last executing test programs: 4m15.6985017s ago: executing program 0 (id=1918): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x476903, 0x100408) 4m15.555784588s ago: executing program 0 (id=1920): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000b2099cb533baddca7eb519c9cba4f0007040000f0ffffffb70200000800000018230000fe7cd280b30249a097fb31384ea3060a4fdf17bd7f6433ea8db290893e4b735aa91752d18a33ab128a", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 4m15.446328359s ago: executing program 0 (id=1921): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$kcm(0xa, 0x5, 0x0) (async) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) (async) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) (async) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0xa21}], 0x1, 0x103, 0x0) (async) unshare(0x22020600) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) 4m15.249479264s ago: executing program 0 (id=1923): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0xd}]}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}, {0x2c00, 0x4305, 0x18, 0x0, @wg=@data}}}}}}, 0x3e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r0, 0x0, 0x0, 0x24000fbd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r3, &(0x7f0000000e00)=[{{&(0x7f00000000c0)=@isdn={0x22, 0x0, 0x4, 0x7, 0xd}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)="89d88cffdcc39ea0117c40addd868b767ed82cc631afa4277256ce19590ac3cd43fafb0b2003f0dd44d22060b40f5daf36737598b71ca7cb09fd626bdf9e35cfe624314be1caa1d6e9f7e618874de4820df95fa16bf12826454dccfd975806d3502614182552b3e26cec98dd28912fc7159642dbed1b2ce6dd6e7e4601190eaee09c58f9ae8c15f1ea92271eacb145c46fdc7b1a97797324b3aa065e2240dacfb987e307e0a8c2fde028a6c85b40d325fc979d3a3a3b6837ec87bdc79aa86e2fd7704aa16b257a88ca315f8b3671e5271ee2", 0xd2}, {&(0x7f0000000540)="7440044fdf70839869eff1c2b383caadf8356f73bd24bfb05f3486a3bc4593a40ba93b48f1035af705d10d85ef24ed5c8ff46a368a4c0b2bc445e4c3a28dae99ac272ba1d7fe270c793747df56125feea486aafb6c8fc0b83bd9b5fc0dd9a6cc89201970081124f1be4f6698a3e1f608f92ea34ff413a4e4222e4ea4e00f231c0a36b52cb8ccb4c99b48add265cea0d992f5922208a3de5dffdc23a68eeb26962dcc01eea533ac", 0xa7}, {&(0x7f0000000140)="67691e071b0857d50f632e38c81f5776097f9dbbee8f414e86bd231a2b21af8c5b65fef77158f3385992301774e185c24ca5e1c3f5f6d04a38707814890ab375e2cd57c413e1c7ea378c2b5644b62c88c2e64d99c7dc07d08e46d3e81e58", 0x5e}, {&(0x7f0000000f80)="d47a3b3959c9c8815c7b987d1f6e3fc8bbd29dc358465fb286f4d2b8c5271cfbc9fd63be5e1638bb913f3901dfa698138b2d41a2e894385a5c545395fcb00435e16855847affa5eadd9894e04bdda79eb270327bc37dc70b7210fc57f0d76b81e15f054b9f9dad9275b6b60c7a810220d848a1201aa058047e85b22a7e7ef4b82631dfebe7bbab47316d65a93b5512c786fe2bff507db968e9f121fde921cd1f1da19a0b29860a11d30f05e8bbf2ec95dbdfb6bf37af23df0cc599176754275d2eb1e89cb93018387ea43ca27806329a55c49f6263811a7ea75f2dafcce7581272bafae847aab2", 0xe7}, {&(0x7f0000000040)="563c1a397a8a780f", 0x8}, {&(0x7f00000004c0)="0daec7a50a71585dc4da685f3f474854f2f8ba216ef195d09db89fc44f94d2b3cced7c2c63d9bbbef93ef8509fd9", 0x2e}, {&(0x7f0000000500)="443fda2dbd2df9994d199367379efac64d24434e06d3aa4dd57084", 0x1b}, {&(0x7f0000000ec0)="c8621d028cbcdf8a07e2d82318103dfcf8bb03f5c94e1b2c493ace6952363adf73f9ec3ac997cfacb6245d0f3e27f3aa5749d9f6847911ad124b8e8810fc35feaf0e0b8f8ecb91ddefc463b85ab4e078980ee74c1f2f957222729df21d995e1aa4d628b5d478b1da39c2d7c92cf64866954a9f7a19e533f7a60b588539bcd5bfb8665272d320697e3a96a3cc3d3ed404a7efe545f04b59053dc1b404ff246578f558143c864a3e8bafa80afea0", 0xad}, {&(0x7f0000000600)="1614aca15d57b4ea7979a1e3a9802b3c09041c12f6ded391b0d4ce5a061a2ed68aa278b6de3c9913445cf91d9dbbc1ecc6ec2680ac44d7bb408046e3da1394d04eb653b4b8efb6c7e06e7b1a70587a1966e4fed94f9a92bd003210bcbd1e9dabb499f164d675da377d37c9ac9d534996c5c13c607062cb3a9b8903893ceff99326d2ab732e9b5095d4d320270ca2e651", 0x90}], 0x9}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="f054aa5f1ab5519f1d92e86868e3e2618d8df3fa4420af385a783df8c4e4b310e04fca1150624f1421976be19bc5d1d0a1b2a544b8293142e80343dc1530d0f2ae79a92b30cddadcef60116ad1f7854be8fc2e4ecafd1d2abcbf523716b255f4945b50883a032b24b5f6aec0fd2da84827ad7cc728a03a6a0917", 0xfffffffffffffd5f}, {&(0x7f0000000800)="b0633f70dd660e7cc25f3f62ec2ce329d78ff63be6d731fd0beeb7e706a2daf75a1ade121a76f64ee23d1e246ee06acddfdaf3a4a29992b99dd4fcdc7b016e78bd0e2bd1005bf9f32aa40aa92614aca3e4c1f3f081da9b6ffc0466f29dac5312d2c80aaad435d78dfc3125fd63b23d69c34a1d8934d9815329166d65af6a1286", 0x80}, {&(0x7f0000000880)="492e21ecb48e4441e0170eb348b83b90243e291be3f084fe6880afebf424c26c686f651712545eac31167b32c21300e0591a1d3363869d2f881b84a5ab32957d87c60fb482e01cdc9a31dc39608f427e04f908313b2d03d98cfe6ba0f99c89623aad5fe7a97ede96c2caa79f564648c71706f842a6d46145c88b1e639576df8381ea8446f41ee9a0ff53b79b3f66e45ae67b35ec4739981ef8c93e9fb64a410d30d189a46f3be0f35fd6ece7cb42b3201cd3ce7bf67248b6137d821cf1181d66a34dad9833177e6512", 0xc9}], 0x3, &(0x7f00000009c0)=[{0x88, 0x114, 0x3, "55e014ad4326a282b752a3c55034a18a2adbf1951663314f6cdc4e07ce537549bd1eebe98a33eaad9b055e0a7bbc5c67bde6bb1c021fcb7557b3aab7a93b5d0c095da7c515e703e24bf990574ee6d9018e30b3017114c16afff9eaa03912b4659ef471f253dba325de3a7be21da77053803156"}, {0xf8, 0x103, 0x5, "36c025c66d9c2937466f1e0a32d2af5922e68dcd216b7467d384dcfe16f02da7a30859b6380e00c36b8409562817e21848a5f6e882dd336db92966478035262e3d702661d2a44330cccc105892d38fa766b92216887e093410973c952a0a5f2053a18d659cb3b10e029a2037487b6d5c097e2196fdadc13e804a996145132015d5396e81877c3317a7532e0fe3d60c591e0102b3b8cc41906dfe3178f2397bf74d40904212e193700dbe4c2e7ef6c5fe1d36b367e28dcb545812c4a140a8f89d345a31649a62bc8a7adcdaa129b405b19d660117b284bb71b9cbc4d53b7a6bf3bde3de6880ce"}], 0x180}}, {{&(0x7f0000000b40)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="e68b9b582430bc9fee43686f5564", 0xe}, {&(0x7f0000000c00)="c0e5e0c06d4c99c00fcb5972469ac50566a685abdd7fffabaf2e71fccb3d126b8c35a11b605cf8464866855645b9f86605e84f8932857e84e9b04335167bcf4225709d62d918ecbee4ce4645dab01d8c02fb04817d915c0e8e5d8cdcc0e294bdfba286eaaa2dad209fcfd76946cad27f2327665a516449e3e84e4f74af02dddf675f89cc25d3", 0x86}, {&(0x7f0000000cc0)="e22f976609f4230f81db33ce560e3889f65e0cf8a1579a20ac810be147", 0x1d}, {&(0x7f0000000d00)="a9c4c21f67882084a1e8cd7b3b4f716c4a52c541f48f7e6a7a5f0fe84570302b448d5691d04bd897778b895f554a4fd3467456445411bce22b60c8e2133b83", 0x3f}, {&(0x7f0000000d40)="cb", 0x1}], 0x5}}], 0x3, 0x20004094) 4m14.458452938s ago: executing program 0 (id=1924): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000070000000000000000000600000000000000000001000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002"], 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=@getlink={0x218, 0x12, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x200, 0x4400}, [@IFLA_VF_PORTS={0x1e8, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "26662179ca028ca71f2f94f15ba19eba"}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x34}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9e72}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "399aa7d07fd5d241f2fecdfe6210d304"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "83d9c0db3d52523ce963c9bdb1b3030b"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "248324b4f7a7f11c36bc5d63ba5f6af8"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7e8ac2221728ff5e494a56d9cb5840c2"}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "2420f3dbc458edc9fc086a5e761812a2"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "68201f0b2e8342b3613b7071f0064038"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "39812c35f30338cfc56f6b2613d7d065"}, @IFLA_PORT_PROFILE={0xb, 0x2, '[#-),$\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xff}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, 'O-\\\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "623996433fb7795a3c938e0a3cc60149"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ba8307c42669c846795db9ddeaf2c0c4"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a347ee9685c8e9e66e14f509c972e21f"}, @IFLA_PORT_VF={0x8, 0x1, 0xe}, @IFLA_PORT_VF={0x8, 0x1, 0x207}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x50}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "94f83a0f3eb248abadf17b73f739283d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e20ab6b1a0963b7e044910d768285b43"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4fab836a4e61994203d43d086814934d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "95e1b4ae80d6636cc3ff987861b68e16"}]}]}, @IFLA_GROUP={0x8, 0x1b, 0xfffffffa}, @IFLA_LINKMODE={0x5, 0x11, 0xd0}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_init_net_socket$ax25(0x3, 0x5, 0x8) 4m14.358211938s ago: executing program 0 (id=1926): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x54, r10, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b168fa3167"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) setsockopt$inet_tcp_int(r12, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3m59.288053275s ago: executing program 32 (id=1926): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x54, r10, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b168fa3167"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) setsockopt$inet_tcp_int(r12, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m39.904195337s ago: executing program 2 (id=2465): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000001000000040065f443a27b90c70000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='^\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="01000000010000000500"/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000009000000020000000600000020000000", @ANYRES32=r3, @ANYBLOB="1098f784f13663060000000000000000000000000000000000000081fec26aba13d6eac03f8c99ae78a79b07d481e9f635", @ANYRES32=r2, @ANYRES32, @ANYRES64=r4], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000005000000000000007e00000085000000b1000000eeefa2c0", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0xa, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="e5fda98800000000ff03128009000160726c616e100000001800027c0d3afa0e7ad8c2edd5e1452d39a661800c0002001c0000", @ANYBLOB="87c5e84162aee1581c39f337f897d67108656c554251fff7b3b7c58008555f470c00001fa999e95cfd1d879e25e700000000", @ANYRESHEX=r3, @ANYBLOB="79f4e74a16c5d0720dc313666e2f633273bf7cb8e0703f1b5174907bc5cf4e42204678ce1b81618b94c891b9b34d2af127017d1061b5d221cc9183b4a6b7852628332233cd2ba746e81914998f69883ab012009852a0d971ced4648c52a0fe7ca6f29986dfb3ab49334e8288051f69d1c0f595537250fa291990d9493d6bf72df4287a064b0d9c50e1b9536ca3e2a9b82f91ab3e3190873ccc10504994f8fc3fa4abbc679aba62cbc3099cd109664b2b46442f68b2577afffb08616f57ef693f80cb389b444c79e4ad4bc2b8adbd34929164c987c04f782c54531b65ecfbccadb56b8536e564"], 0x64}}, 0x4000884) r9 = socket(0x27, 0x80802, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r9, &(0x7f0000000040)={0x11, 0x5, r10, 0x1, 0xfe, 0x6, @local}, 0x69) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = socket(0x10, 0x3, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000080)={'pimreg0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c, 0xb7d, 0x245, 0x5, 0x1, 0x7, 0x100, 0x1, 0x7fe}}) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket(0x840000000002, 0x1, 0x7) socket$netlink(0x10, 0x3, 0x0) 2m37.494283166s ago: executing program 2 (id=2471): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000017c0)=ANY=[@ANYBLOB="0800080007000062bd3c11907893010102ac14141a85204e220018907804000000020000000826519c35000000"], 0x3a) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv4_getaddr={0x8c, 0x16, 0x10, 0x70bd2a, 0x25dfdbfd, {0x2, 0x80, 0x8, 0xfe}, [@IFA_RT_PRIORITY={0x8}, @IFA_LABEL={0x14, 0x3, 'syz_tun\x00'}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x100}, @IFA_CACHEINFO={0x14, 0x6, {0x80000000, 0xf365, 0x9, 0xdaf}}, @IFA_FLAGS={0x8, 0x8, 0x211}, @IFA_CACHEINFO={0x14, 0x6, {0x10, 0x0, 0x2a, 0x80000001}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) 2m36.932060196s ago: executing program 2 (id=2478): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000100, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x76}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4805}, 0x4000000) ppoll(&(0x7f0000000040)=[{r1, 0x840b}], 0x1, 0x0, 0x0, 0x0) close(r0) 2m35.930015548s ago: executing program 2 (id=2483): getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x12000000, 0x6e, 0x0, 0x2, 0xfffe, 0xe13a, 0xfffffffc, {0x0, @in={{0x2, 0x4e20, @loopback}}, 0x5, 0x9, 0x8001, 0x5, 0x1800}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x110, r1, 0x99466000) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x110, r1, 0x99466000) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) 2m35.60298704s ago: executing program 2 (id=2488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) socket$unix(0x1, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="180100002d0001000000000000000000050100800c0011002000000000000000140001000000100000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68d984b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655070000000000000058754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1354875ec58e9a3ddb9ad02a078cf0d972df9e99fa0427a079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1000000"], 0x118}], 0x1}, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00d906000001043aa7dc5e290da552ee552100", @ANYRESOCT=0x0, @ANYBLOB="01000000010000001c0112000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}}, 0x4000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4) (async) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async, rerun: 32) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRESDEC=r3], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1806000002000000000000000000000018120000eb4098e15f8a78c8dd128594d2a957b5e8432b4555d87f67f5673b4a9a0369a5da51923f836d1a69bff2239cc3455c1d47cacb15e961aedab9b70c6ed84bef240db55dce03ece66ac97198d77837a586de4c4edf9b4aaf209915f60a31", @ANYRES32=r12, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r13, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) 2m35.243026679s ago: executing program 2 (id=2490): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r2, &(0x7f0000000080)={0x2c, 0x1, r4}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x160bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) 2m20.186303827s ago: executing program 33 (id=2490): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r2, &(0x7f0000000080)={0x2c, 0x1, r4}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x160bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) 1m22.065646358s ago: executing program 1 (id=1844): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0xf5, 0x4000000, &(0x7f0000000000)={0xa, 0xd9, 0xfffffffc, @empty, 0x100000}, 0x1c) 1m8.277538195s ago: executing program 1 (id=1844): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0xf5, 0x4000000, &(0x7f0000000000)={0xa, 0xd9, 0xfffffffc, @empty, 0x100000}, 0x1c) 55.310309012s ago: executing program 1 (id=1844): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0xf5, 0x4000000, &(0x7f0000000000)={0xa, 0xd9, 0xfffffffc, @empty, 0x100000}, 0x1c) 40.345983463s ago: executing program 1 (id=1844): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0xf5, 0x4000000, &(0x7f0000000000)={0xa, 0xd9, 0xfffffffc, @empty, 0x100000}, 0x1c) 27.639351671s ago: executing program 1 (id=1844): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0xf5, 0x4000000, &(0x7f0000000000)={0xa, 0xd9, 0xfffffffc, @empty, 0x100000}, 0x1c) 7.412272065s ago: executing program 1 (id=1844): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0xf5, 0x4000000, &(0x7f0000000000)={0xa, 0xd9, 0xfffffffc, @empty, 0x100000}, 0x1c) 4.972934755s ago: executing program 4 (id=3463): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x1d, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x40}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) 3.917290003s ago: executing program 4 (id=3466): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) clock_gettime(0x0, &(0x7f0000008000)) recvmmsg(r2, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/60, 0x3c}], 0x1, &(0x7f0000000880)=""/182, 0xb6}, 0x8ac}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) close(r2) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x80000}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) 3.642984299s ago: executing program 4 (id=3470): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="013021f400ff"}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x28, 0x1, 0xcc6) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x29) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x9) splice(r1, 0x0, r4, 0x0, 0x40000000025, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001b00010000000000000000001b00000014000800fc020000000000000000000000000001734fa6a79487b26b36932454e8022a59d6b053949c9de76368f02c3f18fd9eed2a1acd82019af90a9496b78dc932f29437adebc19a2ce48ca14f72edb0f11b85f72214effd6c9c75a45bf575a039c173fc049319bbeb8339e4915a88cb9e5a99ea8c0ac0a22f8f815779bb0aff1101ac20d6369ccedc08a02b2b40b7bec4c6974698df70acfe016c58a6839e85159cad673ccb4b399a88de166453c002df044c2bd5f42e61c1cdfd1dba7db1d387bf55d61aafd9709ceb86a0056e64e23eca59431489baa55362bdffffffff00000000213cb7eddf48a2e9c223e81f99003ad931a68c1d59a3ea1bdfcb"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010101, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x20000}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x0, 0x2, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x4, @private1, 0x20}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="3c7513d2382c3ca4481054", 0xb}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="280000000000000001000000ca090000d52b28b39921dd860167d50ef75fc4a5a6be70b68a7b3b982a4523334b7d4b00000000000000a0000000000000008800000001800000d16aaac9c85097e2f800e85be44fe1342683731f8e8b2d820c6971613289e9ab188852e8a767df6db3964b364904a789d1a209ea7e9c763e6a625d423f6e196e6da2e7d52b81f2d97a1ee5e2ef9262c11023ffa8ac8eae1b10ba1e73becce8ada74239e9340a45a162e8e550edaa526ec307fd2c37b1d190aaf8d8d10165ac5e2a841b3472e3d44cbd9d8a646bff7f76"], 0xc8}}], 0x1, 0x10890) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00022abd7004fcdbdf250100000006000a004e24000014000700ff02000000000000000000000000000108000820e000000205000400020000000400050014000900"/82], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) r11 = socket(0x10, 0x3, 0xc) write(r11, &(0x7f0000000040), 0x0) unshare(0x40020000) 2.118467453s ago: executing program 6 (id=3487): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x2f4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1e6}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r1, 0x8, 0x2, 0xf, 0x3ff, 0x585c, 0x7, 0x800, {0x0, @in6={{0xa, 0x4e20, 0x2, @mcast1, 0x58b}}, 0x8, 0x84, 0x2, 0x1a64, 0x8}}, &(0x7f0000000240)=0xb0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) syz_emit_ethernet(0xc3, &(0x7f0000000080)={@multicast, @dev, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x89, 0x3a, 0x0, @local, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x8, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be6c6d5d53b2255b4c13fb1ddb60740ba57dc224e59560200000070580a6dcacaa4ccca2925394faddea7576c0e19adca315583527daf4ac92c3c5914190aa8f43edf7de5030e2ac83329ca21139e72d276b0aa8e66c02ccb"}}}}}}}, 0x0) 1.690368507s ago: executing program 5 (id=3490): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3201, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3a, &(0x7f0000000080)=0xb, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r7, 0x1, 0x3b, 0x0, &(0x7f00000007c0)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000002b000b0000000000000000000800000004000300fecc30cd6094adeb502d761eae08000200", @ANYRES32=r3, @ANYBLOB="0c00b70004000000008daf1d130ff921000000140009007263755f7574696c697a6174696f6e00000000819516b71987caa512ffde3f1baddef1f2c9ef674871193fabeaa2073bb357b3ded1e0f4976b579386"], 0x50}}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) (async) close(r0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000010000000000000000000000000a040000001200010000000001"], 0x64}}, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="c9739bdd0e22a1075087064face39b65473611fa4c2926a8fd3cbe7caebe0646ca457273d9cf1ee99cc353a69c4326e3efcecfd661189b150ff3cbbfd8e7841c76e944249fab4a8c7e416b63b091f55d1b66d21bb48bec1cda8e8bfc6492b57023e8813010e8c85610d1bf7b955811517388f3c89fde154d8b59bbb550b3ff", 0x7f}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) 1.688957798s ago: executing program 3 (id=3491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x34, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x100}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 1.356191736s ago: executing program 3 (id=3492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f2c0000000b0a01080000000000000000012300000900020073797a32000000080900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x24008000}, 0x24008004) socket$kcm(0x29, 0x0, 0x0) mmap(&(0x7f00002b8000/0x4000)=nil, 0x4000, 0xfb37a74978f25728, 0x40010, r3, 0xdaf09000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 1.341155022s ago: executing program 5 (id=3493): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x8, 0x2, 0xc, @loopback, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x40, 0x700, 0x7, 0x1}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r0, r1, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) close(0xffffffffffffffff) splice(r2, &(0x7f0000000180)=0x6, r1, &(0x7f00000001c0)=0x97, 0x7fffffffffffffff, 0x1) write$cgroup_pressure(r1, &(0x7f0000000200)={'some', 0x20, 0x41d, 0x20, 0x4}, 0x2f) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettaction={0xb4, 0x32, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x247}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x5) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x124, 0x0, 0x100, 0xff, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x8000) write(r5, &(0x7f0000000600)="ad082ad75ba566a00f6abb44715bef7cfcc5991c0d5134555e9d5f7b08ea57d8dcbfd5bcbd6e54e4edfce0de3aa3a22bb4e867bbc41922d5811596a3e6d007b1003049ebb6a1bf427d632e5f28b2c033632f46329834a4afbb2d8dd05f3ecb2d4f9ba1059d79388942aa03733e7195c058", 0x71) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000680)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r1, 0x0, 0xae, 0x1000, &(0x7f00000006c0)="cd03aeaab2b608f53be3df8e497acbb975f452febef8cc3ef63de1d7ffe97b57ec25b00590b079275093eb6297f932ee3c46a0c58b0efaa3c503793bb2966e69a4615ff9fe97110982d0100ddd309cb862ff4cbbf00a66fc9ca5046f442e4829f8b70fe7efdafbc90d7530a74752cbf4a88ff6c865f82ed96ad6bb2af903ed01dae4c3147bbc0b1e8fc8e0605a80b9440a1ac051fd7dc8be740b19e23f01ecbf2778c91208c61402e0969419104d", &(0x7f0000000780)=""/4096, 0x9c0, 0x0, 0xd6, 