last executing test programs: 21.789964317s ago: executing program 2 (id=1304): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0xff07, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf25010000000565cb23d3e7810022000000000008000a000100000006001a004e23000008000b0004000000000014007f000000050005000000000008001900ffffffff0cc91000000000000c000f0000080000000000000c0010001800"], 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x24008840) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000400), &(0x7f0000000440)=0x8) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000000), 0xfdef) recvmsg$unix(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c40)={0x190, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa8, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x200}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x800000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb487}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xdb64}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x737c}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x54e6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8a3f}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x140}, 0x4080) unshare(0x22020400) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r9, 0x104, 0x7, &(0x7f0000000080), 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f0000000380)=0xc, &(0x7f00000003c0)=0x1) getsockopt$rose(r9, 0x104, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) 21.110959925s ago: executing program 2 (id=1311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x2b, 0x80801, 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffff"], 0x4c}}, 0x0) connect$inet6(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000806000003"], 0xfce) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x1ff) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x14, 0x1, 0x0, 0x0, {0x29, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf1fb0e1"}]}, 0x48}}, 0x0) 20.22488625s ago: executing program 2 (id=1317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1d8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x154, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x140, 0x6, [@m_mirred={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "b9e6cb743efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d47ccb820"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xe0, 0x9, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x10000000, 0x8, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1336e5ff, 0x9, 0x6, 0x0, 0x1}, 0x7}}]}, {0x51, 0x6, "216194e50e7faa7649d1c06839be3b59a7f1bb6c7fbd0e7344b4e9b561d4b406f4a7a0c7e6ebe935ccd4c10fd3ff9357cc52da0d5a0f390e738e2309dae089a4a01ae1f8d77e0d976b93b2929e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x414a, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x5c, 0x1402, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004090}, 0x4040001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="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", 0x13c}], 0x1}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xeda48f577fef70c2, 0x0, 0x7, 0x3, 0x7f, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000020000000000000000"}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000002000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 19.778246856s ago: executing program 4 (id=1324): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x2, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x80, 0x32}, 0xa, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x2}) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002c7c9100000000000500000006000100050000000808000be60000000008000c00a80a00000c0016000400"/58], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000040)=0x80a0, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@fallback=r6, 0xffffffffffffffff, 0x2b, 0x24, 0x4, @void, @void, @void, @value}, 0x20) socketpair(0x23, 0x5, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 19.592003653s ago: executing program 0 (id=1327): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x1}}, 0x80, 0x0}, 0x4000000) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time_for_children\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000040)="78d6", 0x2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000ac0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00007edcff48d744", 0x58}], 0x1) 19.408906926s ago: executing program 0 (id=1329): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(&(0x7f0000000040), 0x55, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x2, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x200, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180002ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 19.103187096s ago: executing program 4 (id=1331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000004050005000a000000140007800800114000000000080012400000ffff12000300"], 0x60}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r3, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) (async) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4) (async) bind$x25(r2, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbff, {0x80, 0x0, 0x14, 0xcb, 0xfd, 0x1, 0x0, 0x0, 0x3100}, ["", "", "", ""]}, 0x1c}}, 0x4000080) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="230000000a0a010000000000000000551a00006f9d61dff5492faba2b3e2f4b232d871101f9c996488b73017b55ec90055506cb4f24cb7bae2d987d335caa2b82a9217a0da6d95c90018c1ff992c96b77342fdb3d71a296605fba89e33a6d994922ff51a5a283b142494abb06f78c1dd14ee2d6965777efd8bbc8382f7c7fe9a81bfe1a2ce"], 0x14}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) write$cgroup_pid(r7, &(0x7f0000000400)=r8, 0x12) 18.874261506s ago: executing program 0 (id=1333): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80800) sendto$inet6(r1, &(0x7f0000000080)="42496a2498b83476d5e58bf10fbb1e32d3efb88113aa3dfa3c1c7859a6d482651e646a362873762fbf66e6436b25491d417f7ee4497d6b1b3ffae6d583b81cd654ffcceb957c74c1301b28512355726bf7f5976361713aeca27b18b42d91ec965bea803ae40090640e6ba2b7eff16fe67927cacd861e1b1bd60280c7fd4707", 0x7f, 0x4000040, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1}, 0x1c) socket$unix(0x1, 0x2, 0x0) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x80000) write(r2, &(0x7f00000001c0)="d606e2a89b7ab634d6faa0aee73822f720217135460a966c00442c3740a764a9ee52b6b5daea3d9bf8c05803732cffaac9094e036997beb39e9cff0a27a7120c4e2df62ee45dbdb3c09bdc805e12838806a6dac85775a07cb087e56d9ff5fee8c59bb29173f5613af64f4a7907e1b86b8fd14cd6f2b6512c225f2b2e5910e9fb2f2a68e5267ef8457243083d5308274a8702415a84efbca7efe208617c164fb7e38e3b546fcf36fb4e735aa37a2e67c44e7d29d7f14d45c1629efe653e63b477", 0xc0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)={'c', ' *:* ', 'rw\x00'}, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) shutdown(r0, 0x1) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x39, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf, @map_fd={0x18, 0x2}, @generic={0x3, 0x8, 0x1, 0x4, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x4e3cf027, 0xa0, &(0x7f00000005c0)=""/160, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xf665, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r4, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], 0x0, 0xd2, &(0x7f0000000880)=[{}, {}], 0x10, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r5 = accept$inet6(r1, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000b00)=0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000b40)=0xfd5, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000b80)={0x0}, &(0x7f0000000bc0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000c00)={r7, 0x8}, 0x8) r8 = accept$inet6(r3, &(0x7f0000000c40)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000c80)=0x1c) sendto$inet6(r8, &(0x7f0000000cc0)="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", 0xfc, 0x20040810, &(0x7f0000000dc0)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000e40)=0x10010, 0x4) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0), r9) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, r11, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008044}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000fc0)={r7, 0x40a8, 0x904, 0x8}, &(0x7f0000001000)=0x10) bind$inet6(r5, &(0x7f0000001040)={0xa, 0x4e21, 0x77, @mcast1, 0x3ff}, 0x1c) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), r5) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x48, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440}, 0x20004040) setsockopt$IP_VS_SO_SET_EDIT(r10, 0x0, 0x483, &(0x7f0000001200)={0x1d, @remote, 0x4e21, 0x0, 'lblc\x00', 0x4, 0x31b9, 0x6f}, 0x2c) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000001300)={{r0}, 0x0, 0x8, @inherit={0x80, &(0x7f0000001280)={0x0, 0x7, 0x9, 0x1, {0x20, 0x3, 0x4, 0x100, 0x910}, [0x10, 0x4, 0xec56, 0x7, 0x1fc00, 0x2, 0x8]}}, @subvolid=0x2}) 18.715150567s ago: executing program 4 (id=1337): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100202e208a3ae486af25000000ca3c01006e657464657673696d0000000f0002006e65746465767300000000000000d200", @ANYRES64=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x491, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r10 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)={r7}) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r11, 0x0, 0x482, &(0x7f00000007c0)=""/71, &(0x7f0000000040)=0x47) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0x4c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x370, 0xffffff80, 0x178, 0x0, 0x178, 0x4d0, 0x230, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x370, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000}]}}, @common=@unspec=@cluster={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xffff, 0x3, 0x9, '\x00', 'syz0\x00', {0x7}}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) mmap(&(0x7f0000417000/0x4000)=nil, 0x4000, 0x4, 0x4010, 0xffffffffffffffff, 0xef429000) socket$nl_route(0x10, 0x3, 0x0) 18.69132553s ago: executing program 0 (id=1338): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="757e938fd660aaaaaaaaaabb86dd6012000800183afffe8000000000000000000000000000bbff0200000000000000000000000000018800907808000000ff010008000000000000000000000001799d65585620f95175acf567a654a0fcfb6044ab719c114a9eeacc8c6eabae95c79d04ec86da8627d0f90b54179d88cace4a110552ca181881fbf341b789ceb79950165750f4fd8b3748b10c03ba46e1faa1afaa42480b9522ff20dbdc978be0ea3374a4c04e28308b22e79a34d609c426ed103d78f5d46b54f698af252cf740680e751f03fe7a0e9e4ae3081f6ad32e73bd04c1ca1832aa0000000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000200)='mm_page_alloc\x00', r3}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0xffffff80, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000100)=0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001b40)) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000980)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x4, 0x9, {{0x5, 0x4, 0x3, 0x1e, 0x14, 0x64, 0x0, 0xee, 0x4, 0x0, @multicast1, @local}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtclass={0x58, 0x28, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x2, 0x9}, {0xfff1, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0xf8, 0x8}}, @TCA_RATE={0x6, 0x5, {0xe1, 0xf}}]}, 0x58}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c0002000000000000000000100007800c00018008000100", @ANYRES32=r8, @ANYBLOB="6511fae83c0911ebc04cca9d08"], 0x3c}}, 0x0) r11 = socket$kcm(0xa, 0x1, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000001540)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x5, 0x5, 0x3, 0x500, 0x4, 0x80050102, r13}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000001b00)=@newqdisc={0xce0, 0x24, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xa, 0xf}, {0x3, 0xfff3}, {0x10, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xca4, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x7, 0x2, 0x3, 0x3, 0x5, 0x9, 0x9, 0x2, 0x0, 0x3c00, 0xb776, 0x8, 0x5, 0x764, 0x4, 0x7, 0xb, 0x10001, 0x10001, 0x8, 0x9a7, 0x8b3, 0x6, 0x4, 0x7, 0x81, 0x8, 0x3, 0x7f, 0x5, 0xc2, 0x1, 0x79a, 0x7, 0x6, 0x5, 0x401, 0x1, 0x15, 0x7, 0x3, 0x6, 0x9f, 0x9, 0x1, 0x46, 0xf942, 0x7f, 0xc, 0x2, 0xd, 0x10000, 0xffffffff, 0xab, 0x9, 0xa7, 0x8, 0xffff, 0x10, 0x0, 0x7, 0x1, 0x42, 0x8, 0xfffffff9, 0x6, 0x7f, 0x8aa00000, 0x5, 0xcc4, 0x95, 0x80000000, 0x8, 0x75, 0x65, 0x8, 0xd, 0x1, 0x7, 0x4, 0x1, 0x4, 0x0, 0x0, 0xd6d1, 0xbac0, 0x80, 0x6, 0x10, 0x4, 0x7ff, 0x5, 0x9, 0x9, 0x10001, 0x6, 0x0, 0x0, 0x7fff, 0x6, 0x5, 0xd, 0x7, 0x2, 0x0, 0x2, 0xff, 0x1, 0x7ff, 0x800, 0xfffffff7, 0x3, 0x10000, 0x401, 0xd, 0x0, 0x4, 0x10d, 0x1, 0x74b, 0x4, 0x1, 0x9, 0x9, 0xc, 0x8, 0x8, 0x11, 0x4, 0x5, 0x3, 0x5, 0x6, 0x7, 0x0, 0xff, 0x1, 0x100, 0x7, 0x5, 0x1, 0x5, 0x3, 0xb1, 0x9, 0x7, 0x6, 0x1, 0x800, 0x3, 0x29e, 0x9, 0x8, 0xde, 0xffffffc0, 0x27, 0x10000, 0x4, 0x7ff, 0x1000, 0x0, 0x7, 0x7, 0xcd, 0x8, 0x7ff, 0x1ff, 0xc, 0x8, 0x6, 0x3, 0x7, 0x200, 0x6, 0xff, 0x86, 0xffff, 0x6, 0x9, 0x4, 0x118, 0xe0, 0xb52f, 0x4, 0x4, 0x80000000, 0x2, 0x5, 0x84c5, 0x6, 0x400, 0x3, 0x401, 0x7fffffff, 0x1000, 0x4, 0x2fffe, 0xec9, 0x8, 0x4d7d, 0xa, 0x4, 0x5, 0x53ba8824, 0x0, 0x4, 0xffffff81, 0x3, 0xf, 0xfff, 0xe, 0x3, 0x0, 0x6, 0x9, 0x45, 0x80, 0x7, 0x8, 0x0, 0xd2, 0x3ff, 0x4, 0x5, 0x3, 0x4, 0x400, 0x6, 0x2, 0x4, 0x4, 0x7, 0x9, 0x5, 0x100, 0x9, 0x44, 0x8, 0x80000001, 0x9d5, 0x8, 0x5, 0xa3, 0x7ff, 0x3, 0x5, 0x2, 0x7fff, 0x2, 0x4f, 0x2, 0x8001, 0x36]}, @TCA_TBF_BURST={0x8, 0x6, 0x94b81a9}, @TCA_TBF_PBURST={0x8, 0x7, 0xc79}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x4, 0x0, 0x7fff, 0x3ea}, {0x7, 0x2, 0x0, 0x8000, 0xc, 0x7fffffff}, 0xdc, 0x1, 0x983}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x10000000, 0x9, 0x58, 0x8, 0x6, 0x0, 0x3, 0x8, 0x101, 0x2, 0x9, 0x8, 0x4, 0x9, 0x401, 0x9, 0x6, 0x9, 0x1, 0x81, 0xfffffff7, 0xbb50000, 0x3, 0x3, 0x6e2e, 0x3, 0x7, 0x4, 0x7, 0x81, 0x5dfaba5d, 0x1, 0x80, 0x7c, 0x9, 0x580000, 0x1, 0x8, 0x9, 0x40, 0x90, 0x9, 0x7, 0x400, 0x2, 0x5, 0x400, 0x9, 0x1, 0x6, 0x1, 0x7, 0xfc2a, 0x3, 0xa, 0x8, 0x401, 0x8, 0x13bdcb86, 0xffff0ce6, 0xffffffc0, 0xac, 0x81, 0x8b89, 0x2f0, 0x1000, 0x7, 0x31c, 0x400, 0x2, 0x200, 0xfffffffc, 0x5, 0xf, 0x188, 0xfffffffb, 0x5, 0x800, 0x8001, 0xa4, 0xe6b, 0x2, 0x80000001, 0x5, 0x4714, 0x600, 0x40, 0x1, 0x69a2, 0xfffffff7, 0x7, 0x8, 0x8000, 0xf, 0x439, 0x80000001, 0x8, 0x6747, 0x0, 0x81, 0xf, 0x3, 0xfffffffa, 0xe, 0x8, 0x1, 0x3, 0x3, 0x9, 0xfffffdc2, 0xffffff8b, 0xb, 0xac3, 0xe00, 0x2, 0x10, 0x7ff, 0x7, 0x0, 0xffffffff, 0x5, 0x3ff, 0x5, 0x401, 0x8001, 0x3, 0x100, 0x256, 0xfffffffb, 0x9, 0x8, 0x2, 0x4, 0x4, 0xc71, 0x1, 0x6, 0x9d0, 0x9, 0x9, 0x916, 0x3, 0x4, 0x6, 0x0, 0x2, 0xa, 0x2, 0xffffffff, 0x8, 0x5, 0x1, 0x7, 0x1, 0x200, 0x2, 0x4, 0x1310, 0x800, 0x3ff, 0x2, 0x4, 0x6, 0x3, 0x10000, 0x2, 0x80000000, 0x10000, 0x2, 0x3, 0x3, 0x1ff, 0x1d2d, 0x3, 0x8, 0x8, 0xffff, 0x6, 0x3, 0x7, 0x91b, 0x4, 0x9, 0xfffffffb, 0x80000001, 0x9, 0x2, 0x7fff, 0x8e, 0x2, 0xfffffffe, 0x1, 0x4, 0x7fffffff, 0xf1, 0x318c, 0x899, 0x86, 0xd, 0xfffffff9, 0x7, 0x1, 0xfffffff9, 0x1, 0x7, 0x401, 0xb, 0x1, 0x80000001, 0x200, 0x2, 0x800, 0x10001, 0xf84, 0x0, 0x6, 0x2, 0x7fff, 0x9, 0x7fff, 0x7, 0xb02, 0x3, 0x2, 0x37, 0x5, 0x8, 0x5, 0xffff34ba, 0x1, 0x8, 0x1, 0x4, 0x984e, 0x5, 0xfffffff9, 0xf009, 0x2, 0xbd4, 0x0, 0x80000001, 0x1, 0x8, 0xe2, 0x5, 0xc, 0x7, 0x1, 0x6, 0x9, 0x7f, 0xe99e, 0x1000, 0x1, 0x6]}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x9, 0x100, 0x4, 0x10000000, 0x9, 0x0, 0x5, 0xf, 0x7, 0x4, 0x4, 0x1, 0x1d, 0x80000000, 0x2, 0x2d3c, 0x1, 0xce7e, 0xff, 0x1, 0x6d, 0x3ff, 0x7, 0x1, 0xe3d, 0x5, 0x4, 0x8, 0x3, 0x0, 0xb, 0x800, 0x6, 0x9c, 0x81, 0x7, 0x6, 0x4, 0x0, 0x0, 0x400, 0x92e, 0x3201, 0x2, 0xc3e4, 0x5, 0x1, 0x6, 0x5, 0xfffffffb, 0xfffffffa, 0xd75, 0x0, 0x6e, 0x9, 0x1, 0xfffffff3, 0x9, 0xffff0c5c, 0x0, 0x7, 0x664, 0x48a, 0x3, 0x4, 0x2, 0x7, 0x10001, 0x6, 0xfffffff8, 0x1, 0x3, 0xfffffffc, 0x650, 0x82a, 0xe3fd, 0xfffffffa, 0x6, 0x0, 0xac, 0x5, 0xd, 0x0, 0x1, 0x3, 0x9, 0x7, 0x3, 0x9, 0x1ff, 0xc, 0x6, 0xe000000, 0x5, 0x7, 0x2, 0x8, 0x8000, 0x8, 0x2, 0x2, 0xb8, 0x3, 0x8, 0xd, 0xed0, 0x10, 0x80, 0xc5, 0x2, 0x80000000, 0xfffffff6, 0xfffffff7, 0x10000, 0x8, 0x5, 0x4, 0x1, 0x3, 0x1, 0x1, 0x800, 0x1931, 0xffff, 0x7f, 0xa, 0x1, 0xd6c, 0x401, 0x2, 0x40, 0x1, 0x0, 0x2, 0x5, 0xd, 0x3, 0x0, 0x0, 0x3fe00, 0x7, 0x3, 0xb4c, 0x96ec, 0x365d, 0xa48, 0x96c6, 0x8, 0x7, 0x8, 0x6, 0xd9, 0x2b7, 0x7f, 0x100000d, 0x5, 0x0, 0x9, 0x4, 0x0, 0x2, 0x9, 0x101, 0x9, 0x8, 0x10, 0x10001, 0xb, 0x8, 0x8, 0x0, 0x3, 0x4, 0x3, 0x7, 0x7000, 0x4, 0x100, 0x4, 0x1, 0x7fffffff, 0xb521, 0x5, 0x8000, 0x6353, 0xffffffff, 0xffff8000, 0x3168, 0x400, 0x8, 0x2, 0x3, 0x1, 0xfffffffe, 0x80000000, 0x10000, 0xffffff7f, 0x5, 0xfffffffb, 0x27, 0x1, 0x2, 0x50e, 0x1ff, 0x7, 0x4, 0x9, 0x5948, 0x4, 0x9db, 0xfff0000, 0x3, 0x4, 0x1, 0x0, 0x5, 0x9, 0x660, 0xd, 0x6, 0x1, 0x8, 0x7, 0xda, 0x1000, 0x4, 0x2, 0x5, 0x8, 0xffffff68, 0xfffffff1, 0xc, 0x7, 0x6, 0x2, 0x0, 0x1, 0x5, 0xe6, 0xf, 0x3ff, 0x0, 0x4, 0x2, 0xffffffff, 0x0, 0xb9, 0x6, 0x9, 0x0, 0x3, 0xfb6, 0x5, 0x8, 0x6689]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0964ff7b09950fc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x7, 0x7, 0x2, 0x3}, {0x1, 0x1, 0x2, 0x5, 0x3, 0x7}, 0x400, 0xf, 0x530}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x2, 0x9, 0x3, 0x7}, {0x7, 0x0, 0x8000, 0x20, 0x2, 0x5}, 0x8, 0x2, 0x656}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0xc6, 0x72}}]}, 0xce0}, 0x1, 0x0, 0x0, 0x40}, 0x4040041) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) 18.348899662s ago: executing program 2 (id=1341): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0x1, 0x0, 0x2, 0xe, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcbf3}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd26}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x2, @remote, 0xe03}}]}, 0x70}}, 0x0) r2 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000180)=r4, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x90}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffe82, &(0x7f0000000480)='cgrouj\x00\xc6\xbfQf\xf6\xcf\x81\xf8\x1b\xf8\xcf\xd0\xdb^\t\x82=\x8f\t\xf4yY\x111]\xca\xe5\x18\x18\xc3\x9d\x9fu\f5\xe1\xfb\xa7u\xa9\x80\xefbD\xa4\xa4\x00\xc1\xa9\xe7\xa4\x8c\x97P7\xfd\xd5tY\x86\x96\xb4\a\x90\x1d$\xbe$\x9d\x03\xb0R\xda\x183\x9d\xe3,~\x9e\x9c\xf9OYe\x9f&\x8fs\xb2gj\x01/F\xbc\xb8E\xba\xce\xbbJ\xc1d\x1e9\x16\x1bn\x86=\xe6}$\xb1?\xdcj\xcb\\\xc6\xb4\x7f\xef\x01\x17;\xf3\xb3\x00\xb5\xd94\xe7\xb5\xad~\x80z\xc1c\xa9H\xea\x03Y\xd3\xa9\xbd6)}\xb4G\xdb\xf9\xcee\x98\xd3V\xa0\xdf\xf0[\xe2\x12\x85\xd2\x87\x8e\x0fv\x8b\xcd\xb4\xd4.\x0eY\xd2\xcf{\xe7\xf9\xccx\xb3\x18\xee\xcaC{\xd8j\xb6*\x04\xaf,\x0e\x7f\x1d\xb4\x96n=\xff\xfakhs`0\xdc\x88\x83\xdd(T\xf4\xcf\x17\xfeSzd\n\x7f\xc4\x83\xa3\x1ae\xb9_\x05\\f\x9ahf\xfe\x91\xb0t\x1c2\xe0\x88\x88\x88\x9cs&l\xbe\a\xf3\x7fN\x11*\x12\x17\x1a\xb3^\xbe|\xa5H\xf9\xc2TQ\xac\x8e\xdc\xed\xe1^\x97\x95z\x02\xd8\xf5]B\x9eB\x13\xc7\xe6\xb25\xf3\x94p\xe6\x88\x9f\xe0@\xd2\xd2mEt\"\xc4M+wv\xca~\x87x\xcez!\x05\x00\xa6\x12Pd\xb1\xc8\xd0\xbb\n\x1e\x80\x91\x88\x99Kc\x1dn&\x1c\xef[\xe5\n\x9c\xe1\xde\x02\xd8\x89\xdd\xd3?pQ\xfc\xd8\xfdD\x039\x01M8\xa5\x9d@G\xc8\x98O\xfd\xfb\xb76\xd3\xa7\x82I\x16M\xa5\xaci\xb5\xe6\x17\x81\xef\"\xd21\xfd\xdd\xd3\xcd\x17\x06'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xe}}]}, 0x60}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, [@alu={0x4, 0x0, 0xb, 0x6, 0x165753a62eb0b8ee, 0x20, 0x4}, @call={0x85, 0x0, 0x0, 0x68}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}]}, &(0x7f00000003c0)='GPL\x00', 0x3455ff8e, 0x0, 0x0, 0x41000, 0x5, '\x00', r11, 0x25, r5, 0x8, &(0x7f0000000400)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x2, 0x7fffffff, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r12], &(0x7f0000000700)=[{0x1, 0x4, 0x0, 0x8}, {0x1, 0x2, 0x1, 0x2}, {0x2, 0x1, 0x7, 0x5}, {0x1, 0x5, 0x10, 0x9}, {0x0, 0x3, 0xe, 0x3}, {0x4, 0x5, 0x5, 0x5}], 0x10, 0x2, @void, @value}, 0x94) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000dac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000340)=[{r0, 0x3028}, {r5, 0x11c}, {r2}, {r8, 0x200}, {r3, 0x42}, {r0, 0x80}, {r6, 0x3400}, {r2, 0x401}, {r2, 0x501a}], 0x9, 0x6) write$cgroup_subtree(r9, &(0x7f0000000980)=ANY=[@ANYBLOB="05986a712b637075204b3e67c99e73fd1e16c30dc72aa91ab1d1115680dd1b80c6443ea401216dac0a98463e"], 0x5) 17.581101517s ago: executing program 3 (id=1346): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x401) listen(r1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x80002011}) shutdown(r1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 17.46432182s ago: executing program 0 (id=1347): syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004f00005000000000000890780a210104ac1414aa441c0a01ffffffffffffaa7eac1414aa00008001ac1e000100000008070c0990ec742f779f8fa6a300000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) 17.353389392s ago: executing program 1 (id=1348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x3c}}, 0xc000) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x54, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="db1a0000000000000000030000002c00070073797374656d5f753a6f626a65637457723a696e6574645f6368696c645f657865635f743a7330001400060076657468305f746f5f7465616d00000005000400ac1e00fe040005"], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002600)=@delchain={0x1d4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x40, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x144, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x130, 0x6, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xfc, 0x9, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x10000000, 0x8, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1336e5ff, 0x9, 0x6, 0x0, 0x1}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x20000000, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x6, 0x7, 0x1f31, 0xfffffff5}, 0x4}}]}, {0x2f, 0x6, "216194e50e7faa7649d1c06839be3b59a7f1bb6c7fbd0e7344b4e9b561d4b406f4a7a0c7e6ebe935ccd4c1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x2, r12}}], 0x20, 0x2400e044}, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r13, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x89010}, 0x40060) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newtaction={0x178, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x0, {}, [{0x164, 0x1, [@m_tunnel_key={0x160, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x101, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x178}}, 0x44000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17.048985884s ago: executing program 1 (id=1349): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket(0x28, 0x5, 0x0) socket(0x21, 0x3, 0xa) (async) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) (async) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020027bd7000fcdbdf25770000000800ef00040000000500ee00000000000800ef00050000000500ee00030000000800ef00090000000500ee00030000006bd8bf2908d90590c1a2af8eb2199c51a892ff7582766ce68ffcb515d811003630afee9d4404bae37f9a3da80b6bc15b294df8317bf6d273c0a973cc452747487c83d4106b867f87dc6b84a3bab74293e5"], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x44) 17.010880355s ago: executing program 1 (id=1350): syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delqdisc={0x2c, 0x25, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xffff, 0x3}, {0xffff, 0xfff1}, {0x5, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0xcc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x7, r3}) (async) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x7, r3}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4, 0xbe9) (async) r4 = socket$inet(0x2, 0x4, 0xbe9) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x402, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000300)=0x6, 0x4) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000340)={0x0, 0x2, "748173", 0x7, 0x3}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = accept$netrom(r5, &(0x7f0000000380)={{0x3, @default}, [@remote, @remote, @null, @null, @default, @remote, @bcast]}, &(0x7f0000000400)=0x48) sendmsg$rds(r5, &(0x7f0000000a80)={&(0x7f0000000440)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/116, 0x74}, {&(0x7f0000000580)=""/168, 0xa8}, {&(0x7f0000000640)=""/54, 0x36}, {&(0x7f0000000680)=""/223, 0xdf}, {&(0x7f0000000780)=""/122, 0x7a}, {&(0x7f0000000800)=""/105, 0x69}, {&(0x7f0000000880)=""/74, 0x4a}, {&(0x7f0000000900)=""/12, 0xc}], 0x9, &(0x7f0000000a00)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xffffffff}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x48, 0x2000080}, 0x48841) getsockopt$inet_mreqn(r6, 0x0, 0x0, &(0x7f0000000ac0)={@multicast1}, &(0x7f0000000b00)=0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r7, 0x0, 0xb1, 0x36, &(0x7f0000000bc0)="f522dc57cf425886b3e9f7f253c22604e929c39a8d2bb05a09eeaacc9cee3ddbd692798b953aac514154e76b841888f62b8f3987115505ab6ca482a7290addd6bb4fafbc361819c3790b76040ec3d81fbaa29ad6511d20d156c5fc673ec1a15449d035dcc3263dab8d228769edf1446ee3532bbf5f0bd4ccf93a184dda7ef2f014050f16018a26bef84e9f8544cb309b208b2ba69387b3e2ec638dee398a394ad5a2dede4f7c8d828a4af634e57c95cfb2", &(0x7f0000000c80)=""/54, 