last executing test programs: 5m6.524116967s ago: executing program 32 (id=1009): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}]}, 0x30}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000100)={0xa000000d}) close(0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0xbe3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xe1, [{0xfffffffe, 0x2, 0x6}, {0x1, 0x3}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x10000, @value=r8}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x5e}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000180)='syzkaller\x00'}, 0x94) 5m6.404162376s ago: executing program 33 (id=1012): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x401}, @generic={0xa, 0x2, 0x9, 0x6}, @exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x13, r1, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xffffe000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x401}, @generic={0xa, 0x2, 0x9, 0x6}, @exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x13, r1, 0xb0260000) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) (async) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xffffe000) (async) 5m6.379679954s ago: executing program 34 (id=1013): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x38, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_TABLE={0x8}]}, 0x24}}, 0x0) 2m42.591282738s ago: executing program 4 (id=1816): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) write$cgroup_pid(r1, &(0x7f0000000340)=r4, 0x12) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000004bee0000a28e0b068464f84b9914d920eec297ef6b4d06988dc1569a15dd83f2f0c28af1b7777e73fc038a858ab8b3846394e7fa9615505da252872c86e11d018d571ccca5cb82d0d262ecc6179e1099c6e1034ac930b44d41f1809e48d441ac938d24d31e60753b247d26fac019f9a0783cc0868eb6c84f3b7de8c407c955fb4539596fa13fcb68ef6cb5250c1a01cd44b1ab4f953b6a5af6612fde2da4cf9f06b2898f15ab86feb8be3ea02223cd977a6f3a855a30cd66e507af01520d502680fc94e3346efa", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="010000000100"/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2m42.36079107s ago: executing program 4 (id=1820): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0xfffffffffffffef5, 0x20, 0x100, 0x70bd25, 0x25dfdbfc}, 0xe8}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m42.205309932s ago: executing program 4 (id=1824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x0) 2m42.054443051s ago: executing program 4 (id=1827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x64}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, r4, 0x79f70b28a21117bf, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x4000050) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x683, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r6, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r8, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000040)="92d9c21b010339", 0x7}], 0x1) 2m41.370915004s ago: executing program 4 (id=1832): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m40.773115165s ago: executing program 4 (id=1837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) r4 = socket(0x22, 0x2, 0x3) (rerun: 64) sendmmsg$inet6(r4, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008bdfab6ee47f4ab772d000008000300", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040824) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000017be7e15f0eaf8c557355d00000061104f000000000095000015af5a24009ce94e21b1d190ee66ffd64526b88740dab987c60df27922686b900435433ce951f397942576cb3cd75d06497a71e3080fbcd94878b01b156e84e000321d03548daadb2c2f90ba5a8572055941a47a3732bb54e372cbc993ecee26dd31d532fc816938eb5362de4558a3cdc30f33e4482212a8b4f20110a3091c84"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0x4, 0x4) 2m40.364005696s ago: executing program 35 (id=1837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) r4 = socket(0x22, 0x2, 0x3) (rerun: 64) sendmmsg$inet6(r4, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008bdfab6ee47f4ab772d000008000300", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040824) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000017be7e15f0eaf8c557355d00000061104f000000000095000015af5a24009ce94e21b1d190ee66ffd64526b88740dab987c60df27922686b900435433ce951f397942576cb3cd75d06497a71e3080fbcd94878b01b156e84e000321d03548daadb2c2f90ba5a8572055941a47a3732bb54e372cbc993ecee26dd31d532fc816938eb5362de4558a3cdc30f33e4482212a8b4f20110a3091c84"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0x4, 0x4) 2m27.062880666s ago: executing program 8 (id=1996): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r1 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0xbf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x2}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x24000884}, 0x48041) accept$alg(r5, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008006a1eecca58d9", @ANYRESOCT=r5, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m26.838307175s ago: executing program 8 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc5}, 0x488c0) 2m26.70109035s ago: executing program 8 (id=2000): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={0x0, r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, &(0x7f0000000040)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0) recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4bbbfe, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, 0xffffffffffffffff, 0x7}, 0x14) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0xffff, @loopback}}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010019bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) socket$netlink(0x10, 0x3, 0xf) 2m25.750925266s ago: executing program 7 (id=2009): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000380)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000a000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000400)={{r5}, r7, 0x4, @inherit={0x68, &(0x7f0000000240)={0x1, 0x4, 0x9, 0x6, {0x8, 0x1, 0x8, 0x174, 0x2}, [0x100000, 0x7, 0x5, 0x400]}}, @subvolid=0xfffffffffffffffd}) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f00000001c0)=0xfffffffffffffffa) 2m25.518138946s ago: executing program 7 (id=2012): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000800000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00'}, 0x90) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x4, @mcast2, 0x1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x12) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2m25.379383195s ago: executing program 8 (id=2014): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfff, @empty, 0x8001}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r1, 0x0, 0xfffffffffffffd81, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd69bf", 0x44, 0x2b, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0xfffe}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x5}}}}}}}}}, 0x0) 2m25.358577818s ago: executing program 7 (id=2015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000280)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x803}, [@NFTA_COMPAT_NAME={0x0, 0x1, ']*[[\']}\x00'}, @NFTA_COMPAT_TYPE, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0xf}, 0x1, 0x0, 0x0, 0x1}, 0x4040811) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x6e38, 0x18, '\x00', 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0]}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000190000003b810000850000006d0000000700397e08000000cc7e5d5e97071ac1079500000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r5, 0x0, 0x5}, 0x18) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e24, 0x3, @private1, 0x8}}, 0x0, 0xa, [{{0xa, 0x4e23, 0x3, @mcast2}}, {{0xa, 0x4e21, 0x8000, @local, 0xfffffffd}}, {{0xa, 0x4e21, 0xffffff81, @loopback, 0x1}}, {{0xa, 0x4e20, 0x8, @remote, 0x7fffffff}}, {{0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e23, 0x3, @local, 0xa}}, {{0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8000}}, {{0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xfff}}]}, 0x590) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @private}, &(0x7f00000003c0)=0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=@ipv6_newaddr={0x7c, 0x14, 0x2, 0x70bd25, 0x25dfdbfe, {0xa, 0x18, 0x14, 0xfd, r7}, [@IFA_FLAGS={0x8, 0x8, 0x82}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_TARGET_NETNSID={0x8}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 2m25.216824318s ago: executing program 7 (id=2017): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f00000003c0)={0x4c, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20008894) 2m25.10588102s ago: executing program 8 (id=2019): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000130728bd700000000000ac1e0101000000000200000000000000ac14147e32330efdaa00fc000000000000000000004e23000100000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb00000000320000002001000000000000000000000000000100000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000028bd7000000000000200"/168], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000340)={0x0, '\x00', {0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="34000161", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5f}}, &(0x7f0000000380)='GPL\x00'}, 0x90) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000009c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @local, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f0000001a80)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x40005) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="08000000010000c3260000e2c90000da7aab84e518e350e51f981b3d0001000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8f7ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) 2m25.097895225s ago: executing program 7 (id=2020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="01000000000000e400001400000018"], 0x44}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@dev, @dev, 0x0}, &(0x7f00000005c0)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000a00)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x8, 0x40, 0x3, 0x2e, 0x7]}, &(0x7f0000000a80)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x0, 0x2, 0x6}, {0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x41}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000780)={@private1, 0x0}, &(0x7f0000000880)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="bc130000", @ANYRES16=r2, @ANYBLOB="000829bd7000fddbdf25080041adb09be13f5a0c010004000100040001000c000180f7ff0100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="24000100", @ANYRES32=r8, @ANYRESHEX=r8, @ANYRES32=r9, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000001c000180080003000000000008000100", @ANYRES32=r10, @ANYRES16=r1], 0x13bc}, 0x1, 0x0, 0x0, 0x8000}, 0x1b8422ac969da1f2) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0xf}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x2}, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r11, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0xb3, 0xa, 0xe97, 0x5}, 0x10) 2m24.706773924s ago: executing program 7 (id=2027): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000000)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) socket$kcm(0x29, 0x5, 0x0) (async) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000180)={r4}) sendmsg$alg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="6acfdefdb8fda786b5e2c0ee6b0e9d88ac52a086e93d116683aead1849b605c64b695f1f80070b0fd71de2d7a5d5fad411416fec6d84e9fec015543113af433cbd2174c7da39de2a0233b64a3f3ed3819b87df619af365d19b2e6caa0771b7d0b0d24139cdb97771b2e9d2049f8569ec542d9585c2edcd82ee1ba82b199bc0662fc70318ad8d025ca8db7f259bf83551219b099d3bb260dbed23b671f86b783711b9ca0d1e9f12bb76c07a597d701e33cb13281dc6bb8fed6ba8d15422bb", 0xbe}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000001c0)="d9a54c010273585faf02d8850dd9e64571780a0e5bc37d25290ec490e4ed71af915208e508820b227ed4ec9ada451c7a562694f9", 0x34}, {&(0x7f00000003c0)="059fc0c1ea22b7a0541a4be8678093adf3b444b0736e4fcd5841385df82d92eaf71d6620a154884094d1ccfad6ae29cd7d8569a3ed2ba195a679f8aa5a6026774c7bfc2a0b5b22eed5353b9540a2e09b19e3e310fa6186bd", 0x58}, {&(0x7f0000001880)="c5382461acd9b2242a0f77d23df7f21b1b858e00a8a90594a48fcfda8966391ea5d54017f3bd24ff3cc6d5d2203baded0e1fa82ea9e162e2bdd9507ee4491d8e878be6db0ea3656f0a29b50ae586a244e66799", 0x53}], 0x5, &(0x7f0000001700)=[@op={0x18}, @iv={0x100, 0x117, 0x2, 0xe5, "76009a3dd4a06f3c0afa5608af351abc0462053d4fb57d1c89ce40bce0028896b30f17597b561ca0a778249ac46d74e26d4b3492d7d3bd5766d8d99eb19131603e1505f234774e0e207ca2aac86428365db4c485e12c6a8972f9f5b4f16157c03ce9c7958ca3d55824c003f5c4a007a55ed1ef968fe2bcbc41fc0d6283917c9013bc1ef3d7303e542cd0db855123aba28e916754408ca08fecdb9bae526b8868f2f78265c326bb513cd0a70828b5b2faed373915e0927f2f7a98afc17ca44a544bc6b04d1e520d446efe6de348c42e403edb944479c20db5b39a4599e35cd4aef5163237b9"}, @op={0x18, 0x117, 0x3, 0x1}], 0x130, 0x20000015}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r7], 0x1c}}, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000e668071ac9"], 0x48) sendmsg$nl_generic(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3b, 0x10, 0x70bd2b, 0x25dfdbfe, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$sock(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="652630700d26fa33dbe4b1fc996947f721ae2031747270f73550b8503e53f70d9354f4fa5247dd9a9560297b14e0c1b61aab00b36c2b46f6e7c07333c8b4e6a284ee", 0x42}, {&(0x7f0000001c80)="0ed949f9f3f8623560f0612306f1", 0xe}, {&(0x7f0000001cc0)="2cfcda1a8aff86eb69bb4f527c0c74436b4846821f7e117c8f91b776110e06cf1f2a8dcd257763c868dcaec3d509c8e2d7d85c820aad86e3f1d3249e12b01283f652bf0847cb9e6c53b3019af425c3e911a08a39e22f736b98846ee7230dcefca00ae3a72a91236fc8a1bdb380f744e6f429f5ded50be7", 0x77}, {&(0x7f0000001d40)="82d9e2611d737693d4270d1199da7aed9f1b40187a68296f61986be499f59d9fe61cc8df6b2f343e66cac6d479c1e462c73dbe8480b914cf4294bfa2584ba7aeaca5325a6a89c6b3d4e4b1293d634ecce1b5906af99342fcff221434551b3487ff5026", 0x63}], 0x4}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000600)={0x0, 0x3}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000680)={r9, 0x3b38}, &(0x7f0000001840)=0x8) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000680)={r9, 0x3b38}, &(0x7f0000001840)=0x8) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r8, 0x0, 0xffffffff000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={0xffffffffffffffff, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000001940)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001980), &(0x7f00000019c0), 0x8, 0x38, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@gettfilter={0x4c, 0x2e, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x9, 0x9}, {0x5}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x76e2ade5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x48014) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@gettfilter={0x4c, 0x2e, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x9, 0x9}, {0x5}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x76e2ade5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x48014) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) (async) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) unshare(0x40000000) (async) unshare(0x40000000) 2m24.562474564s ago: executing program 8 (id=2028): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1404, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40000d0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendto$inet6(r6, &(0x7f0000000400)="83696edb", 0x4, 0x4000084, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r2, &(0x7f0000000100), 0x20000000}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) 2m24.178039033s ago: executing program 5 (id=2034): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x2, 0x2008, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000400850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$inet(r7, 0x0, &(0x7f0000000000)) r8 = socket$caif_seqpacket(0x25, 0x5, 0x4) listen(r8, 0x400) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000100)={'pimreg\x00', {0x2, 0x0, @multicast1}}) 2m23.931340445s ago: executing program 5 (id=2037): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x100010, r1, 0xe7014000) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 2m23.846071653s ago: executing program 5 (id=2040): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa00000800050092b2aa2024ce77652d14671b9dc0c101ee0fce24b7a2fdef339a040e4343e22202e89f42f054b15dc2c8b39b166f90382d56228f6e51a02ba5e296ccd098ff9cbc06c9266969c65a7e9bfd78d60502a9210a2b2429985241b6075ff8aee88d3cbd", @ANYBLOB="da4f36d1b9fc2ff02953f911dfb18bdb9164dee4fe557fcc45d6ee55dfdf"], 0x68}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0xa, @remote, 0x9f2}, @in6={0xa, 0x4e24, 0xb, @remote, 0x28df}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @multicast1}], 0x88) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x6, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2m23.607902162s ago: executing program 5 (id=2044): socket$nl_netfilter(0x10, 0x3, 0xc) 2m23.516585184s ago: executing program 5 (id=2045): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000001c0)) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r1, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x8, 0x51}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "11c739cc3a"}, @NL80211_ATTR_KEY_DEFAULT={0xffffffffffffff73}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000180}, 0x18800) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x4788}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', r9, 0x7800, 0x8, 0x7, 0x8, {{0xe, 0x4, 0x1, 0x6, 0x38, 0x6d, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@timestamp={0x44, 0x20, 0x10, 0x0, 0x8, [0x129d, 0x5bc, 0x6b6, 0xfffffff7, 0x38, 0x7ff, 0xffffffff]}, @end]}}}}}) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, 0x8, 0x6, 0x801}, 0x14}}, 0x0) 2m23.434772865s ago: executing program 5 (id=2047): unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x2, 0x5, 0x10000, 0x4800, 0xffffffffffffffff, 0xe8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) mmap(&(0x7f000027c000/0x3000)=nil, 0x3000, 0x3, 0x2010, r0, 0x5db01000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x44044) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x7, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x5, 0xf, 0x6, 0x7, 0x719}, @jmp={0x5, 0x0, 0xd, 0x2, 0x3, 0xfffffffffffffff4, 0xfffffffffffffffc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0xb13, 0xed, &(0x7f0000000240)=""/237, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r3, r0, r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r5, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2m9.225584599s ago: executing program 36 (id=2027): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000000)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) socket$kcm(0x29, 0x5, 0x0) (async) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000180)={r4}) sendmsg$alg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="6acfdefdb8fda786b5e2c0ee6b0e9d88ac52a086e93d116683aead1849b605c64b695f1f80070b0fd71de2d7a5d5fad411416fec6d84e9fec015543113af433cbd2174c7da39de2a0233b64a3f3ed3819b87df619af365d19b2e6caa0771b7d0b0d24139cdb97771b2e9d2049f8569ec542d9585c2edcd82ee1ba82b199bc0662fc70318ad8d025ca8db7f259bf83551219b099d3bb260dbed23b671f86b783711b9ca0d1e9f12bb76c07a597d701e33cb13281dc6bb8fed6ba8d15422bb", 0xbe}, {&(0x7f0000000700)="a5f7f27743bdf02cf0248446a686238d1d1d35be4c89a51aa1ccb8ced894da833308be1410e25280c59b7412e0636369d39bd36176ced3cdbb8c17f843a8aff05b4fc2c876be929170288b7899e06b614b57aaed89d5b2c4323f371111995d3d6cb978db95f9676d35b494a119f335c85e1241508eb0d4657be1351a136a10ba44025f29147d2d8d2d69a3b8f1a6f8ffc7c2cb15231a977c64732a985b42594527aa09f16e932ce944495adddb49e6cb1c050320b261af076159affde3a8bc3e69f59b69a98f8b8ea50a7b9d354f7646db9cf229b20e9654d49c1eaf0829b8559036f6343c19cd1157e3d9cd4d73f4cccb1c50a1b243ec6999cf2c408fa778c2d478b3eaae6eba4dcbfec07f4c6de7109024ef95c087047e0454763c4bb5047b13c68851203c321788d5bd24987c4ecf9948472460a9c41da18cb7cfbc402ebcdace15cbcbd3cc591bdad6ec4b2ee5a3169d14d0d0e9856da2f9f9d23943544ce2c765189a7487f1499108a137327b38ecc6a9e8100df506e5e071fc0f8d897d459fb8a1f7346ac8cf34371e29b87443e703cdeec731cb58b4bb8bf144b010c7ddc57bc8bda9d0793c52df3935e4efabe6ae934703d516da975c9211e2a1954f2a3b860b2bc239cde939fe84f8b7b9feae56632053a850a1e2d61e2be0710d98baa2762c07dc11ca0a1edc5d8389c53f34f2d1e99a0eb4fc7e02eb4a851e23c70d04e90a1823f6d53c9e6eb2a97bfca6585a3ba1b8315cd6f6f6185c3fb39caf14a9d17d971d2fe0fd29ef6e719cd6a085b0023ab1fc2955cdface289cd08e0799a766e6361c1f8497fb0a28eeef0c42e5f794d05ab93f742a6ffd91ab17f78a9b0814588ec0157691273fa0595dd1726a1786b2a23f8e29bd0260e13612b5af40aadabaca638ebba259f3526072f65d1919012f6fca022655e72d7ac7d9a9d093aacb43ac59c23b81403425d2af125c1f88b3049d706e02b97363f1d293215b655f8929406a434c8e2bfdab04186af4616c8b15bb0027b4ae1f5412ef0872fe010d80779e80357d0b868f10d1d971d45a85b89a479f58753e35b6389fdccfede93de33f7cc6f8f845d8dfc6936be940cd10259b6bc82b582eeb9b515a66ba669bf4c4e53043c001e071944dabb5f9774b07d2838b2e71047d1cd9f89829f167d77be43e537f0e8039a7c81c9b919c5923ea48192a2385b953c33b99cf66b2e0bb98e2433e15070a73ebee49fe932888af8a9ed5df933e19ca08638b555ed8e439f269a6eed45617ff7a26f95d84e14ff787cf3b638f802f475929af938e2ed12b2fe4cc033b241d012bd378a9ac7cc06da87b9c2c32c765347a126e6826fcf42484a14d792561b794c2149b234dcb0d210f479a373670282d00280c388d96af931a0d834926c9f7e9e63e7ecb634c5a01cefc48a869d8ea399778d4c1e2a14f9ad64d7644171994c71d6eec1c8f88b69b7d85e61493a18f54d8e9c16828bb147b541b515da59514922d709309146568bcfe14178d81e5a2d8ff9c74bfb84db41ac233da609cf87b2259795d825e682659a8647f4d087b8c8224f14d3abf59aa5e0cf4613d21f8c157c175e515cc0c0a3af6399a759aebfd018b472dfd9a423c32810736f20f743c43ba76d5272cff5e943b2d1aa3172a2412cda3c2c9ec8b7bf65e6e05578313172a5181179f9fd114c9c0ff3f8643b04e8cfebc7f90a13718c98201095c41a8598d741b6ccb3999670caa37438c084f1fb9f5a34badd8fc0cb8fcc912fdc5f113822053887f2febafc994497d4d4b4c1ede176105577434e004cd11a8a16ba55a2a6ebc4a84d33ec0d74ddaebe6b219d2082b0f407f3eeaee1525a6c55157df30bb5284eed9d21c1c800769d75185594434e63f5f9c7c1266763d75b297c3fef129670f6e4e318da83ad35c7a7ab91237b1d9911939514b52643de7e1454501c16562ea85b924ff26ba83a8602a687927adf313d04bcf32a7fefedb6ade359ccc6f95d9f3e3f7128e43050593646313f1591cb20fff1993d6d9797a819ab19863cbdae93e546646af653f789928dd3c66da66eb517e517f8cacab033e548d4e233a7a48bb12b929e6a36857e09d9b5b7361f1ff70caa41dd25975512517e3204e99e0ee01cf8f28f49487382da27df5396cacd0e617ae0116dead614cb971694e4ab18f0bb2d434a1887f693edb69d1dad43ddc257180c86245789a5411486aad951dc6328e4b4c0cfd5dbfdefbc27f0c31e35ebc7c7081b0368e8ab3fd1b7c432b73650ac3e9d6143572851e1c70ad3888a13cd050ef80277e8849a191934ed9541fc6aea8c208e6cfe923fc75e7d556994e2352ae74397a7bd6d40605bf7d0b541d871de4b038efa5131669ebc4d874cb0c0a99ac30ab2d5077df66305ddf364ad37a346d683fed7e3ef8c789163d1b87bc2724fdad10a4bb5aa1b5ba219e9428504c011d8a5cba82e54679d9408b4faf82a7455654f65c68aa9e49f011d89e2dd7c7279cc902b20d8690f43d4107321b3ca3b8ed5b0b1e52028d90b0b594208beec46f86e8c2cad7deece88f69c0f54d073020ace9edfe248989c68083c25e4ff0aaa85f0ae7d50c7cbc275c606724a33868740b8a570408c76fbca4edd5012d846cddec671f4a45800bd8ff4a3a5a5a8d79bd7ff7cadae1471b278ac2cad8a645ecc0a48eaf587559733053ab665705636046ec93b01d0b76ae7553541791a81d3dfd24ca91ba82e4ae268b5f04b2f2947d2399f617ae2c1bc6ad2ceab501dcdb7a58ca39d8e601adf1592042949010dbedb386b8bba32a651f3d0d8ad7a27d7142e149fdd4cb2863bacb1e34484b873c2197d150325ab95e4f24af760cfae588758a3d68e23