last executing test programs: 22.446628244s ago: executing program 0 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 22.277623623s ago: executing program 0 (id=519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 22.13234992s ago: executing program 0 (id=523): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x40, 0x400, 0x70bd2c, 0x25dfdbfd, {0x10}, [@nested={0x8, 0x100, 0x0, 0x1, [@nested={0x4, 0xc4}]}, @nested={0x8, 0x33, 0x0, 0x1, [@nested={0x4, 0x9e}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x44000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) 22.079637756s ago: executing program 0 (id=524): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a32000000000800410073697700140033007465616d30000000000000000000000045cd5d9b2af0f6bd7037158d2e32faa5118f7762581a458cd5759a0e11ed17e42385a3"], 0x38}}, 0x0) 21.751868234s ago: executing program 0 (id=528): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfec}], 0x3}, 0x0) sendto$inet6(r0, &(0x7f0000007100)="19", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x200, 0x0, 0x4}, 0x20) 21.390747558s ago: executing program 0 (id=532): sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109006e"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pselect6(0x7e, &(0x7f0000000100)={0x81, 0xa0a, 0x2, 0x9, 0x2, 0x100000000, 0x5f, 0x1}, &(0x7f0000000140)={0x5, 0x53a9, 0x5, 0x2, 0x6, 0x8, 0x7fffffff, 0x6}, &(0x7f00000001c0)={0x1516, 0x80000000, 0x7, 0x81, 0x0, 0x7, 0x4, 0x2}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x7]}, 0x8}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c900}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x200}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r7, 0x3, {0x2, 0xff, 0x3}, 0xfd}, 0x18) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @dev={0xac, 0x14, 0x14, 0x18}}}}}, 0x0) 18.912744062s ago: executing program 3 (id=564): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000140)=0x23, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="3a9aeda12998", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fa0008", 0x18, 0x3a, 0x0, @remote, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc034, @mcast1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYRES32=r0, @ANYBLOB="79abee3181c3c8441e5f54f6cd52bfc4e81dba959ed10008f19071ab30b505b20d0eb2e29461e0224594387b5e1e17069a01435e38639fd42812eb2b6b50b98d6ef5dd1b29b941ebd87116f4795b", @ANYBLOB="1dc203f9ccc88fd1da776522b55d98d30ef83fc534250f6b1246bd3cc0b57053aa690ee9305db0d7d64708fd6aca95e06b50b76c9742470580c18cf714aca1e091e7256064f41e9451bdc99d7d6fad8d9e4e099dcbacd8f46b3796fc6fae182717f3f3b75e13710323fdbcb3719593afb35b33fec451c0e8fc633f231aa4b2f2f47c6bf8f061b4e0f1dadaccb38e"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYRES32=r0, @ANYBLOB="79abee3181c3c8441e5f54f6cd52bfc4e81dba959ed10008f19071ab30b505b20d0eb2e29461e0224594387b5e1e17069a01435e38639fd42812eb2b6b50b98d6ef5dd1b29b941ebd87116f4795b", @ANYBLOB="1dc203f9ccc88fd1da776522b55d98d30ef83fc534250f6b1246bd3cc0b57053aa690ee9305db0d7d64708fd6aca95e06b50b76c9742470580c18cf714aca1e091e7256064f41e9451bdc99d7d6fad8d9e4e099dcbacd8f46b3796fc6fae182717f3f3b75e13710323fdbcb3719593afb35b33fec451c0e8fc633f231aa4b2f2f47c6bf8f061b4e0f1dadaccb38e"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SIOCSIFMTU(r3, 0x8992, &(0x7f0000001340)={'team_slave_0\x00'}) (async) ioctl$SIOCSIFMTU(r3, 0x8992, &(0x7f0000001340)={'team_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xc1, "6b45b4bfced7837716d80652132fb23046d2ee4404ec4abf3330d7dcf4d88626d3f9df3805e00864768d2f78cab80f7996e8b71e8be59a27c3fea362a2567f6f3dfdc26f765fb0fbffb916bb90db90701b3f15e0bcc4ead5cda05598743132555f2736611d5c5a1417181e98e047059b6fcec20b828f15fa44a848ff08a9bc59756f63c36b5e5b4c1e255286ca837b17ebb0787785a28873d0fd39eb76d4e54c4ab28fa41e7b7783f7cffae3159e5c00b5f4cf1b4b2e88e9faa1dd792daefcbca4"}, &(0x7f0000000000)=0xc9) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xc1, "6b45b4bfced7837716d80652132fb23046d2ee4404ec4abf3330d7dcf4d88626d3f9df3805e00864768d2f78cab80f7996e8b71e8be59a27c3fea362a2567f6f3dfdc26f765fb0fbffb916bb90db90701b3f15e0bcc4ead5cda05598743132555f2736611d5c5a1417181e98e047059b6fcec20b828f15fa44a848ff08a9bc59756f63c36b5e5b4c1e255286ca837b17ebb0787785a28873d0fd39eb76d4e54c4ab28fa41e7b7783f7cffae3159e5c00b5f4cf1b4b2e88e9faa1dd792daefcbca4"}, &(0x7f0000000000)=0xc9) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000c9bb299f96001294", 0x33}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r5, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r5, 0x8}, 0x8) sendmmsg$inet(r7, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)='p', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)}}], 0x2, 0x4008440) ppoll(&(0x7f0000000080)=[{r2, 0x4a0}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 18.863384299s ago: executing program 4 (id=565): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, 0x0}}], 0x1, 0x34000811) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 18.801026353s ago: executing program 3 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(chacha20-generic,md5-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0xfff1}, {0x4, 0xffff}, {0xb, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x67}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x81) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="010003007f0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18.69544328s ago: executing program 2 (id=567): r0 = socket(0x25, 0x4, 0xfffffffe) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="9282", 0x1f) (async) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000080), 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)) (async) sendmsg$nl_generic(r2, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) (async) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0xfffffffd, @mcast1, 0xa}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r9, @in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x8000}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) (async) socket$l2tp(0x2, 0x2, 0x73) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @mcast2, 0x8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000580)="a2a79810d325f303097023b74ed1278a73ec79993a8d29d125444060add7f6b716c2b92190454aa1de99e92134e058b5b62bdedf7561e41ba51f0e98f71167be16246041f2565ec99f21c5361d3ac063043f0578ee778be9dd2176396cc36cc9b7e19b3da27fbd192d5ba3ee0c84a8a1dfcbe9a213c6dbf5a0d2e63df2b3f6cf1be7636867d88570ff2c7f314c0bfe0eefe578afb6df154590a7eacad496054f48405b3c3dfdd449f4153489c2a6f82510c596b920772f37fe814d301d89d45e73d3efbf769eb9a7201a520b87498a8793493eba41ca262e832f3fb9e7d44e712f05c198741b682f14f86bc86f", 0xed}, {&(0x7f0000000300)="16f51f2f724f89dd3b87aa593aeed8a6f395636e7f1f9b012fe488e75dc096e2d4b02c00dbe647879312ffb9bc4a47d146e9", 0x32}, {&(0x7f0000000680)="c78743e6ebd1c6014e114c51be6f1dbe2b188a9f8881aaeb79d23a35745a4b154ee8353de9c4ac3b222ef8a5f6a8fe0cb0aa7668541eb90eb7ea870aa08490ef58875e31537770de81b6734dd26ca556bc5c3cafe840cf36b1549972df9689034f66342215d88ef19c9d0a2d46e683520174b51d3055c0a6f6867cf14b585b8dcf63152657edfc1c285516e8857aa5051504bb3310d192fe9487d07069e58e17f57748865642ecc5b02fe6ee4526739651c56afcc01b5c98042b5ea06c4709c6acb7b758390cb366154b6dda0367d55db24d35", 0xd3}, {&(0x7f0000000380)="4378f9e2a6e4f607ff52807258bd24d8ab4ae1a5d8d45351a5e94176a07674ee9ade8897e3db9648a64b29e9aab32a632ae16378768be43c5150b8", 0x3b}], 0x4}}], 0x2, 0x4014) (async) shutdown(r11, 0x1) setsockopt(r11, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) (async) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x3, r10}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 18.518414469s ago: executing program 2 (id=569): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, r1, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x4000010}, 0x40882) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffff, 0xfff3}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 18.469545615s ago: executing program 3 (id=570): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000ffffff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e0002000000"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000ffffff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e0002000000"], 0x4c}}, 0x0) 18.239855099s ago: executing program 2 (id=572): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = epoll_create1(0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0000005}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x20002) socket$vsock_stream(0x28, 0x1, 0x0) (async) epoll_create1(0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0000005}) (async) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x20002) (async) 18.176733057s ago: executing program 1 (id=573): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x4, 0x4, 0x8, 0x5, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766c616e0000000004e1018008001a8004001c00"], 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x0, 0x0, 0x8, 0x1, 0x40, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x1, 0x8, 0x5}}) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async, rerun: 64) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (rerun: 64) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)="e7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="241fa6c91cce4c75af8006b4f5df80c5ea6b3914617dca70501454fefc7640a8d382824033b9aa42e25a4db564fdd4314f668bd6bf3c2e3497c7c1204c2b926bd219fa6228377d46d2a9b2822f52902b51e4f23d8dc7a8c751741c780b178257ebdcf8b0f86d0106d9c37ffe18cb7315cec09575d4fec259195509ef0562b4e268cee11ca0276c5c825380a1bc985421adfe699991e924ef996c3770a6ce26ca9ebe283d4f88fc875cbfbb1f11da3bdad830030074194cff063fa5dfe2c668168b410aec449aa52d68f8a8f7dd31476f6240ff41dc2d6c9de2c516b06422d47488c0bdfe86f375806e4730c3325564c6a51449ce8875146972af6b13a91ac7e3e9c47a03463a3e18d974dd2b472212233e6f289443899f01d64c77210badcc4eb7a78bae8fdc57888c8da26fbe8425b2b2dbe64fca29629098b6e83b2c84a1c6d5e1475a518b02d31fb9bc4c0d00fb73dff8c75c733d969bb76c7b39290d5f4d27b577d59fb7da43187fc7ca0d23457970299a7c8b573102302d873e367ba686b8dd0a212712aa87287d1cced15cabe294c10aae89b2568de28ecc636f0f1b2518f217bfb8764c872f4ca136df103f6469d1dae274e83bc5ba841f6f527964386193aeef2e010ca42511129d67d93c13850388859e4c6e9671384ac99caaaf4ea04f2cd29e56001f7eca46ac34446155b30103de5f65790e797df93367f2d7e30b4af462d567", 0x206}, {&(0x7f0000000640)="af2f73aed926f8ab1ab2166fa8d5a50c6b437453fccb9377038248ee4aa75e292bfb00ae7f253a787a332ab8d436cf68eab711fcb99d41e512d1c13a6c9e30c0ecd7207b78f90eb07a4b42a9352edf581e699f48f139796a817823bf2fe7e20495f035459d9624b503f5ed2cb4bf0a976dc91bb254", 0x75}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001100)="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", 0x331}], 0x1}}], 0x3, 0x400c404) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57) 17.995464471s ago: executing program 3 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x174, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x9, 0x200, 0xab1, 0x1, 0xaf50, 0xb2, 0x8}}, {0x14, 0x2, [0xeeb7, 0x4, 0x7, 0x6, 0x3, 0x8001, 0x5, 0xd]}}, {{0x1c, 0x1, {0xe7, 0x3, 0xda0, 0x5, 0x2, 0x3, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0xf7b7, 0x3, 0x10]}}, {{0x1c, 0x1, {0xc0, 0x6, 0xf6a, 0x7, 0x2, 0x5, 0x1, 0x7}}, {0x12, 0x2, [0x9, 0xfff, 0x7ff, 0x4, 0xe1c, 0x7f, 0x1]}}, {{0x1c, 0x1, {0xc, 0x9, 0xffb3, 0x3a, 0x2, 0x2e, 0x9, 0x4}}, {0xc, 0x2, [0x5, 0x8, 0x8, 0x3]}}, {{0x1c, 0x1, {0x4, 0x10, 0x4, 0x7, 0x2, 0x7f, 0x2, 0x2}}, {0x8, 0x2, [0x2, 0x5]}}, {{0x1c, 0x1, {0x3f, 0x7, 0xfffc, 0x10000, 0x1, 0x30, 0x3, 0x4}}, {0xc, 0x2, [0x2, 0x5, 0x8, 0x3]}}, {{0x1c, 0x1, {0x7, 0x8, 0x2f, 0x80000001, 0x2, 0x9, 0xe, 0x6}}, {0x10, 0x2, [0x1, 0x8, 0x1, 0x8, 0x8, 0x7ff]}}, {{0x1c, 0x1, {0x2, 0x9, 0x1ff, 0x60, 0x2, 0x7, 0xffffffff, 0x1}}, {0x6, 0x2, [0xed56]}}]}]}, 0x174}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r4, 0xf65de9ab34066b9d, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) 17.995086553s ago: executing program 1 (id=575): socketpair(0x22, 0x4, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000811}, 0x40000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000440), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000480)={'veth0', 0x32, 0x35}, 0x8) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, 0xc, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x20008000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r3, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3ed05f89, 0x3, 0x5, 0x2, 0x4810}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x46, 0x8}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg$unix(r6, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12021, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$sock(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="9e71b93506a6a947", 0x8}], 0x1}, 0x4004001) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x14}, 0x4000) socket$pppoe(0x18, 0x1, 0x0) unshare(0x400) r12 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) write$bt_hci(r0, &(0x7f00000004c0)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc8}}}, 0x6) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4b, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x2, 0xf0]}, {}, {}, {}, {0x8, 0x22eb, 0x1}}}}}}}, 0x0) 17.926571956s ago: executing program 3 (id=576): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x0, 0x5, 0x0, 0x0, 0x10, @dev, @private0, 0x0, 0x0, 0x0, 0x1}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa08bf42d17443"], 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@can={{0x0, 0x1, 0x1, 