last executing test programs: 1m52.688208451s ago: executing program 3 (id=197): syz_emit_ethernet(0x4a, &(0x7f0000000300)={@multicast, @broadcast, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @random="36b67e0e7220", @local, @remote, @mcast1}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRESOCT], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x84, 0x1d, 0x100, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_NH_ID={0x8, 0xd, 0x5}, @NDA_FDB_EXT_ATTRS={0x1c, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_DST_MAC={0xa, 0x1, @broadcast}, @NDA_VNI={0x8, 0x7, 0x7}, @NDA_CACHEINFO={0x14, 0x3, {0x1, 0x1, 0x8001, 0x7}}, @NDA_VNI={0x8, 0x7, 0x4000}, @NDA_NH_ID={0x8, 0xd, 0xb1}]}, 0x84}}, 0x4000801) 1m52.36828015s ago: executing program 3 (id=200): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebefc50000000000000200"}}}}}}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) socketpair(0x10, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@setlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1m50.948365762s ago: executing program 2 (id=210): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x60000004}, 0x0) 1m50.947273317s ago: executing program 1 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}, 0x1, 0x0, 0x0, 0xc060}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272876467650000100002800c0013000300000003000000"], 0x40}}, 0x0) 1m50.836945127s ago: executing program 3 (id=212): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4044040) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0xfffffffffffffeef}], 0x1}, 0x40010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f0001000000000000000000000000ae77f9da00", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) 1m50.611982035s ago: executing program 0 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) close(r3) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev, @private1, [0x0, 0x0, 0xff], [], [], 0x843}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendto$l2tp(r1, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r1, 0x0, 0xffffffffffffff39, 0x10120, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xffffffffffffff04, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24060400) r5 = socket$xdp(0x2c, 0x3, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0xe005}], 0x1, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000002000)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2ee", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r7, 0x1) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) r8 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) accept4$unix(r8, &(0x7f0000000380), &(0x7f00000002c0)=0x6e, 0x80800) getsockopt$bt_hci(r7, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="28000165", @ANYRES32=r6], 0x90}}, 0x0) 1m50.168149349s ago: executing program 2 (id=214): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000e4ff0000000000020202000900030073797a32000000000500040002000000090001"], 0x34}, 0x1, 0x40030000000000}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x2000c004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYBLOB="080002007f100001", @ANYRESHEX=r2, @ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f00000006c0)=ANY=[@ANYBLOB='+cpu '], 0x5) write$cgroup_subtree(r11, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000001c0)={r12, 0x3, 0x30, 0x1a, 0x1}, &(0x7f0000000200)=0x18) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$cgroup_subtree(r13, &(0x7f00000000c0)={[{0x2b, 'cpuacct'}, {0x2b, 'hugetlb'}, {0x2b, 'rdma'}, {0x2d, 'rlimit'}, {0x2d, 'memory'}, {0x0, 'rdma'}, {0x2d, 'rdma'}, {0x2d, 'hugetlb'}, {0x1a780ff0914b1ac1, 'cpuset'}]}, 0x45) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r14, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) setsockopt$packet_int(r14, 0x107, 0xf, 0x0, 0x0) close(0x3) 1m50.027575347s ago: executing program 4 (id=215): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x2}, 0x0, 0x6}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000200)={0x4, 0x8000}, 0x4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async) sendmmsg$inet(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r6, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000ab1016faad998232e7cbb9d78be4aeefa89c6bacd51e19c487fc3f09000000000000001dd4182fc8a304b51874833a1090bc628ed240e397c00813fda7065e3312cd9f14daedc93391c9593a6e26c1de0cb8235c9f12a78e2cad48221659cbb90758f35d973a624c53e7726339dccc9d49296862744744aad35031c547effee1ddbc8f24caa87dffe0ea37f35e56a11a68e075ddc8717b12941243d13b35f0578a31", @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf250c00000008000300", @ANYRES32=r8, @ANYBLOB="14005080050002000000000008000700000000000a0006000802110000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000) 1m50.025381892s ago: executing program 1 (id=216): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x140a, 0x4, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000001614016a61"], 0x10}}, 0x0) (async) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e1d, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 1m49.957871772s ago: executing program 0 (id=217): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1m49.664956109s ago: executing program 1 (id=218): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x120, 0x120, 0x2, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @enum={0xb, 0x9, 0x0, 0x6, 0x4, [{0x7, 0x7fff}, {0xe, 0x10000fff}, {0xe, 0x7}, {0x8, 0xfffffffd}, {0xe, 0xa}, {0x3, 0x7}, {0x6, 0xffffffff}, {0x2, 0xfffffbff}, {0x7, 0xb}]}, @datasec={0xf, 0x9, 0x0, 0xf, 0x1, [{0x5, 0x1}, {0x2, 0x4a3e, 0x9}, {0x1, 0xfffffff8, 0x3}, {0x2, 0x4, 0x10000}, {0x5, 0x0, 0xe}, {0x1, 0x78b905da, 0x8}, {0x2, 0x3, 0x2}, {0x1, 0x7, 0x81}, {0x1, 0x9, 0x2}], "9a"}, @var={0xd, 0x0, 0x0, 0xe, 0x2, 0x2}, @datasec={0x7, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3, 0x6}], '1!\x00'}, @volatile={0x5, 0x0, 0x0, 0x9, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0x2}]}}, &(0x7f00000003c0)=""/244, 0x13a, 0xf4, 0x0, 0x6, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x120, 0x120, 0x2, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @enum={0xb, 0x9, 0x0, 0x6, 0x4, [{0x7, 0x7fff}, {0xe, 0x10000fff}, {0xe, 0x7}, {0x8, 0xfffffffd}, {0xe, 0xa}, {0x3, 0x7}, {0x6, 0xffffffff}, {0x2, 0xfffffbff}, {0x7, 0xb}]}, @datasec={0xf, 0x9, 0x0, 0xf, 0x1, [{0x5, 0x1}, {0x2, 0x4a3e, 0x9}, {0x1, 0xfffffff8, 0x3}, {0x2, 0x4, 0x10000}, {0x5, 0x0, 0xe}, {0x1, 0x78b905da, 0x8}, {0x2, 0x3, 0x2}, {0x1, 0x7, 0x81}, {0x1, 0x9, 0x2}], "9a"}, @var={0xd, 0x0, 0x0, 0xe, 0x2, 0x2}, @datasec={0x7, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3, 0x6}], '1!\x00'}, @volatile={0x5, 0x0, 0x0, 0x9, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0x2}]}}, &(0x7f00000003c0)=""/244, 0x13a, 0xf4, 0x0, 0x6, 0x0, @void, @value}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0xff, 0x28, 0x8, 0x40, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000600)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000600)=0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x20000, '\x00', 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x20000, '\x00', 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x16, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, [@jmp={0x5, 0x0, 0x1, 0x2, 0x6, 0xffffffffffffffd8, 0x10}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x16, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, [@jmp={0x5, 0x0, 0x1, 0x2, 0x6, 0xffffffffffffffd8, 0x10}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000090071b03600000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000100)=0x401, &(0x7f0000000140)=0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000080)={0x4, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r7, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x18}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x48, &(0x7f0000000040)=r6, 0x4) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000280)) (async) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000280)) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r11, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) (async) connect$bt_sco(r11, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000001000000070000008995866f80000000", @ANYRES32=r6, @ANYBLOB="a40100000000000000000000000000b7f10a1658297179f84378d565401cc5a2", @ANYRES32=r12, @ANYRES32, @ANYBLOB="0300000003000000050000000300"/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000001000000070000008995866f80000000", @ANYRES32=r6, @ANYBLOB="a40100000000000000000000000000b7f10a1658297179f84378d565401cc5a2", @ANYRES32=r12, @ANYRES32, @ANYBLOB="0300000003000000050000000300"/28], 0x50) 1m49.539165363s ago: executing program 0 (id=219): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) 1m49.335733629s ago: executing program 2 (id=220): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@local, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0xd8, 0x11, 0x148, 0xd8, 0x10, 0x198, 0x2a8, 0x2a8, 0x198, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x28, 0x1000, 0x5, 0x2, 'snmp\x00', 'syz0\x00', {0x4}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x4f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0xd8, 0x11, 0x148, 0xd8, 0x10, 0x198, 0x2a8, 0x2a8, 0x198, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x28, 0x1000, 0x5, 0x2, 'snmp\x00', 'syz0\x00', {0x4}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x4f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) 1m49.280208294s ago: executing program 4 (id=221): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1m49.279795512s ago: executing program 3 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) r1 = accept(r0, &(0x7f0000000000), &(0x7f0000000080)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x7, 0x7809, 0xfffffffc, 0x200000, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x68, 0x0, 0x3, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x8, "3e17cd19d5b6"}, @timestamp={0x44, 0x28, 0x89, 0x0, 0x2, [0x6, 0x7, 0x7, 0x3ff, 0x6, 0x9, 0x7, 0x73, 0x7ff]}, @ssrr={0x89, 0x13, 0x1b, [@empty, @multicast1, @remote, @broadcast]}]}}}}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd, 0x810, r3, 0xd3201000) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000180)="c0408ba97c7db8930a085d1f3aa251cd32937cc99cdce4b076a78bac731b0455596aecc73fde52f837c2a18f0d521ad0a1e504fc5c8278", 0x37}, {&(0x7f00000001c0)="51f43b134933e147aa764be9e4b5ceb268297c68fcda9c34508359cdfa4cb2ae1014a775b84608c71b989a8e91da6ea01270cd5b3d874cf81ae52e53dc83", 0x3e}, {&(0x7f0000000240)="ed23438d8775c3781ab218d74e3c62f431fd87d046f53fc0fd441b41176947dbec5d4e524d8cf6f7d560d5d6ba625f158c14e84d116297efbe249b2f2deb9e628ba83f6ab8718e534ebfdad17e0f8e59547e8da222ac19e8372f9a25e544534e78994d16b1a080d39a1e8cdecc6cdc86b720a85793341126ee3cc44079683420ece32e53b76bdabeefbf578831342b098016fd9057180c53aff1ff0f24596a41458925921c55f672b6d20467aa4c1e30871c56839c25b1e47b5961471c6fd177db9ac2d66422961597f330f3f83fed1956925781c7c1", 0xd6}], 0x3, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast2}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x6b, 0x3, 0x0, [{@multicast1, 0x6a86}, {@private=0xa010100, 0xfffffff3}, {@multicast2}, {@rand_addr=0x64010100, 0x9}]}, @end, @generic={0x88, 0xc, "72c7511e8758264410f7"}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x1, 0x9, "9fcdb8c0a3a15d"}, {0x7, 0xa, "11a60e7b400e0bba"}]}]}}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@noop, @cipso={0x86, 0x3d, 0x1, [{0x6, 0x3, '\''}, {0x1, 0xc, "7db8eb9b2d4428add30a"}, {0x2, 0xe, "f751b4475fe27946fa136d60"}, {0x5, 0xe, "b8d5691b2b850461f311f1da"}, {0x0, 0x6, "879b7412"}, {0x2, 0x6, "ff3303b7"}]}, @timestamp={0x44, 0x10, 0x84, 0x0, 0x8, [0xb5400000, 0x1, 0xe83]}, @noop, @timestamp={0x44, 0x18, 0x77, 0x0, 0x8, [0x400, 0x6, 0x8, 0x7, 0x1]}, @cipso={0x86, 0x5e, 0x2, [{0x2, 0xf, "1f84db6546846d7789dbd69e8a"}, {0x2, 0x7, "06d0e00925"}, {0x3, 0x7, "dd1eb9d460"}, {0x6, 0xc, "ae754422603f26b13a77"}, {0x5, 0x12, "c3272302e82b82ab1ed41a95f011150d"}, {0x0, 0xb, "5a1ffaf7e59d49e303"}, {0x0, 0x2}, {0x6, 0x10, "aeabe4da1b5e7f402b8ca2fa6e01"}]}, @cipso={0x86, 0x1a, 0x1, [{0x6, 0x10, "719a961c53cf8ba6e8a0bf1378e8"}, {0x0, 0x4, "cd2e"}]}, @ssrr={0x89, 0xb, 0x6e, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x60, [@loopback, @rand_addr=0x4, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010100]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @local}}}, @ip_ttl={{0x14}}], 0x1e8}, 0xc000) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 1m49.191508362s ago: executing program 0 (id=223): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x88}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x100}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m48.966468296s ago: executing program 2 (id=224): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xfffffffffffffe01, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}}, 0x0) 1m48.824317377s ago: executing program 1 (id=225): syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) sendto(r1, &(0x7f0000000240)="f29f0e76d5b853873fc34480deae82939aa1a902bd1ce3b66ea92dee9f5390f8a9e5f71945720ac3217103c2fb18832dff66e11d88d127d627d3b0afa23f330f6f818ee469e5298e73eca3f8ea5c2e3743ac0a9e95af22a83826d89b65fc3bbd6701299746417aba4138176e0f28da038669daab32e45724a78e42aa0eee1fe1208a9e289f81161ddd5e350a2f118afd0fbb498d86897e7d394c09351073da27265ce4f46fbb2af839fbeac7438190650d517c3d912351ae76cc3c4ef48051c3449147948a281fb152407804c2bd7bde4c26d286ba5136027d674f631efb1cf5fb6544f49aa700a2ea5df44143f987922c1382974481f1caf9", 0xf9, 0x40001, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1], &(0x7f0000000100)=""/147, 0x51, 0x93, 0x0, 0x101, 0x10000, @value=r0}, 0x28) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110040"], 0x0) 1m48.824032446s ago: executing program 4 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000306010274cc09a9aa13e8f203000003090002ff73797a32000000000900021073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7c, &(0x7f0000001040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd64703fd800462f01fe80000000000000000000de3ff1ad9812332200000000000000ffff0a0101020c21880b000000000010040008000d0086dd080088be00000002110969060100000000009c9e080022eb000000002007070c020000000000000900006e1f0800655800000003"], 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000006d00)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) 1m48.754269285s ago: executing program 4 (id=227): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x1, 0x3, 0x3, 0x7, 0x2}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) 1m48.639211714s ago: executing program 3 (id=228): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000a80)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xe67}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) 1m48.560248544s ago: executing program 2 (id=229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791038000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x77, '\x00', 0x0, @fallback, r1, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xc4}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}], 0x1, 0x14018891) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=r5], 0x1000f) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r6, 0x65, 0x0, 0x0, 0x0) (async) setsockopt(r6, 0x65, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800ab70040017077a1c31bf029400004800010000000000000000000a005100f4fa415e00c32c0d7bd4b73b9dbf7e9a2aa9d4949eb28a254884c7f4d0", @ANYRES32, @ANYBLOB="0000eaff070002", @ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m48.442944944s ago: executing program 4 (id=230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)={0x34, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x808}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "ecd0687e01a83f49"}, 0x38) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) splice(r2, 0x0, r0, 0x0, 0x10500, 0x0) sendmsg$can_raw(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f0000000080)=@can={{0x4, 0x0, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "17525204f3acbb43"}, 0x10}, 0x1, 0x0, 0x0, 0x891}, 0x40010) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "78e1054910d8a0f0efd0d4c0ba321cff5db0aac6"}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m48.378536833s ago: executing program 1 (id=231): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c000000100001042dbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000004c001280110001006272696467655f736c61766500000000340005"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m48.280110354s ago: executing program 0 (id=232): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, r0, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xfffc, 0x3, @local, 0xb}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'pimreg\x00', 'syz_tun\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0x6}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "aae9"}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendto$inet(r7, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "d428d493b54539b9", "62714b65e42465c5518ccb9d7c403972", "2cbdb9e9"}, 0x28) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r0, 0x410, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) 1m48.087417284s ago: executing program 3 (id=233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c4, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x1a5, 0x2a, [@preq={0x82, 0x6d, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x3, 0x18, 0x2, @device_a, 0x8, @value=@device_b, 0x6, 0x100, 0x7, [{{0x1}, @device_b, 0x1}, {{}, @device_a, 0x8000}, {{}, @device_b}, {{0x1, 0x0, 0x1}, @device_a, 0x66f}, {{}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @device_a, 0x12}, {{}, @broadcast, 0x28f1}]}}, @fast_bss_trans={0x37, 0x9e, {0x4, 0x3, "7978a48d26f43b82386a34b865e8cb73", "688ab9086fda617d7d2a4c6e0f666d9a61989a366f6fbdc624d4500d8b92ce61", "31caa184da54914a18175a2f23f847766a56dd085a3a0ca9118b57bb8aaacfaa", [{0x4, 0x1b, "55baa7b895ac36f90ce695cf107d56bc3b9cc3fff4e859bbbd7b25"}, {0x4, 0x10, "92dc92d9cbd43a951f79940d659180dc"}, {0x1, 0x1b, "8b1c958542193ded05f9b9e326334412faed1cf7c7ee1e123b0e6a"}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1, 0x36, 0x40}}, @preq={0x82, 0x67, {{0x1, 0x0, 0x1}, 0xb0, 0x3b, 0x912, @device_b, 0x401, @void, 0x622, 0x9, 0x7, [{{0x0, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x800}, {{0x1, 0x0, 0x1}, @device_b, 0xffffff01}, {{0x1, 0x0, 0x1}, @broadcast, 0x9f43}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{}, @broadcast}, {{}, @device_a, 0x4}]}}, @measure_req={0x26, 0x1e, {0xce, 0x0, 0xe, "4d71ed18e60badade18f7712899f974b623e6c2e404d0c43307620"}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xfb, 0xdd44, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x51b99d45ca48ee75, 0x0, 0xb3a, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r5, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6073}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x140) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r1, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x23}}}}, [""]}, 0x30}}, 