a616d3e03ad040231bbe0e6c640309fdc2b88072ba5d5a5d20c057bf71f330a705eca9cb66dec1c6f87764042c005756e76da1d4175dd8dfa6f95c242d9d5d090667c6a2661dbf7234f4f60744d7ddd414a5da2d30a7cae0104913a3704337eec8b41f411399a2642adfd6b838ced7efef8a7ccc44a6898840cea982b91b499525a4a85f6905b9c9f16826b5d406cf1f4d10fad8578be59fb74cc96ee91389fae7acb55aa38d361487407dab96ea67bc8480d97ab4208a22f25579e400d700a4c21b23ae31eda223ea319acca474b61576e4b4e83ed6e1ce9afd68995768e9e8a8d4e629525e3e170f1a1c3f05582784fa2fd6ac08b9b3f9c690e590548093fd86ecfc73be887ebd806ef2221bbe99633b140d46e618c3b4c043515532f801e1e1a23509141e3f02c8f342979a52fd8c5cbff8057d70c8045c0d3775ecc1cc0f854bc54f782012d3c7d17db1897d031383a04c65b37397924fb1676fd3e502febc8db52df1511aeca3da74927930f52d1ee19d1a5c7cebab131726cf16c4eb855dde58f5c2e0a5de58c3c0a44157fb2bddce311057a52b9eb8fc12bca682841fd718d360ae5dfe2fc34dc41a279e93ca875ea87f9980dd58ecde1e4c6218df1c04854e596f67d63fcbc9f141e38d74aec933cd9c5a5e9b3c8848fd95058f6a3d6b0e27ba22f53c5214d101d762926acaa013bc3b6e93c74898d2e9fe8bae63cfa345024f51f904e3230e732f3fc60b86cf4347df3259e89c8b38048ec5b94cf97e0a39af4b1f61c4b28f1e99c0cea2448833a615d1c18866d9dd11572767afa002986cb9e8b20570881e16b49aeff777956a4e0036d8ffb12c5f2a21881790a92a67908735f3a6b3505e2ddb72edd2c5a73d007f8b4bae4bbcfb99f695b9d80b09c8bcf3e91e43d412871b42df7e2bd2e30fb27053abb05cd7b4e7fe41ae50f1839470972e07176093af035784745698c5b1361418694e0e78d6e1445d6f8d6c8e96afcc193be50838b396571b49f8ce968151930ff8f026fe654caa6d2d12aa53619336a204189ca4befed1abd49eb75e65e67f360884e3aeee4feafaec8d5267556e5fb894b85e99068e80d8e36af8407ccfc66fec2c0738acf273f6306acd91f2e189bce47dc2ce15f4a9038bceb3de22f268762cddfcc22b2875f2baa75b196e6cf8641fd89770e61c16bf5eec99dfd9446573acbbcc116dbe6b352eed7e6481ddfc98b58670202e7145e0117acbbd37ae769ff9a87706a1b350d384cfb477dc36148dba4e674f0f933449833634bb01ce2a74a1229fe14a0d08149b7da11ea84f2a90668f783e5566616b44c1d4a1d00a241ac5a96711fb1ee74c977313268aef27752355e1e8ed796a75528c9c5e1bb0fc38f4e7081f5f82ad2bf6df46acef772473a5c748eacf199df25858f0788481eadbdda2d198b77ba5642ff475c031d684dd2438483162f867798eb714b11fd507e095fd953ca752f0a9b7ff7f7d9ed63f2e361bf7c139fee6017aef24016f8f4bd85811061bcbab0a387dc939c1f5ed256da28ef2ddc3f28b086d75577ed5a9cb9c3b58717a6ae4a7c5231e9feed228966e788fdeda848cee2140b5bcb1bc511046714211b824bd46ff2d0af8d5f6d6e985f1ce6af6254b742f85c947f81df217e6161128445066ca9be93348dd17cbb6dc7a21baadf7fe97e80c13130b6cb886038027bbc75886ee78fbfdec3c32573027b18909c53fd681c51f5d1a4026fa6a73137f12ed82d40f144d5d96650b1faa1a8cd8f99f3a92522b47c9b2565f5fdac03402af0dc2bd5b3c5349ec94e91baff1f33e36809c1f0019cac8ba36f645eefe2b32a12f12b755d6f6fb35ab50dbee43c5ae2658c30e6e3aa27695f0df21d6281e5d1a5d1de46c03141532959496314fe0e4c5c50aad56ded725179fb875133de2962dd11dbeed7795bfecbced3562604499e177f8fbbd8b301b6f0cae9888828a7fc88bdd08831e9c0e57afa3361e04c4441027bcddb0c2cde0d92bd86f5d1663fe80862e9b3e2ec6e0e2b665165627cead921e6077161988830322117d3f63884643185c6333c6d57a7794e959413b8a0047da38ae670ff3c7ab23eab8f729d0388fbb7890aa0694d3c4f6864b8814c18abe1270b72d925a8218a83325944b4d1cca439c32a6fda8e8e86a9589f0314fac30f4642418affe27fbcc9f1d3675ab5a50319f835b979cddef45162dbb12541d2b8ea88d2ca8639349515c5d14e32addbd85eb702a6519f9238577f3a58bef6737d976bbe6c46c148db7178f720ef2c27d7d40a00176c35cf549664d4247663ac790c985287c2eaa70fc81e515f85de9c698dae9a5658aaf98fde2ddb6ce9e7240f27ab309fe0dc01fc72eef0e6615da5febd2b7162e8bf7b2df08fdccff9556cc5478b9a39b942e5fc85020a2817030180cf3084c39381861e54ab7ebb7e36720d7a54a94747c822c23f609afc28dabb87c978f9d940afcada20ac44ee8f84b3ea4f6ecb02fdfecdbe2e8ae219e35e9df1e794b4306d5935f2063ea020e7cf7cac242342ab300bbf445132b8d70690b73997b52ad149dea642e23cf44f7fea51f900821487af4a71e164f8090de8176faae62b7a17a05f9f84470f66791cc246cf8283dab622ecc4f72e542c3d99e8e64fa86d1e83a1e58a976d2c771654d3943198c40c9cc4f8d93fb9f454b7d7a1769ea481f5c2f676455c1c86028eb9684429997392447ec2090682fb8f5d51ba8df6ed6d6c62e133065a46d603eff4adbaf6a892995fd53a3976b442c3baf95b337ea035621495b70db3cfdb280f71b61b800f8a0937c449725108dc33a6637bbe2fde038593082d421cf5a040e74169dc3755a58426b84e418860157daa2d788c15d40250b8700c29330f93ec5f03bc7f84f959f64db99d8b57", 0x1000}, {&(0x7f00000001c0)="d9a54c010273585faf02d8850dd9e64571780a0e5bc37d25290ec490e4ed71af915208e508820b227ed4ec9ada451c7a562694f9", 0x34}, {&(0x7f00000003c0)="059fc0c1ea22b7a0541a4be8678093adf3b444b0736e4fcd5841385df82d92eaf71d6620a154884094d1ccfad6ae29cd7d8569a3ed2ba195a679f8aa5a6026774c7bfc2a0b5b22eed5353b9540a2e09b19e3e310fa6186bd", 0x58}, {&(0x7f0000001880)="c5382461acd9b2242a0f77d23df7f21b1b858e00a8a90594a48fcfda8966391ea5d54017f3bd24ff3cc6d5d2203baded0e1fa82ea9e162e2bdd9507ee4491d8e878be6db0ea3656f0a29b50ae586a244e66799", 0x53}], 0x5, &(0x7f0000001700)=[@op={0x18}, @iv={0x100, 0x117, 0x2, 0xe5, "76009a3dd4a06f3c0afa5608af351abc0462053d4fb57d1c89ce40bce0028896b30f17597b561ca0a778249ac46d74e26d4b3492d7d3bd5766d8d99eb19131603e1505f234774e0e207ca2aac86428365db4c485e12c6a8972f9f5b4f16157c03ce9c7958ca3d55824c003f5c4a007a55ed1ef968fe2bcbc41fc0d6283917c9013bc1ef3d7303e542cd0db855123aba28e916754408ca08fecdb9bae526b8868f2f78265c326bb513cd0a70828b5b2faed373915e0927f2f7a98afc17ca44a544bc6b04d1e520d446efe6de348c42e403edb944479c20db5b39a4599e35cd4aef5163237b9"}, @op={0x18, 0x117, 0x3, 0x1}], 0x130, 0x20000015}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r7], 0x1c}}, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000e668071ac9"], 0x48) sendmsg$nl_generic(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3b, 0x10, 0x70bd2b, 0x25dfdbfe, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$sock(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="652630700d26fa33dbe4b1fc996947f721ae2031747270f73550b8503e53f70d9354f4fa5247dd9a9560297b14e0c1b61aab00b36c2b46f6e7c07333c8b4e6a284ee", 0x42}, {&(0x7f0000001c80)="0ed949f9f3f8623560f0612306f1", 0xe}, {&(0x7f0000001cc0)="2cfcda1a8aff86eb69bb4f527c0c74436b4846821f7e117c8f91b776110e06cf1f2a8dcd257763c868dcaec3d509c8e2d7d85c820aad86e3f1d3249e12b01283f652bf0847cb9e6c53b3019af425c3e911a08a39e22f736b98846ee7230dcefca00ae3a72a91236fc8a1bdb380f744e6f429f5ded50be7", 0x77}, {&(0x7f0000001d40)="82d9e2611d737693d4270d1199da7aed9f1b40187a68296f61986be499f59d9fe61cc8df6b2f343e66cac6d479c1e462c73dbe8480b914cf4294bfa2584ba7aeaca5325a6a89c6b3d4e4b1293d634ecce1b5906af99342fcff221434551b3487ff5026", 0x63}], 0x4}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000600)={0x0, 0x3}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000680)={r9, 0x3b38}, &(0x7f0000001840)=0x8) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000680)={r9, 0x3b38}, &(0x7f0000001840)=0x8) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r8, 0x0, 0xffffffff000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={0xffffffffffffffff, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000001940)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001980), &(0x7f00000019c0), 0x8, 0x38, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@gettfilter={0x4c, 0x2e, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x9, 0x9}, {0x5}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x76e2ade5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x48014) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@gettfilter={0x4c, 0x2e, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x9, 0x9}, {0x5}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x76e2ade5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x48014) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) (async) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) unshare(0x40000000) (async) unshare(0x40000000) 2m9.124621309s ago: executing program 37 (id=2028): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1404, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40000d0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendto$inet6(r6, &(0x7f0000000400)="83696edb", 0x4, 0x4000084, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r2, &(0x7f0000000100), 0x20000000}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) 2m8.155447843s ago: executing program 38 (id=2047): unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x2, 0x5, 0x10000, 0x4800, 0xffffffffffffffff, 0xe8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) mmap(&(0x7f000027c000/0x3000)=nil, 0x3000, 0x3, 0x2010, r0, 0x5db01000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x44044) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x7, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x5, 0xf, 0x6, 0x7, 0x719}, @jmp={0x5, 0x0, 0xd, 0x2, 0x3, 0xfffffffffffffff4, 0xfffffffffffffffc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0xb13, 0xed, &(0x7f0000000240)=""/237, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r3, r0, r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r5, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1m0.598610087s ago: executing program 3 (id=3036): socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) getsockname$packet(r0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1m0.387277085s ago: executing program 3 (id=3039): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x10) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3f6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r4}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x10) (async) socket$kcm(0x2d, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x3f6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r4}) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) (async) close(r0) (async) 1m0.242656947s ago: executing program 3 (id=3040): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0000007f000300ff0f000003000028d742f1abb3962700a38a0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0500000401000000020000000700000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FIONCLEX(r4, 0x5450) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\n\x00'], 0x48) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 59.997801229s ago: executing program 3 (id=3045): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0xfffffffc, @empty}, 0x0, {[0x0, 0x0, 0x4e, 0x192, 0x1, 0x3]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0xfffffffc, @empty}, 0x0, {[0x0, 0x0, 0x4e, 0x192, 0x1, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1f}, 0x5c) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a080002400000000a0900010073797a30000000000900020073797a3200"], 0xc0}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a080002400000000a0900010073797a30000000000900020073797a3200"], 0xc0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400", 0x2}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x328, 0x14, 0x4, 0x0, 0x0, {0x1d}, [@INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "59411c4764c51d064ab89031b0637d8fa740c4a4a7b907914b439b5cfaa2842dcc8df78bbe342c1ae50acc414127b834a812acb30238dd286ed72c79f201068919f13d0b554551721f4ee87601d620b34046f296d6ba7b3a6d0a2a477f1babff347019aa7b2785b2bf6c77895e9b25f211648faf6d441b5815d4ac3589b850ae32b96c32e52f30b7ef7665afa5e70982b6905a92f1485c5b013c27451980c101af026814dd4068c2314dcef825fd835f17fc7828f5ca6e98558327a6df73240ce3dbe2ef333900bd6ce9d625c86350c8d5"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "2bf11421800860bd1cc999f631fce577790431684dee09242805ed10331e3d57e7e0d44fd5fad32252bad86064a79c5fbe7a0b4e538b1cf6d368de96364c81de1e0c87a79cac4d4c8ee6b37573af7aff6581417e1706d4e65aa4093f3258955fc7bea3969db02932674ffffd2ff98f909c5ec9ada327391767b7cdbe6586272f40da70476d48cc8b98569a0ca0b08b11a576812f5b52d74491ed81156c3e0e28ee743299c5a0c2f44ca1fd983dd7ea2676ee43540571b0ea94549682d87877c300c325b2ae68e1464901ff71ecd4334964b9367bf4a71542eebb5362a323d73325c93eaebd146e31397f"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "87c1da7817bf40bca63b74fd3f2c6d60c174ff63295cbdbb57a7a7bc39a610697fa28acb0a285a2596cf5077e0"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "5597cf28e1b46c621ca0b2803b2fb0428836db23200a6e1d76f7c536947d4ad9a8d8da6248d10e3e4ff8b385fb9644e230731280ae7ea0fcfb843bad61879d0073eae891dd6a162df1f01848e3db8e2ad1e2aea719139f7e4b06e8f6ba3535ddff0f78600b70a8d4"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "f86aa2f8d1c65b32d81b3fb35ab81d5ce912dd2afdd604111ee40cd3a06a290df84074daec58f69d5e4eb19b76b512944e1bbd4707783a038591a1d81ec9e9e34fab9cb3858895878ff49648a6506db66ee47dfb0f5315775fd4fdddcba889f29141c70d583961439d0e39daef5eb5435c6d0f02cf0feeef60"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "4f37d9af0810654072e8023aad81036b6bbcc9cfe58bea5cd59838655420e0f4afded0607a"}]}, 0x328}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x328, 0x14, 0x4, 0x0, 0x0, {0x1d}, [@INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "59411c4764c51d064ab89031b0637d8fa740c4a4a7b907914b439b5cfaa2842dcc8df78bbe342c1ae50acc414127b834a812acb30238dd286ed72c79f201068919f13d0b554551721f4ee87601d620b34046f296d6ba7b3a6d0a2a477f1babff347019aa7b2785b2bf6c77895e9b25f211648faf6d441b5815d4ac3589b850ae32b96c32e52f30b7ef7665afa5e70982b6905a92f1485c5b013c27451980c101af026814dd4068c2314dcef825fd835f17fc7828f5ca6e98558327a6df73240ce3dbe2ef333900bd6ce9d625c86350c8d5"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "2bf11421800860bd1cc999f631fce577790431684dee09242805ed10331e3d57e7e0d44fd5fad32252bad86064a79c5fbe7a0b4e538b1cf6d368de96364c81de1e0c87a79cac4d4c8ee6b37573af7aff6581417e1706d4e65aa4093f3258955fc7bea3969db02932674ffffd2ff98f909c5ec9ada327391767b7cdbe6586272f40da70476d48cc8b98569a0ca0b08b11a576812f5b52d74491ed81156c3e0e28ee743299c5a0c2f44ca1fd983dd7ea2676ee43540571b0ea94549682d87877c300c325b2ae68e1464901ff71ecd4334964b9367bf4a71542eebb5362a323d73325c93eaebd146e31397f"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "87c1da7817bf40bca63b74fd3f2c6d60c174ff63295cbdbb57a7a7bc39a610697fa28acb0a285a2596cf5077e0"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "5597cf28e1b46c621ca0b2803b2fb0428836db23200a6e1d76f7c536947d4ad9a8d8da6248d10e3e4ff8b385fb9644e230731280ae7ea0fcfb843bad61879d0073eae891dd6a162df1f01848e3db8e2ad1e2aea719139f7e4b06e8f6ba3535ddff0f78600b70a8d4"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "f86aa2f8d1c65b32d81b3fb35ab81d5ce912dd2afdd604111ee40cd3a06a290df84074daec58f69d5e4eb19b76b512944e1bbd4707783a038591a1d81ec9e9e34fab9cb3858895878ff49648a6506db66ee47dfb0f5315775fd4fdddcba889f29141c70d583961439d0e39daef5eb5435c6d0f02cf0feeef60"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "4f37d9af0810654072e8023aad81036b6bbcc9cfe58bea5cd59838655420e0f4afded0607a"}]}, 0x328}}, 0x0) 59.749215731s ago: executing program 3 (id=3049): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x21, 0x800000}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xc2924e2b4b46f3d6, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xc}}, @TCA_FW_INDEV={0x14, 0x3, 'tunl0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x3, '\x00', r3, r1, 0x5, 0x0, 0x4}, 0x50) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8040000, 0xffff}, &(0x7f0000000200)=0xc) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 59.557226687s ago: executing program 3 (id=3053): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @dev}}}, 0x84) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x11, 0x6, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}}, 0x400c490) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) (async) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x48080) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x4000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140), 0x4) (async) socket$pptp(0x18, 0x1, 0x2) 44.47219338s ago: executing program 39 (id=3053): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @dev}}}, 0x84) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x11, 0x6, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}}, 0x400c490) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) (async) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x48080) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x4000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140), 0x4) (async) socket$pptp(0x18, 0x1, 0x2) 27.903337483s ago: executing program 9 (id=3393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x204, 0x66, 0xbdfb}, &(0x7f0000000140)=0x10) 27.765984915s ago: executing program 9 (id=3397): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18fb000000000000000000000000000061198000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd70700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mem_connect\x00', r1}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071113700000000008510000002000000850000000500000095000000000000009500a5050000000023580280e274db3d88893d965e4aed7e23488e80d5de9b0ee9bffaa5aff0fc87e5bd277d5b3b4c1217940a023c0d574ea2af2936a79b03f58056c2843746bd69f574599aef78c2816346131e873b73cf73feeea9a9c6cf1717fc99f3d8ff987373ed174609d26c38ad756f0ddce707dd720249c569"], &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 27.405909821s ago: executing program 9 (id=3404): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x5, 0xfffffffd) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4, 0x0, 0x22}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @offload={0xc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd", 0x45}], 0x1) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000844) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x42, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00020000fe88000000000000000000000000010186dd00001657c5334f743b147349fdb59ad1671408a789ed2e07d648e8e953e5c2038ad433b59af7e59d9adb7a5d8ef69d3b4a570fafb63f1ca6cfba028439e5eda14373579f3c0315530aff92af482c"], 0x38}}, 0xc4c4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 27.044239881s ago: executing program 9 (id=3410): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000e15172d90200000028000480240001800b000100736f636b65740000140002800800024000000000080001"], 0x7c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x4000000) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x3ffe, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x68}}, 0x0) 26.811962628s ago: executing program 9 (id=3413): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x5, &(0x7f0000000140)={[0x3]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 25.678001957s ago: executing program 9 (id=3432): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x9, 0xfffffffffffffffa, 0x800}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x20, 0x70bd27, 0x1ff, {{}, {@val={0x8, 0x1, 0x2c}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000000e14cdc92bbd70002faa3e002d84ddfddbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4804) (async) close(0x4) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/ipc\x00') (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) (async) unshare(0x6a040000) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r6, 0x400448c9, &(0x7f0000000040)="b4c003990000000008") (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x34, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) (async) r7 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r7, 0x61d9, 0x0) 12.016414862s ago: executing program 0 (id=3602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}}, 0x40) 11.85773775s ago: executing program 0 (id=3605): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140), 0x4) (async, rerun: 32) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 32) r3 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) (async) unshare(0x22020400) (async) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) (rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) 11.569092234s ago: executing program 0 (id=3609): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000140)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x20}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000140)=0x9, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000140)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}], 0x10) r5 = socket$igmp6(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "e1a4df85181bfbc4c1e30aea57856a20f95d4816d6d1909e36294d4a26e48196", "a94afd3c6761d8c189ba4416c20619af33da236f32d8105fc4e83a55b1ae83a7", "242cceda0f7f52455782629808ab8ff69bb175ff217581adfa4970ae915218c7", "84cd7ab832dd393ed9251dd2bba1c90b16802468174a3c4fd13e05a54af5d9be", "81c4839450d41c9be76ff19b07440169751edb23b7fa5b57ffa540780d73a3c7", "5565cecf39917b652fce7f75", 0x50, 0x8, 0x6, 0xccae, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x1) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRESOCT=r6, @ANYRES16=r6, @ANYRES32=r6], 0x70}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r8 = socket(0x1f, 0x5, 0x6) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000080)={0x2, 'team_slave_0\x00', {0xff}, 0x101}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000080)={0x2, 'team_slave_0\x00', {0xff}, 0x101}) 11.282606506s ago: executing program 0 (id=3612): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000700)={0x0, 0x3}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000780)={r4, 0x1, 0x9}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@ptr={0xa, 0x0, 0x0, 0x2, 0x5}, @volatile={0x8, 0x0, 0x0, 0x9, 0x1}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x9}, @union={0xd, 0x2, 0x0, 0x5, 0x1, 0x6, [{0x0, 0x5, 0x9}, {0xa}]}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000640)=""/161, 0x73, 0xa1, 0x1, 0x2}, 0x28) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @private}, &(0x7f00000003c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x5, 0x0, 0x4, 0x20, 0xffffffffffffffff, 0xad19, '\x00', 0x0, r3, 0x5, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r7}, 0x18) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, {[@fastopen={0x22, 0x5, "27d3de"}]}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 10.946418508s ago: executing program 0 (id=3616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00{\t\x00\x00\x00', 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10040310}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40800) 10.482036909s ago: executing program 40 (id=3432): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x9, 0xfffffffffffffffa, 0x800}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x20, 0x70bd27, 0x1ff, {{}, {@val={0x8, 0x1, 0x2c}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000000e14cdc92bbd70002faa3e002d84ddfddbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4804) (async) close(0x4) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/ipc\x00') (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) (async) unshare(0x6a040000) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r6, 0x400448c9, &(0x7f0000000040)="b4c003990000000008") (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x34, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) (async) r7 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r7, 0x61d9, 0x0) 2.739681704s ago: executing program 1 (id=3660): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r3, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f0b23e716ba1b7a2a0807eb9ed14e813"}, @NL80211_ATTR_PMK={0x14, 0xfe, "5f9fcc8044f5d4fc775245b9af8e7c7b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e915347f93e9430bd6c418e3168d26b8"}]}, 0x5c}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0) 2.429388697s ago: executing program 1 (id=3663): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xf, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default]}) listen(r1, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)={0x100, r5, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x100}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace801796ec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703927a3632010628e5aa77b3a5089d34f7e5dbacb31360a4ce2993d073ac980ce17ba915cbbca62bb4be3fcfa23e19ee90c33736803aa90e508ea7bfee858ba0fca2f2f11f152129dec9c37551e4fe133829c44cc07b3dbef3919beb03f428f408b49141dbad98361576cd6f84d9699ba340fadf33bafb5727975a60bb6c619033311ad1f9b8b640edbc8e0bcb4ba0164b2179f6a7f77a63ecba5899d1a178e33a84771f9ed3c3cf70a2ea9a5a84b5c0c39a52d6a2bfed", 0x18d}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r6, 0xffffd000) r8 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r8, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff7898126e4bd350a7e2fc89de56d3bbbbbbbbbbbb8100003f0086d560fec00000303a00010100000000000000000000000000003a07153e5f3960391b2302eaff02000000000000000000000000000102009078000000006018b08800000000fe80000000000000"], 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6, @random="5788a3a2cad7"}, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) 2.347859464s ago: executing program 6 (id=3664): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0xfff8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0x12) 1.833962454s ago: executing program 1 (id=3666): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB="00000100", @ANYRES32=0x0, @ANYBLOB="a62965063da5dc80cebfd6788d116f50471b"], 0x27}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) 1.833120008s ago: executing program 1 (id=3667): socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0xc, 0xfff, 0x8, 0x0, 0x8, 0x3]}}]}]}]}, 0x38}}, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1020}, {&(0x7f0000000a00)=""/229, 0xe5}], 0x4}, 0x100101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f22", 0x4}], 0x1}}], 0x2, 0x240080e4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r7, 0x61d8, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000008000000000000000000000200d5bc0000"], 0x0, 0x1a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.730764734s ago: executing program 6 (id=3669): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x8, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000100000000000001010"}}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8}}}, 0x24}}, 0x20000014) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x14, r6, 0x400}, 0x14}}, 0x0) 1.306822189s ago: executing program 2 (id=3671): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x5}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x8000}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) 1.218948281s ago: executing program 6 (id=3672): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) shutdown(r0, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r4, 0x8917, 0x0) (async) ioctl$SIOCAX25GETINFO(r4, 0x8917, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4018041}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.109624435s ago: executing program 2 (id=3673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40042}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r5 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={r3, r4, r5}, 0xc) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000200)="7be1f308de") r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000001c0)={r8}, &(0x7f0000000080)=0x8) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x5}]}]}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4048801}, 0x4000) recvmmsg(r9, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x106}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7ffd}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000028c0)=""/224, 0xe0}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f0000000740)=""/248, 0xf8}], 0x5}, 0x7ffffffd}], 0x4, 0x400060a2, 0x0) 1.076037473s ago: executing program 6 (id=3674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000000)={0x32, @remote, 0x4e23, 0x4, 'lblc\x00', 0x2e, 0x7, 0x68}, 0x2c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r3 = accept4(r1, 0x0, &(0x7f00000001c0), 0x800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000180)="74c7cc6f1602fdf879bf722727d5c63d0d8f129cead89ec0f074dba0165e67acaef4ee6ce708fca4cc040168d87bd78a0ead940b719a", &(0x7f0000000200)=@udp6=r3, 0x1}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001840), 0x4) write$cgroup_int(r4, &(0x7f0000000000)=0x6, 0x12) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) 867.047045ms ago: executing program 6 (id=3675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x2, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, r2}}}, 0xb8}}, 0x0) 827.397646ms ago: executing program 2 (id=3676): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) 707.504454ms ago: executing program 6 (id=3677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4105}, 0xc000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000140000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41000000}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x7c0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="58000000000000000400000000000000186000000000000000000000ff070000"], 0x0}, 0x90) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000123ee3b74335fe980454906427fb3aaed580008ec53200010a000000000000000080000000"], 0x26}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) sendmsg$unix(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(0x3) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 547.009287ms ago: executing program 2 (id=3678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x16, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 442.592478ms ago: executing program 2 (id=3679): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x30, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc24}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) listen(r5, 0x0) sendmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet(0x2, 0x4, 0xa8a) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x118, 0x2e, 0x200, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 191.483257ms ago: executing program 2 (id=3680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x178, r1, 0x1, 0x0, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x9, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x7f, 0x1, 0x7}}, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x979}}}}, @NL80211_ATTR_BEACON_TAIL={0xfb, 0xf, [@perr={0x84, 0xf5, {0x1, 0xf, [{{}, @broadcast, 0x7c, @void, 0x7e}, {{}, @device_a, 0x90, @void, 0x25}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x30}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1d}, {{}, @device_a, 0x6, @void, 0x3e}, {{}, @broadcast, 0x38000000, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x3c}, {{}, @device_a, 0x0, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x8ec, @value, 0xb}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x33}, {{}, @broadcast, 0xdfb421f, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0xa}, {{}, @device_a, 0x7a, @void, 0x32}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x178}}, 0xc010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000100)) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@delsa={0x3c, 0x11, 0x421, 0x0, 0x0, {}, [@srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x3c}}, 0x0) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x1800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r6, &(0x7f0000008580)={0xa, 0x4e24, 0xad, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x5}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000008640), 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 54.982089ms ago: executing program 1 (id=3681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x800, 0x2, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) pselect6(0x40, &(0x7f0000000300)={0x0, 0xaed}, &(0x7f0000000000)={0x18}, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000c410000001400146173742d6c696e6b0000"], 0x30}}, 0x0) 54.02808ms ago: executing program 0 (id=3682): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0xa, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5f7}]}, 0x1c}}, 0x4004) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x180, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x69cc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x478d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x41}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x5}, 0x20008804) (async, rerun: 32) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800200600fe8000000000000000000000000000aafe8000000000000000020000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020002907800000402080a0000000300000000"], 0x0) 0s ago: executing program 1 (id=3683): ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f00000001c0)=@null) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c000000000101040000000040000000093c0002802c00018014000300fe8000000000000000000000000000aa14000400fe800000000000000c0002800500010000000000080007400000000006492fc71c000dbe00008333ffffffff080002006401010208000100"], 0x7c}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) kernel console output (not intermixed with test programs): ? __pfx___mutex_lock+0x10/0x10 [ 420.801920][T14126] ? ns_capable+0x8a/0xf0 [ 420.801946][T14126] rtnl_newlink+0x16d6/0x1c70 [ 420.801988][T14126] ? __pfx_rtnl_newlink+0x10/0x10 [ 420.802021][T14126] ? is_bpf_text_address+0x26/0x2b0 [ 420.802060][T14126] ? __lock_acquire+0xab9/0xd20 [ 420.802106][T14126] ? __lock_acquire+0xab9/0xd20 [ 420.802162][T14126] ? is_bpf_text_address+0x26/0x2b0 [ 420.802197][T14126] ? is_bpf_text_address+0x292/0x2b0 [ 420.802225][T14126] ? is_bpf_text_address+0x26/0x2b0 [ 420.802266][T14126] ? __lock_acquire+0xab9/0xd20 [ 420.802330][T14126] ? __pfx_rtnl_newlink+0x10/0x10 [ 420.802351][T14126] rtnetlink_rcv_msg+0x7cc/0xb70 [ 420.802371][T14126] ? __lock_acquire+0xab9/0xd20 [ 420.802401][T14126] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 420.802422][T14126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.802466][T14126] netlink_rcv_skb+0x208/0x470 [ 420.802484][T14126] ? __lock_acquire+0xab9/0xd20 [ 420.802513][T14126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.802538][T14126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.802576][T14126] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.802608][T14126] netlink_unicast+0x82c/0x9e0 [ 420.802659][T14126] ? __pfx_netlink_unicast+0x10/0x10 [ 420.802694][T14126] ? netlink_sendmsg+0x642/0xb30 [ 420.802715][T14126] ? skb_put+0x11b/0x210 [ 420.802744][T14126] netlink_sendmsg+0x805/0xb30 [ 420.802778][T14126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.802804][T14126] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.802828][T14126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.802849][T14126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.802873][T14126] __sock_sendmsg+0x21c/0x270 [ 420.802907][T14126] ____sys_sendmsg+0x505/0x830 [ 420.802941][T14126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.802979][T14126] ? import_iovec+0x74/0xa0 [ 420.803011][T14126] ___sys_sendmsg+0x21f/0x2a0 [ 420.803039][T14126] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.803115][T14126] ? __fget_files+0x2a/0x420 [ 420.803132][T14126] ? __fget_files+0x3a0/0x420 [ 420.803165][T14126] __x64_sys_sendmsg+0x19b/0x260 [ 420.803194][T14126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.803232][T14126] ? __pfx_ksys_write+0x10/0x10 [ 420.803256][T14126] ? rcu_is_watching+0x15/0xb0 [ 420.803282][T14126] ? do_syscall_64+0xbe/0x3b0 [ 420.803310][T14126] do_syscall_64+0xfa/0x3b0 [ 420.803330][T14126] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.803350][T14126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.803371][T14126] ? clear_bhb_loop+0x60/0xb0 [ 420.803397][T14126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.803417][T14126] RIP: 0033:0x7f53cc78eba9 [ 420.803436][T14126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.803453][T14126] RSP: 002b:00007f53cd626038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.803475][T14126] RAX: ffffffffffffffda RBX: 00007f53cc9d5fa0 RCX: 00007f53cc78eba9 [ 420.803490][T14126] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 420.803503][T14126] RBP: 00007f53cd626090 R08: 0000000000000000 R09: 0000000000000000 [ 420.803515][T14126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.803527][T14126] R13: 00007f53cc9d6038 R14: 00007f53cc9d5fa0 R15: 00007fffbea427b8 [ 420.803563][T14126] [ 420.808829][T14126] vlan3: entered allmulticast mode [ 421.349295][T14126] bond15: entered allmulticast mode [ 421.410358][T14129] 8021q: adding VLAN 0 to HW filter on device bond7 [ 421.427928][T14131] vlan2: entered allmulticast mode [ 421.434918][T14131] bond7: entered allmulticast mode [ 422.136696][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2205'. [ 422.157973][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2205'. [ 422.259978][ T5187] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.269195][ T5187] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.277002][ T5187] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.283643][ T5884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 422.294839][ T5884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 422.303655][ T5884] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 422.303790][T14144] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2205'. [ 422.311538][ T5884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 422.329662][ T5884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 422.337463][ T5884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 422.338689][T14145] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2205'. [ 422.345341][ T5884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 422.634030][T14152] netlink: 'syz.3.2207': attribute type 1 has an invalid length. [ 422.730271][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 422.752671][T14152] 8021q: adding VLAN 0 to HW filter on device bond16 [ 422.867111][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 422.926920][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 423.034819][ T5881] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 423.044166][ T5881] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 423.053237][ T5881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 423.061832][ T5881] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 423.070705][ T5881] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 423.332996][T14177] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 423.346350][T14146] chnl_net:caif_netlink_parms(): no params data found [ 424.378709][ T5878] Bluetooth: hci5: command tx timeout [ 424.425650][T14148] chnl_net:caif_netlink_parms(): no params data found [ 424.458753][ T5878] Bluetooth: hci6: command tx timeout [ 424.481410][T14146] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.489528][T14146] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.496744][T14146] bridge_slave_0: entered allmulticast mode [ 424.505998][T14146] bridge_slave_0: entered promiscuous mode [ 424.516438][T14146] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.526046][T14146] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.533313][T14146] bridge_slave_1: entered allmulticast mode [ 424.541668][T14146] bridge_slave_1: entered promiscuous mode [ 424.702795][T14146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.754286][T14146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.899758][T14146] team0: Port device team_slave_0 added [ 425.016471][T14146] team0: Port device team_slave_1 added [ 425.056323][T14148] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.064209][T14148] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.088784][T14148] bridge_slave_0: entered allmulticast mode [ 425.096856][T14148] bridge_slave_0: entered promiscuous mode [ 425.103528][ T5878] Bluetooth: hci7: command tx timeout [ 425.114082][T14148] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.122980][T14148] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.130836][T14148] bridge_slave_1: entered allmulticast mode [ 425.138951][T14148] bridge_slave_1: entered promiscuous mode [ 425.245849][T14148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.255462][T14162] chnl_net:caif_netlink_parms(): no params data found [ 425.282488][T14146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.294149][T14146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.330209][T14146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.330992][T14224] __nla_validate_parse: 2 callbacks suppressed [ 425.331007][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2223'. [ 425.346507][T14146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.364196][T14146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.392047][T14146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.407769][T14148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.601782][T14148] team0: Port device team_slave_0 added [ 425.663841][T14148] team0: Port device team_slave_1 added [ 425.817957][T14148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.825159][T14148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.857387][T14148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.875297][T14243] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 425.883095][T11165] IPVS: starting estimator thread 0... [ 425.887522][T14146] hsr_slave_0: entered promiscuous mode [ 425.900673][T14146] hsr_slave_1: entered promiscuous mode [ 425.907229][T14146] debugfs: 'hsr0' already exists in 'hsr' [ 425.913711][T14146] Cannot create hsr debugfs directory [ 425.947354][T14162] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.955106][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.962700][T14162] bridge_slave_0: entered allmulticast mode [ 425.971799][T14162] bridge_slave_0: entered promiscuous mode [ 425.978780][T14244] IPVS: using max 27 ests per chain, 64800 per kthread [ 425.981541][T14148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.994213][T14148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.022630][T14148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.037163][T14162] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.050419][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.057875][T14162] bridge_slave_1: entered allmulticast mode [ 426.066881][T14162] bridge_slave_1: entered promiscuous mode [ 426.331665][T14148] hsr_slave_0: entered promiscuous mode [ 426.340271][T14148] hsr_slave_1: entered promiscuous mode [ 426.348046][T14148] debugfs: 'hsr0' already exists in 'hsr' [ 426.354619][T14148] Cannot create hsr debugfs directory [ 426.386483][T14162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.396366][T14255] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2230'. [ 426.428113][T14162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.459074][ T5878] Bluetooth: hci5: command tx timeout [ 426.543158][ T5878] Bluetooth: hci6: command tx timeout [ 426.553564][T14162] team0: Port device team_slave_0 added [ 426.564323][T14162] team0: Port device team_slave_1 added [ 426.623598][T14260] netlink: 'syz.6.2231': attribute type 10 has an invalid length. [ 426.697058][T14263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2232'. [ 426.757900][T14263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2232'. [ 426.786833][T14162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.794047][T14162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.828037][T14162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.843109][T14162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.850558][T14162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.886688][T14162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.948699][T14267] FAULT_INJECTION: forcing a failure. [ 426.948699][T14267] name failslab, interval 1, probability 0, space 0, times 0 [ 426.972305][T14267] CPU: 1 UID: 0 PID: 14267 Comm: syz.6.2233 Not tainted syzkaller #0 PREEMPT(full) [ 426.972334][T14267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 426.972346][T14267] Call Trace: [ 426.972354][T14267] [ 426.972362][T14267] dump_stack_lvl+0x189/0x250 [ 426.972392][T14267] ? __pfx____ratelimit+0x10/0x10 [ 426.972414][T14267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.972439][T14267] ? __pfx__printk+0x10/0x10 [ 426.972474][T14267] ? __pfx___might_resched+0x10/0x10 [ 426.972494][T14267] ? fs_reclaim_acquire+0x7d/0x100 [ 426.972518][T14267] should_fail_ex+0x414/0x560 [ 426.972553][T14267] should_failslab+0xa8/0x100 [ 426.972580][T14267] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 426.972613][T14267] ? __alloc_skb+0x112/0x2d0 [ 426.972636][T14267] __alloc_skb+0x112/0x2d0 [ 426.972660][T14267] netlink_ack+0x146/0xa50 [ 426.972677][T14267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.972702][T14267] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 426.972723][T14267] ? __pfx_nl80211_post_doit+0x10/0x10 [ 426.972766][T14267] netlink_rcv_skb+0x28c/0x470 [ 426.972785][T14267] ? __lock_acquire+0xab9/0xd20 [ 426.972812][T14267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.972849][T14267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.972895][T14267] ? down_read+0x1ad/0x2e0 [ 426.972921][T14267] genl_rcv+0x28/0x40 [ 426.972943][T14267] netlink_unicast+0x82c/0x9e0 [ 426.972979][T14267] ? __pfx_netlink_unicast+0x10/0x10 [ 426.973009][T14267] ? netlink_sendmsg+0x642/0xb30 [ 426.973027][T14267] ? skb_put+0x11b/0x210 [ 426.973054][T14267] netlink_sendmsg+0x805/0xb30 [ 426.973083][T14267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.973104][T14267] ? aa_sock_msg_perm+0xf1/0x1d0 [ 426.973124][T14267] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.973142][T14267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.973161][T14267] __sock_sendmsg+0x21c/0x270 [ 426.973190][T14267] ____sys_sendmsg+0x505/0x830 [ 426.973218][T14267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.973249][T14267] ? import_iovec+0x74/0xa0 [ 426.973276][T14267] ___sys_sendmsg+0x21f/0x2a0 [ 426.973300][T14267] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.973367][T14267] ? __fget_files+0x2a/0x420 [ 426.973381][T14267] ? __fget_files+0x3a0/0x420 [ 426.973408][T14267] __x64_sys_sendmsg+0x19b/0x260 [ 426.973433][T14267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.973465][T14267] ? __pfx_ksys_write+0x10/0x10 [ 426.973485][T14267] ? rcu_is_watching+0x15/0xb0 [ 426.973509][T14267] ? do_syscall_64+0xbe/0x3b0 [ 426.973533][T14267] do_syscall_64+0xfa/0x3b0 [ 426.973551][T14267] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.973568][T14267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.973585][T14267] ? clear_bhb_loop+0x60/0xb0 [ 426.973608][T14267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.973624][T14267] RIP: 0033:0x7fab4638eba9 [ 426.973640][T14267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.973654][T14267] RSP: 002b:00007fab47207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.973674][T14267] RAX: ffffffffffffffda RBX: 00007fab465d5fa0 RCX: 00007fab4638eba9 [ 426.973688][T14267] RDX: 00000000000488c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 426.973699][T14267] RBP: 00007fab47207090 R08: 0000000000000000 R09: 0000000000000000 [ 426.973710][T14267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.973719][T14267] R13: 00007fab465d6038 