0x1}, 0x1, 0xff0cb96ecf8ecbff, 0x0, 0x0, "402642959ea6fee4"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)={0x1, 0x1fd, 0x0, {0x77359400}, {0x0, 0xea60}, {0x41}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a9d350ea09a558bbc069972fd6135503414190c502f593570fa6bb0fa85d9b3128353dcadf8bb71c06e619b08986d626a032ff1c224c9e1aa390b57d5bcf9ff7"}}, 0x80}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r10, 0x541b, &(0x7f0000000680)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r11 = socket(0x22, 0x2, 0x2) getsockopt$TIPC_DEST_DROPPABLE(r11, 0x10f, 0x81, 0x0, &(0x7f0000000800)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@ipv4_newnexthop={0x6c, 0x68, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x10}, [@NHA_GROUP_TYPE={0x6}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8, 0x7, 0x7}}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0xf}}, @NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r12, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x2, 0x14}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb32}]}, 0x34}, 0x1, 0x0, 0x0, 0x44015}, 0x810) 17.91735649s ago: executing program 4 (id=577): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f00008b8000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8915, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x20000800}, 0x28008004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0xc, 0x0, 0x9, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003580)=ANY=[@ANYBLOB="150000000800000002"], 0x50) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x0}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r8}, &(0x7f0000000180), &(0x7f00000006c0)}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@delneigh={0x34, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x0, 0x96}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x34}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) 17.663993389s ago: executing program 3 (id=578): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="1805000000000f0000000000000000008510000006000000181000f61f14d2b5f1d86f00a9ba7f44d42c0400781e49c6c0c68122a6cf901ddc26d1e735acbd91eb8ae352969791ad65397dee3991ea0acf0f1657", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018000000000000000000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.662913346s ago: executing program 4 (id=579): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x50, &(0x7f00000000c0)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x3, 0x0, {{0x2}, {@val={0x8, 0x2}, @void, @val={0xc, 0x99, {0x1, 0x2d}}}}}, 0x28}}, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x1, 0x0) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x5}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async, rerun: 32) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000000)={0x7, 'sit0\x00', {0x7}, 0x5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000001008500000071000000850000000e0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES16, @ANYRESHEX=r4, @ANYRES32=r5, @ANYRES16=r4], 0x4c}}, 0x0) 17.662447089s ago: executing program 1 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x40, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x47e9}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8804}, 0x24044004) 17.525962744s ago: executing program 1 (id=581): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x308, 0x20a, 0x278, 0x308, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) socket(0x1d, 0x0, 0x7) 17.490480268s ago: executing program 4 (id=582): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 17.409602324s ago: executing program 1 (id=583): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000440)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) (async) syz_emit_ethernet(0x9a, &(0x7f0000002340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r6) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x24, r7, 0xc01, 0x70bd28, 0x25dfdc02, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="04010000190020002abd7000fcdbdf25640101020000000000000000000000000a0101010000000000000000000000004e2100084e2400080200800067000000", @ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="010000000000000008000000000000000f0000000000000001000000000000000500000000000000050000000000000006000000000000000800000004000000090000000000000008000000000000000400000000000000050000000000000000000000b46b6e00000100000000000008000c00080000001c000400ffff4e244e240000000000000000000000000000000000000a000f0003000000000000001c000400feff4e234e24000000000000000000000000000000000001"], 0x104}}, 0x80) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "b6f3e543e3ff15c934decfda52def2c9f2"}}]}, 0x198}}, 0x0) 17.271476065s ago: executing program 2 (id=584): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc11000012000102000800000000000000000000000000000000009600"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}}, 0x20000000) 17.219280251s ago: executing program 2 (id=585): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000180)=0x1007e, 0x11fb96e13838704f) recvmmsg$unix(r1, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) sendto$unix(r0, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) 17.118355427s ago: executing program 4 (id=586): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000a0000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008060000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab00000000000000003200000008001701"], 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x1a, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16.846840341s ago: executing program 2 (id=587): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000025c0)=ANY=[@ANYRES32, @ANYBLOB="90d9b8840dd228baa1ffe9318c5a0c044308cc87418a29df172f73b159787de1d8ba2037848d4c486b733477bc48e2b9da9e22a390d93482e4f232790878860770ee2a974d3cd76dd0362a5f280fc073e12fff8575fa8592d0ecd070d5c61dc25ca2c2040304602086a0d5d3fb9fa637d8790e0e412021534e97c0fef146ea2a0a05fab77126c03899553dcac9c734f382e27be249725d7884e8964c77aa20bc82f29c3ac99779495de126c7583122de81995ee3086b", @ANYRES16, @ANYRES32, @ANYRESOCT], 0xa4}, 0x1, 0x0, 0x0, 0x240400c0}, 0x20004010) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x248241, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)}], 0x1}}], 0x1, 0x8000) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)}], 0x1}}], 0x1, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x20, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc101}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_wait_time\x00', 0x7a44, 0x1700) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="05003901"], 0x44}}, 0x8080) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="05003901"], 0x44}}, 0x8080) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r7, 0x952de000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r11}, &(0x7f00000004c0), &(0x7f0000000840)}, 0x20) writev(r3, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "e9bc5a41f30873bfa0bd6528866b4481"}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001500)={{r3}, 0x0, 0xa, @inherit={0x60, &(0x7f0000002500)=ANY=[@ANYBLOB="01000000000000000300000000000000357a00000000000005e57069b0000000000000002200000000000000008000000000000006000000000000000600000000000000ff000000000000000000000000000000cd83fffffffffffffbffffffffffffff110eeceac81ba808000000bc875f7faeb32173ff43638fabde42ae2025aee6cc840ee0abd236f256e47e75fcfd77809ffd65e3553bf26d3abd364d6a0cb50b28f4d7da33cacffc7a82bd"]}, @devid=r12}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001500)={{r3}, 0x0, 0xa, @inherit={0x60, &(0x7f0000002500)=ANY=[@ANYBLOB="01000000000000000300000000000000357a00000000000005e57069b0000000000000002200000000000000008000000000000006000000000000000600000000000000ff000000000000000000000000000000cd83fffffffffffffbffffffffffffff110eeceac81ba808000000bc875f7faeb32173ff43638fabde42ae2025aee6cc840ee0abd236f256e47e75fcfd77809ffd65e3553bf26d3abd364d6a0cb50b28f4d7da33cacffc7a82bd"]}, @devid=r12}) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000026c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000026c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) 16.846136149s ago: executing program 1 (id=588): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x8, 0x8b, 0xa028}, {0x1, 0xfd, 0x80, 0x5}, {0x2, 0x6, 0x4, 0x7}, {0x5, 0xf, 0x9, 0x7fff}, {0x77f1, 0x81, 0x17, 0x6}]}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'pim6reg0\x00', {0x4}, 0x2f8}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = accept4(r0, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x1c, 0x0, 0x1, 0xd, 0x3d, 0x91, 0x3, 0x7, 0x7, 0x9, 0x22, 0x8, 0x4}, 0xe) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000340)={@broadcast, @broadcast}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000400)={r2, 0xfffa, 0x2, [0x2, 0x3]}, 0xc) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x97}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xd}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c000}, 0x84) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000005c0)={0x0, "17a91652e9b69535e7810ca2af09c33f"}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000015c0)={r4, "9d8cd7d146450e9d78703710061faac7"}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000025c0)={0x0, 0x3, 0x5, 0x1}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002640), r1) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000002680)=0x0, &(0x7f00000026c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002700)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000002740)=0x0, &(0x7f0000002780)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002840)={'syztnl2\x00', &(0x7f00000027c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x3, 0xfffffff7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x80, 0x0, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002900)={'ip6tnl0\x00', &(0x7f0000002880)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x2, 0x9, 0x42, @private0, @private2, 0x700, 0x7800, 0x3, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000029c0)={'ip6tnl0\x00', &(0x7f0000002940)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0xe, 0x6, 0x10, @mcast2, @local, 0x8000, 0x20, 0x6, 0xc}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002a00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000002a40)=[0x0], &(0x7f0000002a80)=[0x0], 0x0, 0x5c, &(0x7f0000002ac0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002b00), &(0x7f0000002b40), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000002b80)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002d80)={0xffffffffffffffff, 0x58, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000002ec0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002dc0)={0xb4, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) getsockopt(r0, 0x6, 0x6, &(0x7f0000002f00)=""/168, &(0x7f0000002fc0)=0xa8) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000003000), r14) 16.845885613s ago: executing program 4 (id=589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='\\']}]}}]}]}]}}]}, 0x78}}, 0x20040054) (async) r4 = socket$inet(0x2, 0x2, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write(r5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1}, 0x884) 2.245019915s ago: executing program 32 (id=578): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="1805000000000f0000000000000000008510000006000000181000f61f14d2b5f1d86f00a9ba7f44d42c0400781e49c6c0c68122a6cf901ddc26d1e735acbd91eb8ae352969791ad65397dee3991ea0acf0f1657", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018000000000000000000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 355.416µs ago: executing program 33 (id=588): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x8, 0x8b, 0xa028}, {0x1, 0xfd, 0x80, 0x5}, {0x2, 0x6, 0x4, 0x7}, {0x5, 0xf, 0x9, 0x7fff}, {0x77f1, 0x81, 0x17, 0x6}]}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'pim6reg0\x00', {0x4}, 0x2f8}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = accept4(r0, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x1c, 0x0, 0x1, 0xd, 0x3d, 0x91, 0x3, 0x7, 0x7, 0x9, 0x22, 0x8, 0x4}, 0xe) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000340)={@broadcast, @broadcast}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000400)={r2, 0xfffa, 0x2, [0x2, 0x3]}, 0xc) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x97}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xd}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c000}, 0x84) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000005c0)={0x0, "17a91652e9b69535e7810ca2af09c33f"}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000015c0)={r4, "9d8cd7d146450e9d78703710061faac7"}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000025c0)={0x0, 0x3, 0x5, 0x1}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002640), r1) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000002680)=0x0, &(0x7f00000026c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002700)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000002740)=0x0, &(0x7f0000002780)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002840)={'syztnl2\x00', &(0x7f00000027c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x3, 0xfffffff7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x80, 0x0, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002900)={'ip6tnl0\x00', &(0x7f0000002880)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x2, 0x9, 0x42, @private0, @private2, 0x700, 0x7800, 