0x8, 0x0, 0x5a, 0xd7, &(0x7f0000000cc0)="25df513b1d9e0b74fad8f0e135194631d42aa0f7b486acd62ca41017c942eb9bafb3d4d66dc12008e47090db3ccee10d1cc82fc0319189a11e25d1d0d9397671b4733ea2eea293ee3e6f3fc261772a82b7d66dd6f97ae83c79f4", &(0x7f0000000d40)="948d3470c566cd1c750a442fe9d58b8de6107a33f56b2d3e89a245ed4ded2b716109ef90f14c12845039f1835236879991150fc8eb41f063b54e3b39a7ffdcc62d6e524a27d68a338f300a5a6f2be43eae860232650431d64b10b171f0300f05b77c498401ad4eb2713b9bd48c47f996c2f10216919c953eef4ce3b7f7cb270b17282e8d430267cf47b131542007e4665eb41cf8c0b49311abb6c5772d6eb901f4809f4a39ce82640a1ed00c5071b8dd6387f403af5f5377d69c5004114dff41dd62d5681b1980ed4d01cde095b72461185df87dcfa49b", 0x2, 0x0, 0xfffffff8}, 0x50) r8 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000ec0), 0x0) recvmmsg$unix(r8, &(0x7f0000002b00)=[{{&(0x7f0000000f00), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000f80)=""/182, 0xb6}, {&(0x7f0000001040)=""/172, 0xac}, {&(0x7f0000001100)=""/100, 0x64}, {&(0x7f0000001180)=""/94, 0x5e}, {&(0x7f0000001200)=""/152, 0x98}], 0x5, &(0x7f0000001340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000001480), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001500)=""/188, 0xbc}, {&(0x7f00000015c0)=""/240, 0xf0}, {&(0x7f00000016c0)=""/41, 0x29}, {&(0x7f0000001700)=""/224, 0xe0}, {&(0x7f0000001800)=""/186, 0xba}, {&(0x7f00000018c0)=""/148, 0x94}, {&(0x7f0000001980)=""/233, 0xe9}, {&(0x7f0000001a80)=""/129, 0x81}, {&(0x7f0000001b40)=""/78, 0x4e}], 0x9, &(0x7f0000001c80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e40)=""/195, 0xc3}, {&(0x7f0000001f40)=""/246, 0xf6}], 0x2, &(0x7f0000002080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002100)=""/127, 0x7f}], 0x1, &(0x7f00000021c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002380)=""/6, 0x6}, {&(0x7f00000023c0)=""/164, 0xa4}, {&(0x7f0000002480)=""/152, 0x98}, {&(0x7f0000002540)=""/37, 0x25}], 0x4, &(0x7f00000025c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000002640), 0x6e, &(0x7f00000028c0)=[{&(0x7f00000026c0)=""/3, 0x3}, {&(0x7f0000002700)=""/145, 0x91}, {&(0x7f00000027c0)=""/226, 0xe2}], 0x3, &(0x7f0000002900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000002940), 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/171, 0xab}, {&(0x7f0000002a80)=""/61, 0x3d}], 0x2}}], 0x7, 0x0, &(0x7f0000002cc0)={0x77359400}) (async) recvmmsg$unix(r8, &(0x7f0000002b00)=[{{&(0x7f0000000f00), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000f80)=""/182, 0xb6}, {&(0x7f0000001040)=""/172, 0xac}, {&(0x7f0000001100)=""/100, 0x64}, {&(0x7f0000001180)=""/94, 0x5e}, {&(0x7f0000001200)=""/152, 0x98}], 0x5, &(0x7f0000001340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000001480), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001500)=""/188, 0xbc}, {&(0x7f00000015c0)=""/240, 0xf0}, {&(0x7f00000016c0)=""/41, 0x29}, {&(0x7f0000001700)=""/224, 0xe0}, {&(0x7f0000001800)=""/186, 0xba}, {&(0x7f00000018c0)=""/148, 0x94}, {&(0x7f0000001980)=""/233, 0xe9}, {&(0x7f0000001a80)=""/129, 0x81}, {&(0x7f0000001b40)=""/78, 0x4e}], 0x9, &(0x7f0000001c80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e40)=""/195, 0xc3}, {&(0x7f0000001f40)=""/246, 0xf6}], 0x2, &(0x7f0000002080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002100)=""/127, 0x7f}], 0x1, &(0x7f00000021c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002380)=""/6, 0x6}, {&(0x7f00000023c0)=""/164, 0xa4}, {&(0x7f0000002480)=""/152, 0x98}, {&(0x7f0000002540)=""/37, 0x25}], 0x4, &(0x7f00000025c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000002640), 0x6e, &(0x7f00000028c0)=[{&(0x7f00000026c0)=""/3, 0x3}, {&(0x7f0000002700)=""/145, 0x91}, {&(0x7f00000027c0)=""/226, 0xe2}], 0x3, &(0x7f0000002900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000002940), 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/171, 0xab}, {&(0x7f0000002a80)=""/61, 0x3d}], 0x2}}], 0x7, 0x0, &(0x7f0000002cc0)={0x77359400}) r12 = epoll_create(0x9) epoll_pwait(r12, &(0x7f0000002d00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xffffffff, &(0x7f0000002d80)={[0x7c5d]}, 0x8) bind$xdp(r10, &(0x7f0000002dc0)={0x2c, 0x1, r0, 0x4}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004040)={&(0x7f0000002e40)=@flushpolicy={0x11e4, 0x1d, 0x1, 0x70bd2a, 0x25dfdbff, "", [@algo_aead={0x13f, 0x12, {{'pcrypt(morus1280-generic)\x00'}, 0x798, 0x200, "451ae8d9ffcc50dadeb5f7fe85aa1d327e61edf1f6df1b2d7558124c45904005019e857e6aac3b79204da6cd984beea3e70061cb871d8db08dc12a06e3d807927d914db4e721ddb0a094365e0cfc5737050b627013dc36303333b0f33e7d0ab57b67cfcfdac27ee0cfd9a0e0cd3431c048bdb367729107ce92e9bf3eb6ecd2e06ec22d539682890255af718f1d43ea15b2c8f5af71076b0bec5dc536a989a8e878656d4ba8e65bb6f2301d203b01e66ef0e70d068989c47851023f21eb13d2ef6f8242b3ff1d8238562d8acda9331d38b5aa8da20dc37a2d052bdffd6e05153efbf44429a14e57ecd941dbad7f981ac2d0386d"}}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in=@multicast1, 0x0, 0x2}}, @policy_type={0xa}, @tfcpad={0x8, 0x16, 0x6}, @offload={0xc, 0x1c, {r0}}, @algo_crypt={0x1048, 0x2, {{'ecb-aes-neonbs\x00'}, 0x8000, "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"}}]}, 0x11e4}, 0x1, 0x0, 0x0, 0x10}, 0x20044004) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004040)={&(0x7f0000002e40)=@flushpolicy={0x11e4, 0x1d, 0x1, 0x70bd2a, 0x25dfdbff, "", [@algo_aead={0x13f, 0x12, {{'pcrypt(morus1280-generic)\x00'}, 0x798, 0x200, "451ae8d9ffcc50dadeb5f7fe85aa1d327e61edf1f6df1b2d7558124c45904005019e857e6aac3b79204da6cd984beea3e70061cb871d8db08dc12a06e3d807927d914db4e721ddb0a094365e0cfc5737050b627013dc36303333b0f33e7d0ab57b67cfcfdac27ee0cfd9a0e0cd3431c048bdb367729107ce92e9bf3eb6ecd2e06ec22d539682890255af718f1d43ea15b2c8f5af71076b0bec5dc536a989a8e878656d4ba8e65bb6f2301d203b01e66ef0e70d068989c47851023f21eb13d2ef6f8242b3ff1d8238562d8acda9331d38b5aa8da20dc37a2d052bdffd6e05153efbf44429a14e57ecd941dbad7f981ac2d0386d"}}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in=@multicast1, 0x0, 0x2}}, @policy_type={0xa}, @tfcpad={0x8, 0x16, 0x6}, @offload={0xc, 0x1c, {r0}}, @algo_crypt={0x1048, 0x2, {{'ecb-aes-neonbs\x00'}, 0x8000, "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"}}]}, 0x11e4}, 0x1, 0x0, 0x0, 0x10}, 0x20044004) ioctl$VFAT_IOCTL_READDIR_BOTH(r11, 0x82307201, &(0x7f00000040c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r11, 0x82307201, &(0x7f00000040c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) listen(r9, 0x9) (async) listen(r9, 0x9) 17.002238286s ago: executing program 3 (id=1351): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000004300)=""/49, 0x31}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffe, 0x4000}, 0xc) (async, rerun: 32) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYRES32], 0x38}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400"], 0x1c}], 0x1}, 0x0) (async, rerun: 32) r4 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1b00000000000000000000006700000000000000", @ANYRES32=r2, @ANYBLOB="03002a4e63060388dc96502e5233340000000000b1421a6e4cab6901480fd51e2ffaa0d8e5c5398c9d4623669d1b2a894553fdfbaea67bb2729d41d4e544ca3301000000000000007782", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50) (async, rerun: 64) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, &(0x7f0000001c80), &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000001d80)={'syztnl2\x00', 0x0, 0x700, 0x20, 0xd, 0x2, {{0x2c, 0x4, 0x3, 0x1, 0xb0, 0x68, 0x0, 0x5, 0x2f, 0x0, @local, @multicast2, {[@noop, @end, @timestamp_addr={0x44, 0x44, 0x58, 0x1, 0x5, [{@rand_addr=0x64010102, 0xca}, {@remote, 0xfffffffa}, {@multicast2, 0x5}, {@rand_addr=0x64010100}, {@broadcast, 0x56b}, {@broadcast, 0x7}, {@local, 0x401}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x7}]}, @end, @rr={0x7, 0x17, 0x2a, [@loopback, @remote, @dev={0xac, 0x14, 0x14, 0x3e}, @empty, @rand_addr=0x64010100]}, @ssrr={0x89, 0x2f, 0xf1, [@empty, @remote, @broadcast, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @remote, @multicast1, @rand_addr=0x64010102]}, @rr={0x7, 0xf, 0x9a, [@private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x16, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xd7f}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x3}, @ldst={0x1, 0x3, 0x4, 0xb, 0x0, 0x80, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x1, 0x2, 0x6, 0x4, 0x7, 0x1, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x18, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xc, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r2, r2, r2, r9, r2, r2], &(0x7f00000007c0)=[{0x3, 0x2, 0x7, 0xb}], 0x10, 0xb, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (async) r10 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000eb03010000000000000000000000000a1400fe3e4ac0d54a2471880000030a050300000000000000000500000a14000000f5030100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f0000001c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r11, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040004) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000001c40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="7a375ed2", @ANYRES16=r11, @ANYBLOB="010025bd7000fddbdf250100000000000000024100000010001369623a766c616e3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20040010) 16.910461238s ago: executing program 0 (id=1352): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x4, 0x0, 0x4, 0x0, @rand_addr=0x64010101}}}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r11, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x4, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000911}, 0x4000001) splice(r10, 0x0, r9, 0x0, 0x20007ffff041, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0xa8, 0x13, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x80, 0x8040}, [@IFLA_VF_PORTS={0x6c, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "9f3fa56b8ccfdf89485a50dba876fa1f"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4d5f0401c064cb61eafafc2c9bdf762d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '&\'&\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2866713e463aab24213a7f641c61b74d"}, @IFLA_PORT_PROFILE={0x6, 0x2, '!\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r9}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bond\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4001) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 16.85001416s ago: executing program 2 (id=1353): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x258, 0x2b8, 0xb0000010, 0x160, 0x5c8f0200, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0xb4332597fe03d59d, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xffffffff], 'vlan1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x3c, 0x0, 0x2, 0x10}, 0x0, 0x118, 0x160, 0x700, {}, [@common=@hbh={{0x48}, {0x8, 0x4, 0x0, [0xf, 0x7, 0x9, 0x4, 0x5214, 0x1, 0x6, 0xfff9, 0x7, 0x7ff, 0x0, 0xc1fa, 0xd, 0x0, 0x4ba, 0x4], 0x10}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x9, 0x9, 'pptp\x00', {0x3b906056}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [0xffffffff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff000000], 'wlan1\x00', 'geneve1\x00', {}, {0xff}, 0x1d, 0x2, 0x0, 0x34}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x388) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'wlan0\x00'}}, 0x1e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, [0x7ff, 0x8c, 0x8000000000000000, 0x3, 0x7, 0x1, 0x8, 0x9, 0x2, 0x5, 0xfff, 0xffffffff, 0x2, 0x2, 0x1]}, &(0x7f0000000100)=0x100) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x400000000000028, 0x0) 16.786727862s ago: executing program 4 (id=1354): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x200000, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16.705640506s ago: executing program 2 (id=1355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) close(0x3) 16.619092418s ago: executing program 3 (id=1356): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000200000085d0ff001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 16.497027658s ago: executing program 3 (id=1357): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) sendmmsg(r0, &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) connect$tipc(r2, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000180)) listen(r0, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006c0000009c000000000000009500000d00"/32], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 16.435113124s ago: executing program 4 (id=1358): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xda, 0x3b, &(0x7f00000000c0)="e6021ac1e031c54feffa20699aa8b0adbe2c36c77a0fbd74ee9399d67d106baf574a66727cceed25fb85a9cb98366d47c4d8b1ce0c1058fccf12f25ded8ab4f21accc059d14f42bf698d0a0010d7e633c7c3fea439c69631db1342efc0e2287a0a048f7be0f488b621ac50a361dbd62211963d74ca8aabace9ae0cc54f3bbea818d4cf49f523e6de6fc052eaed9b788e77db6d3431e7f90f0c0fb0762c1768ac6f88998a6a8203ac24f278bb1112fb8a3f907fb02f421bdb9ad013ed30e3928f805688300fd29051e1ce535f4660afb2812a6e18295851ae6239", &(0x7f0000000040)=""/59, 0x3, 0x0, 0xbc, 0xbb, &(0x7f00000001c0)="38b7a9019505193ab92399a7ee4cf6bc52c8957a57433fadae686212d3b4f6c65223c64c5a9f2ee276441f8834d96ab5067f07422391876557a36e63a45d25a51e1dc5ea52e4650e41b4e7a2a817180e2544ac566bac088aca2a15f0ef59c84fb4a930c64a5fa1501b0e0534d74b0da80a0a9539f073773988da10217dd567a0890c46b7ab5b941b471a2bbfca17f2c4785c74949a97fa89a0d5009d619cb33be43616daf40a0486747f2d2517cbf257df5feb930d42948f2f8d4d49", &(0x7f0000000300)="89b2bcd39da0c79a22503d23ec241b6f28d62f01c52c16c32656429513eeaaa96fc82d9f52b3a6281134c7df0333f3bfb299549fd5db77ad068d1d52979fcb9bc467b38da7a7e1cf2e6003b9298d653908f6b1504a5f7a9b946c2131997982b92c0b429068de4ddcaafafb1c267af52075dc91edc9f97a6794da8b6d3be0db0b742b31b7d1107f25cb00d2ce251453bd749b2eedfdac63c7ce2f9667d1b071d010f6b965b6a66a037727679dcfa8ac035971da366d4761e60dcfd1", 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16.414424157s ago: executing program 3 (id=1359): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'wlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 16.269510636s ago: executing program 3 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095bd1d238be90fd3ce9df92d679b2549c74bfe7a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0xe) close(0x3) close(0x4) r2 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800, 0xb) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001500000029bd7000ad424c64d9c2bf5245e4d80499f9554f1941e8d9be5c850b605657"], 0xe0}, 0x1, 0x0, 0x0, 0x20040404}, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000db6e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r9, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r8}, 0x20) recvmmsg(r8, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/194, 0xc2}], 0x3}, 0x3}], 0x1, 0x10100, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close(r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r6) bind$inet6(r5, &(0x7f0000001940)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001840)) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000000780)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001780)=ANY=[@ANYBLOB="84f4e994497c00000200cdcec1ea9cd07aae4e36ebd2729c0f99702e50093fe3cdfe029e329149a3fb3ef93a39546e1c184450808741f2404fd827f421d6809b19e4163d1461bed402109a951d856c0904aeff008043d199a2bd781634d06a727b10e80b1ec2140161f178d78bd159cbfc", @ANYRESOCT=r5, @ANYRES16=r5], 0x68}, 0x1, 0x0, 0x0, 0x4082}, 0x10845) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES64=r9, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendto(r6, &(0x7f0000000580)="482c616d92f8ab89d56a6b0394e1f3b6b1eaedd6750b0365da34c614cd2a222b664aea99f30f8b94b027534d4420b15240aa9915240bf33a942152898369d6df3e4be944342f853fa2137ce9c14cfe34ebe57095837874f4677842f1275e737f225433b80d8566dd589947aec578", 0x6e, 0x10, &(0x7f0000000480)=@nl=@unspec, 0x80) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000080)={r2, r5, 0x0, 0xff4, &(0x7f0000001980)="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", 0x6, 0x2f, 0x0, 0x3, 0x8, 0x0, 0x7, 'syz1\x00'}) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 16.180671271s ago: executing program 4 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001006401010008000200ac1414800c0002800500010000000000240002801400018008000100ffffffff08000200e00000010c00028005000100000000000800074000000000140005800e"], 0x78}}, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400ff001000010000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e"], 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x374) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x0, 0x3, 0xa, 0x0, 0x36185a3eee80953d, 0xfffffffffffffff0}], &(0x7f0000000500)='GPL\x00', 0xc, 0xd9, &(0x7f0000000540)=""/217, 0x41100, 0x6b, '\x00', 0x0, @fallback=0x21, r3, 0x8, &(0x7f0000000640)={0x8b6, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x9, 0x9, 0x46c7}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, r3], &(0x7f0000000700)=[{0x0, 0x4, 0xd, 0x9}, {0x4, 0x3, 0x8, 0x1}, {0x4, 0x3, 0x1, 0x4}, {0x5, 0x4, 0x4, 0xa}], 0x10, 0x4, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0xa177, '\x00', 0x0, r3, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x20, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc76}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @ldst={0x2, 0x1, 0x6, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0xb6, 0x85, &(0x7f0000000a00)=""/133, 0x0, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000ac0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x10, 0x8, 0x4}, 0x10, 0x67cd, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[0x1], 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@map=r5, r4, 0x5, 0x10, 0x0, @void, @value=r6}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001006401010008000200ac1414800c0002800500010000000000240002801400018008000100ffffffff08000200e00000010c00028005000100000000000800074000000000140005800e"], 0x78}}, 0x8800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400ff001000010000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e"], 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x374) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x0, 0x3, 0xa, 0x0, 0x36185a3eee80953d, 0xfffffffffffffff0}], &(0x7f0000000500)='GPL\x00', 0xc, 0xd9, &(0x7f0000000540)=""/217, 0x41100, 0x6b, '\x00', 0x0, @fallback=0x21, r3, 0x8, &(0x7f0000000640)={0x8b6, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x9, 0x9, 0x46c7}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, r3], &(0x7f0000000700)=[{0x0, 0x4, 0xd, 0x9}, {0x4, 0x3, 0x8, 0x1}, {0x4, 0x3, 0x1, 0x4}, {0x5, 0x4, 0x4, 0xa}], 0x10, 0x4, @void, @value}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0xa177, '\x00', 0x0, r3, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x20, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc76}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @ldst={0x2, 0x1, 0x6, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0xb6, 0x85, &(0x7f0000000a00)=""/133, 0x0, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000ac0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x10, 0x8, 0x4}, 0x10, 0x67cd, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[0x1], 0x0, 0x10, 0x4, @void, @value}, 0x94) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@map=r5, r4, 0x5, 0x10, 0x0, @void, @value=r6}, 0x20) (async) 16.09656653s ago: executing program 1 (id=1362): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000780)="1d0467", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) bind$rds(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) 16.013407406s ago: executing program 1 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@empty}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) unshare(0x400) shutdown(0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) 15.826954501s ago: executing program 1 (id=1364): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0x1, 0x0, 0x2, 0xe, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcbf3}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd26}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x2, @remote, 0xe03}}]}, 0x70}}, 0x0) r2 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000180)=r4, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x90}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffe82, &(0x7f0000000480)='cgrouj\x00\xc6\xbfQf\xf6\xcf\x81\xf8\x1b\xf8\xcf\xd0\xdb^\t\x82=\x8f\t\xf4yY\x111]\xca\xe5\x18\x18\xc3\x9d\x9fu\f5\xe1\xfb\xa7u\xa9\x80\xefbD\xa4\xa4\x00\xc1\xa9\xe7\xa4\x8c\x97P7\xfd\xd5tY\x86\x96\xb4\a\x90\x1d$\xbe$\x9d\x03\xb0R\xda\x183\x9d\xe3,~\x9e\x9c\xf9OYe\x9f&\x8fs\xb2gj\x01/F\xbc\xb8E\xba\xce\xbbJ\xc1d\x1e9\x16\x1bn\x86=\xe6}$\xb1?\xdcj\xcb\\\xc6\xb4\x7f\xef\x01\x17;\xf3\xb3\x00\xb5\xd94\xe7\xb5\xad~\x80z\xc1c\xa9H\xea\x03Y\xd3\xa9\xbd6)}\xb4G\xdb\xf9\xcee\x98\xd3V\xa0\xdf\xf0[\xe2\x12\x85\xd2\x87\x8e\x0fv\x8b\xcd\xb4\xd4.\x0eY\xd2\xcf{\xe7\xf9\xccx\xb3\x18\xee\xcaC{\xd8j\xb6*\x04\xaf,\x0e\x7f\x1d\xb4\x96n=\xff\xfakhs`0\xdc\x88\x83\xdd(T\xf4\xcf\x17\xfeSzd\n\x7f\xc4\x83\xa3\x1ae\xb9_\x05\\f\x9ahf\xfe\x91\xb0t\x1c2\xe0\x88\x88\x88\x9cs&l\xbe\a\xf3\x7fN\x11*\x12\x17\x1a\xb3^\xbe|\xa5H\xf9\xc2TQ\xac\x8e\xdc\xed\xe1^\x97\x95z\x02\xd8\xf5]B\x9eB\x13\xc7\xe6\xb25\xf3\x94p\xe6\x88\x9f\xe0@\xd2\xd2mEt\"\xc4M+wv\xca~\x87x\xcez!\x05\x00\xa6\x12Pd\xb1\xc8\xd0\xbb\n\x1e\x80\x91\x88\x99Kc\x1dn&\x1c\xef[\xe5\n\x9c\xe1\xde\x02\xd8\x89\xdd\xd3?pQ\xfc\xd8\xfdD\x039\x01M8\xa5\x9d@G\xc8\x98O\xfd\xfb\xb76\xd3\xa7\x82I\x16M\xa5\xaci\xb5\xe6\x17\x81\xef\"\xd21\xfd\xdd\xd3\xcd\x17\x06'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xe}}]}, 0x60}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, [@alu={0x4, 0x0, 0xb, 0x6, 0x165753a62eb0b8ee, 0x20, 0x4}, @call={0x85, 0x0, 0x0, 0x68}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}]}, &(0x7f00000003c0)='GPL\x00', 0x3455ff8e, 0x0, 0x0, 0x41000, 0x5, '\x00', r11, 0x25, r5, 0x8, &(0x7f0000000400)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x2, 0x7fffffff, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r12], &(0x7f0000000700)=[{0x1, 0x4, 0x0, 0x8}, {0x1, 0x2, 0x1, 0x2}, {0x2, 0x1, 0x7, 0x5}, {0x1, 0x5, 0x10, 0x9}, {0x0, 0x3, 0xe, 0x3}, {0x4, 0x5, 0x5, 0x5}], 0x10, 0x2, @void, @value}, 0x94) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000dac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000340)=[{r0, 0x3028}, {r5, 0x11c}, {r2}, {r8, 0x200}, {r3, 0x42}, {r0, 0x80}, {r6, 0x3400}, {r2, 0x401}, {r2, 0x501a}], 0x9, 0x6) write$cgroup_subtree(r9, &(0x7f0000000980)=ANY=[@ANYBLOB="05986a712b637075204b3e67c99e73fd1e16c30dc72aa91ab1d1115680dd1b80c6443ea401216dac0a98463e"], 0x5) 1.283841944s ago: executing program 32 (id=1352): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x4, 0x0, 0x4, 0x0, @rand_addr=0x64010101}}}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r11, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x4, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000911}, 0x4000001) splice(r10, 0x0, r9, 0x0, 0x20007ffff041, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0xa8, 0x13, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x80, 0x8040}, [@IFLA_VF_PORTS={0x6c, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "9f3fa56b8ccfdf89485a50dba876fa1f"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4d5f0401c064cb61eafafc2c9bdf762d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '&\'&\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2866713e463aab24213a7f641c61b74d"}, @IFLA_PORT_PROFILE={0x6, 0x2, '!\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r9}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bond\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4001) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 1.211094041s ago: executing program 33 (id=1355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) close(0x3) 133.120588ms ago: executing program 34 (id=1364): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0x1, 0x0, 0x2, 0xe, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcbf3}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd26}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x2, @remote, 0xe03}}]}, 0x70}}, 0x0) r2 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000180)=r4, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x90}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffe82, &(0x7f0000000480)='cgrouj\x00\xc6\xbfQf\xf6\xcf\x81\xf8\x1b\xf8\xcf\xd0\xdb^\t\x82=\x8f\t\xf4yY\x111]\xca\xe5\x18\x18\xc3\x9d\x9fu\f5\xe1\xfb\xa7u\xa9\x80\xefbD\xa4\xa4\x00\xc1\xa9\xe7\xa4\x8c\x97P7\xfd\xd5tY\x86\x96\xb4\a\x90\x1d$\xbe$\x9d\x03\xb0R\xda\x183\x9d\xe3,~\x9e\x9c\xf9OYe\x9f&\x8fs\xb2gj\x01/F\xbc\xb8E\xba\xce\xbbJ\xc1d\x1e9\x16\x1bn\x86=\xe6}$\xb1?\xdcj\xcb\\\xc6\xb4\x7f\xef\x01\x17;\xf3\xb3\x00\xb5\xd94\xe7\xb5\xad~\x80z\xc1c\xa9H\xea\x03Y\xd3\xa9\xbd6)}\xb4G\xdb\xf9\xcee\x98\xd3V\xa0\xdf\xf0[\xe2\x12\x85\xd2\x87\x8e\x0fv\x8b\xcd\xb4\xd4.