last executing test programs: 5.697444527s ago: executing program 1 (id=956): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x20010014) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$packet(0x11, 0x2, 0x300) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x4e22, 0x1, 0x0, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@local, {0xfffffffffffffffe, 0x0, 0xea85, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x8, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000002c0)="23000000010006", 0x7) 5.59723857s ago: executing program 1 (id=957): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x22c, @private1, 0x800}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='K', 0x1, 0x44008011, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) 5.446192511s ago: executing program 1 (id=959): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x5}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={r5}, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x38e, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x358, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0xf, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r6], 0x38}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) epoll_pwait(r9, &(0x7f0000001800)=[{}], 0x1, 0xa52, 0x0, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r10}]}, 0x3c}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000010c0)={'wpan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) 4.516335665s ago: executing program 1 (id=966): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x18, 0x9, 0x70bd29, 0x25dfdbff, {0x2}, [@typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 4.344997483s ago: executing program 1 (id=968): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x84500, 0x0) write$tun(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000700030200090003000400bbbbbbbbbbbbaaaaaaaaaaaa88a8310081002100884c013be5762b80f63b43abfeee0b37e64deac57c7aa221be4541f3af09785bebd668a1a9e8184e20a00d21f882f8fb7e0d8e23087a7daaac293c12711200ec7182d8e7750ac0a2f45c54e3e71c57f38d13b4bff1874bb0f91092aa1657533ccbcd05977f5b875f4e50fc770cbd00000000000000803eb348f6cd96bf86098fd62199311780dd6f791ec6c5ec37275badff1b3ccd20fe3da80df441f3324faff68a5d839aee4e70e28b987468584d8d42a9c383fcdbdc08d1e230bf01d2d829b222ed2ebf21613980e3ff6b9aa4c078420bb976d98e26ae4a68aa84a701c3ef281af3c01333b4da3c195b141dc3"], 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, r2, 0x20000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r4, 0x0, &(0x7f0000000200)=""/76}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xe0, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xe0}}, 0x40000000) 3.927370317s ago: executing program 3 (id=971): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2000000000000}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) 3.829105153s ago: executing program 3 (id=973): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) 3.673291782s ago: executing program 3 (id=975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x80805, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 3.609551568s ago: executing program 0 (id=976): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x5}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={r5}, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x38e, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x358, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0xf, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r6], 0x38}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) epoll_pwait(r9, &(0x7f0000001800)=[{}], 0x1, 0xa52, 0x0, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r10}]}, 0x3c}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000010c0)={'wpan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) 3.434162288s ago: executing program 3 (id=979): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000029c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x10001, @loopback, 0x6}, 0x1c, 0x0, 0x97ff}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="4deabd3a", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)="1a", 0x1}], 0x1}}], 0x3, 0x8000) 3.227121335s ago: executing program 3 (id=981): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8971900", @ANYRES16, @ANYBLOB="000225bd7000fcdbdf25020000007c000c8014000b8008000a00e6eb000008000a00067700000c000b800800090009cc4e7a54000b8008000900ee15330c080009000400000008000a00e7ef000008000a00a671000008000a007b29000008000900fea2912d080009007f6bd2290800090089fb016a08000900e0034f7a080009000485ec0304000b00000000000800010002000000080002000100000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0xc851) unshare(0x600) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, 0x0, 0x8000) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000c31800005000000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan0\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) 2.65669361s ago: executing program 0 (id=986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0) 2.600834453s ago: executing program 0 (id=987): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd2c, 0xd000000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0) 2.495135794s ago: executing program 0 (id=988): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0x6, 0x0, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.462059626s ago: executing program 0 (id=989): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4627, 0xfdfffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000002880)=[{0x0}], 0x1}}], 0x1, 0x4001c00) 2.398114951s ago: executing program 0 (id=990): unshare(0x68040200) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x14, 0x2, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/189, 0xbd}, {&(0x7f0000000800)=""/241, 0xf1}, {&(0x7f0000000900)=""/161, 0xa1}, {&(0x7f0000000500)=""/20, 0x14}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/235, 0xeb}, {&(0x7f0000000b40)=""/95, 0x5f}, {&(0x7f0000000bc0)=""/123, 0x7b}, {0x0}], 0x9, &(0x7f0000000e00)=""/183, 0xb7}, 0x60) bind$bt_l2cap(r2, &(0x7f0000000ac0)={0x1f, 0x8000, @any, 0x6, 0x2}, 0xe) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r3, 0x3f38e000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYRES16=r6, @ANYRES32=r6], 0x290) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}]}, 0x210) 1.946854635s ago: executing program 2 (id=995): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001a00)=@dellinkprop={0x34, 0x6d, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20010, 0x2880}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x0, 0xfffffffe, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x24}}, 0x8000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}}, 0x801) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xbac4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.838407452s ago: executing program 4 (id=996): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x5}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={r5}, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x38e, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x358, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0xf, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r6], 0x38}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) epoll_pwait(r9, &(0x7f0000001800)=[{}], 0x1, 0xa52, 0x0, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r10}]}, 0x3c}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000010c0)={'wpan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) 1.334767921s ago: executing program 2 (id=997): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r3, 0x0, 0x18, 0x0, &(0x7f0000000040)=0x24) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) 1.071153531s ago: executing program 2 (id=998): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 1.056122674s ago: executing program 3 (id=999): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8971900", @ANYRES16, @ANYBLOB="000225bd7000fcdbdf25020000007c000c8014000b8008000a00e6eb000008000a00067700000c000b800800090009cc4e7a54000b8008000900ee15330c080009000400000008000a00e7ef000008000a00a671000008000a007b29000008000900fea2912d080009007f6bd2290800090089fb016a08000900e0034f7a080009000485ec0304000b00000000000800010002000000080002000100000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0xc851) unshare(0x600) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, 0x0, 0x8000) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000c31800005000000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan0\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) 947.268488ms ago: executing program 2 (id=1000): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0], 0x1000f) 919.178027ms ago: executing program 4 (id=1001): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='cq_drain_complete\x00', r7}, 0x18) syz_emit_ethernet(0x106, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x27) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x1a, 0x6, 0xe8) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a01040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000700000a074655b9921d125ea3243dd92ca28b9bc9af6e41932dbdf1792163f7fdd6c0a51f80d11175d9d771664e1fe9d7d264f3ec1af547d6470147be5fb33da243195b0ac70ba7dc8075e037b489550091a5a4c0a187bfd148bc4bfaf0dc61e3239816cfdb0881a8ce1c444c1867"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) write$tun(r2, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 