0x49, &(0x7f0000001780)="d495332a29a3be9fe5fc8ed13d04df9bf9d9b400fe289748293dfc9521520bec038fc42af48458fb5d8261e01ccdfe1ab780f553eb1186543e412f87fad89edf1f66cfffa48852cf6317b99a8dc4349c17383191546d98deafee2b9e967ed63aaec1514e60e9a45ead40fbfab032bca9c5909965e473486361d1c4efff80d4a87af02394eb46303c5b2697d1e662f85b94ebf33523f69808fe4d4f1f6a9d5fb139c30b5489b70a1428013b29ce25ff2f1f19b62c5039432f1acd8cd445f809545d6c006c8629e4b7639a680df7fd01b1d278f28b4ead", &(0x7f0000001880)="c1ae543afa2888a0c7d6204e5edda349a802abb59e92eac9f010b799e8556c5f54e9f5fd641abd2df03d7c3ec8f60c52ea0779043bec6983ddc00a85cf095faf50b8d24298f45c97bf", 0x5, 0x0, 0x40}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1d}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040890) bind$alg(r4, &(0x7f0000001a80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) writev(r1, &(0x7f0000001d40)=[{&(0x7f0000001b00)="e75b2fb00d7723e0d3b7d60b0a3665d1638e824eab9894540ffe475ba2022ef8383aaf50f73d5c3a50b3027394c2057fbc3225cdbebe714b19e0e3dbf7176287cbc1e569921eda6c5bd6610b7955b71878b7db2910aeea24905aeda9268c23cab024a8612deb45af", 0x68}, {&(0x7f0000001b80)="b154893b1c1763d02c22b66ab00802a766a1b3e5137ada5e74e52d92da98821e", 0x20}, {&(0x7f0000001bc0)="41b5477d8cc2d13b8596719d4e09c14e934f7458db44d47eb00237603c373c7ffef7af9b42d822a2053846079c49d22f9477f62394a021bb54c7dcef0207b8d2fb1539250e9a065331e653ecc332892ab04d01efad6fddb749ce1b7fabdcb6cc68c86f798160d94b1a83ba4535f9815e5d0fec8a35da0924cfd9437b6ecb", 0x7e}, {&(0x7f0000001c40)="569d0b52c8b80bc572003d5436bd43f97026ed468d62d39ad07dde24478ac21ce4248873f38012", 0x27}, {&(0x7f0000001c80)="95ab0cc7f12f05ec425b09842159", 0xe}, {&(0x7f0000001cc0)="dde48dc9905513196e638edcdf88c095d1", 0x11}, {&(0x7f0000001d00)="1c8d38c716b8cc5a57eccf46f98093f07c3382490cfdce8c3f2f", 0x1a}], 0x7) socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x38, 0x1404, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x40804) socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000001ec0), &(0x7f0000001f00)=0x4) openat$cgroup_type(r1, &(0x7f0000001f40), 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001f80)=""/11, 0xb}, {&(0x7f0000001fc0)=""/27, 0x1b}, {&(0x7f0000002000)=""/140, 0x8c}, {&(0x7f00000020c0)=""/184, 0xb8}, {&(0x7f0000002180)=""/53, 0x35}], 0x5, &(0x7f0000002240)=""/151, 0x97}, 0x2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002340)=r1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002400)={{r2, 0xffffffffffffffff}, &(0x7f0000002380), &(0x7f00000023c0)='%+9llu \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000002540)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002680)={0x6, 0x17, &(0x7f0000002440)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffb}, @generic={0x8, 0x3, 0x3, 0x3, 0x6ad1}, @ldst={0x2, 0x3, 0x4, 0xb, 0x7, 0xffffffffffffffc0, 0xfffffffffffffffc}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000002500)='GPL\x00', 0x77, 0x0, 0x0, 0x41000, 0x0, '\x00', r9, 0x25, r1, 0x8, &(0x7f0000002580)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000025c0)={0x5, 0xd, 0x40000000, 0xf2bc}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002600)=[r2, r2, r2], &(0x7f0000002640)=[{0x3, 0x1, 0x5, 0x2}, {0x3, 0x2, 0x5, 0xd}], 0x10, 0xfffffffd, @void, @value}, 0x94) 1.162617472s ago: executing program 6 (id=3494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180080001"], 0x38}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4081) socket(0x22, 0xa, 0x0) 1.15817879s ago: executing program 3 (id=3495): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)={0x14, r1, 0x1, 0x20}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) 1.038069834s ago: executing program 5 (id=3496): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) r5 = gettid() sendmsg$nl_generic(r2, &(0x7f0000001400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000240)={0x1144, 0x41, 0x200, 0x70bd2c, 0x25dfdbfe, {0x1a}, [@generic="586b0900e69761e463d10a1dc267479e48ab022515286187f31f0902689e48da9d7ede7acfea92d1349d0d896b7ed200b965b1e90f0e7afeb8c184f8cc82a559ee3b6c3194392c0a8c438ae35b70", @typed={0x8, 0xd5, 0x0, 0x0, @fd=r0}, @nested={0x10d6, 0x12e, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x106}, @generic="b22d8cfccdefad6218575daff35031a599b47be55de9b9de69762e58a2887403f42be847f87ad91e8e1822d851fff400a3922115b79822c5ecf4854fd28762eef945ffe163f9c014b670401ac8a8c00fe6e5e4dae623c684951fe1f0c8e7f38f1ace1e24f38ca9383a1ffa794b498d681a4fed1b6a7987db759e06a4286ef56e13e2ee400bbcb38630b4c342dacde0ada8e165fcca3ed1f01c6970df16a055381cdeb9f2650e3f328fbf88a18a151b510263", @typed={0x8, 0x45, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x13c}, @generic="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", @nested={0x4, 0xf5}, @nested={0x4, 0xa1}]}]}, 0x1144}, 0x1, 0x0, 0x0, 0x4000044}, 0x8000) bind$netlink(r2, &(0x7f0000001440)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) pipe(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@var={0xb, 0x0, 0x0, 0xe, 0x4, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xb, 0x1}, {0xb, 0x5}, {0xf, 0x4}, {0xe, 0x2}]}]}, {0x0, [0x2e]}}, &(0x7f0000001780)=""/89, 0x57, 0x59, 0x1, 0x2, 0x0, @void, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b80)={r6, 0xe0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000018c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001900)=[0x0], &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000001980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000019c0), &(0x7f0000001a00), 0x8, 0x99, 0x8, 0x8, &(0x7f0000001a40)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001bc0)={r6, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c00)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x400, '\x00', r3, r7, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x17, 0x19, &(0x7f00000014c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='GPL\x00', 0x9, 0xec, &(0x7f0000001600)=""/236, 0x41100, 0x50, '\x00', r3, @cgroup_sysctl, r8, 0x8, &(0x7f0000001840)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001880)={0x5, 0x2, 0xffffffff, 0x20}, 0x10, r9, r6, 0x2, &(0x7f0000001c80)=[r6, r7, r6, r10, r11], &(0x7f0000001cc0)=[{0x1, 0x1, 0x4, 0x1}, {0x4, 0x1, 0x6, 0x9}], 0x10, 0x2, @void, @value}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000001dc0), r6) r12 = socket$xdp(0x2c, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000001e00)="5f82c76bb141158f42bfb3ed20e3b8884993638e22b1f92f8a33134571fe18857dab138e5a0a6899c4860fe80bb46109d4e80940bbb3731dcfcd4632fdc93b601efa8aa479142ae2e91fec91db6eb664fdb56ff6c9b02be8a7f0e83823d52b742102a49df26ddb534752270220e345de837dcd9f8999eb2805a998f113f609c6a668bdf84ff6df6592ec5ef211af0e7e23eab0e1d0bf36e32ca168e2425c36b2916fe3398d3f727b92ee8d1f12b95e9d313c9cb1a94435ed98d5f110ffab67", 0xbf, 0x4040000, &(0x7f0000001ec0)={0xa, 0x4e24, 0x3, @local, 0x4}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCPNDELRESOURCE(r7, 0x89ef, &(0x7f0000001f00)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001f40)) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000001f80)={0x25, @multicast1, 0x4e23, 0x4, 'rr\x00', 0x2b, 0x1, 0x3c}, 0x2c) socket$inet6_udplite(0xa, 0x2, 0x88) sendto$rxrpc(r6, &(0x7f0000001fc0)="83d721ca9ed8a9aaabd07c014ad33795ceefac0ff76e15972ca3f94488103e6f43844bd78b97aa1319de530fbf7a7df8fc945c71c27ba9e48c21e3feb0f3000ec5628e15db5ae109562274e469251e182d11a085bc127bc869dbc0c228b31413a9d560abc039ff037f4a29e407f9f62b25b229016b368563f1801cd98678f5d3a6de8b5ff798432734e9ebd9dfbcc566a15526", 0x93, 0x4000800, &(0x7f0000002080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010101}}, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x18, 0x1a, &(0x7f00000020c0)=@raw=[@call={0x85, 0x0, 0x0, 0x4b}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @exit, @alu={0x7, 0x3, 0xb, 0x3, 0x0, 0x4, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], &(0x7f00000021c0)='GPL\x00', 0x6, 0x8, &(0x7f0000002200)=""/8, 0x41000, 0x18, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000002240)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000002280)={0x2, 0x5, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0), 0x10, 0x8, @void, @value}, 0x94) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002400)=@generic={&(0x7f00000023c0)='./file0\x00', 0x0, 0x18}, 0x18) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000002440)=r14, 0x4) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000024c0)={0x2, &(0x7f0000002480)=[{0x9, 0x0, 0x30, 0x5}, {0xfb9, 0x8, 0x64, 0x4}]}) ioctl$sock_SIOCINQ(r12, 0x541b, &(0x7f0000002500)) 1.012160574s ago: executing program 3 (id=3497): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000e900", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16, @ANYBLOB="0500fdffffff02000000060000000800030037879997c8797097c7e86b48250f6b25c3ee", @ANYRES16, @ANYBLOB="080005000c000000"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x386042, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYRESOCT, @ANYRES32=r5, @ANYBLOB="140002006970ffcd83db8736746e6c300000000000000000000500020009000020140001800800030005000000080001000d53a9b5e99d0dfea640adbc492d633eb6b0b539fbe5711e782cfc8d82f5368597349f304b765db85bcfc67d5aae7043b4b1f929b00b140fe0a7a4fbdb66485944f4d7797a8af79001000a0000000000000000000000aeb404d31e93a9c31e295269c538d718800b7a61dbf7e0ad6591f7b8c004124a73f81d3cbf25f4135d504af6c157c3521ded29396a5849c3d6", @ANYRES32=r5, @ANYBLOB="0500050006000000"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x800) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010008105000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="80000000200400002c0212800e000100697072735a19077070bd5e389cba9bde77000280050016000200000004cade19bc0018000000000000000000000000000000c803000000e708775062130a37afa20000000000"], 0x4c}}, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070200000000000000000100000008000880bcff07802c00048005000300010000000100030000000000050003000100000005000300000000000500030080ff000008000100030000000800020001"], 0x58}}, 0x880) socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000) socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 926.465759ms ago: executing program 4 (id=3498): r0 = socket(0x28, 0x5, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) (async) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="93", 0x1}], 0x1}}], 0x1, 0xc010) (async) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cdcd0f785ee54561d85f35f6da23293e58391f8a3f76d29d"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000040) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12539ca88ff82023}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xe0, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2af}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77ba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40050}, 0x4044005) 914.707212ms ago: executing program 6 (id=3499): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800) r2 = socket(0x2b, 0x80801, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}}, 0x0, 0x9}, &(0x7f00000001c0)=0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {0x1, 0xb}, {0x1, 0x9}}}, 0x24}}, 0x40004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'pimreg\x00'}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xffff}) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) getsockopt$netlink(r7, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) listen(r2, 0x9) close(0x3) 853.246106ms ago: executing program 5 (id=3500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xe, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x8800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1cc, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0xa0, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x684}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x18, 0x17, [0x4, 0x8001, 0xd, 0x8, 0x9]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0xc0, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0xc0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'rose0\x00', 0x200}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2f}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008040}, 0x4010800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008040) socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000780)="42fe8357c3a01145c87f87971cea8e87f57b5ee8d32f946f10e1c0dfec8608b8aa7cb0a3fb242dff6fc59e6fa659aa28a0cb1ba77c95a2de5207c8d979715fb74e4e4835cf05932c54a1b81c9c9ac964f365fab6c4c547f1cfdf57c6af3c8311afeb10694fefd992bd3c0ee71f0f2dd3aee67fb5ce42b9361181b5ea385bfa3b2fd0076571a05b5bc807dc06f65ba1775b3e2e1ae6db75f3311789ebfb4fce8938e1d1f2600e0d9825b1884b4edeec60", 0xb0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0x7ff, 0xfb, 0x1, 0x71, 0x191, 0x6}, &(0x7f0000000900)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000940)=r5, 0x4) connect$vsock_stream(r2, &(0x7f0000000980)={0x28, 0x0, 0x2710, @hyper}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001080)={0x0}, &(0x7f00000010c0)=0xc) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001100)=0x0) r10 = socket$kcm(0x29, 0x0, 0x0) r11 = socket$pptp(0x18, 0x1, 0x2) r12 = socket(0x23, 0x800, 0x1) sendmmsg$unix(r7, &(0x7f0000001580)=[{{&(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000a80)="70b0fe626aeb2e404aad7da5aa0b065a8137984f1053996145f1dd126f7323bc32f964e584fa85c1df299587cc76d1d0304c04b1fb5c92005034bf4ee3635d5a186d73240f680c3601f74e06a3a7532ccc48c42ddd940151f02bc02bbc330e468c49329fdf52b42ed08d9cd3", 0x6c}, {&(0x7f0000000b00)="37db2f325382b903ac4ecab6b81db2a276c2e4d19559bb372bc25dc80f8c448cfff6438424f89838b0c054beaf643e2666f9678b30fd3395ad8edec00d1bc69205758e3772d1266e3ac63bb33433130af97d798339d14da2297f1cb7b72f478ebfbe1d71b5502c2b830661393b657fa8d47104f66f7b94e3ba801d176fef04682aa5450be72ca61dfd1693e7129ba7e2b025bc11a842a879f6cf92ed0ab8f62b686894defdd22f899ee6a357a6457626add717da76a1171c73dab6509560bebc", 0xc0}, {&(0x7f0000000bc0)="8c903925b3a15d79f3fa7a31718795f594f580dbb459b08db7d0fdce73c6a9074706e24c76f355112521b5892708fa0f01fb3f5f4aeb8a4b", 0x38}, {&(0x7f0000000c00)="8d3a73b72da58d68e62ebb252b2e132e153fda1eb6a426859a42efa89d983ff0ff8395d7d1f16aba0b44827aa04a29535b07b30dc9e1becc1650155ac1255f86f8baa7689ad8877c0dbdcb5691b5942acd8d8d1c453dccee408f0d", 0x5b}, {&(0x7f0000000c80)="1eb7a75cfd130abcdfe79d60126f5fb4d951b76895eef8db37a0c7181438a72331430605a3de2d672173c48db307588a52ad06c4fe6e", 0x36}, {&(0x7f0000000cc0)="c3965f1d9b6ecf51dd43a394eb2d593679f7cdf743a73dd0fa66ea86e0edf97a47cf31a3764a1fb01a7fe721f7bc4fcc97b95541479963567a33a061522d9db427a01f5cfae81f1f7e4284fe04ce285aae98bfbf3e029b314bc33be477a76ab1f1118cc1a1d3b6cf2cbce4a940925e114ed8c08fdc685e966f7e496d6d1b132988eda80de4bbb2", 0x87}, {&(0x7f0000000d80)="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", 0xff}, {&(0x7f0000000e80)="a6faac4d4f3b8f0687d8b52d2cfb867b65bb18e87c37714b1fdb38e94b161503a44b50d84d49ba97569fe95d78f8af81e2fdcd351e9cb9f38d6817486fcd09f6749628a29e08ec62b8870692a2e4c6231f61751e5ac8e1967a7001065354f0f4f0d34f5921dfa143c3ba61c39b2591c528ba30e9ea20efd29a8f57de812911d59ae3f1db7212d3c9ad475c9073a7cd287eca73332f3d3fdc828e6d5aaac1e6502bca4e4ec8e42e90adc8d5b124801e14a07f8a4311bf878cdf29e2c98b356732868d0f9e90ef2e7a2ee8b1b65920e1cc16c3e5d860", 0xd5}, {&(0x7f0000000f80)="a3bf34d8fe69f6ded7134cf062d01ed3368ffc07b913fc0c9172d0ed0c121e26bd84a9947c2d74617710e7a0ba7eac9335aa8478f2f58d2a02", 0x39}], 0x9, &(0x7f0000001140)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee00}}}], 0x20, 0x4000040}}, {{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001200)="f33fe6d5221f63251b0b6aa9326a23f88d971f7983b7536230ed8771ea73c070026fd49acb0caea02cbc11d3017b78108a78178bf9251d1b179e98e23eb5c8e0c735cae0ea6c91069ec81c08f38fdcdff786bd535a1c8998f18337b15233f735729ce4f265a7020bbf42948ecbf765596e725bb2930931dfba8946c299c13b8a034d3e3ecf0c831e32ce95fd1491dfbba05f34bc77605f4a24d64409d957d1869b4fa3db491b2d540af33efde05b503a3488170c08178ca3876ce961be96625ab4a0c2f819ee10ca48db5a0e35f9d82a73e2514cddbc9a4d7054e509b4688318610b1d4238865a7a73c45aab53b29e8ee0", 0xf1}, {&(0x7f0000001300)="0fed1f4c9eaad399af8c1904baa95e707e30a7417be0365038ba6ab1953f8fbf236cdafb7bbaf4c7212a1aa4da8a655597207147ef9904d0e1b77db6e498987639d4f81059b3c3a375e6429c30ebee35e5c206b396889f9e3693a5bcd09b852302ca0dd5c95829dfa41821a108b1b7a63d7b0b5b3280db15327b44cccf558dc064777acbb8069e250172c48ed739e68ee1d1490d6248f7a06c5aa78bb5ce9c8c06b33a14cbfaa4462194b0f35c1fea77ce36e7ec294db90d940ebe030d295f416b3849a882f3a4f556003d1d51f86eef6cc379c647", 0xd5}, {&(0x7f0000001400)="5f288c4131c8ecb25bea0ce401d8d861c849f6e5bbe6b23e59f0dbc00bf4fd7a86e2dde49071f3befcb733eeb01d49d29d4840c991241e91c27d85a93b45a208095f86a44e48c025f2ba27568e36edbafdbfb5f75da43bd1a9fd77356789290ae07dcb0ab91c998163764c08a2db978a979af2f3c86c58490680ebc92ec5365436fe3a30e3b7ede76bdb1d0bb2fd7543f4e38599fcb770a74365ef29e034015c4ac710ae39272a3a5d91dd3c48b9f2c589f2ec473ca3f059cc1317a788cadaa0a17a", 0xc2}], 0x3, &(0x7f0000001540)=[@rights={{0x24, 0x1, 0x1, [r2, r10, r11, r6, r12]}}], 0x28, 0x800}}], 0x2, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x80000, 0xdbf) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, &(0x7f0000001600), &(0x7f0000001640)=0x4) 734.334297ms ago: executing program 4 (id=3501): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000004c0)=0x2) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x1, &(0x7f0000000180)="e2", 0xb, 0x1, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) accept4(r3, &(0x7f0000000780)=@ethernet={0x0, @random}, &(0x7f0000000800)=0x80, 0x0) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)="d89109674030a520827d2ab3bb55c464963cb4e705b2b305f027909496fa44b6e020679abbe083cd40a8a289e2e5353810c600c26dd1a8109005926245f6a0cc6cadfb93d2fe422155e030dc9fc11c6aafb0da831a0e512d5eb9c71abb4a37d9f7bec9ad724b304a9dbc66303fc4f3b1508a15f1f04d8474827df1bc3e1150545da21f26416678e2b689fad5b65cbccdc8c0a19110a3896eebbaca8dd3c9b2504829c06c486c89bfe79f2a1179e813dae48e22ffe668b8e7fbc5e4fa8ad10c4be90c"}, {&(0x7f0000000300)="3b92d4a5e781800de5b7e871e7c4bce6455401b5f2f77b2de4166a2249559f6b01e3cbe9ed0add99cede34f39baa764916aec43130414f6e446f86"}, {&(0x7f0000000480)}, {&(0x7f0000000480)="d200ad42ee4e60a67e0c5f217dce72a38a3663a62090"}, {&(0x7f0000000500)="e0c9a139f04d555fdc8efc1724a7dce434fa7808928651c3d480f618b2b0582e7dcc6c6bd9a7e91282cb32a85461c638161e60a465131ebe9c12305918ccc408da4d234641c008e4a1acba730d6c7d3f2ed937ff718dfbd21acc80516408bb"}, {&(0x7f0000000580)="a365df76793114418b374e73c81109"}, {&(0x7f00000005c0)="bee31dc36986b0901a0e64b1ac21ae2e9284bc19dc"}], 0x1}, {0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="c2f4f6003f40a7e08887e982e394fdd77b0b5b5d53daca8589e490cd08ba5cb68900b9896b739fbcdb5df1a4fa062039ae54ef54e56ef0f2ac75533f75166b1e8954dc0d35c82333959bf24855e193bb7892"}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000170100000200000000000000eaea80f28c1b73fcff7d288a08868841e52d10e42f5537e05ff1b1bb8b80989dd6508bfa5a9406877132db9e2fa41b480a886751140821424fc28fa001e53d63b623e558f63059aa0d696b606035106e0c9c338565d430bd9c41c2d19c98c02db32f805bb389c2c466ff510072ee106743a8e18f483a120628e6e1586abc161aa4d61d19000000000000000017010000030000000100000000000000"], 0x0, 0x24064060}], 0x49249c4, 0x20048040) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000b80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000880)={0x290, 0x14, 0x100, 0x70bd28, 0x25dfdbfd, {0x26, 0x70}, [@INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "1761ffe888c0966b672fe1166b92d7921a7fa06aa49b971f21d613345300677e3c29fb82ee0b9ba3783d95b96048f9427a918aecd2456ef5bf9e0d846184edd09508fda2111e2857984d6d3a45ef15bb54e9ec1ce67647f6510772a3e62c04cff582f2c919e6ce04166f989868f5049989c413fa38a9281ee3d9208f3c7657768bc410c345dee8b6b067405a0b86d7b93bd9d76503a41684f1880d2070045fc5f4601824a7478633047f32a31cd3174c3edf0edac2d7ea2f0c301fff162f6a9925d10c003c90cd"}, @INET_DIAG_REQ_BYTECODE={0x3a, 0x1, "d84219a22808f9e097a0adef2fa239aa33d16c8eaa0d96d5e1af2e981631e9f80ef1ef96d259ef3b1fc327192142922a2ab8f847a6e6"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "e966673f951283ce85fd2b7e8c124ca3a450aeec8ef1ead024e65f8c7def44aeee6a7a9689664aec80316a4c648457637a493490226bcebcf735bf5fa9fb79784c03afacee436ce3c5b2329357484956c94fbef2aaf8c319903d815241d78e47cfdd61a68e80d31729a9910b50ec12be7c9944b5801c2862f6b31a3492862d80acad2350fa1363082d8960be764143995b0f1bf96a329e82020ebfd7b25e4fdebca6004347dd2da1b8148fccbc2de474aaf4e69308b167029d1f300c5882bfb1a0880fb310bcae4a5e06193b20834e2f2a6850de332aeac6e040e9b8d886f8cc5381"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "835c60bfba2b6c61e44478bb199bed0e41890dd75a85eead6887d09d19"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "b06b9bf821722f1a61e14acb6aa3b70ef99946bc28cb6205705653e4b36b88cf5d0a2903852f449ab6a402568d70bd039e54cce9ae4b7f34b192477cf86409e99f6caf13af18514632b8b55acee2ae3bf22ac2af7837dfba50c93c1242b9fbe21ce9"}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000600000004000000000000110200000000000000002e2e5f2000"], 0x0, 0x2e, 0x0, 0x1, 0x7, 0x0, @void, @value}, 0x28) 413.218944ms ago: executing program 6 (id=3502): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff", 0xe) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}, {0x0}, {&(0x7f0000000440)="8d49ae7bdb0340f35db0c0576d5f38bfcf63e4cb4ec1655d03058c8c012e5a3c99405984", 0x24}, {0x0}], 0x4, &(0x7f0000001880)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x87, 0x4, 0x0, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x2, 0x5, 0x0, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @rand_addr=' \x01\x00']}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1ff}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x32, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x2}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x1, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @tclass={{0x14}}], 0x168}}], 0x1, 0x20004040) (async) sendto$inet6(r0, &(0x7f0000000000)="b8a51d560719f9c440ce6277", 0xc, 0x20000080, &(0x7f00000000c0)={0xa, 0x4e22, 0xc8a, @local, 0xb}, 0x1c) 313.217824ms ago: executing program 3 (id=3503): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0xfffd, @private=0xa010100}, 0x10) listen(r0, 0x8) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000b06010200000000000000000600000205000100070000001c00078019000180140002400000f7000000000000000000000000010900020073797a31"], 0x44}}, 0x4800) (async) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000b06010200000000000000000600000205000100070000001c00078019000180140002400000f7000000000000000000000000010900020073797a31"], 0x44}}, 0x4800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000700)=0x4) 234.467025ms ago: executing program 5 (id=3504): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80805, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffe7b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18) listen(0xffffffffffffffff, 