\x0eY\xd2\xcf{\xe7\xf9\xccx\xb3\x18\xee\xcaC{\xd8j\xb6*\x04\xaf,\x0e\x7f\x1d\xb4\x96n=\xff\xfakhs`0\xdc\x88\x83\xdd(T\xf4\xcf\x17\xfeSzd\n\x7f\xc4\x83\xa3\x1ae\xb9_\x05\\f\x9ahf\xfe\x91\xb0t\x1c2\xe0\x88\x88\x88\x9cs&l\xbe\a\xf3\x7fN\x11*\x12\x17\x1a\xb3^\xbe|\xa5H\xf9\xc2TQ\xac\x8e\xdc\xed\xe1^\x97\x95z\x02\xd8\xf5]B\x9eB\x13\xc7\xe6\xb25\xf3\x94p\xe6\x88\x9f\xe0@\xd2\xd2mEt\"\xc4M+wv\xca~\x87x\xcez!\x05\x00\xa6\x12Pd\xb1\xc8\xd0\xbb\n\x1e\x80\x91\x88\x99Kc\x1dn&\x1c\xef[\xe5\n\x9c\xe1\xde\x02\xd8\x89\xdd\xd3?pQ\xfc\xd8\xfdD\x039\x01M8\xa5\x9d@G\xc8\x98O\xfd\xfb\xb76\xd3\xa7\x82I\x16M\xa5\xaci\xb5\xe6\x17\x81\xef\"\xd21\xfd\xdd\xd3\xcd\x17\x06'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xe}}]}, 0x60}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, [@alu={0x4, 0x0, 0xb, 0x6, 0x165753a62eb0b8ee, 0x20, 0x4}, @call={0x85, 0x0, 0x0, 0x68}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}]}, &(0x7f00000003c0)='GPL\x00', 0x3455ff8e, 0x0, 0x0, 0x41000, 0x5, '\x00', r11, 0x25, r5, 0x8, &(0x7f0000000400)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x2, 0x7fffffff, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r12], &(0x7f0000000700)=[{0x1, 0x4, 0x0, 0x8}, {0x1, 0x2, 0x1, 0x2}, {0x2, 0x1, 0x7, 0x5}, {0x1, 0x5, 0x10, 0x9}, {0x0, 0x3, 0xe, 0x3}, {0x4, 0x5, 0x5, 0x5}], 0x10, 0x2, @void, @value}, 0x94) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000dac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000340)=[{r0, 0x3028}, {r5, 0x11c}, {r2}, {r8, 0x200}, {r3, 0x42}, {r0, 0x80}, {r6, 0x3400}, {r2, 0x401}, {r2, 0x501a}], 0x9, 0x6) write$cgroup_subtree(r9, &(0x7f0000000980)=ANY=[@ANYBLOB="05986a712b637075204b3e67c99e73fd1e16c30dc72aa91ab1d1115680dd1b80c6443ea401216dac0a98463e"], 0x5) 77.873873ms ago: executing program 35 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095bd1d238be90fd3ce9df92d679b2549c74bfe7a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0xe) close(0x3) close(0x4) r2 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800, 0xb) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001500000029bd7000ad424c64d9c2bf5245e4d80499f9554f1941e8d9be5c850b605657"], 0xe0}, 0x1, 0x0, 0x0, 0x20040404}, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000db6e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r9, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r8}, 0x20) recvmmsg(r8, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/194, 0xc2}], 0x3}, 0x3}], 0x1, 0x10100, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close(r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r6) bind$inet6(r5, &(0x7f0000001940)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001840)) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000000780)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001780)=ANY=[@ANYBLOB="84f4e994497c00000200cdcec1ea9cd07aae4e36ebd2729c0f99702e50093fe3cdfe029e329149a3fb3ef93a39546e1c184450808741f2404fd827f421d6809b19e4163d1461bed402109a951d856c0904aeff008043d199a2bd781634d06a727b10e80b1ec2140161f178d78bd159cbfc", @ANYRESOCT=r5, @ANYRES16=r5], 0x68}, 0x1, 0x0, 0x0, 0x4082}, 0x10845) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES64=r9, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendto(r6, &(0x7f0000000580)="482c616d92f8ab89d56a6b0394e1f3b6b1eaedd6750b0365da34c614cd2a222b664aea99f30f8b94b027534d4420b15240aa9915240bf33a942152898369d6df3e4be944342f853fa2137ce9c14cfe34ebe57095837874f4677842f1275e737f225433b80d8566dd589947aec578", 0x6e, 0x10, &(0x7f0000000480)=@nl=@unspec, 0x80) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000080)={r2, r5, 0x0, 0xff4, &(0x7f0000001980)="d870a9fc9f544474133abdd85c6f69787d0b1e4c11765bc9751ff1a2e393e48ecfea065df4968e972ea2c86f29881134293927804cf42a875dfb7a90524cd4ff97d2fd49eb68004e930d65af251fd4384d3ca66020bf858f261dde94117224e71ac16786075da695a42432dfda05fc552cdd515b126085787a328d5828090a00cd46a7c40538dc373bd8a29e20c215a897e15bf7a885317d131358f157d44d9e6fdfa4871e0378db04ad6bfc4076789d0c67780e42e821a0b064fc8ad5bf034beaeb97454d6ec3c094525e961444183f628460eb8aa81b82160c728d49061699d0af83a28233148a2e5a1651b46ace63ec5ad7b019c140f6be06cad51675365d5a1e6ac08410ff64aeaba48ee3fb844e4db009d7dbadfee524216c6e2b4dcab03e9406a9ec8b11cc10c001bbf684cc9d24a43fc189b94dc150e1d732781eddcb335db3aa751ab575b38ba63a7d18b6e80e997a7b29acad59d011402cb74d18450be0f3602305a5f04aee9d18fbdd7d8142d60dd53e0e94a1135b671c77442e3bed077555fd15f291bc4fe6b9c6d3a3682c75988d4b971618aa7f8d482eaef9c7df26d26406baeeb5ff55f664946cfff8269321996971c96f1f358a0364ecfcf72f7b12f16cd99de1842e2f811162b6696352733e801e60f36cafb885e4bdea86af2c92f9c7222478e26e354331f3705e76f2af6b036116064a170ba50cfaec999fc85dbfe11cf375b051b060c3ee781b6ceb77a878f6b4f78a1f222c88fd36b0ca5d5ea30142d365e6ddc667eeeb97365678a127b0a53264b07bc1603f0b168a1358257c10085e3cc45811641cdceefb7f154aeb242bd4a93b03449faddf4e8f58b8951acf6e21c0938ee99c9c20c595502a2d05d67ecf1b103c9081abdf6c4c6c4834026ccca6c344dccb91a5897858741588c249279c4f8d36df39069ad23a3a29be83f54ce6aa26102eb36702e646038686f2248c4914d2dde908d7b85319b98d1929f60f066d9452156508614229d580d72552f25118131186588a1c6384b00b1779775c569ccb0f4dd847fa6681670b233b7ff9a0378b3b608d187f91e03d1a7acd6e7b3c1ab4b6144b1c8498f80118d79fa703bca3daacdb8520c63a62070430c5163bb74849e8b63670a03d98342b48e94b1cc5e972586a0f6d048567e6da1a245bc42f60bfc7cc75cb0e6e03e5ea083e3d51fe1d428e2d28d9523a4819e9d6cffb248f8255df92289b312d9c3f628f71c7ce5345e2fffc15ea66d1032a57d41990e84be0db11f78606777d91f0ac0abdbbb98ef7a41c0e43af8255abb528bffeddff9d50db34705c51bc83e1d4b5a4e830a2a5b7bb663de5008047f227f7e7a9f8c97c930370f5e5e5543996f0c66258388bb11ac9fb6e8da9369c2f314ad6d43a44840e67facb4c2b2e858ffa489863118d75011b58577b8741c146a8396f2af56dae9f8c82a0f5f91777b8735fb3e33f37eb5b503eb97838187cc773130a437945e441d20a2dede8d6309eb57a43b1e4772e23f7026e9af45a27ecc4c724100b7094a758a79c9c02de62fb5a95451e8571cb7a78ca6cd870b7a80ecc42aaea5b30c7af6ef3eff016526da63491924ec5af1b1aa2770c1a25d1e2f8f99e0591b49b343a22a867eb00819d277ccb7e85bfc24cfb5b9c7237911d0290e916281bc619f6534fb6802a1f9d7dd4c00013e429b1a8d85320d31e3ca04bdc996acf745752633945a403d906c515981c54fcbd28c7e48ccf93f1a1c452a1a6de24c8ce25de4ff5f6948d1316218e1144b90d20fcd79411444634d1e7fe68c0b9b9cc8daff7389c114a0cbf7e6d88c5cd2e2c93b63e82807d768a77ad4d3130458d88aaf345a57fad66a3c1d97a4251484b385c35cb5df8525862b80a4c5be0a9ccf4bb0e3a13fa3244dbb6955adc8ff7e802a309aca820e2b935b41b94bea016d563b39ac18c80308c15885c09afa926a3e252ee18d4a15c4a790fb751b574ab6556a8897df8650358ae7cbb63691723418751ad7985a6928db8d4ef86e9840197efd94aef230bc327123d460020e87bf255656cc43738e17cde597d5ae697bd97cf0f08b934feb8e5486f506a3c8b3e29db9743aa97453941b9c09dc71af71841e39252e8e28488b4d6f41104d83c956bcc433a04b8ea1f99277046b5a3858e6adf3d755ea1fd3055aef3024f2f0c3fc55fafbcb4d8255d32d285f0725b70cce7e321f7a7e5c035a45f6e7b1cf34df776aa739c1e2073a0b9d9c5f31da58ee690dc552942300549843b2f528ac062f756a184c86712f811b84c35a283ae2fcc934c32ffcab9a2eb851dddbee9054da1d8d023bd30e75c98d259a6ab893861e5e7ef6aefef163b20b8a0ef6772f3a2d7e24f2edf475193c24221de4e2f29bbb35282431a46b5754b16699cd52f0082f5ee0fec2b26ddb0963474a52cd06df5aceb001a2850e595bf24d4d675c4006e403262352a43bb8f3377e4baeea02cba6edefe450b6e762d50f26f035c10ffac151bd2cda87a03a89e7f0726aa912ff8da133f8d434ee9e29cc8727b901ad4df26da4779a745d2f84f938ef397062935d2545e7c04b97201ed42bea118e21320c26d8dc246c0760a9f849955030830096e8687ef2ca93f1c4a35cb1d0c27ef8c8c4f50950ef6d0dffc81204c795f493ecf7f1b6eb3f5fbc9369338c9ac2dfa5c7cfec492bf8874ace89005cb4462abdec8e32a196ef68c1d27f6cbacff0e4242ae41c89937e3aa257534b2d234422888fdb4714717e2eb5b3f6a62049783e4444f71f398197efa4f36d8969928ebb75d8ca49835900d78cbc86ad5d0f0a5df24476160ac7f7ff86f12b78ad72f2441bbd1aa4a8577b1956909b81e7747a6751c40576200dcfb47c01c73fe322b6e4e45ad35034ebffddf706dd5b7e8a389ebad52c0aafd25135df19bd0c62a61d989244a626585a382dd16a3e6d8c83551f3690d9b944e6e7247187595025c6933da2c62a6ffe0aa2844ffbf7579aa5adb45c6743bcac1f4e5945fb672a612d3afad7df76c8cc6f3b0f30034ab74239ca96b88042f2fd8228b1a58fc0918293b089dc6446020bb39a448aa5047ff81e837b0a3557356c6388e692dd700bbbecaa49c29d38a97f1dc67e9f3a9b063055cf4a420de9e393aae2adafc138ca0058746b3b0d89ca3f363d220e6d554b655832e3958365cc755667769109e221180592807c50c37cb4f9b96ba1928b2a7f14922c7199e21d929cdc94457ab2a966ca67061296ec39b7d46927093d6860fd3622cf14334bc222f759dae75a4e17be3b9107f979853dad34d0ba81c166fa73cee6147ca57ac988fc95e12108d88a0c769620b61480ce1a0bce4a0970ae5995e6d68dfef483573a85aaed0e37ec69b243c8ad31fdab4c90e0fddc7302728ee362ca78fd3583ee6340cc6a94294c39e0c29c5df3edd62ac3392948c089abaab310b4f286034d222667cb0afe82fe99d028918411e29dc63836f77aab463a21ec8e5b9312978231fa5e7ac47e674cafddd64a633749ffa0cec30a9f311904c554c3381a230af9c2e637bd77e0876da20fab72e0c013c6075354bf395910669ce108e9c6bb507d4d1033345bb2f4dda85db3471abc4cd1068f00bb92484c10e2f2ef08ab5b19b615cb5fb41e1a76c6c2038bf1a897de8ccf2b33cee6977e079b16c899935c6f9f8ff5953467abbd4a047d660301d1974a1320f415ec71cc9acffe86ddf7e4cb9ab0cbe9c04a5bd0a0817c4cdbcae8c254c8333a53a1f3eb836af3ead273726df84b1ee226dcf6301ee534f0fb5ccd936bdc489b6e9dc4c296d8cd45d1c2fecda72b01aa6d9ac019d9c171464e67c8b0633b2cd8ec1b06e5da894f8decfdfb55af49e576803d6612709b4f2789237289605ea1356daad7c91e9ee9986d02e37a3cfd22f784b02ef1aa8759054d148e690cf586808c481cf50755b083267d162759226adc4b5216c91c22898b42bc53f3f9ec5ad6b1c3865e0b1dfe2d0d8928a63064b161ae5b637106114b674a43b8d4e3f54bf871c27b6fc22c1a366f873bfdab022582ba6fe0799f1fa0b95905f41fdc5479af00d5fa36d7b9290f92749bb3a4eca00d886b573466019a658cf08ed0f552853500d987b431adc7af1beffe349487bf9d053b0c31f341a694f2dbfcf79ba58fef9ca8ae6d2a92a42b157802386ce4d8de8c9fa6ad5ca34f537697e77f8bb126dfe4670b7e636fb857d44d6c4c07adb0c7c5fa42e35f9ccd082b2eeb9692403ae353034fe891540e19a07668f677c39f6daff1d413f30f5175e650e0b994f0365c304539caac5da81e07d317cb8b335d419b7acb1b8ed78e5217386fb3ed81596256f6a840eaf8a0d52e5543e625f44ad5ab203ad2fdd8e4488034c32856ff27bc00ef6468465ae473816d4ea2a7da2d09606259d911c1c79d273f9af2050e56e4cc0370571680189a700456615cec87be0ab3dac7df357c602a5ec16cca23ed5b9fd0a7781768e09310e81a34f6c0a239432b504e863539b947a3ce8b03bfbb8e739ca903dd0a0a30284f4b8c77814ab4474865e871a808b72ce70f5c4b8de8febafe5c417d5b2a2d5b5b53822057aaf72a4047bbffefbc8412cd1fb1044ad81469b9d5d65e4387af8b9d8ce3e1b12251b059335ecdc64509766e19c4d2b05f0e0b74c47afcc0452348d52e87d4a6aa93e7006f039c2da3e675c0838b06a81c495c9260a594de556b40029e1efdd307e9afbd0918ec3a202a0890eea444d739a87082e94961e771514b73af001589f6ac6c2fe11eff9f6021881fd64ba82e6aa9418d57513ed244fe1a3d56f4147fdaa236d2cc9c89900b6b46d408504da7c349819111d5d5dd6289f94304f1d17b959ba6f351bd9952c03ad6d9ccfe2a42b9240bbe9b126aa07b993073a1698d294275ee641648238db353461c5f17e0f1304b9a417f3da19aa7ab3bb8aaa438fb9b615a1222c24307b0a71dda3c58e4b58cabc0a1f47969c79ec87410f1a438c3d7ed5f75fbd917f4d88a7b8895188961a0cf0a5eb66de161e15a7178a686a9bb9edbadb212111e3c13bbbb3054ba490b868f0ae27ed27354857833d21c8b28c77fd2439f75b03251e6809a3ba9305f38b66aecef95aa6cea53c0a061975667d444d9aa5496ec48c35d67b22c2d44004bd636f195fa8d6c97bd7804afdb618ef56ff6240c98d638cd246c2689f144757dd23198df23b7953a7539b09aba3e44887d6e69bc741fbeba25f2becc6b5bf10927a68b1b6b98187dd651a8158c64d8474c29865597ace4324d92d8db65a667e40e0e796ebb3cc84c2823679c8dbc0468af4b0f65095e731e0ad1f9fd2564d816472b32018a4a2b33aad19f381f231986fecfd710e08aae9380d67c329bf553f4424b8a0879c8d3123500d9b7151ca9c425f80760473805fa291e4180c4f20482aa49da09f38f6c38596f171ec28501e3f2a0df42ae7ec22fd89835439320d600ebe99c2965d3f3ca01622e172f8ae1818a76b4204e5370b1e3ca2eca367a16c6e2504e6ecf93ac9df6a64cd0b401faaaefbd37609996bb108e3348882ae2099b4ecc8884a22db49e38747eb498ff278d6781fe91f80ff1b5547ddaaf4eff057e30fde152f5d5f7201b61666ddc80d5e7b593c66c2a6b27889f5e617e61248332f08da6dda6d67f392067d03fdf8a26428644e135fb44ccd3a76f076ffcdb53d7a230dc114aef3bd5a7f424feeef6e06db1fe2e83bf139cfb6e81ab5c363965c2aafa8e62334b3b1a3cb14a1d9c292e966a2", 0x6, 0x2f, 0x0, 0x3, 0x8, 0x0, 0x7, 'syz1\x00'}) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 0s ago: executing program 36 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001006401010008000200ac1414800c0002800500010000000000240002801400018008000100ffffffff08000200e00000010c00028005000100000000000800074000000000140005800e"], 0x78}}, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400ff001000010000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e"], 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="4805fe00080211000001080211000000b4cb3815afcd850effffffffffff0802110000005b00e70e25da0e322c8e207f46762dc0aa4803d90c6c5bb5b54d3d984e4ae5d42374b6882345547a96da2c92dca895cd140c5ccd3606cbce638416ef2174f52201612d06e32de5c2097c47025a52880e2a411d58afdbd5156a5286d632000000ffffffffffff080211000000f000eba3e290172b9ca0e05f353f79cec2b31a0058db9cc892b88a719d04fe0492ab37006a98e15b0b240dbf69342a2ad8ac09a47b47f60a3da229afe4d7740c10bbf6aa633a1182d8a5889feafc03394a0bd346a71c90d29460afcef3e26371d082b056fb5de2c39803acfa73ed188ecf98561b4ee7b0cae318f0b315d69ff58cce575ec67e6503b5e41598d60266e2c13c619b84dc9b9a5e123ae03af93eaab526df3e79e9f82945837014f684f03b58f4b3cb99521cb6da5493c091daf2146e9135d2bf7e60ed488c0ce33567c21237cd14e2677d4698c173658ce4dc55f1fb584a72cc7f8f9db76471837df6aa03cfbe00000802110000000802110000005d0074d21e3bbea55e67735c8df8e6fc80bded1da8da484d6540870aa919427bbd9565f14a5c9ac40ed122ff2ace5e07bcaff71123b2854e68a7d908f48d8386e970727a00bf0563d9d15ccbc40a45a2a6374a603d4efbab89c04068fafdb0000802110000010802110000016100722924cbc00e2938f84791c6a1883660a784d6396d19ebd041132e8aa51d245e874d0608efeac97b372b83b614b417c29a5b0c21bf789fb38c77f4ddc2ae93cc889d36325089d6243fcd87a472409b37149c0804b0d19ccc530c9163b1ddd2e71800ffffffffffff0802110000016f00046184abebd8497212dd8b580eeaccb6261b3807000000000000003d8da0154d1996e674049c1a9733b55b488e21280cbd9b183b213350f39b6b80925fb7cc6e3aaf8fa0613eba051c8c271ea590d2f268db72a26be67397974a14ab7e60a266c0120ffbcb76ee77000000ffffffffffff0802110000000c00869b950d877d5b9539a1a7c300000802110000000802110000006900229367b4cf337cf648c25fb662df860ce162f57d7b4db4b3c3252ed393806459e5a193d08030fe12098300ff88f7fbab62911f7c25fef35f0f48d67217ef62ed4a2ef43eff8069ac5bc5722414f453e33427325bab21ff3c84bc0696edacc3476d9e41fcbf16a52e2600"], 0x374) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x0, 0x3, 0xa, 0x0, 0x36185a3eee80953d, 0xfffffffffffffff0}], &(0x7f0000000500)='GPL\x00', 0xc, 0xd9, &(0x7f0000000540)=""/217, 0x41100, 0x6b, '\x00', 0x0, @fallback=0x21, r3, 0x8, &(0x7f0000000640)={0x8b6, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x9, 0x9, 0x46c7}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, r3], &(0x7f0000000700)=[{0x0, 0x4, 0xd, 0x9}, {0x4, 0x3, 0x8, 0x1}, {0x4, 0x3, 0x1, 0x4}, {0x5, 0x4, 0x4, 0xa}], 0x10, 0x4, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0xa177, '\x00', 0x0, r3, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x20, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc76}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @ldst={0x2, 0x1, 0x6, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0xb6, 0x85, &(0x7f0000000a00)=""/133, 0x0, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000ac0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x10, 0x8, 0x4}, 0x10, 0x67cd, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[0x1], 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@map=r5, r4, 0x5, 0x10, 0x0, @void, @value=r6}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001006401010008000200ac1414800c0002800500010000000000240002801400018008000100ffffffff08000200e00000010c00028005000100000000000800074000000000140005800e"], 0x78}}, 0x8800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400ff001000010000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e"], 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x374) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x0, 0x3, 0xa, 0x0, 0x36185a3eee80953d, 0xfffffffffffffff0}], &(0x7f0000000500)='GPL\x00', 0xc, 0xd9, &(0x7f0000000540)=""/217, 0x41100, 0x6b, '\x00', 0x0, @fallback=0x21, r3, 0x8, &(0x7f0000000640)={0x8b6, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x9, 0x9, 0x46c7}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, r3], &(0x7f0000000700)=[{0x0, 0x4, 0xd, 0x9}, {0x4, 0x3, 0x8, 0x1}, {0x4, 0x3, 0x1, 0x4}, {0x5, 0x4, 0x4, 0xa}], 0x10, 0x4, @void, @value}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0xa177, '\x00', 0x0, r3, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x20, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc76}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @ldst={0x2, 0x1, 0x6, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0xb6, 0x85, &(0x7f0000000a00)=""/133, 0x0, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000ac0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x10, 0x8, 0x4}, 0x10, 0x67cd, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[0x1], 0x0, 0x10, 0x4, @void, @value}, 0x94) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@map=r5, r4, 0x5, 0x10, 0x0, @void, @value=r6}, 0x20) (async) kernel console output (not intermixed with test programs): 439] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 144.680467][ T7439] netlink: 'syz.1.436': attribute type 2 has an invalid length. [ 144.688586][ T7439] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 144.697560][ T7439] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.436'. [ 144.707057][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 144.726336][ T7396] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.966301][ T7449] netlink: 260 bytes leftover after parsing attributes in process `syz.0.437'. [ 145.080988][ T7452] xt_cgroup: invalid path, errno=-2 [ 145.307153][ T7396] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.415813][ T7396] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.537719][ T7396] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.631959][ T7396] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.736660][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.443'. [ 145.848234][ T7479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.444'. [ 146.082327][ T7493] netlink: 48 bytes leftover after parsing attributes in process `syz.1.450'. [ 146.204464][ T7497] netlink: 'syz.4.451': attribute type 5 has an invalid length. [ 146.365545][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 146.376972][ T7503] IPVS: Error joining to the multicast group [ 146.405947][ T7503] syzkaller0: entered promiscuous mode [ 146.411931][ T7503] syzkaller0: entered allmulticast mode [ 146.510505][ T7512] veth1_to_team: entered promiscuous mode [ 146.546349][ T7515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.455'. [ 146.573046][ T7512] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 146.606445][ T7513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.453'. [ 146.710116][ T7522] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 146.720055][ T7522] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 146.762590][ T7525] xt_hashlimit: max too large, truncated to 1048576 [ 146.777273][ T7525] No such timeout policy "syz1" [ 146.938013][ T7537] sctp: [Deprecated]: syz.1.465 (pid 7537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.938013][ T7537] Use struct sctp_sack_info instead [ 147.003782][ T30] audit: type=1107 audit(1746887672.946:4): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='fp 7l=lQÒÍ4.@£ÓqÆÁ+Îmå>G’sÃÀùÈy 'ÿh' [ 147.476547][ T7560] FAULT_INJECTION: forcing a failure. [ 147.476547][ T7560] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 147.576029][ T7560] CPU: 1 UID: 0 PID: 7560 Comm: syz.0.471 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 147.576061][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.576078][ T7560] Call Trace: [ 147.576090][ T7560] [ 147.576100][ T7560] dump_stack_lvl+0x189/0x250 [ 147.576149][ T7560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.576179][ T7560] ? __pfx__printk+0x10/0x10 [ 147.576213][ T7560] should_fail_ex+0x414/0x560 [ 147.576239][ T7560] _copy_to_user+0x31/0xb0 [ 147.576270][ T7560] simple_read_from_buffer+0xe1/0x170 [ 147.576300][ T7560] proc_fail_nth_read+0x1df/0x250 [ 147.576333][ T7560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.576364][ T7560] ? rw_verify_area+0x258/0x650 [ 147.576386][ T7560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.576416][ T7560] vfs_read+0x1fd/0x980 [ 147.576444][ T7560] ? __pfx___mutex_lock+0x10/0x10 [ 147.576465][ T7560] ? __pfx_vfs_read+0x10/0x10 [ 147.576489][ T7560] ? __fget_files+0x2a/0x420 [ 147.576520][ T7560] ? __fget_files+0x3a0/0x420 [ 147.576544][ T7560] ? __fget_files+0x2a/0x420 [ 147.576579][ T7560] ksys_read+0x145/0x250 [ 147.576605][ T7560] ? __pfx_ksys_read+0x10/0x10 [ 147.576638][ T7560] ? do_syscall_64+0xba/0x210 [ 147.576664][ T7560] do_syscall_64+0xf6/0x210 [ 147.576685][ T7560] ? clear_bhb_loop+0x45/0xa0 [ 147.576710][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.576729][ T7560] RIP: 0033:0x7f0656b8d37c [ 147.576756][ T7560] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 147.576772][ T7560] RSP: 002b:00007f0657978030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.576801][ T7560] RAX: ffffffffffffffda RBX: 00007f0656db5fa0 RCX: 00007f0656b8d37c [ 147.576815][ T7560] RDX: 000000000000000f RSI: 00007f06579780a0 RDI: 0000000000000004 [ 147.576827][ T7560] RBP: 00007f0657978090 R08: 0000000000000000 R09: 0000000000000000 [ 147.576839][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.576850][ T7560] R13: 0000000000000000 R14: 00007f0656db5fa0 R15: 00007fff636ed9e8 [ 147.576881][ T7560] [ 147.952572][ T7568] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.281890][ T7568] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.400577][ T7568] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.663791][ T7568] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.982105][ T7568] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.080808][ T7568] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.168311][ T7568] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.233149][ T7568] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.550060][ T7648] __nla_validate_parse: 7 callbacks suppressed [ 149.550080][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.495'. [ 149.605044][ T7648] IPVS: set_ctl: invalid protocol: 92 10.1.1.0:20004 [ 149.695327][ T30] audit: type=1804 audit(1746887675.636:5): pid=7648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.495" name="memory.events" dev="tmpfs" ino=525 res=1 errno=0 [ 149.738605][ T30] audit: type=1800 audit(1746887675.636:6): pid=7648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.495" name="memory.events" dev="tmpfs" ino=525 res=0 errno=0 [ 150.301225][ T7696] netlink: 'syz.0.508': attribute type 2 has an invalid length. [ 150.323291][ T7695] syzkaller1: entered promiscuous mode [ 150.328810][ T7696] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 150.329193][ T7695] syzkaller1: entered allmulticast mode [ 150.346987][ T7695] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.509'. [ 150.364484][ T7696] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 150.558308][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 150.771824][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 150.891908][ T7719] bridge_slave_1: left allmulticast mode [ 150.897916][ T7719] bridge_slave_1: left promiscuous mode [ 150.905524][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.922250][ T7719] bridge_slave_0: left allmulticast mode [ 150.929058][ T7719] bridge_slave_0: left promiscuous mode [ 150.936215][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.314831][ T7736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.521'. [ 151.324307][ T7736] gre0: entered promiscuous mode [ 151.329518][ T7736] gre0: entered allmulticast mode [ 151.516529][ T7745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.546330][ T7741] IPVS: Scheduler module ip_vs_sip not found [ 151.573933][ T7745] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 151.594913][ T7745] netlink: 232 bytes leftover after parsing attributes in process `syz.3.524'. [ 151.787126][ T7741] netlink: 'syz.4.522': attribute type 10 has an invalid length. [ 151.856100][ T7741] netlink: 40 bytes leftover after parsing attributes in process `syz.4.522'. [ 152.103334][ T7741] team0: Port device geneve0 added [ 152.131378][ T7757] Cannot find del_set index 2 as target [ 152.385652][ T7767] netlink: 96 bytes leftover after parsing attributes in process `syz.1.531'. [ 152.467220][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 152.621028][ T7782] netlink: 'syz.1.535': attribute type 12 has an invalid length. [ 152.770861][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 153.021458][ T7799] TCP: TCP_TX_DELAY enabled [ 153.620477][ T7813] tipc: Started in network mode [ 153.626750][ T7813] tipc: Node identity ae80653a5d4, cluster identity 4711 [ 153.634769][ T7813] tipc: Enabled bearer , priority 0 [ 153.717182][ T7814] syzkaller0: entered promiscuous mode [ 153.723367][ T7814] syzkaller0: entered allmulticast mode [ 153.771728][ T7813] tipc: Resetting bearer [ 153.786771][ T7812] tipc: Resetting bearer [ 153.819584][ T7812] tipc: Disabling bearer [ 154.608085][ T7855] netlink: 'syz.4.555': attribute type 309 has an invalid length. [ 154.705826][ T7861] __nla_validate_parse: 8 callbacks suppressed [ 154.705848][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 154.712973][ T7862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.559'. [ 154.737787][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.553'. [ 154.750538][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.553'. [ 154.767252][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 154.819821][ T7859] vlan0: entered promiscuous mode [ 154.832023][ T7859] ip6gretap0: entered promiscuous mode [ 154.907902][ T7864] vlan0: entered promiscuous mode [ 155.286257][ T7891] netlink: 830 bytes leftover after parsing attributes in process `syz.0.565'. [ 155.315868][ T7891] gre2: entered allmulticast mode [ 155.657907][ T7869] tipc: Started in network mode [ 155.669699][ T7869] tipc: Node identity b60eef924461, cluster identity 4711 [ 155.679380][ T7869] tipc: Enabled bearer , priority 0 [ 155.839702][ T7869] syzkaller0: entered promiscuous mode [ 155.845900][ T7869] syzkaller0: entered allmulticast mode [ 155.852923][ T7869] tipc: Resetting bearer [ 156.035350][ T7915] netlink: 'syz.0.571': attribute type 5 has an invalid length. [ 156.221799][ T30] audit: type=1107 audit(1746887682.166:7): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='% –Z˜Â݇Qæ5ãù-‹ŠÑ ¤Õ7°ÊK7btzN§Ñ’pôU*U¾ìè' [ 156.253184][ T7918] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 156.285705][ T30] audit: type=1107 audit(1746887682.166:8): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='% –Z˜Â݇Qæ5ãù-‹ŠÑ ¤Õ7°ÊK7btzN§Ñ’pôU*U¾ìè' [ 156.434694][ T3009] tipc: Resetting bearer [ 156.449155][ T7923] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 156.497370][ T7869] tipc: Resetting bearer [ 156.792422][ T6463] tipc: Node number set to 4067422098 [ 158.317939][ T7869] tipc: Disabling bearer [ 158.495167][ T7931] bridge2: entered allmulticast mode [ 158.674486][ T7944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 158.855456][ T7950] 8021q: VLANs not supported on ip_vti0 [ 158.927657][ T7958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.584'. [ 159.055671][ T7960] geneve2: entered promiscuous mode [ 159.078390][ T7960] geneve2: entered allmulticast mode [ 159.088963][ T7965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.586'. [ 159.181533][ T53] bond0: (slave wlan1): link status definitely down, disabling slave [ 159.283391][ T7971] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 159.369499][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 159.477596][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 159.887359][ T7997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.596'. [ 159.907621][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 160.216549][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 160.406313][ T8011] xt_hashlimit: size too large, truncated to 1048576 [ 160.494985][ T8013] xt_hashlimit: size too large, truncated to 1048576 [ 160.623527][ T8021] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.628699][ C1] hrtimer: interrupt took 74638 ns [ 160.699525][ T8021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.602'. [ 160.826273][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 160.894173][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 161.143221][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 161.152488][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 161.170520][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 161.409416][ T8040] ksmbd: Unknown IPC event: 3, ignore. [ 161.439843][ T8040] netlink: 56 bytes leftover after parsing attributes in process `syz.0.608'. [ 161.459089][ T8041] veth0_vlan: entered allmulticast mode [ 162.714158][ T8092] openvswitch: netlink: Message has 8 unknown bytes. [ 163.069535][ T8108] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 163.182822][ T8112] pim6reg1: entered promiscuous mode [ 163.235550][ T8112] pim6reg1: entered allmulticast mode [ 163.493254][ T8117] pim6reg1: left promiscuous mode [ 164.073281][ T8139] tc_dump_action: action bad kind [ 164.252075][ T8144] bridge0: port 3(batadv0) entered disabled state [ 164.407223][ T8144] bridge_slave_0: left allmulticast mode [ 164.421566][ T8154] netlink: 'syz.4.642': attribute type 1 has an invalid length. [ 164.439690][ T8144] bridge_slave_0: left promiscuous mode [ 164.466037][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.493272][ T8156] netlink: 'syz.3.643': attribute type 5 has an invalid length. [ 164.527957][ T8144] bridge_slave_1: left allmulticast mode [ 164.554291][ T8144] bridge_slave_1: left promiscuous mode [ 164.575613][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.615598][ T8144] bond0: (slave bond_slave_0): Releasing backup interface [ 164.646610][ T8144] bond0: (slave bond_slave_1): Releasing backup interface [ 164.712859][ T8144] team0: Port device team_slave_0 removed [ 164.740072][ T8144] team0: Port device team_slave_1 removed [ 164.750910][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.760051][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.774860][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.789408][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.907033][ T8154] bond4: entered promiscuous mode [ 164.913819][ T8154] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.943678][ T8158] batadv1: entered promiscuous mode [ 164.953900][ T8158] batadv1: entered allmulticast mode [ 164.977581][ T8158] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 165.007207][ T8158] bond4: (slave batadv1): making interface the new active one [ 165.028473][ T8158] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 165.171993][ T8167] vxcan1: entered allmulticast mode [ 165.432404][ T8169] IPv6: addrconf: prefix option has invalid lifetime [ 165.793267][ T8172] __nla_validate_parse: 6 callbacks suppressed [ 165.793287][ T8172] netlink: 36 bytes leftover after parsing attributes in process `syz.3.648'. [ 166.394871][ T8193] netlink: 'syz.0.654': attribute type 1 has an invalid length. [ 166.428061][ T8193] netlink: 224 bytes leftover after parsing attributes in process `syz.0.654'. [ 166.671421][ T8209] netlink: 156 bytes leftover after parsing attributes in process `syz.2.657'. [ 166.900395][ T8224] netlink: 'syz.1.661': attribute type 10 has an invalid length. [ 167.192995][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 167.372178][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'. [ 167.502811][ T8244] netlink: 76 bytes leftover after parsing attributes in process `syz.2.667'. [ 167.568169][ T8247] netlink: 280 bytes leftover after parsing attributes in process `syz.4.666'. [ 167.727369][ T8251] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.734004][ T8251] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.838019][ T8257] netlink: 'syz.3.672': attribute type 13 has an invalid length. [ 167.862695][ T8257] vlan0: entered promiscuous mode [ 167.868221][ T8257] vlan0: entered allmulticast mode [ 167.888741][ T8257] hsr_slave_1: entered allmulticast mode [ 167.983001][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 168.400174][ T8289] netlink: 'syz.3.683': attribute type 62 has an invalid length. [ 169.421277][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.698'. [ 169.742170][ T8353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.704'. [ 169.799572][ T8357] : renamed from bond0 (while UP) [ 170.233403][ T8378] xt_CT: No such helper "netbios-ns" [ 170.717017][ T8401] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 170.885846][ T8412] __nla_validate_parse: 5 callbacks suppressed [ 170.885865][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 171.069254][ T8422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.722'. [ 171.097813][ T8427] netlink: 44 bytes leftover after parsing attributes in process `syz.1.724'. [ 171.297120][ T8435] vlan0: entered promiscuous mode [ 171.349719][ T8435] bond0: entered promiscuous mode [ 171.378880][ T8435] bond_slave_0: entered promiscuous mode [ 171.394282][ T8435] bond_slave_1: entered promiscuous mode [ 171.476232][ T8450] ip6t_REJECT: ECHOREPLY is not supported [ 171.510031][ T8452] netlink: 388 bytes leftover after parsing attributes in process `syz.0.729'. [ 172.024386][ T8476] delete_channel: no stack [ 172.220384][ T8484] tipc: Started in network mode [ 172.226026][ T8484] tipc: Node identity 4, cluster identity 4711 [ 172.232420][ T8484] tipc: Node number set to 4 [ 172.437617][ T8496] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 172.475389][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.509984][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.517371][ T8496] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 172.540191][ T8496] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 172.579461][ T8502] ip6erspan0: entered promiscuous mode [ 172.589919][ T8502] bond0: (slave ip6erspan0): making interface the new active one [ 172.600470][ T8502] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 172.688446][ T8500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.752692][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 172.869747][ T8515] batadv1: entered allmulticast mode [ 172.877542][ T8515] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 172.908767][ T8510] team_slave_0: entered promiscuous mode [ 172.914827][ T8510] team_slave_1: entered promiscuous mode [ 172.920706][ T8510] geneve0: entered promiscuous mode [ 172.926947][ T8510] macsec1: entered promiscuous mode [ 172.932435][ T8510] team0: entered promiscuous mode [ 172.948109][ T8510] team0: left promiscuous mode [ 172.956625][ T8510] team_slave_0: left promiscuous mode [ 172.962479][ T8510] team_slave_1: left promiscuous mode [ 172.968066][ T8510] geneve0: left promiscuous mode [ 173.030022][ T8516] batadv2: entered allmulticast mode [ 173.036544][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 173.108436][ T8525] xfrm1: entered promiscuous mode [ 173.123150][ T8528] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:18979 [ 173.137260][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 173.145102][ T8525] xfrm1: entered allmulticast mode [ 173.181653][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.191264][ T8529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.210033][ T8530] xt_hashlimit: size too large, truncated to 1048576 [ 173.248774][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.261593][ T8537] netlink: 224 bytes leftover after parsing attributes in process `syz.1.755'. [ 173.308517][ T8538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.757'. [ 173.384399][ T8538] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.403083][ T8538] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.421561][ T8538] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.437611][ T8538] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.440409][ T8545] netlink: 324 bytes leftover after parsing attributes in process `syz.3.757'. [ 173.458297][ T8543] netlink: 96 bytes leftover after parsing attributes in process `syz.3.757'. [ 173.508351][ T8544] batadv1: entered allmulticast mode [ 173.521465][ T8544] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.859028][ T8567] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 174.016863][ T8559] syz.4.762 (8559) used greatest stack depth: 16984 bytes left [ 174.076129][ T8575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.261825][ T5840] cgroup: fork rejected by pids controller in /syz2 [ 174.449422][ T8600] nbd: must specify at least one socket [ 175.043737][ T1098] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.238620][ T1098] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.399465][ T1098] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.484502][ T8644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.600728][ T1098] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.109389][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.119543][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.138548][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.148302][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.160956][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.618954][ T1098] bond0 (unregistering): Released all slaves [ 176.696738][ T8685] __nla_validate_parse: 5 callbacks suppressed [ 176.696762][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 176.806448][ T8687] Can't find ip_set type hash:ip,por [ 177.013220][ T1098] tipc: Left network mode [ 177.125001][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'. [ 177.320888][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 177.443656][ T8726] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 177.514717][ T8732] x_tables: duplicate underflow at hook 2 [ 177.522000][ T8732] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20000 [ 178.218848][ T5843] Bluetooth: hci4: command tx timeout [ 178.367564][ T8742] netlink: 'syz.0.815': attribute type 12 has an invalid length. [ 178.377786][ T8742] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.815'. [ 178.623103][ T8757] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 178.687470][ T8667] chnl_net:caif_netlink_parms(): no params data found [ 178.747118][ T8757] netlink: 'syz.3.818': attribute type 39 has an invalid length. [ 178.812376][ T8761] openvswitch: netlink: Message has -1 unknown bytes. [ 178.819126][ T8753] netlink: 80 bytes leftover after parsing attributes in process `syz.3.818'. [ 178.921151][ T1098] hsr_slave_0: left promiscuous mode [ 178.948611][ T1098] hsr_slave_1: left promiscuous mode [ 178.985706][ T1098] veth1_macvtap: left promiscuous mode [ 178.996489][ T1098] veth0_macvtap: left promiscuous mode [ 179.013212][ T1098] veth1_vlan: left promiscuous mode [ 179.024138][ T1098] veth0_vlan: left promiscuous mode [ 180.300780][ T5843] Bluetooth: hci4: command tx timeout [ 180.768112][ T8805] netlink: 52 bytes leftover after parsing attributes in process `syz.0.828'. [ 180.982807][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.012352][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.052997][ T8667] bridge_slave_0: entered allmulticast mode [ 181.076676][ T8667] bridge_slave_0: entered promiscuous mode [ 181.102542][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.118195][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.125700][ T8667] bridge_slave_1: entered allmulticast mode [ 181.138468][ T8667] bridge_slave_1: entered promiscuous mode [ 181.277406][ T8667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.301775][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 181.329169][ T8826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.340862][ T8667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.361735][ T8826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.833'. [ 181.528330][ T8667] team0: Port device team_slave_0 added [ 181.558053][ T1098] IPVS: stop unused estimator thread 0... [ 181.568236][ T8667] team0: Port device team_slave_1 added [ 181.597089][ T8841] netlink: 'syz.1.838': attribute type 1 has an invalid length. [ 181.635592][ T8846] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 181.663515][ T8846] netlink: 'syz.0.839': attribute type 2 has an invalid length. [ 181.704158][ T8841] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 181.758808][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.775849][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.820219][ T8667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.977080][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.990528][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.025624][ T8667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.276762][ T8667] hsr_slave_0: entered promiscuous mode [ 182.303912][ T8667] hsr_slave_1: entered promiscuous mode [ 182.325608][ T8667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.333635][ T8667] Cannot create hsr debugfs directory [ 182.379130][ T5843] Bluetooth: hci4: command tx timeout [ 182.396230][ T8884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.664610][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 182.712418][ T8893] netlink: 'syz.0.850': attribute type 4 has an invalid length. [ 183.186938][ T8908] syzkaller1: entered promiscuous mode [ 183.216838][ T8908] syzkaller1: entered allmulticast mode [ 183.329411][ T8915] veth1_macvtap: left promiscuous mode [ 183.338521][ T8915] macsec0: entered allmulticast mode [ 183.379563][ T8916] macsec0: entered allmulticast mode [ 183.396754][ T8915] netlink: 'syz.4.854': attribute type 10 has an invalid length. [ 183.535748][ T8931] netlink: 168 bytes leftover after parsing attributes in process `syz.1.860'. [ 183.552406][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.861'. [ 183.565985][ T8911] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 183.621424][ T8911] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 183.715640][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.861'. [ 183.802134][ T8948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.864'. [ 183.815541][ T8951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.864'. [ 184.009861][ T8957] netlink: 44 bytes leftover after parsing attributes in process `syz.3.866'. [ 184.107252][ T8962] x_tables: duplicate underflow at hook 2 [ 184.295386][ T8667] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.377364][ T8667] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.468767][ T5845] Bluetooth: hci4: command tx timeout [ 184.486149][ T8667] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.508034][ T30] audit: type=1800 audit(1746887710.446:9): pid=8976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.872" name="memory.events" dev="tmpfs" ino=1243 res=0 errno=0 [ 184.582156][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 184.615841][ T8667] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.687982][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 184.791637][ T8993] x_tables: duplicate underflow at hook 1 [ 184.863524][ T8993] netlink: 42 bytes leftover after parsing attributes in process `syz.3.873'. [ 184.926956][ T9001] x_tables: duplicate underflow at hook 1 [ 185.425406][ T8667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.540722][ T8667] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.738330][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.746268][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.804728][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.813172][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.137974][ T9062] syz.1.886: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 186.155916][ T9062] CPU: 0 UID: 0 PID: 9062 Comm: syz.1.886 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 186.155945][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.155956][ T9062] Call Trace: [ 186.155965][ T9062] [ 186.155974][ T9062] dump_stack_lvl+0x189/0x250 [ 186.156012][ T9062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.156039][ T9062] ? __pfx__printk+0x10/0x10 [ 186.156056][ T9062] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 186.156075][ T9062] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 186.156097][ T9062] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 186.156120][ T9062] warn_alloc+0x214/0x310 [ 186.156148][ T9062] ? __pfx___schedule+0x10/0x10 [ 186.156181][ T9062] ? __pfx_warn_alloc+0x10/0x10 [ 186.156209][ T9062] ? kasan_save_track+0x4f/0x80 [ 186.156230][ T9062] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 186.156253][ T9062] ? xskq_create+0x56/0x170 [ 186.156283][ T9062] ? __x64_sys_setsockopt+0x18b/0x220 [ 186.156307][ T9062] ? do_syscall_64+0xf6/0x210 [ 186.156324][ T9062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.156356][ T9062] __vmalloc_node_range_noprof+0x125/0x12c0 [ 186.156418][ T9062] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 186.156445][ T9062] ? xskq_create+0x56/0x170 [ 186.156477][ T9062] ? __kasan_kmalloc+0x93/0xb0 [ 186.156507][ T9062] vmalloc_user_noprof+0x74/0x80 [ 186.156548][ T9062] ? xskq_create+0xbf/0x170 [ 186.156577][ T9062] xskq_create+0xbf/0x170 [ 186.156611][ T9062] xsk_init_queue+0xb0/0x110 [ 186.156644][ T9062] xsk_setsockopt+0x43f/0x710 [ 186.156676][ T9062] ? __pfx_xsk_setsockopt+0x10/0x10 [ 186.156717][ T9062] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 186.156741][ T9062] ? __pfx_xsk_setsockopt+0x10/0x10 [ 186.156771][ T9062] do_sock_setsockopt+0x257/0x3e0 [ 186.156799][ T9062] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 186.156822][ T9062] ? __fget_files+0x2a/0x420 [ 186.156853][ T9062] ? __fget_files+0x3a0/0x420 [ 186.156877][ T9062] ? __fget_files+0x2a/0x420 [ 186.156912][ T9062] __x64_sys_setsockopt+0x18b/0x220 [ 186.156946][ T9062] do_syscall_64+0xf6/0x210 [ 186.156968][ T9062] ? clear_bhb_loop+0x45/0xa0 [ 186.156992][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.157012][ T9062] RIP: 0033:0x7fc74e98e969 [ 186.157031][ T9062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.157047][ T9062] RSP: 002b:00007fc74f84c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 186.157068][ T9062] RAX: ffffffffffffffda RBX: 00007fc74ebb6080 RCX: 00007fc74e98e969 [ 186.157082][ T9062] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 186.157094][ T9062] RBP: 00007fc74ea10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 186.157105][ T9062] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.157117][ T9062] R13: 0000000000000000 R14: 00007fc74ebb6080 R15: 00007ffde1a8dbb8 [ 186.157148][ T9062] [ 186.157168][ T9062] Mem-Info: [ 186.462123][ T9062] active_anon:3515 inactive_anon:0 isolated_anon:0 [ 186.462123][ T9062] active_file:1473 inactive_file:39871 isolated_file:0 [ 186.462123][ T9062] unevictable:768 dirty:86 writeback:0 [ 186.462123][ T9062] slab_reclaimable:10863 slab_unreclaimable:112607 [ 186.462123][ T9062] mapped:29047 shmem:1362 pagetables:653 [ 186.462123][ T9062] sec_pagetables:0 bounce:0 [ 186.462123][ T9062] kernel_misc_reclaimable:0 [ 186.462123][ T9062] free:1333145 free_pcp:748 free_cma:0 [ 186.508413][ T9062] Node 0 active_anon:14060kB inactive_anon:0kB active_file:5892kB inactive_file:159280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116188kB dirty:340kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11500kB pagetables:2612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 186.542601][ T9062] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 186.574599][ T9062] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 186.602634][ T9062] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 186.609818][ T9062] Node 0 DMA32 free:1409900kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:14052kB inactive_anon:0kB active_file:5892kB inactive_file:159188kB unevictable:1536kB writepending:336kB present:3129332kB managed:2564056kB mlocked:0kB bounce:0kB free_pcp:1192kB local_pcp:1088kB free_cma:0kB [ 186.646580][ T9062] lowmem_reserve[]: 0 0 0 0 0 [ 186.647508][ T8667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.651458][ T9062] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 186.651557][ T9062] lowmem_reserve[]: 0 0 0 0 0 [ 186.651602][ T9062] Node 1 Normal free:3909184kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 186.651656][ T9062] lowmem_reserve[]: 0 0 0 0 0 [ 186.651700][ T9062] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 186.651877][ T9062] Node 0 DMA32: 466*4kB (UME) 298*8kB (UME) 142*16kB (UME) 334*32kB (UME) 556*64kB (UME) 469*128kB (UME) 367*256kB (UME) 229*512kB (UM) 129*1024kB (UM) 6*2048kB (UM) 230*4096kB (M) = 1410488kB [ 186.652066][ T9062] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 186.652181][ T9062] Node 1 Normal: 218*4kB (UME) 61*8kB (UME) 39*16kB (UME) 236*32kB (UME) 114*64kB (UME) 23*128kB (UME) 19*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 4*2048kB (UE) 945*4096kB (UM) = 3909184kB [ 186.792298][ T9062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.802069][ T9062] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.811898][ T9062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.822153][ T9062] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.838733][ T9062] 42703 total pagecache pages [ 186.843634][ T9062] 0 pages in swap cache [ 186.848159][ T9062] Free swap = 124996kB [ 186.852630][ T9062] Total swap = 124996kB [ 186.856899][ T9062] 2097051 pages RAM [ 186.861282][ T9062] 0 pages HighMem/MovableOnly [ 186.866214][ T9062] 424379 pages reserved [ 186.870580][ T9062] 0 pages cma reserved [ 187.165557][ T9087] netlink: 'syz.3.890': attribute type 282 has an invalid length. [ 187.255049][ T9092] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 187.482187][ T8667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.675782][ T9106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.690463][ T9107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.742919][ T8667] veth0_vlan: entered promiscuous mode [ 187.795929][ T8667] veth1_vlan: entered promiscuous mode [ 187.896709][ T9110] __nla_validate_parse: 3 callbacks suppressed [ 187.896728][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 187.949039][ T8667] veth0_macvtap: entered promiscuous mode [ 188.050197][ T8667] veth1_macvtap: entered promiscuous mode [ 188.102023][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 188.118896][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 188.195270][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.242739][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.254795][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.266050][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.282321][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.337043][ T9126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.903'. [ 188.383222][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.415869][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.444017][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.467951][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.487269][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.504641][ T9128] wg1: entered promiscuous mode [ 188.509885][ T9128] wg1: entered allmulticast mode [ 188.553110][ T8667] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.568407][ T8667] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.578150][ T8667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.587576][ T8667] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.602004][ T9137] FAULT_INJECTION: forcing a failure. [ 188.602004][ T9137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.637538][ T9137] CPU: 0 UID: 0 PID: 9137 Comm: syz.3.908 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 188.637577][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.637589][ T9137] Call Trace: [ 188.637597][ T9137] [ 188.637605][ T9137] dump_stack_lvl+0x189/0x250 [ 188.637637][ T9137] ? __lock_acquire+0xaac/0xd20 [ 188.637668][ T9137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.637695][ T9137] ? __pfx__printk+0x10/0x10 [ 188.637714][ T9137] ? __might_fault+0xb0/0x130 [ 188.637751][ T9137] should_fail_ex+0x414/0x560 [ 188.637776][ T9137] _copy_from_user+0x2d/0xb0 [ 188.637805][ T9137] do_sock_getsockopt+0x1cd/0x650 [ 188.637836][ T9137] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 188.637861][ T9137] ? do_syscall_64+0x40/0x210 [ 188.637881][ T9137] ? __fget_files+0x2a/0x420 [ 188.637905][ T9137] ? __fget_files+0x3a0/0x420 [ 188.637929][ T9137] ? __fget_files+0x2a/0x420 [ 188.637961][ T9137] __x64_sys_getsockopt+0x1a5/0x250 [ 188.637987][ T9137] ? do_syscall_64+0x40/0x210 [ 188.638008][ T9137] ? do_syscall_64+0x40/0x210 [ 188.638031][ T9137] do_syscall_64+0xf6/0x210 [ 188.638051][ T9137] ? clear_bhb_loop+0x45/0xa0 [ 188.638075][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.638094][ T9137] RIP: 0033:0x7f023b18e969 [ 188.638110][ T9137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.638126][ T9137] RSP: 002b:00007f023c088038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 188.638147][ T9137] RAX: ffffffffffffffda RBX: 00007f023b3b5fa0 RCX: 00007f023b18e969 [ 188.638161][ T9137] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 188.638172][ T9137] RBP: 00007f023c088090 R08: 0000200000000080 R09: 0000000000000000 [ 188.638185][ T9137] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 188.638196][ T9137] R13: 0000000000000000 R14: 00007f023b3b5fa0 R15: 00007ffd63b13348 [ 188.638227][ T9137] [ 188.977190][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.007276][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.041400][ T8994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.079602][ T8994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.087872][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 189.288598][ T9156] xt_nfacct: accounting object `syz1' does not exists [ 189.804767][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.922'. [ 190.200695][ T9200] pim6reg: entered allmulticast mode [ 190.279398][ T9204] pim6reg: left allmulticast mode [ 190.655181][ T9219] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 190.683237][ T9219] xt_cgroup: xt_cgroup: no path or classid specified [ 190.853643][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 191.055199][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.939'. [ 191.125217][ T9231] bridge_slave_1 (unregistering): left allmulticast mode [ 191.145072][ T9231] bridge_slave_1 (unregistering): left promiscuous mode [ 191.166939][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.247196][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 191.575776][ T9254] xt_hashlimit: invalid rate [ 191.715748][ T30] audit: type=1804 audit(1746887717.656:10): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.948" name="/newroot/198/cgroup.controllers" dev="tmpfs" ino=1030 res=1 errno=0 [ 191.762504][ T9264] netlink: 'syz.0.948': attribute type 30 has an invalid length. [ 191.767515][ T9262] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 191.780381][ T30] audit: type=1800 audit(1746887717.656:11): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.948" name="cgroup.controllers" dev="tmpfs" ino=1030 res=0 errno=0 [ 191.879349][ T9264] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.888620][ T9264] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.897781][ T9264] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.907083][ T9264] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.929348][ T9264] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.939863][ T9264] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.949421][ T9264] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.958354][ T9264] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.999619][ T9275] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 192.028227][ T9272] netlink: 'syz.4.950': attribute type 1 has an invalid length. [ 192.037937][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 192.059688][ T9265] bpq0: entered promiscuous mode [ 192.066663][ T9265] bpq0: entered allmulticast mode [ 192.071011][ T9277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.080536][ T9262] syzkaller1: entered promiscuous mode [ 192.086139][ T9262] syzkaller1: entered allmulticast mode [ 192.438547][ T9290] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 192.455685][ T9290] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 192.820758][ T9313] netlink: 'syz.4.964': attribute type 2 has an invalid length. [ 193.119452][ T9332] __nla_validate_parse: 4 callbacks suppressed [ 193.119475][ T9332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.972'. [ 193.154682][ T9336] x_tables: duplicate underflow at hook 1 [ 193.237490][ T9338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.973'. [ 193.351894][ T9348] xt_TCPMSS: Only works on TCP SYN packets [ 193.973240][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'. [ 194.374973][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 194.543018][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.697410][ T9394] ipvlan0: entered promiscuous mode [ 195.703221][ T9394] ipvlan0: entered allmulticast mode [ 195.708570][ T9394] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 195.968332][ T9410] FAULT_INJECTION: forcing a failure. [ 195.968332][ T9410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.058944][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.2.994 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 196.058991][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.059011][ T9410] Call Trace: [ 196.059025][ T9410] [ 196.059034][ T9410] dump_stack_lvl+0x189/0x250 [ 196.059067][ T9410] ? __lock_acquire+0xaac/0xd20 [ 196.059098][ T9410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.059127][ T9410] ? __pfx__printk+0x10/0x10 [ 196.059147][ T9410] ? __might_fault+0xb0/0x130 [ 196.059184][ T9410] should_fail_ex+0x414/0x560 [ 196.059209][ T9410] _copy_from_user+0x2d/0xb0 [ 196.059237][ T9410] ___sys_sendmsg+0x158/0x2a0 [ 196.059268][ T9410] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.059334][ T9410] ? __fget_files+0x2a/0x420 [ 196.059358][ T9410] ? __fget_files+0x3a0/0x420 [ 196.059394][ T9410] __sys_sendmmsg+0x227/0x430 [ 196.059439][ T9410] ? __pfx___sys_sendmmsg+0x10/0x10 [ 196.059477][ T9410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.059516][ T9410] ? ksys_write+0x1f0/0x250 [ 196.059536][ T9410] ? rcu_is_watching+0x15/0xb0 [ 196.059578][ T9410] __x64_sys_sendmmsg+0xa0/0xc0 [ 196.059607][ T9410] do_syscall_64+0xf6/0x210 [ 196.059629][ T9410] ? clear_bhb_loop+0x45/0xa0 [ 196.059652][ T9410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.059671][ T9410] RIP: 0033:0x7f81ff78e969 [ 196.059697][ T9410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.059713][ T9410] RSP: 002b:00007f8200626038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 196.059735][ T9410] RAX: ffffffffffffffda RBX: 00007f81ff9b5fa0 RCX: 00007f81ff78e969 [ 196.059749][ T9410] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 196.059761][ T9410] RBP: 00007f8200626090 R08: 0000000000000000 R09: 0000000000000000 [ 196.059773][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.059784][ T9410] R13: 0000000000000000 R14: 00007f81ff9b5fa0 R15: 00007fff1c28cfa8 [ 196.059814][ T9410] [ 196.395827][ T9420] netlink: 36 bytes leftover after parsing attributes in process `syz.2.999'. [ 196.573015][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'. [ 196.742288][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'. [ 197.085780][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 197.141018][ T9440] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1004'. [ 197.264200][ T5887] IPVS: starting estimator thread 0... [ 197.378821][ T9451] IPVS: using max 26 ests per chain, 62400 per kthread [ 197.458595][ T9460] FAULT_INJECTION: forcing a failure. [ 197.458595][ T9460] name failslab, interval 1, probability 0, space 0, times 1 [ 197.521896][ T9460] CPU: 1 UID: 0 PID: 9460 Comm: syz.4.1008 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 197.521928][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.521941][ T9460] Call Trace: [ 197.521949][ T9460] [ 197.521957][ T9460] dump_stack_lvl+0x189/0x250 [ 197.521996][ T9460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.522026][ T9460] ? __pfx__printk+0x10/0x10 [ 197.522053][ T9460] ? __pfx___might_resched+0x10/0x10 [ 197.522071][ T9460] ? fs_reclaim_acquire+0x7d/0x100 [ 197.522106][ T9460] should_fail_ex+0x414/0x560 [ 197.522131][ T9460] should_failslab+0xa8/0x100 [ 197.522159][ T9460] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 197.522186][ T9460] ? __alloc_skb+0x112/0x2d0 [ 197.522215][ T9460] __alloc_skb+0x112/0x2d0 [ 197.522245][ T9460] sock_wmalloc+0xb2/0x130 [ 197.522277][ T9460] pppoe_sendmsg+0x2a8/0x790 [ 197.522309][ T9460] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 197.522333][ T9460] ? aa_sock_msg_perm+0x94/0x160 [ 197.522357][ T9460] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.522379][ T9460] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 197.522404][ T9460] __sock_sendmsg+0x219/0x270 [ 197.522428][ T9460] ____sys_sendmsg+0x52d/0x830 [ 197.522463][ T9460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.522501][ T9460] ? import_iovec+0x74/0xa0 [ 197.522542][ T9460] ___sys_sendmsg+0x21f/0x2a0 [ 197.522573][ T9460] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.522641][ T9460] ? __fget_files+0x2a/0x420 [ 197.522666][ T9460] ? __fget_files+0x3a0/0x420 [ 197.522703][ T9460] __sys_sendmmsg+0x227/0x430 [ 197.522737][ T9460] ? __pfx___sys_sendmmsg+0x10/0x10 [ 197.522776][ T9460] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.522817][ T9460] ? ksys_write+0x1f0/0x250 [ 197.522838][ T9460] ? rcu_is_watching+0x15/0xb0 [ 197.522880][ T9460] __x64_sys_sendmmsg+0xa0/0xc0 [ 197.522910][ T9460] do_syscall_64+0xf6/0x210 [ 197.522938][ T9460] ? clear_bhb_loop+0x45/0xa0 [ 197.522962][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.522981][ T9460] RIP: 0033:0x7fd2b1b8e969 [ 197.522999][ T9460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.523015][ T9460] RSP: 002b:00007fd2b2ada038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 197.523036][ T9460] RAX: ffffffffffffffda RBX: 00007fd2b1db5fa0 RCX: 00007fd2b1b8e969 [ 197.523051][ T9460] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 197.523063][ T9460] RBP: 00007fd2b2ada090 R08: 0000000000000000 R09: 0000000000000000 [ 197.523075][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.523086][ T9460] R13: 0000000000000000 R14: 00007fd2b1db5fa0 R15: 00007ffe4d1e61d8 [ 197.523118][ T9460] [ 197.925990][ T9469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1011'. [ 198.408104][ T9497] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000 [ 198.597511][ T9498] bridge0: port 3(gretap0) entered blocking state [ 198.621452][ T9498] bridge0: port 3(gretap0) entered disabled state [ 198.680475][ T9498] gretap0: entered allmulticast mode [ 198.713360][ T9498] gretap0: entered promiscuous mode [ 198.857246][ T9508] FAULT_INJECTION: forcing a failure. [ 198.857246][ T9508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.910133][ T9508] CPU: 0 UID: 0 PID: 9508 Comm: syz.0.1021 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 198.910173][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.910185][ T9508] Call Trace: [ 198.910193][ T9508] [ 198.910201][ T9508] dump_stack_lvl+0x189/0x250 [ 198.910235][ T9508] ? __lock_acquire+0xaac/0xd20 [ 198.910267][ T9508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.910296][ T9508] ? __pfx__printk+0x10/0x10 [ 198.910316][ T9508] ? __might_fault+0xb0/0x130 [ 198.910356][ T9508] should_fail_ex+0x414/0x560 [ 198.910381][ T9508] _copy_from_user+0x2d/0xb0 [ 198.910417][ T9508] kstrtouint_from_user+0xc4/0x170 [ 198.910443][ T9508] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 198.910484][ T9508] proc_fail_nth_write+0x88/0x240 [ 198.910512][ T9508] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 198.910545][ T9508] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 198.910575][ T9508] vfs_write+0x27b/0xa90 [ 198.910606][ T9508] ? __pfx_vfs_write+0x10/0x10 [ 198.910629][ T9508] ? __fget_files+0x2a/0x420 [ 198.910659][ T9508] ? __fget_files+0x3a0/0x420 [ 198.910687][ T9508] ? __fget_files+0x2a/0x420 [ 198.910720][ T9508] ksys_write+0x145/0x250 [ 198.910742][ T9508] ? rcu_is_watching+0x15/0xb0 [ 198.910774][ T9508] ? __pfx_ksys_write+0x10/0x10 [ 198.910801][ T9508] ? do_syscall_64+0xba/0x210 [ 198.910826][ T9508] do_syscall_64+0xf6/0x210 [ 198.910847][ T9508] ? clear_bhb_loop+0x45/0xa0 [ 198.910872][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.910892][ T9508] RIP: 0033:0x7f0656b8d41f [ 198.910910][ T9508] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 198.910926][ T9508] RSP: 002b:00007f0657978030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 198.910946][ T9508] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0656b8d41f [ 198.910960][ T9508] RDX: 0000000000000001 RSI: 00007f06579780a0 RDI: 0000000000000004 [ 198.910971][ T9508] RBP: 00007f0657978090 R08: 0000000000000000 R09: 0000000000000000 [ 198.910983][ T9508] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 198.910994][ T9508] R13: 0000000000000000 R14: 00007f0656db5fa0 R15: 00007fff636ed9e8 [ 198.911026][ T9508] [ 199.281248][ T9505] netlink: 'syz.1.1020': attribute type 4 has an invalid length. [ 199.355346][ T9514] netlink: 'syz.1.1024': attribute type 1 has an invalid length. [ 199.416884][ T9514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.498321][ T9516] bond2: (slave veth5): Enslaving as an active interface with a down link [ 199.527845][ T9514] bond2: (slave veth0_to_bond): making interface the new active one [ 199.547064][ T9514] veth0_to_bond: entered promiscuous mode [ 199.554057][ T9514] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 199.610599][ T9516] vlan0: entered allmulticast mode [ 199.616731][ T9516] veth1: entered allmulticast mode [ 199.623080][ T9516] veth1: entered promiscuous mode [ 199.629860][ T9516] veth1: left promiscuous mode [ 199.637684][ T9516] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 199.786639][ T9522] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1025'. [ 199.813176][ T9522] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 199.849229][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 199.858807][ T9524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.010898][ T9532] dummy0: entered promiscuous mode [ 200.016828][ T9532] macsec1: entered promiscuous mode [ 200.023151][ T9532] macsec1: entered allmulticast mode [ 200.029949][ T9532] dummy0: entered allmulticast mode [ 200.226623][ T9532] dummy0: left allmulticast mode [ 200.233524][ T9532] dummy0: left promiscuous mode [ 200.263623][ T9536] tipc: Enabling of bearer rejected, failed to enable media [ 200.492327][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 200.532883][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 200.748840][ T9556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.765176][ T9556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.819843][ T9556] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.829338][ T9556] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.840537][ T9556] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.851255][ T9556] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.277694][ T9586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1041'. [ 201.313456][ T9585] netlink: 'syz.2.1044': attribute type 7 has an invalid length. [ 201.326239][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 201.362566][ T9588] tap0: tun_chr_ioctl cmd 1074025677 [ 201.369627][ T9588] tap0: linktype set to 1 [ 201.680387][ T9599] Bluetooth: MGMT ver 1.23 [ 203.032064][ T9632] xt_hashlimit: max too large, truncated to 1048576 [ 203.496770][ T9641] tipc: Started in network mode [ 203.539463][ T9641] tipc: Node identity e2c6c9e776b6, cluster identity 4711 [ 203.568805][ T9641] tipc: Enabled bearer , priority 0 [ 203.864240][ T9645] syzkaller0: entered promiscuous mode [ 203.913491][ T9645] syzkaller0: entered allmulticast mode [ 203.951003][ T9645] tipc: Resetting bearer [ 203.975203][ T9655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.015275][ T9640] tipc: Resetting bearer [ 204.026332][ T9655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.086502][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 204.277646][ T9670] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 204.519349][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1069'. [ 204.588929][ T6468] tipc: Node number set to 2490419687 [ 205.974818][ T9640] tipc: Disabling bearer [ 206.039777][ T9673] 8021q: VLANs not supported on ip6tnl0 [ 206.588036][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1075'. [ 206.644029][ T9706] netlink: 'syz.1.1077': attribute type 3 has an invalid length. [ 206.654155][ T9708] netlink: 'syz.1.1077': attribute type 3 has an invalid length. [ 206.670298][ T9702] block nbd0: must specify backend [ 207.033494][ T9722] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 207.045778][ T9722] netlink: 784 bytes leftover after parsing attributes in process `syz.3.1080'. [ 207.477336][ T9731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.506974][ T9735] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001 [ 207.684228][ T9744] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1087'. [ 209.069174][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 209.317229][ T9768] bond0 (unregistering): (slave ip6erspan0): Releasing active interface [ 209.359784][ T9768] bond0 (unregistering): Released all slaves [ 209.458824][ T9775] tipc: Cannot configure node identity twice [ 210.315454][ T9818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.989216][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 211.989237][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 211.995517][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 212.876365][ T9830] xt_cgroup: invalid path, errno=-2 [ 213.858127][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1119'. [ 213.901916][ T9879] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1120'. [ 214.306446][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 214.488392][ T9906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1125'. [ 214.497680][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 214.767075][ T9914] xt_cgroup: invalid path, errno=-2 [ 214.802533][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1137'. [ 214.894618][ T9924] netlink: 'syz.3.1129': attribute type 4 has an invalid length. [ 214.911013][ T9924] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1129'. [ 215.009723][ T9929] netlink: 'syz.0.1130': attribute type 5 has an invalid length. [ 215.046494][ T9929] netlink: 'syz.0.1130': attribute type 5 has an invalid length. [ 215.321041][ T9947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1133'. [ 215.365778][ T9947] block nbd0: must specify backend [ 215.624551][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 215.715100][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 215.763522][ T9959] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa:0:20:0, load rds_tcp or rds_rdma? [ 216.189585][ T9973] sctp: [Deprecated]: syz.4.1141 (pid 9973) Use of int in max_burst socket option. [ 216.189585][ T9973] Use struct sctp_assoc_value instead [ 216.318106][ T9972] xt_CT: No such helper "pptp" [ 216.392582][ T9976] batman_adv: batadv0: Adding interface: dummy0 [ 216.441602][ T9976] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.470664][ T9976] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 216.662717][ T9988] block nbd0: must specify backend [ 217.298055][T10009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.335134][T10032] syz.0.1158: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.418077][T10032] CPU: 1 UID: 0 PID: 10032 Comm: syz.0.1158 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 217.418112][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.418124][T10032] Call Trace: [ 217.418132][T10032] [ 217.418141][T10032] dump_stack_lvl+0x189/0x250 [ 217.418179][T10032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.418209][T10032] ? __pfx__printk+0x10/0x10 [ 217.418229][T10032] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 217.418249][T10032] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 217.418270][T10032] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 217.418294][T10032] warn_alloc+0x214/0x310 [ 217.418323][T10032] ? __pfx___schedule+0x10/0x10 [ 217.418356][T10032] ? __pfx_warn_alloc+0x10/0x10 [ 217.418383][T10032] ? kasan_save_track+0x4f/0x80 [ 217.418405][T10032] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 217.418429][T10032] ? xskq_create+0x56/0x170 [ 217.418484][T10032] ? __x64_sys_setsockopt+0x18b/0x220 [ 217.418510][T10032] ? do_syscall_64+0xf6/0x210 [ 217.418528][T10032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.418560][T10032] __vmalloc_node_range_noprof+0x125/0x12c0 [ 217.418621][T10032] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.418652][T10032] ? __kasan_kmalloc+0x93/0xb0 [ 217.418681][T10032] vmalloc_user_noprof+0x74/0x80 [ 217.418709][T10032] ? xskq_create+0xbf/0x170 [ 217.418736][T10032] xskq_create+0xbf/0x170 [ 217.418769][T10032] xsk_init_queue+0xb0/0x110 [ 217.418801][T10032] xsk_setsockopt+0x43f/0x710 [ 217.418833][T10032] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.418874][T10032] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 217.418896][T10032] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.418926][T10032] do_sock_setsockopt+0x257/0x3e0 [ 217.418956][T10032] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 217.418979][T10032] ? __fget_files+0x2a/0x420 [ 217.419010][T10032] ? __fget_files+0x3a0/0x420 [ 217.419034][T10032] ? __fget_files+0x2a/0x420 [ 217.419068][T10032] __x64_sys_setsockopt+0x18b/0x220 [ 217.419101][T10032] do_syscall_64+0xf6/0x210 [ 217.419121][T10032] ? clear_bhb_loop+0x45/0xa0 [ 217.419147][T10032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.419166][T10032] RIP: 0033:0x7f0656b8e969 [ 217.419184][T10032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.419200][T10032] RSP: 002b:00007f0657978038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.419221][T10032] RAX: ffffffffffffffda RBX: 00007f0656db5fa0 RCX: 00007f0656b8e969 [ 217.419235][T10032] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 217.419247][T10032] RBP: 00007f0656c10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 217.419259][T10032] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.419271][T10032] R13: 0000000000000000 R14: 00007f0656db5fa0 R15: 00007fff636ed9e8 [ 217.419302][T10032] [ 217.873377][T10032] Mem-Info: [ 217.878545][T10032] active_anon:3627 