0x20000000) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, &(0x7f0000000780)=0xffffffff, 0x4) r7 = socket$inet(0x2, 0x80800, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), r7) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r9, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24004040) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r8) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r10, 0x230, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24010000) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x3, &(0x7f0000000a80)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x0, 0x9, 0x7, 0xfffffffffffffff4, 0x1}], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000b80)=[{0x5, 0x2, 0x3, 0x6}, {0x3, 0x4, 0xb}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000a40)='f2fs_write_end\x00', r11, 0x0, 0x40}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000d80)={'batadv0\x00', 0x0}) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=0xffffffffffffffff, 0x4) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x48, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r4, 0xffffffffffffffff, 0x6a8, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@bloom_filter={0x1e, 0x5, 0x10, 0x5, 0x30002, 0xffffffffffffffff, 0x3, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xe, @void, @value, @value}, 0x50) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@bloom_filter={0x1e, 0x3fe8, 0xf0b, 0x7, 0x10000, 0xffffffffffffffff, 0x80000001, '\x00', r3, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x9, @void, @value, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x3, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x77}}, &(0x7f0000000d00)='syzkaller\x00', 0x8000, 0x2, &(0x7f0000000d40)=""/2, 0x40f00, 0x69, '\x00', r12, 0x0, r13, 0x8, &(0x7f0000000e00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0x3, 0x2, 0x73}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001180)=[r14, r15, r16, r17, r18, 0x1, r19], &(0x7f00000011c0)=[{0x3, 0x1, 0x9, 0x5}, {0x2, 0x3, 0x4, 0x9}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001580)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001540)={&(0x7f0000001340)={0x1d8, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0xd0, 0xc5, "60540d7100b586d1829910885dbb4547284245cdb9c5eeeb17fb60885d2bcd748610f26e764c6730edc7c6347ae7ab12f2ae395297099144ebeb89277b8ed901b894866ca18dcdb12ee6602338dd7ef55b0a0edca62e7e77b439045ea60fbe01f810a03d4b9b93ef79410afd766de94c33591a875f38db187f85954f3cfab647bb92184ee815c909d59757e55095ac74eb4f90689623759db89a8ab29937733ab5724b9d3efca77333be0bbf82e3c9190e1828c60a59bb8d2e96fc798b36915001c72a50933061dd1b1ca9fe"}, @NL80211_ATTR_VENDOR_DATA={0xde, 0xc5, "2e9caf9dce5a6455b2b9b93c6fcc53013318a2fe47300790ad7aac4c716bca232b802f5d57a2d5a40365984c631fa71c3d5b103186b1796caf464164462f72a74ca4bff403c347ccc301be43626b67d647ecd6d1a32935b330719e109838e3539d35eb1f24067ee0ec4c1e56923fd36d362dbab8b5499ebf7fa35ddcfa024de3dbfc946c2ad3ca0757e09d1524ad86b583ab2cf70ab17b8c97e388d5cff811a50cfbb046c1cdcce6a6c40279c19b7ba7b36194fd0e0e2a4ee14ff908856bf1cad11728e9017b5f34476d92d3da7b99ed217b66c7d1418d446cb5"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x20008048) 1m48.026668716s ago: executing program 2 (id=234): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x801c) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000a0601010000000d0000000000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000008ccf000008000300", @ANYRES32], 0x40}}, 0x0) 1m44.168863896s ago: executing program 4 (id=235): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000040)='H', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x3, 0x0, 0x0, 0x2c, 0x5}, 0x9c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3ff}, 0xe) 1m42.159368896s ago: executing program 0 (id=236): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}}, 0x0) 1m31.25595572s ago: executing program 1 (id=237): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}, 0x3}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x501, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x101, 0x400}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) 1m12.837202131s ago: executing program 32 (id=234): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x801c) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000a0601010000000d0000000000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000008ccf000008000300", @ANYRES32], 0x40}}, 0x0) 0s ago: executing program 33 (id=233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c4, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x1a5, 0x2a, [@preq={0x82, 0x6d, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x3, 0x18, 0x2, @device_a, 0x8, @value=@device_b, 0x6, 0x100, 0x7, [{{0x1}, @device_b, 0x1}, {{}, @device_a, 0x8000}, {{}, @device_b}, {{0x1, 0x0, 0x1}, @device_a, 0x66f}, {{}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @device_a, 0x12}, {{}, @broadcast, 0x28f1}]}}, @fast_bss_trans={0x37, 0x9e, {0x4, 0x3, "7978a48d26f43b82386a34b865e8cb73", "688ab9086fda617d7d2a4c6e0f666d9a61989a366f6fbdc624d4500d8b92ce61", "31caa184da54914a18175a2f23f847766a56dd085a3a0ca9118b57bb8aaacfaa", [{0x4, 0x1b, "55baa7b895ac36f90ce695cf107d56bc3b9cc3fff4e859bbbd7b25"}, {0x4, 0x10, "92dc92d9cbd43a951f79940d659180dc"}, {0x1, 0x1b, "8b1c958542193ded05f9b9e326334412faed1cf7c7ee1e123b0e6a"}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1, 0x36, 0x40}}, @preq={0x82, 0x67, {{0x1, 0x0, 0x1}, 0xb0, 0x3b, 0x912, @device_b, 0x401, @void, 0x622, 0x9, 0x7, [{{0x0, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x800}, {{0x1, 0x0, 0x1}, @device_b, 0xffffff01}, {{0x1, 0x0, 0x1}, @broadcast, 0x9f43}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{}, @broadcast}, {{}, @device_a, 0x4}]}}, @measure_req={0x26, 0x1e, {0xce, 0x0, 0xe, "4d71ed18e60badade18f7712899f974b623e6c2e404d0c43307620"}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xfb, 0xdd44, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x51b99d45ca48ee75, 0x0, 0xb3a, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r5, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6073}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x140) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r1, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x23}}}}, [""]}, 0x30}}, 0x20000000) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, &(0x7f0000000780)=0xffffffff, 0x4) r7 = socket$inet(0x2, 0x80800, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), r7) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r9, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24004040) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r8) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r10, 0x230, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24010000) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x3, &(0x7f0000000a80)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x0, 0x9, 0x7, 0xfffffffffffffff4, 0x1}], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000b80)=[{0x5, 0x2, 0x3, 0x6}, {0x3, 0x4, 0xb}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000a40)='f2fs_write_end\x00', r11, 0x0, 0x40}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000d80)={'batadv0\x00', 0x0}) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=0xffffffffffffffff, 0x4) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x48, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r4, 0xffffffffffffffff, 0x6a8, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@bloom_filter={0x1e, 0x5, 0x10, 0x5, 0x30002, 0xffffffffffffffff, 0x3, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xe, @void, @value, @value}, 0x50) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@bloom_filter={0x1e, 0x3fe8, 0xf0b, 0x7, 0x10000, 0xffffffffffffffff, 0x80000001, '\x00', r3, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x9, @void, @value, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x3, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x77}}, &(0x7f0000000d00)='syzkaller\x00', 0x8000, 0x2, &(0x7f0000000d40)=""/2, 0x40f00, 0x69, '\x00', r12, 0x0, r13, 0x8, &(0x7f0000000e00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0x3, 0x2, 0x73}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001180)=[r14, r15, r16, r17, r18, 0x1, r19], &(0x7f00000011c0)=[{0x3, 0x1, 0x9, 0x5}, {0x2, 0x3, 0x4, 0x9}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001580)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001540)={&(0x7f0000001340)={0x1d8, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0xd0, 0xc5, "60540d7100b586d1829910885dbb4547284245cdb9c5eeeb17fb60885d2bcd748610f26e764c6730edc7c6347ae7ab12f2ae395297099144ebeb89277b8ed901b894866ca18dcdb12ee6602338dd7ef55b0a0edca62e7e77b439045ea60fbe01f810a03d4b9b93ef79410afd766de94c33591a875f38db187f85954f3cfab647bb92184ee815c909d59757e55095ac74eb4f90689623759db89a8ab29937733ab5724b9d3efca77333be0bbf82e3c9190e1828c60a59bb8d2e96fc798b36915001c72a50933061dd1b1ca9fe"}, @NL80211_ATTR_VENDOR_DATA={0xde, 0xc5, "2e9caf9dce5a6455b2b9b93c6fcc53013318a2fe47300790ad7aac4c716bca232b802f5d57a2d5a40365984c631fa71c3d5b103186b1796caf464164462f72a74ca4bff403c347ccc301be43626b67d647ecd6d1a32935b330719e109838e3539d35eb1f24067ee0ec4c1e56923fd36d362dbab8b5499ebf7fa35ddcfa024de3dbfc946c2ad3ca0757e09d1524ad86b583ab2cf70ab17b8c97e388d5cff811a50cfbb046c1cdcce6a6c40279c19b7ba7b36194fd0e0e2a4ee14ff908856bf1cad11728e9017b5f34476d92d3da7b99ed217b66c7d1418d446cb5"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x20008048) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts. [ 