0x802) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000300)={r2, r3/1000+60000}, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="0100feff09000100000005000000180001801400020073797a5f74756e000000000000000000100003800300"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000002d40)=ANY=[@ANYBLOB="2416af063be3d76a0600000000000000201d", @ANYRES16=r7, @ANYBLOB="00042abd7000ffdbdf250c000000a4010380040001004a00050091ac8d47bf0f1a730e0e4c5fdf62af22c7f934179a72457a2b4bd7070cee734f7537a1fe6ef14996fcc89deb84a582b00ce8533d5c9bab05100113d7040af597a2477d3585f1000024010380100001800a0002006b667265650000001000018004000300050002000000000028000180050002000000000004000300050002000000000008000100ff0f000008000100080c0000300001800400030008000100010000800800010002000000080001000b81000008000100ff7f00000800010007000000340001800a0002006b667265650000000800010004000000040003000400030004000300080002007b2c260008000100020000002800018008000100090000000e00020073797a6b616c6c6572000000060002005c00000004000300100001800800010008000000040003003c0001800d0002007b6528272d2b5e2d0000000005000200000000000500020000000000080001000800000008000100ff7fffff0800010050e600002c00038014000180080001000a00000008000100a3000000140001800800020047504c00080001000800000040000380370004008dd679e9f0fd1119a13eee40fdfb63ca07827b3cd5ecfafe0598658defccb7275f3bbd74aa1f8d782e81ffcc9c3d3aad01cf5b0004000100a8110380c8000500f4e7072b134e9e9e24955605be6301621d0116f66b48f9a92b5bdd35f089797d78f702e0b71c791d8772c66d47fbf2a832fd7222075e0d3dfd6b0f7da6a16dedeb1a22025c15b3e3f053ac8a91c5ca07133baf6b33422b1c164990a498ab9f2fabfda303d2ae4153abba12be9fa820048b6daff24417e004849f89302951d75e90b37641a3fb4e916f5db595439006ac67f9b02d9a5d270382a20ead2cf998eab4c4b2e6929b2369776a2f579212ba5fcc4085ebb93725ded9d491076dff80133535035b041005005ea53d52d256fc7470871f87a1b12a418dda13face8b11081c663eac5b7a27d607b3e6dbf24394864caa06ae14b2b20a26e3ed4a2f8751991cf4650fee83a2e5e0126ebcf4b483e906dfeb0cecb860740049e4b94ea699a5722f0f0abf6c4cbe432821a04943164c0dc6a5bcaa48e2415c5b14d73b4c4d8066148b31f086a67a530650a77772cdd6dafcf5512a4b923b33b3b5818e6856171067ccea7a3ef4170b93668a736c7fb750d8534ed5c3fbfa6e586f2267fe364b7b1d8b4c0f9d477e679667c0edbb07173dc5bef1c94bf66843ed188b9426e9c41ea7f9d711c1715f418534c13350128b4b8820d9596b2bbfd2367928acde77c2bbffe0391643b7fd168fa16ff4878566d7ebd2d303b6a4d0eb717665c7b74b80f664d1c7393977c33bf9e69abd5c44fe6d50f04c52b077b8dc4efaa29e534d6ffe39d905fbca07c37b123f9120ae130d32b6d0d5891648d673b78c57adf2c69d8a44cd2b09e71c2a7b82c5208e3aa197ab0b959cf98c24731d7ee6954a68d18f7a8ec57258e78390432cb7a32b8fd9f0477f1fd62b41d0ea1c0a48d16c6c5ad502ee4b94ef4ee0e941f217b7e4ac696d0d7bafc593a699d24dfb1ddf07eb63829808f4cd6b5d36c267b55361cb99fba86e827c988a0d0856fc0e37d5add9d52a1a99db72d4ba9ea2f3d5b3e293a761992f52ea25f4270b0204d931d3f1de4db68f1e36622d05263e7e72df992d384b27b50017c13d9ae3402e40e078ce843afca77ae7216572145a662e017c112eb1fcae91c1f8cabcdb867068f37e857220f6e4ffec14b6c91ba60f6f61b4016b93d25bb870ffe3d59f99cae811bfa556e4166879551e5c6707a77bb0095eaea9663725aacc6fdd3429a9058e7c93ab9f43bdfde9b7f11721622b27045ad9d9deef1e39813dd9240af2aa733176e72b7d28f6e4ad8e0e59cd26b1fd8bc63d86f05560b4edfa374c4fc2e03225ab665d7d51dc9c1d856f32e064dcfb6f9b67221e3871483dc49e164d9f931e7b8d8eae191a62bdfab36c1f30885c5d4db6af487bb0af260feb05bd67f6d156a956424aeabf7200fb3c6563e83f16956a63a44071969e8ee36c0c2528ff9496ed9546976383c645404c265e84194bd79600ce33d69b78c1666bb06d5bdb58487eba96a3faf2d0a3a868d2ba3c1c1c0ba42a26cf97fe6c7f05d9467fe189eddc88980d93792e4fd23cf186439bd2b5286c5805472abdbb013b4d59d50038f219f116d116f9295d9bf67206a854f764a3ec293af0f09db00eee360aa18eda3f7a21a6f82c264eee57138739a42cce6dbcb3c297963e8a5bacb4831725a2a3996889e3732f4c8ee0a58218041f687a3e62f74539a0fe15fde732ba7ffb5654825be104e6cff4aeb3000eaf1c8699dee2bfd51fb81e880962e1dcd0deadef1ba566a61e221ba250b29d71a3da539d5037c36d603beeb457cdedb0c1d00bfdbb8c12b3496b90a4f32fa782b0d8695ceb664ae94f60df930cf249c1d9d63467db155a0f6baea70800b6119cd8406b0bfecf2dfb604d3d059322228dcd5dfac63e20f53d781b051d4e8d8bb667064ba6200760bb22c545dea0e34fe9fd2f2126dc00f608e4278982266536e85cb2cbe95a9e211b6d2700c8f6d8ee5def3cc384db68cd966baeac11e782affa03ecd4bc35e9aedbd6a864c0f8a9a7c7126a0e43c59956cd7367ed7a55f3d402d3df7f2c4a1e4a72e8911d9684b38a72f1f539481280ccdf8bf1d9e3bc12e69f23d1a15e827b86b5badec4bf12e8343de8d4277944511336bc4a36477eed0f6feb29acd4a119302de3a4137003049f98a9f02a167d835c6fd3bdb84090f4ea731ff3b06fdab6fcae1a6c8ac9153c6d6b21c62609ef09e2d778fd79faf5c9ecfc2ef807bdc4396210beb32957b826c5fda196a862dd5478843eab37fc77941e5ff3314639dcd48a59e2b98c9cbcdc70f8c28d2f4a3ab6f5f502ba29c9a5e6249c105bb43a71b397f6d618fd25fae7cba199c90ea741a31cdbb11021f3989a805730a978dfa0e60df7bd3a46aa7d6688884083ce5daa117247e96921920fcae5994e5506e0f9ed05afd3ba91aa36572e215ba8dfb71f63106043fe8a47f320a9fd78994a31adb56cf5197be17794ca011da9c4607b9dfc9d2daee60412ae6afbbb778c00f5e70004d5cd5289c1a22aa2938710cc506d09a213a113f1a150a887b89dc859a554df7ba2a874bccd3d7826a4f21b4a04f136970194e960387c164a1d88a86004ebafde01909786825cd6a6bcdbdbe823622bdf8133d956790a569869d7f533f99aa1c2d9bf2c5f8ec96445df30fe2e01c6ee87d3c4735d7fcc635f21d02cea1ab185a04455e24d36bceea8fe7344c28f50cbc202a47e20fddc0c84a4e205d50d766f9f7d29ee15b515bb274db52a6fb70096248612c3579438081cef8f8c29ee650acd950c2f48c2765fb4e2c86f7ce2e1eff6e9d65d3db70f6c408bd427923a55407e7d8844c7811fe27d99393c1d25997a4cd7a3c68cc8fa43c504097e8195654cd873d512a6fdbb55310e2685d0c58f3dce773dbacddeb5772d7572063c166fb87b8ba4bea97655db1a78aed6116b2521be0694825879e0241849769379cc8078eb51df59a97320b15432f1b021a455ffe59b4cc7de04706c4592e687af893c9358c2264649597eaaef415a020cb07cf6109697786df083b4d865d2e16d09b8c29ca13f4f3c73bc39cf80e7f635da23945c1842cfdc43ffa8ead6f77b0187c8b3dc80b6ced5d924a209253a8a68b262eff3dd2861eb8d49331a1a7ffb644c8b8af0063f9f601370a901df7dbed763a45affcf4f36f8eea89bfbc43e7caaed9578e6cd02d383379fdb0eda55e2ced4de721c2f8eaa375f1b9f3aad43b21cbe0ca6720a12e9710a2f82cc0687d7db2ba7d793c2ddf6a5b6c8a1ee80642c66cab294eda132ce640336e398881e52bd5b7a7f19bf8a2f059d96fed89312f907be209116d88275faec43e241c10ed60f17c91da59a38e36b57dd1c6ccbbff1a608a45ad4b2eed588812f12ffcda2b3d81d93dfa6f9d517e8990205628c0ab3a76090f899b90a5346aa69a958cb801ce65f3f4fc3318ba087b8890656582847fa20890296edb0c8523919a665c6b1e09e64b2a8340f590c47e030bc0be11b6e83025424c8b30a88efb5f28f134b19adfd2b3b125eb47a9c1f2c77cfcad10b67d988e9449e55b19d6db4dc50996f08010cfab9587b8a4b22d15f44237ff0df2bef45437df0461ea45f4d1a42edefd8b3691c55312c85cd697eaa134c725b93b0c54135746ca0f126b91c157c83b6efe00f48baa97ec3ff6f86736f766f6cafb08d139cf8fda10351b0257f139812cf301fa1396c69ba9f0e3ef43009e64b408f6c7464a2917aaddfe127ad0f2a935090b6354673d2126dbbb43df85c8872d3dfca47d60f6a4bb87f8d3d751d7e11631b1ecc814fff2d3b62cc26cf81f3ce5ef9e966d72ba1a38a3413a869dd3947084aec501f6e9ee2b48eccc2a65f384c4d6169daf70a6a5a56a366c68a1ffe65e3271f00f964ba5f2b77787369caf4e52c86b6b5eed8b49e03b610db654650b2c84042fd1d455de0258ee06c5dc72690ea0a88d5ad95d9325821fcf5014d49ba7b47dd5134365a18a70a31a981355d6ceb3dfff4a745386c242d7dee53142bef1a6a146a9b3544bbd7ea1461b71140c23399cea5c1a076809782a7264e7e50c54f7d846b86b9288b4b3bb0cbc5bac1dbc4ebee2c47ac777ba410186e76fc106e221cba134bf7646f715295a9c99b8f8fc0b65a69c9331404e0d1bfea2190e4a7c4913b44c6efcef47bbe1c243c4db0900a6bda3e5e982881a3354f1008114301a56e11b2837cc5da87f68cf0c5d6a8f839ae5290aaf4218cb83d0ffcd5a52cdbff257efdba9e0440723f3d68ccedac09198b88b0f8921dc5b37121e21cc295740112e6f605b2093f3e8b6f99e1bc9e79fac261cb00b3330da977c7f913c38dd870886f3a7de2a5333fa0012db20d2f6528ff4a3276fdea64a197bf23389481771ae8683b0705fab2094359f5be1de53657f4f2fdaf3a8af659449ff0b2508049c3409488fd3c2bc1a368e1eb4ace6e30f03fc3c7e876ff472fab88cb0eb3a99a8e2e07445d743144e522ba2cbae858a31ee85df088b89855952a6fab254d527e6fcffe141248f6147367452f6090fd935751a5d73dc391d2462ce49c38d45f80c02a0c14abc753c790e22a7f19ef5c839011e2755415f772b9681d39fff06af989efe398037c068e486d7a07585e1700bac96d540c24eabdbf007cb2864afe1025375709fff8c059287f98f1630f91f46eeb78bd21a65593745234d8761b04a7c3e612813a9e96e79c763a6d594c0fdb3ada636744e83cfcd6a5678b4db173138c48ff4396315c15db1a0a29ed2c79adfdd19d5613bba4fe68191ebf3b0fd0ad7699f10f430d1baf8539b1fcb8d9e16a544b16411ed66f84e3a05de2399489e977ce90f8fe428fa651605509016c2094d78e23af8995e0557262110e40e5d8730d3353f925cd74703fa98c26bc660f86183e75c0b588c88d961b8d94adb1564d11dcbc2b91664fdc0df7f8a956f9b0246caf5653c02242f7d8a950a07c2a5d7f9f4b252e6db88468c54f11e6d58f7f2aafe358adcb1881e76007589c983d05dc92f50e3344da19667bdc24b9ff36da097b0076b6a22879638f7790a102a61036627f9dfc3ae681dc890143f9af1f143d551576bd755b2a4f25ac720f1386270f01b8d81d054929af3b130e3378f9ba8c9e14f8f8d5b4f61087fdfc26ec82a17bc0e4c7a3091dfbe389d8b2007bda88ca70d765f2c3761ac5274d32c5bf46b252f3c3859323c309ae25e4cd10ef68f9b2e9c10007f5e8a7303d11838d9e83e33a7d40c92ab48348e999cb58d02c251b3067ff300234b0c3cdb5de9a3e773cafd2c6acc672fce14a6bf57706d8631be1468cd4a4a4a190ad7e8895c3075dff943e5374f3b3c8f167271a93d50b88d5cd7c68fc3bade7050e199334fb3733270eeffaaef86bf5c22cf54fa637b92d96d05d2d37cd4bf7d5ac60925f785d8e5fb79b338714227df6f00a46b9f7aa905f29a14845f4f21131593b44a73a42e919189d2c39ae7a3a7cea73bc9fb3cb6d2b86e2d96e0de442f006e9b0b8c6957d770adfc3f61ef8f0960d1e901fef5f367d770f6639a1e84a5eb16f35bdb0291b7f814cb083599f90595eb73b61ba8b11cf21ec2d562aca7c60c0e0548c701ac1627b85fae805963852fe824a473b70ba1830e10c1b97dde65981b103b88b93dffcd392c9590f740f4f60480666db531859a7031edceee4496c652d0b535a406ced0559141dcda3e73037ffdfdd9fc5737d946bcc76237d49a847d98a2ba215f06048daafbbf6607a5b764dc31f5bb89d43ad262d6f6faef3be4fc210dd3be46a83e3e23aea625eb147b2b9578b09ce573e84234a89dad545bfedc9b4975a73d4eedfc8ec6d7361aa959a1e8b568e10d26944c88185e67a93bb644b7b153b4c08730718d8e7a252bf5c5782c5d572c6cb588085df3aacc1206afa9d9620c0f20546b4d98e0435dccfcb3b3a7078b7604830bcd6622641cefbbba88463ad70ce1238de23a505743013a610fcf463bfe8147bef1a9af2e1da4a2e628580476e27f35b94f0c6d4bea0fae13c0b89b5b9066e68c6446a2f4bd2eb2a158795392b9b99caac9ac7a47012a8531a8a11d9634aa8659fee1b1424c28c8e607410636b3d4857b811ab96a1d8019192e1a5e2fbce3b0c91b0dae0be2a113ed7000400f54c1574d3f3e26c8f3d29453a16b59e004bc970b7de8f03ef5ec53a4f1a9266ceeb7cd7973e3da3c7ace7085c89a2e248a16a48c5281b5a67b8af2d53868dc238e0583f777af0dc3cbfb0b3f1b2ce68e3d9d0354fa5329a276cbceae23d32002582f3b30cf45c29b7107540578dcb51512fe8fc1f83f6470e280680e2abbba17960cde91010a17b4be52e65231778def9981ab892b2eab6211a8fc0b4baf83d5f1e5bb310b9ebd170584df2a56fa6a4a46a6bfb2967bc08ffab5172c93adfd486efb476c7c3cedc2c4ae250e850c53d6abbb600200001801400020076657468315f766972745f776966690008000300000000003002038008000200090000000800020004000000080002000600000058000500ce7a71872f9207b0762c9c503451c2d72cd8f56a35999557218c06a5de8d84827634265da518efdf06e36257494dbabc874b0e867233ff9f9243917b1a03bb8996b6dd06724daf3e2a05e50785afe628e49a8c829800038028000180050002000000000008000100040000000800020047504c000800010009000000040003000c00018006000200710000001000018008000100460a0000040003003c00018008000100040000000e00020073797a6b616c6c65720000000800010006000000080001000e0000000e00020073797a6b616c6c65720000000400018010000180040003000400030004000300240103803c0001800a0002006b6672656500000008000100050000000800020021252e000500020000000000080001000000008004000300080001000b0000000c00018008000100040000004c0001800400030004000300040003000a0002002b28d75d2d000000040003000e00020073797a6b616c6c65720000000800010002000000090002005d402d2800000000040003000400030028000180080002002f2a21000500020000000000080001006a7000000400030004000300040003002c0001800400030008000100e000000004000300040003000400030008000100510c000008000100100000003800018008000100070000000800010082000000040003000800020047504c00080001000800000004000300080001000900000004000300340003802e000400ad8cfa6b522f67579c2a93c5f86b25ea1aa14c2d640e0e363ccc04cff73901d69fd543e035520cd7dbbc0000"], 0x1624}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 229.957479ms ago: executing program 6 (id=3505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x10}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r1, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0, 0x700}, {&(0x7f0000000200)="97ff70f871", 0x5}], 0x2}}], 0x1, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 219.428378ms ago: executing program 4 (id=3506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0xffffffff, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000480)=0xa4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a08000240004000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='tlb_flush\x00', r6}, 0x18) r7 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r7, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10023, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r8, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x40, @mcast1, 0x2}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000040)={r10, 0x3ff}, &(0x7f0000000140)=0x8) listen(r8, 0xffffffff) socketpair(0x1d, 0x3, 0x1, &(0x7f00000008c0)) 2.509599ms ago: executing program 5 (id=3507): r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_stats}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@can={{0x3, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "486f79bbd5b32287"}, 0x10}, 0xee, 0x0, 0x0, 0x40041}, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x59, 0xff, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x80, 0x14}}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f00000003c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, r4}, 0x14) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$packet_int(r0, 0x107, 0x1b, &(0x7f0000000400), 0x4) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r8, 0x0, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000540), r8) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x6, 0x4, 0x0, @private2, @remote, 0x700, 0x20, 0xf5bc, 0xffffffff}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="100027bd7000fcdbdf250d0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="20000180140002006772657461703000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000300030000000c00018008000300000000002000018014000200766c616e30000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="b9f092d01c005b8aaa573d71d7a110fd538681d667ee0038ce4dad05e2f20f5963ea1333c681827213c44a86e09d920f1b83d6b1f6db"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x2000000, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x60}}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 254.873µs ago: executing program 3 (id=3508): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x4, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)={@fallback=r4, r4, 0x2f, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 32) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r11, 0x0, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x84, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x51}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x3, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x2, 0x2, 0x4, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0x9}, 0x1) (async) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000002c0)={0xc, {{0x2, 0x4e20, @broadcast}}, 0x1, 0x1, [{{0x2, 0x4e24, @empty}}]}, 0x110) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000001c0)={'veth1_vlan\x00', 0x400}) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x4, 0xe, 0x8008, 0x6, 0x4, 0x3, 0x800, 0x4, r2}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@mpls_newroute={0xa0, 0x18, 0x100, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x0, 0x80, 0x3, 0xfd, 0x5, 0xfe, 0x3, 0xb00}, [@RTA_NEWDST={0x84, 0x13, [{0x2, 0x0, 0x1}, {0x3}, {0xff, 0x0, 0x1}, {0x3}, {0x8, 0x0, 0x1}, {0x2}, {0xffffa, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7}, {0x6, 0x0, 0x1}, {0x3d0a}, {0x2b6}, {0x4}, {0x80}, {0x40, 0x0, 0x1}, {0x8}, {0x1}, {0x3}, {0x1}, {0x5}, {0x4e}, {0x2}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1}, {0x9}, {0xffffd, 0x0, 0x1}, {0x1}, {0x5}, {0x30}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24064887) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x6) 0s ago: executing program 6 (id=3509): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, "bec76e1d"}, &(0x7f00000000c0)=0x28) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@dev={0xfe, 0x80, '\x00', 0x2f}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x2000003, 0x0, 0x7d, 0xd00, 0x0, 0x930310}) socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, "bec76e1d"}, &(0x7f00000000c0)=0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@dev={0xfe, 0x80, '\x00', 0x2f}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x2000003, 0x0, 0x7d, 0xd00, 0x0, 0x930310}) (async) socket$packet(0x11, 0x2, 0x300) (async) kernel console output (not intermixed with test programs): length. [ 437.040294][T15335] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2588'. [ 437.071815][T15335] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2588'. [ 437.383086][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.395264][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.412511][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.430444][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.439180][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 437.560675][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.573233][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.586325][ T3520] bond0 (unregistering): Released all slaves [ 437.606428][T15298] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 437.641262][T15298] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 437.891886][T15353] netlink: 'syz.4.2592': attribute type 4 has an invalid length. [ 437.950440][T15355] netlink: 'syz.4.2592': attribute type 4 has an invalid length. [ 438.251648][T15298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.254565][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2595'. [ 438.324108][ T51] Bluetooth: hci6: command tx timeout [ 438.362526][T15298] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.378374][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.385643][ T6131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.455471][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.462705][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.558877][ T24] IPVS: starting estimator thread 0... [ 438.658184][T15382] IPVS: using max 25 ests per chain, 60000 per kthread [ 438.709331][T15386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2600'. [ 439.019849][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2602'. [ 439.138807][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2604'. [ 439.221989][T15405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2605'. [ 439.273349][T15408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.523899][ T51] Bluetooth: hci3: command tx timeout [ 439.530502][ T3520] hsr_slave_0: left promiscuous mode [ 439.548356][ T3520] hsr_slave_1: left promiscuous mode [ 439.569232][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.599429][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.627178][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.650650][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.702838][ T3520] veth1_macvtap: left promiscuous mode [ 439.720389][ T3520] veth0_macvtap: left promiscuous mode [ 439.728637][ T3520] veth1_vlan: left promiscuous mode [ 439.742420][ T3520] veth0_vlan: left promiscuous mode [ 439.910044][T15399] sctp: [Deprecated]: syz.4.2603 (pid 15399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.910044][T15399] Use struct sctp_sack_info instead [ 440.410924][ T5155] Bluetooth: hci6: command tx timeout [ 440.589179][ T3520] team0 (unregistering): Port device team_slave_1 removed [ 440.642089][ T3520] team0 (unregistering): Port device team_slave_0 removed [ 441.553225][T15298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.604001][ T5155] Bluetooth: hci3: command tx timeout [ 441.870955][T15340] chnl_net:caif_netlink_parms(): no params data found [ 442.302988][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2618'. [ 442.350318][T15467] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2618'. [ 442.407623][T15467] batadv1: entered promiscuous mode [ 442.413043][ T5155] Bluetooth: hci2: command 0x0406 tx timeout [ 442.435535][T15467] batadv1: entered allmulticast mode [ 442.468141][T15340] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.485175][ T51] Bluetooth: hci6: command tx timeout [ 442.504252][T15340] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.511816][T15340] bridge_slave_0: entered allmulticast mode [ 442.525793][T15340] bridge_slave_0: entered promiscuous mode [ 442.534851][T15474] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 442.548324][T15340] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.556918][T15340] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.566288][T15340] bridge_slave_1: entered allmulticast mode [ 442.580653][T15340] bridge_slave_1: entered promiscuous mode [ 442.712459][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2620'. [ 442.839124][T15340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.849660][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2620'. [ 442.897296][T15340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.128081][T15340] team0: Port device team_slave_0 added [ 443.191675][T15298] veth0_vlan: entered promiscuous mode [ 443.219133][T15340] team0: Port device team_slave_1 added [ 443.241874][T15298] veth1_vlan: entered promiscuous mode [ 443.359770][T15506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2626'. [ 443.409534][T15340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.423960][T15340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.452475][T15340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.468630][T15340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.485398][T15340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.521492][T15340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.684481][ T51] Bluetooth: hci3: command tx timeout [ 443.702775][T15340] hsr_slave_0: entered promiscuous mode [ 443.717613][T15340] hsr_slave_1: entered promiscuous mode [ 443.990664][T15298] veth0_macvtap: entered promiscuous mode [ 444.067994][T15298] veth1_macvtap: entered promiscuous mode [ 444.183254][T15298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.318944][T15298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.432071][T15298] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.445503][T15548] netlink: 161716 bytes leftover after parsing attributes in process `syz.5.2634'. [ 444.463563][T15298] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.473514][T15298] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.482257][T15298] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.498768][T15548] netlink: zone id is out of range [ 444.546957][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2636'. [ 444.834575][T15552] team_slave_0: left promiscuous mode [ 444.840774][T15552] team_slave_0: left allmulticast mode [ 