inactive_anon:0 isolated_anon:0 [ 217.878545][T10032] active_file:1569 inactive_file:39882 isolated_file:0 [ 217.878545][T10032] unevictable:778 dirty:245 writeback:0 [ 217.878545][T10032] slab_reclaimable:10792 slab_unreclaimable:114997 [ 217.878545][T10032] mapped:30165 shmem:1362 pagetables:707 [ 217.878545][T10032] sec_pagetables:0 bounce:0 [ 217.878545][T10032] kernel_misc_reclaimable:0 [ 217.878545][T10032] free:1331290 free_pcp:357 free_cma:0 [ 217.966747][T10032] Node 0 active_anon:14508kB inactive_anon:0kB active_file:6276kB inactive_file:159324kB unevictable:1576kB isolated(anon):0kB isolated(file):0kB mapped:120760kB dirty:976kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11696kB pagetables:2828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 218.005372][T10009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.047716][T10032] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 218.119127][T10032] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.153593][T10032] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 218.172308][T10032] Node 0 DMA32 free:1400488kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:14292kB inactive_anon:0kB active_file:6276kB inactive_file:159240kB unevictable:1576kB writepending:992kB present:3129332kB managed:2564056kB mlocked:40kB bounce:0kB free_pcp:2504kB local_pcp:952kB free_cma:0kB [ 218.215525][T10032] lowmem_reserve[]: 0 0 0 0 0 [ 218.278983][T10032] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 218.309741][T10032] lowmem_reserve[]: 0 0 0 0 0 [ 218.340927][T10009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.352471][T10032] Node 1 Normal free:3909256kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.403709][T10032] lowmem_reserve[]: 0 0 0 0 0 [ 218.416845][T10032] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 218.445108][T10032] Node 0 DMA32: 236*4kB (UME) 307*8kB (UME) 173*16kB (UM) 418*32kB (UME) 428*64kB (UME) 460*128kB (UME) 362*256kB (UME) 223*512kB (UM) 130*1024kB (UM) 8*2048kB (UM) 229*4096kB (M) = 1400152kB [ 218.469409][T10032] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 218.487056][T10009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.495309][T10032] Node 1 Normal: 218*4kB (UME) 62*8kB (UME) 39*16kB (UME) 234*32kB (UME) 116*64kB (UME) 23*128kB (UME) 19*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 4*2048kB (UE) 945*4096kB (UM) = 3909256kB [ 218.531853][T10032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.550148][T10032] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.560989][T10032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.616441][T10032] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.633806][T10032] 42812 total pagecache pages [ 218.638968][T10072] xfrm0: mtu less than device minimum [ 218.714848][T10009] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.762345][T10032] 0 pages in swap cache [ 218.786621][T10032] Free swap = 124996kB [ 218.807878][T10009] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.822984][T10032] Total swap = 124996kB [ 218.831890][T10032] 2097051 pages RAM [ 218.842515][T10075] bridge0: port 1(gretap0) entered blocking state [ 218.854068][T10032] 0 pages HighMem/MovableOnly [ 218.869947][T10032] 424379 pages reserved [ 218.875805][T10075] bridge0: port 1(gretap0) entered disabled state [ 218.891899][T10032] 0 pages cma reserved [ 218.922103][T10075] gretap0: entered allmulticast mode [ 218.957660][T10075] gretap0: entered promiscuous mode [ 219.021841][T10009] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.241589][T10009] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.528360][T10092] tap0: tun_chr_ioctl cmd 1074025677 [ 219.534350][T10092] tap0: linktype set to 769 [ 219.541904][T10092] __nla_validate_parse: 5 callbacks suppressed [ 219.541924][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 219.649741][T10094] netlink: 'syz.3.1176': attribute type 30 has an invalid length. [ 219.669040][T10094] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 219.698702][T10094] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 219.765215][T10105] netlink: 'syz.0.1179': attribute type 11 has an invalid length. [ 219.774344][T10105] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1179'. [ 219.778202][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 220.261095][T10113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1180'. [ 220.452806][T10122] Cannot find del_set index 0 as target [ 220.512878][T10122] netlink: 'syz.0.1183': attribute type 42 has an invalid length. [ 220.523525][T10123] netlink: 'syz.0.1183': attribute type 42 has an invalid length. [ 220.548210][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'. [ 220.612314][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 220.970868][T10134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.454415][T10134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.752218][T10134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.963228][T10134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.011095][T10190] sit0: entered promiscuous mode [ 222.036452][T10190] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 222.059039][T10190] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1199'. [ 222.200073][T10201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1205'. [ 222.443924][T10134] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.499568][T10219] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 222.566436][T10134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.621743][T10134] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.784003][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'. [ 222.807768][T10134] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.977385][ T30] audit: type=1800 audit(1746887748.906:12): pid=10240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1219" name="memory.events" dev="tmpfs" ino=1776 res=0 errno=0 [ 223.030388][ T30] audit: type=1804 audit(1746887748.926:13): pid=10240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1219" name="memory.events" dev="tmpfs" ino=1776 res=1 errno=0 [ 223.103854][T10245] netlink: 'syz.3.1220': attribute type 11 has an invalid length. [ 223.119994][T10245] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1220'. [ 223.324154][T10247] tipc: Enabled bearer , priority 0 [ 223.389025][T10241] tipc: Disabling bearer [ 224.141144][T10269] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.149392][T10269] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.315664][T10269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.334313][T10269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.526826][T10269] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.557364][T10269] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.616852][T10269] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.632659][T10269] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.303302][T10295] bridge0: entered allmulticast mode [ 225.318471][T10294] bridge0: left allmulticast mode [ 225.573963][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 226.734957][T10325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1237'. [ 226.825274][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 226.841492][T10333] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 226.842652][T10334] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 226.856565][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1239'. [ 227.022267][T10339] netlink: 'syz.1.1245': attribute type 11 has an invalid length. [ 227.036130][T10339] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1245'. [ 227.349658][ T65] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.357944][ T65] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.379975][ T5916] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.466790][T10358] netlink: 'syz.4.1246': attribute type 15 has an invalid length. [ 227.504506][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 227.535780][T10360] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 227.551830][T10360] batman_adv: batadv0: Adding interface: ip6gretap1 [ 227.558489][T10360] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.619000][ T5916] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.641685][T10360] batman_adv: batadv0: Interface activated: ip6gretap1 [ 227.854315][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.948818][T10372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1254'. [ 228.833954][T10399] pim6reg1: entered promiscuous mode [ 228.877384][T10399] pim6reg1: entered allmulticast mode [ 229.191303][T10407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1260'. [ 229.395891][T10411] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 229.489549][T10423] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 229.526848][T10404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.578434][T10404] team0: Port device bond2 added [ 229.596048][T10414] bridge_slave_0: default FDB implementation only supports local addresses [ 229.687127][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'. [ 229.815508][T10430] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1268'. [ 230.357372][T10446] ip6tnl1: entered promiscuous mode [ 230.364535][T10446] ip6tnl1: entered allmulticast mode [ 230.373253][T10446] team0: Device ip6tnl1 is of different type [ 230.729964][T10460] xt_TPROXY: Can be used only with -p tcp or -p udp [ 230.737358][T10460] openvswitch: netlink: Actions may not be safe on all matching packets [ 231.162053][T10476] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 231.171993][T10476] __nla_validate_parse: 1 callbacks suppressed [ 231.172013][T10476] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1284'. [ 231.401645][T10473] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1281'. [ 231.419027][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.547097][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 231.757902][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'. [ 232.046625][T10498] netlink: 'syz.4.1289': attribute type 29 has an invalid length. [ 232.386712][T10507] netlink: 'syz.1.1291': attribute type 15 has an invalid length. [ 232.494906][T10499] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 233.214281][T10522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1297'. [ 233.754120][T10539] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1300'. [ 234.027464][ T30] audit: type=1800 audit(1746887759.966:14): pid=10546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1303" name="memory.events" dev="tmpfs" ino=1915 res=0 errno=0 [ 234.125144][ T30] audit: type=1804 audit(1746887760.066:15): pid=10547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1303" name="/newroot/370/memory.events" dev="tmpfs" ino=1915 res=1 errno=0 [ 234.513098][T10560] netlink: 'syz.2.1304': attribute type 15 has an invalid length. [ 234.925339][T10571] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20004 [ 235.085970][T10571] x_tables: duplicate underflow at hook 1 [ 235.111495][T10575] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1309'. [ 235.200073][T10579] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1312'. [ 235.456016][T10584] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 236.108386][T10608] smc: net device bond0 erased user defined pnetid SYZ2 [ 236.111949][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 236.367919][T10614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1324'. [ 236.643565][T10631] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1329'. [ 236.976268][T10636] netlink: 'syz.4.1331': attribute type 3 has an invalid length. [ 237.000393][T10636] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1331'. [ 237.214189][T10645] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1335'. [ 237.328539][T10648] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1337'. [ 237.365891][T10652] netlink: 'syz.1.1335': attribute type 32 has an invalid length. [ 237.374098][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 237.392474][T10652] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 237.428058][T10654] xt_hashlimit: max too large, truncated to 1048576 [ 237.443494][T10654] xt_limit: Overflow, try lower: 0/0 [ 237.557832][ T5916] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 237.608544][ T5916] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 237.818472][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1342'. [ 237.860165][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 237.920119][T10665] SET target dimension over the limit! [ 237.965943][T10668] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1343'. [ 238.276493][ T5839] block nbd1: Receive control failed (result -104) [ 238.391011][T10671] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1341'. [ 238.465826][T10681] macvtap1: entered promiscuous mode [ 238.499157][T10681] batadv0: entered promiscuous mode [ 238.504681][T10681] macvtap1: entered allmulticast mode [ 238.548799][T10681] batadv0: entered allmulticast mode [ 238.575535][T10681] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 238.608792][T10684] IPVS: length: 71 != 8 [ 238.696723][T10683] batadv0: left allmulticast mode [ 238.718935][T10683] batadv0: left promiscuous mode [ 239.144208][ T5916] IPVS: starting estimator thread 0... [ 239.249264][T10705] IPVS: using max 27 ests per chain, 64800 per kthread [ 239.250283][T10704] nbd: nbd0 already in use [ 239.293946][T10704] block nbd0: NBD_DISCONNECT [ 239.309971][T10704] block nbd0: Send disconnect failed -107 [ 239.336190][T10704] block nbd0: Disconnected due to user request. [ 239.363785][T10704] block nbd0: shutting down sockets [ 239.629522][T10729] openvswitch: netlink: IP tunnel dst address not specified [ 239.975459][T10744] netlink: 'syz.1.1363': attribute type 12 has an invalid length. [ 239.984568][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.109513][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.121111][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.130808][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.141974][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.151522][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.192656][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.203877][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.215218][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.225776][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.235984][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.643853][T10750] chnl_net:caif_netlink_parms(): no params data found [ 255.694646][T10752] chnl_net:caif_netlink_parms(): no params data found [ 256.007432][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.321131][T10752] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.328793][T10752] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.336116][T10752] bridge_slave_0: entered allmulticast mode [ 256.361637][T10752] bridge_slave_0: entered promiscuous mode [ 256.399599][T10750] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.406826][T10750] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.431494][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.448097][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.457399][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.465690][T10750] bridge_slave_0: entered allmulticast mode [ 256.472440][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 256.480623][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 256.533757][T10750] bridge_slave_0: entered promiscuous mode [ 256.571697][T10750] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.598969][T10750] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.607132][T10750] bridge_slave_1: entered allmulticast mode [ 256.618867][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.641864][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 256.652653][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 256.660357][T10750] bridge_slave_1: entered promiscuous mode [ 256.669994][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 256.678372][T10752] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.686749][T10752] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.694386][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 256.702464][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 256.710259][T10752] bridge_slave_1: entered allmulticast mode [ 256.718177][T10752] bridge_slave_1: entered promiscuous mode [ 256.889843][ T5843] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 256.903833][ T5843] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 256.920688][ T5843] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 256.922639][T10750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.935594][ T5843] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 256.946664][ T5843] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 256.964604][T10752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.014813][T10752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.033777][T10750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.178890][ T5839] Bluetooth: hci5: command tx timeout [ 257.191324][T10752] team0: Port device team_slave_0 added [ 257.204036][T10750] team0: Port device team_slave_0 added [ 257.216055][T10750] team0: Port device team_slave_1 added [ 257.238364][T10752] team0: Port device team_slave_1 added [ 257.259108][ T5839] Bluetooth: hci6: command tx timeout [ 257.413501][T10752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.421372][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.458906][T10752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.472979][T10750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.481626][T10750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.507946][T10750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.523027][T10750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.530380][T10750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.557711][T10750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.601861][T10752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.609286][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.635972][T10752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.800391][T10752] hsr_slave_0: entered promiscuous mode [ 257.807379][T10752] hsr_slave_1: entered promiscuous mode [ 257.814323][T10752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.822959][T10752] Cannot create hsr debugfs directory [ 257.944787][T10750] hsr_slave_0: entered promiscuous mode [ 257.952007][T10750] hsr_slave_1: entered promiscuous mode [ 257.958475][T10750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.966845][T10750] Cannot create hsr debugfs directory [ 258.435901][T10771] chnl_net:caif_netlink_parms(): no params data found [ 258.539815][ T5843] Bluetooth: hci7: command tx timeout [ 258.547741][T10769] chnl_net:caif_netlink_parms(): no params data found [ 258.779610][ T5843] Bluetooth: hci8: command tx timeout [ 258.818134][T10773] chnl_net:caif_netlink_parms(): no params data found [ 259.019214][ T5843] Bluetooth: hci9: command tx timeout [ 259.078083][T10771] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.087086][T10771] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.094834][T10771] bridge_slave_0: entered allmulticast mode [ 259.103896][T10771] bridge_slave_0: entered promiscuous mode [ 259.143356][T10769] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.151407][T10769] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.159075][T10769] bridge_slave_0: entered allmulticast mode [ 259.167148][T10769] bridge_slave_0: entered promiscuous mode [ 259.176492][T10771] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.185814][T10771] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.193286][T10771] bridge_slave_1: entered allmulticast mode [ 259.201887][T10771] bridge_slave_1: entered promiscuous mode [ 259.246071][T10769] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.254769][T10769] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.266530][T10769] bridge_slave_1: entered allmulticast mode [ 259.272702][ T5843] Bluetooth: hci5: command tx timeout [ 259.282200][T10769] bridge_slave_1: entered promiscuous mode [ 259.339792][ T5843] Bluetooth: hci6: command tx timeout [ 259.386377][T10769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.451382][T10769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.480648][T10771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.546907][T10771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.560804][T10773] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.574238][T10773] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.583833][T10773] bridge_slave_0: entered allmulticast mode [ 259.592568][T10773] bridge_slave_0: entered promiscuous mode [ 259.607180][T10769] team0: Port device team_slave_0 added [ 259.619180][T10769] team0: Port device team_slave_1 added [ 259.682192][T10773] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.690178][T10773] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.698025][T10773] bridge_slave_1: entered allmulticast mode [ 259.710351][T10773] bridge_slave_1: entered promiscuous mode [ 259.801363][T10769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.808557][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.837597][T10769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.917225][T10769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.925501][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.953387][T10769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.971121][T10771] team0: Port device team_slave_0 added [ 259.981460][T10773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.997301][T10773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.068514][T10771] team0: Port device team_slave_1 added [ 260.212808][T10773] team0: Port device team_slave_0 added [ 260.226480][T10773] team0: Port device team_slave_1 added [ 260.242718][T10769] hsr_slave_0: entered promiscuous mode [ 260.251117][T10769] hsr_slave_1: entered promiscuous mode [ 260.257913][T10769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.266618][T10769] Cannot create hsr debugfs directory [ 260.360618][T10771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.369021][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.397337][T10771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.432179][T10773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.440260][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.466807][T10773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.497056][T10771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.505580][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.532494][T10771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.546134][T10773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.553585][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.580477][T10773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.626829][ T5843] Bluetooth: hci7: command tx timeout [ 260.767600][T10773] hsr_slave_0: entered promiscuous mode [ 260.774872][T10773] hsr_slave_1: entered promiscuous mode [ 260.781938][T10773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.790041][T10773] Cannot create hsr debugfs directory [ 260.802902][T10771] hsr_slave_0: entered promiscuous mode [ 260.811006][T10771] hsr_slave_1: entered promiscuous mode [ 260.818008][T10771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.826336][T10771] Cannot create hsr debugfs directory [ 260.859038][ T5843] Bluetooth: hci8: command tx timeout [ 261.099362][ T5843] Bluetooth: hci9: command tx timeout [ 261.338965][ T5843] Bluetooth: hci5: command tx timeout [ 261.419389][ T5843] Bluetooth: hci6: command tx timeout [ 262.698905][ T5843] Bluetooth: hci7: command tx timeout [ 262.939043][ T5843] Bluetooth: hci8: command tx timeout [ 263.178902][ T5843] Bluetooth: hci9: command tx timeout [ 263.419227][ T5843] Bluetooth: hci5: command tx timeout [ 263.499354][ T5843] Bluetooth: hci6: command tx timeout [ 264.789331][ T5843] Bluetooth: hci7: command tx timeout [ 265.019276][ T5843] Bluetooth: hci8: command tx timeout [ 265.259307][ T5843] Bluetooth: hci9: command tx timeout [ 290.538865][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 315.771213][ T5839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 315.782333][ T5839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 315.793757][ T5839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 315.803562][ T5839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 315.812792][ T5839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 315.925785][ T5839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 315.939657][ T5839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 315.949800][ T5839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 315.958255][ T5839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 315.966574][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 316.277789][T10795] chnl_net:caif_netlink_parms(): no params data found [ 316.599204][T10795] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.629483][T10795] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.637581][T10795] bridge_slave_0: entered allmulticast mode [ 316.689395][T10795] bridge_slave_0: entered promiscuous mode [ 316.712024][T10795] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.729034][T10795] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.737227][T10795] bridge_slave_1: entered allmulticast mode [ 316.762035][T10795] bridge_slave_1: entered promiscuous mode [ 316.790810][T10797] chnl_net:caif_netlink_parms(): no params data found [ 317.087219][T10795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.134868][T10795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.329400][ T5839] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 317.354630][ T5839] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 317.364606][ T5839] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 317.373673][ T5839] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 317.383377][ T5839] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 317.420205][ T5843] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 317.429601][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.432898][T10795] team0: Port device team_slave_0 added [ 317.441514][ T5843] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 317.452068][ T5843] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 317.461317][ T5843] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 317.469758][ T5843] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 317.485788][T10795] team0: Port device team_slave_1 added [ 317.549837][ T5839] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 317.560023][ T5839] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 317.569843][ T5839] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 317.581249][ T5839] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 317.590008][ T5839] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 317.670454][T10795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.678052][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.706747][T10795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.722076][T10795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.730024][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.757160][T10795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.769370][T10797] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.776938][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.785608][T10797] bridge_slave_0: entered allmulticast mode [ 317.794081][T10797] bridge_slave_0: entered promiscuous mode [ 317.827226][T10797] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.843638][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.851339][T10797] bridge_slave_1: entered allmulticast mode [ 317.859730][T10797] bridge_slave_1: entered promiscuous mode [ 317.905087][ T5839] Bluetooth: hci10: command tx timeout [ 318.052547][T10797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.068979][ T5839] Bluetooth: hci11: command tx timeout [ 318.076787][T10795] hsr_slave_0: entered promiscuous mode [ 318.085254][T10795] hsr_slave_1: entered promiscuous mode [ 318.093029][T10795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.100923][T10795] Cannot create hsr debugfs directory [ 318.147134][T10797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.336823][T10797] team0: Port device team_slave_0 added [ 318.404139][T10797] team0: Port device team_slave_1 added [ 318.559704][T10797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.567252][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.594071][T10797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.655341][T10797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.663485][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.690366][T10797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.916942][T10797] hsr_slave_0: entered promiscuous mode [ 318.924555][T10797] hsr_slave_1: entered promiscuous mode [ 318.931761][T10797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.941756][T10797] Cannot create hsr debugfs directory [ 319.231289][T10813] chnl_net:caif_netlink_parms(): no params data found [ 319.262478][T10811] chnl_net:caif_netlink_parms(): no params data found [ 319.419402][ T5839] Bluetooth: hci12: command tx timeout [ 319.499218][ T5839] Bluetooth: hci13: command tx timeout [ 319.546423][T10818] chnl_net:caif_netlink_parms(): no params data found [ 319.659409][ T5839] Bluetooth: hci14: command tx timeout [ 319.831913][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.841473][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.849424][T10811] bridge_slave_0: entered allmulticast mode [ 319.857609][T10811] bridge_slave_0: entered promiscuous mode [ 319.932845][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.942712][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.952055][T10811] bridge_slave_1: entered allmulticast mode [ 319.960967][T10811] bridge_slave_1: entered promiscuous mode [ 319.985232][ T5839] Bluetooth: hci10: command tx timeout [ 320.026890][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.034927][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.043319][T10813] bridge_slave_0: entered allmulticast mode [ 320.054125][T10813] bridge_slave_0: entered promiscuous mode [ 320.069693][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.077174][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.084623][T10813] bridge_slave_1: entered allmulticast mode [ 320.093108][T10813] bridge_slave_1: entered promiscuous mode [ 320.139535][ T5839] Bluetooth: hci11: command tx timeout [ 320.155797][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.232158][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.341910][T10813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.391117][T10818] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.398430][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.407919][T10818] bridge_slave_0: entered allmulticast mode [ 320.416292][T10818] bridge_slave_0: entered promiscuous mode [ 320.427704][T10813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.471379][T10811] team0: Port device team_slave_0 added [ 320.497836][T10818] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.508999][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.517557][T10818] bridge_slave_1: entered allmulticast mode [ 320.527223][T10818] bridge_slave_1: entered promiscuous mode [ 320.592471][T10811] team0: Port device team_slave_1 added [ 320.607324][T10813] team0: Port device team_slave_0 added [ 320.639335][T10818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.675531][T10813] team0: Port device team_slave_1 added [ 320.706984][T10818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.799213][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.806812][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.835820][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.863461][T10813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.871630][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.899610][T10813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.915855][T10813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.923826][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.952982][T10813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.999341][T10818] team0: Port device team_slave_0 added [ 321.007487][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.015154][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.044912][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.092417][T10818] team0: Port device team_slave_1 added [ 321.268404][T10818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.277485][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.306873][T10818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.354466][T10813] hsr_slave_0: entered promiscuous mode [ 321.365211][T10813] hsr_slave_1: entered promiscuous mode [ 321.373734][T10813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.382793][T10813] Cannot create hsr debugfs directory [ 321.392341][T10818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.400583][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.428455][T10818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.448748][T10811] hsr_slave_0: entered promiscuous mode [ 321.460106][T10811] hsr_slave_1: entered promiscuous mode [ 321.466765][T10811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.476635][T10811] Cannot create hsr debugfs directory [ 321.499424][ T5839] Bluetooth: hci12: command tx timeout [ 321.579457][ T5839] Bluetooth: hci13: command tx timeout [ 321.739378][ T5839] Bluetooth: hci14: command tx timeout [ 321.804702][T10818] hsr_slave_0: entered promiscuous mode [ 321.812484][T10818] hsr_slave_1: entered promiscuous mode [ 321.819440][T10818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.827654][T10818] Cannot create hsr debugfs directory [ 322.059161][ T5839] Bluetooth: hci10: command tx timeout [ 322.219143][ T5839] Bluetooth: hci11: command tx timeout [ 323.579107][ T5839] Bluetooth: hci12: command tx timeout [ 323.659185][ T5839] Bluetooth: hci13: command tx timeout [ 323.819508][ T5839] Bluetooth: hci14: command tx timeout [ 324.139801][ T5839] Bluetooth: hci10: command tx timeout [ 324.298908][ T5839] Bluetooth: hci11: command tx timeout [ 325.659453][ T5839] Bluetooth: hci12: command tx timeout [ 325.739461][ T5839] Bluetooth: hci13: command tx timeout [ 325.899312][ T5839] Bluetooth: hci14: command tx timeout [ 358.378788][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 370.709171][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 376.043429][ T5839] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 376.055013][ T5839] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 376.064771][ T5839] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 376.079147][ T5839] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 376.092148][ T5839] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 376.106154][ T5843] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 376.129275][ T5843] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 376.138216][ T5843] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 376.153004][ T5843] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 376.165819][ T5843] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 376.521016][T10840] chnl_net:caif_netlink_parms(): no params data found [ 377.147849][T10842] chnl_net:caif_netlink_parms(): no params data found [ 377.219607][ T5845] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 377.231000][ T5845] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 377.242657][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.250889][ T5845] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 377.259372][T10840] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.267288][T10840] bridge_slave_0: entered allmulticast mode [ 377.280399][ T5845] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 377.300451][ T5845] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 377.339097][T10840] bridge_slave_0: entered promiscuous mode [ 377.363367][T10840] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.389191][T10840] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.419252][T10840] bridge_slave_1: entered allmulticast mode [ 377.427714][T10840] bridge_slave_1: entered promiscuous mode [ 377.460372][ T5843] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 377.483739][ T5843] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 377.493113][ T5843] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 377.503951][ T5843] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 377.512613][ T5843] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 377.700368][T10840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.723881][T10840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.871978][ T5843] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 377.882359][ T5843] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 377.891724][ T5843] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 377.903989][ T5843] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 377.927653][ T5843] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 377.993588][T10842] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.002599][T10842] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.010398][T10842] bridge_slave_0: entered allmulticast mode [ 378.019204][T10842] bridge_slave_0: entered promiscuous mode [ 378.040312][T10840] team0: Port device team_slave_0 added [ 378.071585][T10842] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.080045][T10842] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.087686][T10842] bridge_slave_1: entered allmulticast mode [ 378.096401][T10842] bridge_slave_1: entered promiscuous mode [ 378.127592][T10840] team0: Port device team_slave_1 added [ 378.141873][ T5843] Bluetooth: hci15: command tx timeout [ 378.224905][ T5843] Bluetooth: hci16: command tx timeout [ 378.258284][T10842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.331264][T10840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.338888][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.365709][T10840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.382174][T10842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.423335][T10840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.430655][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.457409][T10840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.621253][T10842] team0: Port device team_slave_0 added [ 378.646883][T10840] hsr_slave_0: entered promiscuous mode [ 378.654830][T10840] hsr_slave_1: entered promiscuous mode [ 378.662092][T10840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.670085][T10840] Cannot create hsr debugfs directory [ 378.700930][T10842] team0: Port device team_slave_1 added [ 378.864163][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.893116][T10842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.902184][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.931614][T10842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.978116][T10842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.986520][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.017195][T10842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.306995][T10842] hsr_slave_0: entered promiscuous mode [ 379.315246][T10842] hsr_slave_1: entered promiscuous mode [ 379.321984][T10842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.330823][T10842] Cannot create hsr debugfs directory [ 379.338915][ T5140] Bluetooth: hci17: command tx timeout [ 379.412771][T10856] chnl_net:caif_netlink_parms(): no params data found [ 379.588859][ T5140] Bluetooth: hci18: command tx timeout [ 379.730019][T10858] chnl_net:caif_netlink_parms(): no params data found [ 379.897431][T10863] chnl_net:caif_netlink_parms(): no params data found [ 379.989207][ T5140] Bluetooth: hci19: command tx timeout [ 380.081456][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.090888][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.099956][T10856] bridge_slave_0: entered allmulticast mode [ 380.110303][T10856] bridge_slave_0: entered promiscuous mode [ 380.205404][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.219097][ T5140] Bluetooth: hci15: command tx timeout [ 380.223467][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.233640][T10856] bridge_slave_1: entered allmulticast mode [ 380.242337][T10856] bridge_slave_1: entered promiscuous mode [ 380.304676][ T5140] Bluetooth: hci16: command tx timeout [ 380.477594][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.522631][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.532077][T10863] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.541171][T10863] bridge_slave_0: entered allmulticast mode [ 380.550855][T10863] bridge_slave_0: entered promiscuous mode [ 380.564834][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.579691][T10858] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.587001][T10858] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.607364][T10858] bridge_slave_0: entered allmulticast mode [ 380.621612][T10858] bridge_slave_0: entered promiscuous mode [ 380.632974][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.642494][T10863] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.651014][T10863] bridge_slave_1: entered allmulticast mode [ 380.661019][T10863] bridge_slave_1: entered promiscuous mode [ 380.688658][T10858] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.696540][T10858] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.707685][T10858] bridge_slave_1: entered allmulticast mode [ 380.716876][T10858] bridge_slave_1: entered promiscuous mode [ 380.885326][T10863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.910475][T10856] team0: Port device team_slave_0 added [ 380.927408][T10858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.942103][ T5140] Bluetooth: hci5: command 0x0406 tx timeout [ 380.948244][ T5842] Bluetooth: hci8: command 0x0406 tx timeout [ 380.955016][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 380.963426][ T5848] Bluetooth: hci9: command 0x0406 tx timeout [ 380.970373][ T5842] Bluetooth: hci7: command 0x0406 tx timeout [ 380.981933][T10858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.027854][T10863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.042053][T10856] team0: Port device team_slave_1 added [ 381.176841][T10858] team0: Port device team_slave_0 added [ 381.246294][T10858] team0: Port device team_slave_1 added [ 381.263086][T10863] team0: Port device team_slave_0 added [ 381.270558][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.278354][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.306132][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.377118][T10863] team0: Port device team_slave_1 added [ 381.419893][ T5843] Bluetooth: hci17: command tx timeout [ 381.426274][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.436356][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.464939][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.561846][T10858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.569548][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.597631][T10858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.622154][T10863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.629502][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.656191][T10863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.667668][ T5843] Bluetooth: hci18: command tx timeout [ 381.698401][T10858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.707125][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.734513][T10858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.750550][T10863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.757558][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.785910][T10863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.819804][T10856] hsr_slave_0: entered promiscuous mode [ 381.827605][T10856] hsr_slave_1: entered promiscuous mode [ 381.835936][T10856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.844956][T10856] Cannot create hsr debugfs directory [ 382.015254][T10863] hsr_slave_0: entered promiscuous mode [ 382.023977][T10863] hsr_slave_1: entered promiscuous mode [ 382.031209][T10863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.041556][T10863] Cannot create hsr debugfs directory [ 382.068828][ T5843] Bluetooth: hci19: command tx timeout [ 382.113994][T10858] hsr_slave_0: entered promiscuous mode [ 382.137439][T10858] hsr_slave_1: entered promiscuous mode [ 382.152850][T10858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.161447][T10858] Cannot create hsr debugfs directory [ 382.299176][ T5843] Bluetooth: hci15: command tx timeout [ 382.387858][ T5843] Bluetooth: hci16: command tx timeout [ 383.499224][ T5843] Bluetooth: hci17: command tx timeout [ 383.738970][ T5843] Bluetooth: hci18: command tx timeout [ 384.140508][ T5843] Bluetooth: hci19: command tx timeout [ 384.379250][ T5843] Bluetooth: hci15: command tx timeout [ 384.458908][ T5843] Bluetooth: hci16: command tx timeout [ 385.578846][ T5843] Bluetooth: hci17: command tx timeout [ 385.818942][ T5843] Bluetooth: hci18: command tx timeout [ 386.219698][ T5843] Bluetooth: hci19: command tx timeout [ 391.659744][ T31] INFO: task syz.0.1352:10704 blocked for more than 143 seconds. [ 391.668221][ T31] Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 [ 391.676578][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.686752][ T31] task:syz.0.1352 state:D stack:25432 pid:10704 tgid:10702 ppid:5835 task_flags:0x400140 flags:0x00004006 [ 391.700451][ T31] Call Trace: [ 391.704080][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.707056][ T31] __schedule+0x16e2/0x4cd0 [ 391.720841][ T31] ? validate_chain+0x897/0x2140 [ 391.726407][ T31] ? schedule+0x165/0x360 [ 391.731406][ T31] ? __pfx___schedule+0x10/0x10 [ 391.736741][ T31] ? schedule+0x91/0x360 [ 391.742359][ T31] schedule+0x165/0x360 [ 391.746966][ T31] schedule_timeout+0x9a/0x270 [ 391.752520][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 391.758385][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.764452][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.799079][ T31] ? wait_for_completion+0x267/0x5d0 [ 391.804959][ T31] wait_for_completion+0x2bf/0x5d0 [ 391.829125][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 391.835437][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 391.848130][ T31] ? check_flush_dependency+0x88/0x400 [ 391.854209][ T31] __flush_workqueue+0x6f7/0x14b0 [ 391.860687][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 391.866574][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 391.872766][ T31] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 391.889098][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 391.895319][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 391.901519][ T31] nbd_genl_disconnect+0x485/0x570 [ 391.906729][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 391.919034][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 391.926868][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 391.933472][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 391.940769][ T31] ? stack_depot_save_flags+0x40/0x910 [ 391.946414][ T31] genl_rcv_msg+0x60e/0x790 [ 391.951669][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.956947][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 391.962752][ T31] netlink_rcv_skb+0x219/0x490 [ 391.967666][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.972875][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.978323][ T31] ? down_read+0x1ad/0x2e0 [ 391.983500][ T31] genl_rcv+0x28/0x40 [ 391.987630][ T31] netlink_unicast+0x758/0x8d0 [ 391.993234][ T31] netlink_sendmsg+0x805/0xb30 [ 391.998249][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.004159][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 392.009957][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.015321][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.020969][ T31] __sock_sendmsg+0x219/0x270 [ 392.026693][ T31] ____sys_sendmsg+0x505/0x830 [ 392.031741][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.037087][ T31] ? import_iovec+0x74/0xa0 [ 392.042438][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 392.047174][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.052706][ T31] ? __fget_files+0x2a/0x420 [ 392.057769][ T31] ? __fget_files+0x3a0/0x420 [ 392.063160][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 392.068510][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.074981][ T31] ? do_syscall_64+0xba/0x210 [ 392.079969][ T31] do_syscall_64+0xf6/0x210 [ 392.084614][ T31] ? clear_bhb_loop+0x45/0xa0 [ 392.089503][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.095518][ T31] RIP: 0033:0x7f0656b8e969 [ 392.100455][ T31] RSP: 002b:00007f0657978038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.109104][ T31] RAX: ffffffffffffffda RBX: 00007f0656db5fa0 RCX: 00007f0656b8e969 [ 392.117119][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 392.125341][ T31] RBP: 00007f0656c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 392.135616][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.145150][ T31] R13: 0000000000000000 R14: 00007f0656db5fa0 R15: 00007fff636ed9e8 [ 392.154557][ T31] [ 392.158046][ T31] INFO: task syz.2.1355:10715 blocked for more than 143 seconds. [ 