthread+0x10/0x10 [ 319.350792][ T30] ret_from_fork+0x4b/0x80 [ 319.355225][ T30] ? __pfx_kthread+0x10/0x10 [ 319.359832][ T30] ret_from_fork_asm+0x1a/0x30 [ 319.364616][ T30] [ 319.367959][ T30] Kernel Offset: disabled [ 319.372330][ T30] Rebooting in 86400 seconds..