53.211283][ T5817] cgroup: Unknown subsys name 'net' [ 53.355674][ T5817] cgroup: Unknown subsys name 'cpuset' [ 53.363861][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.582780][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.808517][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.808797][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.824449][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.832029][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.839402][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.850458][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.859466][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.861136][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.872241][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.876407][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.881947][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.888540][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.902786][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.903531][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.917768][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.930621][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.934175][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.945791][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.969328][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.977030][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.983758][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.993168][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.002881][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.004394][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.018877][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.020011][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.026542][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.034630][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.040512][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.048227][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.480651][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 57.496539][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 57.517455][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 57.570925][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 57.597075][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 57.751284][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.758683][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.766356][ T5843] bridge_slave_0: entered allmulticast mode [ 57.773258][ T5843] bridge_slave_0: entered promiscuous mode [ 57.789705][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.796865][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.804152][ T5832] bridge_slave_0: entered allmulticast mode [ 57.810687][ T5832] bridge_slave_0: entered promiscuous mode [ 57.839438][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.846955][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.854258][ T5843] bridge_slave_1: entered allmulticast mode [ 57.861274][ T5843] bridge_slave_1: entered promiscuous mode [ 57.868167][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.876957][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.884389][ T5840] bridge_slave_0: entered allmulticast mode [ 57.890876][ T5840] bridge_slave_0: entered promiscuous mode [ 57.898120][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.905249][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.912335][ T5832] bridge_slave_1: entered allmulticast mode [ 57.919580][ T5832] bridge_slave_1: entered promiscuous mode [ 57.939708][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.946873][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.954147][ T5846] bridge_slave_0: entered allmulticast mode [ 57.960624][ T5846] bridge_slave_0: entered promiscuous mode [ 57.984349][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.991465][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.998885][ T5840] bridge_slave_1: entered allmulticast mode [ 58.005431][ T5840] bridge_slave_1: entered promiscuous mode [ 58.029275][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.036483][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.043728][ T5830] bridge_slave_0: entered allmulticast mode [ 58.050239][ T5830] bridge_slave_0: entered promiscuous mode [ 58.057901][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.065314][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.072462][ T5846] bridge_slave_1: entered allmulticast mode [ 58.080202][ T5846] bridge_slave_1: entered promiscuous mode [ 58.088756][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.100423][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.120287][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.138259][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.146010][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.153587][ T5830] bridge_slave_1: entered allmulticast mode [ 58.160080][ T5830] bridge_slave_1: entered promiscuous mode [ 58.190807][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.209027][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.235589][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.264109][ T5840] team0: Port device team_slave_0 added [ 58.271610][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.290325][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.301397][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.314681][ T5843] team0: Port device team_slave_0 added [ 58.321516][ T5840] team0: Port device team_slave_1 added [ 58.336132][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.361468][ T5843] team0: Port device team_slave_1 added [ 58.385075][ T5832] team0: Port device team_slave_0 added [ 58.428067][ T5832] team0: Port device team_slave_1 added [ 58.438668][ T5830] team0: Port device team_slave_0 added [ 58.447271][ T5846] team0: Port device team_slave_0 added [ 58.456240][ T5846] team0: Port device team_slave_1 added [ 58.462662][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.469655][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.495965][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.508162][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.515788][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.541938][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.555026][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.561984][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.588429][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.608463][ T5830] team0: Port device team_slave_1 added [ 58.622461][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.629777][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.656119][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.696318][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.703414][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.729367][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.755666][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.762730][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.789273][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.820251][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.827373][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.853428][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.877016][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.884367][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.910427][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.936928][ T5843] hsr_slave_0: entered promiscuous mode [ 58.944000][ T5843] hsr_slave_1: entered promiscuous mode [ 58.953928][ T5840] hsr_slave_0: entered promiscuous mode [ 58.959938][ T5840] hsr_slave_1: entered promiscuous mode [ 58.966317][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.974258][ T5840] Cannot create hsr debugfs directory [ 58.983737][ T5836] Bluetooth: hci1: command tx timeout [ 58.989977][ T5842] Bluetooth: hci2: command tx timeout [ 58.997605][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.004792][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.031006][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.044473][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.051425][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.077800][ T5842] Bluetooth: hci4: command tx timeout [ 59.078013][ T5842] Bluetooth: hci0: command tx timeout [ 59.088993][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.143074][ T5836] Bluetooth: hci3: command tx timeout [ 59.154916][ T5832] hsr_slave_0: entered promiscuous mode [ 59.160978][ T5832] hsr_slave_1: entered promiscuous mode [ 59.167853][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.175875][ T5832] Cannot create hsr debugfs directory [ 59.196423][ T5846] hsr_slave_0: entered promiscuous mode [ 59.203553][ T5846] hsr_slave_1: entered promiscuous mode [ 59.209417][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.217075][ T5846] Cannot create hsr debugfs directory [ 59.301522][ T5830] hsr_slave_0: entered promiscuous mode [ 59.310509][ T5830] hsr_slave_1: entered promiscuous mode [ 59.316691][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.324793][ T5830] Cannot create hsr debugfs directory [ 