R14: 00007fab465d5fa0 R15: 00007fff9eb1d418 [ 426.973750][T14267] [ 427.329629][ T5878] Bluetooth: hci7: command tx timeout [ 427.493544][T14162] hsr_slave_0: entered promiscuous mode [ 427.512660][T14162] hsr_slave_1: entered promiscuous mode [ 427.543625][T14162] debugfs: 'hsr0' already exists in 'hsr' [ 427.551770][T14162] Cannot create hsr debugfs directory [ 427.647426][T14284] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2237'. [ 427.854878][T14148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.877872][T14146] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 427.940978][T14146] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 428.024951][T14148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.063478][T14146] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 428.096617][T14146] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 428.137474][T14148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.228092][T14148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.324822][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 428.352765][T14302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2240'. [ 428.472984][T14303] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.489406][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2241'. [ 428.502061][T14305] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2241'. [ 428.539844][ T5878] Bluetooth: hci5: command tx timeout [ 428.541136][T14146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.618581][ T5878] Bluetooth: hci6: command tx timeout [ 428.677256][T14309] netlink: 'syz.6.2243': attribute type 1 has an invalid length. [ 428.690481][T14146] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.698418][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 428.822912][T11411] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.830134][T11411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.881614][T11411] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.888847][T11411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.106265][T14321] netlink: 'syz.3.2246': attribute type 2 has an invalid length. [ 429.143091][T14321] netlink: 'syz.3.2246': attribute type 8 has an invalid length. [ 429.329995][T14162] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 429.338717][ T5878] Bluetooth: hci7: command tx timeout [ 429.380540][T14162] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 429.392594][T14162] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 429.443516][T14162] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 429.707839][T14341] netlink: 'syz.3.2249': attribute type 2 has an invalid length. [ 429.715748][T14148] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.727977][T14341] netlink: 'syz.3.2249': attribute type 5 has an invalid length. [ 429.744972][T14148] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.773381][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2249'. [ 429.784325][T14341] : entered promiscuous mode [ 429.791121][T14148] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.846904][T14148] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.866331][T14146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.097360][T14162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.214372][T14162] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.245232][T11412] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.252428][T11412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.365119][T11415] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.372304][T11415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.526968][T14148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.606973][T14374] __nla_validate_parse: 3 callbacks suppressed [ 430.606993][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2257'. [ 430.627228][ T5878] Bluetooth: hci5: command tx timeout [ 430.694622][T14148] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.703217][ T5878] Bluetooth: hci6: command tx timeout [ 430.810928][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.818143][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.864438][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.871686][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.964819][T14146] veth0_vlan: entered promiscuous mode [ 431.039703][T14146] veth1_vlan: entered promiscuous mode [ 431.182446][T14146] veth0_macvtap: entered promiscuous mode [ 431.243511][T14146] veth1_macvtap: entered promiscuous mode [ 431.317819][T14146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.395216][T14146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.420266][ T5878] Bluetooth: hci7: command tx timeout [ 431.443720][T11411] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.515673][T11411] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.542958][T11411] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.562709][T14162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.593421][T11411] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.674364][T14148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.680997][T14400] can: request_module (can-proto-0) failed. [ 431.838897][T14402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.846156][T14402] IPv6: NLM_F_CREATE should be set when creating new route [ 431.979230][T14162] veth0_vlan: entered promiscuous mode [ 432.014954][T11415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.038406][T11415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.150440][T14417] syz_tun: entered allmulticast mode [ 432.156497][T14162] veth1_vlan: entered promiscuous mode [ 432.226282][T11411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.244611][T11411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.256606][T14148] veth0_vlan: entered promiscuous mode [ 432.314263][T14148] veth1_vlan: entered promiscuous mode [ 432.354797][T14162] veth0_macvtap: entered promiscuous mode [ 432.402048][T14162] veth1_macvtap: entered promiscuous mode [ 432.479588][T14148] veth0_macvtap: entered promiscuous mode [ 432.493966][T14148] veth1_macvtap: entered promiscuous mode [ 432.519692][T14162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.551578][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2201'. [ 432.576380][T14162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.654252][T14148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.662134][T11411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.671203][T11411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.722161][T14421] macvtap1: entered promiscuous mode [ 432.727699][T14421] macvtap1: entered allmulticast mode [ 432.745750][T14421] bond_slave_0: entered promiscuous mode [ 432.751765][T14421] bond_slave_1: entered promiscuous mode [ 432.765557][T14421] bond0: entered allmulticast mode [ 432.771095][T14421] bond_slave_0: entered allmulticast mode [ 432.776844][T14421] bond_slave_1: entered allmulticast mode [ 432.796809][T14421] bond0: entered promiscuous mode [ 432.828085][T14421] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 432.845526][T14421] team0: Device macvtap1 failed to register rx_handler [ 432.995871][T14421] bond0: left allmulticast mode [ 433.001934][T14421] bond_slave_0: left allmulticast mode [ 433.007472][T14421] bond_slave_1: left allmulticast mode [ 433.013259][T14421] bond0: left promiscuous mode [ 433.018941][T14421] bond_slave_0: left promiscuous mode [ 433.024476][T14421] bond_slave_1: left promiscuous mode [ 433.106898][T11411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.117698][T11411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.213905][T14148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.278900][T14417] syz_tun: left allmulticast mode [ 433.293250][T11412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.321382][T11412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.351271][T11412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.396456][T11412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.408177][T14427] netlink: 'syz.9.2269': attribute type 1 has an invalid length. [ 433.602726][T11411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.634715][T11411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.680356][T11412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.706499][T11412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.736405][T11413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.754478][T11413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.886594][T11415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.925378][T11415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.047277][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2203'. [ 434.054717][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2276'. [ 434.067036][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 434.120686][T11413] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.128624][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2203'. [ 434.136464][T11413] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.164087][T11413] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.192079][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 434.239098][T11413] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.351512][T14455] netlink: 'syz.0.2278': attribute type 9 has an invalid length. [ 434.423221][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 434.432673][T14461] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2281'. [ 434.543602][T14464] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2283'. [ 434.555796][ T3545] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.568394][T14455] netlink: 'syz.0.2278': attribute type 9 has an invalid length. [ 434.620360][ T3545] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.652561][ T3545] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.688789][T14468] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 434.730413][T14468] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 434.752335][ T3545] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.118664][T14492] tipc: Enabling of bearer rejected, failed to enable media [ 435.760231][T14520] __nla_validate_parse: 4 callbacks suppressed [ 435.760254][T14520] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2300'. [ 435.843163][T14522] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2298'. [ 435.870538][T14523] netlink: 'syz.0.2301': attribute type 25 has an invalid length. [ 436.098185][T14526] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 436.112166][T14526] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 436.128484][T14526] gretap1: entered promiscuous mode [ 436.133897][T14526] gretap1: entered allmulticast mode [ 436.144502][T14528] FAULT_INJECTION: forcing a failure. [ 436.144502][T14528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.158053][T14528] CPU: 0 UID: 0 PID: 14528 Comm: syz.0.2304 Not tainted syzkaller #0 PREEMPT(full) [ 436.158080][T14528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 436.158092][T14528] Call Trace: [ 436.158100][T14528] [ 436.158108][T14528] dump_stack_lvl+0x189/0x250 [ 436.158136][T14528] ? __pfx____ratelimit+0x10/0x10 [ 436.158156][T14528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.158178][T14528] ? __pfx__printk+0x10/0x10 [ 436.158224][T14528] should_fail_ex+0x414/0x560 [ 436.158261][T14528] _copy_to_user+0x31/0xb0 [ 436.158291][T14528] simple_read_from_buffer+0xe1/0x170 [ 436.158326][T14528] proc_fail_nth_read+0x1b3/0x220 [ 436.158353][T14528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.158380][T14528] ? rw_verify_area+0x2a6/0x4d0 [ 436.158405][T14528] ? __lock_acquire+0xab9/0xd20 [ 436.158432][T14528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.158457][T14528] vfs_read+0x200/0xa30 [ 436.158481][T14528] ? fdget_pos+0x247/0x320 [ 436.158504][T14528] ? __pfx___mutex_lock+0x10/0x10 [ 436.158527][T14528] ? __pfx_vfs_read+0x10/0x10 [ 436.158555][T14528] ? __fget_files+0x2a/0x420 [ 436.158579][T14528] ? __fget_files+0x3a0/0x420 [ 436.158596][T14528] ? __fget_files+0x2a/0x420 [ 436.158625][T14528] ksys_read+0x145/0x250 [ 436.158655][T14528] ? __pfx_ksys_read+0x10/0x10 [ 436.158678][T14528] ? rcu_is_watching+0x15/0xb0 [ 436.158705][T14528] ? do_syscall_64+0xbe/0x3b0 [ 436.158742][T14528] do_syscall_64+0xfa/0x3b0 [ 436.158762][T14528] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.158783][T14528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.158803][T14528] ? clear_bhb_loop+0x60/0xb0 [ 436.158828][T14528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.158847][T14528] RIP: 0033:0x7fef46f8d5bc [ 436.158866][T14528] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.158883][T14528] RSP: 002b:00007fef47dcd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.158905][T14528] RAX: ffffffffffffffda RBX: 00007fef471d5fa0 RCX: 00007fef46f8d5bc [ 436.158920][T14528] RDX: 000000000000000f RSI: 00007fef47dcd0a0 RDI: 0000000000000005 [ 436.158932][T14528] RBP: 00007fef47dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 436.158944][T14528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.158956][T14528] R13: 00007fef471d6038 R14: 00007fef471d5fa0 R15: 00007ffdaa8a8f88 [ 436.158991][T14528] [ 436.925726][T14551] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.787713][T14577] netlink: 'syz.2.2320': attribute type 1 has an invalid length. [ 437.941913][T14581] vlan2: entered allmulticast mode [ 437.971507][T14581] veth0_to_team: entered allmulticast mode [ 438.558421][T14619] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2333'. [ 438.763796][T14630] netlink: 'syz.0.2337': attribute type 1 has an invalid length. [ 438.776627][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 438.934853][T14635] vlan2: entered allmulticast mode [ 438.941828][T14635] team_slave_1: entered allmulticast mode [ 440.227006][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.236374][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.274305][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2347'. [ 440.345149][T14670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2350'. [ 440.516507][T14679] netlink: 'syz.9.2355': attribute type 19 has an invalid length. [ 440.579482][T14682] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2356'. [ 440.612019][T14686] netlink: 'syz.2.2358': attribute type 3 has an invalid length. [ 440.644458][T14686] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2358'. [ 440.679903][T14687] netlink: 'syz.2.2358': attribute type 10 has an invalid length. [ 440.768306][T14687] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.812325][T14687] bridge_slave_1: left allmulticast mode [ 440.818020][T14687] bridge_slave_1: left promiscuous mode [ 440.833851][T14697] netlink: 'syz.0.2361': attribute type 83 has an invalid length. [ 440.876092][T14687] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.956859][T14687] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 441.000355][T14700] tipc: Enabling of bearer rejected, failed to enable media [ 441.174964][T14708] syzkaller1: entered promiscuous mode [ 441.205392][T14708] syzkaller1: entered allmulticast mode [ 441.219127][T14710] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2364'. [ 441.526835][T14726] batadv_slave_0: entered promiscuous mode [ 441.666680][T14725] batadv_slave_0: left promiscuous mode [ 441.842648][T14738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2371'. [ 441.983003][T14742] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2373'. [ 442.281645][T14754] tipc: Enabled bearer , priority 0 [ 442.395349][T14754] syzkaller0: entered promiscuous mode [ 442.401522][T14754] syzkaller0: entered allmulticast mode [ 442.409548][T14754] tipc: Resetting bearer [ 442.419847][T14765] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2380'. [ 442.459023][T14765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.483918][T14750] tipc: Resetting bearer [ 442.574853][T14772] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2377'. [ 442.601490][T14772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2377'. [ 444.434944][T14750] tipc: Disabling bearer [ 444.469094][T11413] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.477200][T11413] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.488461][T11172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.503484][T14785] netlink: 'syz.6.2385': attribute type 12 has an invalid length. [ 444.536933][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2385'. [ 444.595968][T14794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.622798][T14785] netlink: 'syz.6.2385': attribute type 12 has an invalid length. [ 444.630064][T14796] netlink: 'syz.0.2387': attribute type 1 has an invalid length. [ 444.640694][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2385'. [ 444.686095][T14796] netlink: 'syz.0.2387': attribute type 1 has an invalid length. [ 444.801695][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2390'. [ 444.826598][T14803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2391'. [ 444.848473][T11172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.978729][T11166] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.979632][T14812] netlink: 'syz.3.2394': attribute type 6 has an invalid length. [ 445.384700][T14837] netlink: 'syz.9.2402': attribute type 1 has an invalid length. [ 445.515106][T14837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.649249][T14857] tipc: Enabled bearer , priority 0 [ 445.664366][T14860] netlink: 'syz.2.2407': attribute type 1 has an invalid length. [ 445.688082][T14861] syzkaller0: entered promiscuous mode [ 445.698349][T14861] syzkaller0: entered allmulticast mode [ 445.780131][T14860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.812660][T14860] vlan2: entered allmulticast mode [ 445.817977][T14860] bond1: entered allmulticast mode [ 445.942168][T14864] bond1: (slave gretap2): making interface the new active one [ 445.950771][T14864] gretap2: entered allmulticast mode [ 445.957722][T14864] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 445.968802][T14857] tipc: Resetting bearer [ 446.030281][T14856] tipc: Resetting bearer [ 446.091035][T14856] tipc: Disabling bearer [ 446.162133][T14882] netlink: 'syz.0.2411': attribute type 1 has an invalid length. [ 446.223705][T14883] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 446.260429][T14883] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 446.386793][T14895] __nla_validate_parse: 6 callbacks suppressed [ 446.386815][T14895] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2414'. [ 446.951822][T14932] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20001 [ 447.071898][T14938] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 447.087887][T14938] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 447.163802][T14943] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 447.172506][T14943] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2428'. [ 447.182853][T14943] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 447.400716][T14950] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2431'. [ 447.430823][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2431'. [ 447.476790][T14958] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2432'. [ 447.499137][ T5878] Bluetooth: hci7: command tx timeout [ 447.576653][T14958] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2432'. [ 447.741738][T14970] sit0: entered promiscuous mode [ 447.765082][T14970] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2435'. [ 447.768865][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 448.175208][T14992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2441'. [ 448.460675][T15005] only policy match revision 0 supported [ 448.460697][T15005] unable to load match [ 448.588115][T15010] ªªªªªª: renamed from vlan0 (while UP) [ 448.854447][T15027] syzkaller1: entered promiscuous mode [ 448.860691][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.882732][T15027] syzkaller1: entered allmulticast mode [ 449.110064][T15034] 8021q: adding VLAN 0 to HW filter on device bond17 [ 449.191237][T15043] vlan3: entered allmulticast mode [ 449.228890][T15043] bond17: entered allmulticast mode [ 449.801133][T15075] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2463'. [ 449.832326][T15075] netem: invalid attributes len -24 [ 449.837948][T15075] netem: change failed [ 449.915700][T15085] batman_adv: batadv0: Adding interface: wlan1 [ 449.927135][T15085] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.965532][T15085] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 449.992190][T15094] validate_nla: 6 callbacks suppressed [ 449.992211][T15094] netlink: 'syz.3.2471': attribute type 1 has an invalid length. [ 450.010779][T15081] tipc: Enabled bearer , priority 0 [ 450.017985][T15082] syzkaller0: entered promiscuous mode [ 450.033733][T15082] syzkaller0: entered allmulticast mode [ 450.088041][T15094] 8021q: adding VLAN 0 to HW filter on device bond18 [ 450.106002][T15082] tipc: Resetting bearer [ 450.159669][T15082] tipc: Disabling bearer [ 450.237102][T15094] vlan3: entered allmulticast mode [ 450.265888][T15094] bond18: entered allmulticast mode [ 450.591189][T15123] netlink: 'syz.3.2479': attribute type 1 has an invalid length. [ 450.704901][T15123] 8021q: adding VLAN 0 to HW filter on device bond19 [ 451.284414][T15158] netlink: 'syz.0.2490': attribute type 1 has an invalid length. [ 451.367630][T15158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.375805][T15163] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 451.465846][T15166] bond1: (slave gretap1): making interface the new active one [ 451.487403][T15166] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 451.558951][T15170] __nla_validate_parse: 3 callbacks suppressed [ 451.558976][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2495'. [ 451.569712][T15158] vlan2: entered allmulticast mode [ 451.583443][T15158] bond1: entered allmulticast mode [ 451.589241][T15158] gretap1: entered allmulticast mode [ 451.595971][T15158] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 452.066073][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2497'. [ 452.297521][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 452.341006][T15201] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2505'. [ 452.381430][T15206] netlink: 'syz.2.2507': attribute type 33 has an invalid length. [ 452.550345][T15214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2507'. [ 452.609254][T15220] netlink: 'syz.0.2510': attribute type 1 has an invalid length. [ 452.646604][T15220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.664714][T15223] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2511'. [ 452.695783][T15220] netlink: 'syz.0.2510': attribute type 1 has an invalid length. [ 452.725108][T15220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.772384][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2512'. [ 453.090032][T15245] netlink: 'syz.0.2516': attribute type 6 has an invalid length. [ 453.097816][T15245] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2516'. [ 453.753561][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2529'. [ 453.793546][T15285] batman_adv: batadv0: Removing interface: wlan1 [ 453.989370][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2530'. [ 