392.167009][ T31] Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 [ 392.175115][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.184093][ T31] task:syz.2.1355 state:D stack:28040 pid:10715 tgid:10714 ppid:8667 task_flags:0x400140 flags:0x00000004 [ 392.196616][ T31] Call Trace: [ 392.200053][ T31] [ 392.203052][ T31] __schedule+0x16e2/0x4cd0 [ 392.208464][ T31] ? __lock_acquire+0xaac/0xd20 [ 392.213444][ T31] ? schedule+0x165/0x360 [ 392.217864][ T31] ? __pfx___schedule+0x10/0x10 [ 392.223747][ T31] ? schedule+0x91/0x360 [ 392.228144][ T31] schedule+0x165/0x360 [ 392.233330][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.239075][ T31] __mutex_lock+0x724/0xe80 [ 392.243662][ T31] ? __mutex_lock+0x51b/0xe80 [ 392.249064][ T31] ? genl_rcv_msg+0x10d/0x790 [ 392.253813][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.259608][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.264984][ T31] ? radix_tree_lookup+0x240/0x290 [ 392.270492][ T31] genl_rcv_msg+0x10d/0x790 [ 392.275061][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.280590][ T31] ? __lock_acquire+0xaac/0xd20 [ 392.285529][ T31] netlink_rcv_skb+0x219/0x490 [ 392.290585][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.295761][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.301355][ T31] ? down_read+0x1ad/0x2e0 [ 392.305826][ T31] genl_rcv+0x28/0x40 [ 392.310350][ T31] netlink_unicast+0x758/0x8d0 [ 392.315176][ T31] netlink_sendmsg+0x805/0xb30 [ 392.320294][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.325803][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 392.331805][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.337191][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.342996][ T31] __sock_sendmsg+0x219/0x270 [ 392.348012][ T31] ____sys_sendmsg+0x505/0x830 [ 392.353121][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.358464][ T31] ? import_iovec+0x74/0xa0 [ 392.363179][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 392.368013][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.374019][ T31] ? __fget_files+0x2a/0x420 [ 392.379421][ T31] ? __fget_files+0x3a0/0x420 [ 392.384271][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 392.389710][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.395350][ T31] do_syscall_64+0xf6/0x210 [ 392.400494][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.406786][ T31] ? clear_bhb_loop+0x45/0xa0 [ 392.411785][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.417722][ T31] RIP: 0033:0x7f81ff78e969 [ 392.422357][ T31] RSP: 002b:00007f8200626038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.431316][ T31] RAX: ffffffffffffffda RBX: 00007f81ff9b5fa0 RCX: 00007f81ff78e969 [ 392.440494][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 392.448816][ T31] RBP: 00007f81ff810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 392.456858][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.466351][ T31] R13: 0000000000000000 R14: 00007f81ff9b5fa0 R15: 00007fff1c28cfa8 [ 392.474793][ T31] [ 392.478168][ T31] INFO: task syz.3.1360:10737 blocked for more than 144 seconds. [ 392.486672][ T31] Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 [ 392.495528][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.515433][ T31] task:syz.3.1360 state:D stack:26728 pid:10737 tgid:10730 ppid:5827 task_flags:0x400140 flags:0x00000004 [ 392.528000][ T31] Call Trace: [ 392.531454][ T31] [ 392.534425][ T31] __schedule+0x16e2/0x4cd0 [ 392.540251][ T31] ? __lock_acquire+0xaac/0xd20 [ 392.545700][ T31] ? schedule+0x165/0x360 [ 392.551420][ T31] ? __pfx___schedule+0x10/0x10 [ 392.556788][ T31] ? schedule+0x91/0x360 [ 392.561920][ T31] schedule+0x165/0x360 [ 392.566896][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.573300][ T31] __mutex_lock+0x724/0xe80 [ 392.577897][ T31] ? __mutex_lock+0x51b/0xe80 [ 392.583130][ T31] ? genl_rcv_msg+0x10d/0x790 [ 392.587880][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.593599][ T31] ? stack_depot_save_flags+0x40/0x910 [ 392.599410][ T31] ? radix_tree_lookup+0x240/0x290 [ 392.604594][ T31] genl_rcv_msg+0x10d/0x790 [ 392.609765][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.614959][ T31] ? __lock_acquire+0xaac/0xd20 [ 392.620267][ T31] netlink_rcv_skb+0x219/0x490 [ 392.625089][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.630729][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.636095][ T31] ? down_read+0x1ad/0x2e0 [ 392.642519][ T31] genl_rcv+0x28/0x40 [ 392.647037][ T31] netlink_unicast+0x758/0x8d0 [ 392.652855][ T31] netlink_sendmsg+0x805/0xb30 [ 392.658199][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.664004][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 392.670128][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.675478][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.680989][ T31] __sock_sendmsg+0x219/0x270 [ 392.685729][ T31] __sys_sendto+0x3bd/0x520 [ 392.690528][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 392.696041][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 392.702752][ T31] __x64_sys_sendto+0xde/0x100 [ 392.708133][ T31] do_syscall_64+0xf6/0x210 [ 392.713464][ T31] ? clear_bhb_loop+0x45/0xa0 [ 392.719440][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.725410][ T31] RIP: 0033:0x7f023b1907fc [ 392.730234][ T31] RSP: 002b:00007f023c044ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 392.738842][ T31] RAX: ffffffffffffffda RBX: 00007f023c044fc0 RCX: 00007f023b1907fc [ 392.748011][ T31] RDX: 0000000000000020 RSI: 00007f023c045010 RDI: 0000000000000009 [ 392.756141][ T31] RBP: 0000000000000000 R08: 00007f023c044f14 R09: 000000000000000c [ 392.764681][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 392.772741][ T31] R13: 00007f023c044f68 R14: 00007f023c045010 R15: 0000000000000000 [ 392.786652][ T31] [ 392.790285][ T31] INFO: task syz.4.1361:10734 blocked for more than 144 seconds. [ 392.798066][ T31] Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 [ 392.806159][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.816017][ T31] task:syz.4.1361 state:D stack:28264 pid:10734 tgid:10733 ppid:5832 task_flags:0x400040 flags:0x00000004 [ 392.832546][ T31] Call Trace: [ 392.835954][ T31] [ 392.839054][ T31] __schedule+0x16e2/0x4cd0 [ 392.844525][ T31] ? __lock_acquire+0xaac/0xd20 [ 392.849548][ T31] ? schedule+0x165/0x360 [ 392.853945][ T31] ? __pfx___schedule+0x10/0x10 [ 392.859531][ T31] ? schedule+0x91/0x360 [ 392.863962][ T31] schedule+0x165/0x360 [ 392.868208][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.873863][ T31] __mutex_lock+0x724/0xe80 [ 392.878411][ T31] ? __mutex_lock+0x51b/0xe80 [ 392.883341][ T31] ? genl_rcv_msg+0x10d/0x790 [ 392.888188][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.893643][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 392.899080][ T31] ? radix_tree_lookup+0x240/0x290 [ 392.904355][ T31] genl_rcv_msg+0x10d/0x790 [ 392.909155][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.914631][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 392.920374][ T31] ? __copy_skb_header+0xa7/0x550 [ 392.925461][ T31] netlink_rcv_skb+0x219/0x490 [ 392.930553][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.936058][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.943878][ T31] ? down_read+0x1ad/0x2e0 [ 392.948986][ T31] genl_rcv+0x28/0x40 [ 392.953318][ T31] netlink_unicast+0x758/0x8d0 [ 392.958782][ T31] netlink_sendmsg+0x805/0xb30 [ 392.964112][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.970644][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 392.975964][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.982602][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.987968][ T31] __sock_sendmsg+0x219/0x270 [ 392.993271][ T31] __sys_sendto+0x3bd/0x520 [ 392.998246][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 393.003653][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 393.009924][ T31] __x64_sys_sendto+0xde/0x100 [ 393.014861][ T31] do_syscall_64+0xf6/0x210 [ 393.019700][ T31] ? clear_bhb_loop+0x45/0xa0 [ 393.024439][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.030599][ T31] RIP: 0033:0x7fd2b1b907fc [ 393.035052][ T31] RSP: 002b:00007fd2b2ad8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 393.043978][ T31] RAX: ffffffffffffffda RBX: 00007fd2b2ad8fc0 RCX: 00007fd2b1b907fc [ 393.053206][ T31] RDX: 000000000000001c RSI: 00007fd2b2ad9010 RDI: 0000000000000005 [ 393.061747][ T31] RBP: 0000000000000000 R08: 00007fd2b2ad8f14 R09: 000000000000000c [ 393.070136][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 393.078334][ T31] R13: 00007fd2b2ad8f68 R14: 00007fd2b2ad9010 R15: 0000000000000000 [ 393.087153][ T31] [ 393.090308][ T31] INFO: task syz.4.1361:10738 blocked for more than 144 seconds. [ 393.098089][ T31] Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 [ 393.107416][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.116315][ T31] task:syz.4.1361 state:D stack:25816 pid:10738 tgid:10733 ppid:5832 task_flags:0x400140 flags:0x00000004 [ 393.129371][ T31] Call Trace: [ 393.132727][ T31] [ 393.135699][ T31] __schedule+0x16e2/0x4cd0 [ 393.140557][ T31] ? __lock_acquire+0xaac/0xd20 [ 393.145571][ T31] ? schedule+0x165/0x360 [ 393.151072][ T31] ? __pfx___schedule+0x10/0x10 [ 393.156013][ T31] ? schedule+0x91/0x360 [ 393.161101][ T31] schedule+0x165/0x360 [ 393.165318][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.171200][ T31] __mutex_lock+0x724/0xe80 [ 393.175833][ T31] ? __mutex_lock+0x51b/0xe80 [ 393.180872][ T31] ? genl_rcv_msg+0x10d/0x790 [ 393.185746][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.191318][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 393.196503][ T31] ? radix_tree_lookup+0x240/0x290 [ 393.201982][ T31] genl_rcv_msg+0x10d/0x790 [ 393.206553][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.211777][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 393.216861][ T31] ? __copy_skb_header+0xa7/0x550 [ 393.222387][ T31] netlink_rcv_skb+0x219/0x490 [ 393.227200][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.232479][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.237927][ T31] ? down_read+0x1ad/0x2e0 [ 393.242555][ T31] genl_rcv+0x28/0x40 [ 393.246689][ T31] netlink_unicast+0x758/0x8d0 [ 393.252008][ T31] netlink_sendmsg+0x805/0xb30 [ 393.257548][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.263329][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 393.268429][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.274067][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.280039][ T31] __sock_sendmsg+0x219/0x270 [ 393.284855][ T31] __sys_sendto+0x3bd/0x520 [ 393.289820][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 393.295050][ T31] ? fd_install+0x97/0x540 [ 393.299639][ T31] ? fd_install+0x30d/0x540 [ 393.304322][ T31] __x64_sys_sendto+0xde/0x100 [ 393.309630][ T31] do_syscall_64+0xf6/0x210 [ 393.314230][ T31] ? clear_bhb_loop+0x45/0xa0 [ 393.319063][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.325091][ T31] RIP: 0033:0x7fd2b1b907fc [ 393.329701][ T31] RSP: 002b:00007fd2b2ab7e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 393.338161][ T31] RAX: ffffffffffffffda RBX: 00007fd2b2ab7fa0 RCX: 00007fd2b1b907fc [ 393.346546][ T31] RDX: 0000000000000028 RSI: 00007fd2b2ab7ff0 RDI: 0000000000000006 [ 393.355911][ T31] RBP: 0000000000000000 R08: 00007fd2b2ab7ee4 R09: 000000000000000c [ 393.364312][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 393.372835][ T31] R13: 00007fd2b2ab7f38 R14: 00007fd2b2ab7ff0 R15: 0000000000000000 [ 393.381247][ T31] [ 393.384370][ T31] INFO: task syz.1.1364:10746 blocked for more than 145 seconds. [ 393.392483][ T31] Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 [ 393.400566][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.409505][ T31] task:syz.1.1364 state:D stack:25880 pid:10746 tgid:10745 ppid:5829 task_flags:0x400140 flags:0x00000004 [ 393.421762][ T31] Call Trace: [ 393.425078][ T31] [ 393.428364][ T31] __schedule+0x16e2/0x4cd0 [ 393.433486][ T31] ? __lock_acquire+0xaac/0xd20 [ 393.438430][ T31] ? schedule+0x165/0x360 [ 393.443028][ T31] ? __pfx___schedule+0x10/0x10 [ 393.448396][ T31] ? schedule+0x91/0x360 [ 393.454509][ T31] schedule+0x165/0x360 [ 393.460334][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.466559][ T31] __mutex_lock+0x724/0xe80 [ 393.472173][ T31] ? __mutex_lock+0x51b/0xe80 [ 393.477450][ T31] ? genl_rcv_msg+0x10d/0x790 [ 393.482945][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.488078][ T31] ? stack_depot_save_flags+0x40/0x910 [ 393.494075][ T31] ? radix_tree_lookup+0x240/0x290 [ 393.499717][ T31] genl_rcv_msg+0x10d/0x790 [ 393.504456][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.510092][ T31] ? __lock_acquire+0xaac/0xd20 [ 393.515324][ T31] netlink_rcv_skb+0x219/0x490 [ 393.520827][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.526277][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.531723][ T31] ? down_read+0x1ad/0x2e0 [ 393.536320][ T31] genl_rcv+0x28/0x40 [ 393.540577][ T31] netlink_unicast+0x758/0x8d0 [ 393.545392][ T31] netlink_sendmsg+0x805/0xb30 [ 393.550641][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.555979][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 393.561745][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.567099][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.572668][ T31] __sock_sendmsg+0x219/0x270 [ 393.577493][ T31] ____sys_sendmsg+0x505/0x830 [ 393.583263][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.588849][ T31] ? import_iovec+0x74/0xa0 [ 393.593489][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 393.598233][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.603803][ T31] ? __fget_files+0x2a/0x420 [ 393.608461][ T31] ? __fget_files+0x3a0/0x420 [ 393.614317][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 393.619520][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.625054][ T31] ? do_syscall_64+0xba/0x210 [ 393.630026][ T31] do_syscall_64+0xf6/0x210 [ 393.634593][ T31] ? clear_bhb_loop+0x45/0xa0 [ 393.639730][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.646020][ T31] RIP: 0033:0x7fc74e98e969 [ 393.650519][ T31] RSP: 002b:00007fc74f86d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.659576][ T31] RAX: ffffffffffffffda RBX: 00007fc74ebb5fa0 RCX: 00007fc74e98e969 [ 393.668365][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000d [ 393.677429][ T31] RBP: 00007fc74ea10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 393.686198][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.694951][ T31] R13: 0000000000000000 R14: 00007fc74ebb5fa0 R15: 00007ffde1a8dbb8 [ 393.703568][ T31] [ 393.706701][ T31] [ 393.706701][ T31] Showing all locks held in the system: [ 393.714697][ T31] 1 lock held by khungtaskd/31: [ 393.720175][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 393.731445][ T31] 2 locks held by kworker/u8:6/1098: [ 393.737311][ T31] 2 locks held by getty/5589: [ 393.742497][ T31] #0: ffff88802fda20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 393.753481][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 393.764095][ T31] 2 locks held by kworker/u9:3/5834: [ 393.770141][ T31] #0: ffff888024a83148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 393.781639][ T31] #1: ffffc90003fcfc60 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 393.794613][ T31] 2 locks held by kworker/u8:12/9037: [ 393.800231][ T31] 3 locks held by syz.0.1352/10704: [ 393.805542][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.813964][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 393.829270][ T31] #2: ffff888024a7f198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 393.840316][ T31] 2 locks held by syz.2.1355/10715: [ 393.845695][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.854313][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 393.863593][ T31] 2 locks held by syz.3.1360/10737: [ 393.869546][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.877963][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 393.887417][ T31] 2 locks held by syz.4.1361/10734: [ 393.893024][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.901545][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 393.911042][ T31] 2 locks held by syz.4.1361/10738: [ 393.916280][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.924703][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 393.934050][ T31] 2 locks held by syz.1.1364/10746: [ 393.939927][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.948387][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 393.957822][ T31] 2 locks held by syz-executor/10750: [ 393.964117][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.973980][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 393.983485][ T31] 2 locks held by syz-executor/10752: [ 393.989083][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.997515][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.007107][ T31] 2 locks held by syz-executor/10769: [ 394.012638][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.021275][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.030796][ T31] 2 locks held by syz-executor/10771: [ 394.036321][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.044923][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.054404][ T31] 2 locks held by syz-executor/10773: [ 394.060294][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.069038][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.079638][ T31] 2 locks held by syz-executor/10795: [ 394.085171][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.094105][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.103786][ T31] 2 locks held by syz-executor/10797: [ 394.110882][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.120882][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.131784][ T31] 2 locks held by syz-executor/10811: [ 394.137858][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.147303][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.157163][ T31] 2 locks held by syz-executor/10813: [ 394.163657][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.172102][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.182611][ T31] 2 locks held by syz-executor/10818: [ 394.188136][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.196655][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.206125][ T31] 2 locks held by syz-executor/10840: [ 394.211905][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.239580][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.258670][ T31] 2 locks held by syz-executor/10842: [ 394.264181][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.288760][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.297886][ T31] 2 locks held by syz-executor/10856: [ 394.318656][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.327048][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.358979][ T31] 2 locks held by syz-executor/10858: [ 394.364421][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.379395][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.408695][ T31] 2 locks held by syz-executor/10863: [ 394.414300][ T31] #0: ffffffff8f359d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.428736][ T31] #1: ffffffff8f359b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.448983][ T31] [ 394.451377][ T31] ============================================= [ 394.451377][ T31] [ 394.478979][ T31] NMI backtrace for cpu 1 [ 394.479009][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 394.479034][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.479046][ T31] Call Trace: [ 394.479055][ T31] [ 394.479065][ T31] dump_stack_lvl+0x189/0x250 [ 394.479097][ T31] ? __wake_up_klogd+0xd9/0x110 [ 394.479126][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.479153][ T31] ? __pfx__printk+0x10/0x10 [ 394.479187][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 394.479217][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 394.479242][ T31] ? _printk+0xcf/0x120 [ 394.479265][ T31] ? __pfx__printk+0x10/0x10 [ 394.479288][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 394.479311][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 394.479342][ T31] watchdog+0xfee/0x1030 [ 394.479371][ T31] ? watchdog+0x1de/0x1030 [ 394.479405][ T31] kthread+0x70e/0x8a0 [ 394.479442][ T31] ? __pfx_watchdog+0x10/0x10 [ 394.479467][ T31] ? __pfx_kthread+0x10/0x10 [ 394.479491][ T31] ? __pfx_kthread+0x10/0x10 [ 394.479514][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.479543][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.479575][ T31] ? __pfx_kthread+0x10/0x10 [ 394.479597][ T31] ret_from_fork+0x4b/0x80 [ 394.479618][ T31] ? __pfx_kthread+0x10/0x10 [ 394.479641][ T31] ret_from_fork_asm+0x1a/0x30 [ 394.479676][ T31] [ 394.479684][ T31] Sending NMI from CPU 1 to CPUs 0: [ 394.632632][ C0] NMI backtrace for cpu 0 [ 394.632657][ C0] CPU: 0 UID: 0 PID: 9037 Comm: kworker/u8:12 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 394.632679][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.632691][ C0] Workqueue: bat_events batadv_nc_worker [ 394.632722][ C0] RIP: 0010:lock_acquire+0x70/0x360 [ 394.632748][ C0] Code: f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 d8 0f e1 0d 73 16 e8 e1 d9 08 00 84 c0 75 0d f6 05 f8 04 cb 0d 01 0f 84 d7 01 00 00 <83> 3d 99 3e e1 0d 00 0f 84 f0 00 00 00 48 8b b4 24 90 00 00 00 4c [ 394.632763][ C0] RSP: 0018:ffffc9000501f970 EFLAGS: 00000202 [ 394.632777][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ad9d250ff9f4fb00 [ 394.632789][ C0] RDX: 0000000000000000 RSI: ffffffff8bc1d480 RDI: ffffffff8bc1d440 [ 394.632800][ C0] RBP: ffffffff8b258977 R08: 0000000000000001 R09: 0000000000000000 [ 394.632811][ C0] R10: dffffc0000000000 R11: fffffbfff1efe5af R12: 0000000000000000 [ 394.632823][ C0] R13: ffff88803b5ed3d8 R14: 0000000000000000 R15: 0000000000000001 [ 394.632834][ C0] FS: 0000000000000000(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 394.632847][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.632859][ C0] CR2: 0000561cacdd1000 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 394.632874][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 394.632884][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 394.632894][ C0] Call Trace: [ 394.632901][ C0] [ 394.632910][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 394.632927][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 394.632946][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 394.632970][ C0] _raw_spin_lock_bh+0x36/0x50 [ 394.632994][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 394.633018][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 394.633044][ C0] batadv_nc_purge_paths+0xe7/0x3b0 [ 394.633076][ C0] batadv_nc_worker+0x369/0x610 [ 394.633101][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 394.633128][ C0] process_scheduled_works+0xadb/0x17a0 [ 394.633167][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.633202][ C0] worker_thread+0x8a0/0xda0 [ 394.633230][ C0] kthread+0x70e/0x8a0 [ 394.633251][ C0] ? __pfx_worker_thread+0x10/0x10 [ 394.633266][ C0] ? __pfx_kthread+0x10/0x10 [ 394.633286][ C0] ? __pfx_kthread+0x10/0x10 [ 394.633304][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.633329][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.633355][ C0] ? __pfx_kthread+0x10/0x10 [ 394.633373][ C0] ret_from_fork+0x4b/0x80 [ 394.633389][ C0] ? __pfx_kthread+0x10/0x10 [ 394.633414][ C0] ret_from_fork_asm+0x1a/0x30 [ 394.633438][ C0] [ 394.915124][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 394.922501][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 394.934428][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.944531][ T31] Call Trace: [ 394.948025][ T31] [ 394.951021][ T31] dump_stack_lvl+0x99/0x250 [ 394.955710][ T31] ? __asan_memcpy+0x40/0x70 [ 394.960434][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.966159][ T31] ? __pfx__printk+0x10/0x10 [ 394.970991][ T31] panic+0x2db/0x790 [ 394.975149][ T31] ? __pfx_panic+0x10/0x10 [ 394.979615][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 394.985044][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 394.990521][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 394.996728][ T31] watchdog+0x102d/0x1030 [ 395.001193][ T31] ? watchdog+0x1de/0x1030 [ 395.006195][ T31] kthread+0x70e/0x8a0 [ 395.010410][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.015155][ T31] ? __pfx_kthread+0x10/0x10 [ 395.019799][ T31] ? __pfx_kthread+0x10/0x10 [ 395.024444][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.029787][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.035136][ T31] ? __pfx_kthread+0x10/0x10 [ 395.039898][ T31] ret_from_fork+0x4b/0x80 [ 395.044417][ T31] ? __pfx_kthread+0x10/0x10 [ 395.049046][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.053863][ T31] [ 395.057229][ T31] Kernel Offset: disabled [ 395.061642][ T31] Rebooting in 86400 seconds..