59.580049][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.591278][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.609812][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.622383][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.660223][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.670332][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.697404][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.719574][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.748665][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.773856][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.795757][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.821368][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.863008][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.882161][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.923995][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.934323][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.951626][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.997047][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.019175][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.028414][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.054906][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.071662][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.084902][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.092061][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.104398][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.111466][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.120569][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.159425][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.197197][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.204338][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.230074][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.237206][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.316760][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.362355][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.382360][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.421103][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.451325][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.461068][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.498649][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.505838][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.517332][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.524569][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.547298][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.554437][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.573260][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.598324][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.605468][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.639398][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.682396][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.709175][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.716304][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.748878][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.771794][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.778883][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.822031][ T5840] veth0_vlan: entered promiscuous mode [ 60.887272][ T5840] veth1_vlan: entered promiscuous mode [ 60.969247][ T5843] veth0_vlan: entered promiscuous mode [ 61.004406][ T5840] veth0_macvtap: entered promiscuous mode [ 61.016872][ T5840] veth1_macvtap: entered promiscuous mode [ 61.031288][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.048652][ T5843] veth1_vlan: entered promiscuous mode [ 61.063729][ T5836] Bluetooth: hci2: command tx timeout [ 61.069168][ T5836] Bluetooth: hci1: command tx timeout [ 61.075437][ T5843] veth0_macvtap: entered promiscuous mode [ 61.122109][ T5843] veth1_macvtap: entered promiscuous mode [ 61.144071][ T5836] Bluetooth: hci0: command tx timeout [ 61.149646][ T5836] Bluetooth: hci4: command tx timeout [ 61.157371][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.192017][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.213513][ T5846] veth0_vlan: entered promiscuous mode [ 61.223778][ T5836] Bluetooth: hci3: command tx timeout [ 61.226032][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.248583][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.258686][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.269031][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.287728][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.301195][ T5846] veth1_vlan: entered promiscuous mode [ 61.351589][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.369212][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.380881][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.420701][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.447399][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.458562][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.478537][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.494309][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.504043][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.513209][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.532285][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.570587][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.578906][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.603229][ T5846] veth0_macvtap: entered promiscuous mode [ 61.639207][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.648153][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.662129][ T5846] veth1_macvtap: entered promiscuous mode [ 61.717815][ T5832] veth0_vlan: entered promiscuous mode [ 61.746581][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.754628][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.774449][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.785199][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.796147][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.807276][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.818541][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.829271][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.839442][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.850107][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.861159][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.887709][ T5832] veth1_vlan: entered promiscuous mode [ 61.918443][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.928992][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.937828][ T5830] veth0_vlan: entered promiscuous mode [ 61.953947][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.980772][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.984170][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 61.990225][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.007518][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.057448][ T5832] veth0_macvtap: entered promiscuous mode [ 62.105115][ T5832] veth1_macvtap: entered promiscuous mode [ 62.113951][ T5830] veth1_vlan: entered promiscuous mode [ 62.136569][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.145189][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.204846][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 62.206199][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.227136][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.237073][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.249376][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.259728][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.272773][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.283916][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.317327][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.361578][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.396828][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.408990][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.419512][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.437227][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.449884][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.463792][ T5830] veth0_macvtap: entered promiscuous mode [ 62.465426][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.482340][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.491015][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.504456][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.514084][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.522883][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.542959][ T5830] veth1_macvtap: entered promiscuous mode [ 62.557355][ T5926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 62.589998][ T5926] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 62.607273][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.627142][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.645606][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.655645][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.682704][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.693626][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.703709][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.715002][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.725596][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.736161][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.751497][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.785074][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.798800][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.810741][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.821369][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.826630][ T5929] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 62.837953][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.849391][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.859273][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.869724][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.881406][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.916679][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.926969][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.955001][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.969223][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.003904][ T5933] vlan2: entered allmulticast mode [ 63.009172][ T5933] bond0: entered allmulticast mode [ 63.017482][ T5933] bond_slave_0: entered allmulticast mode [ 63.023754][ T5933] bond_slave_1: entered allmulticast mode [ 63.030831][ T5933] bridge0: port 3(vlan2) entered blocking state [ 63.037505][ T5933] bridge0: port 3(vlan2) entered disabled state [ 63.045570][ T5933] vlan2: entered promiscuous mode [ 63.050635][ T5933] bond0: entered promiscuous mode [ 63.056138][ T5933] bond_slave_0: entered promiscuous mode [ 63.061898][ T5933] bond_slave_1: entered promiscuous mode [ 63.068685][ T5933] bridge0: port 3(vlan2) entered blocking state [ 63.075234][ T5933] bridge0: port 3(vlan2) entered forwarding state [ 63.143334][ T5836] Bluetooth: hci1: command tx timeout [ 63.148796][ T5836] Bluetooth: hci2: command tx timeout [ 63.165302][ T5937] warning: `syz.1.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.188879][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.211729][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.223499][ T5836] Bluetooth: hci4: command tx timeout [ 63.228930][ T5836] Bluetooth: hci0: command tx timeout [ 63.290398][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.302824][ T5836] Bluetooth: hci3: command tx timeout [ 63.313040][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.331661][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.368424][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.423679][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.461640][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.678896][ T5952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.688395][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.843738][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 63.988440][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 64.955388][ T6018] syz_tun: entered allmulticast mode [ 64.986328][ T6014] syz_tun: left allmulticast mode [ 65.013434][ T6020] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 65.021885][ T6020] netlink: 209800 bytes leftover after parsing attributes in process `syz.1.31'. [ 65.067488][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.31'. [ 65.156827][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 65.223047][ T5836] Bluetooth: hci2: command tx timeout [ 65.223684][ T5842] Bluetooth: hci1: command tx timeout [ 65.303208][ T5842] Bluetooth: hci4: command tx timeout [ 65.303708][ T5836] Bluetooth: hci0: command tx timeout [ 65.382910][ T5836] Bluetooth: hci3: command tx timeout [ 65.445239][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35'. [ 65.484810][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35'. [ 65.819032][ T6049] netlink: 'syz.3.41': attribute type 4 has an invalid length. [ 66.131303][ T6071] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 66.178582][ T6071] netlink: 'syz.2.46': attribute type 2 has an invalid length. [ 66.549236][ T6093] netlink: 'syz.1.53': attribute type 24 has an invalid length. [ 66.879816][ T6106] netlink: 'syz.4.57': attribute type 21 has an invalid length. [ 66.910898][ T6108] xt_cgroup: xt_cgroup: no path or classid specified [ 67.106705][ T6112] Zero length message leads to an empty skb [ 67.144791][ T6114] __nla_validate_parse: 6 callbacks suppressed [ 67.144809][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 67.373847][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.64'. [ 67.446002][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 67.491158][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 67.548066][ T6133] netlink: 'syz.2.65': attribute type 4 has an invalid length. [ 67.571668][ T6142] trusted_key: syz.3.67 sent an empty control message without MSG_MORE. [ 68.279342][ T6173] x_tables: unsorted entry at hook 1 [ 68.366353][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 68.400013][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.78'. [ 68.416478][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.78'. [ 68.515774][ T6186] netlink: 'syz.3.82': attribute type 2 has an invalid length. [ 68.802944][ T6205] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 68.971506][ T6213] xt_hashlimit: size too large, truncated to 1048576 [ 69.015070][ T6218] netlink: 80 bytes leftover after parsing attributes in process `syz.0.92'. [ 69.251790][ T6229] netlink: 32 bytes leftover after parsing attributes in process `syz.3.96'. [ 69.852074][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 69.875886][ T6267] netlink: 'syz.0.104': attribute type 49 has an invalid length. [ 71.124292][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.203583][ T6329] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 71.237825][ T6331] IPVS: Unknown mcast interface: syzkaller0 [ 71.275324][ T6336] sctp: [Deprecated]: syz.2.128 (pid 6336) Use of int in maxseg socket option. [ 71.275324][ T6336] Use struct sctp_assoc_value instead [ 71.369368][ T6339] can: request_module (can-proto-0) failed. [ 71.499073][ T6355] netlink: 'syz.4.132': attribute type 1 has an invalid length. [ 71.643728][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.650317][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.794943][ T6371] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 72.281485][ T6399] sctp: [Deprecated]: syz.2.143 (pid 6399) Use of int in max_burst socket option deprecated. [ 72.281485][ T6399] Use struct sctp_assoc_value instead [ 72.385342][ T6403] __nla_validate_parse: 3 callbacks suppressed [ 72.385361][ T6403] netlink: 148 bytes leftover after parsing attributes in process `syz.2.143'. [ 72.441594][ T6399] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 73.010685][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 73.020514][ T6443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 73.196918][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.154'. [ 73.681368][ T6480] netlink: 'syz.3.161': attribute type 4 has an invalid length. [ 73.960384][ T6493] lo speed is unknown, defaulting to 1000 [ 73.962900][ T6495] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 73.996190][ T6493] lo speed is unknown, defaulting to 1000 [ 74.011280][ T6500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.168'. [ 74.028454][ T6495] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 74.035179][ T6493] lo speed is unknown, defaulting to 1000 [ 74.076983][ T6500] sctp: [Deprecated]: syz.0.168 (pid 6500) Use of int in max_burst socket option deprecated. [ 74.076983][ T6500] Use struct sctp_assoc_value instead [ 74.501900][ T6493] infiniband syz0: set active [ 74.526084][ T9] lo speed is unknown, defaulting to 1000 [ 74.536665][ T6493] infiniband syz0: added lo [ 74.544015][ T6527] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 74.579398][ T6532] dvmrp8: entered allmulticast mode [ 74.605272][ T6493] RDS/IB: syz0: added [ 74.609918][ T6493] smc: adding ib device syz0 with port count 1 [ 74.618321][ T6493] smc: ib device syz0 port 1 has pnetid [ 74.638307][ T6532] dvmrp8: left allmulticast mode [ 74.638588][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.174'. [ 74.683825][ T5886] lo speed is unknown, defaulting to 1000 [ 74.687817][ T6527] netlink: 48 bytes leftover after parsing attributes in process `syz.1.174'. [ 74.702980][ T6493] lo speed is unknown, defaulting to 1000 [ 74.803537][ T6539] netlink: 'syz.0.176': attribute type 4 has an invalid length. [ 75.199625][ T6493] lo speed is unknown, defaulting to 1000 [ 75.735535][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 75.833739][ T6493] lo speed is unknown, defaulting to 1000 [ 76.268937][ T6493] lo speed is unknown, defaulting to 1000 [ 76.687448][ T6493] lo speed is unknown, defaulting to 1000 [ 76.949078][ T6588] netlink: 56 bytes leftover after parsing attributes in process `syz.2.190'. [ 77.443513][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 77.494587][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 77.877671][ T6611] netlink: 'syz.2.196': attribute type 11 has an invalid length. [ 78.004092][ T6611] Bluetooth: MGMT ver 1.23 [ 78.660545][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 78.747887][ T6633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.203'. [ 79.408181][ T6651] bridge0: entered promiscuous mode [ 79.465654][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 79.555713][ T6652] bridge_slave_1: left allmulticast mode [ 79.596640][ T6652] bridge_slave_1: left promiscuous mode [ 79.627960][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.713209][ T6652] bridge_slave_0: left allmulticast mode [ 79.741091][ T6652] bridge_slave_0: left promiscuous mode [ 79.767189][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.108332][ T6652] bridge0 (unregistering): left promiscuous mode [ 80.120838][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.213'. [ 80.136551][ T6670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.213'. [ 