819.416416ms ago: executing program 2 (id=1002): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x44}}, 0x0) 665.164016ms ago: executing program 2 (id=1003): syz_emit_ethernet(0x14a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x1, 0x2, [0x783, 0xd2, 0x9fc, 0xa99]}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000640)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) r1 = socket$kcm(0x29, 0x2, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) r3 = socket$kcm(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r4) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) (async) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x18000}], 0x20}, 0x0) 397.118489ms ago: executing program 4 (id=1004): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000010000000000", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 219.35133ms ago: executing program 4 (id=1005): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'gre0\x00', @link_local}) 134.017952ms ago: executing program 4 (id=1006): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2000000000000}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) 74.772857ms ago: executing program 1 (id=1007): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004080) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000006bc0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000006cc0)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f0000000580)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) socket(0xa, 0x9c5bbe087a9a3323, 0x6) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0xa9242000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x46, 0x0, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0xfffffffffffffffe, 0x400403, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, {0x800, 0xd, 0x0, 0x7}, 0xfffffff9, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x3500, 0x1, 0x2, 0x0, 0x1, 0x9}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) 0s ago: executing program 4 (id=1008): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000340)={0x32, @multicast2, 0x0, 0x4, 'none\x00', 0x36, 0xb, 0x39}, 0x2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac00028008"], 0xf0}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x3000000, 0x0, 0x4000001}, 0x40000) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x2000000000000048, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x10006, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @lirc_mode2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x4d3c}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x200008c0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r5, r4}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000340)=0x20000002) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00\x00\v\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. [ 71.030778][ T5850] cgroup: Unknown subsys name 'net' [ 71.164646][ T5850] cgroup: Unknown subsys name 'cpuset' [ 71.173564][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.516220][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.522743][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.565631][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.529930][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.551356][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.559860][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.568928][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.581117][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.604024][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.612794][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.621144][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.621772][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.630007][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.645037][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.652144][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.653509][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.660356][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.670311][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.682255][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.683670][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.698474][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.707501][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.711563][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.715409][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.730636][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.740363][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.756389][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.765042][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.472744][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 77.493731][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 77.563032][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 77.606594][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 77.633656][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 77.847236][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.855499][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.863502][ T5862] bridge_slave_0: entered allmulticast mode [ 77.870744][ T5862] bridge_slave_0: entered promiscuous mode [ 77.879799][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.887475][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.894851][ T5866] bridge_slave_0: entered allmulticast mode [ 77.902992][ T5866] bridge_slave_0: entered promiscuous mode [ 77.943280][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.950608][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.959421][ T5862] bridge_slave_1: entered allmulticast mode [ 77.966544][ T5862] bridge_slave_1: entered promiscuous mode [ 77.974444][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.982793][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.990160][ T5866] bridge_slave_1: entered allmulticast mode [ 77.998120][ T5866] bridge_slave_1: entered promiscuous mode [ 78.034008][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.041735][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.049208][ T5873] bridge_slave_0: entered allmulticast mode [ 78.056787][ T5873] bridge_slave_0: entered promiscuous mode [ 78.065681][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.073396][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.080577][ T5873] bridge_slave_1: entered allmulticast mode [ 78.089520][ T5873] bridge_slave_1: entered promiscuous mode [ 78.159398][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.166919][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.176018][ T5860] bridge_slave_0: entered allmulticast mode [ 78.186198][ T5860] bridge_slave_0: entered promiscuous mode [ 78.214579][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.228490][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.237630][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.248663][ T5861] bridge_slave_0: entered allmulticast mode [ 78.257241][ T5861] bridge_slave_0: entered promiscuous mode [ 78.282040][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.291626][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.299558][ T5860] bridge_slave_1: entered allmulticast mode [ 78.308531][ T5860] bridge_slave_1: entered promiscuous mode [ 78.319551][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.334025][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.345484][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.354901][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.365469][ T5861] bridge_slave_1: entered allmulticast mode [ 78.376277][ T5861] bridge_slave_1: entered promiscuous mode [ 78.389088][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.409753][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.467144][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.584111][ T5866] team0: Port device team_slave_0 added [ 78.595673][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.608677][ T5873] team0: Port device team_slave_0 added [ 78.617804][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.640861][ T5866] team0: Port device team_slave_1 added [ 78.651412][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.666747][ T5873] team0: Port device team_slave_1 added [ 78.675614][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.691576][ T5862] team0: Port device team_slave_0 added [ 78.767462][ T5862] team0: Port device team_slave_1 added [ 78.789537][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.799133][ T5864] Bluetooth: hci3: command tx timeout [ 78.799397][ T5864] Bluetooth: hci4: command tx timeout [ 78.811112][ T5880] Bluetooth: hci1: command tx timeout [ 78.812589][ T51] Bluetooth: hci0: command tx timeout [ 78.818504][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.824722][ T5184] Bluetooth: hci2: command tx timeout [ 78.857760][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.871523][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.879081][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.906904][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.945019][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.952711][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.979849][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.026164][ T5861] team0: Port device team_slave_0 added [ 79.035532][ T5861] team0: Port device team_slave_1 added [ 79.042745][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.049697][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.076980][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.090179][ T5860] team0: Port device team_slave_0 added [ 79.102069][ T5860] team0: Port device team_slave_1 added [ 79.109836][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.117643][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.147290][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.208319][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.215792][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.242504][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.278596][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.286265][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.313243][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.339035][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.346571][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.373261][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.425911][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.433322][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.461249][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.474753][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.482342][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.509848][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.545034][ T5866] hsr_slave_0: entered promiscuous mode [ 79.552522][ T5866] hsr_slave_1: entered promiscuous mode [ 79.565882][ T5862] hsr_slave_0: entered promiscuous mode [ 79.573268][ T5862] hsr_slave_1: entered promiscuous mode [ 79.580094][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 79.586778][ T5862] Cannot create hsr debugfs directory [ 79.640558][ T5873] hsr_slave_0: entered promiscuous mode [ 79.648263][ T5873] hsr_slave_1: entered promiscuous mode [ 79.655307][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 79.661201][ T5873] Cannot create hsr debugfs directory [ 79.832840][ T5860] hsr_slave_0: entered promiscuous mode [ 79.839719][ T5860] hsr_slave_1: entered promiscuous mode [ 79.846402][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 79.856455][ T5860] Cannot create hsr debugfs directory [ 79.868565][ T5861] hsr_slave_0: entered promiscuous mode [ 79.884762][ T5861] hsr_slave_1: entered promiscuous mode [ 79.892378][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 79.899624][ T5861] Cannot create hsr debugfs directory [ 80.424977][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.454259][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.486209][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.497555][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.565050][ T5873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.579735][ T5873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.597627][ T5873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.626237][ T5873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.695843][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.711813][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.737224][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.750301][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.871533][ T51] Bluetooth: hci2: command tx timeout [ 80.871639][ T5881] Bluetooth: hci3: command tx timeout [ 80.876987][ T51] Bluetooth: hci1: command tx timeout [ 80.883791][ T5184] Bluetooth: hci0: command tx timeout [ 80.889179][ T5864] Bluetooth: hci4: command tx timeout [ 80.907623][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.935196][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.947325][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.960707][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.077352][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.102920][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.117088][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.134336][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.153553][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.206218][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.248241][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.281684][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.288924][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.317636][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.326753][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.338489][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.358241][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.387795][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.409638][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.417601][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.454159][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.461735][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.472940][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.480333][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.506853][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.514221][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.573578][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.679645][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.741900][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.749151][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.765733][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.772950][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.828412][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.900438][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.947771][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.065756][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.110813][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.199415][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.206922][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.278918][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.286150][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.610473][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.806972][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.889095][ T5861] veth0_vlan: entered promiscuous mode [ 82.934616][ T5861] veth1_vlan: entered promiscuous mode [ 82.952820][ T5864] Bluetooth: hci0: command tx timeout [ 82.958279][ T5864] Bluetooth: hci3: command tx timeout [ 82.964400][ T51] Bluetooth: hci2: command tx timeout [ 82.964560][ T5184] Bluetooth: hci4: command tx timeout [ 82.969918][ T51] Bluetooth: hci1: command tx timeout [ 83.026333][ T5862] veth0_vlan: entered promiscuous mode [ 83.076609][ T5873] veth0_vlan: entered promiscuous mode [ 83.094035][ T5862] veth1_vlan: entered promiscuous mode [ 83.127276][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.138417][ T5873] veth1_vlan: entered promiscuous mode [ 83.152851][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.186905][ T5861] veth0_macvtap: entered promiscuous mode [ 83.225091][ T5861] veth1_macvtap: entered promiscuous mode [ 83.249727][ T5862] veth0_macvtap: entered promiscuous mode [ 83.290755][ T5862] veth1_macvtap: entered promiscuous mode [ 83.325621][ T5873] veth0_macvtap: entered promiscuous mode [ 83.336999][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.355266][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.385267][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.395652][ T5873] veth1_macvtap: entered promiscuous mode [ 83.414462][ T5866] veth0_vlan: entered promiscuous mode [ 83.423970][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.433127][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.448177][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.478029][ T5860] veth0_vlan: entered promiscuous mode [ 83.489782][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.516811][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.546784][ T5866] veth1_vlan: entered promiscuous mode [ 83.563937][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.575301][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.604912][ T3558] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.614611][ T3558] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.626435][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.640564][ T5860] veth1_vlan: entered promiscuous mode [ 83.673975][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.715660][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.739784][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.753319][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.764072][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.778123][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.810103][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.824963][ T5866] veth0_macvtap: entered promiscuous mode [ 83.838921][ T5866] veth1_macvtap: entered promiscuous mode [ 83.897445][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.909954][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.950626][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.966816][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.007179][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.027406][ T5860] veth0_macvtap: entered promiscuous mode [ 84.055659][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.063948][ T5860] veth1_macvtap: entered promiscuous mode [ 84.094055][ T3590] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.103409][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.159368][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.169533][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.198273][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.207229][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.217744][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.246512][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.290161][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.299437][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.313853][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.359807][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.368077][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.409253][ T3590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.438622][ T3590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.460261][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.486592][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.504915][ T3590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.519819][ T3590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.603148][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.620754][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.663563][ T5991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.748447][ T5991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.889037][ T5991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.907570][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.938115][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.999619][ T5991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.036128][ T5864] Bluetooth: hci1: command tx timeout [ 85.036150][ T51] Bluetooth: hci4: command tx timeout [ 85.036188][ T51] Bluetooth: hci3: command tx timeout [ 85.043062][ T5880] Bluetooth: hci2: command tx timeout [ 85.048604][ T5184] Bluetooth: hci0: command tx timeout [ 85.197283][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.205661][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.210383][ T6004] bridge0: entered promiscuous mode [ 85.222587][ T6004] bridge0: port 3(macsec1) entered blocking state [ 85.229409][ T6004] bridge0: port 3(macsec1) entered disabled state [ 85.236676][ T6004] macsec1: entered allmulticast mode [ 85.244786][ T6004] bridge0: entered allmulticast mode [ 85.252663][ T6004] macsec1: left allmulticast mode [ 85.258135][ T6004] bridge0: left allmulticast mode [ 85.267207][ T6004] bridge0: left promiscuous mode [ 86.838980][ T6016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.875136][ T983] cfg80211: failed to load regulatory.db [ 86.877842][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.910302][ T6014] sit0: entered promiscuous mode [ 86.925064][ T6014] sit0: entered allmulticast mode [ 87.067953][ T6018] trusted_key: syz.2.12 sent an empty control message without MSG_MORE. [ 87.225242][ T6025] pimreg: entered allmulticast mode [ 87.242143][ T6025] Bluetooth: MGMT ver 1.23 [ 88.180858][ T6045] Zero length message leads to an empty skb [ 88.426954][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23'. [ 88.446232][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23'. [ 88.760841][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26'. [ 88.987111][ T6070] IPv6: addrconf: prefix option has invalid lifetime [ 89.022082][ T6076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.035226][ T6072] pimreg: entered allmulticast mode [ 89.125850][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 89.637942][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36'. [ 89.669443][ T6101] syz.2.39 uses obsolete (PF_INET,SOCK_PACKET) [ 89.679125][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36'. [ 90.192409][ T6121] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 90.578732][ T6132] netlink: 232 bytes leftover after parsing attributes in process `syz.0.50'. [ 91.126572][ T6149] netlink: 176 bytes leftover after parsing attributes in process `syz.1.56'. [ 91.289388][ T6132] infiniband syz0: set active [ 91.315525][ T6132] infiniband syz0: added batadv_slave_0 [ 91.417744][ T6132] RDS/IB: syz0: added [ 91.426717][ T6132] smc: adding ib device syz0 with port count 1 [ 91.436603][ T6132] smc: ib device syz0 port 1 has pnetid [ 91.798161][ T6165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.61'. [ 92.088206][ T6173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.63'. [ 92.472650][ T6186] netlink: 'syz.2.70': attribute type 3 has an invalid length. [ 92.502889][ T6186] netlink: 'syz.2.70': attribute type 3 has an invalid length. [ 92.583794][ T6190] netlink: 'syz.4.71': attribute type 3 has an invalid length. [ 92.606603][ T6190] netlink: 'syz.4.71': attribute type 3 has an invalid length. [ 92.949924][ T6202] openvswitch: netlink: Message has 20 unknown bytes. [ 92.960472][ T6205] netlink: 'syz.3.79': attribute type 3 has an invalid length. [ 92.989221][ T6202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.018602][ T6205] netlink: 'syz.3.79': attribute type 3 has an invalid length. [ 93.440457][ T6223] __nla_validate_parse: 4 callbacks suppressed [ 93.440477][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.86'. [ 93.910128][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.86'. [ 94.028664][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.90'. [ 94.536622][ T6243] netlink: 176 bytes leftover after parsing attributes in process `syz.4.94'. [ 94.649622][ T6248] netlink: 44 bytes leftover after parsing attributes in process `syz.1.95'. [ 94.919026][ T6254] netlink: 44 bytes leftover after parsing attributes in process `syz.3.99'. [ 95.324079][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'. [ 95.612636][ T6278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.110'. [ 96.209250][ T6301] netlink: 148 bytes leftover after parsing attributes in process `syz.3.118'. [ 96.317810][ T6303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.119'. [ 96.973675][ T6328] netlink: 'syz.2.129': attribute type 3 has an invalid length. [ 97.021361][ T6328] netlink: 'syz.2.129': attribute type 3 has an invalid length. [ 97.133200][ T3558] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.161253][ T3558] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.192027][ T6335] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 97.201935][ T3558] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.263220][ T3558] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.665391][ T6352] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.720109][ T6356] caif0: Master is either lo or non-ether device [ 97.869902][ T6352] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.955116][ T6352] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.154343][ T6352] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.433047][ T3558] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.625286][ T6385] __nla_validate_parse: 18 callbacks suppressed [ 98.625304][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 98.648922][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.748479][ T6383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.775504][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.812394][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.908450][ T6383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.018321][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.133175][ T6383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.184835][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 99.262019][ T3558] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.274759][ T6402] caif0: Master is either lo or non-ether device [ 99.336702][ T6383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.469876][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.503519][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 99.531212][ T1102] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.549563][ T6408] ipvlan2: entered promiscuous mode [ 99.811409][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 99.820285][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.843124][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.866987][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 99.897742][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 99.925628][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.956624][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 99.966646][ T3558] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.981000][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 100.021295][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 100.570648][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.176'. [ 101.310870][ T6478] netlink: 'syz.3.184': attribute type 14 has an invalid length. [ 101.519297][ T1102] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.528267][ T6478] netlink: 'syz.3.184': attribute type 14 has an invalid length. [ 101.547701][ T1102] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.578563][ T6483] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 101.605334][ T1102] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.639578][ T1102] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.717136][ T6485] pimreg: entered allmulticast mode [ 104.254780][ T6589] __nla_validate_parse: 13 callbacks suppressed [ 104.254797][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 104.270385][ T6589] caif0: Master is either lo or non-ether device [ 104.591911][ T6601] netlink: 176 bytes leftover after parsing attributes in process `syz.0.233'. [ 104.716983][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.233'. [ 104.959497][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 104.969169][ T6617] caif0: Master is either lo or non-ether device [ 105.175033][ T6626] pimreg: entered allmulticast mode [ 105.517404][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.250'. [ 105.791285][ T6655] vlan2: entered promiscuous mode [ 105.813334][ T6655] macvtap0: entered promiscuous mode [ 105.849811][ T6657] netlink: 104 bytes leftover after parsing attributes in process `syz.2.256'. [ 105.972564][ T6666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.258'. [ 106.354839][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'. [ 106.417489][ T6680] netlink: 'syz.2.265': attribute type 14 has an invalid length. [ 106.452558][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'. [ 106.490326][ T6680] netlink: 'syz.2.265': attribute type 14 has an invalid length. [ 106.873368][ T6707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.275'. [ 107.190748][ T6720] netlink: 'syz.3.280': attribute type 3 has an invalid length. [ 107.228667][ T6720] netlink: 'syz.3.280': attribute type 3 has an invalid length. [ 107.809302][ T6739] caif0: Master is either lo or non-ether device [ 109.371240][ T6807] __nla_validate_parse: 7 callbacks suppressed [ 109.371257][ T6807] netlink: 176 bytes leftover after parsing attributes in process `syz.1.316'. [ 109.535073][ T6817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.316'. [ 109.715923][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 110.299323][ T6852] netlink: 32 bytes leftover after parsing attributes in process `syz.4.335'. [ 110.344723][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'. [ 110.397021][ T6860] netlink: 32 bytes leftover after parsing attributes in process `syz.0.338'. [ 110.465407][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 110.616457][ T6870] netlink: 232 bytes leftover after parsing attributes in process `syz.1.342'. [ 111.156922][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 111.196813][ T6892] nlmon0: Master is either lo or non-ether device [ 111.338972][ T6898] netlink: 44 bytes leftover after parsing attributes in process `syz.3.354'. [ 111.549162][ T6870] infiniband syz0: set active [ 111.571399][ T6870] infiniband syz0: added batadv_slave_0 [ 111.580802][ T6870] syz0: rxe_create_cq: returned err = -12 [ 111.600376][ T6870] infiniband syz0: Couldn't create ib_mad CQ [ 111.613604][ T6870] infiniband syz0: Couldn't open port 1 [ 111.721806][ T6870] RDS/IB: syz0: added [ 111.737469][ T6870] smc: adding ib device syz0 with port count 1 [ 111.757019][ T6870] smc: ib device syz0 port 1 has pnetid [ 111.823991][ T6913] netlink: 'syz.0.361': attribute type 14 has an invalid length. [ 111.861933][ T6913] netlink: 'syz.0.361': attribute type 14 has an invalid length. [ 111.867445][ T6917] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 111.890870][ T6917] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 112.109670][ T6924] pimreg: entered allmulticast mode [ 112.988436][ T6961] netlink: 'syz.0.377': attribute type 3 has an invalid length. [ 113.000611][ T6961] netlink: 'syz.0.377': attribute type 3 has an invalid length. [ 113.156829][ T6965] nlmon0: Master is either lo or non-ether device [ 113.781871][ T6990] netlink: 'syz.0.389': attribute type 14 has an invalid length. [ 113.804109][ T6990] netlink: 'syz.0.389': attribute type 14 has an invalid length. [ 114.436737][ T7017] __nla_validate_parse: 13 callbacks suppressed [ 114.436754][ T7017] netlink: 176 bytes leftover after parsing attributes in process `syz.3.398'. [ 114.555362][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 114.636131][ T7022] netlink: 'syz.4.400': attribute type 3 has an invalid length. [ 114.654425][ T7022] netlink: 'syz.4.400': attribute type 3 has an invalid length. [ 115.054020][ T7033] netlink: 32 bytes leftover after parsing attributes in process `syz.0.403'. [ 115.990501][ T7069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.417'. [ 116.702470][ T7076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.419'. [ 116.963588][ T7081] netlink: 'syz.4.421': attribute type 3 has an invalid length. [ 116.971724][ T7081] netlink: 'syz.4.421': attribute type 3 has an invalid length. [ 117.880397][ T7112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.435'. [ 118.214033][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 118.290696][ T7125] nlmon0: Master is either lo or non-ether device [ 118.494945][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.447'. [ 118.547526][ T7141] vlan2: entered promiscuous mode [ 118.567252][ T7141] macvtap0: entered promiscuous mode [ 118.592139][ T7147] netlink: 104 bytes leftover after parsing attributes in process `syz.3.448'. [ 118.687703][ T7135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.445'. [ 118.821395][ T7155] netlink: 'syz.4.453': attribute type 3 has an invalid length. [ 118.834901][ T7155] netlink: 'syz.4.453': attribute type 3 has an invalid length. [ 119.714570][ T7197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.469'. [ 120.217031][ T7216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.476'. [ 120.240018][ T7218] netlink: 232 bytes leftover after parsing attributes in process `syz.0.479'. [ 120.306178][ T7218] syz1: rxe_newlink: already configured on batadv_slave_0 [ 120.425760][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 120.462950][ T7222] netlink: 'syz.2.481': attribute type 14 has an invalid length. [ 120.491628][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 120.535830][ T7225] netlink: 176 bytes leftover after parsing attributes in process `syz.0.482'. [ 120.548887][ T7222] netlink: 'syz.2.481': attribute type 14 has an invalid length. [ 120.883765][ T7241] netlink: 232 bytes leftover after parsing attributes in process `syz.4.490'. [ 120.994567][ T7247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.489'. [ 121.257708][ T7256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.493'. [ 121.477824][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 121.504049][ T7263] netlink: 'syz.0.498': attribute type 14 has an invalid length. [ 121.520851][ T7241] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 121.528186][ T7263] netlink: 'syz.0.498': attribute type 14 has an invalid length. [ 121.588448][ T7265] nlmon0: Master is either lo or non-ether device [ 122.213507][ T7296] netlink: 'syz.0.511': attribute type 14 has an invalid length. [ 122.224114][ T7296] netlink: 'syz.0.511': attribute type 14 has an invalid length. [ 122.293971][ T7302] nlmon0: Master is either lo or non-ether device [ 123.716658][ T7364] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 124.058567][ T7379] nlmon0: Master is either lo or non-ether device [ 124.247633][ T7388] netlink: 'syz.1.553': attribute type 14 has an invalid length. [ 124.281297][ T1102] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.289896][ T7388] netlink: 'syz.1.553': attribute type 14 has an invalid length. [ 124.307909][ T1102] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.328500][ T1102] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.363201][ T1102] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.389451][ T7398] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 124.781504][ T7419] __nla_validate_parse: 26 callbacks suppressed [ 124.781524][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 124.814589][ T7419] nlmon0: Master is either lo or non-ether device [ 124.966741][ T7423] netlink: 44 bytes leftover after parsing attributes in process `syz.4.566'. [ 125.129922][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 125.174237][ T7429] netlink: 'syz.3.568': attribute type 14 has an invalid length. [ 125.196301][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 125.224377][ T7434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.569'. [ 125.235459][ T7433] netlink: 232 bytes leftover after parsing attributes in process `syz.4.571'. [ 125.251389][ T7429] netlink: 'syz.3.568': attribute type 14 has an invalid length. [ 125.326780][ T7433] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 125.662513][ T7450] netlink: 176 bytes leftover after parsing attributes in process `syz.3.578'. [ 125.757375][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 125.817178][ T7460] nlmon0: Master is either lo or non-ether device [ 125.960249][ T7465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.581'. [ 125.999246][ T7470] netlink: 232 bytes leftover after parsing attributes in process `syz.0.583'. [ 126.088977][ T7470] syz1: rxe_newlink: already configured on batadv_slave_0 [ 127.659166][ T7535] netlink: 'syz.1.606': attribute type 14 has an invalid length. [ 127.686569][ T7535] netlink: 'syz.1.606': attribute type 14 has an invalid length. [ 128.221136][ T5184] Bluetooth: hci4: link tx timeout [ 128.227380][ T5184] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.237861][ T51] Bluetooth: hci4: link tx timeout [ 128.251221][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.695194][ T7570] syz1: rxe_newlink: already configured on batadv_slave_0 [ 128.738112][ T7574] netlink: 'syz.3.622': attribute type 14 has an invalid length. [ 128.766463][ T7574] netlink: 'syz.3.622': attribute type 14 has an invalid length. [ 129.795320][ T7618] __nla_validate_parse: 14 callbacks suppressed [ 129.795341][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.637'. [ 130.149480][ T7636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.641'. [ 130.174562][ T7635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.640'. [ 130.312656][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 130.398814][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 130.998586][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.651'. [ 131.109704][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 131.159451][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 131.192935][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 131.254248][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 131.254403][ T7670] caif0: Master is either lo or non-ether device [ 131.287688][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 132.961701][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.339826][ T7745] caif0: Master is either lo or non-ether device [ 133.661498][ T7762] netlink: 'syz.1.687': attribute type 14 has an invalid length. [ 133.788839][ T7762] netlink: 'syz.1.687': attribute type 14 has an invalid length. [ 134.326575][ T7783] nlmon0: Master is either lo or non-ether device [ 134.639585][ T7796] caif0: Master is either lo or non-ether device [ 134.864650][ T7803] __nla_validate_parse: 21 callbacks suppressed [ 134.864670][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 135.368258][ T7831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.709'. [ 135.383971][ T7832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.710'. [ 135.458075][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 135.609239][ T7835] caif0: Master is either lo or non-ether device [ 135.796780][ T7847] netlink: 176 bytes leftover after parsing attributes in process `syz.4.715'. [ 135.818103][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 135.924495][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 136.481868][ T7878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.724'. [ 136.537017][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 136.548255][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 136.833121][ T7895] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 137.670648][ T7935] netlink: 'syz.4.744': attribute type 3 has an invalid length. [ 137.679051][ T7935] netlink: 'syz.4.744': attribute type 3 has an invalid length. [ 138.462942][ T7908] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 139.762918][ T8006] caif0: Master is either lo or non-ether device [ 139.935289][ T8015] __nla_validate_parse: 17 callbacks suppressed [ 139.935307][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 140.134622][ T8027] netlink: 232 bytes leftover after parsing attributes in process `syz.0.779'. [ 140.153917][ T8027] syz1: rxe_newlink: already configured on batadv_slave_0 [ 140.828884][ T8056] netlink: 44 bytes leftover after parsing attributes in process `syz.3.790'. [ 140.944757][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 141.001281][ T8063] netlink: 232 bytes leftover after parsing attributes in process `syz.3.793'. [ 142.178608][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.805'. [ 142.399221][ T8063] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 142.874624][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 142.932140][ T8118] caif0: Master is either lo or non-ether device [ 143.346877][ T8140] netlink: 232 bytes leftover after parsing attributes in process `syz.4.823'. [ 143.479142][ T8148] netlink: 32 bytes leftover after parsing attributes in process `syz.3.821'. [ 143.514797][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.822'. [ 143.803504][ T8155] netlink: 'syz.2.824': attribute type 14 has an invalid length. [ 143.841783][ T8155] netlink: 'syz.2.824': attribute type 14 has an invalid length. [ 144.002151][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.026205][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.095197][ T8162] caif0: Master is either lo or non-ether device [ 144.286306][ T8140] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 144.335155][ T8169] caif0: Master is either lo or non-ether device [ 145.447311][ T8213] __nla_validate_parse: 8 callbacks suppressed [ 145.447330][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 145.506465][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 145.699668][ T8215] caif0: Master is either lo or non-ether device [ 146.198078][ T8238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.852'. [ 146.545548][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'. [ 146.816171][ T8253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.858'. [ 146.848163][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'. [ 146.854445][ T8253] netlink: 152 bytes leftover after parsing attributes in process `syz.3.858'. [ 146.885474][ T8255] caif0: Master is either lo or non-ether device [ 147.260490][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 147.569596][ T8284] syzkaller1: entered promiscuous mode [ 147.581128][ T8284] syzkaller1: entered allmulticast mode [ 147.986895][ T8293] netlink: 'syz.3.872': attribute type 4 has an invalid length. [ 148.097501][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'. [ 148.136677][ T8296] caif0: Master is either lo or non-ether device [ 148.299108][ T8307] netlink: 104 bytes leftover after parsing attributes in process `syz.2.878'. [ 148.534329][ T8311] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 148.847715][ T8326] netlink: 'syz.2.885': attribute type 4 has an invalid length. [ 148.884016][ T8326] nbd: must specify a device to reconfigure [ 149.051938][ T9] IPVS: starting estimator thread 0... [ 149.151479][ T8333] IPVS: using max 37 ests per chain, 88800 per kthread [ 149.197747][ T8336] caif0: Master is either lo or non-ether device [ 150.316215][ T8362] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 150.988317][ T8391] FAULT_INJECTION: forcing a failure. [ 150.988317][ T8391] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 151.015171][ T8391] CPU: 1 UID: 0 PID: 8391 Comm: syz.4.908 Not tainted syzkaller #0 PREEMPT(full) [ 151.015194][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.015211][ T8391] Call Trace: [ 151.015218][ T8391] [ 151.015226][ T8391] dump_stack_lvl+0x189/0x250 [ 151.015259][ T8391] ? __pfx____ratelimit+0x10/0x10 [ 151.015277][ T8391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.015296][ T8391] ? __pfx__printk+0x10/0x10 [ 151.015318][ T8391] ? __might_fault+0xb0/0x130 [ 151.015350][ T8391] should_fail_ex+0x414/0x560 [ 151.015377][ T8391] _copy_from_user+0x2d/0xb0 [ 151.015397][ T8391] ___sys_recvmsg+0x12e/0x510 [ 151.015423][ T8391] ? __pfx____sys_recvmsg+0x10/0x10 [ 151.015472][ T8391] ? __might_fault+0xb0/0x130 [ 151.015496][ T8391] do_recvmmsg+0x307/0x770 [ 151.015524][ T8391] ? __pfx_do_recvmmsg+0x10/0x10 [ 151.015554][ T8391] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.015587][ T8391] __x64_sys_recvmmsg+0x190/0x240 [ 151.015609][ T8391] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 151.015625][ T8391] ? rcu_is_watching+0x15/0xb0 [ 151.015646][ T8391] ? do_syscall_64+0xbe/0x3b0 [ 151.015668][ T8391] do_syscall_64+0xfa/0x3b0 [ 151.015683][ T8391] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.015699][ T8391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.015715][ T8391] ? clear_bhb_loop+0x60/0xb0 [ 151.015734][ T8391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.015748][ T8391] RIP: 0033:0x7f365758ebe9 [ 151.015769][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.015782][ T8391] RSP: 002b:00007f36583e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 151.015803][ T8391] RAX: ffffffffffffffda RBX: 00007f36577c5fa0 RCX: 00007f365758ebe9 [ 151.015814][ T8391] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000008 [ 151.015830][ T8391] RBP: 00007f36583e8090 R08: 0000000000000000 R09: 0000000000000000 [ 151.015838][ T8391] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 151.015847][ T8391] R13: 00007f36577c6038 R14: 00007f36577c5fa0 R15: 00007ffd186aeed8 [ 151.015873][ T8391] [ 152.059575][ T8425] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 152.084906][ T8427] __nla_validate_parse: 3 callbacks suppressed [ 152.084923][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.918'. [ 152.126224][ T8425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.920'. [ 152.252933][ T8432] Driver unsupported XDP return value 0 on prog (id 232) dev N/A, expect packet loss! [ 152.922610][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'. [ 153.742122][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.750136][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.804774][ T8486] netlink: 64 bytes leftover after parsing attributes in process `syz.4.940'. [ 153.818030][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 153.965698][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 