454.013383][T15295] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.022538][T15295] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.074151][T15298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.495739][T15322] netlink: 'syz.0.2539': attribute type 21 has an invalid length. [ 454.604595][T15317] netlink: 'syz.3.2537': attribute type 10 has an invalid length. [ 454.845349][T15337] netlink: 'syz.9.2545': attribute type 1 has an invalid length. [ 454.894137][T15337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.012784][T15345] bond2: (slave gretap1): making interface the new active one [ 455.067635][T15345] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 455.161390][T15337] vlan0: entered allmulticast mode [ 455.187836][T15337] bond2: entered allmulticast mode [ 455.222406][T15337] gretap1: entered allmulticast mode [ 455.240842][T15337] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 455.435515][T15369] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20001 [ 455.462518][T15373] openvswitch: netlink: Duplicate or invalid key (type 0). [ 455.539197][T15373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.834255][T15395] syz_tun: entered allmulticast mode [ 455.909417][T15394] syz_tun: left allmulticast mode [ 456.334467][T15421] netlink: 'syz.2.2566': attribute type 1 has an invalid length. [ 456.749408][T15420] vlan0: entered allmulticast mode [ 456.766599][T15420] bridge0: entered allmulticast mode [ 456.828035][T15418] vlan0: entered allmulticast mode [ 456.954210][T15421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.965590][T15437] __nla_validate_parse: 3 callbacks suppressed [ 456.965611][T15437] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2569'. [ 457.022754][T15426] vlan2: entered allmulticast mode [ 457.053761][T15437] netlink: 'syz.3.2569': attribute type 1 has an invalid length. [ 457.062181][T15426] bond3: entered allmulticast mode [ 457.087345][T15437] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2569'. [ 457.101807][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 457.115390][T15441] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2572'. [ 457.125961][T15429] netlink: 'syz.3.2569': attribute type 29 has an invalid length. [ 457.147658][T15435] netlink: 'syz.3.2569': attribute type 29 has an invalid length. [ 457.324892][T15454] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.2573'. [ 457.498587][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.612341][T15469] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2580'. [ 457.629345][T15469] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2580'. [ 457.654155][T15469] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2580'. [ 457.665067][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2581'. [ 457.692253][T15472] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2581'. [ 457.870825][T15477] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 458.171811][T15477] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.196326][T15479] netlink: 'syz.3.2584': attribute type 2 has an invalid length. [ 458.220314][T15487] block nbd1: Unsupported socket: shutdown callout must be supported. [ 458.290451][T15484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.335926][T15484] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 458.374286][T15484] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 458.507477][T15488] veth3: entered promiscuous mode [ 458.535497][T15488] bond4: (slave veth3): Enslaving as an active interface with a down link [ 458.590492][T15510] tipc: Enabled bearer , priority 12 [ 458.909150][T15531] openvswitch: netlink: IP tunnel dst address not specified [ 459.083039][T15536] af_packet: tpacket_rcv: packet too big, clamped from 59478 to 4294967272. macoff=96 [ 459.489702][T15562] netlink: zone id is out of range [ 459.510616][T15562] netlink: zone id is out of range [ 459.517938][T15562] netlink: zone id is out of range [ 459.523203][T15562] netlink: zone id is out of range [ 459.528886][T15562] netlink: zone id is out of range [ 459.534141][T15562] netlink: zone id is out of range [ 459.541990][T15562] netlink: zone id is out of range [ 459.548085][T15562] netlink: zone id is out of range [ 459.554200][T15562] netlink: zone id is out of range [ 459.678536][T11172] tipc: Node number set to 2830443113 [ 460.060637][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 460.244788][T15602] netlink: 'syz.6.2620': attribute type 1 has an invalid length. [ 460.397903][T15605] bond8: (slave vxcan9): The slave device specified does not support setting the MAC address [ 460.472659][T15605] bond8: (slave vxcan9): Error -95 calling set_mac_address [ 460.522673][T15610] macvlan0: entered promiscuous mode [ 460.531344][T15610] macvlan0: entered allmulticast mode [ 460.581427][ T6780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.590883][ T6780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.829787][T15618] tipc: Started in network mode [ 460.834715][T15618] tipc: Node identity dec0f5968779, cluster identity 4711 [ 460.850964][T15618] tipc: Enabled bearer , priority 0 [ 460.861101][T15618] syzkaller0: entered promiscuous mode [ 460.866613][T15618] syzkaller0: entered allmulticast mode [ 460.921372][T15618] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 460.962939][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.971247][T15616] tipc: Resetting bearer [ 460.979052][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.988031][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.002616][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.011045][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.036027][T15616] tipc: Disabling bearer [ 461.122122][T15630] veth13: entered allmulticast mode [ 461.562706][T15626] chnl_net:caif_netlink_parms(): no params data found [ 461.865087][T15626] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.878630][T15626] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.890661][T15626] bridge_slave_0: entered allmulticast mode [ 461.908044][T15626] bridge_slave_0: entered promiscuous mode [ 461.919258][T15626] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.926516][T15626] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.934428][T15626] bridge_slave_1: entered allmulticast mode [ 461.944388][T15626] bridge_slave_1: entered promiscuous mode [ 461.955746][T15661] netlink: 'syz.6.2637': attribute type 1 has an invalid length. [ 462.109325][T15661] 8021q: adding VLAN 0 to HW filter on device bond9 [ 462.138044][T15671] vlan2: entered allmulticast mode [ 462.147734][T15671] bond9: entered allmulticast mode [ 462.184838][T15678] __nla_validate_parse: 42 callbacks suppressed [ 462.184858][T15678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2639'. [ 462.406497][T15626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.465428][T15626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.612024][T15690] vxcan1: entered allmulticast mode [ 462.785897][T15626] team0: Port device team_slave_0 added [ 462.837233][T15626] team0: Port device team_slave_1 added [ 462.887838][T15709] netlink: 'syz.9.2648': attribute type 1 has an invalid length. [ 462.895959][T15709] netlink: 'syz.9.2648': attribute type 4 has an invalid length. [ 462.914145][T15709] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2648'. [ 462.949575][T15626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.962345][T15626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.028394][T15626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.054622][T15626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.062246][T15626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.089887][T15626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.108387][ T5881] Bluetooth: hci2: command tx timeout [ 463.200868][T15626] hsr_slave_0: entered promiscuous mode [ 463.218118][T15626] hsr_slave_1: entered promiscuous mode [ 463.229281][T15626] debugfs: 'hsr0' already exists in 'hsr' [ 463.237014][T15626] Cannot create hsr debugfs directory [ 463.246174][T15723] tipc: Can't bind to reserved service type 2 [ 463.275856][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2654'. [ 463.384834][T15723] hsr_slave_0 (unregistering): left promiscuous mode [ 463.562816][T15733] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2658'. [ 463.905896][T15746] vlan0: entered promiscuous mode [ 463.931385][T15746] bridge0: entered promiscuous mode [ 463.977387][T15745] ipvlan2: entered promiscuous mode [ 464.086311][T15747] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ãÙdñ4QNªå¯¿$ûÌÌULÙv…D£øUDŒw [ 464.375048][T15765] netlink: 'syz.9.2668': attribute type 1 has an invalid length. [ 464.528998][T15765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.572601][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2668'. [ 465.181446][ T5881] Bluetooth: hci2: command tx timeout [ 465.306796][T15767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.547265][T15626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.584108][T15783] tipc: Started in network mode [ 465.594185][T15783] tipc: Node identity 56fa9956e55, cluster identity 4711 [ 465.597833][T15789] netlink: 'syz.6.2674': attribute type 1 has an invalid length. [ 465.608782][T15783] tipc: Enabled bearer , priority 0 [ 465.619203][T15783] net_ratelimit: 218 callbacks suppressed [ 465.619220][T15783] syzkaller0: mtu less than device minimum [ 465.690924][T15789] 8021q: adding VLAN 0 to HW filter on device bond10 [ 465.704157][T15784] syzkaller0: entered promiscuous mode [ 465.710286][T15784] syzkaller0: entered allmulticast mode [ 465.719953][T15626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.736199][T15626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.812576][T15626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.843045][T15789] vlan2: entered allmulticast mode [ 465.851421][T15789] bond10: entered allmulticast mode [ 465.904737][T15782] tipc: Resetting bearer [ 465.931817][T15782] tipc: Disabling bearer [ 466.209723][T15813] netlink: 200 bytes leftover after parsing attributes in process `syz.9.2681'. [ 466.239036][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2681'. [ 466.346195][T15626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.412286][T15826] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2685'. [ 466.482553][T15626] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.505436][T11413] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.512676][T11413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.549989][T11413] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.557235][T11413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.746356][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2689'. [ 466.767643][T15626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.976664][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2692'. [ 467.261634][ T5881] Bluetooth: hci2: command tx timeout [ 467.279574][T15855] netlink: 'syz.0.2694': attribute type 1 has an invalid length. [ 467.645204][T15626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.720863][T15868] __nla_validate_parse: 2 callbacks suppressed [ 467.720886][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2699'. [ 468.075627][T15626] veth0_vlan: entered promiscuous mode [ 468.122199][T15626] veth1_vlan: entered promiscuous mode [ 468.225986][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 468.241256][T15626] veth0_macvtap: entered promiscuous mode [ 468.281403][T15626] veth1_macvtap: entered promiscuous mode [ 468.343703][T15626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.400961][T15626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.454201][T15904] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2708'. [ 468.476902][T11413] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.496231][T11413] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.550490][T11413] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.579092][T11413] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.704788][T15909] macvlan0: left allmulticast mode [ 468.955267][T11415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.004369][T11415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.120273][ T6777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.146171][ T6777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.341066][ T5881] Bluetooth: hci2: command tx timeout [ 469.341793][T15933] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2719'. [ 469.527953][T15942] bond0: entered promiscuous mode [ 469.558353][T15942] bond0: entered allmulticast mode [ 469.648780][T15945] sit2: entered promiscuous mode [ 469.653787][T15945] sit2: entered allmulticast mode [ 469.978138][T15970] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20003 [ 470.088483][T15975] delete_channel: no stack [ 470.108469][T15978] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 470.159620][T15978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.195742][T15984] netlink: 'syz.6.2738': attribute type 58 has an invalid length. [ 470.204702][T15984] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2738'. [ 470.255712][T15978] vlan2: entered allmulticast mode [ 470.264613][T15978] bond2: entered allmulticast mode [ 470.972755][T16012] bond3: entered promiscuous mode [ 470.979824][T16012] bond3: entered allmulticast mode [ 470.988059][T16012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.995489][T16020] netlink: 'syz.6.2752': attribute type 1 has an invalid length. [ 471.006228][T16021] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2750'. [ 471.055007][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2753'. [ 471.069040][T16020] 8021q: adding VLAN 0 to HW filter on device bond11 [ 471.108551][T16028] 8021q: VLANs not supported on wg0 [ 471.129933][T16020] vlan2: entered allmulticast mode [ 471.135112][T16020] bond11: entered allmulticast mode [ 471.152794][T16029] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2753'. [ 471.210202][T16033] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2753'. [ 471.379609][T16041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2756'. [ 471.694536][T16049] tipc: Enabled bearer , priority 0 [ 471.844184][T16065] netlink: 'syz.6.2764': attribute type 58 has an invalid length. [ 471.914749][T16049] tipc: Disabling bearer [ 472.076423][T16079] netlink: 'syz.0.2768': attribute type 1 has an invalid length. [ 472.145483][T16079] 8021q: adding VLAN 0 to HW filter on device bond4 [ 472.236221][T16079] vlan2: entered allmulticast mode [ 472.268337][T16079] bond4: entered allmulticast mode [ 472.326076][T16097] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 472.410416][T16098] dvmrp0: entered allmulticast mode [ 472.458631][T16106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.586354][T16109] bond0: entered promiscuous mode [ 472.593684][T16109] bond_slave_0: entered promiscuous mode [ 472.599904][T16109] bond_slave_1: entered promiscuous mode [ 472.607354][T16109] bond0: left promiscuous mode [ 472.612771][T16109] bond_slave_0: left promiscuous mode [ 472.620627][T16109] bond_slave_1: left promiscuous mode [ 473.717385][T16159] __nla_validate_parse: 4 callbacks suppressed [ 473.717405][T16159] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2793'. [ 473.840759][T16168] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2796'. [ 473.851913][T16168] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 473.860375][T16168] openvswitch: netlink: Message has 6332 unknown bytes. [ 473.973988][T16154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.131294][T16154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.177268][T16178] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 474.199186][T16176] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2798'. [ 474.214442][T16176] netlink: 50 bytes leftover after parsing attributes in process `syz.9.2798'. [ 474.224812][T16176] netlink: 50 bytes leftover after parsing attributes in process `syz.9.2798'. [ 474.280451][T16154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.430474][T16154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.587307][ T6777] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.683466][T11412] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.711571][ T6780] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.767281][ T3545] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.118021][T16216] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 475.418615][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 475.713411][T11413] tipc: Subscription rejected, illegal request [ 475.727105][T16241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2818'. [ 475.750149][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 475.980377][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'. [ 476.210948][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2823'. [ 476.259154][T16264] netlink: 'syz.6.2823': attribute type 8 has an invalid length. [ 476.350224][T16266] netlink: 'syz.9.2824': attribute type 29 has an invalid length. [ 476.372811][T16266] netlink: 'syz.9.2824': attribute type 29 has an invalid length. [ 476.383033][T16266] netlink: 'syz.9.2824': attribute type 29 has an invalid length. [ 476.409128][T16266] netlink: 'syz.9.2824': attribute type 29 has an invalid length. [ 476.451478][T16275] netlink: 'syz.6.2828': attribute type 10 has an invalid length. [ 476.526045][T16275] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 476.561171][T16275] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 476.573451][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'. [ 476.589092][T16275] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 476.617248][T16282] netlink: 'syz.0.2829': attribute type 7 has an invalid length. [ 476.889636][T16298] vxlan1: entered promiscuous mode [ 476.908116][T16298] vxlan1: entered allmulticast mode [ 477.756344][T16350] netlink: 'syz.3.2850': attribute type 1 has an invalid length. [ 477.879848][T16350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.966326][T16355] bond1: (slave gretap1): making interface the new active one [ 477.976134][T16355] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 478.004273][T16350] vlan2: entered allmulticast mode [ 478.010295][T16350] bond1: entered allmulticast mode [ 478.015457][T16350] gretap1: entered allmulticast mode [ 478.023126][T16350] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 478.066222][T16352] pimreg3: entered allmulticast mode [ 478.110740][T16367] pim6reg1: entered promiscuous mode [ 478.132086][T16367] pim6reg1: entered allmulticast mode [ 478.241780][T16376] netlink: 'syz.9.2858': attribute type 1 has an invalid length. [ 478.273134][T16378] netlink: 'syz.3.2859': attribute type 5 has an invalid length. [ 478.549522][T16394] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 478.573274][T16389] team0: Port device dummy0 added [ 478.586886][T16395] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 478.603561][T16395] team0: Failed to send options change via netlink (err -105) [ 478.612036][T16395] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 478.629978][T16395] team0: Port device dummy0 removed [ 478.644133][T16395] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 478.737727][T16400] IPv6: addrconf: prefix option has invalid lifetime [ 478.789326][T16400] IPv6: addrconf: prefix option has invalid lifetime [ 478.841720][ T5942] IPVS: starting estimator thread 0... [ 478.889561][T16407] !: renamed from dummy0 [ 478.939500][T16406] IPVS: using max 24 ests per chain, 57600 per kthread [ 478.964504][T16411] tipc: Enabled bearer , priority 0 [ 478.993223][T16411] syzkaller0: entered promiscuous mode [ 479.020881][T16411] syzkaller0: entered allmulticast mode [ 479.037063][T16413] __nla_validate_parse: 11 callbacks suppressed [ 479.037080][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'. [ 479.107470][T16411] tipc: Resetting bearer [ 479.115620][T16410] tipc: Resetting bearer [ 479.140467][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 479.169052][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 479.181690][T16410] tipc: Disabling bearer [ 479.201937][T16419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2874'. [ 479.246097][T16422] openvswitch: netlink: Invalid VLAN frame [ 479.340304][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'. [ 479.386279][T16426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'. [ 479.760419][T16449] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2886'. [ 479.776350][T16451] sctp: [Deprecated]: syz.0.2887 (pid 16451) Use of int in max_burst socket option. [ 479.776350][T16451] Use struct sctp_assoc_value instead [ 480.017108][T16459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2889'. [ 480.040121][T16458] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 480.165444][T16459] pim6reg1: entered promiscuous mode [ 480.184672][T16459] pim6reg1: entered allmulticast mode [ 480.262254][T16473] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2893'. [ 480.728050][T16473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.748046][T16473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.780689][T16473] bond0 (unregistering): (slave 0!): Releasing backup interface [ 480.790506][T16473] bond0 (unregistering): Released all slaves [ 481.069490][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2900'. [ 481.116219][T16511] vxlan0: entered promiscuous mode [ 481.126465][T16511] vxlan0: entered allmulticast mode [ 481.171980][ T6777] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.221960][ T6777] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.252371][ T6777] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.299578][ T3523] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.369320][T16521] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 481.388163][T16525] validate_nla: 8 callbacks suppressed [ 481.395527][T16525] netlink: 'syz.6.2906': attribute type 2 has an invalid length. [ 481.671598][T16544] netlink: 'syz.9.2910': attribute type 7 has an invalid length. [ 481.724830][ T6777] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.759545][ T6777] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.767964][ T6777] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.808510][ T6777] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.116212][T16564] netlink: 'syz.9.2917': attribute type 1 has an invalid length. [ 482.344949][T16576] bond6: (slave gretap2): making interface the new active one [ 482.353984][T16576] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 482.394941][T16585] 8021q: adding VLAN 0 to HW filter on device bond5 [ 482.449985][T16568] 8021q: adding VLAN 0 to HW filter on device bond5 [ 482.457385][T16568] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 482.483620][T16568] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 482.705509][T16608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.778509][ T5878] Bluetooth: hci2: command 0x0405 tx timeout [ 483.007218][T16622] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 483.102495][T16622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 483.202926][T16629] vlan2: entered allmulticast mode [ 483.208096][T16629] bond5: entered allmulticast mode [ 483.430334][T16642] syzkaller1: entered promiscuous mode [ 483.466365][T16642] syzkaller1: entered allmulticast mode [ 484.376949][T16690] netlink: 'syz.0.2952': attribute type 1 has