80.321844][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 80.771722][ T6680] sch_tbf: burst 720 is lower than device lo mtu (65550) ! [ 81.168755][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 81.661402][ T6709] syz.4.226 uses old SIOCAX25GETINFO [ 81.943969][ T51] cfg80211: failed to load regulatory.db [ 82.465947][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 82.522899][ T6723] xfrm1: entered promiscuous mode [ 82.533695][ T6723] xfrm1: entered allmulticast mode [ 86.552588][ C1] sched: DL replenish lagged too much [ 133.665698][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.677755][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.071503][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 186.083320][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 186.089358][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 195.516766][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.533396][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.288996][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 242.136515][ T30] INFO: task kworker/1:3:5835 blocked for more than 147 seconds. [ 244.892607][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 244.899941][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.102564][ T30] task:kworker/1:3 state:D stack:23680 pid:5835 tgid:5835 ppid:2 flags:0x00004000 [ 245.223900][ T30] Workqueue: events reg_todo [ 245.228590][ T30] Call Trace: [ 245.231888][ T30] [ 245.382596][ T30] __schedule+0x186c/0x4be0 [ 245.387922][ T30] ? try_to_wake_up+0x959/0x1470 [ 245.512615][ T30] ? __pfx___schedule+0x10/0x10 [ 245.517535][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.642543][ T30] ? __pfx_lock_release+0x10/0x10 [ 245.647642][ T30] ? kick_pool+0x1c9/0x620 [ 245.652092][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.802552][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 245.807823][ T30] ? schedule+0x90/0x320 [ 245.812115][ T30] schedule+0x14b/0x320 [ 245.952551][ T30] ? kvm_sched_clock_read+0x11/0x20 [ 245.957817][ T30] psi_task_switch+0x41d/0x7a0 [ 246.052563][ T30] ? sched_clock_cpu+0x76/0x490 [ 246.057476][ T30] ? __pfx_lock_release+0x10/0x10 [ 246.129573][ T30] ? __schedule+0x1829/0x4be0 [ 246.162582][ T30] ? __pfx_lock_release+0x10/0x10 [ 246.167692][ T30] ? __schedule+0x186c/0x4be0 [ 246.172416][ T30] ? __pfx___schedule+0x10/0x10 [ 246.282574][ T30] ? __pfx_lock_release+0x10/0x10 [ 246.287665][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.372644][ T30] ? schedule+0x90/0x320 [ 246.376964][ T30] ? wq_worker_sleeping+0x66/0x240 [ 246.382110][ T30] ? schedule+0x90/0x320 [ 246.472619][ T30] ? schedule+0x14b/0x320 [ 246.477024][ T30] ? worker_thread+0xa30/0xd30 [ 246.481824][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 246.563715][ T30] ? __kthread_parkme+0x169/0x1d0 [ 246.592721][ T30] ? __pfx_worker_thread+0x10/0x10 [ 246.597901][ T30] ? kthread+0x7a9/0x920 [ 246.602172][ T30] ? __pfx_kthread+0x10/0x10 [ 246.712582][ T30] ? __pfx_worker_thread+0x10/0x10 [ 246.718631][ T30] ? __pfx_kthread+0x10/0x10 [ 246.792564][ T30] ? __pfx_kthread+0x10/0x10 [ 246.797229][ T30] ? __pfx_kthread+0x10/0x10 [ 246.801844][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.882568][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 246.887830][ T30] ? __pfx_kthread+0x10/0x10 [ 246.892451][ T30] ? ret_from_fork+0x4b/0x80 [ 247.002559][ T30] ? __pfx_kthread+0x10/0x10 [ 247.007224][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 247.012200][ T30] [ 247.082617][ T30] [ 247.082617][ T30] Showing all locks held in the system: [ 247.090385][ T30] 1 lock held by pool_workqueue_/3: [ 247.152611][ T30] #0: ffffffff8e93f8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 247.232559][ T30] 3 locks held by kworker/1:0/25: [ 247.237640][ T30] #0: ffff88801ac81d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 247.332639][ T30] #1: ffffc900001f7c60 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 247.400314][ T30] #2: ffffffff8fcc5a88 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x99/0xfb0 [ 247.462722][ T30] 1 lock held by khungtaskd/30: [ 247.492616][ T30] #0: ffffffff8e93a3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 247.542697][ T30] 6 locks held by kworker/u8:2/35: [ 247.547876][ T30] 3 locks held by kworker/1:1/51: [ 247.592566][ T30] #0: ffff88801ac81d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 247.692681][ T30] #1: ffffc90000bb7c60 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 247.762545][ T30] #2: ffffffff8fcc5a88 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 247.771887][ T30] 7 locks held by kworker/u8:7/2910: [ 247.852535][ T30] #0: ffff8880b863e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 247.927659][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 247.992606][ T30] #2: ffff8880b862a398 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x972/0x10e0 [ 248.001803][ T30] #3: ffffffff9a613d50 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x17f/0x580 [ 248.109588][ T30] #4: ffffffff9a6891d0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580 [ 248.172600][ T30] #5: ffff88813fffc298 (&zone->lock){-.-.}-{3:3}, at: __rmqueue_pcplist+0x4a2/0x2a90 [ 248.182357][ T30] #6: ffff88801ac7b078 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x1ba/0x300 [ 248.302614][ T30] 3 locks held by syslogd/5190: [ 248.307528][ T30] 2 locks held by klogd/5197: [ 248.312223][ T30] 2 locks held by udevd/5208: [ 248.377652][ T30] 4 locks held by dhcpcd/5502: [ 248.382478][ T30] 2 locks held by getty/5596: [ 248.427379][ T30] #0: ffff8880319de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 248.492608][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 248.557881][ T30] 1 lock held by syz-executor/5817: [ 248.593987][ T30] 1 lock held by syz-executor/5832: [ 248.599239][ T30] 2 locks held by syz-executor/5843: [ 248.682541][ T30] #0: ffff888035474d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 248.732628][ T30] #1: ffff888035474078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 248.742390][ T30] 2 locks held by syz-executor/5846: [ 248.792621][ T30] 3 locks held by kworker/1:7/5938: [ 248.797889][ T30] 1 lock held by syz-executor/6739: [ 248.858027][ T30] #0: ffffffff8fcc5a88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 248.912565][ T30] 3 locks held by kworker/u8:13/6742: [ 248.917990][ T30] #0: ffff88814d357148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 249.002424][ T30] #1: ffffc9000397fc60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 249.063731][ T30] #2: ffffffff8fcc5a88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 249.122600][ T30] 1 lock held by syz-executor/6744: [ 249.127856][ T30] 2 locks held by syz-executor/6749: [ 249.182586][ T30] 1 lock held by dhcpcd/6750: [ 249.187321][ T30] #0: ffff888046c3e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 249.272580][ T30] 3 locks held by kworker/u8:18/6751: [ 249.297510][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 249.367727][ T30] #1: ffffc900039cfc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 249.442621][ T30] #2: ffffffff8fcc5a88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 249.451679][ T30] 2 locks held by syz-executor/6752: [ 249.542972][ T30] [ 249.545358][ T30] ============================================= [ 249.545358][ T30] [ 249.672820][ T30] NMI backtrace for cpu 1 [ 249.672846][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 249.672863][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 249.672871][ T30] Call Trace: [ 249.672877][ T30] [ 249.672884][ T30] dump_stack_lvl+0x241/0x360 [ 249.672913][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.672939][ T30] ? __pfx__printk+0x10/0x10 [ 249.672966][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 249.672990][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 249.673007][ T30] ? _printk+0xd5/0x120 [ 249.673026][ T30] ? __pfx__printk+0x10/0x10 [ 249.673045][ T30] ? __wake_up_klogd+0xcc/0x110 [ 249.673063][ T30] ? __pfx__printk+0x10/0x10 [ 249.673083][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 249.673102][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 249.673119][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 249.673140][ T30] watchdog+0xff6/0x1040 [ 249.673160][ T30] ? watchdog+0x1ea/0x1040 [ 249.673179][ T30] ? __pfx_watchdog+0x10/0x10 [ 249.673196][ T30] kthread+0x7a9/0x920 [ 249.673214][ T30] ? __pfx_kthread+0x10/0x10 [ 249.673234][ T30] ? __pfx_watchdog+0x10/0x10 [ 249.673251][ T30] ? __pfx_kthread+0x10/0x10 [ 249.673267][ T30] ? __pfx_kthread+0x10/0x10 [ 249.673286][ T30] ? __pfx_kthread+0x10/0x10 [ 249.673302][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.673322][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 249.673342][ T30] ? __pfx_kthread+0x10/0x10 [ 249.673362][ T30] ret_from_fork+0x4b/0x80 [ 249.673378][ T30] ? __pfx_kthread+0x10/0x10 [ 249.673396][ T30] ret_from_fork_asm+0x1a/0x30 [ 249.673423][ T30] [ 249.673429][ T30] Sending NMI from CPU 1 to CPUs 0: [ 249.847124][ C0] NMI backtrace for cpu 0 [ 249.847138][ C0] CPU: 0 UID: 0 PID: 5208 Comm: udevd Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 249.847154][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 249.847164][ C0] RIP: 0010:unwind_next_frame+0x1cb/0x22d0 [ 249.847188][ C0] Code: 10 e5 0c 00 0f 45 d1 8d 42 ff 44 39 f0 0f 86 55 18 00 00 44 89 f0 48 8d 1c 85 ac f9 4b 91 48 89 d8 48 c1 e8 03 42 0f b6 04 20 <84> c0 4c 89 e5 0f 85 97 1a 00 00 44 8b 23 44 89 f0 ff c0 48 8d 1c [ 249.847201][ C0] RSP: 0018:ffffc900033176d0 EFLAGS: 00000a07 [ 249.847215][ C0] RAX: 0000000000000000 RBX: ffffffff917747d4 RCX: 00000000000b0001 [ 249.847226][ C0] RDX: 00000000000b0001 RSI: ffffffff8bd38a73 RDI: ffffffff814bbe70 [ 249.847237][ C0] RBP: ffffc900033177d5 R08: 0000000000000009 R09: ffffc90003317890 [ 249.847247][ C0] R10: ffffc900033177f0 R11: ffffffff818b3db0 R12: dffffc0000000000 [ 249.847258][ C0] R13: ffffc900033177a0 R14: 00000000000ad38a R15: ffffffff8bd38a72 [ 249.847269][ C0] FS: 00007f7a7c79fc80(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 249.847282][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.847292][ C0] CR2: 00007f1723ba6038 CR3: 0000000033d32000 CR4: 00000000003526f0 [ 249.847306][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.847315][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.847324][ C0] Call Trace: [ 249.847329][ C0] [ 249.847335][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 249.847356][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 249.847377][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 249.847395][ C0] ? nmi_handle+0x2a/0x5a0 [ 249.847421][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 249.847436][ C0] ? nmi_handle+0x14f/0x5a0 [ 249.847455][ C0] ? nmi_handle+0x2a/0x5a0 [ 249.847474][ C0] ? unwind_next_frame+0x1cb/0x22d0 [ 249.847491][ C0] ? default_do_nmi+0x63/0x160 [ 249.847509][ C0] ? exc_nmi+0x123/0x1f0 [ 249.847527][ C0] ? end_repeat_nmi+0xf/0x53 [ 249.847543][ C0] ? do_syscall_64+0xf2/0x230 [ 249.847558][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.847576][ C0] ? do_syscall_64+0xf3/0x230 [ 249.847589][ C0] ? unwind_next_frame+0xb0/0x22d0 [ 249.847607][ C0] ? unwind_next_frame+0x1cb/0x22d0 [ 249.847625][ C0] ? unwind_next_frame+0x1cb/0x22d0 [ 249.847644][ C0] ? unwind_next_frame+0x1cb/0x22d0 [ 249.847662][ C0] [ 249.847667][ C0] [ 249.847683][ C0] ? do_syscall_64+0xf3/0x230 [ 249.847698][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.847715][ C0] arch_stack_walk+0x11c/0x150 [ 249.847736][ C0] ? do_syscall_64+0xf3/0x230 [ 249.847753][ C0] stack_trace_save+0x118/0x1d0 [ 249.847769][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 249.847790][ C0] save_stack+0xfb/0x1f0 [ 249.847808][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 249.847826][ C0] ? __pfx_save_stack+0x10/0x10 [ 249.847843][ C0] ? free_unref_page+0xd3f/0x1010 [ 249.847858][ C0] ? __slab_free+0x2c2/0x380 [ 249.847874][ C0] ? qlist_free_all+0x9a/0x140 [ 249.847890][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 249.847907][ C0] ? __kasan_slab_alloc+0x23/0x80 [ 249.847925][ C0] ? kmem_cache_alloc_noprof+0x1d9/0x380 [ 249.847946][ C0] ? getname_flags+0xb7/0x540 [ 249.847966][ C0] ? vfs_fstatat+0x3f/0x130 [ 249.847985][ C0] ? __x64_sys_newfstatat+0x117/0x190 [ 249.848006][ C0] ? do_syscall_64+0xf3/0x230 [ 249.848024][ C0] ? page_ext_get+0x20/0x2a0 [ 249.848044][ C0] __reset_page_owner+0x76/0x430 [ 249.848065][ C0] free_unref_page+0xd3f/0x1010 [ 249.848085][ C0] __slab_free+0x2c2/0x380 [ 249.848103][ C0] ? __phys_addr+0xba/0x170 [ 249.848123][ C0] qlist_free_all+0x9a/0x140 [ 249.848140][ C0] ? getname_flags+0xb7/0x540 [ 249.848160][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 249.848179][ C0] __kasan_slab_alloc+0x23/0x80 [ 249.848197][ C0] ? do_proc_dopipe_max_size_conv+0x161/0x190 [ 249.848218][ C0] kmem_cache_alloc_noprof+0x1d9/0x380 [ 249.848241][ C0] getname_flags+0xb7/0x540 [ 249.848263][ C0] vfs_fstatat+0x3f/0x130 [ 249.848284][ C0] __x64_sys_newfstatat+0x117/0x190 [ 249.848307][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 249.848337][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.848357][ C0] ? do_syscall_64+0x100/0x230 [ 249.848372][ C0] ? do_syscall_64+0xb6/0x230 [ 249.848387][ C0] do_syscall_64+0xf3/0x230 [ 249.848401][ C0] ? clear_bhb_loop+0x35/0x90 [ 249.848418][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.848433][ C0] RIP: 0033:0x7f7a7c3165f4 [ 249.848452][ C0] Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8 [ 249.848463][ C0] RSP: 002b:00007fff458ae7e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 249.848478][ C0] RAX: ffffffffffffffda RBX: 000055e7c0a71de0 RCX: 00007f7a7c3165f4 [ 249.848489][ C0] RDX: 00007fff458ae7f8 RSI: 00007fff458aec88 RDI: 00000000ffffff9c [ 249.848499][ C0] RBP: 00007fff458ae888 R08: 0000000000000000 R09: 0000000000000000 [ 249.848509][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff458aec88 [ 249.848518][ C0] R13: 00007fff458ae7f8 R14: 000055e7c0a44910 R15: 0000000000000000 [ 249.848535][ C0] [ 250.477773][ T6744] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 250.495688][ T6744] CPU: 0 UID: 0 PID: 6744 Comm: syz-executor Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 250.495709][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 250.495718][ T6744] Call Trace: [ 250.495723][ T6744] [ 250.495729][ T6744] dump_stack_lvl+0x241/0x360 [ 250.495756][ T6744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.495777][ T6744] ? __pfx__printk+0x10/0x10 [ 250.495800][ T6744] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 250.495823][ T6744] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 250.495848][ T6744] warn_alloc+0x278/0x410 [ 250.495871][ T6744] ? __pfx_warn_alloc+0x10/0x10 [ 250.495894][ T6744] ? kcov_ioctl+0x56/0x640 [ 250.495910][ T6744] ? __get_vm_area_node+0x1c8/0x2d0 [ 250.495924][ T6744] ? __get_vm_area_node+0x25c/0x2d0 SYZFAIL: failed to send rpc fd=3 want=168 sent=0 n=-1 (errno 32: Broken pipe) [ 250.495943][ T6744] __vmalloc_node_range_noprof+0x62f/0x1380 [ 250.495982][ T6744] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 250.496008][ T6744] vmalloc_user_noprof+0x74/0x80 [ 250.496024][ T6744] ? kcov_ioctl+0x56/0x640 [ 250.496038][ T6744] kcov_ioctl+0x56/0x640 [ 250.496056][ T6744] ? __pfx_kcov_ioctl+0x10/0x10 [ 250.496075][ T6744] __se_sys_ioctl+0xf5/0x170 [ 250.496095][ T6744] do_syscall_64+0xf3/0x230 [ 250.496110][ T6744] ? clear_bhb_loop+0x35/0x90 [ 250.496128][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.496144][ T6744] RIP: 0033:0x7f410e18c92b [ 250.496159][ T6744] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 250.496172][ T6744] RSP: 002b:00007ffffac08e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.496188][ T6744] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f410e18c92b [ 250.496199][ T6744] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8 [ 250.496210][ T6744] RBP: 00007f410e3a6038 R08: 0000000000000005 R09: 0000000000000000 [ 250.496219][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.496228][ T6744] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 250.496250][ T6744] [ 250.496255][ T6744] Mem-Info: [ 250.705329][ T6744] active_anon:3685 inactive_anon:0 isolated_anon:0 [ 250.705329][ T6744] active_file:1612 inactive_file:37481 isolated_file:0 [ 250.705329][ T6744] unevictable:768 dirty:138 writeback:17 [ 250.705329][ T6744] slab_reclaimable:9454 slab_unreclaimable:178170 [ 250.705329][ T6744] mapped:12478 shmem:1429 pagetables:475 [ 250.705329][ T6744] sec_pagetables:0 bounce:0 [ 250.705329][ T6744] kernel_misc_reclaimable:0 [ 250.705329][ T6744] free:1299122 free_pcp:876 free_cma:0 [ 250.750744][ T6744] Node 0 active_anon:13840kB inactive_anon:0kB active_file:6432kB inactive_file:149892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48012kB dirty:552kB writeback:68kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10984kB pagetables:1900kB sec_pagetables:0kB all_unreclaimable? no [ 250.782963][ T6744] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:32kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 250.813897][ T6744] Node 0 DMA free:15148kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:144kB local_pcp:16kB free_cma:0kB [ 250.833321][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 250.833339][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 250.833360][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 250.833371][ T30] Call Trace: [ 250.833377][ T30] [ 250.833385][ T30] dump_stack_lvl+0x241/0x360 [ 250.833415][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.833437][ T30] ? __pfx__printk+0x10/0x10 [ 250.833455][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.833482][ T30] ? vscnprintf+0x5d/0x90 [ 250.833504][ T30] panic+0x349/0x880 [ 250.833525][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 250.833546][ T30] ? __pfx_panic+0x10/0x10 [ 250.833563][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 250.833587][ T30] ? __irq_work_queue_local+0x137/0x410 [ 250.833607][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 250.833626][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 250.833645][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 250.833667][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 250.833689][ T30] watchdog+0x1035/0x1040 [ 250.833708][ T30] ? watchdog+0x1ea/0x1040 [ 250.833731][ T30] ? __pfx_watchdog+0x10/0x10 [ 250.833750][ T30] kthread+0x7a9/0x920 [ 250.833769][ T30] ? __pfx_kthread+0x10/0x10 [ 250.833790][ T30] ? __pfx_watchdog+0x10/0x10 [ 250.833808][ T30] ? __pfx_kthread+0x10/0x10 [ 250.833833][ T30] ? __pfx_kthread+0x10/0x10 [ 250.833855][ T30] ? __pfx_kthread+0x10/0x10 [ 250.833873][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.833893][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 250.833913][ T30] ? __pfx_kthread+0x10/0x10 [ 250.833933][ T30] ret_from_fork+0x4b/0x80 [ 250.833950][ T30] ? __pfx_kthread+0x10/0x10 [ 250.833970][ T30] ret_from_fork_asm+0x1a/0x30 [ 250.833997][ T30] [ 250.841430][ T30] Kernel Offset: disabled