0x3, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000029c0)={'ip6tnl0\x00', &(0x7f0000002940)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0xe, 0x6, 0x10, @mcast2, @local, 0x8000, 0x20, 0x6, 0xc}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002a00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000002a40)=[0x0], &(0x7f0000002a80)=[0x0], 0x0, 0x5c, &(0x7f0000002ac0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002b00), &(0x7f0000002b40), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000002b80)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002d80)={0xffffffffffffffff, 0x58, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000002ec0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002dc0)={0xb4, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) getsockopt(r0, 0x6, 0x6, &(0x7f0000002f00)=""/168, &(0x7f0000002fc0)=0xa8) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000003000), r14) 125.549µs ago: executing program 34 (id=587): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000025c0)=ANY=[@ANYRES32, @ANYBLOB="90d9b8840dd228baa1ffe9318c5a0c044308cc87418a29df172f73b159787de1d8ba2037848d4c486b733477bc48e2b9da9e22a390d93482e4f232790878860770ee2a974d3cd76dd0362a5f280fc073e12fff8575fa8592d0ecd070d5c61dc25ca2c2040304602086a0d5d3fb9fa637d8790e0e412021534e97c0fef146ea2a0a05fab77126c03899553dcac9c734f382e27be249725d7884e8964c77aa20bc82f29c3ac99779495de126c7583122de81995ee3086b", @ANYRES16, @ANYRES32, @ANYRESOCT], 0xa4}, 0x1, 0x0, 0x0, 0x240400c0}, 0x20004010) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x248241, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)}], 0x1}}], 0x1, 0x8000) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)}], 0x1}}], 0x1, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x20, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc101}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_wait_time\x00', 0x7a44, 0x1700) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="05003901"], 0x44}}, 0x8080) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="05003901"], 0x44}}, 0x8080) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r7, 0x952de000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r11}, &(0x7f00000004c0), &(0x7f0000000840)}, 0x20) writev(r3, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "e9bc5a41f30873bfa0bd6528866b4481"}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001500)={{r3}, 0x0, 0xa, @inherit={0x60, &(0x7f0000002500)=ANY=[@ANYBLOB="01000000000000000300000000000000357a00000000000005e57069b0000000000000002200000000000000008000000000000006000000000000000600000000000000ff000000000000000000000000000000cd83fffffffffffffbffffffffffffff110eeceac81ba808000000bc875f7faeb32173ff43638fabde42ae2025aee6cc840ee0abd236f256e47e75fcfd77809ffd65e3553bf26d3abd364d6a0cb50b28f4d7da33cacffc7a82bd"]}, @devid=r12}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001500)={{r3}, 0x0, 0xa, @inherit={0x60, &(0x7f0000002500)=ANY=[@ANYBLOB="01000000000000000300000000000000357a00000000000005e57069b0000000000000002200000000000000008000000000000006000000000000000600000000000000ff000000000000000000000000000000cd83fffffffffffffbffffffffffffff110eeceac81ba808000000bc875f7faeb32173ff43638fabde42ae2025aee6cc840ee0abd236f256e47e75fcfd77809ffd65e3553bf26d3abd364d6a0cb50b28f4d7da33cacffc7a82bd"]}, @devid=r12}) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000026c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000026c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) 0s ago: executing program 35 (id=589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='\\']}]}}]}]}]}}]}, 0x78}}, 0x20040054) (async) r4 = socket$inet(0x2, 0x2, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write(r5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1}, 0x884) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.166' (ED25519) to the list of known hosts. [ 68.972434][ T5826] cgroup: Unknown subsys name 'net' [ 69.099682][ T5826] cgroup: Unknown subsys name 'cpuset' [ 69.108563][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.691779][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.609707][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.616237][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.164290][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.176269][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.186309][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.199261][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.207157][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.215788][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.224722][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.234095][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.243114][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.251286][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.259817][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.268371][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.276588][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.284889][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.292333][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.292785][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.304479][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.313815][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.325098][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.336699][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.345365][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.354994][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.371136][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.378572][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.401852][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.415186][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.423748][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.436474][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.444821][ T5146] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.452342][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.787397][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 73.850405][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 73.919680][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 74.000980][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 74.074631][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.082104][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.089915][ T5845] bridge_slave_0: entered allmulticast mode [ 74.097355][ T5845] bridge_slave_0: entered promiscuous mode [ 74.137301][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.144524][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.151971][ T5845] bridge_slave_1: entered allmulticast mode [ 74.159480][ T5845] bridge_slave_1: entered promiscuous mode [ 74.167041][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 74.234488][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.242028][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.249877][ T5848] bridge_slave_0: entered allmulticast mode [ 74.256942][ T5848] bridge_slave_0: entered promiscuous mode [ 74.263932][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.271424][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.279011][ T5853] bridge_slave_0: entered allmulticast mode [ 74.285771][ T5853] bridge_slave_0: entered promiscuous mode [ 74.309102][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.321011][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.342053][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.350185][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.357508][ T5848] bridge_slave_1: entered allmulticast mode [ 74.364504][ T5848] bridge_slave_1: entered promiscuous mode [ 74.371036][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.378406][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.385598][ T5853] bridge_slave_1: entered allmulticast mode [ 74.392613][ T5853] bridge_slave_1: entered promiscuous mode [ 74.456999][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.483545][ T5845] team0: Port device team_slave_0 added [ 74.492361][ T5845] team0: Port device team_slave_1 added [ 74.498551][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.505651][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.513561][ T5837] bridge_slave_0: entered allmulticast mode [ 74.520597][ T5837] bridge_slave_0: entered promiscuous mode [ 74.538236][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.572748][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.580063][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.588293][ T5837] bridge_slave_1: entered allmulticast mode [ 74.595088][ T5837] bridge_slave_1: entered promiscuous mode [ 74.604147][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.625398][ T5853] team0: Port device team_slave_0 added [ 74.659305][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.670323][ T5853] team0: Port device team_slave_1 added [ 74.676460][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.683548][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.691815][ T5836] bridge_slave_0: entered allmulticast mode [ 74.698922][ T5836] bridge_slave_0: entered promiscuous mode [ 74.706869][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.713968][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.721362][ T5836] bridge_slave_1: entered allmulticast mode [ 74.728291][ T5836] bridge_slave_1: entered promiscuous mode [ 74.736028][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.743398][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.769363][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.791460][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.843398][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.850633][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.876923][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.895335][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.914266][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.921450][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.947674][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.976866][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.006847][ T5848] team0: Port device team_slave_0 added [ 75.013337][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.020688][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.046770][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.060653][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.090305][ T5837] team0: Port device team_slave_0 added [ 75.097696][ T5848] team0: Port device team_slave_1 added [ 75.105347][ T5837] team0: Port device team_slave_1 added [ 75.138513][ T5845] hsr_slave_0: entered promiscuous mode [ 75.144838][ T5845] hsr_slave_1: entered promiscuous mode [ 75.181809][ T5836] team0: Port device team_slave_0 added [ 75.201049][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.208564][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.235390][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.248594][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.255587][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.281595][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.301088][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.308363][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.334536][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.349047][ T5836] team0: Port device team_slave_1 added [ 75.367527][ T5842] Bluetooth: hci0: command tx timeout [ 75.376268][ T5842] Bluetooth: hci3: command tx timeout [ 75.398792][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.405788][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.432988][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.446317][ T5146] Bluetooth: hci1: command tx timeout [ 75.452279][ T5842] Bluetooth: hci2: command tx timeout [ 75.470010][ T5853] hsr_slave_0: entered promiscuous mode [ 75.477185][ T5853] hsr_slave_1: entered promiscuous mode [ 75.483258][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.491267][ T5853] Cannot create hsr debugfs directory [ 75.526293][ T5842] Bluetooth: hci4: command tx timeout [ 75.557413][ T5837] hsr_slave_0: entered promiscuous mode [ 75.563596][ T5837] hsr_slave_1: entered promiscuous mode [ 75.570221][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.577880][ T5837] Cannot create hsr debugfs directory [ 75.595487][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.602730][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.629177][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.683788][ T5848] hsr_slave_0: entered promiscuous mode [ 75.690237][ T5848] hsr_slave_1: entered promiscuous mode [ 75.696602][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.704228][ T5848] Cannot create hsr debugfs directory [ 75.710725][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.721529][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.747824][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.897841][ T5836] hsr_slave_0: entered promiscuous mode [ 75.904056][ T5836] hsr_slave_1: entered promiscuous mode [ 75.910383][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.918133][ T5836] Cannot create hsr debugfs directory [ 