444.850954][T15552] team0 (unregistering): Port device team_slave_0 removed [ 444.861512][T15552] team_slave_1: left promiscuous mode [ 444.869616][T15552] team_slave_1: left allmulticast mode [ 444.876750][T15552] team0 (unregistering): Port device team_slave_1 removed [ 444.945914][T15560] syzkaller1: entered promiscuous mode [ 444.951560][T15560] syzkaller1: entered allmulticast mode [ 445.107522][T15562] x_tables: ip_tables: osf match: only valid for protocol 6 [ 445.125208][ T64] wlan1: Trigger new scan to find an IBSS to join [ 445.157894][T15340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 445.172201][T15562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2640'. [ 445.188029][T15340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 445.201826][T15340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 445.203521][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.230059][T15340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 445.230078][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.341101][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.359763][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.423204][T15576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2642'. [ 445.624734][T15340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.658365][T15581] only policy match revision 0 supported [ 445.658391][T15581] unable to load match [ 445.731617][T15586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2574'. [ 445.756608][T15340] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.765597][ T51] Bluetooth: hci3: command tx timeout [ 445.803342][T15586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2574'. [ 445.843018][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.850307][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.901080][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.908335][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.908816][T15592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2646'. [ 445.988543][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2647'. [ 446.014973][T15592] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2646'. [ 446.690598][T15620] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 446.906986][T15340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.069920][T15340] veth0_vlan: entered promiscuous mode [ 447.083191][T15638] syzkaller1: entered promiscuous mode [ 447.095132][T15638] syzkaller1: entered allmulticast mode [ 447.310824][T15340] veth1_vlan: entered promiscuous mode [ 447.457618][T15340] veth0_macvtap: entered promiscuous mode [ 447.483234][T15340] veth1_macvtap: entered promiscuous mode [ 447.551601][T15340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.604765][T15340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.627765][T15662] sctp: [Deprecated]: syz.5.2667 (pid 15662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.627765][T15662] Use struct sctp_sack_info instead [ 447.638135][T15340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.675341][T15340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.694036][T15340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.706486][T15340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.856639][T15692] sctp: [Deprecated]: syz.6.2669 (pid 15692) Use of int in maxseg socket option. [ 447.856639][T15692] Use struct sctp_assoc_value instead [ 448.168705][T15681] wlan1: Trigger new scan to find an IBSS to join [ 448.232570][T15681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.270048][T15681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.436949][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.477653][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.745097][T15718] netlink: 'syz.3.2676': attribute type 12 has an invalid length. [ 448.760375][T15718] __nla_validate_parse: 8 callbacks suppressed [ 448.760396][T15718] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2676'. [ 448.896948][T15726] netlink: 'syz.4.2677': attribute type 1 has an invalid length. [ 448.907656][T15726] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2677'. [ 449.083155][T11335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.325734][T11335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.421233][T11335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.486041][T11335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.608050][T11335] bridge_slave_1: left allmulticast mode [ 449.614485][T11335] bridge_slave_1: left promiscuous mode [ 449.620379][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.632298][T11335] bridge_slave_0: left allmulticast mode [ 449.638746][T11335] bridge_slave_0: left promiscuous mode [ 449.645104][T11335] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.056435][T11335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.069141][T11335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.079732][T11335] bond0 (unregistering): Released all slaves [ 450.490444][T11335] hsr_slave_0: left promiscuous mode [ 450.498616][T11335] hsr_slave_1: left promiscuous mode [ 450.505906][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.513370][T11335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.522049][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.530361][T11335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.625462][T15739] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 450.666353][T11335] veth1_macvtap: left promiscuous mode [ 450.673235][T11335] veth0_macvtap: left promiscuous mode [ 450.689569][T11335] veth1_vlan: left promiscuous mode [ 450.697386][T11335] veth0_vlan: left promiscuous mode [ 451.124691][ T1155] wlan1: Trigger new scan to find an IBSS to join [ 451.475007][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 451.503736][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 451.524543][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 451.533155][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 451.551714][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 451.980831][T11335] team0 (unregistering): Port device team_slave_1 removed [ 452.065010][T11335] team0 (unregistering): Port device team_slave_0 removed [ 452.090749][ T1155] wlan1: Creating new IBSS network, BSSID 42:67:a0:5d:8e:61 [ 452.643160][T15790] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2692'. [ 452.655009][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'. [ 452.675215][T15790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2692'. [ 453.055764][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2693'. [ 453.194794][T15802] No such timeout policy "syz0" [ 453.480118][T15810] netlink: 'syz.5.2697': attribute type 1 has an invalid length. [ 453.501728][T15810] netlink: 207 bytes leftover after parsing attributes in process `syz.5.2697'. [ 453.605621][ T51] Bluetooth: hci3: command tx timeout [ 453.920603][T15771] chnl_net:caif_netlink_parms(): no params data found [ 454.042273][T15833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.100939][T15837] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 454.365961][T15771] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.398598][T15771] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.424262][T15771] bridge_slave_0: entered allmulticast mode [ 454.443222][T15771] bridge_slave_0: entered promiscuous mode [ 454.464798][T15771] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.472111][T15771] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.483947][T15771] bridge_slave_1: entered allmulticast mode [ 454.495484][T15771] bridge_slave_1: entered promiscuous mode [ 454.702428][T15771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.735072][T15771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.905343][T15771] team0: Port device team_slave_0 added [ 454.932781][T15771] team0: Port device team_slave_1 added [ 455.143685][T15771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.150773][T15771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.207340][T15771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.243271][T15771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.260708][T15771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.324307][T15771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.486079][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2712'. [ 455.512349][T15864] syzkaller0: entered promiscuous mode [ 455.518831][T15864] syzkaller0: entered allmulticast mode [ 455.573197][T15869] vlan2: entered promiscuous mode [ 455.578784][T15869] team0: entered promiscuous mode [ 455.584845][T15869] team_slave_0: entered promiscuous mode [ 455.592889][T15869] team_slave_1: entered promiscuous mode [ 455.656609][T15771] hsr_slave_0: entered promiscuous mode [ 455.672645][T15771] hsr_slave_1: entered promiscuous mode [ 455.702351][ T51] Bluetooth: hci3: command tx timeout [ 455.971095][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 456.103853][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2716'. [ 456.113010][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2716'. [ 457.049407][T15910] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 457.269772][T15771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.298363][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2725'. [ 457.304911][T15771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 457.351250][T15771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 457.424449][T15771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 457.457666][T15923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2727'. [ 457.475376][T15923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2727'. [ 457.615325][T15939] netlink: 'syz.6.2729': attribute type 12 has an invalid length. [ 457.626765][T15939] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.2729'. [ 457.779128][ T51] Bluetooth: hci3: command tx timeout [ 457.828232][T15771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.879284][T15771] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.909598][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.916992][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.956090][T15686] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.963496][T15686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.095003][T15771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.241919][T15949] tun0: tun_chr_ioctl cmd 1074025675 [ 458.257518][T15952] netlink: 'syz.6.2735': attribute type 1 has an invalid length. [ 458.281095][T15949] tun0: persist enabled [ 458.294179][T15952] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2735'. [ 458.336474][T15953] tun0: tun_chr_ioctl cmd 1074025675 [ 458.349123][T15953] tun0: persist disabled [ 458.662664][T15771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.757701][T15771] veth0_vlan: entered promiscuous mode [ 458.778034][T15771] veth1_vlan: entered promiscuous mode [ 458.866430][T15771] veth0_macvtap: entered promiscuous mode [ 458.886370][T15771] veth1_macvtap: entered promiscuous mode [ 459.026579][T15771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.059295][T15771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.236232][T15771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.253544][T15771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.282932][T15771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.308375][T15771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.392526][T15969] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2738'. [ 459.843636][ T51] Bluetooth: hci3: command tx timeout [ 459.889247][T15978] netlink: 'syz.6.2740': attribute type 1 has an invalid length. [ 460.117483][T15980] bond1: (slave gretap1): making interface the new active one [ 460.126147][T15980] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 460.239175][T15686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.276352][T15686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.339001][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.358834][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.850083][ T30] audit: type=1800 audit(1749380571.914:10): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2745" name="xffffffffffffffff00000000000000000000003" dev="tmpfs" ino=178 res=0 errno=0 [ 461.156525][T15994] netlink: 'syz.4.2744': attribute type 12 has an invalid length. [ 461.520908][T16016] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.531318][ T9] IPVS: starting estimator thread 0... [ 461.627442][T16025] IPVS: using max 24 ests per chain, 57600 per kthread [ 461.751339][T15665] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.974484][T15665] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.172462][T15665] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.315029][T15665] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.356922][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.367417][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.379218][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.396031][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.404492][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.467678][T15665] bridge_slave_1: left allmulticast mode [ 462.473538][T15665] bridge_slave_1: left promiscuous mode [ 462.479450][T15665] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.489453][T15665] bridge_slave_0: left allmulticast mode [ 462.496155][T15665] bridge_slave_0: left promiscuous mode [ 462.501900][T15665] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.889519][T15665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.901177][T15665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.915345][T15665] bond0 (unregistering): Released all slaves [ 463.237459][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 463.455035][T15665] hsr_slave_0: left promiscuous mode [ 463.462228][T15665] hsr_slave_1: left promiscuous mode [ 463.476082][T15665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.484861][T15665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.495386][T15665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.502873][T15665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.592677][T15665] veth1_macvtap: left promiscuous mode [ 463.598661][T15665] veth0_macvtap: left promiscuous mode [ 463.605009][T15665] veth1_vlan: left promiscuous mode [ 463.610486][T15665] veth0_vlan: left promiscuous mode [ 464.196484][T16063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.226589][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 464.239231][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 464.267627][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 464.293794][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 464.301886][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 464.494203][ T5155] Bluetooth: hci3: command tx timeout [ 464.841385][T15665] team0 (unregistering): Port device team_slave_1 removed [ 464.894414][T15665] team0 (unregistering): Port device team_slave_0 removed [ 465.609514][T16057] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.630330][T16057] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.641570][T16081] netlink: 'syz.4.2769': attribute type 10 has an invalid length. [ 465.694585][T16032] chnl_net:caif_netlink_parms(): no params data found [ 465.782297][T16057] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.794484][T16057] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.815576][T16084] veth0_to_bridge: left allmulticast mode [ 465.821375][T16084] veth0_to_bridge: left promiscuous mode [ 465.834951][T16084] bridge0: port 3(veth0_to_bridge) entered disabled state [ 465.857106][T16084] bridge_slave_1: left allmulticast mode [ 465.872870][T16084] bridge_slave_1: left promiscuous mode [ 465.884259][T16084] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.897631][T16084] bridge_slave_0: left allmulticast mode [ 465.903749][T16084] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.162172][T16057] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.174714][T16057] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.335051][T16097] vlan2: entered promiscuous mode [ 466.340504][T16097] vlan2: entered allmulticast mode [ 466.346278][T16097] hsr_slave_1: entered allmulticast mode [ 466.403877][ T5155] Bluetooth: hci4: command tx timeout [ 466.412749][T16057] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.434065][T16057] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.504809][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2773'. [ 466.574490][ T5155] Bluetooth: hci3: command tx timeout [ 466.707104][T16103] ÿ: renamed from bond_slave_0 [ 466.816541][T16032] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.848661][T16032] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.874074][T16032] bridge_slave_0: entered allmulticast mode [ 466.885220][T16032] bridge_slave_0: entered promiscuous mode [ 466.910863][T16032] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.919362][T16032] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.927489][T16032] bridge_slave_1: entered allmulticast mode [ 466.936864][T16032] bridge_slave_1: entered promiscuous mode [ 467.027022][T16057] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.036582][T16057] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.070919][T16032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.115791][T16032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.189240][T16057] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.220643][T16057] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.258280][T16057] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.277477][T16057] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.384177][T16032] team0: Port device team_slave_0 added [ 467.427895][T16057] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.443009][T16057] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.471045][T16032] team0: Port device team_slave_1 added [ 467.574805][T16032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.582033][T16032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.619213][T16032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.656625][T16032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.672734][T16032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.699819][T16032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.917834][T16032] hsr_slave_0: entered promiscuous mode [ 467.935028][T16032] hsr_slave_1: entered promiscuous mode [ 468.288785][T16064] chnl_net:caif_netlink_parms(): no params data found [ 468.338993][T16129] x_tables: duplicate underflow at hook 3 [ 468.483957][ T5155] Bluetooth: hci4: command tx timeout [ 468.576768][T16032] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.622821][T16064] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.634354][T16064] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.641763][T16064] bridge_slave_0: entered allmulticast mode [ 468.648751][ T5155] Bluetooth: hci3: command tx timeout [ 468.678634][T16064] bridge_slave_0: entered promiscuous mode [ 468.726722][T16032] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.798755][T16064] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.808264][T16064] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.820036][T16064] bridge_slave_1: entered allmulticast mode [ 468.831584][T16064] bridge_slave_1: entered promiscuous mode [ 468.850542][T16147] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2785'. [ 468.869709][T16032] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.938799][T16064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.966343][T16032] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.994603][T16064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.154940][T16064] team0: Port device team_slave_0 added [ 469.187317][T16064] team0: Port device team_slave_1 added [ 469.258943][T16064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.266196][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.300735][T16064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.320616][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2788'. [ 469.332521][T16064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.341375][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.393592][T16064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.596977][T16032] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.621792][T16064] hsr_slave_0: entered promiscuous mode [ 469.629444][T16064] hsr_slave_1: entered promiscuous mode [ 469.636489][T16064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.644972][T16064] Cannot create hsr debugfs directory [ 469.650609][T16032] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.663161][T16032] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.723245][T16032] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.540954][T16032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.567545][ T5155] Bluetooth: hci4: command tx timeout [ 470.636690][ T30] audit: type=1107 audit(1749380581.694:11): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 470.667835][T16190] netlink: 'syz.6.2794': attribute type 1 has an invalid length. [ 470.683801][T16190] netlink: 'syz.6.2794': attribute type 2 has an invalid length. [ 470.733725][ T5155] Bluetooth: hci3: command tx timeout [ 470.734525][T16032] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.797991][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.805332][ T6133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.832263][T15681] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.839623][T15681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.168824][T16064] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.231408][T16064] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.259715][T16064] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 471.296288][T16064] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 471.349017][T16203] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 471.376240][T16206] xt_hashlimit: size too large, truncated to 1048576 [ 471.818040][T16032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.867228][T16064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.912327][T16064] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.941268][T11335] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.948517][T11335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.002851][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.010105][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.080640][T16032] veth0_vlan: entered promiscuous mode [ 472.137573][T16032] veth1_vlan: entered promiscuous mode [ 472.302993][T16032] veth0_macvtap: entered