an invalid length. [ 484.433830][T16690] 8021q: adding VLAN 0 to HW filter on device bond6 [ 484.462353][T16690] vlan2: entered allmulticast mode [ 484.467607][T16690] bond6: entered allmulticast mode [ 484.530643][T16702] __nla_validate_parse: 7 callbacks suppressed [ 484.530664][T16702] netlink: 1044 bytes leftover after parsing attributes in process `syz.9.2954'. [ 484.541605][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2956'. [ 484.560538][T16704] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2955'. [ 484.809836][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2960'. [ 484.855057][T16715] netlink: 'syz.6.2960': attribute type 1 has an invalid length. [ 484.878856][T16715] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2960'. [ 484.903046][T16720] tipc: Started in network mode [ 484.911225][T16720] tipc: Node identity ac1414aa, cluster identity 4711 [ 484.919314][T16720] tipc: Enabling of bearer rejected, failed to enable media [ 484.967507][T16720] gtp0: entered promiscuous mode [ 484.968711][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2963'. [ 484.992559][T16721] netlink: 'syz.2.2961': attribute type 10 has an invalid length. [ 484.994341][T16720] gtp0: entered allmulticast mode [ 485.012611][T16721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2961'. [ 485.042996][T16721] dummy0: entered promiscuous mode [ 485.054639][T16721] bridge0: port 2(dummy0) entered blocking state [ 485.088613][T16721] bridge0: port 2(dummy0) entered disabled state [ 485.102002][T16721] dummy0: entered allmulticast mode [ 485.116607][T16721] bridge0: port 2(dummy0) entered blocking state [ 485.123316][T16721] bridge0: port 2(dummy0) entered forwarding state [ 485.351083][T16741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2970'. [ 485.389632][T16741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.405635][T16747] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2969'. [ 485.416841][T16747] xt_socket: unknown flags 0xd0 [ 485.607624][T16760] netlink: 'syz.0.2975': attribute type 2 has an invalid length. [ 485.629570][T16759] netlink: 'syz.9.2977': attribute type 1 has an invalid length. [ 485.816722][T16769] bond7: (slave geneve2): making interface the new active one [ 485.841654][T16769] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 485.856858][ T6777] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 485.876083][ T6777] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 485.897721][ T6777] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 485.916159][ T6777] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 486.163461][T16760] sctp: [Deprecated]: syz.0.2975 (pid 16760) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.163461][T16760] Use struct sctp_sack_info instead [ 486.272671][T16781] veth0_to_team: entered promiscuous mode [ 486.292218][T16781] veth0_to_team: entered allmulticast mode [ 486.334414][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2982'. [ 486.405381][T16783] netlink: 'syz.6.2982': attribute type 14 has an invalid length. [ 486.423446][T16783] netlink: 'syz.6.2982': attribute type 13 has an invalid length. [ 486.738229][T16802] IPv6: addrconf: prefix option has invalid lifetime [ 487.202540][T16822] netlink: 'syz.0.2996': attribute type 3 has an invalid length. [ 487.783740][T16848] C: renamed from lo (while UP) [ 487.820641][T16848] netlink: 'syz.0.3005': attribute type 2 has an invalid length. [ 488.074509][T16857] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 488.379401][ T5878] Bluetooth: hci4: command 0x0406 tx timeout [ 488.679654][T16880] bridge8: port 1(veth15) entered blocking state [ 488.697554][T16880] bridge8: port 1(veth15) entered disabled state [ 488.707817][T16880] veth15: entered allmulticast mode [ 488.726838][T16880] veth15: entered promiscuous mode [ 488.762635][T16892] vlan2: entered allmulticast mode [ 488.768048][T16892] veth0_to_bond: entered allmulticast mode [ 488.774520][T16892] bridge8: port 2(vlan2) entered blocking state [ 488.781455][T16892] bridge8: port 2(vlan2) entered disabled state [ 488.790757][T16892] vlan2: entered promiscuous mode [ 488.796127][T16892] veth0_to_bond: entered promiscuous mode [ 488.807120][T16896] netlink: 'syz.0.3022': attribute type 4 has an invalid length. [ 489.430609][T16901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.449160][T16901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.463527][T16901] bond0 (unregistering): Released all slaves [ 489.759602][T16937] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 489.783061][T16939] __nla_validate_parse: 13 callbacks suppressed [ 489.783081][T16939] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3031'. [ 489.787757][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3030'. [ 489.810263][T16944] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3031'. [ 489.824668][T16940] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3031'. [ 490.017587][T16952] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3035'. [ 490.254324][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3038'. [ 490.692423][T16985] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20003 [ 490.774946][T16989] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3044'. [ 490.802949][T16995] netlink: 212288 bytes leftover after parsing attributes in process `syz.2.3046'. [ 490.823776][T16989] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3044'. [ 490.840512][T16989] netlink: 19 bytes leftover after parsing attributes in process `syz.6.3044'. [ 490.994437][T17002] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 491.036210][T17005] IPVS: set_ctl: invalid protocol: 58 172.20.20.11:21 [ 491.053466][T17003] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 492.151104][T17050] vlan2: entered allmulticast mode [ 492.173624][T17050] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 492.350803][T17059] vlan0: entered promiscuous mode [ 492.368537][T17059] bridge0: entered promiscuous mode [ 492.883074][T17085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.891596][T17085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.907953][T17085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.918464][T17085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.991198][T17144] netlink: 'syz.0.3086': attribute type 12 has an invalid length. [ 495.022882][ T6780] wlan1: Trigger new scan to find an IBSS to join [ 495.816162][T17145] vlan0: entered allmulticast mode [ 495.824736][T17145] hsr0: entered allmulticast mode [ 495.843294][T17145] hsr_slave_1: entered allmulticast mode [ 495.937875][T17153] __nla_validate_parse: 7 callbacks suppressed [ 495.937894][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3088'. [ 496.175961][T17172] syzkaller1: entered promiscuous mode [ 496.225788][T17172] syzkaller1: entered allmulticast mode [ 496.456703][T17179] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3093'. [ 496.511141][T17182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3093'. [ 496.566419][T17179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3093'. [ 496.684728][T17191] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3097'. [ 496.831891][T17197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3099'. [ 497.025430][T17205] syz.2.3103: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 497.041098][T17205] CPU: 0 UID: 0 PID: 17205 Comm: syz.2.3103 Not tainted syzkaller #0 PREEMPT(full) [ 497.041129][T17205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.041142][T17205] Call Trace: [ 497.041151][T17205] [ 497.041161][T17205] dump_stack_lvl+0x189/0x250 [ 497.041193][T17205] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 497.041225][T17205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.041248][T17205] ? __pfx__printk+0x10/0x10 [ 497.041277][T17205] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 497.041303][T17205] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 497.041336][T17205] warn_alloc+0x214/0x310 [ 497.041370][T17205] ? stack_depot_save_flags+0x40/0x860 [ 497.041404][T17205] ? __pfx_warn_alloc+0x10/0x10 [ 497.041439][T17205] ? kasan_save_track+0x4f/0x80 [ 497.041467][T17205] ? xskq_create+0x56/0x170 [ 497.041486][T17205] ? xsk_init_queue+0xb0/0x110 [ 497.041503][T17205] ? xsk_setsockopt+0x4dc/0x8d0 [ 497.041531][T17205] ? do_sock_setsockopt+0x17c/0x1b0 [ 497.041555][T17205] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 497.041579][T17205] ? do_syscall_64+0xfa/0x3b0 [ 497.041601][T17205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.041632][T17205] __vmalloc_node_range_noprof+0x125/0x12f0 [ 497.041710][T17205] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 497.041743][T17205] ? xskq_create+0x56/0x170 [ 497.041767][T17205] ? __kasan_kmalloc+0x93/0xb0 [ 497.041800][T17205] vmalloc_user_noprof+0xad/0xf0 [ 497.041832][T17205] ? xskq_create+0xbf/0x170 [ 497.041854][T17205] xskq_create+0xbf/0x170 [ 497.041879][T17205] xsk_init_queue+0xb0/0x110 [ 497.041903][T17205] xsk_setsockopt+0x4dc/0x8d0 [ 497.041937][T17205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 497.041965][T17205] ? __pfx_aa_sk_perm+0x10/0x10 [ 497.042008][T17205] ? aa_sock_opt_perm+0xff/0x1b0 [ 497.042034][T17205] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 497.042057][T17205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 497.042091][T17205] do_sock_setsockopt+0x17c/0x1b0 [ 497.042123][T17205] __x64_sys_setsockopt+0x13f/0x1b0 [ 497.042156][T17205] do_syscall_64+0xfa/0x3b0 [ 497.042178][T17205] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.042200][T17205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.042220][T17205] ? clear_bhb_loop+0x60/0xb0 [ 497.042247][T17205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.042267][T17205] RIP: 0033:0x7f12c458eba9 [ 497.042287][T17205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.042306][T17205] RSP: 002b:00007f12c5357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 497.042330][T17205] RAX: ffffffffffffffda RBX: 00007f12c47d5fa0 RCX: 00007f12c458eba9 [ 497.042345][T17205] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 497.042358][T17205] RBP: 00007f12c4611e19 R08: 0000000000000004 R09: 0000000000000000 [ 497.042372][T17205] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.042384][T17205] R13: 00007f12c47d6038 R14: 00007f12c47d5fa0 R15: 00007ffda4e47698 [ 497.042422][T17205] [ 497.042766][T17205] Mem-Info: [ 497.074081][T17206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3105'. [ 497.078924][T17205] active_anon:5179 inactive_anon:0 isolated_anon:0 [ 497.078924][T17205] active_file:3624 inactive_file:40038 isolated_file:0 [ 497.078924][T17205] unevictable:768 dirty:56 writeback:0 [ 497.078924][T17205] slab_reclaimable:13313 slab_unreclaimable:126766 [ 497.078924][T17205] mapped:44558 shmem:1803 pagetables:1166 [ 497.078924][T17205] sec_pagetables:0 bounce:0 [ 497.078924][T17205] kernel_misc_reclaimable:0 [ 497.078924][T17205] free:1260589 free_pcp:12165 free_cma:0 [ 497.142513][T17206] netlink: 'syz.0.3105': attribute type 12 has an invalid length. [ 497.146760][T17205] Node 0 active_anon:20772kB inactive_anon:0kB active_file:14496kB inactive_file:159952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178224kB dirty:224kB writeback:0kB shmem:5680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17116kB pagetables:4496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 497.458652][T17205] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 497.497598][T17205] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 497.535481][T17205] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 497.547903][T17205] Node 0 DMA32 free:1126556kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20724kB inactive_anon:0kB active_file:14496kB inactive_file:158372kB unevictable:1536kB writepending:224kB present:3129332kB managed:2557420kB mlocked:0kB bounce:0kB free_pcp:34960kB local_pcp:18844kB free_cma:0kB [ 497.591726][T17205] lowmem_reserve[]: 0 0 1 1 1 [ 497.596597][T17205] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 497.647145][T17205] lowmem_reserve[]: 0 0 0 0 0 [ 497.657668][T17205] Node 1 Normal free:3887108kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15840kB local_pcp:7904kB free_cma:0kB [ 497.735292][T17205] lowmem_reserve[]: 0 0 0 0 0 [ 497.741293][T17205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 497.765141][T17205] Node 0 DMA32: 1359*4kB (UME) 456*8kB (UM) 374*16kB (UME) 840*32kB (UME) 207*64kB (UM) 40*128kB (UM) 11*256kB (UME) 5*512kB (UME) 0*1024kB 2*2048kB (ME) 258*4096kB (M) = 1126556kB [ 497.793919][T17205] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 497.810811][T17220] !€ÿ: renamed from bond_slave_0 [ 497.816023][T17205] Node 1 Normal: 169*4kB (UM) 52*8kB (UME) 32*16kB (UME) 156*32kB (UME) 47*64kB (UME) 13*128kB (UME) 2*256kB (M) 5*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3887108kB [ 497.844886][T17223] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3109'. [ 497.885428][T17205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 497.900728][T17205] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 497.937353][T17205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 497.986017][T17205] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 498.005068][T17205] 45463 total pagecache pages [ 498.015312][T17205] 0 pages in swap cache [ 498.026986][T17205] Free swap = 124996kB [ 498.032576][T17205] Total swap = 124996kB [ 498.036767][T17205] 2097051 pages RAM [ 498.047990][T17205] 0 pages HighMem/MovableOnly [ 498.054408][T17205] 425670 pages reserved [ 498.060407][T11412] wlan1: Trigger new scan to find an IBSS to join [ 498.069359][T17231] netlink: 'syz.9.3112': attribute type 1 has an invalid length. [ 498.083521][T17205] 0 pages cma reserved [ 498.085532][T17226] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 498.202435][T17231] 8021q: adding VLAN 0 to HW filter on device bond8 [ 498.214340][T17234] netlink: 'syz.0.3113': attribute type 29 has an invalid length. [ 498.223104][T17237] netlink: 'syz.0.3113': attribute type 29 has an invalid length. [ 498.227682][T17234] netlink: 'syz.0.3113': attribute type 83 has an invalid length. [ 498.306986][T17234] netlink: 'syz.0.3113': attribute type 29 has an invalid length. [ 498.325788][T17234] netlink: 'syz.0.3113': attribute type 29 has an invalid length. [ 498.340102][T17242] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3115'. [ 498.358484][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3115'. [ 498.817494][T17265] netlink: 'syz.2.3123': attribute type 5 has an invalid length. [ 498.989021][T11411] wlan1: Creating new IBSS network, BSSID b2:2c:8e:77:9b:d6 [ 499.052563][T17280] netlink: 'syz.2.3127': attribute type 1 has an invalid length. [ 499.151124][T17280] 8021q: adding VLAN 0 to HW filter on device bond6 [ 499.548407][T17305] netlink: 'syz.6.3133': attribute type 16 has an invalid length. [ 499.550735][T17307] netlink: 'syz.2.3134': attribute type 1 has an invalid length. [ 499.600112][T17306] tipc: Enabling of bearer rejected, failed to enable media [ 499.606638][T17305] netlink: 'syz.6.3133': attribute type 17 has an invalid length. [ 500.094658][T17337] netlink: 'syz.2.3145': attribute type 1 has an invalid length. [ 500.147346][T17337] 8021q: adding VLAN 0 to HW filter on device bond7 [ 500.220998][T17347] netlink: 'syz.6.3144': attribute type 1 has an invalid length. [ 500.241211][T17347] netlink: 'syz.6.3144': attribute type 2 has an invalid length. [ 500.807898][T17370] tipc: Enabled bearer , priority 0 [ 500.818008][T17370] syzkaller0: entered promiscuous mode [ 500.823974][T17370] syzkaller0: entered allmulticast mode [ 500.856027][T17370] syzkaller0: mtu less than device minimum [ 500.877505][T17368] tipc: Resetting bearer [ 500.917828][T17368] tipc: Disabling bearer [ 500.931292][T17373] lo: entered promiscuous mode [ 500.936765][T17373] netlink: 'syz.6.3154': attribute type 2 has an invalid length. [ 500.957944][T17373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.074778][T17384] netlink: 'syz.0.3157': attribute type 1 has an invalid length. [ 501.147000][T17384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.496612][T17408] __nla_validate_parse: 43 callbacks suppressed [ 501.496633][T17408] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3165'. [ 501.545276][T17407] vlan2: entered promiscuous mode [ 501.560548][T17407] vlan2: entered allmulticast mode [ 501.582099][T17407] hsr_slave_1: entered allmulticast mode [ 501.774592][T17426] netlink: 'syz.6.3169': attribute type 10 has an invalid length. [ 501.788774][T17426] hsr0: mtu greater than device maximum [ 501.814538][T17424] tipc: Enabled bearer , priority 0 [ 501.829787][T17424] tipc: Resetting bearer [ 501.860535][T17421] tipc: Disabling bearer [ 502.044571][T17435] 8021q: adding VLAN 0 to HW filter on device bond8 [ 502.051120][T17432] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3172'. [ 502.071158][T17438] bond13: (slave gretap2): making interface the new active one [ 502.078352][T17442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3175'. [ 502.079809][T17438] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 502.092531][T17437] netlink: 596 bytes leftover after parsing attributes in process `syz.9.3174'. [ 502.102906][T17432] 8021q: adding VLAN 0 to HW filter on device bond13 [ 502.249975][T17437] veth0: entered promiscuous mode [ 502.255455][T17443] veth0: left promiscuous mode [ 502.278071][T17451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3178'. [ 502.457402][T17461] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 502.597665][T17467] netlink: 348 bytes leftover after parsing attributes in process `syz.9.3183'. [ 502.821088][T17473] 8021q: adding VLAN 0 to HW filter on device bond10 [ 502.832498][T17473] bond9: (slave bond10): making interface the new active one [ 502.841292][T17473] bond9: (slave bond10): Enslaving as an active interface with an up link [ 502.881064][T17473] bond9: (slave gretap2): Enslaving as a backup interface with an up link [ 502.897978][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3186'. [ 502.911032][T17473] 8021q: adding VLAN 0 to HW filter on device bond9 [ 503.076864][T17485] 8021q: adding VLAN 0 to HW filter on device bond11 [ 503.490764][T17503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 503.976791][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3204'. [ 504.099398][T17535] tipc: Enabled bearer , priority 0 [ 504.107161][T17535] syzkaller0: entered promiscuous mode [ 504.112991][T17535] syzkaller0: entered allmulticast mode [ 504.152494][T17535] tipc: Resetting bearer [ 504.183141][T17534] tipc: Resetting bearer [ 504.229560][T17534] tipc: Disabling bearer [ 504.297418][T17540] validate_nla: 5 callbacks suppressed [ 504.297440][T17540] netlink: 'syz.9.3207': attribute type 1 has an invalid length. [ 504.402977][T17540] 8021q: adding VLAN 0 to HW filter on device bond9 [ 504.459211][T17549] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3210'. [ 505.297186][T17586] dummy0: left allmulticast mode [ 505.303457][T17586] bridge0: port 2(dummy0) entered disabled state [ 505.324396][T17586] bridge_slave_0: left allmulticast mode [ 505.336023][T17586] bridge_slave_0: left promiscuous mode [ 505.343812][T17586] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.396233][T17591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.427436][T17592] netlink: 'syz.6.3223': attribute type 1 has an invalid length. [ 505.926988][T17617] bond9: entered promiscuous mode [ 505.935731][T17617] bond9: entered allmulticast mode [ 505.941695][T17617] 8021q: adding VLAN 0 to HW filter on device bond9 [ 506.030668][T17621] bond10: entered promiscuous mode [ 506.041566][T17621] bond10: entered allmulticast mode [ 506.051830][T17621] 8021q: adding VLAN 0 to HW filter on device bond10 [ 506.086576][T17626] netlink: 'syz.0.3232': attribute type 4 has an invalid length. [ 506.509868][T17641] bond0: (slave wlan1): Releasing backup interface [ 506.527851][T17641] mac80211_hwsim hwsim26 wlan1: left promiscuous mode [ 506.558966][T17641] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 506.579096][T17641] bond2: (slave gretap1): Releasing active interface [ 506.600478][T17641] gretap1: left allmulticast mode [ 506.630254][T17641] veth15: left allmulticast mode [ 506.653370][T17641] veth15: left promiscuous mode [ 506.670856][T17641] bridge8: port 1(veth15) entered disabled state [ 506.697116][T17641] vlan2: left promiscuous mode [ 506.712165][T17641] veth0_to_bond: left promiscuous mode [ 506.730500][T17641] bridge8: port 2(vlan2) entered disabled state [ 506.771847][T17641] bond13: (slave gretap2): Releasing active interface [ 507.182589][ T5878] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 507.193215][ T5878] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 507.208851][ T5878] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 507.222498][ T5878] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 507.234035][ T5878] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 507.412146][T17662] netlink: 'syz.2.3243': attribute type 1 has an invalid length. [ 507.607273][T17676] __nla_validate_parse: 10 callbacks suppressed [ 507.607293][T17676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3245'. [ 507.632032][T17675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3246'. [ 507.694588][T17646] chnl_net:caif_netlink_parms(): no params data found [ 507.746715][T17684] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3248'. [ 507.918494][T17692] sctp: [Deprecated]: syz.2.3250 (pid 17692) Use of int in maxseg socket option. [ 507.918494][T17692] Use struct sctp_assoc_value instead [ 508.101789][T17646] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.117281][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.132131][T17646] bridge_slave_0: entered allmulticast mode [ 508.166269][T17646] bridge_slave_0: entered promiscuous mode [ 508.192795][T17705] tipc: Enabled bearer , priority 0 [ 508.217527][T17646] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.235685][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.252563][T17646] bridge_slave_1: entered allmulticast mode [ 508.264982][T17646] bridge_slave_1: entered promiscuous mode [ 508.410041][T17698] syzkaller0: entered promiscuous mode [ 508.415732][T17698] syzkaller0: entered allmulticast mode [ 508.424323][T17698] tipc: Resetting bearer [ 508.519008][T17696] tipc: Resetting bearer [ 508.600404][T17719] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3255'. [ 509.248700][T11169] tipc: Node number set to 2886997162 [ 509.274922][ T5878] Bluetooth: hci8: command tx timeout [ 509.338753][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.293673][T17696] tipc: Disabling bearer [ 511.328981][T17646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.338363][ T5878] Bluetooth: hci8: command tx timeout [ 511.381216][T17646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.623283][T17646] team0: Port device team_slave_0 added [ 511.655959][T17646] team0: Port device team_slave_1 added [ 511.695863][T17771] netlink: 'syz.9.3266': attribute type 1 has an invalid length. [ 511.846238][T17771] 8021q: adding VLAN 0 to HW filter on device bond10 [ 511.849091][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3269'. [ 511.889340][T17646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.896340][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.923597][T17790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3269'. [ 