76.129630][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.147991][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.161875][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.182338][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.233354][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.243594][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.254210][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.275722][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.310420][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.325345][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.365970][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.391216][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.418213][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.453309][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.463273][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.493470][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.542111][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.564661][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.581119][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.591898][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.604687][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.684973][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.718956][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.726314][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.736998][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.744124][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.773552][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.844224][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.855500][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.873722][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.901096][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.908775][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.937614][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.944730][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.980825][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.993274][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.019562][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.026752][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.038722][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.045872][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.055192][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.062356][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.089824][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.102692][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.109907][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.195723][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.275550][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.290719][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.308429][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.315548][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.324719][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.331871][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.411467][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.449256][ T5842] Bluetooth: hci3: command tx timeout [ 77.449356][ T5146] Bluetooth: hci0: command tx timeout [ 77.526547][ T5146] Bluetooth: hci2: command tx timeout [ 77.531849][ T5842] Bluetooth: hci1: command tx timeout [ 77.557676][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.617099][ T5842] Bluetooth: hci4: command tx timeout [ 77.667858][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.758736][ T5845] veth0_vlan: entered promiscuous mode [ 77.781249][ T5845] veth1_vlan: entered promiscuous mode [ 77.859645][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.873104][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.905084][ T5845] veth0_macvtap: entered promiscuous mode [ 77.921786][ T5853] veth0_vlan: entered promiscuous mode [ 77.945216][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.959877][ T5845] veth1_macvtap: entered promiscuous mode [ 77.987506][ T5853] veth1_vlan: entered promiscuous mode [ 78.054386][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.110842][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.131396][ T5853] veth0_macvtap: entered promiscuous mode [ 78.144185][ T5853] veth1_macvtap: entered promiscuous mode [ 78.170542][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.181498][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.190407][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.199316][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.222622][ T5848] veth0_vlan: entered promiscuous mode [ 78.244782][ T5836] veth0_vlan: entered promiscuous mode [ 78.257121][ T5848] veth1_vlan: entered promiscuous mode [ 78.283414][ T5836] veth1_vlan: entered promiscuous mode [ 78.297976][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.309708][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.321178][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.353383][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.364334][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.378602][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.431025][ T5837] veth0_vlan: entered promiscuous mode [ 78.456617][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.465455][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.474745][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.483937][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.499340][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.508060][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.541064][ T5836] veth0_macvtap: entered promiscuous mode [ 78.550345][ T5837] veth1_vlan: entered promiscuous mode [ 78.579004][ T5848] veth0_macvtap: entered promiscuous mode [ 78.596669][ T5836] veth1_macvtap: entered promiscuous mode [ 78.609695][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.621879][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.625571][ T5848] veth1_macvtap: entered promiscuous mode [ 78.687630][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.699434][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.710986][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.725635][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.739126][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.749316][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.761166][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.771215][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.781820][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.793913][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.815030][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.822316][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.841454][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.851965][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.862585][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.872497][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.883068][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.894400][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.928872][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.937862][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.952131][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.961482][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.987552][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.995432][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.008985][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.025426][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.041991][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.054634][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.064929][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.075579][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.087392][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.109225][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.119945][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.129638][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.138601][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.152906][ T5837] veth0_macvtap: entered promiscuous mode [ 79.164546][ T5923] tipc: Enabling of bearer rejected, failed to enable media [ 79.191104][ T5837] veth1_macvtap: entered promiscuous mode [ 79.205312][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.233056][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.269339][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.297437][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.307966][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.327048][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.329505][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 79.337367][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.337390][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.351788][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 79.364346][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.388084][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.400347][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.467926][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.495151][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.517665][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.528497][ T5842] Bluetooth: hci0: command tx timeout [ 79.528666][ T5146] Bluetooth: hci3: command tx timeout [ 79.545504][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.555927][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.566910][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.567596][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 79.577929][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.596677][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.607715][ T5146] Bluetooth: hci2: command tx timeout [ 79.613724][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.625801][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.628294][ T5146] Bluetooth: hci1: command tx timeout [ 79.634754][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.650841][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.659658][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.678528][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.687537][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.697080][ T5146] Bluetooth: hci4: command tx timeout [ 79.697860][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.710272][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.745614][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.771955][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.860770][ T3575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.901198][ T3575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.996324][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.004231][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.018157][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.053586][ T5936] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9'. [ 80.055909][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.075308][ T5936] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9'. [ 80.093428][ T5936] netlink: 'syz.3.9': attribute type 5 has an invalid length. [ 80.101959][ T5936] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9'. [ 80.133282][ T5940] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.136818][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.227378][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.323561][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.372335][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.512549][ T5948] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.12'. [ 80.529074][ T5950] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 80.533263][ T5948] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 80.828606][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 80.880221][ T5964] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15'. [ 80.902850][ T5957] syz.3.13 (5957) used greatest stack depth: 16848 bytes left [ 80.907164][ T5963] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 80.952337][ T5964] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 80.968607][ T5968] ipt_ECN: cannot use operation on non-tcp rule [ 81.017818][ T5964] ipt_ECN: cannot use operation on non-tcp rule [ 81.175439][ T5978] dccp_v6_rcv: dropped packet with invalid checksum [ 81.478960][ T5985] tipc: Enabling of bearer rejected, failed to enable media [ 81.607446][ T5146] Bluetooth: hci0: command tx timeout [ 81.607462][ T5842] Bluetooth: hci3: command tx timeout [ 81.665358][ T5993] netlink: 'syz.1.26': attribute type 5 has an invalid length. [ 81.687506][ T5146] Bluetooth: hci1: command tx timeout [ 81.693798][ T5146] Bluetooth: hci2: command tx timeout [ 81.766871][ T5146] Bluetooth: hci4: command tx timeout [ 81.801041][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.430672][ T6034] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 82.582874][ T6041] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.604182][ T6034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.664227][ T6041] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 82.933046][ T6059] Zero length message leads to an empty skb [ 82.985200][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.997105][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.016822][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.026235][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.061219][ T6068] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581 [ 83.072098][ T6061] syzkaller1: entered promiscuous mode [ 83.083931][ T6061] syzkaller1: entered allmulticast mode [ 83.244287][ T6076] netlink: 'syz.4.49': attribute type 1 has an invalid length. [ 83.436030][ T6083] netlink: 'syz.3.52': attribute type 11 has an invalid length. [ 83.480940][ T6084] netlink: 'syz.3.52': attribute type 10 has an invalid length. [ 83.518852][ T6084] veth1_macvtap: left promiscuous mode [ 84.167212][ T6120] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 84.370783][ T6130] veth0_to_team: entered promiscuous mode [ 84.389579][ T6130] veth0_to_team: entered allmulticast mode [ 84.869204][ T6145] netlink: 'syz.2.69': attribute type 4 has an invalid length. [ 85.353018][ T6175] __nla_validate_parse: 12 callbacks suppressed [ 85.353039][ T6175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.77'. [ 85.458643][ T6175] Bluetooth: MGMT ver 1.23 [ 85.590355][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.79'. [ 85.712255][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 85.912722][ T6203] tipc: Started in network mode [ 85.934529][ T6203] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 85.943711][ T6203] tipc: Enabled bearer , priority 11 [ 86.173222][ T6218] xt_cgroup: invalid path, errno=-2 [ 86.984094][ T1206] cfg80211: failed to load regulatory.db [ 87.061258][ T51] tipc: Node number set to 10463914 [ 87.614087][ T6279] netlink: 'syz.1.98': attribute type 21 has an invalid length. [ 87.635257][ T6279] netlink: 176 bytes leftover after parsing attributes in process `syz.1.98'. [ 87.656771][ T6277] sit0: entered allmulticast mode [ 87.696386][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 88.086808][ T6302] netlink: 144 bytes leftover after parsing attributes in process `syz.2.104'. [ 88.149484][ T6304] x_tables: ip_tables: udp match: only valid for protocol 17 [ 88.184068][ T6302] x_tables: ip_tables: udp match: only valid for protocol 17 [ 88.310115][ T6313] x_tables: duplicate underflow at hook 1 [ 88.328487][ T6316] x_tables: duplicate underflow at hook 1 [ 88.349094][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.107'. [ 88.404469][ T6318] netlink: 256 bytes leftover after parsing attributes in process `syz.2.109'. [ 88.742660][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 88.835443][ T6335] xt_ecn: cannot match TCP bits for non-tcp packets [ 88.846541][ T6335] netlink: 'syz.2.112': attribute type 4 has an invalid length. [ 89.151450][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 89.468365][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 89.536751][ T6370] bridge0: port 3(batadv0) entered blocking state [ 89.543456][ T6370] bridge0: port 3(batadv0) entered disabled state [ 89.551265][ T6370] batadv0: entered allmulticast mode [ 89.586027][ T6370] batadv0: entered promiscuous mode [ 89.703799][ T6384] netlink: 'syz.0.122': attribute type 2 has an invalid length. [ 90.033901][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 90.043751][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 90.667436][ T6438] openvswitch: netlink: IP tunnel dst address not specified [ 90.705635][ T6438] __nla_validate_parse: 2 callbacks suppressed [ 90.705654][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 90.761394][ T6448] xt_l2tp: unknown flags: 18 [ 90.930783][ T6454] openvswitch: netlink: Actions may not be safe on all matching packets [ 107.279895][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 107.382222][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'. [ 107.543554][ T6537] netlink: 'syz.3.152': attribute type 10 has an invalid length. [ 107.567164][ T6544] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 107.576646][ T6537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.619751][ T6537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.634369][ T6543] xt_CT: No such helper "pptp" [ 107.711794][ T6542] netlink: 168 bytes leftover after parsing attributes in process `syz.0.154'. [ 107.765896][ T6555] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.156'. [ 107.883365][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.157'. [ 107.964067][ T6560] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 107.986515][ T6563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.160'. [ 108.084544][ T6565] netlink: 80 bytes leftover after parsing attributes in process `syz.3.159'. [ 108.121037][ T6565] nbd: illegal input index 61504 [ 108.135737][ T6560] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.146663][ T6560] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.155557][ T6560] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.164889][ T6560] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.174524][ T6560] geneve2: entered promiscuous mode [ 108.181156][ T6560] geneve2: entered allmulticast mode [ 108.190813][ T6560] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.192846][ T6573] nbd: must specify a size in bytes for the device [ 108.209363][ T6560] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.220243][ T6560] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.229675][ T6560] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.449890][ T6581] netlink: 'syz.4.164': attribute type 39 has an invalid length. [ 108.512543][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 108.575759][ T6587] syz.3.167 uses obsolete (PF_INET,SOCK_PACKET) [ 108.761471][ T6598] x_tables: unsorted underflow at hook 1 [ 108.904016][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 108.928976][ T6602] bridge1: entered promiscuous mode [ 108.946342][ T6602] bridge1: entered allmulticast mode [ 108.963493][ T6602] team0: Port device bridge1 added [ 109.129721][ T6612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.765125][ T6629] netlink: 40 bytes leftover after parsing attributes in process `syz.4.181'. [ 109.852482][ T6638] trusted_key: syz.4.181 sent an empty control message without MSG_MORE. [ 110.198810][ T6658] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 110.829009][ T6681] xt_CT: No such helper "pptp" [ 111.036751][ T6694] bridge_slave_0: left allmulticast mode [ 111.042481][ T6694] bridge_slave_0: left promiscuous mode [ 111.069135][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.100763][ T6694] bridge_slave_1: left allmulticast mode [ 111.109408][ T6694] bridge_slave_1: left promiscuous mode [ 111.115376][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.189900][ T6694] bond0: (slave bond_slave_0): Releasing backup interface [ 111.220749][ T6694] bond0: (slave bond_slave_1): Releasing backup interface [ 111.284248][ T6694] team0: Port device team_slave_0 removed [ 111.358158][ T6694] team0: Port device team_slave_1 removed [ 111.364854][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.406432][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.415218][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.452724][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.086283][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 112.093620][ T6742] ksmbd: Unknown IPC event: 4, ignore. [ 112.557752][ T6763] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 112.705334][ T6768] sctp: [Deprecated]: syz.0.212 (pid 6768) Use of int in maxseg socket option. [ 112.705334][ T6768] Use struct sctp_assoc_value instead [ 112.920533][ T6783] vlan1: mtu less than device minimum [ 113.213683][ T6803] x_tables: duplicate underflow at hook 3 [ 113.375168][ T6815] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 113.634252][ T6825] __nla_validate_parse: 5 callbacks suppressed [ 113.634273][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'. [ 113.703299][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'. [ 113.807629][ T6825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.228'. [ 113.873594][ T6840] lo: entered promiscuous mode [ 113.884399][ T6840] tunl0: entered promiscuous mode [ 113.893858][ T6840] gre0: entered promiscuous mode [ 113.923503][ T6840] gretap0: entered promiscuous mode [ 113.952999][ T6840] erspan0: entered promiscuous mode [ 113.973289][ T6840] ip_vti0: entered promiscuous mode [ 114.025692][ T6845] netlink: 'syz.0.234': attribute type 10 has an invalid length. [ 114.126900][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 114.132460][ T6845] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.417014][ T6870] veth0_to_hsr: entered promiscuous mode [ 114.556734][ T6875] veth0_to_hsr: left promiscuous mode [ 114.631370][ T6881] netlink: 64 bytes leftover after parsing attributes in process `syz.0.243'. [ 114.644489][ T6881] netlink: 64 bytes leftover after parsing attributes in process `syz.0.243'. [ 114.665333][ T6886] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 114.739909][ T6885] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 115.189755][ T6909] netlink: 40 bytes leftover after parsing attributes in process `syz.0.251'. [ 115.670532][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 115.834459][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'. [ 116.184188][ T6958] netlink: 108 bytes leftover after parsing attributes in process `syz.0.265'. [ 116.237109][ T6965] x_tables: duplicate underflow at hook 2 [ 116.281455][ T6968] netlink: 'syz.1.268': attribute type 12 has an invalid length. [ 116.437823][ T6972] batadv1: entered allmulticast mode [ 116.509842][ T6975] netlink: 'syz.0.270': attribute type 9 has an invalid length. [ 116.544372][ T6975] netlink: 'syz.0.270': attribute type 2 has an invalid length. [ 116.558201][ T6975] netlink: 'syz.0.270': attribute type 3 has an invalid length. [ 116.851479][ T6995] netlink: 'syz.3.274': attribute type 10 has an invalid length. [ 116.914302][ T6995] team0: Port device netdevsim0 added [ 117.246553][ T7017] netlink: 'syz.4.281': attribute type 10 has an invalid length. [ 117.275884][ T7017] veth0_vlan: entered allmulticast mode [ 117.343860][ T7017] veth0_vlan: left promiscuous mode [ 117.402605][ T7017] veth0_vlan: entered promiscuous mode [ 117.454181][ T7017] team0: Device veth0_vlan failed to register rx_handler [ 117.829517][ T7047] netlink: 'syz.2.290': attribute type 3 has an invalid length. [ 117.867485][ T7054] netlink: 'syz.1.291': attribute type 32 has an invalid length. [ 118.368600][ T7075] bridge1: port 1(macvlan0) entered blocking state [ 118.391823][ T7075] bridge1: port 1(macvlan0) entered disabled state [ 118.422099][ T7075] macvlan0: entered allmulticast mode [ 118.787565][ T7099] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 119.195358][ T7135] validate_nla: 5 callbacks suppressed [ 119.195380][ T7135] netlink: 'syz.4.310': attribute type 4 has an invalid length. [ 119.607293][ T7155] __nla_validate_parse: 13 callbacks suppressed [ 119.607316][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.315'. [ 119.792842][ T7163] xt_SECMARK: invalid mode: 0 [ 119.927204][ T7173] netlink: 25 bytes leftover after parsing attributes in process `syz.0.321'. [ 119.937422][ T7171] netlink: 56 bytes leftover after parsing attributes in process `syz.3.320'. [ 119.984270][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 119.994284][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.320'. [ 120.077721][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 120.231281][ T7185] x_tables: unsorted entry at hook 1 [ 120.404082][ T7198] netlink: 64 bytes leftover after parsing attributes in process `syz.3.327'. [ 120.419459][ T7200] xt_ecn: cannot match TCP bits for non-tcp packets [ 120.443434][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 120.449271][ T7198] netlink: 72 bytes leftover after parsing attributes in process `syz.3.327'. [ 120.648327][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 121.109381][ T7234] netlink: 'syz.3.337': attribute type 1 has an invalid length. [ 121.311087][ T7249] xt_hashlimit: size too large, truncated to 1048576 [ 121.343599][ T7250] xt_hashlimit: size too large, truncated to 1048576 [ 121.459562][ T7250] syz.0.341: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 121.516221][ T7250] CPU: 0 UID: 0 PID: 7250 Comm: syz.0.341 Not tainted 6.14.0-rc3-syzkaller-00154-g28b04731a38c #0 [ 121.516247][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.516262][ T7250] Call Trace: [ 121.516272][ T7250] [ 121.516298][ T7250] dump_stack_lvl+0x241/0x360 [ 121.516345][ T7250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.516367][ T7250] ? __pfx__printk+0x10/0x10 [ 121.516391][ T7250] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 121.516417][ T7250] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 121.516445][ T7250] warn_alloc+0x278/0x410 [ 121.516471][ T7250] ? __pfx_warn_alloc+0x10/0x10 [ 121.516498][ T7250] ? htable_create+0x102/0x880 [ 121.516521][ T7250] ? __get_vm_area_node+0x1c8/0x2d0 [ 121.516551][ T7250] ? __get_vm_area_node+0x25c/0x2d0 [ 121.516587][ T7250] __vmalloc_node_range_noprof+0x62f/0x1380 [ 121.516649][ T7250] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.516692][ T7250] ? htable_create+0x102/0x880 [ 121.516715][ T7250] vmalloc_noprof+0x79/0x90 [ 121.516746][ T7250] ? htable_create+0x102/0x880 [ 121.516779][ T7250] htable_create+0x102/0x880 [ 121.516809][ T7250] hashlimit_mt_check_common+0x710/0xa40 [ 121.516841][ T7250] xt_check_match+0x368/0xa40 [ 121.516865][ T7250] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.516894][ T7250] ? __pfx_xt_check_match+0x10/0x10 [ 121.516930][ T7250] ? xt_find_match+0x1df/0x230 [ 121.516959][ T7250] translate_table+0x1704/0x2490 [ 121.517021][ T7250] ? __pfx_translate_table+0x10/0x10 [ 121.517070][ T7250] ? __might_fault+0xaa/0x120 [ 121.517090][ T7250] ? __pfx_lock_release+0x10/0x10 [ 121.517127][ T7250] ? __virt_addr_valid+0x183/0x530 [ 121.517151][ T7250] ? __might_fault+0xc6/0x120 [ 121.517176][ T7250] ? copy_from_sockptr_offset+0x6b/0xb0 [ 121.517210][ T7250] do_ip6t_set_ctl+0xe4c/0x1270 [ 121.517248][ T7250] ? nf_setsockopt+0x240/0x2c0 [ 121.517269][ T7250] ? aa_label_sk_perm+0x4f3/0x6c0 [ 121.517298][ T7250] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 121.517329][ T7250] ? rcu_is_watching+0x15/0xb0 [ 121.517353][ T7250] ? trace_contention_end+0x3c/0x120 [ 121.517387][ T7250] ? __mutex_unlock_slowpath+0x227/0x800 [ 121.517423][ T7250] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.517469][ T7250] nf_setsockopt+0x295/0x2c0 [ 121.517500][ T7250] rawv6_setsockopt+0x2ac/0x690 [ 121.517524][ T7250] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 121.517545][ T7250] ? __pfx_lock_acquire+0x10/0x10 [ 121.517573][ T7250] ? aa_sock_opt_perm+0x79/0x120 [ 121.517604][ T7250] ? sock_common_setsockopt+0x37/0xc0 [ 121.517634][ T7250] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 121.517660][ T7250] do_sock_setsockopt+0x3af/0x720 [ 121.517698][ T7250] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 121.517734][ T7250] ? __fget_files+0x395/0x410 [ 121.517763][ T7250] ? __fget_files+0x2a/0x410 [ 121.517807][ T7250] __x64_sys_setsockopt+0x1ee/0x280 [ 121.517845][ T7250] do_syscall_64+0xf3/0x230 [ 121.517873][ T7250] ? clear_bhb_loop+0x35/0x90 [ 121.517906][ T7250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.517935][ T7250] RIP: 0033:0x7f8db698d169 [ 121.517961][ T7250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.517976][ T7250] RSP: 002b:00007f8db47f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.517998][ T7250] RAX: ffffffffffffffda RBX: 00007f8db6ba6080 RCX: 00007f8db698d169 [ 121.518012][ T7250] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a [ 121.518024][ T7250] RBP: 00007f8db6a0e2a0 R08: 0000000000000588 R09: 0000000000000000 [ 121.518037][ T7250] R10: 00004000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 121.518050][ T7250] R13: 0000000000000000 R14: 00007f8db6ba6080 R15: 00007fffd9dc80f8 [ 121.518080][ T7250] [ 121.518089][ T7250] Mem-Info: [ 121.804149][ T7268] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 121.906266][ T7250] active_anon:5002 inactive_anon:0 isolated_anon:0 [ 121.906266][ T7250] active_file:1182 inactive_file:38310 isolated_file:0 [ 121.906266][ T7250] unevictable:768 dirty:86 writeback:0 [ 121.906266][ T7250] slab_reclaimable:9988 slab_unreclaimable:99358 [ 121.906266][ T7250] mapped:28621 shmem:1441 pagetables:983 [ 121.906266][ T7250] sec_pagetables:0 bounce:0 [ 121.906266][ T7250] kernel_misc_reclaimable:0 [ 121.906266][ T7250] free:1344068 free_pcp:349 free_cma:0 [ 121.998281][ T7250] Node 0 active_anon:20008kB inactive_anon:0kB active_file:4728kB inactive_file:153168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114484kB dirty:344kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:3632kB sec_pagetables:0kB all_unreclaimable? no [ 122.115453][ T7250] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 122.227050][ T7250] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.339965][ T7250] lowmem_reserve[]: 0 2490 2490 0 0 [ 122.345627][ T7250] Node 0 DMA32 free:1456236kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19548kB inactive_anon:0kB active_file:4728kB inactive_file:152844kB unevictable:1536kB writepending:368kB present:3129332kB managed:2549864kB mlocked:0kB bounce:0kB free_pcp:2648kB local_pcp:1048kB free_cma:0kB [ 122.386768][ T7250] lowmem_reserve[]: 0 0 0 0 0 [ 122.391886][ T7250] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.456866][ T7297] xfrm1: entered allmulticast mode [ 122.465526][ T7250] lowmem_reserve[]: 0 0 0 0 0 [ 122.482342][ T7250] Node 1 Normal free:3904888kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.586297][ T7250] lowmem_reserve[]: 0 0 0 0 0 [ 122.591122][ T7250] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.638705][ T7250] Node 0 DMA32: 1*4kB (M) 39*8kB (UME) 308*16kB (UME) 76*32kB (UME) 95*64kB (UME) 70*128kB (UME) 25*256kB (UM) 7*512kB (UME) 9*1024kB (M) 5*2048kB (M) 343*4096kB (UM) = 1457084kB [ 122.735064][ T7250] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 122.782248][ T7250] Node 1 Normal: 238*4kB (UE) 52*8kB (UME) 38*16kB (UME) 222*32kB (UME) 86*64kB (UME) 29*128kB (UME) 14*256kB (UM) 6*512kB (UME) 1*1024kB (M) 4*2048kB (UE) 945*4096kB (UM) = 3904888kB [ 122.835717][ T7250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.882245][ T7250] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.944209][ T7250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.995559][ T7250] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.036972][ T7250] 40935 total pagecache pages [ 123.041767][ T7250] 0 pages in swap cache [ 123.045953][ T7250] Free swap = 124996kB [ 123.046493][ T7324] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 123.064629][ T7250] Total swap = 124996kB [ 123.074529][ T7250] 2097051 pages RAM [ 123.081520][ T7250] 0 pages HighMem/MovableOnly [ 123.090927][ T7250] 427863 pages reserved [ 123.095133][ T7250] 0 pages cma reserved [ 123.114038][ T7324] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 123.257161][ T7335] netlink: 'syz.2.360': attribute type 4 has an invalid length. [ 123.310532][ T7335] ip6t_rpfilter: unknown options [ 123.398260][ T7338] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 (while UP) [ 123.565513][ T5842] Bluetooth: hci4: link tx timeout [ 123.571259][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.607639][ T5146] Bluetooth: hci4: link tx timeout [ 123.612829][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.635049][ T7348] netlink: 'syz.2.364': attribute type 1 has an invalid length. [ 123.640660][ T7354] netem: change failed [ 123.801739][ T7366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.878644][ T5146] Bluetooth: hci4: link tx timeout [ 123.884637][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.923315][ T7348] veth5: entered promiscuous mode [ 123.958740][ T7348] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 124.187591][ T7388] netlink: 'syz.2.374': attribute type 5 has an invalid length. [ 124.227206][ T7388] netem: incorrect gi model size [ 124.232502][ T7388] netem: change failed [ 124.409355][ T5146] Bluetooth: hci4: link tx timeout [ 124.414685][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.573081][ T7411] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 124.589264][ T7413] macvlan2: entered allmulticast mode [ 124.596178][ T7413] veth1_vlan: entered allmulticast mode [ 124.605581][ T7413] veth1_vlan: left allmulticast mode [ 124.645477][ T7419] __nla_validate_parse: 12 callbacks suppressed [ 124.645497][ T7419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.384'. [ 124.737621][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 124.754930][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 124.777677][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.387'. [ 124.807627][ T7428] netlink: 'syz.0.388': attribute type 4 has an invalid length. [ 124.826180][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.387'. [ 124.848441][ T7428] netlink: 152 bytes leftover after parsing attributes in process `syz.0.388'. [ 124.873725][ T7428] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 124.958560][ T5146] Bluetooth: hci4: link tx timeout [ 124.963753][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.967327][ T7440] netlink: 17 bytes leftover after parsing attributes in process `syz.1.391'. [ 125.015945][ T5146] Bluetooth: hci4: link tx timeout [ 125.021278][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.035297][ T7440] netlink: zone id is out of range [ 125.044806][ T7440] netlink: zone id is out of range [ 125.051462][ T7440] netlink: zone id is out of range [ 125.056976][ T7440] netlink: zone id is out of range [ 125.062131][ T7440] netlink: zone id is out of range [ 125.067727][ T7440] netlink: zone id is out of range [ 125.072868][ T7440] netlink: zone id is out of range [ 125.078753][ T7440] netlink: zone id is out of range [ 125.083901][ T7440] netlink: zone id is out of range [ 125.111353][ T5146] Bluetooth: hci4: link tx timeout [ 125.116802][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.135769][ T5146] Bluetooth: hci4: link tx timeout [ 125.141167][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.214880][ T7454] xt_hashlimit: size too large, truncated to 1048576 [ 125.230525][ T7452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.395'. [ 125.305507][ T7457] : renamed from bond0 (while UP) [ 125.606367][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 125.718065][ T7487] vlan2: entered promiscuous mode [ 125.727242][ T7487] bridge0: entered promiscuous mode [ 125.733459][ T7487] vlan2: entered allmulticast mode [ 125.746834][ T7487] bridge0: entered allmulticast mode [ 125.764638][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 125.784598][ T7487] batadv0: left allmulticast mode [ 125.807473][ T7487] batadv0: left promiscuous mode [ 125.830352][ T7487] bridge0: port 3(batadv0) entered disabled state [ 125.866213][ T7487] bridge_slave_1: left allmulticast mode [ 125.872507][ T7487] bridge_slave_1: left promiscuous mode [ 125.891362][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.913623][ T7487] bridge_slave_0: left allmulticast mode [ 125.930470][ T7487] bridge_slave_0: left promiscuous mode [ 125.947263][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.976662][ T7487] bridge0: left allmulticast mode [ 125.982176][ T7487] bridge0: left promiscuous mode [ 126.078864][ T7495] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.088208][ T7495] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.097032][ T7495] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.105754][ T7495] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.123916][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 126.454589][ T7519] bridge_slave_0: left allmulticast mode [ 126.477990][ T7519] bridge_slave_0: left promiscuous mode [ 126.493406][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.519448][ T7519] bridge_slave_1: left allmulticast mode [ 126.525767][ T7519] bridge_slave_1: left promiscuous mode [ 126.531899][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.558003][ T7519] bond0: (slave bond_slave_0): Releasing backup interface [ 126.590945][ T7519] bond0: (slave bond_slave_1): Releasing backup interface [ 126.625340][ T7519] team0: Port device team_slave_0 removed [ 126.657020][ T7519] team0: Port device team_slave_1 removed [ 126.675555][ T7519] bond1: (slave veth5): Releasing backup interface [ 126.954906][ T7548] syz.2.421 uses old SIOCAX25GETINFO [ 127.167013][ T7557] Driver unsupported XDP return value 0 on prog (id 138) dev N/A, expect packet loss! [ 127.328289][ T5849] hid (null): unknown global tag 0xd [ 127.340877][ T5849] hid-generic 0005:10CF:4501.0001: unknown global tag 0xd [ 127.352698][ T5849] hid-generic 0005:10CF:4501.0001: item 0 0 1 13 parsing failed [ 127.377031][ T5849] hid-generic 0005:10CF:4501.0001: probe with driver hid-generic failed with error -22 [ 127.382204][ T7566] sctp: [Deprecated]: syz.3.430 (pid 7566) Use of int in max_burst socket option deprecated. [ 127.382204][ T7566] Use struct sctp_assoc_value instead [ 127.607251][ T7581] netlink: 'syz.2.436': attribute type 7 has an invalid length. [ 127.620241][ T7581] netlink: 'syz.2.436': attribute type 8 has an invalid length. [ 127.667726][ T7584] syzkaller0: entered promiscuous mode [ 127.673773][ T7584] syzkaller0: entered allmulticast mode [ 127.685553][ T7589] netlink: 'syz.3.438': attribute type 3 has an invalid length. [ 127.701853][ T7589] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 127.723291][ T7589] team0: Cannot enslave team device to itself [ 127.803775][ T7584] bpq0: entered promiscuous mode [ 129.224881][ T7597] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 129.237111][ T7597] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 129.519206][ T7627] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 129.825028][ T7643] __nla_validate_parse: 10 callbacks suppressed [ 129.825048][ T7643] netlink: 52 bytes leftover after parsing attributes in process `syz.0.454'. [ 130.067085][ T7659] netlink: 'syz.2.459': attribute type 29 has an invalid length. [ 130.076257][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 130.190273][ T7667] netlink: 17 bytes leftover after parsing attributes in process `syz.0.460'. [ 130.218632][ T7667] net_ratelimit: 76 callbacks suppressed [ 130.218652][ T7667] netlink: zone id is out of range [ 130.259154][ T7669] xfrm0 speed is unknown, defaulting to 1000 [ 130.265525][ T7669] xfrm0 speed is unknown, defaulting to 1000 [ 130.274140][ T7669] xfrm0 speed is unknown, defaulting to 1000 [ 130.280430][ T7667] netlink: zone id is out of range [ 130.286375][ T7667] netlink: zone id is out of range [ 130.299458][ T7667] netlink: zone id is out of range [ 130.307104][ T7669] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.330018][ T7667] netlink: zone id is out of range [ 130.345412][ T7667] netlink: zone id is out of range [ 130.358374][ T7669] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 130.370372][ T7667] netlink: zone id is out of range [ 130.386236][ T7667] netlink: zone id is out of range [ 