promiscuous mode [ 472.456117][T16032] veth1_macvtap: entered promiscuous mode [ 472.537837][T16032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.597198][T16032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.643645][ T5155] Bluetooth: hci4: command tx timeout [ 472.656826][T16032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.703960][T16032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.723347][T16032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.747784][T16032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.000986][T16064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.181807][T16257] netlink: 'syz.6.2808': attribute type 1 has an invalid length. [ 473.200264][T15686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.209290][T16258] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 473.228957][T16257] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2808'. [ 473.239608][T15686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.253354][T16064] veth0_vlan: entered promiscuous mode [ 473.328114][T16064] veth1_vlan: entered promiscuous mode [ 473.408440][ T6133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.429877][ T6133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.446793][T16064] veth0_macvtap: entered promiscuous mode [ 473.483990][T16064] veth1_macvtap: entered promiscuous mode [ 473.541747][T16267] syzkaller1: entered promiscuous mode [ 473.571284][T16267] syzkaller1: entered allmulticast mode [ 473.666423][T16064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.705797][T16276] netlink: 'syz.4.2813': attribute type 1 has an invalid length. [ 473.748321][T16064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.847491][T16276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.931706][T16286] netlink: 'syz.5.2816': attribute type 1 has an invalid length. [ 473.933061][T16273] bond2: (slave ip6gretap3): making interface the new active one [ 473.941923][T16286] netlink: 'syz.5.2816': attribute type 2 has an invalid length. [ 473.985818][T16273] bond2: (slave ip6gretap3): Enslaving as an active interface with an up link [ 474.059142][T16064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.103655][T16064] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.123776][T16064] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.133165][T16064] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.386669][T16300] sctp: [Deprecated]: syz.5.2821 (pid 16300) Use of int in max_burst socket option. [ 474.386669][T16300] Use struct sctp_assoc_value instead [ 474.663499][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.725685][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.869962][T15681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.886726][T15681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.268113][T16325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2825'. [ 475.419257][T16331] dummy0: entered promiscuous mode [ 475.437559][T16331] dummy0: left promiscuous mode [ 475.533012][T11335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.737129][T11335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.861448][T11335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.967273][T11335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.365689][T11335] bridge_slave_1: left allmulticast mode [ 476.371423][T11335] bridge_slave_1: left promiscuous mode [ 476.377941][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.388897][T11335] bridge_slave_0: left allmulticast mode [ 476.399934][T11335] bridge_slave_0: left promiscuous mode [ 476.407925][T11335] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.952312][T11335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.969085][T11335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.979506][T11335] bond0 (unregistering): Released all slaves [ 477.168772][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2829'. [ 477.198940][T16340] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2829'. [ 477.349481][T16340] gretap1: entered promiscuous mode [ 477.716409][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2835'. [ 478.200526][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 478.219024][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 478.229921][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 478.240595][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 478.250135][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 478.881564][T11335] hsr_slave_0: left promiscuous mode [ 478.946508][T11335] hsr_slave_1: left promiscuous mode [ 478.979309][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.018557][T11335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.047612][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.069091][T11335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.114103][T11335] veth1_macvtap: left promiscuous mode [ 479.119874][T11335] veth0_macvtap: left promiscuous mode [ 479.126264][T11335] veth1_vlan: left promiscuous mode [ 479.131746][T11335] veth0_vlan: left promiscuous mode [ 479.207674][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2847'. [ 479.230412][T16397] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2848'. [ 479.311152][T16399] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2847'. [ 479.402264][T16405] netlink: 'syz.6.2847': attribute type 16 has an invalid length. [ 479.412009][T16405] netlink: 'syz.6.2847': attribute type 3 has an invalid length. [ 479.422830][T16405] netlink: 'syz.6.2847': attribute type 6 has an invalid length. [ 479.572802][T16407] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2847'. [ 479.960424][T11335] team0 (unregistering): Port device team_slave_1 removed [ 480.019496][T11335] team0 (unregistering): Port device team_slave_0 removed [ 480.338835][ T5155] Bluetooth: hci4: command tx timeout [ 480.596875][T16390] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 480.637800][T16393] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 480.653658][T16390] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 480.662852][T16398] netlink: 'syz.6.2847': attribute type 4 has an invalid length. [ 480.683687][T16393] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 480.744375][T16393] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 481.205467][T16430] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 481.226815][T16430] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 481.267161][T16430] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 481.297931][T16434] netlink: 'syz.5.2854': attribute type 21 has an invalid length. [ 481.320565][T16430] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 481.331384][T16430] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 481.350873][T16430] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 481.371345][T16434] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2854'. [ 481.380966][T16430] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 481.403889][T16430] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 481.427051][T16430] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 481.447466][T16430] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 481.827507][T16372] chnl_net:caif_netlink_parms(): no params data found [ 481.946307][T16449] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2860'. [ 482.057639][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'. [ 482.155740][T16456] ipvlan2: entered promiscuous mode [ 482.162430][T16462] netlink: 'syz.5.2861': attribute type 4 has an invalid length. [ 482.164506][T16456] bridge0: port 3(ipvlan2) entered blocking state [ 482.179295][T16456] bridge0: port 3(ipvlan2) entered disabled state [ 482.186570][T16456] ipvlan2: entered allmulticast mode [ 482.192293][T16456] bridge0: entered allmulticast mode [ 482.202385][T16456] ipvlan2: left allmulticast mode [ 482.208113][T16456] bridge0: left allmulticast mode [ 482.344710][T16372] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.352025][T16372] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.391763][T16372] bridge_slave_0: entered allmulticast mode [ 482.404459][ T5155] Bluetooth: hci4: command tx timeout [ 482.544229][T16372] bridge_slave_0: entered promiscuous mode [ 482.561798][T16464] netlink: 'syz.4.2862': attribute type 5 has an invalid length. [ 482.571209][T16372] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.609767][T16372] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.643806][T16372] bridge_slave_1: entered allmulticast mode [ 482.652235][T16372] bridge_slave_1: entered promiscuous mode [ 482.770084][T16476] IPVS: set_ctl: invalid protocol: 135 172.20.20.45:20002 [ 482.822990][T16372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.847405][T16483] netlink: 'syz.6.2866': attribute type 5 has an invalid length. [ 482.857266][T16372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.031494][T16372] team0: Port device team_slave_0 added [ 483.049337][T16372] team0: Port device team_slave_1 added [ 483.117673][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2869'. [ 483.174717][T16372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.237922][T16372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.266421][T16372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.282359][T16372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.284844][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 483.290302][T16372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.329874][T16372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.489530][T16372] hsr_slave_0: entered promiscuous mode [ 483.493876][T16504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 483.496710][T16372] hsr_slave_1: entered promiscuous mode [ 483.515534][T16372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.524148][T16372] Cannot create hsr debugfs directory [ 483.754601][T16515] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2877'. [ 483.852432][T16516] pim6reg: entered allmulticast mode [ 483.870259][T16507] pim6reg: left allmulticast mode [ 484.489919][ T5155] Bluetooth: hci4: command tx timeout [ 484.497019][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.636462][T16533] sctp: [Deprecated]: syz.6.2881 (pid 16533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.636462][T16533] Use struct sctp_sack_info instead [ 484.746831][T16537] __nla_validate_parse: 1 callbacks suppressed [ 484.746854][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2882'. [ 485.170751][T16547] netlink: 'syz.5.2884': attribute type 10 has an invalid length. [ 485.279037][T16546] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2884'. [ 485.686216][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2885'. [ 485.696078][T16554] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 485.890862][T16372] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.008488][T16372] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 486.039072][T16372] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 486.039524][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2891'. [ 486.072831][T16569] openvswitch: netlink: Unknown nsh attribute 0 [ 486.079789][T16569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.125130][T16372] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 486.416506][T16585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.465534][T16585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.525383][T16585] bond1: (slave veth5): Releasing active interface [ 486.536129][T16590] netlink: 'syz.4.2894': attribute type 10 has an invalid length. [ 486.563812][ T5155] Bluetooth: hci4: command tx timeout [ 486.615833][T16585] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 486.623290][T16585] batman_adv: batadv0: Removing interface: ip6gretap2 [ 486.628063][T16598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.655321][T16585] bond2: (slave ip6gretap3): Releasing active interface [ 486.677049][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 486.693539][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2897'. [ 486.720824][T16598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.720973][T16594] : entered promiscuous mode [ 486.742665][T16590] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 486.897782][T16372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.930108][T16372] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.985954][T15682] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.993273][T15682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.030189][T15682] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.037483][T15682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.066008][T16609] veth10: entered allmulticast mode [ 487.067570][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2900'. [ 487.088794][T16613] netlink: 'syz.4.2899': attribute type 7 has an invalid length. [ 487.107606][T16609] veth11: entered promiscuous mode [ 487.128750][T16612] vlan2: entered promiscuous mode [ 487.134318][T16612] gretap0: entered promiscuous mode [ 487.172541][T16613] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.186193][T16614] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2901'. [ 487.274974][T16613] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.361631][T16613] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.418966][T16616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2902'. [ 487.428561][T16616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2902'. [ 487.472751][T16613] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.627962][T16613] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.677803][T16613] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.747966][T16613] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.864037][T16613] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.972626][T16372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.031972][T16634] netlink: 'syz.5.2906': attribute type 1 has an invalid length. [ 488.197797][T16636] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 488.271629][T16372] veth0_vlan: entered promiscuous mode [ 488.302259][T16634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.303879][ T1155] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 488.349262][T16372] veth1_vlan: entered promiscuous mode [ 488.437324][ T64] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 488.528371][T16372] veth0_macvtap: entered promiscuous mode [ 488.585041][T16372] veth1_macvtap: entered promiscuous mode [ 488.877810][T16667] bond2: entered promiscuous mode [ 488.902138][T16667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.344592][T16667] bond2 (unregistering): Released all slaves [ 489.452168][T16372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.480052][T16372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.592445][T16372] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.615354][T16686] netlink: 'syz.5.2919': attribute type 28 has an invalid length. [ 489.629691][T16372] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.647858][T16372] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.661584][T16372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.707009][T16689] netlink: 'syz.5.2919': attribute type 4 has an invalid length. [ 489.771938][T16690] netlink: 'syz.5.2919': attribute type 4 has an invalid length. [ 490.075724][T16699] netlink: 'syz.4.2922': attribute type 21 has an invalid length. [ 490.133173][T16702] __nla_validate_parse: 6 callbacks suppressed [ 490.133188][T16702] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2922'. [ 490.149151][T16702] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2922'. [ 490.216985][T16699] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2922'. [ 490.226397][T16699] netlink: 'syz.4.2922': attribute type 1 has an invalid length. [ 490.235017][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2922'. [ 490.246503][T16703] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 490.257970][T16703] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 490.307706][T15681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.334085][T15681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.541079][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.548807][T16707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2925'. [ 490.570190][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.877814][T16714] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2928'. [ 491.051086][T16722] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2930'. [ 491.086537][T16723] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2930'. [ 491.192738][T16728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2931'. [ 491.726384][T15681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.828782][T15681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.923216][T15681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.999021][T15681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.130803][T15681] bridge_slave_1: left allmulticast mode [ 492.136915][T15681] bridge_slave_1: left promiscuous mode [ 492.142633][T15681] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.152492][T15681] bridge_slave_0: left allmulticast mode [ 492.158551][T15681] bridge_slave_0: left promiscuous mode [ 492.167100][T15681] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.591358][T15681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.604616][T15681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.617575][T15681] bond0 (unregistering): Released all slaves [ 493.032159][T15681] hsr_slave_0: left promiscuous mode [ 493.038821][T15681] hsr_slave_1: left promiscuous mode [ 493.048936][T15681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.057675][T15681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.070209][T15681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.078667][T15681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.108577][T15681] veth1_macvtap: left promiscuous mode [ 493.114629][T15681] veth0_macvtap: left promiscuous mode [ 493.120381][T15681] veth1_vlan: left promiscuous mode [ 493.127674][T15681] veth0_vlan: left promiscuous mode [ 493.415776][T16748] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2935'. [ 493.861972][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 493.875935][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 493.894507][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 493.904463][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 493.934041][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 494.067382][T15681] team0 (unregistering): Port device team_slave_1 removed [ 494.127343][T15681] team0 (unregistering): Port device team_slave_0 removed [ 494.872714][T16741] lo speed is unknown, defaulting to 1000 [ 494.882698][T16741] lo speed is unknown, defaulting to 1000 [ 494.915788][T16741] lo speed is unknown, defaulting to 1000 [ 494.952816][T16741] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 495.077116][T16741] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 495.169988][T16741] lo speed is unknown, defaulting to 1000 [ 495.200850][T16741] lo speed is unknown, defaulting to 1000 [ 495.210344][T16741] lo speed is unknown, defaulting to 1000 [ 495.228777][T16771] __nla_validate_parse: 3 callbacks suppressed [ 495.228796][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2943'. [ 495.272212][T16741] lo speed is unknown, defaulting to 1000 [ 495.335388][T16741] lo speed is unknown, defaulting to 1000 [ 495.345619][T16741] lo speed is unknown, defaulting to 1000 [ 495.402766][T16741] lo speed is unknown, defaulting to 1000 [ 495.429359][T16741] lo speed is unknown, defaulting to 1000 [ 495.460797][T16741] lo speed is unknown, defaulting to 1000 [ 495.501256][T16741] lo speed is unknown, defaulting to 1000 [ 495.717136][T16780] netlink: 'syz.5.2947': attribute type 7 has an invalid length. [ 495.782046][T16780] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.812616][T16780] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.951499][T16780] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.977799][T16780] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.004632][ T5155] Bluetooth: hci4: command tx timeout [ 496.088631][T16780] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.160532][T16780] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.349894][T16780] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.388294][T16780] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.490797][T16804] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2954'. [ 496.670602][T16809] netlink: 'syz.4.2955': attribute type 1 has an invalid length. [ 496.673496][T16780] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.709413][T16780] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.736652][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'. [ 496.782302][T16809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.816629][T16780] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.825734][T16780] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.837068][T16815] x_tables: duplicate underflow at hook 2 [ 496.909844][T16780] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.940062][T16780] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.023291][T16780] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.037072][T16780] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.078399][T16819] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 497.523460][ T5155] block nbd3: Receive control failed (result -32) [ 497.557684][T16755] chnl_net:caif_netlink_parms(): no params data found [ 497.670295][T16839] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2963'. [ 498.084320][ T5155] Bluetooth: hci4: command tx timeout [ 498.344841][T16755] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.381005][T16755] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.414059][T16755] bridge_slave_0: entered allmulticast mode [ 498.436316][T16755] bridge_slave_0: entered promiscuous mode [ 498.456000][T16856] x_tables: duplicate underflow at hook 1 [ 498.461998][T16856] x_tables: duplicate underflow at hook 1 [ 498.463830][T16755] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.493267][T16856] x_tables: duplicate underflow at hook 1 [ 498.493309][T16755] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.510694][T16755] bridge_slave_1: entered allmulticast mode [ 498.517781][T16856] x_tables: duplicate underflow at hook 1 [ 498.519796][T16755] bridge_slave_1: entered promiscuous mode [ 498.530924][T16856] x_tables: duplicate underflow at hook 1 [ 498.540092][T16856] x_tables: duplicate underflow at hook 1 [ 498.551578][T16833] lo speed is unknown, defaulting