511.942513][T17646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.957384][T17646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.964447][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.991731][T17646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.093175][T17646] hsr_slave_0: entered promiscuous mode [ 512.111570][T17793] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3270'. [ 512.122312][T17646] hsr_slave_1: entered promiscuous mode [ 512.129438][T17646] debugfs: 'hsr0' already exists in 'hsr' [ 512.135206][T17646] Cannot create hsr debugfs directory [ 512.626665][T17816] netlink: 'syz.6.3279': attribute type 1 has an invalid length. [ 512.703437][T17816] 8021q: adding VLAN 0 to HW filter on device bond15 [ 512.813865][T17816] vlan3: entered allmulticast mode [ 512.834230][T17816] bond15: entered allmulticast mode [ 512.993669][T17834] netlink: 'syz.0.3283': attribute type 5 has an invalid length. [ 513.136081][T17831] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3281'. [ 513.418894][ T5881] Bluetooth: hci8: command tx timeout [ 513.465232][T17851] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 513.541371][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3288'. [ 513.572796][T17853] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 513.603432][T17853] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 513.715927][T17863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3291'. [ 513.813200][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3290'. [ 513.997610][ T5881] Bluetooth: hci1: command 0x0406 tx timeout [ 514.164612][T17872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3294'. [ 514.272210][T17879] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3294'. [ 514.318073][T17646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 514.355471][T17646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 514.401214][T17646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 514.430818][T17646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 514.494664][T17881] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3295'. [ 514.705882][T17889] netlink: 'syz.6.3296': attribute type 4 has an invalid length. [ 514.744488][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3296'. [ 514.817519][T17646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.925561][T17646] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.992648][T11415] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.999862][T11415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.067420][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.074721][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.238371][T17899] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3301'. [ 515.498764][ T5878] Bluetooth: hci8: command tx timeout [ 515.892631][T17646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.013481][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3309'. [ 516.121976][T17930] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 516.229359][T17646] veth0_vlan: entered promiscuous mode [ 516.302739][T17646] veth1_vlan: entered promiscuous mode [ 516.453963][T17646] veth0_macvtap: entered promiscuous mode [ 516.516379][T17646] veth1_macvtap: entered promiscuous mode [ 516.587222][T17957] bridge_slave_0: default FDB implementation only supports local addresses [ 516.696354][T17646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.714720][T17646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.720910][T17964] netlink: 'syz.0.3320': attribute type 6 has an invalid length. [ 516.729964][ T6780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.731004][ T6780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.763336][ T6780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.806864][ T3523] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.904547][T11166] IPVS: starting estimator thread 0... [ 517.008879][T17978] IPVS: using max 25 ests per chain, 60000 per kthread [ 517.042851][T17985] netlink: 'syz.0.3325': attribute type 16 has an invalid length. [ 517.084794][T17981] bond16: entered promiscuous mode [ 517.090579][T17981] bond16: entered allmulticast mode [ 517.097035][T17981] 8021q: adding VLAN 0 to HW filter on device bond16 [ 517.106246][T17985] netlink: 'syz.0.3325': attribute type 3 has an invalid length. [ 517.463348][T17981] bond16 (unregistering): Released all slaves [ 517.595562][T17992] : entered promiscuous mode [ 517.820627][ T6777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.862360][ T6777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.034839][T18020] netlink: 'syz.2.3334': attribute type 1 has an invalid length. [ 518.069366][ T6780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.087593][ T6780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.141760][T18020] 8021q: adding VLAN 0 to HW filter on device bond11 [ 518.186595][T18011] __nla_validate_parse: 6 callbacks suppressed [ 518.186616][T18011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3332'. [ 518.247745][T18011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3332'. [ 518.258807][T18011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3332'. [ 518.284787][T18011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3332'. [ 518.472233][T18040] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3336'. [ 518.491647][T18041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3337'. [ 518.904106][T18055] netlink: 'syz.6.3341': attribute type 1 has an invalid length. [ 519.052696][T18066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3346'. [ 519.081308][T18067] openvswitch: netlink: Actions may not be safe on all matching packets [ 519.146524][T18072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3347'. [ 519.169540][T18072] netlink: 'syz.1.3347': attribute type 2 has an invalid length. [ 519.309904][T18073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3347'. [ 519.335098][T18075] netlink: 'syz.0.3348': attribute type 1 has an invalid length. [ 519.387608][T18075] 8021q: adding VLAN 0 to HW filter on device bond13 [ 520.045302][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'. [ 520.472963][T18101] syzkaller0: entered promiscuous mode [ 520.498414][T18101] syzkaller0: entered allmulticast mode [ 520.805292][T18131] netlink: 'syz.6.3362': attribute type 1 has an invalid length. [ 520.947795][T18131] 8021q: adding VLAN 0 to HW filter on device bond16 [ 521.051369][T18138] vlan4: entered allmulticast mode [ 521.060105][T18138] bond16: entered allmulticast mode [ 521.176583][T18148] netlink: 'syz.9.3370': attribute type 1 has an invalid length. [ 521.335227][T18158] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 521.342825][T18161] netlink: 'syz.1.3369': attribute type 1 has an invalid length. [ 521.365998][T18158] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 521.422200][T18148] 8021q: adding VLAN 0 to HW filter on device bond11 [ 521.477837][T18163] vlan0: entered allmulticast mode [ 521.484266][T18163] bond11: (slave vlan0): Opening slave failed [ 521.695959][T18178] IPv6: NLM_F_REPLACE set, but no existing node found! [ 522.011814][T18192] sctp: [Deprecated]: syz.0.3379 (pid 18192) Use of int in max_burst socket option. [ 522.011814][T18192] Use struct sctp_assoc_value instead [ 522.474757][T18216] netlink: 'syz.9.3386': attribute type 1 has an invalid length. [ 523.587151][T18280] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 523.704870][T18289] __nla_validate_parse: 10 callbacks suppressed [ 523.704893][T18289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3407'. [ 523.715168][T18290] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3410'. [ 523.749674][T18291] netlink: 'syz.2.3408': attribute type 1 has an invalid length. [ 523.760330][T18289] vlan3: entered allmulticast mode [ 523.762498][T18291] netlink: 'syz.2.3408': attribute type 3 has an invalid length. [ 523.775689][T18289] bridge0: entered allmulticast mode [ 523.795611][T18291] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3408'. [ 524.001091][T18301] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3414'. [ 524.012255][T18301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3414'. [ 524.081475][T18306] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3415'. [ 524.131017][T18306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3415'. [ 524.142098][T18301] nbd2: detected capacity change from 0 to 63 [ 524.151682][T18306] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 524.166868][T18308] block nbd2: NBD_DISCONNECT [ 524.174062][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3414'. [ 524.191321][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3418'. [ 524.192353][T18308] block nbd2: Disconnected due to user request. [ 524.212601][T18308] block nbd2: shutting down sockets [ 524.266381][T18314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3418'. [ 524.970823][T18361] netlink: 'syz.6.3428': attribute type 1 has an invalid length. [ 524.983218][T18356] xt_limit: Overflow, try lower: 271964/0 [ 525.001564][T18360] xt_limit: Overflow, try lower: 271964/0 [ 525.216096][T18371] netlink: 'syz.0.3433': attribute type 1 has an invalid length. [ 525.499522][T18387] netlink: 'syz.2.3439': attribute type 29 has an invalid length. [ 525.512423][T18387] netlink: 'syz.2.3439': attribute type 29 has an invalid length. [ 526.005382][T18411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.193334][T18420] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 526.712939][T18453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.097454][T18475] netlink: 'syz.2.3464': attribute type 9 has an invalid length. [ 527.404471][T18488] netlink: 'syz.6.3469': attribute type 1 has an invalid length. [ 527.894365][T18511] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 528.085297][T18519] netlink: 'syz.6.3480': attribute type 28 has an invalid length. [ 528.104559][T18522] netlink: 'syz.2.3479': attribute type 1 has an invalid length. [ 528.112008][T18519] netlink: 'syz.6.3480': attribute type 3 has an invalid length. [ 528.127144][T18519] netlink: 'syz.6.3480': attribute type 1 has an invalid length. [ 528.135262][T18519] netlink: 'syz.6.3480': attribute type 3 has an invalid length. [ 528.214824][T18528] netlink: 'syz.2.3482': attribute type 12 has an invalid length. [ 528.305951][T18533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.349100][T18533] netlink: 'syz.6.3483': attribute type 7 has an invalid length. [ 528.667579][T18551] netlink: 'syz.0.3489': attribute type 15 has an invalid length. [ 528.929450][T18563] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 528.971739][T18563] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 528.989380][T18563] gretap4: entered promiscuous mode [ 528.994856][T18563] gretap4: entered allmulticast mode [ 529.006405][T18565] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 529.243527][T18582] __nla_validate_parse: 20 callbacks suppressed [ 529.243558][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3497'. [ 529.265697][T18584] delete_channel: no stack [ 529.462409][T18591] IPv6: sit3: Disabled Multicast RS [ 529.476669][T18591] sit3: entered allmulticast mode [ 530.068452][T18613] netlink: 'syz.1.3507': attribute type 1 has an invalid length. [ 530.086853][T18613] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3507'. [ 530.097971][T18613] netlink: 'syz.1.3507': attribute type 1 has an invalid length. [ 530.197349][T18618] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 530.416730][T18631] veth5: entered allmulticast mode [ 530.496061][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3515'. [ 530.506948][T18635] bridge_slave_1: left allmulticast mode [ 530.512809][T18635] bridge_slave_1: left promiscuous mode [ 530.518905][T18635] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.556910][T18635] bridge_slave_0: left allmulticast mode [ 530.563157][T18635] bridge_slave_0: left promiscuous mode [ 530.571902][T18635] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.743226][T18637] 8021q: adding VLAN 0 to HW filter on device bond17 [ 530.764756][T18644] bond17: (slave geneve2): making interface the new active one [ 530.775603][T18644] bond17: (slave geneve2): Enslaving as an active interface with an up link [ 530.840185][T11412] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.866939][T11412] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.945677][T18656] vlan0: entered allmulticast mode [ 530.951979][T18656] bond0: entered allmulticast mode [ 530.957232][T18656] bond_slave_0: entered allmulticast mode [ 530.978310][T18656] bond_slave_1: entered allmulticast mode [ 530.984592][T18656] bridge_slave_1: entered allmulticast mode [ 530.995280][T18664] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3523'. [ 531.023683][T11412] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.032781][T11412] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.043152][T18661] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 531.063160][T18667] syzkaller0: entered promiscuous mode [ 531.088350][T18667] syzkaller0: entered allmulticast mode [ 531.464979][T18683] 8021q: adding VLAN 0 to HW filter on device bond14 [ 531.521949][T18683] vlan3: entered allmulticast mode [ 531.543499][T18692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3532'. [ 531.562109][T18683] bond14: entered allmulticast mode [ 531.722038][T18692] bond0: (slave bond_slave_0): Releasing backup interface [ 531.739875][T18692] bond0: (slave bond_slave_1): Releasing backup interface [ 531.775468][T18692] team0: Port device team_slave_0 removed [ 531.792540][T18692] team0: Port device team_slave_1 removed [ 531.820174][T18692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.827618][T18692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.854212][T18692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.875978][T18692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.129967][T18709] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3537'. [ 532.169857][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3537'. [ 532.181780][T18713] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3538'. [ 532.197994][T18709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3537'. [ 532.334750][T18715] tap0: tun_chr_ioctl cmd 1074025676 [ 532.340572][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'. [ 532.362134][T18715] tap0: owner set to 0 [ 532.643023][T18732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.047506][T18752] tipc: Enabled bearer , priority 0 [ 533.279329][T18752] syzkaller0: entered promiscuous mode [ 533.284939][T18752] syzkaller0: entered allmulticast mode [ 533.294974][T18752] tipc: Resetting bearer [ 533.313842][ T3514] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 533.730744][T18739] tipc: Resetting bearer [ 534.148488][T11167] tipc: Node number set to 3014302038 [ 534.650030][T18828] validate_nla: 6 callbacks suppressed [ 534.650051][T18828] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 534.663808][T18828] __nla_validate_parse: 4 callbacks suppressed [ 534.663828][T18828] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3568'. [ 536.478120][T18739] tipc: Disabling bearer [ 536.595267][T18835] tipc: Enabled bearer , priority 0 [ 536.602979][T18836] syzkaller0: entered promiscuous mode [ 536.611791][T18836] syzkaller0: entered allmulticast mode [ 536.775286][T18836] tipc: Resetting bearer [ 536.866776][T18836] tipc: Disabling bearer [ 536.870203][T18857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.888951][T18862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.927198][T18868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3575'. [ 537.215138][T18879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3579'. [ 537.237550][T18880] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3577'. [ 537.271745][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.304190][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.313886][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.365253][T18883] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 537.428989][T18883] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 537.495535][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.527714][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3581'. [ 537.528820][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.547487][T18893] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 537.573288][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.596442][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.612979][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.631518][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.644170][T18896] netlink: 'syz.1.3582': attribute type 3 has an invalid length. [ 537.651150][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.652099][T18896] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3582'. [ 537.681356][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.702756][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.723696][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.765316][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.792353][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.813846][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.840567][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.860041][T18883] hsr0 speed is unknown, defaulting to 1000 [ 537.870032][T18883] hsr0 speed is unknown, defaulting to 1000 [ 538.180216][T18919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3592'. [ 538.192497][T18919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3592'. [ 538.203732][T18919] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 538.264141][T18921] netlink: 'syz.0.3593': attribute type 1 has an invalid length. [ 538.302061][T18921] 8021q: adding VLAN 0 to HW filter on device bond15 [ 538.322852][T18921] vlan3: entered allmulticast mode [ 538.328023][T18921] bond15: entered allmulticast mode [ 538.551330][T18933] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 538.738125][T18943] netlink: 'syz.1.3601': attribute type 30 has an invalid length. [ 538.876046][T18943] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3601'. [ 539.100902][T18965] netlink: 'syz.6.3607': attribute type 1 has an invalid length. [ 539.121313][T18965] netlink: 15574 bytes leftover after parsing attributes in process `syz.6.3607'. [ 539.285281][T18977] netlink: 'syz.2.3610': attribute type 1 has an invalid length. [ 539.353286][T18977] 8021q: adding VLAN 0 to HW filter on device bond12 [ 539.405120][T18977] vlan3: entered allmulticast mode [ 539.414694][T18977] bond12: entered allmulticast mode [ 539.949929][T19004] netlink: 'syz.1.3618': attribute type 1 has an invalid length. [ 539.967724][T19004] __nla_validate_parse: 5 callbacks suppressed [ 539.967744][T19004] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3618'. [ 540.021358][T19004] netlink: 'syz.1.3618': attribute type 1 has an invalid length. [ 540.055590][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 540.075507][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3618'. [ 541.158832][T19028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3627'. [ 541.167871][T19028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3627'. [ 541.226693][T19029] netlink: 'syz.1.3627': attribute type 11 has an invalid length. [ 541.299271][T19029] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3627'. [ 541.621444][ T5881] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 541.646465][ T5881] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 541.662207][ T5881] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 541.704965][ T5881] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 541.729614][ T5881] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 541.951002][T19032] hsr0 speed is unknown, defaulting to 1000 [ 542.235432][T19035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3628'. [ 543.246196][T19032] chnl_net:caif_netlink_parms(): no params data found [ 543.506908][T19050] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 543.737365][T19032] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.758564][T19032] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.765947][T19032] bridge_slave_0: entered allmulticast mode [ 543.839892][T19032] bridge_slave_0: entered promiscuous mode [ 543.891598][T19032] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.900047][ T5884] Bluetooth: hci9: command tx timeout [ 543.934032][T19032] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.964222][T19032] bridge_slave_1: entered allmulticast mode [ 543.986705][T19032] bridge_slave_1: entered promiscuous mode [ 544.051859][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880361dac00: rx timeout, send abort [ 544.228652][T19032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.282699][T19032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.472595][T19032] team0: Port device team_slave_0 added [ 544.502809][T19032] team0: Port device team_slave_1 added [ 544.561385][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880361dac00: abort rx timeout. Force session deactivation [ 544.620586][T19076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3636'. [ 544.673068][T19032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.710724][ T5884] Bluetooth: hci5: command 0x0406 tx timeout [ 544.714762][T19032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.716788][ T5884] Bluetooth: hci6: command 0x0406 tx timeout [ 544.743441][T19032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.832337][T19032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.847014][T19032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.873917][T19032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.904119][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3638'. [ 544.922758][T19072] netlink: 'syz.2.3636': attribute type 1 has an invalid length. [ 545.100727][T19076] bond13: (slave bridge0): making interface the new active one [ 545.109462][T19076] bond13: (slave bridge0): Enslaving as an active interface with an up link [ 545.159701][T19072] bond14: entered promiscuous mode [ 545.165065][T19072] bond14: entered allmulticast mode [ 545.171375][T19072] 8021q: adding VLAN 0 to HW filter on device bond14 [ 545.904588][T19072] bond14 (unregistering): Released all slaves [ 545.980869][ T5881] Bluetooth: hci9: command tx timeout [ 546.011917][T19032] hsr_slave_0: entered promiscuous mode [ 546.028864][T19032] hsr_slave_1: entered promiscuous mode [ 546.035596][T19032] debugfs: 'hsr0' already exists in 'hsr' [ 546.072557][T19032] Cannot create hsr debugfs directory [ 547.050458][T19124] veth0: entered promiscuous mode [ 547.071926][T19123] veth0: left promiscuous mode [ 547.312719][T19131] netlink: 'syz.1.3653': attribute type 1 has an invalid length. [ 547.586079][T19139] netlink: 'syz.2.3655': attribute type 1 has an invalid length. [ 547.962669][T19148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3657'. [ 548.035395][T19152] vcan0: entered allmulticast mode [ 548.044616][T19032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 548.065405][ T5881] Bluetooth: hci9: command tx timeout [ 548.164618][T19156] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 548.224282][T19032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 