130.401265][ T7678] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 130.415456][ T7667] netlink: zone id is out of range [ 130.431358][ T7669] xfrm0 speed is unknown, defaulting to 1000 [ 130.445153][ T7667] netlink: zone id is out of range [ 130.457820][ T7669] xfrm0 speed is unknown, defaulting to 1000 [ 130.483725][ T7669] xfrm0 speed is unknown, defaulting to 1000 [ 130.517519][ T7669] xfrm0 speed is unknown, defaulting to 1000 [ 130.530016][ T7669] xfrm0 speed is unknown, defaulting to 1000 [ 130.621541][ T7681] syzkaller1: entered promiscuous mode [ 130.629364][ T7681] syzkaller1: entered allmulticast mode [ 130.902868][ T7698] netlink: 4512 bytes leftover after parsing attributes in process `syz.0.469'. [ 131.050864][ T7706] netlink: 52 bytes leftover after parsing attributes in process `syz.1.470'. [ 131.854030][ T7758] netlink: 232 bytes leftover after parsing attributes in process `syz.2.486'. [ 131.876785][ T7760] netlink: 'syz.0.487': attribute type 4 has an invalid length. [ 132.059436][ T7770] netlink: 32 bytes leftover after parsing attributes in process `syz.3.491'. [ 132.085803][ T7771] netlink: 1712 bytes leftover after parsing attributes in process `syz.2.490'. [ 132.141862][ T7777] sctp: [Deprecated]: syz.2.490 (pid 7777) Use of int in max_burst socket option. [ 132.141862][ T7777] Use struct sctp_assoc_value instead [ 132.456013][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 132.477350][ T7792] bridge_slave_1: left allmulticast mode [ 132.496140][ T7792] bridge_slave_1: left promiscuous mode [ 132.510297][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.536188][ T7797] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 132.547475][ T7792] bridge_slave_0: left allmulticast mode [ 132.553172][ T7792] bridge_slave_0: left promiscuous mode [ 132.616824][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.792637][ T7805] netlink: 'syz.1.498': attribute type 6 has an invalid length. [ 132.872869][ T7809] netlink: 'syz.4.499': attribute type 49 has an invalid length. [ 132.881416][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 133.017777][ T7818] ksmbd: Unknown IPC event: 3, ignore. [ 133.051121][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.063806][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.117255][ T7825] syzkaller1: entered promiscuous mode [ 133.137915][ T7825] syzkaller1: entered allmulticast mode [ 133.167403][ T7818] xt_CT: No such helper "pptp" [ 133.449617][ T7848] netlink: 'syz.0.511': attribute type 3 has an invalid length. [ 133.524384][ T7853] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 133.794136][ T7867] bond2: entered promiscuous mode [ 133.801747][ T7867] bond2: entered allmulticast mode [ 133.807587][ T7867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.058306][ T7895] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1 [ 134.365826][ T7911] nbd: device at index 64 is going down [ 135.018797][ T7937] __nla_validate_parse: 5 callbacks suppressed [ 135.018815][ T7937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.535'. [ 135.528875][ T7968] netlink: 'syz.1.541': attribute type 11 has an invalid length. [ 135.777284][ T7982] sctp: [Deprecated]: syz.4.545 (pid 7982) Use of int in max_burst socket option. [ 135.777284][ T7982] Use struct sctp_assoc_value instead [ 135.853174][ T7987] netlink: 220 bytes leftover after parsing attributes in process `syz.4.545'. [ 135.876911][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.887203][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.896300][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.907841][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.918102][ T5146] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 135.926347][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.934137][ T7983] sctp: [Deprecated]: syz.4.545 (pid 7983) Use of int in max_burst socket option. [ 135.934137][ T7983] Use struct sctp_assoc_value instead [ 136.094001][ T7988] xfrm0 speed is unknown, defaulting to 1000 [ 136.166715][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 136.661957][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 136.689568][ T8038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.557'. [ 136.939713][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.952091][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.965610][ T7988] bridge_slave_0: entered allmulticast mode [ 137.016359][ T7988] bridge_slave_0: entered promiscuous mode [ 137.032284][ T8048] netlink: 'syz.4.558': attribute type 12 has an invalid length. [ 137.072136][ T8054] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 137.103669][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 137.112984][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.120276][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.135355][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 137.145543][ T7988] bridge_slave_1: entered allmulticast mode [ 137.161615][ T7988] bridge_slave_1: entered promiscuous mode [ 137.244491][ T7988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.279917][ T7988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.383468][ T7988] team0: Port device team_slave_0 added [ 137.406646][ T7988] team0: Port device team_slave_1 added [ 137.560563][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.579634][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.607741][ T7988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.672440][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.686990][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.713932][ T7988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.734187][ T8098] veth1_macvtap: left promiscuous mode [ 137.802303][ T8094] pim6reg1: entered promiscuous mode [ 137.810456][ T8094] pim6reg1: entered allmulticast mode [ 137.868717][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 137.884673][ T7988] hsr_slave_0: entered promiscuous mode [ 137.891298][ T7988] hsr_slave_1: entered promiscuous mode [ 137.898546][ T7988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.906859][ T7988] Cannot create hsr debugfs directory [ 138.006288][ T5146] Bluetooth: hci3: command tx timeout [ 138.174262][ T8115] net_ratelimit: 79 callbacks suppressed [ 138.174280][ T8115] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 138.194407][ T8115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.233378][ T7988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.366980][ T7988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.477940][ T7988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.514034][ T8134] xt_time: unknown flags 0x4 [ 138.530615][ T8132] tipc: Started in network mode [ 138.535548][ T8132] tipc: Node identity f6a204b7d8f7, cluster identity 4711 [ 138.544605][ T8136] netlink: 14 bytes leftover after parsing attributes in process `syz.4.582'. [ 138.551969][ T8132] tipc: Enabled bearer , priority 0 [ 138.745255][ T8136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.761353][ T8136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.776768][ T8136] bond0 (unregistering): Released all slaves [ 138.839978][ T8132] syzkaller0: entered promiscuous mode [ 138.845552][ T8132] syzkaller0: entered allmulticast mode [ 138.852397][ T8132] tipc: Resetting bearer [ 138.877777][ T7988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.190776][ T8157] netlink: 34 bytes leftover after parsing attributes in process `syz.2.587'. [ 139.221700][ T52] tipc: Resetting bearer [ 139.239868][ T8157] netlink: 32 bytes leftover after parsing attributes in process `syz.2.587'. [ 139.249428][ T8158] netlink: 32 bytes leftover after parsing attributes in process `syz.2.587'. [ 139.268005][ T8123] tipc: Resetting bearer [ 139.301345][ T29] audit: type=1800 audit(1740373049.912:2): pid=8154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.587" name="blkio.bfq.io_wait_time" dev="tmpfs" ino=692 res=0 errno=0 [ 139.547508][ T5849] tipc: Node number set to 777323703 [ 140.089951][ T5146] Bluetooth: hci3: command tx timeout [ 150.907340][ T5146] Bluetooth: hci3: command tx timeout [ 154.160363][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.173155][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.185072][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.201982][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.210957][ T5842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.223957][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.627141][ T5146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.637903][ T5146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.645998][ T5146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.655420][ T5146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.663303][ T5146] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.671263][ T5146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.756190][ T5146] Bluetooth: hci3: command tx timeout [ 157.774301][ T5842] Bluetooth: hci5: command tx timeout [ 157.782797][ T5842] Bluetooth: hci6: command tx timeout [ 157.796467][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.813400][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.821715][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.844205][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.858901][ T5850] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.872794][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.943697][ T5146] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 158.157090][ T5146] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 158.174413][ T5146] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 158.184844][ T5146] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 158.196693][ T5146] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 158.204009][ T5146] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 160.246150][ T5839] Bluetooth: hci8: command tx timeout [ 161.618458][ T5839] Bluetooth: hci6: command tx timeout [ 161.623933][ T5839] Bluetooth: hci5: command tx timeout [ 161.629476][ T5839] Bluetooth: hci7: command tx timeout [ 163.686470][ T5839] Bluetooth: hci5: command tx timeout [ 163.691920][ T5839] Bluetooth: hci6: command tx timeout [ 163.697886][ T5146] Bluetooth: hci7: command tx timeout [ 164.285007][ T5146] Bluetooth: hci8: command tx timeout [ 168.003897][ T5146] Bluetooth: hci7: command tx timeout [ 168.016977][ T5146] Bluetooth: hci6: command tx timeout [ 168.022435][ T5146] Bluetooth: hci5: command tx timeout [ 168.028119][ T5146] Bluetooth: hci8: command tx timeout [ 170.086594][ T5839] Bluetooth: hci8: command tx timeout [ 170.092058][ T5839] Bluetooth: hci7: command tx timeout [ 184.752376][ T5839] Bluetooth: hci4: link tx timeout [ 184.757769][ T5839] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 187.647447][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 195.464712][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.471209][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.921611][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.936117][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.945515][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.960630][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.972950][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.985032][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.766475][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 197.773631][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 198.086763][ T5850] Bluetooth: hci0: command tx timeout [ 200.856130][ T5850] Bluetooth: hci0: command tx timeout [ 202.886443][ T5842] Bluetooth: hci0: command tx timeout [ 205.321133][ T5146] Bluetooth: hci0: command tx timeout [ 218.518355][ T5839] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 218.535185][ T5839] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 218.545044][ T5839] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 218.562248][ T5839] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 218.572948][ T5839] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 218.585766][ T5839] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 220.500559][ T5146] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 220.519725][ T5146] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 220.528686][ T5146] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 220.539059][ T5146] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 220.550749][ T5146] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 220.558860][ T5146] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 220.643136][ T5146] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 220.652463][ T5842] Bluetooth: hci9: command tx timeout [ 220.661486][ T5146] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 220.670961][ T5146] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 220.680286][ T5146] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 220.689387][ T5146] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 220.705894][ T5146] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 220.766338][ T5839] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 220.784314][ T5839] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 220.793143][ T5839] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 220.802125][ T5839] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 220.811904][ T5839] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 220.819583][ T5839] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 224.879052][ T5839] Bluetooth: hci10: command tx timeout [ 224.885464][ T5839] Bluetooth: hci9: command tx timeout [ 224.891434][ T5839] Bluetooth: hci11: command tx timeout [ 224.898214][ T5839] Bluetooth: hci12: command tx timeout [ 226.981841][ T5146] Bluetooth: hci12: command tx timeout [ 226.987527][ T5146] Bluetooth: hci11: command tx timeout [ 226.993050][ T5146] Bluetooth: hci9: command tx timeout [ 226.999603][ T5146] Bluetooth: hci10: command tx timeout [ 230.715795][ T5839] Bluetooth: hci10: command tx timeout [ 230.721486][ T5839] Bluetooth: hci9: command tx timeout [ 230.727088][ T5839] Bluetooth: hci11: command tx timeout [ 230.732600][ T5839] Bluetooth: hci12: command tx timeout [ 233.254313][ T5146] Bluetooth: hci12: command tx timeout [ 233.260132][ T5146] Bluetooth: hci11: command tx timeout [ 233.265704][ T5146] Bluetooth: hci10: command tx timeout [ 273.746322][ T5146] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 273.755628][ T5146] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 273.776436][ T5146] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 273.784676][ T5146] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 273.793009][ T5146] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 273.800700][ T5146] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 288.171566][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 288.178068][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.332005][ T5843] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 298.341780][ T5843] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 298.350756][ T5843] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 298.359181][ T5843] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 298.369957][ T5843] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 298.377872][ T5843] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 298.433501][ T54] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 298.443373][ T54] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 298.452359][ T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 298.460795][ T54] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 298.472672][ T54] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 298.480585][ T54] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 299.766332][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 299.772433][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 299.779323][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 299.785433][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 300.406187][ T5843] Bluetooth: hci14: command tx timeout [ 300.566197][ T5843] Bluetooth: hci15: command tx timeout [ 302.486203][ T5843] Bluetooth: hci14: command tx timeout [ 302.646179][ T5843] Bluetooth: hci15: command tx timeout [ 311.346258][ T30] INFO: task syz-executor:7988 blocked for more than 153 seconds. [ 311.354152][ T30] Not tainted 6.14.0-rc3-syzkaller-00154-g28b04731a38c #0 [ 311.386070][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.394835][ T30] task:syz-executor state:D stack:20304 pid:7988 tgid:7988 ppid:1 task_flags:0x480140 flags:0x00004006 [ 311.446241][ T30] Call Trace: [ 311.449597][ T30] [ 311.452561][ T30] __schedule+0x190e/0x4c90 [ 311.466106][ T30] ? __pfx___schedule+0x10/0x10 [ 311.471044][ T30] ? __pfx_lock_release+0x10/0x10 [ 311.486559][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 311.492542][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 311.516185][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 311.522605][ T30] ? schedule+0x90/0x320 [ 311.536143][ T30] schedule+0x14b/0x320 [ 311.540395][ T30] schedule_preempt_disabled+0x13/0x30 [ 311.545897][ T30] __mutex_lock+0x817/0x1010 [ 311.566057][ T30] ? __mutex_lock+0x602/0x1010 [ 311.571013][ T30] ? unregister_nexthop_notifier+0x17/0x40 [ 311.587242][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 311.592354][ T30] ? synchronize_rcu+0x11b/0x360 [ 311.606094][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 311.612525][ T30] ? rcu_is_watching+0x15/0xb0 [ 311.626083][ T30] unregister_nexthop_notifier+0x17/0x40 [ 311.631822][ T30] nsim_fib_destroy+0x89/0x180 [ 311.656078][ T30] nsim_dev_reload_destroy+0x2e3/0x490 [ 311.661633][ T30] ? kernfs_find_ns+0x2b8/0x340 [ 311.676042][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 311.682475][ T30] nsim_drv_remove+0x58/0x160 [ 311.696062][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 311.702244][ T30] bus_remove_device+0x34f/0x420 [ 311.716022][ T30] device_del+0x57a/0x9b0 [ 311.720444][ T30] ? __pfx_device_del+0x10/0x10 [ 311.725358][ T30] device_unregister+0x20/0xc0 [ 311.746051][ T30] del_device_store+0x363/0x480 [ 311.750983][ T30] ? __pfx_del_device_store+0x10/0x10 [ 311.766075][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 311.771011][ T30] ? bus_attr_store+0x4f/0xb0 [ 311.775746][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 311.796194][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 311.801759][ T30] vfs_write+0xacf/0xd10 [ 314.361871][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 315.834974][ T30] ? __pfx_vfs_write+0x10/0x10 [ 315.840499][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 315.845433][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.850799][ T30] ksys_write+0x18f/0x2b0 [ 315.855174][ T30] ? __pfx_ksys_write+0x10/0x10 [ 315.860115][ T30] ? do_syscall_64+0x100/0x230 [ 315.864936][ T30] ? do_syscall_64+0xb6/0x230 [ 315.869738][ T30] do_syscall_64+0xf3/0x230 [ 315.874292][ T30] ? clear_bhb_loop+0x35/0x90 [ 315.879575][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.885525][ T30] RIP: 0033:0x7fee95d8bc1f [ 315.890685][ T30] RSP: 002b:00007ffcc01b2490 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 315.899277][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fee95d8bc1f [ 315.907357][ T30] RDX: 0000000000000001 RSI: 00007ffcc01b24e0 RDI: 0000000000000005 [ 315.915375][ T30] RBP: 00007fee95e0f4fd R08: 0000000000000000 R09: 00007ffcc01b22e7 [ 315.923652][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 315.931763][ T30] R13: 00007ffcc01b24e0 R14: 00007fee96ad4620 R15: 0000000000000003 [ 315.946362][ T30] [ 315.949499][ T30] INFO: task syz.2.587:8157 blocked for more than 158 seconds. [ 315.966073][ T30] Not tainted 6.14.0-rc3-syzkaller-00154-g28b04731a38c #0 [ 315.973773][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.001434][ T30] task:syz.2.587 state:D stack:23632 pid:8157 tgid:8150 ppid:5845 task_flags:0x400140 flags:0x00004006 [ 316.013848][ T30] Call Trace: [ 316.124996][ T30] [ 316.128558][ T30] __schedule+0x190e/0x4c90 [ 316.133142][ T30] ? __pfx___schedule+0x10/0x10 [ 316.142789][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.148665][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 316.154631][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.160697][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.167151][ T30] ? schedule+0x90/0x320 [ 316.171437][ T30] schedule+0x14b/0x320 [ 316.175722][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.181353][ T30] __mutex_lock+0x817/0x1010 [ 316.186504][ T30] ? __mutex_lock+0x602/0x1010 [ 316.191340][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 316.196917][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.202017][ T30] ? __nla_parse+0x40/0x60 [ 316.206555][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 316.211386][ T30] genl_rcv_msg+0xab5/0xec0 [ 316.216035][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.221147][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 316.226285][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 316.231704][ T30] ? __pfx_nl80211_get_key+0x10/0x10 [ 319.337344][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 319.342922][ T30] ? __pfx___might_resched+0x10/0x10 [ 319.349336][ T30] netlink_rcv_skb+0x206/0x480 [ 319.354165][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.360802][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.366711][ T30] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 319.372230][ T30] genl_rcv+0x28/0x40 [ 319.376297][ T30] netlink_unicast+0x7f6/0x990 [ 319.381154][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 319.386552][ T30] ? __virt_addr_valid+0x45f/0x530 [ 319.391704][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 319.396850][ T30] ? __check_object_size+0x47a/0x730 [ 319.402189][ T30] netlink_sendmsg+0x8de/0xcb0 [ 319.407159][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.412498][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 319.417551][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.422877][ T30] __sock_sendmsg+0x221/0x270 [ 319.427674][ T30] ____sys_sendmsg+0x53a/0x860 [ 319.432531][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.438087][ T30] ? __fget_files+0x2a/0x410 [ 319.442737][ T30] ? __fget_files+0x2a/0x410 [ 319.447513][ T30] __sys_sendmsg+0x269/0x350 [ 319.452160][ T30] ? __pfx_futex_wake+0x10/0x10 [ 319.457132][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.463348][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.469854][ T30] ? do_syscall_64+0x100/0x230 [ 319.474714][ T30] ? do_syscall_64+0xb6/0x230 [ 319.479483][ T30] do_syscall_64+0xf3/0x230 [ 319.484032][ T30] ? clear_bhb_loop+0x35/0x90 [ 319.488830][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.494774][ T30] RIP: 0033:0x7fe91eb8d169 [ 319.499267][ T30] RSP: 002b:00007fe91fab1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.507799][ T30] RAX: ffffffffffffffda RBX: 00007fe91eda6080 RCX: 00007fe91eb8d169 [ 319.515809][ T30] RDX: 0000000000008080 RSI: 0000400000000280 RDI: 000000000000000b [ 319.523911][ T30] RBP: 00007fe91ec0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 319.532007][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.540081][ T30] R13: 0000000000000000 R14: 00007fe91eda6080 R15: 00007ffe34bf7298 [ 319.548172][ T30] [ 319.551225][ T30] INFO: task syz.2.587:8158 blocked for more than 161 seconds. [ 319.558871][ T30] Not tainted 6.14.0-rc3-syzkaller-00154-g28b04731a38c #0 [ 319.567115][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.575812][ T30] task:syz.2.587 state:D stack:23864 pid:8158 tgid:8150 ppid:5845 task_flags:0x400140 flags:0x00004006 [ 319.588402][ T30] Call Trace: [ 319.591721][ T30] [ 319.594690][ T30] __schedule+0x190e/0x4c90 [ 319.599320][ T30] ? __pfx___schedule+0x10/0x10 [ 319.604219][ T30] ? __pfx_lock_release+0x10/0x10 [ 319.609378][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 319.615410][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 319.621399][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 319.627859][ T30] ? schedule+0x90/0x320 [ 319.632144][ T30] schedule+0x14b/0x320 [ 319.636450][ T30] schedule_preempt_disabled+0x13/0x30 [ 319.641948][ T30] __mutex_lock+0x817/0x1010 [ 319.646660][ T30] ? __mutex_lock+0x602/0x1010 [ 319.651485][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 319.656542][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 319.661622][ T30] ? __nla_parse+0x40/0x60 [ 319.666692][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 319.671554][ T30] genl_rcv_msg+0xab5/0xec0 [ 319.676702][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.681820][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 319.687136][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 319.692594][ T30] ? __pfx_nl80211_get_key+0x10/0x10 [ 319.698018][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 319.703544][ T30] ? __pfx___might_resched+0x10/0x10 [ 319.708986][ T30] netlink_rcv_skb+0x206/0x480 [ 319.713807][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.718993][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.724347][ T30] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 319.729947][ T30] genl_rcv+0x28/0x40 [ 319.734001][ T30] netlink_unicast+0x7f6/0x990 [ 319.738939][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 319.744278][ T30] ? __virt_addr_valid+0x45f/0x530 [ 319.796035][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 319.801183][ T30] ? __check_object_size+0x47a/0x730 [ 319.826095][ T30] netlink_sendmsg+0x8de/0xcb0 [ 319.830967][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.846066][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 319.851116][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.859996][ T30] __sock_sendmsg+0x221/0x270 [ 319.864777][ T30] ____sys_sendmsg+0x53a/0x860 [ 319.875742][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.881184][ T30] ? __fget_files+0x2a/0x410 [ 319.885842][ T30] ? __fget_files+0x2a/0x410 [ 319.890668][ T30] __sys_sendmsg+0x269/0x350 [ 319.895312][ T30] ? __pfx_futex_wake+0x10/0x10 [ 319.900296][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.905511][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.911974][ T30] ? do_syscall_64+0x100/0x230 [ 319.916832][ T30] ? do_syscall_64+0xb6/0x230 [ 319.921579][ T30] do_syscall_64+0xf3/0x230 [ 319.926253][ T30] ? clear_bhb_loop+0x35/0x90 [ 319.930990][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.936971][ T30] RIP: 0033:0x7fe91eb8d169 [ 319.941415][ T30] RSP: 002b:00007fe91fa90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.949945][ T30] RAX: ffffffffffffffda RBX: 00007fe91eda6160 RCX: 00007fe91eb8d169 [ 319.958029][ T30] RDX: 0000000000008080 RSI: 0000400000000280 RDI: 000000000000000b [ 319.976159][ T30] RBP: 00007fe91ec0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 319.984310][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000