to 1000 [ 498.553548][T16856] x_tables: duplicate underflow at hook 1 [ 498.583876][T16866] wireguard0: entered promiscuous mode [ 498.589420][T16866] wireguard0: entered allmulticast mode [ 498.683066][T16755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.739047][T16755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.911446][T16755] team0: Port device team_slave_0 added [ 498.980367][T16755] team0: Port device team_slave_1 added [ 499.036556][T16755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.052741][T16755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.082364][T16755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.096453][T16755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.103699][T16755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.138828][T16755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.321876][T16890] netlink: 'syz.4.2978': attribute type 1 has an invalid length. [ 499.343620][T16890] netlink: 'syz.4.2978': attribute type 10 has an invalid length. [ 499.351726][T16890] netlink: 'syz.4.2978': attribute type 4 has an invalid length. [ 499.400848][T16890] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2978'. [ 499.595064][T16755] hsr_slave_0: entered promiscuous mode [ 499.607371][T16900] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2981'. [ 499.613412][T16755] hsr_slave_1: entered promiscuous mode [ 499.649522][T16755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.674226][T16755] Cannot create hsr debugfs directory [ 499.785818][T16903] Bluetooth: MGMT ver 1.23 [ 500.164099][ T5155] Bluetooth: hci4: command tx timeout [ 500.372368][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2986'. [ 500.382522][T16912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2983'. [ 500.392442][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2986'. [ 500.934073][T16928] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2988'. [ 500.944533][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2990'. [ 500.993895][T16932] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2990'. [ 501.077036][T16755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 501.140913][T16755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 501.181411][T16755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.237707][T16755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.286912][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2994'. [ 501.344525][T16950] x_tables: duplicate underflow at hook 4 [ 501.433729][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 501.462323][T16962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 501.500556][T16961] tipc: Enabled bearer , priority 8 [ 501.693296][T16755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.812555][T16755] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.840183][T16975] tipc: Enabling of bearer rejected, media not registered [ 501.873173][T15665] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.880502][T15665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.913407][T15665] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.920669][T15665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.091547][T16982] tipc: Enabling of bearer rejected, failed to enable media [ 502.243904][ T5155] Bluetooth: hci4: command tx timeout [ 502.436558][T16993] netlink: 'syz.4.3005': attribute type 1 has an invalid length. [ 502.483786][T16993] netlink: 'syz.4.3005': attribute type 1 has an invalid length. [ 502.657037][T16996] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 502.896596][T16755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.069207][T17006] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 503.210574][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 503.248902][T17021] netlink: 'syz.4.3013': attribute type 7 has an invalid length. [ 503.270308][T17021] netlink: 'syz.4.3013': attribute type 7 has an invalid length. [ 503.307830][T17021] netlink: 'syz.4.3013': attribute type 7 has an invalid length. [ 503.359116][T17021] netlink: 'syz.4.3013': attribute type 7 has an invalid length. [ 503.361801][T16755] veth0_vlan: entered promiscuous mode [ 503.404947][T17021] netlink: 'syz.4.3013': attribute type 7 has an invalid length. [ 503.418211][T16755] veth1_vlan: entered promiscuous mode [ 503.447231][T17021] netlink: 'syz.4.3013': attribute type 7 has an invalid length. [ 503.488970][T17021] netlink: 'syz.4.3013': attribute type 7 has an invalid length. [ 503.534839][T17021] netlink: 'syz.4.3013': attribute type 7 has an invalid length. [ 503.535200][T16755] veth0_macvtap: entered promiscuous mode [ 503.628389][T16755] veth1_macvtap: entered promiscuous mode [ 503.739615][T16755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.779831][T16755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.819091][T16755] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.835255][T16755] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.859365][T16755] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.870904][T16755] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.127305][T15681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.153822][T15681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.351230][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.373978][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.433059][T17035] lo speed is unknown, defaulting to 1000 [ 505.119348][T17077] team0: Device veth1_macvtap failed to register rx_handler [ 505.769458][ T1155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.983182][ T1155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.059373][ T1155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.137122][ T1155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.228905][ T1155] bridge_slave_1: left allmulticast mode [ 506.235245][ T1155] bridge_slave_1: left promiscuous mode [ 506.241876][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.254223][ T1155] bridge_slave_0: left allmulticast mode [ 506.259997][ T1155] bridge_slave_0: left promiscuous mode [ 506.266729][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.670745][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.683311][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.694361][ T1155] bond0 (unregistering): Released all slaves [ 507.099361][ T1155] hsr_slave_0: left promiscuous mode [ 507.106938][ T1155] hsr_slave_1: left promiscuous mode [ 507.113074][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.120955][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.130608][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.138348][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.163269][ T1155] veth1_macvtap: left promiscuous mode [ 507.168986][ T1155] veth0_macvtap: left promiscuous mode [ 507.174859][ T1155] veth1_vlan: left promiscuous mode [ 507.180173][ T1155] veth0_vlan: left promiscuous mode [ 507.777370][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880510eb800: rx timeout, send abort [ 507.948863][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 507.961851][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 507.982605][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 508.008269][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 508.016647][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 508.277535][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880510ebc00: rx timeout, send abort [ 508.291481][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880510eb800: abort rx timeout. Force session deactivation [ 508.410385][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 508.514821][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 508.787631][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880510ebc00: abort rx timeout. Force session deactivation [ 509.092199][T17123] __nla_validate_parse: 134 callbacks suppressed [ 509.092222][T17123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3042'. [ 509.241368][T17126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 509.618489][T17138] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 509.763621][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 509.851361][T17112] lo speed is unknown, defaulting to 1000 [ 510.034375][T17152] netlink: 'syz.3.3054': attribute type 11 has an invalid length. [ 510.087017][ T5155] Bluetooth: hci4: command tx timeout [ 510.472689][T17177] netlink: 236 bytes leftover after parsing attributes in process `syz.6.3061'. [ 510.483293][T17112] chnl_net:caif_netlink_parms(): no params data found [ 510.932492][T17112] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.957122][T17112] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.981676][T17112] bridge_slave_0: entered allmulticast mode [ 511.005411][T17112] bridge_slave_0: entered promiscuous mode [ 511.039067][T17207] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3068'. [ 511.075699][T17112] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.082955][T17112] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.124191][T17112] bridge_slave_1: entered allmulticast mode [ 511.139389][T17112] bridge_slave_1: entered promiscuous mode [ 511.143819][ T1155] wlan1: Trigger new scan to find an IBSS to join [ 511.256664][T17215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3073'. [ 511.314012][T17220] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3075'. [ 511.328871][T17221] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3075'. [ 511.377465][T17215] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.442470][T17112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.463924][T17223] smc: net device veth0 applied user defined pnetid SYZ2 [ 511.477464][T17112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.508763][T17215] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.590228][T17215] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.712872][T17225] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3076'. [ 511.740693][T17215] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.752721][T17231] ipt_REJECT: ECHOREPLY no longer supported. [ 511.786771][T17112] team0: Port device team_slave_0 added [ 511.810971][T17227] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3076'. [ 511.836513][T17112] team0: Port device team_slave_1 added [ 511.919299][T17112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.950554][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.997977][T17112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.031869][T17112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.050169][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.104113][T17112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.164016][ T5155] Bluetooth: hci4: command tx timeout [ 512.204981][T17215] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.388979][T17112] hsr_slave_0: entered promiscuous mode [ 512.399220][T17112] hsr_slave_1: entered promiscuous mode [ 512.408271][T17112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.416243][T17112] Cannot create hsr debugfs directory [ 512.430225][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3085'. [ 512.435471][T17215] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.449980][T17244] syzkaller1: entered promiscuous mode [ 512.455611][T17244] syzkaller1: entered allmulticast mode [ 512.469401][T17256] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 512.551960][T17254] xt_CT: No such helper "snmp" [ 512.572347][T17215] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.730714][T17215] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.862679][T17266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.899934][T17266] batadv_slave_0: entered promiscuous mode [ 512.906528][T17268] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3088'. [ 513.543832][T17289] validate_nla: 60 callbacks suppressed [ 513.543858][T17289] netlink: 'syz.5.3092': attribute type 10 has an invalid length. [ 513.615599][T17289] dummy0: entered promiscuous mode [ 513.621831][T17289] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 514.140261][T17112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 514.188210][T17112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 514.218226][T17112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 514.225793][ T30] audit: type=1804 audit(1749380625.294:12): pid=17314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3099" name="/newroot/666/cgroup.controllers" dev="tmpfs" ino=3440 res=1 errno=0 [ 514.254576][ T5155] Bluetooth: hci4: command tx timeout [ 514.290324][T17112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 514.322100][ T30] audit: type=1800 audit(1749380625.324:13): pid=17314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3099" name="cgroup.controllers" dev="tmpfs" ino=3440 res=0 errno=0 [ 514.333622][T17319] netlink: 'syz.3.3104': attribute type 1 has an invalid length. [ 514.369378][T17319] netlink: 'syz.3.3104': attribute type 1 has an invalid length. [ 514.555494][T17334] __nla_validate_parse: 1 callbacks suppressed [ 514.555513][T17334] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3106'. [ 514.776090][T17112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.801390][T17348] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3110'. [ 514.856425][T17112] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.880712][T11335] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.888080][T11335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.010870][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.018091][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.067114][T17362] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 515.738958][T17385] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 515.752356][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3121'. [ 515.800836][T17112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.915458][T17112] veth0_vlan: entered promiscuous mode [ 515.965461][T17112] veth1_vlan: entered promiscuous mode [ 516.075404][T17112] veth0_macvtap: entered promiscuous mode [ 516.103015][T17112] veth1_macvtap: entered promiscuous mode [ 516.158772][T17112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.166705][T15686] wlan1: Trigger new scan to find an IBSS to join [ 516.205033][T17112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.239885][T17112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.262910][T17112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.280676][T17112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.291545][T17112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.324662][ T5155] Bluetooth: hci4: command tx timeout [ 516.478222][T17411] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3126'. [ 516.491183][T15665] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 516.730041][T17423] : entered promiscuous mode [ 516.748090][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.754172][T17425] netlink: 'syz.3.3130': attribute type 10 has an invalid length. [ 516.772726][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.938975][T17425] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 517.076680][T11335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.143516][T11335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.152670][ T6133] wlan1: Creating new IBSS network, BSSID a6:a9:01:e7:09:12 [ 517.311250][T17446] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 517.667782][T17465] netlink: 'syz.3.3143': attribute type 2 has an invalid length. [ 517.686200][T17465] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3143'. [ 517.697562][T17462] dummy0: entered promiscuous mode [ 517.703225][T17462] vlan2: entered promiscuous mode [ 517.823324][T17473] xt_hashlimit: size too large, truncated to 1048576 [ 517.895958][T17474] xt_hashlimit: size too large, truncated to 1048576 [ 517.916710][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806793fc00: rx timeout, send abort [ 518.367054][T15665] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.416840][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806793e000: rx timeout, send abort [ 518.427029][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806793fc00: abort rx timeout. Force session deactivation [ 518.565556][T15665] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.735865][T15665] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.838634][T15665] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.870880][T17486] lo speed is unknown, defaulting to 1000 [ 518.914776][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806793c800: rx timeout, send abort [ 518.925278][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806793e000: abort rx timeout. Force session deactivation [ 519.048778][T15665] bridge_slave_1: left allmulticast mode [ 519.062610][T15665] bridge_slave_1: left promiscuous mode [ 519.069383][T15665] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.079342][T15665] bridge_slave_0: left allmulticast mode [ 519.085582][T15665] bridge_slave_0: left promiscuous mode [ 519.091387][T15665] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.210901][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 519.423027][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806793c800: abort rx timeout. Force session deactivation [ 519.634925][T15665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.647264][T15665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.659042][T15665] bond0 (unregistering): Released all slaves [ 520.016258][T15665] hsr_slave_0: left promiscuous mode [ 520.022308][T15665] hsr_slave_1: left promiscuous mode [ 520.029248][T15665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.047765][T15665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.057039][T15665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.065613][T15665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.088280][T15665] veth1_macvtap: left promiscuous mode [ 520.094368][T15665] veth0_macvtap: left promiscuous mode [ 520.100017][T15665] veth1_vlan: left promiscuous mode [ 520.106256][T15665] veth0_vlan: left promiscuous mode [ 520.738905][T17520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3153'. [ 520.762552][T17520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3153'. [ 520.815642][T17524] xt_hashlimit: size too large, truncated to 1048576 [ 520.900506][T17526] xt_hashlimit: size too large, truncated to 1048576 [ 521.544959][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.555800][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.578461][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.586886][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.597749][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 521.607304][T17533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3155'. [ 521.671902][T17534] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3155'. [ 521.802311][T15665] team0 (unregistering): Port device team_slave_1 removed [ 521.859408][T15665] team0 (unregistering): Port device team_slave_0 removed [ 522.411608][T17519] nr0: left promiscuous mode [ 522.415526][T17512] netlink: 'syz.6.3150': attribute type 7 has an invalid length. [ 522.778074][ T1155] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 522.904323][T17548] netlink: 'syz.6.3161': attribute type 30 has an invalid length. [ 523.476297][T17530] lo speed is unknown, defaulting to 1000 [ 523.562049][T17570] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.598492][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3165'. [ 523.693724][ T5155] Bluetooth: hci4: command tx timeout [ 524.071184][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3170'. [ 524.391207][T17600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3172'. [ 524.512103][T17530] chnl_net:caif_netlink_parms(): no params data found [ 524.842376][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3175'. [ 524.873115][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3175'. [ 524.895571][T17606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3175'. [ 525.200960][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.231732][T17530] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.244974][T17530] bridge_slave_0: entered allmulticast mode [ 525.267417][T17530] bridge_slave_0: entered promiscuous mode [ 525.290664][T17623] ªªªªª@: renamed from bridge_slave_0 [ 525.329897][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.355260][T17530] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.374088][T17530] bridge_slave_1: entered allmulticast mode [ 525.392501][T17530] bridge_slave_1: entered promiscuous mode [ 525.414550][T17596] lo speed is unknown, defaulting to 1000 [ 525.671847][T17530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.722371][T17530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.766804][ T5155] Bluetooth: hci4: command tx timeout [ 526.062637][T17530] team0: Port device team_slave_0 added [ 526.121060][T17530] team0: Port device team_slave_1 added [ 526.129849][T17659] __nla_validate_parse: 2 callbacks suppressed [ 526.129868][T17659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3189'. [ 526.368203][T17661] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.376279][T17661] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.489551][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3191'. [ 526.526733][T17661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.558431][T17661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.661645][T17661] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.672043][T17661] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.681819][T17661] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.699966][T17661] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.779512][T17530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.796129][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.862643][T17530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.883606][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 526.886070][T17530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.909723][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.027207][T17530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.318716][T17530] hsr_slave_0: entered promiscuous mode [ 527.349205][T17530] hsr_slave_1: entered promiscuous mode [ 527.370301][T17530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.404370][T17530] Cannot create hsr debugfs directory [ 527.500481][T17697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3199'. [ 527.535222][T17697] tipc: Enabling of bearer rejected, failed to enable media [ 527.724171][T17714] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 527.843784][ T5155] Bluetooth: hci4: command tx timeout [ 528.096551][T17731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3208'. [ 528.369820][T17741] rds_bind: 23 callbacks suppressed [ 528.369842][T17741] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 528.491669][T17743] netlink: 'syz.6.3212': attribute type 10 has an invalid length. [ 528.535295][T17743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.576743][T17743] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 528.689584][T17747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.720644][T17747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.773102][T17747] bond0: (slave batadv0): Releasing backup interface [ 528.812359][T17714] lo speed is unknown, defaulting to 1000 [ 529.404443][T17530] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 529.447624][T17530] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 529.499815][T17530] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 529.567514][T17530] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 529.580697][T17773] netlink: 'syz.4.3221': attribute type 21 has an invalid length. [ 529.590987][T17773] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3221'. [ 529.798212][T17789] netlink: 664 bytes leftover after parsing attributes in process `syz.6.3223'. [ 529.837126][T17530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.887347][T17791] sctp: [Deprecated]: syz.3.3225 (pid 17791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.887347][T17791] Use struct sctp_sack_info instead [ 529.892418][T17530] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.924812][ T5155] Bluetooth: hci4: command tx timeout [ 529.949109][T15682] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.956470][T15682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.981367][T15682] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.988661][T15682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.646399][T17824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3229'. [ 530.679023][T17821] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3232'. [ 530.969252][T17530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.085921][T17830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3235'. [ 531.157671][T17530] veth0_vlan: entered promiscuous mode [ 531.200446][T17809] lo speed is unknown, defaulting to 1000 [ 531.207739][T17530] veth1_vlan: entered promiscuous mode [ 531.382397][T17851] syz.5.3240 uses old SIOCAX25GETINFO [ 531.663201][T17530] veth0_macvtap: entered promiscuous mode [ 531.681674][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3242'. [ 531.719784][T17530] veth1_macvtap: entered promiscuous mode [ 531.752658][T17859] tipc: Enabled bearer , priority 0 [ 531.934318][ T24] lo speed is unknown, defaulting to 1000 [ 531.961229][T17530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.988848][T17530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.046655][T17530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.059733][T17530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.075878][T17530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.091487][T17530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.296871][ T6133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.318232][T17855] tipc: Disabling bearer [ 532.333765][ T6133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.510227][T15681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.542542][T15681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.768049][T17890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3249'. [ 532.940100][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3250'. [ 532.983306][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'. [ 533.009926][T17895] netlink: 'syz.4.3250': attribute type 11 has an invalid length. [ 533.035492][T17895] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3250'. [ 533.174699][T17901] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.279101][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3253'. [ 533.332180][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3253'. [ 533.452609][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.561264][T17901] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.667590][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.708456][T17901] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.793301][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.820603][T17901] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.909556][T17901] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.930258][T17901] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.949391][T17901] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.977860][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.000234][T17901] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.107035][ T64] bridge_slave_1: left allmulticast mode [ 534.112761][ T64] bridge_slave_1: left promiscuous mode [ 534.120250][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.131887][ T64] bridge_slave_0: left allmulticast mode [ 534.138040][ T64] bridge_slave_0: left promiscuous mode [ 534.144368][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.547950][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.559791][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.572288][ T64] bond0 (unregistering): Released all slaves [ 534.945391][ T64] hsr_slave_0: left promiscuous mode [ 534.951388][ T64] hsr_slave_1: left promiscuous mode [ 534.958207][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.966707][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.978783][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.986812][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.010821][ T64] veth1_macvtap: left promiscuous mode [ 535.016943][ T64] veth0_macvtap: left promiscuous mode [ 535.022576][ T64] veth1_vlan: left promiscuous mode [ 535.028548][ T64] veth0_vlan: left promiscuous mode [ 535.683702][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 536.015138][ T64] team0 (unregistering): Port device team_slave_1 removed [ 536.078480][ T64] team0 (unregistering): Port device team_slave_0 removed [ 536.126094][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.164141][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.183704][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.192170][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.202425][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 536.862009][T17924] bridge0: port 1(erspan0) entered blocking state [ 536.869603][T17924] bridge0: port 1(erspan0) entered disabled state [ 536.876700][T17924] erspan0: entered allmulticast mode [ 536.884373][T17924] erspan0: entered promiscuous mode [ 537.348761][T17971] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3264'. [ 537.450049][T17975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3264'. [ 537.916570][T17944] lo speed is unknown, defaulting to 1000 [ 537.963166][T17989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3268'. [ 538.048160][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3269'. [ 538.109067][T17988] netlink: del zone limit has 4 unknown bytes [ 538.123277][T17992] sit0: entered promiscuous mode [ 538.155437][T17992] netlink: 'syz.3.3270': attribute type 3 has an invalid length. [ 538.174074][T17992] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3270'. [ 538.243933][ T5155] Bluetooth: hci4: command tx timeout [ 538.501751][T17941] lo speed is unknown, defaulting to 1000 [ 538.983297][T18019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.108945][T17941] chnl_net:caif_netlink_parms(): no params data found [ 539.324470][T17941] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.353763][T17941] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.361287][T17941] bridge_slave_0: entered allmulticast mode [ 539.370077][T17941] bridge_slave_0: entered promiscuous mode [ 539.379220][T17941] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.397119][T17941] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.410998][T17941] bridge_slave_1: entered allmulticast mode [ 539.435191][T17941] bridge_slave_1: entered promiscuous mode [ 539.440702][T18033] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3281'. [ 539.444473][T18029] netlink: 'syz.6.3282': attribute type 4 has an invalid length. [ 539.473482][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3282'. [ 539.523020][T17941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.570737][T17941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.735111][T17941] team0: Port device team_slave_0 added [ 539.765113][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3280'. [ 539.765607][T17941] team0: Port device team_slave_1 added [ 539.933099][T17941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.954547][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.011863][T17941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.094109][T17941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.115779][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.199410][T17941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.277096][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3287'. [ 540.333966][ T5155] Bluetooth: hci4: command tx timeout [ 540.398028][T17941] hsr_slave_0: entered promiscuous mode [ 540.425165][T17941] hsr_slave_1: entered promiscuous mode [ 540.462601][T17941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.498397][T17941] Cannot create hsr debugfs directory [ 540.508001][T18068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.098577][T18084] netlink: 'syz.5.3296': attribute type 1 has an invalid length. [ 541.181055][T18084] 8021q: adding VLAN 0 to HW filter on device bond2 [ 541.219761][T18081] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 541.238865][T18081] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 541.288933][T18081] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 541.327721][T18081] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 541.362861][T18087] bond2: (slave veth0_to_bond): making interface the new active one [ 541.379785][T18087] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 542.044807][T17941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 542.095638][T17941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 542.129396][T17941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 542.166045][T17941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 542.297968][T18118] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3304'. [ 542.403545][ T5155] Bluetooth: hci4: command tx timeout [ 542.559617][T18137] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3305'. [ 542.631277][T17941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.708401][T17941] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.758804][T15681] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.766266][T15681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.800471][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.807887][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.914027][T18145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3311'. [ 543.003211][T18149] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3313'. [ 543.040082][T18149] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 543.539651][T18161] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3315'. [ 543.684661][T18165] netlink: 'syz.6.3316': attribute type 1 has an invalid length. [ 543.715713][T18167] ip6t_rpfilter: unknown options [ 543.769802][T18170] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3318'. [ 543.783243][T18171] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3316'. [ 543.785137][T18170] netlink: 'syz.4.3318': attribute type 3 has an invalid length. [ 543.804269][T18165] bond4: entered promiscuous mode [ 543.816025][T18170] netlink: 15 bytes leftover after parsing attributes in process `syz.4.3318'. [ 543.816133][T18165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 543.875539][T18171] batadv0: entered promiscuous mode [ 543.890579][T18171] batadv0: entered allmulticast mode [ 543.899429][T18171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.916881][T18171] bond4: (slave batadv0): making interface the new active one [ 543.935177][T18171] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 544.035703][T18171] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3316'. [ 544.135169][T17941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.150789][T18189] x_tables: duplicate underflow at hook 1 [ 544.160432][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3316'. [ 544.318246][T17941] veth0_vlan: entered promiscuous mode [ 544.390011][T17941] veth1_vlan: entered promiscuous mode [ 544.430610][T18197] xt_cgroup: path and classid specified [ 544.443040][T18199] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3325'. [ 544.467093][T18198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.477333][T17941] veth0_macvtap: entered promiscuous mode [ 544.486793][ T5155] Bluetooth: hci4: command tx timeout [ 544.521713][T17941] veth1_macvtap: entered promiscuous mode [ 544.548204][T17941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.577771][T17941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.610937][T17941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.620786][T17941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.630406][T17941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.641584][T17941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.665874][T18201] gretap0: entered promiscuous mode [ 544.820334][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.834345][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.937563][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.972703][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.151563][T18217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.159000][T18217] IPv6: NLM_F_CREATE should be set when creating new route [ 545.166360][T18217] IPv6: NLM_F_CREATE should be set when creating new route [ 545.173735][T18217] IPv6: NLM_F_CREATE should be set when creating new route [ 545.469419][T18221] syzkaller0: entered promiscuous mode [ 545.477504][T18221] syzkaller0: entered allmulticast mode [ 547.940985][T11335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.138268][T18247] __nla_validate_parse: 5 callbacks suppressed [ 548.138290][T18247] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3341'. [ 548.167345][T11335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.207165][T18253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3343'. [ 548.241156][T18249] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3340'. [ 548.277662][T18251] x_tables: ip_tables: ah match: only valid for protocol 51 [ 548.279234][T18252] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3340'. [ 548.285511][T18255] bond0: option min_links: invalid value (18446744071562067969) [ 548.305381][T18255] bond0: option min_links: allowed values 0 - 2147483647 [ 548.484911][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 548.581564][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 548.697793][T11335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.790636][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 548.805729][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 548.816758][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 548.832956][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 548.866268][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 549.125650][T15682] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 549.415975][T11335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.582930][T18306] dvmrp0: entered allmulticast mode [ 549.783000][T18314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3356'. [ 549.982587][T11335] bridge_slave_1: left allmulticast mode [ 550.008484][T11335] bridge_slave_1: left promiscuous mode [ 550.032820][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.116162][T11335] bridge_slave_0: left allmulticast mode [ 550.121989][T11335] bridge_slave_0: left promiscuous mode [ 550.154325][T18325] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 550.163143][T11335] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.776466][ T5894] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 550.786794][ T5894] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 550.807701][ T5894] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 550.964464][ T5155] Bluetooth: hci4: command tx timeout [ 551.571334][T18356] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.616780][T11335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.634619][T11335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.650091][T11335] bond0 (unregistering): Released all slaves [ 551.683595][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 551.691519][T18279] lo speed is unknown, defaulting to 1000 [ 551.941578][T18368] sctp: [Deprecated]: syz.3.3370 (pid 18368) Use of int in max_burst socket option. [ 551.941578][T18368] Use struct sctp_assoc_value instead [ 552.413554][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3374'. [ 552.575597][T18386] netlink: 'syz.3.3375': attribute type 4 has an invalid length. [ 552.684815][T18393] netlink: 'syz.3.3375': attribute type 4 has an invalid length. [ 553.043864][ T5155] Bluetooth: hci4: command tx timeout [ 553.082188][T11335] hsr_slave_0: left promiscuous mode [ 553.098932][T11335] hsr_slave_1: left promiscuous mode [ 553.112227][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.132201][T11335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.145301][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.152800][T11335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.202086][T11335] veth1_macvtap: left promiscuous mode [ 553.214295][T11335] veth0_macvtap: left promiscuous mode [ 553.221773][T11335] veth1_vlan: left promiscuous mode [ 553.235152][T11335] veth0_vlan: left promiscuous mode [ 553.738262][T18423] netlink: 'syz.5.3385': attribute type 13 has an invalid length. [ 553.747761][T18423] netlink: 'syz.5.3385': attribute type 27 has an invalid length. [ 554.086689][T11335] team0 (unregistering): Port device team_slave_1 removed [ 554.146318][T11335] team0 (unregistering): Port device team_slave_0 removed [ 554.375080][T18433] delete_channel: no stack [ 554.380396][T18433] delete_channel: no stack [ 554.933028][T18428] netlink: 'syz.5.3386': attribute type 66 has an invalid length. [ 554.969386][T18447] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.978904][T18447] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.987290][T18447] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.996143][T18447] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.064760][T18279] chnl_net:caif_netlink_parms(): no params data found [ 555.124127][ T5155] Bluetooth: hci4: command tx timeout [ 555.429013][T18467] ip6gre1: entered allmulticast mode [ 555.570017][T18472] netlink: 'syz.3.3398': attribute type 1 has an invalid length. [ 555.604856][T18472] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3398'. [ 555.626523][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 555.650374][T18279] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.684236][T18279] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.691592][T18279] bridge_slave_0: entered allmulticast mode [ 555.716210][T18279] bridge_slave_0: entered promiscuous mode [ 555.774600][T18482] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3398'. [ 555.776117][T18475] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 555.823612][T18482] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3398'. [ 555.866555][T18482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3398'. [ 555.956131][T18279] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.977649][T18279] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.985872][T18279] bridge_slave_1: entered allmulticast mode [ 556.020832][T18491] netlink: 'syz.5.3402': attribute type 10 has an invalid length. [ 556.035354][T18279] bridge_slave_1: entered promiscuous mode [ 556.144269][T18491] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.170866][T18492] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 556.266870][T18279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.384515][T18503] netlink: 732 bytes leftover after parsing attributes in process `syz.3.3405'. [ 556.406094][T18503] netlink: 732 bytes leftover after parsing attributes in process `syz.3.3405'. [ 556.478639][T18279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.787770][T18279] team0: Port device team_slave_0 added [ 556.798013][T18463] lo speed is unknown, defaulting to 1000 [ 556.826376][T18279] team0: Port device team_slave_1 added [ 556.966637][T18523] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3410'. [ 556.985053][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3410'. [ 557.003234][T18279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.035847][T18279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.082581][T18526] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3412'. [ 557.160415][T18279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.192588][T18279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.204046][ T5155] Bluetooth: hci4: command tx timeout [ 557.209579][T18279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.263836][T18279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.723180][T18535] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 557.843079][T18539] netlink: 'syz.3.3414': attribute type 8 has an invalid length. [ 557.951973][T18279] hsr_slave_0: entered promiscuous mode [ 557.964945][T18279] hsr_slave_1: entered promiscuous mode [ 557.978995][T18279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.989692][T18279] Cannot create hsr debugfs directory [ 558.002408][T18545] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551610) [ 558.023488][T18545] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 558.044451][T18548] tipc: Enabling of bearer rejected, media not registered [ 558.095587][T18545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.655479][T18566] netlink: 'syz.3.3421': attribute type 1 has an invalid length. [ 558.671759][T18566] nbd: error processing sock list [ 558.682273][T18566] block nbd4: shutting down sockets [ 559.135646][T18574] veth0: entered promiscuous mode [ 559.254337][T18574] veth0: left promiscuous mode [ 559.284644][ T5155] Bluetooth: hci4: command tx timeout [ 559.370227][T18279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 559.398166][T18279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 