154.628656][ T8526] FAULT_INJECTION: forcing a failure. [ 154.628656][ T8526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.642975][ T8526] CPU: 1 UID: 0 PID: 8526 Comm: syz.1.954 Not tainted syzkaller #0 PREEMPT(full) [ 154.642997][ T8526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.643006][ T8526] Call Trace: [ 154.643012][ T8526] [ 154.643019][ T8526] dump_stack_lvl+0x189/0x250 [ 154.643042][ T8526] ? __pfx____ratelimit+0x10/0x10 [ 154.643058][ T8526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.643073][ T8526] ? __pfx__printk+0x10/0x10 [ 154.643093][ T8526] ? __might_fault+0xb0/0x130 [ 154.643123][ T8526] should_fail_ex+0x414/0x560 [ 154.643148][ T8526] _copy_from_user+0x2d/0xb0 [ 154.643168][ T8526] ___sys_sendmsg+0x158/0x2a0 [ 154.643190][ T8526] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.643245][ T8526] ? __fget_files+0x2a/0x420 [ 154.643267][ T8526] ? __fget_files+0x3a0/0x420 [ 154.643293][ T8526] __x64_sys_sendmsg+0x19b/0x260 [ 154.643314][ T8526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.643342][ T8526] ? __pfx_ksys_write+0x10/0x10 [ 154.643361][ T8526] ? rcu_is_watching+0x15/0xb0 [ 154.643383][ T8526] ? do_syscall_64+0xbe/0x3b0 [ 154.643404][ T8526] do_syscall_64+0xfa/0x3b0 [ 154.643420][ T8526] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.643436][ T8526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.643452][ T8526] ? clear_bhb_loop+0x60/0xb0 [ 154.643472][ T8526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.643488][ T8526] RIP: 0033:0x7fe2d738ebe9 [ 154.643504][ T8526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.643517][ T8526] RSP: 002b:00007fe2d822d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.643536][ T8526] RAX: ffffffffffffffda RBX: 00007fe2d75c5fa0 RCX: 00007fe2d738ebe9 [ 154.643551][ T8526] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 154.643562][ T8526] RBP: 00007fe2d822d090 R08: 0000000000000000 R09: 0000000000000000 [ 154.643572][ T8526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.643582][ T8526] R13: 00007fe2d75c6038 R14: 00007fe2d75c5fa0 R15: 00007fffe9140828 [ 154.643610][ T8526] [ 154.879347][ T8528] tipc: Enabling of bearer rejected, failed to enable media [ 155.118303][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 156.209101][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.964'. [ 156.226345][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 156.623442][ T8575] netlink: 64 bytes leftover after parsing attributes in process `syz.0.969'. [ 156.784729][ T8580] netlink: 'syz.0.970': attribute type 14 has an invalid length. [ 156.809917][ T8580] netlink: 'syz.0.970': attribute type 14 has an invalid length. [ 157.205705][ T8590] __nla_validate_parse: 5 callbacks suppressed [ 157.205726][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 157.249777][ T8590] caif0: Master is either lo or non-ether device [ 157.445178][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'. [ 157.539037][ T8606] netlink: 108 bytes leftover after parsing attributes in process `syz.2.978'. [ 157.641708][ T8610] netlink: 52 bytes leftover after parsing attributes in process `syz.4.980'. [ 157.675543][ T8610] nbd: must specify a size in bytes for the device [ 157.771023][ T8610] nbd0: detected capacity change from 0 to 63 [ 158.353368][ T5184] block nbd0: Receive control failed (result -104) [ 158.572836][ T8633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.991'. [ 158.735340][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.993'. [ 158.946054][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 159.447452][ T8657] bridge0: entered promiscuous mode [ 159.453579][ T8657] macsec1: entered promiscuous mode [ 159.460575][ T8657] bridge0: port 3(macsec1) entered blocking state [ 159.467832][ T8657] bridge0: port 3(macsec1) entered disabled state [ 159.475796][ T8657] macsec1: entered allmulticast mode [ 159.481614][ T8657] bridge0: entered allmulticast mode [ 159.506006][ T8657] macsec1: left allmulticast mode [ 159.511532][ T8657] bridge0: left allmulticast mode [ 159.518048][ T8657] bridge0: left promiscuous mode [ 160.175478][ T8668] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1001'. [ 160.350195][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 160.409718][ T8682] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1004'. [ 160.853221][ T8694] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 160.937879][ T8695] ================================================================== [ 160.946081][ T8695] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 160.953986][ T8695] Read of size 1 at addr ffff888077d6a970 by task syz.1.1007/8695 [ 160.961802][ T8695] [ 160.964147][ T8695] CPU: 0 UID: 0 PID: 8695 Comm: syz.1.1007 Not tainted syzkaller #0 PREEMPT(full) [ 160.964170][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.964181][ T8695] Call Trace: [ 160.964188][ T8695] [ 160.964196][ T8695] dump_stack_lvl+0x189/0x250 [ 160.964222][ T8695] ? __kasan_check_byte+0x12/0x40 [ 160.964246][ T8695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.964265][ T8695] ? lock_release+0x4b/0x3e0 [ 160.964288][ T8695] ? __virt_addr_valid+0x4a5/0x5c0 [ 160.964308][ T8695] print_report+0xca/0x240 [ 160.964324][ T8695] ? xfrm_state_find+0x2cf2/0x5400 [ 160.964341][ T8695] kasan_report+0x118/0x150 [ 160.964363][ T8695] ? xfrm_state_find+0x2cf2/0x5400 [ 160.964385][ T8695] xfrm_state_find+0x2cf2/0x5400 [ 160.964407][ T8695] ? __pfx___find_rr_leaf+0x10/0x10 [ 160.964428][ T8695] ? xfrm_state_find+0x1da/0x5400 [ 160.964446][ T8695] ? __pfx_xfrm_state_find+0x10/0x10 [ 160.964462][ T8695] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 160.964481][ T8695] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 160.964502][ T8695] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 160.964529][ T8695] ? ip6_pol_route+0x162/0x1180 [ 160.964552][ T8695] ? __pfx_ip6_pol_route+0x10/0x10 [ 160.964571][ T8695] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 160.964591][ T8695] ? __lock_acquire+0xab9/0xd20 [ 160.964620][ T8695] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 160.964646][ T8695] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 160.964667][ T8695] ? xfrm_expand_policies+0x41f/0x6a0 [ 160.964688][ T8695] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 160.964710][ T8695] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 160.964733][ T8695] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 160.964752][ T8695] ? txopt_get+0x335/0x3f0 [ 160.964768][ T8695] ? aa_label_sk_perm+0x4cd/0x630 [ 160.964790][ T8695] ? __pfx_txopt_get+0x10/0x10 [ 160.964816][ T8695] xfrm_lookup_route+0x3c/0x1c0 [ 160.964839][ T8695] rawv6_sendmsg+0xdab/0x1820 [ 160.964864][ T8695] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 160.964882][ T8695] ? finish_task_switch+0x266/0x950 [ 160.964907][ T8695] ? __pfx_aa_sk_perm+0x10/0x10 [ 160.964927][ T8695] ? sock_rps_record_flow+0x19/0x410 [ 160.964944][ T8695] ? inet_sendmsg+0x2f4/0x370 [ 160.964961][ T8695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.964980][ T8695] __sock_sendmsg+0x19c/0x270 [ 160.965002][ T8695] ____sys_sendmsg+0x52d/0x830 [ 160.965023][ T8695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.965044][ T8695] ? import_iovec+0x74/0xa0 [ 160.965063][ T8695] ___sys_sendmsg+0x21f/0x2a0 [ 160.965081][ T8695] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.965114][ T8695] ? __fget_files+0x2a/0x420 [ 160.965129][ T8695] ? __fget_files+0x3a0/0x420 [ 160.965148][ T8695] __sys_sendmmsg+0x227/0x430 [ 160.965168][ T8695] ? __pfx___sys_sendmmsg+0x10/0x10 [ 160.965185][ T8695] ? do_futex+0x333/0x420 [ 160.965218][ T8695] ? rcu_is_watching+0x15/0xb0 [ 160.965237][ T8695] __x64_sys_sendmmsg+0xa0/0xc0 [ 160.965256][ T8695] do_syscall_64+0xfa/0x3b0 [ 160.965275][ T8695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.965291][ T8695] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 160.965308][ T8695] ? clear_bhb_loop+0x60/0xb0 [ 160.965327][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.965344][ T8695] RIP: 0033:0x7fe2d738ebe9 [ 160.965360][ T8695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.965374][ T8695] RSP: 002b:00007fe2d81eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 160.965393][ T8695] RAX: ffffffffffffffda RBX: 00007fe2d75c6180 RCX: 00007fe2d738ebe9 [ 160.965407][ T8695] RDX: 0000000000000021 RSI: 0000200000000480 RDI: 000000000000000c [ 160.965418][ T8695] RBP: 00007fe2d7411e19 R08: 0000000000000000 R09: 0000000000000000 [ 160.965429][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.965440][ T8695] R13: 00007fe2d75c6218 R14: 00007fe2d75c6180 R15: 00007fffe9140828 [ 160.965461][ T8695] [ 160.965467][ T8695] [ 161.348361][ T8695] Allocated by task 6780: [ 161.352689][ T8695] kasan_save_track+0x3e/0x80 [ 161.357384][ T8695] __kasan_slab_alloc+0x6c/0x80 [ 161.362219][ T8695] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 161.367664][ T8695] xfrm_state_alloc+0x24/0x2f0 [ 161.372423][ T8695] __find_acq_core+0x8a7/0x1c00 [ 161.377346][ T8695] xfrm_find_acq+0x78/0xa0 [ 161.381746][ T8695] xfrm_alloc_userspi+0x6b3/0xc90 [ 161.386756][ T8695] xfrm_user_rcv_msg+0x7a3/0xab0 [ 161.391738][ T8695] netlink_rcv_skb+0x205/0x470 [ 161.396488][ T8695] xfrm_netlink_rcv+0x79/0x90 [ 161.401208][ T8695] netlink_unicast+0x82c/0x9e0 [ 161.406135][ T8695] netlink_sendmsg+0x805/0xb30 [ 161.410971][ T8695] __sock_sendmsg+0x219/0x270 [ 161.415734][ T8695] ____sys_sendmsg+0x505/0x830 [ 161.420587][ T8695] ___sys_sendmsg+0x21f/0x2a0 [ 161.425348][ T8695] __x64_sys_sendmsg+0x19b/0x260 [ 161.430271][ T8695] do_syscall_64+0xfa/0x3b0 [ 161.434764][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.440639][ T8695] [ 161.443034][ T8695] Freed by task 5953: [ 161.446996][ T8695] kasan_save_track+0x3e/0x80 [ 161.451714][ T8695] kasan_save_free_info+0x46/0x50 [ 161.456731][ T8695] __kasan_slab_free+0x5b/0x80 [ 161.461488][ T8695] kmem_cache_free+0x18f/0x400 [ 161.466243][ T8695] xfrm_state_gc_task+0x52d/0x6b0 [ 161.471261][ T8695] process_scheduled_works+0xae1/0x17b0 [ 161.476794][ T8695] worker_thread+0x8a0/0xda0 [ 161.481462][ T8695] kthread+0x70e/0x8a0 [ 161.485757][ T8695] ret_from_fork+0x3f9/0x770 [ 161.490448][ T8695] ret_from_fork_asm+0x1a/0x30 [ 161.495201][ T8695] [ 161.497652][ T8695] The buggy address belongs to the object at ffff888077d6a640 [ 161.497652][ T8695] which belongs to the cache xfrm_state of size 928 [ 161.511605][ T8695] The buggy address is located 816 bytes inside of [ 161.511605][ T8695] freed 928-byte region [ffff888077d6a640, ffff888077d6a9e0) [ 161.525420][ T8695] [ 161.527741][ T8695] The buggy address belongs to the physical page: [ 161.534164][ T8695] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888077d6a640 pfn:0x77d68 [ 161.544220][ T8695] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 161.552721][ T8695] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 161.560733][ T8695] page_type: f5(slab) [ 161.564721][ T8695] raw: 00fff00000000040 ffff88801b3d2140 0000000000000000 0000000000000001 [ 161.573311][ T8695] raw: ffff888077d6a640 00000000000f000c 00000000f5000000 0000000000000000 [ 161.581899][ T8695] head: 00fff00000000040 ffff88801b3d2140 0000000000000000 0000000000000001 [ 161.590583][ T8695] head: ffff888077d6a640 00000000000f000c 00000000f5000000 0000000000000000 [ 161.599269][ T8695] head: 00fff00000000002 ffffea0001df5a01 00000000ffffffff 00000000ffffffff [ 161.608052][ T8695] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 161.616944][ T8695] page dumped because: kasan: bad access detected [ 161.623403][ T8695] page_owner tracks the page as allocated [ 161.629113][ T8695] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6068, tgid 6065 (syz.2.29), ts 88920563553, free_ts 88886213360 [ 161.648208][ T8695] post_alloc_hook+0x240/0x2a0 [ 161.652976][ T8695] get_page_from_freelist+0x21e4/0x22c0 [ 161.658598][ T8695] __alloc_frozen_pages_noprof+0x181/0x370 [ 161.664485][ T8695] alloc_pages_mpol+0x232/0x4a0 [ 161.669424][ T8695] allocate_slab+0x8a/0x370 [ 161.674004][ T8695] ___slab_alloc+0xbeb/0x1410 [ 161.678709][ T8695] kmem_cache_alloc_noprof+0x283/0x3c0 [ 161.684188][ T8695] xfrm_state_alloc+0x24/0x2f0 [ 161.688994][ T8695] xfrm_add_sa+0x17d1/0x4070 [ 161.693599][ T8695] xfrm_user_rcv_msg+0x7a3/0xab0 [ 161.698629][ T8695] netlink_rcv_skb+0x205/0x470 [ 161.703481][ T8695] xfrm_netlink_rcv+0x79/0x90 [ 161.708244][ T8695] netlink_unicast+0x82c/0x9e0 [ 161.713097][ T8695] netlink_sendmsg+0x805/0xb30 [ 161.717871][ T8695] __sock_sendmsg+0x219/0x270 [ 161.722545][ T8695] ____sys_sendmsg+0x505/0x830 [ 161.727315][ T8695] page last free pid 5917 tgid 5917 stack trace: [ 161.733666][ T8695] __free_frozen_pages+0xbc4/0xd30 [ 161.738785][ T8695] __put_partials+0x156/0x1a0 [ 161.743472][ T8695] put_cpu_partial+0x17c/0x250 [ 161.748310][ T8695] __slab_free+0x2d5/0x3c0 [ 161.752742][ T8695] qlist_free_all+0x97/0x140 [ 161.757620][ T8695] kasan_quarantine_reduce+0x148/0x160 [ 161.763340][ T8695] __kasan_slab_alloc+0x22/0x80 [ 161.768453][ T8695] __kmalloc_noprof+0x224/0x4f0 [ 161.773522][ T8695] tomoyo_realpath_from_path+0xe3/0x5d0 [ 161.779091][ T8695] tomoyo_path_number_perm+0x1e8/0x5a0 [ 161.784673][ T8695] tomoyo_path_mknod+0x142/0x190 [ 161.789604][ T8695] security_path_mknod+0x17e/0x3a0 [ 161.794697][ T8695] path_openat+0xd56/0x3830 [ 161.799205][ T8695] do_filp_open+0x1fa/0x410 [ 161.804180][ T8695] do_sys_openat2+0x121/0x1c0 [ 161.808947][ T8695] __x64_sys_openat+0x138/0x170 [ 161.813907][ T8695] [ 161.816328][ T8695] Memory state around the buggy address: [ 161.821960][ T8695] ffff888077d6a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 161.830017][ T8695] ffff888077d6a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 161.838153][ T8695] >ffff888077d6a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 161.846302][ T8695] ^ [ 161.854628][ T8695] ffff888077d6a980: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 161.863045][ T8695] ffff888077d6aa00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 161.871973][ T8695] ================================================================== [ 161.948180][ T8695] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 161.955424][ T8695] CPU: 1 UID: 0 PID: 8695 Comm: syz.1.1007 Not tainted syzkaller #0 PREEMPT(full) [ 161.964806][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.974866][ T8695] Call Trace: [ 161.978139][ T8695] [ 161.981058][ T8695] dump_stack_lvl+0x99/0x250 [ 161.985672][ T8695] ? __asan_memcpy+0x40/0x70 [ 161.990256][ T8695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.995444][ T8695] ? __pfx__printk+0x10/0x10 [ 162.000041][ T8695] vpanic+0x281/0x750 [ 162.004011][ T8695] ? preempt_schedule+0xae/0xc0 [ 162.008964][ T8695] ? __pfx_vpanic+0x10/0x10 [ 162.013483][ T8695] ? preempt_schedule_common+0x83/0xd0 [ 162.018925][ T8695] ? preempt_schedule+0xae/0xc0 [ 162.023754][ T8695] ? __pfx_preempt_schedule+0x10/0x10 [ 162.029110][ T8695] panic+0xb9/0xc0 [ 162.032816][ T8695] ? __pfx_panic+0x10/0x10 [ 162.037218][ T8695] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 162.043104][ T8695] ? xfrm_state_find+0x2cf2/0x5400 [ 162.048200][ T8695] check_panic_on_warn+0x89/0xb0 [ 162.053126][ T8695] ? xfrm_state_find+0x2cf2/0x5400 [ 162.058228][ T8695] end_report+0x78/0x160 [ 162.062472][ T8695] kasan_report+0x129/0x150 [ 162.066966][ T8695] ? xfrm_state_find+0x2cf2/0x5400 [ 162.072193][ T8695] xfrm_state_find+0x2cf2/0x5400 [ 162.077120][ T8695] ? __pfx___find_rr_leaf+0x10/0x10 [ 162.082307][ T8695] ? xfrm_state_find+0x1da/0x5400 [ 162.087320][ T8695] ? __pfx_xfrm_state_find+0x10/0x10 [ 162.092587][ T8695] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 162.098326][ T8695] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 162.104472][ T8695] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 162.110709][ T8695] ? ip6_pol_route+0x162/0x1180 [ 162.115551][ T8695] ? __pfx_ip6_pol_route+0x10/0x10 [ 162.120654][ T8695] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 162.127232][ T8695] ? __lock_acquire+0xab9/0xd20 [ 162.132077][ T8695] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 162.137440][ T8695] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 162.142805][ T8695] ? xfrm_expand_policies+0x41f/0x6a0 [ 162.148173][ T8695] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 162.153533][ T8695] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 162.159156][ T8695] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 162.165125][ T8695] ? txopt_get+0x335/0x3f0 [ 162.169573][ T8695] ? aa_label_sk_perm+0x4cd/0x630 [ 162.174594][ T8695] ? __pfx_txopt_get+0x10/0x10 [ 162.179347][ T8695] xfrm_lookup_route+0x3c/0x1c0 [ 162.184297][ T8695] rawv6_sendmsg+0xdab/0x1820 [ 162.188972][ T8695] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 162.194069][ T8695] ? finish_task_switch+0x266/0x950 [ 162.199260][ T8695] ? __pfx_aa_sk_perm+0x10/0x10 [ 162.204101][ T8695] ? sock_rps_record_flow+0x19/0x410 [ 162.209376][ T8695] ? inet_sendmsg+0x2f4/0x370 [ 162.214041][ T8695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.219334][ T8695] __sock_sendmsg+0x19c/0x270 [ 162.224174][ T8695] ____sys_sendmsg+0x52d/0x830 [ 162.228951][ T8695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.234238][ T8695] ? import_iovec+0x74/0xa0 [ 162.238736][ T8695] ___sys_sendmsg+0x21f/0x2a0 [ 162.243399][ T8695] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.248596][ T8695] ? __fget_files+0x2a/0x420 [ 162.253168][ T8695] ? __fget_files+0x3a0/0x420 [ 162.257831][ T8695] __sys_sendmmsg+0x227/0x430 [ 162.262585][ T8695] ? __pfx___sys_sendmmsg+0x10/0x10 [ 162.267796][ T8695] ? do_futex+0x333/0x420 [ 162.272129][ T8695] ? rcu_is_watching+0x15/0xb0 [ 162.276885][ T8695] __x64_sys_sendmmsg+0xa0/0xc0 [ 162.281727][ T8695] do_syscall_64+0xfa/0x3b0 [ 162.286307][ T8695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.292359][ T8695] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.298498][ T8695] ? clear_bhb_loop+0x60/0xb0 [ 162.303185][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.309064][ T8695] RIP: 0033:0x7fe2d738ebe9 [ 162.313552][ T8695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.333321][ T8695] RSP: 002b:00007fe2d81eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 162.341727][ T8695] RAX: ffffffffffffffda RBX: 00007fe2d75c6180 RCX: 00007fe2d738ebe9 [ 162.349697][ T8695] RDX: 0000000000000021 RSI: 0000200000000480 RDI: 000000000000000c [ 162.357675][ T8695] RBP: 00007fe2d7411e19 R08: 0000000000000000 R09: 0000000000000000 [ 162.365655][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.373740][ T8695] R13: 00007fe2d75c6218 R14: 00007fe2d75c6180 R15: 00007fffe9140828 [ 162.382094][ T8695] [ 162.385440][ T8695] Kernel Offset: disabled [ 162.389930][ T8695] Rebooting in 86400 seconds..