548.310432][T19032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 548.338264][T19159] ªªªªªª: renamed from vlan0 (while UP) [ 548.356638][T19032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 548.442970][T19163] netlink: 'syz.1.3663': attribute type 21 has an invalid length. [ 548.482309][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3664'. [ 548.501904][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3664'. [ 548.550540][T19171] netlink: 'syz.6.3664': attribute type 11 has an invalid length. [ 548.659523][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3664'. [ 548.668534][T11415] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.668664][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3664'. [ 548.677628][T11415] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.696507][T19171] netlink: 'syz.6.3664': attribute type 11 has an invalid length. [ 548.780852][T11415] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.845301][T11415] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.956013][T19032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.001880][T19183] netlink: 'syz.1.3667': attribute type 12 has an invalid length. [ 549.010105][T19183] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3667'. [ 549.054000][T19032] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.089190][T19193] netlink: 'syz.6.3669': attribute type 12 has an invalid length. [ 549.109222][T19193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3669'. [ 549.135942][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.143175][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.184155][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.191391][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.251634][T19193] netlink: 'syz.6.3669': attribute type 12 has an invalid length. [ 549.288092][T19193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3669'. [ 549.557705][T19202] erspan0: entered allmulticast mode [ 549.704371][T19208] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 549.733485][T19209] netlink: 'syz.2.3673': attribute type 2 has an invalid length. [ 550.104478][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3677'. [ 550.140114][ T5881] Bluetooth: hci9: command tx timeout [ 550.242543][T19032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.397261][T19228] netlink: 'syz.2.3679': attribute type 11 has an invalid length. [ 550.432325][T19228] unknown channel width for channel at 909000KHz? [ 550.442434][T19228] unknown channel width for channel at 909000KHz? [ 550.543179][T18996] Set syz1 is full, maxelem 65536 reached [ 550.747889][T19238] tipc: Enabling of bearer rejected, failed to enable media [ 551.223284][T19032] veth0_vlan: entered promiscuous mode [ 551.268620][T19032] veth1_vlan: entered promiscuous mode [ 551.378982][T19032] veth0_macvtap: entered promiscuous mode [ 551.407753][T19032] veth1_macvtap: entered promiscuous mode [ 551.477434][T19032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.521021][T19268] batman_adv: batadv0: Adding interface: dummy0 [ 551.527322][T19268] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 551.557661][T19268] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 551.578968][ T31] INFO: task syz.7.2027:13646 blocked for more than 143 seconds. [ 551.586742][ T31] Not tainted syzkaller #0 [ 551.593783][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.597321][T19032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.612243][ T31] task:syz.7.2027 state:D stack:24488 pid:13646 tgid:13636 ppid:9712 task_flags:0x400140 flags:0x00004006 [ 551.626169][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 551.628287][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.635431][ T31] [ 551.648006][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.655667][ T31] __schedule+0x1798/0x4cc0 [ 551.665626][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.670979][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.675879][ T31] ? __pfx___schedule+0x10/0x10 [ 551.684764][ T31] ? schedule+0x91/0x360 [ 551.691057][ T31] schedule+0x165/0x360 [ 551.695346][ T31] schedule_preempt_disabled+0x13/0x30 [ 551.701742][ T31] __mutex_lock+0x7e6/0x1350 [ 551.706456][ T31] ? __mutex_lock+0x5bb/0x1350 [ 551.733862][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 551.778894][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 551.783995][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 551.833196][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 551.868256][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 551.873545][ T31] ? _raw_spin_unlock+0x28/0x50 [ 551.908669][ T31] rdma_dev_change_netns+0x39/0x300 [ 551.913959][ T31] rdma_dev_exit_net+0x203/0x340 [ 551.928300][ T31] ? __pfx___might_resched+0x10/0x10 [ 551.933648][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 551.948536][ T31] ? net_generic+0x1e/0x240 [ 551.953093][ T31] ? mutex_is_locked+0x17/0x50 [ 551.979141][ T31] ? rtnl_is_locked+0x15/0x20 [ 551.983903][ T31] ops_undo_list+0x497/0x990 [ 552.008699][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 552.013872][ T31] ? ops_init+0x469/0x5c0 [ 552.038322][ T31] setup_net+0x2d3/0x320 [ 552.042652][ T31] ? __pfx_setup_net+0x10/0x10 [ 552.047454][ T31] ? copy_net_ns+0x304/0x4d0 [ 552.087468][ T31] ? down_read_killable+0x1d1/0x350 [ 552.108315][ T31] copy_net_ns+0x31b/0x4d0 [ 552.112812][ T31] create_new_namespaces+0x3f3/0x720 [ 552.159179][ T31] ? security_capable+0x7e/0x2e0 [ 552.164211][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 552.207054][ T31] ksys_unshare+0x4c8/0x8c0 [ 552.212053][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 552.217117][ T31] ? rcu_is_watching+0x15/0xb0 [ 552.249255][ T31] __x64_sys_unshare+0x38/0x50 [ 552.254097][ T31] do_syscall_64+0xfa/0x3b0 [ 552.278225][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.283633][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.308291][ T31] ? clear_bhb_loop+0x60/0xb0 [ 552.313039][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.333471][ T31] RIP: 0033:0x7fa37898eba9 [ 552.337948][ T31] RSP: 002b:00007fa3797f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 552.346712][ T31] RAX: ffffffffffffffda RBX: 00007fa378bd6180 RCX: 00007fa37898eba9 [ 552.366970][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 552.387205][ T31] RBP: 00007fa378a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 552.408291][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.416323][ T31] R13: 00007fa378bd6218 R14: 00007fa378bd6180 R15: 00007fffdfe183c8 [ 552.434327][ T31] [ 552.437429][ T31] INFO: task syz.8.2028:13641 blocked for more than 144 seconds. [ 552.497312][ T31] Not tainted syzkaller #0 [ 552.508376][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.517087][ T31] task:syz.8.2028 state:D stack:22808 pid:13641 tgid:13637 ppid:13030 task_flags:0x400140 flags:0x00004004 [ 552.541180][ T31] Call Trace: [ 552.544500][ T31] [ 552.547430][ T31] __schedule+0x1798/0x4cc0 [ 552.552302][ T31] ? validate_chain+0x897/0x2140 [ 552.557287][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.562317][ T31] ? __pfx___schedule+0x10/0x10 [ 552.567204][ T31] ? schedule+0x91/0x360 [ 552.571582][ T31] schedule+0x165/0x360 [ 552.575754][ T31] schedule_timeout+0x9a/0x270 [ 552.582355][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 552.587776][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 552.593080][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.603250][ T31] ? wait_for_completion+0x267/0x5d0 [ 552.610226][ T31] wait_for_completion+0x2bf/0x5d0 [ 552.615369][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 552.622961][ T31] ? up_write+0x1c4/0x420 [ 552.627332][ T31] ? remove_client_context+0xc0/0x1e0 [ 552.632778][ T31] disable_device+0x1c6/0x320 [ 552.637482][ T31] ? __pfx_disable_device+0x10/0x10 [ 552.642775][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 552.648189][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 552.654112][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 552.660113][ T31] nldev_dellink+0x2d1/0x320 [ 552.664734][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 552.670058][ T31] ? apparmor_capable+0x137/0x1b0 [ 552.675108][ T31] ? bpf_lsm_capable+0x9/0x20 [ 552.679854][ T31] ? security_capable+0x7e/0x2e0 [ 552.684821][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 552.691411][ T31] rdma_nl_rcv+0x6ae/0x980 [ 552.695911][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 552.702234][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.707179][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 552.713117][ T31] netlink_unicast+0x82c/0x9e0 [ 552.717925][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 552.723959][ T31] ? netlink_sendmsg+0x642/0xb30 [ 552.729059][ T31] netlink_sendmsg+0x805/0xb30 [ 552.733870][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.739310][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.744224][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.749597][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.754908][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.760369][ T31] __sock_sendmsg+0x21c/0x270 [ 552.765078][ T31] ____sys_sendmsg+0x505/0x830 [ 552.769929][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.775249][ T31] ? import_iovec+0x74/0xa0 [ 552.781727][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 552.786450][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.791856][ T31] ? __fget_files+0x2a/0x420 [ 552.796577][ T31] ? __fget_files+0x3a0/0x420 [ 552.801714][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 552.807516][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.814377][ T31] ? rcu_is_watching+0x15/0xb0 [ 552.820684][ T31] ? do_syscall_64+0xbe/0x3b0 [ 552.825410][ T31] do_syscall_64+0xfa/0x3b0 [ 552.830347][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.835577][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.841876][ T31] ? clear_bhb_loop+0x60/0xb0 [ 552.846587][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.852688][ T31] RIP: 0033:0x7f8e5a18eba9 [ 552.857177][ T31] RSP: 002b:00007f8e5b017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.871623][ T31] RAX: ffffffffffffffda RBX: 00007f8e5a3d5fa0 RCX: 00007f8e5a18eba9 [ 552.879707][ T31] RDX: 00000000040000d0 RSI: 0000200000000140 RDI: 000000000000000a [ 552.887699][ T31] RBP: 00007f8e5a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 552.895908][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.904368][ T31] R13: 00007f8e5a3d6038 R14: 00007f8e5a3d5fa0 R15: 00007fff0ae58798 [ 552.912923][ T31] [ 552.923499][ T31] INFO: task syz.5.2047:13686 blocked for more than 144 seconds. [ 552.959893][ T31] Not tainted syzkaller #0 [ 552.964887][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.974508][ T31] task:syz.5.2047 state:D stack:26024 pid:13686 tgid:13685 ppid:9705 task_flags:0x400140 flags:0x00004004 [ 552.979729][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.986577][ T31] Call Trace: [ 552.998706][ T31] [ 553.001678][ T31] __schedule+0x1798/0x4cc0 [ 553.006227][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.011362][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.016254][ T31] ? __pfx___schedule+0x10/0x10 [ 553.021434][ T31] ? schedule+0x91/0x360 [ 553.025717][ T31] schedule+0x165/0x360 [ 553.030834][ T31] schedule_preempt_disabled+0x13/0x30 [ 553.036335][ T31] __mutex_lock+0x7e6/0x1350 [ 553.038406][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.048225][ T31] ? __mutex_lock+0x5bb/0x1350 [ 553.054424][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 553.072066][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 553.077259][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 553.084552][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 553.091341][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 553.096574][ T31] ? _raw_spin_unlock+0x28/0x50 [ 553.102693][ T31] rdma_dev_change_netns+0x39/0x300 [ 553.107931][ T31] rdma_dev_exit_net+0x203/0x340 [ 553.112919][ T31] ? __pfx___might_resched+0x10/0x10 [ 553.118456][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 553.123947][ T31] ? net_generic+0x1e/0x240 [ 553.128580][ T31] ? mutex_is_locked+0x17/0x50 [ 553.133516][ T31] ? rtnl_is_locked+0x15/0x20 [ 553.139558][ T31] ops_undo_list+0x497/0x990 [ 553.144191][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 553.149514][ T31] ? ops_init+0x469/0x5c0 [ 553.153882][ T31] setup_net+0x2d3/0x320 [ 553.158246][ T31] ? __pfx_setup_net+0x10/0x10 [ 553.163038][ T31] ? copy_net_ns+0x304/0x4d0 [ 553.167641][ T31] ? down_read_killable+0x1d1/0x350 [ 553.174241][ T31] copy_net_ns+0x31b/0x4d0 [ 553.178926][ T31] create_new_namespaces+0x3f3/0x720 [ 553.184255][ T31] ? security_capable+0x7e/0x2e0 [ 553.189349][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 553.195166][ T31] ksys_unshare+0x4c8/0x8c0 [ 553.199900][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 553.205044][ T31] __x64_sys_unshare+0x38/0x50 [ 553.209894][ T31] do_syscall_64+0xfa/0x3b0 [ 553.214438][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.219709][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.225803][ T31] ? clear_bhb_loop+0x60/0xb0 [ 553.230719][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.236627][ T31] RIP: 0033:0x7f12e258eba9 [ 553.241345][ T31] RSP: 002b:00007f12e34b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 553.249819][ T31] RAX: ffffffffffffffda RBX: 00007f12e27d5fa0 RCX: 00007f12e258eba9 [ 553.257818][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 553.266591][ T31] RBP: 00007f12e2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 553.274686][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.282811][ T31] R13: 00007f12e27d6038 R14: 00007f12e27d5fa0 R15: 00007ffd2523bc08 [ 553.292456][ T31] [ 553.295631][ T31] [ 553.295631][ T31] Showing all locks held in the system: [ 553.303434][ T31] 1 lock held by khungtaskd/31: [ 553.318640][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 553.328966][ T31] 2 locks held by getty/5626: [ 553.333660][ T31] #0: ffff88814d6040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 553.343864][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 553.354662][ T31] 3 locks held by kworker/0:19/11172: [ 553.360109][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 553.371226][ T31] #1: ffffc9000b567bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 553.385872][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 553.396904][ T31] 4 locks held by kworker/u8:24/11414: [ 553.405358][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 553.416772][ T31] #1: ffffc9000baf7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 553.435157][ T31] #2: ffffffff8f52d0d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 553.445033][ T31] #3: ffff88807e760700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 553.458808][ T31] 2 locks held by syz.7.2027/13646: [ 553.464046][ T31] #0: ffffffff8f52d0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 553.473850][ T31] #1: ffff88807e760700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 553.485476][ T31] 2 locks held by syz.8.2028/13641: [ 553.500633][ T31] #0: ffffffff99e6d918 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 553.523615][ T31] #1: ffff88807e760700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 553.546652][ T31] 2 locks held by syz.5.2047/13686: [ 553.558691][ T31] #0: ffffffff8f52d0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 553.577749][ T31] #1: ffff88807e760700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 553.589691][ T31] 4 locks held by syz-executor/14148: [ 553.595083][ T31] #0: ffff88804d9c4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 553.605172][ T31] #1: ffff88804d9c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 553.615113][ T31] #2: ffffffff8f69ee68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 553.625539][ T31] #3: ffff888031d69338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 553.635896][ T31] 3 locks held by syz-executor/14162: [ 553.641351][ T31] #0: ffff888068d4cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 553.651975][ T31] #1: ffff888068d4c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 553.662579][ T31] #2: ffffffff8f69ee68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 553.672816][ T31] 2 locks held by syz.3.3053/17021: [ 553.678037][ T31] #0: ffffffff8f52d0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 553.687764][ T31] #1: ffff88807e760700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 553.699052][ T31] 3 locks held by syz-executor/17646: [ 553.704435][ T31] #0: ffff8880464dcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 553.714921][ T31] #1: ffff8880464dc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 553.724698][ T31] #2: ffffffff8f69ee68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 553.734752][ T31] 2 locks held by syz.9.3432/18377: [ 553.742856][ T31] #0: ffffffff8f52d0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 553.752446][ T31] #1: ffff88807e760700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 553.763826][ T31] 3 locks held by syz.6.3690/19265: [ 553.769386][ T31] #0: ffff88805657cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 553.779452][ T31] #1: ffff88805657c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 553.789404][ T31] #2: ffffffff8f69ee68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 553.803424][ T31] [ 553.817443][ T31] ============================================= [ 553.817443][ T31] [ 553.840562][ T31] NMI backtrace for cpu 0 [ 553.840584][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 553.840605][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 553.840615][ T31] Call Trace: [ 553.840623][ T31] [ 553.840631][ T31] dump_stack_lvl+0x189/0x250 [ 553.840660][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.840683][ T31] ? __pfx__printk+0x10/0x10 [ 553.840721][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 553.840752][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 553.840783][ T31] ? __pfx__printk+0x10/0x10 [ 553.840813][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 553.840846][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 553.840877][ T31] watchdog+0xf93/0xfe0 [ 553.840909][ T31] ? watchdog+0x1de/0xfe0 [ 553.840940][ T31] kthread+0x70e/0x8a0 [ 553.840967][ T31] ? __pfx_watchdog+0x10/0x10 [ 553.840993][ T31] ? __pfx_kthread+0x10/0x10 [ 553.841017][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.841047][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.841066][ T31] ? __pfx_kthread+0x10/0x10 [ 553.841090][ T31] ret_from_fork+0x436/0x7d0 [ 553.841114][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 553.841142][ T31] ? __switch_to_asm+0x39/0x70 [ 553.841192][ T31] ? __switch_to_asm+0x33/0x70 [ 553.841217][ T31] ? __pfx_kthread+0x10/0x10 [ 553.841240][ T31] ret_from_fork_asm+0x1a/0x30 [ 553.841290][ T31] [ 553.841305][ T31] Sending NMI from CPU 0 to CPUs 1: [ 553.992544][ C1] NMI backtrace for cpu 1 [ 553.992562][ C1] CPU: 1 UID: 0 PID: 11412 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 553.992580][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 553.992591][ C1] Workqueue: bat_events batadv_nc_worker [ 553.992621][ C1] RIP: 0010:__local_bh_disable_ip+0x90/0x190 [ 553.992641][ C1] Code: 3c 09 f3 f3 43 c6 44 3c 0b f3 65 8b 05 19 bb 1b 11 a9 00 00 0f 00 0f 85 e4 00 00 00 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 <4c> 8b 74 24 40 fa 65 01 1d f3 ba 1b 11 65 8b 05 ec ba 1b 11 31 d8 [ 553.992654][ C1] RSP: 0018:ffffc9000ba878c0 EFLAGS: 00000246 [ 553.992668][ C1] RAX: 0000000080000000 RBX: 0000000000000201 RCX: 1ffff1100cbc9889 [ 553.992680][ C1] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8b481e17 [ 553.992691][ C1] RBP: ffffc9000ba87960 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6 [ 553.992703][ C1] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: 1ffff92001750f18 [ 553.992714][ C1] R13: dffffc0000000000 R14: ffffffff8b481e17 R15: dffffc0000000000 [ 553.992726][ C1] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 553.992739][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.992750][ C1] CR2: 00005615c551e000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 553.992766][ C1] Call Trace: [ 553.992773][ C1] [ 553.992780][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 553.992796][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 553.992811][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 553.992828][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 553.992847][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 553.992869][ C1] _raw_spin_lock_bh+0x1c/0x50 [ 553.992890][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 553.992906][ C1] batadv_nc_purge_paths+0xe7/0x3b0 [ 553.992935][ C1] batadv_nc_worker+0x328/0x610 [ 553.992957][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 553.992973][ C1] process_scheduled_works+0xae1/0x17b0 [ 553.993008][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 553.993031][ C1] worker_thread+0x8a0/0xda0 [ 553.993058][ C1] kthread+0x70e/0x8a0 [ 553.993078][ C1] ? __pfx_worker_thread+0x10/0x10 [ 553.993093][ C1] ? __pfx_kthread+0x10/0x10 [ 553.993112][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.993134][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.993150][ C1] ? __pfx_kthread+0x10/0x10 [ 553.993168][ C1] ret_from_fork+0x436/0x7d0 [ 553.993185][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 553.993203][ C1] ? __switch_to_asm+0x39/0x70 [ 553.993221][ C1] ? __switch_to_asm+0x33/0x70 [ 553.993239][ C1] ? __pfx_kthread+0x10/0x10 [ 553.993259][ C1] ret_from_fork_asm+0x1a/0x30 [ 553.993285][ C1] [ 553.993886][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 554.262727][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 554.271858][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 554.281914][ T31] Call Trace: [ 554.285197][ T31] [ 554.288129][ T31] dump_stack_lvl+0x99/0x250 [ 554.292738][ T31] ? __asan_memcpy+0x40/0x70 [ 554.297335][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.302538][ T31] ? __pfx__printk+0x10/0x10 [ 554.307147][ T31] vpanic+0x281/0x750 [ 554.311137][ T31] ? __pfx_vpanic+0x10/0x10 [ 554.315644][ T31] ? preempt_schedule+0xae/0xc0 [ 554.320500][ T31] ? preempt_schedule_common+0x83/0xd0 [ 554.325967][ T31] panic+0xb9/0xc0 [ 554.329693][ T31] ? __pfx_panic+0x10/0x10 [ 554.334121][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 554.339509][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 554.345680][ T31] watchdog+0xfd2/0xfe0 [ 554.349849][ T31] ? watchdog+0x1de/0xfe0 [ 554.354195][ T31] kthread+0x70e/0x8a0 [ 554.358278][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.362965][ T31] ? __pfx_kthread+0x10/0x10 [ 554.367559][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 554.372769][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.377969][ T31] ? __pfx_kthread+0x10/0x10 [ 554.382571][ T31] ret_from_fork+0x436/0x7d0 [ 554.387166][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 554.392282][ T31] ? __switch_to_asm+0x39/0x70 [ 554.397054][ T31] ? __switch_to_asm+0x33/0x70 [ 554.401825][ T31] ? __pfx_kthread+0x10/0x10 [ 554.406421][ T31] ret_from_fork_asm+0x1a/0x30 [ 554.411214][ T31] [ 554.414389][ T31] Kernel Offset: disabled [ 554.418708][ T31] Rebooting in 86400 seconds..