559.470715][T18279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 559.668058][T18279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 560.033735][T18615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.067940][T18615] batadv_slave_0: entered promiscuous mode [ 560.492267][T18279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.580877][T18623] geneve2: entered promiscuous mode [ 560.649984][T18279] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.660934][T18623] netlink: 'syz.3.3434': attribute type 1 has an invalid length. [ 560.668834][T18623] __nla_validate_parse: 5 callbacks suppressed [ 560.668852][T18623] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3434'. [ 560.751512][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.758821][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.771156][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3434'. [ 560.845465][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.852750][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.317928][T18641] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 561.461378][T18639] syzkaller0: entered promiscuous mode [ 561.467844][T18639] syzkaller0: entered allmulticast mode [ 561.616962][T18644] netlink: 'syz.3.3439': attribute type 83 has an invalid length. [ 561.777161][T18279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.922184][T18279] veth0_vlan: entered promiscuous mode [ 561.951208][T18279] veth1_vlan: entered promiscuous mode [ 562.041139][T18279] veth0_macvtap: entered promiscuous mode [ 562.070618][T18279] veth1_macvtap: entered promiscuous mode [ 562.222435][T18663] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3443'. [ 564.647051][T18279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.659997][T18279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.722115][T18279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.753657][T18279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.762468][T18279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.765709][T18690] delete_channel: no stack [ 564.774266][T18279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.097666][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.125578][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.265043][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.276795][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.434294][T18714] netlink: 'syz.3.3454': attribute type 16 has an invalid length. [ 565.442870][T18714] netlink: 'syz.3.3454': attribute type 17 has an invalid length. [ 565.536866][T18714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.780406][T18694] lo speed is unknown, defaulting to 1000 [ 565.899102][T18724] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3458'. [ 565.926086][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3458'. [ 566.260754][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.318648][T18729] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3459'. [ 566.526727][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.626915][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.696254][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.832680][ T64] bridge_slave_1: left allmulticast mode [ 566.842815][ T64] bridge_slave_1: left promiscuous mode [ 566.849071][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.863294][ T64] bridge_slave_0: left allmulticast mode [ 566.869630][ T64] bridge_slave_0: left promiscuous mode [ 566.875675][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.376799][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.388712][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.400601][ T64] bond0 (unregistering): Released all slaves [ 567.774576][ T64] hsr_slave_0: left promiscuous mode [ 567.781002][ T64] hsr_slave_1: left promiscuous mode [ 567.788478][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.796571][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.805234][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.813195][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.838169][ T64] veth1_macvtap: left promiscuous mode [ 567.844160][ T64] veth0_macvtap: left promiscuous mode [ 567.849759][ T64] veth1_vlan: left promiscuous mode [ 567.855867][ T64] veth0_vlan: left promiscuous mode [ 568.422278][ T64] team0 (unregistering): Port device team_slave_1 removed [ 568.472031][ T64] team0 (unregistering): Port device team_slave_0 removed [ 568.560126][T18734] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3463'. [ 569.052301][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 569.066958][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 569.076470][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 569.095909][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 569.104607][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 569.792054][T18763] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3468'. [ 569.822996][T18763] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3468'. [ 570.261806][T18778] netlink: 'syz.5.3475': attribute type 1 has an invalid length. [ 570.293578][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3475'. [ 570.322858][T18754] lo speed is unknown, defaulting to 1000 [ 570.432939][T18785] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3478'. [ 570.849276][T18791] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 570.852879][T18754] chnl_net:caif_netlink_parms(): no params data found [ 570.947148][T18769] lo speed is unknown, defaulting to 1000 [ 571.124974][T18754] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.145226][T18754] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.152691][T18754] bridge_slave_0: entered allmulticast mode [ 571.166859][T18754] bridge_slave_0: entered promiscuous mode [ 571.200200][T18754] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.208156][ T5155] Bluetooth: hci4: command tx timeout [ 571.215273][T18754] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.223021][T18754] bridge_slave_1: entered allmulticast mode [ 571.232143][T18754] bridge_slave_1: entered promiscuous mode [ 571.385883][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3486'. [ 571.401957][T18815] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3486'. [ 571.445653][T18815] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3486'. [ 571.455675][T18754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.479714][T18754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.675684][T18754] team0: Port device team_slave_0 added [ 571.699086][T18754] team0: Port device team_slave_1 added [ 571.869774][T18754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.881067][T18754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.910230][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3491'. [ 571.911412][T18754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.932305][T18829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3491'. [ 571.935984][T18754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.949101][T18754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.960056][T18829] netlink: 'syz.3.3491': attribute type 18 has an invalid length. [ 571.976214][T18754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.139603][T18754] hsr_slave_0: entered promiscuous mode [ 572.164596][T18754] hsr_slave_1: entered promiscuous mode [ 572.171374][T18754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.189715][T18754] Cannot create hsr debugfs directory [ 572.357519][T18840] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3494'. [ 572.397239][T18840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3494'. [ 572.701732][T18857] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3497'. [ 572.754268][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3497'. [ 572.822671][T18864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3497'. [ 572.840482][ T5925] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1 [ 572.849464][T18856] xt_CT: No such helper "snmp" [ 572.858625][ T5925] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22 [ 573.284107][ T5838] Bluetooth: hci4: command tx timeout [ 573.320106][T18884] sctp: [Deprecated]: syz.3.3503 (pid 18884) Use of int in max_burst socket option. [ 573.320106][T18884] Use struct sctp_assoc_value instead [ 573.397981][T18754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 573.449288][ T31] INFO: task syz.2.2490:14932 blocked for more than 143 seconds. [ 573.463680][ T31] Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 [ 573.481205][T18754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 573.489526][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 573.513903][ T31] task:syz.2.2490 state:D stack:27528 pid:14932 tgid:14930 ppid:12601 task_flags:0x400040 flags:0x00004004 [ 573.563454][ T31] Call Trace: [ 573.566843][ T31] [ 573.569817][ T31] __schedule+0x16f5/0x4d00 [ 573.593983][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.598986][ T31] ? schedule+0x165/0x360 [ 573.624103][ T31] ? __pfx___schedule+0x10/0x10 [ 573.629157][ T31] ? schedule+0x91/0x360 [ 573.634830][ T31] schedule+0x165/0x360 [ 573.639084][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.656528][ T31] __mutex_lock+0x724/0xe80 [ 573.661124][ T31] ? __mutex_lock+0x51b/0xe80 [ 573.672906][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 573.680817][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.693527][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 573.708222][ T31] ? __nlmsg_put+0xef/0x1b0 [ 573.713007][ T31] ? genlmsg_put+0x137/0x2e0 [ 573.730963][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 573.747011][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 573.752222][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 573.772837][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 573.778990][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 573.833941][ T31] genl_rcv_msg+0x60e/0x790 [ 573.860277][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.873694][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 573.904461][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 573.910729][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 573.933696][ T31] netlink_rcv_skb+0x205/0x470 [ 573.938556][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.947197][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.952589][ T31] ? down_read+0x1ad/0x2e0 [ 573.957646][ T31] genl_rcv+0x28/0x40 [ 573.961678][ T31] netlink_unicast+0x758/0x8d0 [ 573.967256][ T31] netlink_sendmsg+0x805/0xb30 [ 573.972108][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.979722][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 573.985080][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.990449][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.996404][ T31] __sock_sendmsg+0x219/0x270 [ 574.001147][ T31] ____sys_sendmsg+0x505/0x830 [ 574.006479][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.011832][ T31] ? import_iovec+0x74/0xa0 [ 574.016856][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 574.021588][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.027621][ T31] ? __fget_files+0x2a/0x420 [ 574.032465][ T31] ? __fget_files+0x3a0/0x420 [ 574.053717][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 574.058739][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.073507][ T31] ? rcu_is_watching+0x15/0xb0 [ 574.078354][ T31] ? do_syscall_64+0xbe/0x3b0 [ 574.083157][ T31] do_syscall_64+0xfa/0x3b0 [ 574.095380][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.100679][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.118955][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.126352][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.132811][ T31] RIP: 0033:0x7f212c38e929 [ 574.142721][ T31] RSP: 002b:00007f212d2c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.153365][ T31] RAX: ffffffffffffffda RBX: 00007f212c5b6080 RCX: 00007f212c38e929 [ 574.161417][ T31] RDX: 0000000000000010 RSI: 0000200000001540 RDI: 0000000000000004 [ 574.178534][ T31] RBP: 00007f212c410b39 R08: 0000000000000000 R09: 0000000000000000 [ 574.190922][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.209352][ T31] R13: 0000000000000000 R14: 00007f212c5b6080 R15: 00007ffdf9d45e58 [ 574.217947][ T31] [ 574.221252][ T31] [ 574.221252][ T31] Showing all locks held in the system: [ 574.230165][ T31] 1 lock held by rcu_tasks_trace/29: [ 574.235529][ T31] #0: ffffffff8e13fd90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0 [ 574.250549][ T31] 1 lock held by khungtaskd/31: [ 574.269405][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 574.280036][ T31] 3 locks held by kworker/u8:4/64: [ 574.288727][ T31] #0: ffff88814c1ae948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.301079][ T31] #1: ffffc9000211fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.314632][ T31] #2: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 574.325066][ T31] 3 locks held by kworker/u9:1/5155: [ 574.330375][ T31] #0: ffff8880663e5948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.341515][ T31] #1: ffffc9000f90fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.354677][ T31] #2: ffff8880694d0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 574.364711][ T31] 2 locks held by getty/5596: [ 574.369414][ T31] #0: ffff88814c4150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.379508][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 574.389870][ T31] 2 locks held by syz.0.1926/12680: [ 574.395457][ T31] #0: ffffffff8f5757b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.407626][ T31] #1: ffffffff8e41d3a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 574.418293][ T31] 2 locks held by syz.2.2490/14932: [ 574.423685][ T31] #0: ffffffff8f5757b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.431927][ T31] #1: ffffffff8e41d3a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 574.442394][ T31] 3 locks held by syz-executor/18754: [ 574.448069][ T31] #0: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 574.457507][ T31] #1: ffff888031c0cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 574.468051][ T31] #2: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 574.479313][ T31] 1 lock held by syz.4.3506/18890: [ 574.485173][ T31] #0: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 574.496360][ T31] 1 lock held by syz.5.3507/18893: [ 574.501665][ T31] #0: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990 [ 574.510911][ T31] 1 lock held by syz.5.3507/18894: [ 574.516232][ T31] #0: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 574.525548][ T31] 1 lock held by syz.6.3509/18897: [ 574.530695][ T31] #0: ffff888048cb8808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 574.545837][ T31] [ 574.548231][ T31] ============================================= [ 574.548231][ T31] [ 574.624298][ T31] NMI backtrace for cpu 1 [ 574.624325][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 574.624358][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.624370][ T31] Call Trace: [ 574.624379][ T31] [ 574.624387][ T31] dump_stack_lvl+0x189/0x250 [ 574.624420][ T31] ? __wake_up_klogd+0xd9/0x110 [ 574.624446][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.624474][ T31] ? __pfx__printk+0x10/0x10 [ 574.624509][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 574.624535][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 574.624553][ T31] ? _printk+0xcf/0x120 [ 574.624579][ T31] ? __pfx__printk+0x10/0x10 [ 574.624602][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.624631][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 574.624657][ T31] watchdog+0xfee/0x1030 [ 574.624685][ T31] ? watchdog+0x1de/0x1030 [ 574.624719][ T31] kthread+0x70e/0x8a0 [ 574.624747][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.624771][ T31] ? __pfx_kthread+0x10/0x10 [ 574.624796][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.624819][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.624841][ T31] ? __pfx_kthread+0x10/0x10 [ 574.624865][ T31] ret_from_fork+0x3f9/0x770 [ 574.624894][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.624926][ T31] ? __switch_to_asm+0x39/0x70 [ 574.624943][ T31] ? __switch_to_asm+0x33/0x70 [ 574.624960][ T31] ? __pfx_kthread+0x10/0x10 [ 574.624983][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.625018][ T31] [ 574.625026][ T31] Sending NMI from CPU 1 to CPUs 0: [ 574.796256][ C0] NMI backtrace for cpu 0 [ 574.796275][ C0] CPU: 0 UID: 0 PID: 15298 Comm: syz-executor Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 574.796296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.796306][ C0] RIP: 0010:validate_chain+0x9/0x2140 [ 574.796327][ C0] Code: 82 91 fe ff ff eb b3 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 <53> 48 81 ec e0 00 00 00 49 89 cf 65 48 8b 05 c4 34 fe 10 48 89 84 [ 574.796341][ C0] RSP: 0018:ffffc9000215f3d8 EFLAGS: 00000086 [ 574.796356][ C0] RAX: ffffffff934578a8 RBX: 0000000000000000 RCX: 0ac0d5affe09d4ff [ 574.796369][ C0] RDX: 0000000000000001 RSI: ffff888035160af0 RDI: ffff888035160000 [ 574.796380][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff81729de5 [ 574.796390][ C0] R10: ffffc9000215f658 R11: ffffffff81acf670 R12: 0000000000004008 [ 574.796401][ C0] R13: ffff888035160af0 R14: ffff888035160af0 R15: 0ac0d5affe09d4ff [ 574.796413][ C0] FS: 0000000000000000(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 574.796426][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.796437][ C0] CR2: 00007f45ed3e7e9c CR3: 000000000df38000 CR4: 00000000003526f0 [ 574.796454][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.796464][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.796474][ C0] Call Trace: [ 574.796481][ C0] [ 574.796489][ C0] __lock_acquire+0xab9/0xd20 [ 574.796513][ C0] ? unwind_next_frame+0xa5/0x2390 [ 574.796535][ C0] lock_acquire+0x120/0x360 [ 574.796554][ C0] ? unwind_next_frame+0xa5/0x2390 [ 574.796578][ C0] ? unwind_next_frame+0xa5/0x2390 [ 574.796598][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.796614][ C0] ? unwind_next_frame+0xa5/0x2390 [ 574.796633][ C0] unwind_next_frame+0xc2/0x2390 [ 574.796653][ C0] ? unwind_next_frame+0xa5/0x2390 [ 574.796676][ C0] ? unwind_next_frame+0xa5/0x2390 [ 574.796696][ C0] ? do_syscall_64+0x2bd/0x3b0 [ 574.796718][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 574.796736][ C0] arch_stack_walk+0x11c/0x150 [ 574.796753][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.796769][ C0] stack_trace_save+0x9c/0xe0 [ 574.796785][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 574.796805][ C0] save_stack+0xf5/0x1f0 [ 574.796822][ C0] ? __pfx_save_stack+0x10/0x10 [ 574.796836][ C0] ? __free_frozen_pages+0xc71/0xe70 [ 574.796852][ C0] ? vfree+0x25a/0x400 [ 574.796866][ C0] ? kcov_close+0x28/0x50 [ 574.796884][ C0] ? __fput+0x449/0xa70 [ 574.796901][ C0] ? task_work_run+0x1d1/0x260 [ 574.796918][ C0] ? do_exit+0x6ad/0x22e0 [ 574.796934][ C0] ? do_group_exit+0x21c/0x2d0 [ 574.796949][ C0] ? get_signal+0x1286/0x1340 [ 574.796969][ C0] ? arch_do_signal_or_restart+0x9a/0x750 [ 574.796987][ C0] ? exit_to_user_mode_loop+0x75/0x110 [ 574.797006][ C0] ? do_syscall_64+0x2bd/0x3b0 [ 574.797031][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.797048][ C0] ? page_ext_put+0x97/0xc0 [ 574.797065][ C0] __reset_page_owner+0x71/0x1f0 [ 574.797081][ C0] __free_frozen_pages+0xc71/0xe70 [ 574.797101][ C0] vfree+0x25a/0x400 [ 574.797116][ C0] ? __pfx_kcov_close+0x10/0x10 [ 574.797134][ C0] kcov_close+0x28/0x50 [ 574.797152][ C0] __fput+0x449/0xa70 [ 574.797174][ C0] task_work_run+0x1d1/0x260 [ 574.797193][ C0] ? __pfx_task_work_run+0x10/0x10 [ 574.797212][ C0] ? kmem_cache_free+0x18f/0x400 [ 574.797230][ C0] do_exit+0x6ad/0x22e0 [ 574.797248][ C0] ? do_raw_spin_lock+0x121/0x290 [ 574.797266][ C0] ? __pfx_do_exit+0x10/0x10 [ 574.797289][ C0] do_group_exit+0x21c/0x2d0 [ 574.797306][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.797326][ C0] get_signal+0x1286/0x1340 [ 574.797353][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 574.797371][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 574.797392][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 574.797416][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 574.797437][ C0] exit_to_user_mode_loop+0x75/0x110 [ 574.797456][ C0] do_syscall_64+0x2bd/0x3b0 [ 574.797474][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.797492][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.797506][ C0] ? clear_bhb_loop+0x60/0xb0 [ 574.797523][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.797537][ C0] RIP: 0033:0x7f11553c11e5 [ 574.797550][ C0] Code: Unable to access opcode bytes at 0x7f11553c11bb. [ 574.797558][ C0] RSP: 002b:00007fffbac98650 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 574.797574][ C0] RAX: fffffffffffffdfc RBX: 00000000000002a7 RCX: 00007f11553c11e5 [ 574.797585][ C0] RDX: 00007fffbac98690 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.797595][ C0] RBP: 00007fffbac986fc R08: 0000000000000000 R09: 0000000000000000 [ 574.797605][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 574.797615][ C0] R13: 00000000000927c0 R14: 000000000008c060 R15: 00007fffbac98750 [ 574.797632][ C0] [ 574.821433][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 574.821458][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 574.821481][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.821492][ T31] Call Trace: [ 574.821501][ T31] [ 574.821510][ T31] dump_stack_lvl+0x99/0x250 [ 574.821543][ T31] ? __asan_memcpy+0x40/0x70 [ 574.821568][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.821595][ T31] ? __pfx__printk+0x10/0x10 [ 574.821627][ T31] panic+0x2db/0x790 [ 574.821658][ T31] ? __pfx_panic+0x10/0x10 [ 574.821683][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 574.821714][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 574.821738][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 574.821766][ T31] watchdog+0x102d/0x1030 [ 574.821792][ T31] ? watchdog+0x1de/0x1030 [ 574.821823][ T31] kthread+0x70e/0x8a0 [ 574.821847][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.821869][ T31] ? __pfx_kthread+0x10/0x10 [ 574.821891][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.821913][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.821934][ T31] ? __pfx_kthread+0x10/0x10 [ 574.821955][ T31] ret_from_fork+0x3f9/0x770 [ 574.821982][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.822012][ T31] ? __switch_to_asm+0x39/0x70 [ 574.822029][ T31] ? __switch_to_asm+0x33/0x70 [ 574.822046][ T31] ? __pfx_kthread+0x10/0x10 [ 574.822067][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.822100][ T31] [ 575.438814][ T31] Kernel Offset: disabled [ 575.443152][ T31] Rebooting in 86400 seconds..